Edit tour

Windows Analysis Report
https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0

Overview

General Information

Sample URL:	https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0
Analysis ID:	1289702
Infos:

Detection

HTMLPhisher

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish54

Antivirus detection for URL or domain

Snort IDS alert for network traffic

Phishing site detected (based on logo match)

Phishing site detected (based on image similarity)

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1452 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 8D1C4713ACB7CC2AAAEE4477C58A80BA)

chrome.exe (PID: 2872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1916,i,12660512941605008625,15748179457569933284,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 8D1C4713ACB7CC2AAAEE4477C58A80BA)

chrome.exe (PID: 5292 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0 MD5: 8D1C4713ACB7CC2AAAEE4477C58A80BA)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
6.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
7.13.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
7.27.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
7.11.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
7.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
7.26.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
8.21.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
8.30.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
8.28.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
8.16.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
8.15.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
8.22.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
8.12.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
8.29.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
8.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 10 entries

Snort Signatures

ET DNS Query to a *.top domain - Likely Hostile - Source IP: 192.168.2.3 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.38.8.8.860456532023883 08/10/23-23:19:20.387842
SID:	2023883
Source Port:	60456
Destination Port:	53
Protocol:	UDP
Classtype:	Potentially Bad Traffic

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg	SlashNext: Label: Credential Stealing type: Phishing & Social Engineering
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	SlashNext: Label: Credential Stealing type: Phishing & Social Engineering
Source: https://larationr.top/?bgbpbtvq	SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on favicon image match)

Source: https://larationr.top	Matcher: Template: microsoft matched with high similarity
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	Matcher: Template: microsoft matched with high similarity
Source: https://larationr.top/?bgbpbtvq	Matcher: Template: microsoft matched with high similarity

Yara detected HtmlPhish54

Source: Yara match	File source: 6.7.pages.csv, type: HTML
Source: Yara match	File source: 7.13.pages.csv, type: HTML
Source: Yara match	File source: 7.27.pages.csv, type: HTML
Source: Yara match	File source: 7.11.pages.csv, type: HTML
Source: Yara match	File source: 7.8.pages.csv, type: HTML
Source: Yara match	File source: 7.26.pages.csv, type: HTML
Source: Yara match	File source: 8.21.pages.csv, type: HTML
Source: Yara match	File source: 8.30.pages.csv, type: HTML
Source: Yara match	File source: 8.28.pages.csv, type: HTML
Source: Yara match	File source: 8.16.pages.csv, type: HTML
Source: Yara match	File source: 8.15.pages.csv, type: HTML
Source: Yara match	File source: 8.22.pages.csv, type: HTML
Source: Yara match	File source: 8.12.pages.csv, type: HTML
Source: Yara match	File source: 8.29.pages.csv, type: HTML
Source: Yara match	File source: 8.9.pages.csv, type: HTML

Phishing site detected (based on logo match)

Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	Matcher: Template: microsoft matched
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	Matcher: Template: microsoft matched
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	Matcher: Template: microsoft matched
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	Matcher: Template: microsoft matched
Source: https://larationr.top/?bgbpbtvq	Matcher: Template: microsoft matched
Source: https://larationr.top/?bgbpbtvq	Matcher: Template: microsoft matched
Source: https://larationr.top/?bgbpbtvq	Matcher: Template: microsoft matched

Phishing site detected (based on image similarity)

Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true

Matcher: Found strong image similarity, brand: MICROSOFT

Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx

Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: Number of links: 1

Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: <input type="password" .../> found

Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: No <meta name="author".. found
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: No <meta name="author".. found
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: No <meta name="author".. found
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: No <meta name="author".. found
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: No <meta name="author".. found

Source: https://cfl.dropboxstatic.com/static/metaserver/static/cloud_docs/thirdpartycookie/post.html	HTTP Parser: No favicon
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0	HTTP Parser: No favicon
Source: https://www.microsoft365.com/prefetch/prefetch	HTTP Parser: No favicon
Source: https://outlook.office365.com/owa/prefetch.aspx	HTTP Parser: No favicon
Source: https://outlook.office365.com/owa/prefetch.aspx	HTTP Parser: No favicon
Source: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx	HTTP Parser: No favicon
Source: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx	HTTP Parser: No favicon

Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: No <meta name="copyright".. found
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: No <meta name="copyright".. found
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: No <meta name="copyright".. found
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: No <meta name="copyright".. found
Source: https://larationr.top/?bgbpbtvq	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_1452_1412300539	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\keys.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_1452_834875125	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\crl-set	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_1452_551639614	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic

Snort IDS: 2023883 ET DNS Query to a *.top domain - Likely Hostile 192.168.2.3:60456 -> 8.8.8.8:53

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Security-Policy: sandbox; frame-ancestors 'self';Content-Type: text/plain;charset=utf-8Date: Thu, 10 Aug 2023 21:19:10 GMTReferrer-Policy: originRouted-Canary: falseServer: envoyStrict-Transport-Security: max-age=31557600; includeSubdomains;X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Notes-Routing-Method: router-cometX-Paper-Request-Id: 04cf9dff-85a2-499c-82e3-0314917219edX-Permitted-Cross-Domain-Policies: master-onlyX-Robots-Tag: noindex, nofollow, noimageindexX-Xss-Protection: 1; mode=blockContent-Length: 43Cache-Control: no-cache, no-storeX-Dropbox-Response-Origin: remoteX-Dropbox-Request-Id: dd84a293e288437b8828f1f1ae9196a0Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Security-Policy: sandbox allow-forms allow-scriptsContent-Type: text/htmlAccept-Encoding: identity,gzipDate: Thu, 10 Aug 2023 21:19:10 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsContent-Length: 925Strict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 1b8d5ca72d704b07bc96b317edb5780bConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Security-Policy: sandbox; frame-ancestors 'self';Content-Type: text/plain;charset=utf-8Date: Thu, 10 Aug 2023 21:19:11 GMTReferrer-Policy: originRouted-Canary: falseServer: envoyStrict-Transport-Security: max-age=31557600; includeSubdomains;X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Notes-Routing-Method: router-cometX-Paper-Request-Id: 094faa0f-17f1-4c23-b866-786f61bb5ec6X-Permitted-Cross-Domain-Policies: master-onlyX-Robots-Tag: noindex, nofollow, noimageindexX-Xss-Protection: 1; mode=blockContent-Length: 43Cache-Control: no-cache, no-storeX-Dropbox-Response-Origin: remoteX-Dropbox-Request-Id: 20c5a9ed59b74c408481c7bc087b8e5aConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:11 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d26eac70066448ed87dd15be9dea6d79Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:11 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: c994b16691b6482eb2bc332ff3d0ff2cConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:11 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: f9b80c2ba3714b29be595d3ce96bcde1Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:12 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 4e7c424b163040ac899ca16a7aff9a1bConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Security-Policy: sandbox; frame-ancestors 'self';Content-Type: text/plain;charset=utf-8Date: Thu, 10 Aug 2023 21:19:12 GMTReferrer-Policy: originRouted-Canary: falseServer: envoyStrict-Transport-Security: max-age=31557600; includeSubdomains;X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Notes-Routing-Method: router-cometX-Paper-Request-Id: 0de0fee2-3cff-4b63-9d63-9715e82ffd4fX-Permitted-Cross-Domain-Policies: master-onlyX-Robots-Tag: noindex, nofollow, noimageindexX-Xss-Protection: 1; mode=blockContent-Length: 43Cache-Control: no-cache, no-storeX-Dropbox-Response-Origin: remoteX-Dropbox-Request-Id: 64e572a35bc44c1ea35bc6bb4bc088eaConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:12 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: cea524f882ed4550a2169d57ba38b2c2Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:12 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: d9a2695e63b14f3a9e183e636c95705dConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Security-Policy: sandbox; frame-ancestors 'self';Content-Type: text/html;charset=utf-8Date: Thu, 10 Aug 2023 21:19:12 GMTExpires: Sat, 5 Feb 1983 07:07:07 GMTLast-Modified: 10 Aug 2023 21:19:12 GMTPragma: no-cacheReferrer-Policy: originRouted-Canary: falseServer: envoyStrict-Transport-Security: max-age=31557600; includeSubdomains;X-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookieX-Paper-Request-Id: 762515e4-fd0b-47a5-a832-7edf03184bb9X-Permitted-Cross-Domain-Policies: master-onlyX-Robots-Tag: noindex, nofollow, noimageindexX-Xss-Protection: 1; mode=blockContent-Length: 9Cache-Control: no-cache, no-storeX-Dropbox-Response-Origin: remoteX-Dropbox-Request-Id: 1394eaaad5e14fa387a31fdce92bad38Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:12 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 0da830a5cd774092a1abd72ab546dd68Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:12 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 8078cea5352a477597a2a5d7bbc7c35bConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:13 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: b39cd9de4f404b1baa67dcc3248cbca9Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:13 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 54ffc5eae2954627aeebef5fb7e22b41Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:15 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 68bfd04d008a45ea864068c96ae769aaConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:15 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 9c3693d0cb8549729254a7abf1d7c950Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:15 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 658bb562110c4a019158cd5e3016071aConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:19:16 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: 25b446ce2d7a47e19a8d22060f5e22efConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 3f031166-96e1-498e-ab78-17067bb80700x-ms-ests-server: 2.1.16042.2 - WUS2 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}Referrer-Policy: strict-origin-when-cross-originDate: Thu, 10 Aug 2023 21:19:22 GMTConnection: closeContent-Length: 0Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:30 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=138116419291377780755790176499825486432"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 8e32570f-a01e-006a-03d0-cb12e9000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:31 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=8844846637645853124651678743110479962"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: fabeadc5-001e-0001-36d0-cb951d000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:31 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1073183190595414187016115303608883815928"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 7146e09d-201e-0074-4fd0-cbfe31000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:31 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=64637422381778474233796629864711260288"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: fdb1b657-601e-0038-13d0-cb6e01000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:31 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=521132516687843653110246739009024993459"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 0f8453d6-001e-0073-6cd0-cb9252000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:31 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=96821445715436114053845050106091671734"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 92c02c44-001e-005c-11d0-cb9f99000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:31 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1268360308801597853012956371199160614890"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: fdb1b6d9-601e-0038-08d0-cb6e01000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:35 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=102035082969522449684701504539511029503"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 0647c2a9-301e-0047-24d0-cba19a000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:36 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=318565834465618557417768796828446510866"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 0f845d5f-001e-0073-54d0-cb9252000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:36 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=53939662119458958269076130640944874179"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 988c4b08-201e-005b-5ed0-cbf3fa000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:36 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=84047815307944656504679755784326422770"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 2f34bd30-101e-0040-24d0-cbcdf9000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:36 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=108699908635728654876350287572994736522"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: a84064f1-301e-0057-50d0-cb64f2000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:36 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=129183180734553950158306295292038769458"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 3f30e54d-201e-0039-44d0-cb31dd000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:36 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=124152111908653231611290853766412603129"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 23657060-f01e-0067-65d0-cbda3d000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:37 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=92712927675074680756610375068282451273"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 3269843b-e01e-0054-6bd0-cb8596000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:37 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=55407458680154762417883117750295843408"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 213cc56c-f01e-0005-22d0-cb181a000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:38 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=127661135488986532511643229633300157957"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 0302c8a6-d01e-0060-0ad0-cbb65e000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:38 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=985970313919095150016001875247720478257"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 61f12c46-701e-0046-74d0-cbfe46000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:38 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=530005883781692886810325106341389107042"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 9a4a6ee5-501e-0023-11d0-cb5002000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:38 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=466906101280367596911921672570480833075"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 05e4489d-a01e-0045-45d0-cb1f22000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:38 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=146886513553920607409147011017358903461"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: d324d64c-f01e-0048-3dd0-cbd7f6000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:39 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1131719208315762699814438905561106479760"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 23122bea-001e-0063-46d0-cb573a000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:39 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=181381184759255358744042802516527493151"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 64dfc3a6-501e-0051-33d0-cb574d000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:40 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=362619492019732794712966762926616432854"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 0d4b1125-801e-0052-79d0-cbb629000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:41 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=376012593381163838510327327401689643471"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 7a709588-b01e-0059-69d0-cb4d42000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:42 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=194389555599828647611573968169096677882"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: a23d073a-e01e-0009-61d0-cb8f12000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:41 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=148330039305914340341024985362411965007"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 0647d9ca-301e-0047-1ad0-cba19a000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:41 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=75457842939975832458343697236878684097"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 067654ec-e01e-0019-4fd0-cb4a7a000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:42 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=608935317875853382111676144767850920372"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 4d4796e7-701e-0079-66d0-cb36e5000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:41 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=9154538256833674005521420822433846622"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: e876bfe0-b01e-0014-23d0-cb82ae000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:41 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=644153258519584853110440696072229081039"}],"include_subdomains ":true}Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: VerizonX-Content-Type-Options: nosniffx-ms-request-id: 67cd2dc1-901e-0071-71d0-cb2cea000000Content-Length: 215Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:42 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1114080118403704017615322268366155391588"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 77abfe8b-901e-0061-55d0-cbe982000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:43 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=858768634534424297516367698004533451206"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 1f2e9455-d01e-003d-04d0-cbbcda000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:43 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1825090435027996608310472459127063421394"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 40312c5c-901e-0013-29d0-cbeecd000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:43 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=4894841051015313067707271027429431680"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 06877e42-601e-004a-3ed0-cb694e000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:42 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1361153646783415010150968368741904910"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 9425b667-601e-0075-28d0-cba1ed000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=957274904874152634810770669038864333612"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 0302d592-d01e-0060-38d0-cbb65e000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=144530105493469556373789793063220528837"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 7a70a18b-b01e-0059-5fd0-cb4d42000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=359661623410099397813778492908758020084"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 77ac0647-901e-0061-77d0-cbe982000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=179401332733942705632763365740137206851"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 1f2e9a87-d01e-003d-6cd0-cbbcda000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=336960516338333224111140556433247986036"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 40313047-901e-0013-3bd0-cbeecd000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1678906457142425934914821213515204211056"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 52d6e231-001e-004c-50d0-cb5af1000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=634693830453943856916036612701030230307"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 0f068fe2-401e-0000-29d0-cbcac1000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Headers: Access-Control-Allow-Methods: GET,HEAD,OPTIONSAccess-Control-Allow-Origin: Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-IdAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Content-Type: application/xmlDate: Thu, 10 Aug 2023 21:19:44 GMTNEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01}Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1202169203445008070810310636574564758866"}],"include_subdomains ":true}Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0Strict-Transport-Security: max-age=31536000; includeSubDomainsTiming-Allow-Origin: *X-CDN-Provider: Verizonx-ms-request-id: 0687816b-601e-004a-09d0-cb694e000000Content-Length: 223Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Dropbox-Is-Upstream-Batch: trueContent-Length: 1233Content-Type: text/htmlDate: Thu, 10 Aug 2023 21:20:11 GMTServer: envoyStrict-Transport-Security: max-age=31536000; includeSubDomainsCache-Control: no-cache, no-storeVary: Accept-EncodingX-Dropbox-Response-Origin: far_remoteX-Dropbox-Request-Id: c42faad966674cca97389595ec6b39f8Connection: close

Source: chromecache_511.1.dr	String found in binary or memory: http://angular-ui.github.com/
Source: chromecache_511.1.dr	String found in binary or memory: http://angular-ui.github.io/bootstrap/
Source: chromecache_458.1.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_511.1.dr	String found in binary or memory: http://api.jquery.com/offset/
Source: chromecache_511.1.dr	String found in binary or memory: http://api.jquery.com/position/
Source: chromecache_677.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_677.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_677.1.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_677.1.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_446.1.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_446.1.dr	String found in binary or memory: http://github.com/angular-ui/ui-select
Source: chromecache_714.1.dr	String found in binary or memory: http://github.com/jquery/globalize
Source: chromecache_677.1.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_677.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_677.1.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_677.1.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_589.1.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_511.1.dr	String found in binary or memory: http://placekitten.com/100/150
Source: chromecache_511.1.dr	String found in binary or memory: http://placekitten.com/150/150
Source: chromecache_677.1.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_511.1.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_677.1.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_468.1.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_589.1.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_446.1.dr, chromecache_511.1.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: chromecache_589.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_677.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_677.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_677.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_677.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_677.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_677.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=229280
Source: chromecache_677.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_677.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_677.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_677.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_446.1.dr	String found in binary or memory: https://github.com/DaftMonk/angular-tour
Source: chromecache_511.1.dr	String found in binary or memory: https://github.com/angular/angular.js/pull/10764
Source: chromecache_446.1.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_677.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_677.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_677.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_511.1.dr	String found in binary or memory: https://github.com/mbostock/d3/blob/master/src/format/requote.js
Source: chromecache_511.1.dr	String found in binary or memory: https://github.com/mgonto/angular-wizard
Source: chromecache_446.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_701.1.dr	String found in binary or memory: https://help.dropbox.com/files-folders/share/remove-link
Source: chromecache_532.1.dr	String found in binary or memory: https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate
Source: chromecache_701.1.dr	String found in binary or memory: https://help.dropbox.com/installs-integrations/desktop/dropbox-backup-faq#supporteddrives
Source: chromecache_532.1.dr	String found in binary or memory: https://help.dropbox.com/share/banned-links
Source: chromecache_677.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_589.1.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
Source: chromecache_511.1.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_511.1.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_480.1.dr, chromecache_464.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_480.1.dr, chromecache_464.1.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_511.1.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_511.1.dr	String found in binary or memory: https://openjsf.org/
Source: keys.json.0.dr	String found in binary or memory: https://polyset.xyz
Source: keys.json.0.dr	String found in binary or memory: https://pst-issuer.hcaptcha.com
Source: chromecache_446.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/fabmdl2.4.51.woff
Source: chromecache_653.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.e
Source: chromecache_653.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.t
Source: chromecache_653.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-light-final.w
Source: chromecache_653.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final
Source: chromecache_653.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-fina
Source: chromecache_653.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-fin
Source: chromecache_653.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-light-final.svg#w
Source: chromecache_653.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-regular-final.svg
Source: chromecache_653.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-semibold-final.sv
Source: chromecache_653.1.dr	String found in binary or memory: https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-semilight-final.s
Source: keys.json.0.dr	String found in binary or memory: https://trusttoken.dev
Source: chromecache_563.1.dr	String found in binary or memory: https://www.onenote.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+904; SOCS=CAISHAgCEhJnd3NfMjAyMjA4MDgtMF9SQzEaAmVuIAEaBgiAvOuXBg; AEC=Ad49MVGiijyX5dxPFAKxKYso-rIS24Ht-Pxs5fU9hHrAzfASnm-jqdQE1g; NID=511=WyMJovC2uA2AEbHQkGfP-KDdYCeg5Q7Mv6gxYT-qeugtrnXImrhmp1SixwS4ydh_E8Z0hdfCLAXvg2WUqsBSfqpx5SFvCCoeGeevqlEfkoxYi9FTISb8Cu7rr5rf9PyyNbLqf2QbxG7ja7jAB6UJQd5CPvMGcYUasORCRKRL1-arNYzfADAWHJvBLXml-Km_uewDreOyJ-MjxAI-i38Tl6LXI3zB; 1P_JAR=2023-08-10-10

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=115.0.5790.171&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-115.0.5790.171Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hstsping HTTP/1.1Host: dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=50aS4zgW2W1XP95GWz4lmdjP; locale=en
Source: global traffic	HTTP traffic detected: GET /page_success/end?dws_page_name=cloud_docs_paper_content_page&path=%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2F_-My-Paper-doc.paper&request_id=2bf587026cc84e6fb25f2770a9e877b7&time=1691702333 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-Regular-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_bundle.1885980d0c2e444b4c260d20339401ec.6JKOhZEZLVUo0awj9vBTCyS8J99CxnWy1B_2dSb-wc0.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-RegularItalic-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-Medium-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-MediumItalic-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-Semi-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_admin~paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~pap~98bcc4eb.fe9af606aefd018129cf886d5e3f19606dbbddff.Xbp3O2-COYExGtN144UKWgSeatOvuip7TNL0U7IyRwM.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_admin~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~paper_graphql~paper_influence~887f98f3.fe9af606aefd018129cf886d5e3f19606dbbddff.ARD-Tc17w0zlkOYPGuyNud-Z4Sv7Bt5ccfkX-Fz_qFQ.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-SemiItalic-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_jasmine_~1ca7a66a.fe9af606aefd018129cf886d5e3f19606dbbddff.r_7xXGcgUUikEzI1NnDXnlonV8WXcPki_QOxR4zMw88.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_native_desktop~paper_pifs~paper_te~b48e404f.fe9af606aefd018129cf886d5e3f19606dbbddff.U3P7jv3GEaRkYi8e_Tzgd_iua_HB6JPDDd6wz0Flp6g.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-Bold-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/AtlasGrotesk-BoldItalic-190618-Web.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/SourceCodePro-Regular-2038.otf.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/SourceCodePro-It-1058.otf.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/SourceCodePro-Bold-2038.otf.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_native_desktop~paper_pifs~paper_view_only.fe9af606aefd018129cf886d5e3f19606dbbddff.KpDs5k5SZCk7D2mDdczRh5YHqhnZ3SjEXRfr_OfKMJg.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_pifs~paper_view_only.fe9af606aefd018129cf886d5e3f19606dbbddff.mvKRac08CsxdXTXpXg6mjQCKhxzd2p4syHrGl6RwLsM.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/SourceCodePro-BoldIt-1058.otf.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/fonts/KaTeX_Main-Regular.woff2 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/runtime_e9038aed7abbdbad2158.zZ2kbtQlmumtpAghwuSOWRIAHWon-FbdTs21U26ckrM.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/544eb0bcacbf47681dcb.UBYHq28Ln5Hi8t6eUSEEz2fCkP8WJ0HWYEUftmX8eYE.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/paper_cloud_docs~paper_pifs.fe9af606aefd018129cf886d5e3f19606dbbddff.MLLQ4hZFC6ZgaidRqLtSKQk2VkEALechDq_ssMjHRWk.css.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/3ee69373c43503423dee.hQ390ZRL-Hgo8uZZODlkclJcvKXLvy33mubixfvo22U.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/6e501f8b9009ee898fc6.wFEyMPzjGdp0HhzwUx04Vd1h31nD7XJiB3IVsODHoBk.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/ce3721cd78168aca8dff.TOBxGySy4L8Jev4cz1MMkll3TM-ZkPmz6kB0Q7cRP8c.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/b7447ec7a5639b81bb9e.5B1z69DJcJdOytocwBFk4mleBWMQRi8eATiNFmXWFrY.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/3a78e91d6aadf6acf68f.vvRP4rRPgDOCZoHXFooGsAZ7v3LTGdymEN13v3SRmS0.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/58cc5c6db7c1186fa9f3.zY6o-XeH44T0_vpOvZUDLeJeznVBNUebzrAuflJz95U.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pithos/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
Source: global traffic	HTTP traffic detected: GET /paper/ep/redirect/image?url=https%3A%2F%2Fpaper-attachments.dropboxusercontent.com%2Fs_8D66F23E9081292BB340707BF77F870E88B0620DDDFBF6FC9FE7C1CDD93906F0_1691690588179_751d-69c2-bfc5-7ea9.png&hmac=IVMu5yKoRDONl4U8UOJYrumevZezS7mUN0aD2%2FxDcNg%3D HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
Source: global traffic	HTTP traffic detected: GET /static/api/2/dropins.js HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/d5234f674cac144b79bf.cDu6D0nBAZvocplrTbBtBSOvdUuoODvKDRycRtZhb4I.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/44358a50a900da035ada.LGT6HPSCk03xwXtkplDP_6Ti9yb6DDIdp68pzO0HY98.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
Source: global traffic	HTTP traffic detected: GET /pithos/host%3Awww.dropbox.com/privacy_consent HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/c861c239bed0e42e4847.obO1giTD6WsT4sESd05O8sH8NTRGNr7BFGTPTNoAoKo.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/2cdc887fa30d028a6cac.yYomW_BQJnWDD10UrVD9zI1YaI83_RjUsYv9vtzPLm0.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/thumb/AB9lmxu6tlgeO1DY9f4mZYQIZtSNHK7X--vfWqgNa1P4Zq17YwXLsxJqY8dO22TUvc889Io-U7Nm4R2ItGOCgVUv524NL2y5DNHF11D-KeaE1auFPb6fvo9LHETT3pPe-QdvVSVNFo8ozXiWsiXBPxfYpotT45lR2Hahvm6VTOhSwxg9sNZ8SJJn09oDQH7_BCDpQSplkS_VPQR9owSmJwLdxTjdOJZXH84owBImVlv4qg_TXRp0MWY5TpuRc-dL50aibHPoXXnITaIZ1R9wly9X643PV-S5uxo0d2e8oNEuLP55UDdUhQrkFYkhzBHiPOEw8V8HWSbctlS3dO2Cq3Ot9RWQUZKq1R7KFZvSOoROt1nJYR3yC4gqp5p1Ky1xcWK-fN6veA8d59R0dokwD9fzfGUIH_xGN1otBRFO5-EvMA/p.png HTTP/1.1Host: uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/203e68a375ea7f28c0de.MMYkLQEeFZd4PYXbLlLiCe5SizWEJT-CGzSC04pJQ8c.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/a21c5224998b633286f4.rQRcp3jmk733KBe7uAe0ZL46KWMlMUvqfxvueAS1xRA.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/ea67d264b690942c8510.zy-U6PEBZo5tZvAwyC0Mt1Ga6AOObigtU7jOeqlAl_Q.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/aa7bc43daf3c3d0c03a8.i3qsTcFgoOzzyfb1BvKL1Ngsl_TBIEdwWAwwi2z1rq4.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/560cd16fcac899cdf8de.WBtKv9t3muteHSopmtHgmdgdVDNvltp-EpSjhpmmA2w.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/baa559eb90d18088047f.62bTZ-1Y5wrXwa9_3c21HWyky0dzLHhP70An-t16gvc.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/89b15544be7d0981c0ce.4YByqBMD2GuNM2mQjudvyReJe0vGQKkrUDx6_ngAh1s.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/9454d8fa2212567ac845.WfD7VSo61Cc5xmHVBpbY72RawNlX3T2FkjNti0c6IYw.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/c6e3e4b583e4f456ca85.4hVQesaocPlhDG3TlmS2PF_aGVO5vUm3IKz_XfWNwU8.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/c364c30a7132105003e0.8XJOW7LRMgP1ARGwZw08JDY68ADKiGvFWrlYEzy29bw.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/00e4f72cc8d07e2964b5.ezimfJZlTtJey57m97Ax4xFG22d8BUDGW-mXRHxj1SA.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/thumb/AB9lmxu6tlgeO1DY9f4mZYQIZtSNHK7X--vfWqgNa1P4Zq17YwXLsxJqY8dO22TUvc889Io-U7Nm4R2ItGOCgVUv524NL2y5DNHF11D-KeaE1auFPb6fvo9LHETT3pPe-QdvVSVNFo8ozXiWsiXBPxfYpotT45lR2Hahvm6VTOhSwxg9sNZ8SJJn09oDQH7_BCDpQSplkS_VPQR9owSmJwLdxTjdOJZXH84owBImVlv4qg_TXRp0MWY5TpuRc-dL50aibHPoXXnITaIZ1R9wly9X643PV-S5uxo0d2e8oNEuLP55UDdUhQrkFYkhzBHiPOEw8V8HWSbctlS3dO2Cq3Ot9RWQUZKq1R7KFZvSOoROt1nJYR3yC4gqp5p1Ky1xcWK-fN6veA8d59R0dokwD9fzfGUIH_xGN1otBRFO5-EvMA/p.png HTTP/1.1Host: uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/c025b20740bee5bbd20e.CFVe0o7N1UFEbh-B9NSjEJmLH7rMhTo61iCmucFn2tQ.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/963f506dd3b13f085f86.9xSTzoX27fePTtpU9w3kQf0jim1dDShjEsYt5H_LWjc.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/40510ae9daba5bc1eecd.V6a3ctxyWdzDRllwjLOfmIDzNHv4uE2gDbtPTAvJzfo.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/576659a22164beedaf0d.iBkLR8kQiVXjyu_-bIonCC35MIiJsyM15U4ExVbjfk8.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/2fb2466cd701c4229b26.Hd_QNpBbEqJ5m-AQdNL3G-r6QWSJOt0XRvH7T70qLxc.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/87df4624ffe7b5a7c2ce.GFvBN5WXECmkVw2Fb6h_LbiNdghMP8zM-DyMiIk6pQg.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/b12f522ce0ee55757f5e.2dcJbNyH591tHPSv0DWyEHi4jMDBGtqFibbP5rsRf_I.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/e3ad0fb7614fb0e8f4d7.ncHbqhUuy1SleHCSwfD-nlmwizFCTHYjxzH_SMRfhlc.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/f86dc7c73976519634fe.u7wxnX1c69kWdR8C87ycEdr8hwUX3Duf9i9JSrzjAlI.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/9172aa6f8832526ab19b.LOASUGzMoQPJ1DBffC3eNU1eLNzsOhspn7RROHtBrrw.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Origin: https://www.dropbox.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/get-link-tracking-token?localPadId=zjo2KktWLcVGFokm1yeoE&trafficSource=paper_address_bar&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-app-time: 1691634844000notes-pad-id: zjo2KktWLcVGFokm1yeoEnotes-tab-id: 1CKSXqh3ruYB6f22RkOusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/emoji/preferences?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-tab-id: 1CKSXqh3ruYB6f22RkOunotes-app-time: 1691634844000sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/3ca391fb196a76f06afb.Sf-O5SKhNZ9n5HaOYmICg0jW_NKUQqCqe-cbrqaYptA.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/ep/stateless/calendars/calendar-events?padId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-tab-id: 1CKSXqh3ruYB6f22RkOunotes-app-time: 1691634844000sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/0f87dfdb09fdf4689436.XmWd3ZCjNs5ikVl6X4w5UBoJH0WCva2GW011KNNjeIU.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/cloud-docs/get-filesystem-info?localPadId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-app-time: 1691634844000notes-pad-id: zjo2KktWLcVGFokm1yeoEnotes-tab-id: 1CKSXqh3ruYB6f22RkOusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/cloud-docs/urls?localPadId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-app-time: 1691634844000notes-pad-id: zjo2KktWLcVGFokm1yeoEnotes-tab-id: 1CKSXqh3ruYB6f22RkOusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fb.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fc.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fd.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/ep/onboarding?productType=1&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-tab-id: 1CKSXqh3ruYB6f22RkOunotes-app-time: 1691634844000sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fe.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3ff.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/get-link-tracking-token?localPadId=zjo2KktWLcVGFokm1yeoE&trafficSource=paper_address_bar&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-app-time: 1691634844000notes-pad-id: zjo2KktWLcVGFokm1yeoEnotes-tab-id: 1CKSXqh3ruYB6f22RkOusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fb.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/emoji/preferences?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fd.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/ep/stateless/calendars/calendar-events?padId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-tab-id: 1CKSXqh3ruYB6f22RkOunotes-app-time: 1691634844000sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/webpack/production/d7c49816088408423a50.cjIp7UHClzqwu3lMbpCuK9_cMgk8uoSvsL8FX5pOS4Y.js.gz HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fc.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=278436657903872528145584&id=257359365407097851736353&channel=shortpolling&seq=0&create=yes&new=yes&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddffNotes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEcNotes-Pad-Id: zjo2KktWLcVGFokm1yeoENotes-App-Time: 1691634844000Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOusec-ch-ua-mobile: ?0Notes-Socket-Id: 257359365407097851736353User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/log/latency?metric=initial-page-load-total-latency2&values=%7B%22executed%22%3A10051%2C%22rendered%22%3A9365%2C%22responseStart%22%3A951%7D&tags=%7B%22pageName%22%3A%22editor%22%7D&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-tab-id: 1CKSXqh3ruYB6f22RkOunotes-app-time: 1691634844000sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/nginx/ping?tabId=1CKSXqh3ruYB6f22RkOu&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]cache-control: no-cache, no-store, max-age=0x-requested-with: XMLHttpRequestsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3fe.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/ep/stateless/calendars/calendar-events?padId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/img/ace/emoji/270b-1f3ff.png?version=7.0.1 HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=278436657903872528145584&id=257359365407097851736353&channel=shortpolling&seq=0&create=yes&new=yes&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/ep/stateless/calendars/calendar-events?padId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/emoji/list?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-tab-id: 1CKSXqh3ruYB6f22RkOunotes-app-time: 1691634844000sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/team/emoji-list?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-tab-id: 1CKSXqh3ruYB6f22RkOunotes-app-time: 1691634844000sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=830395895254979411890363&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddffNotes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEcNotes-Pad-Id: zjo2KktWLcVGFokm1yeoENotes-App-Time: 1691634844000Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOusec-ch-ua-mobile: ?0Notes-Socket-Id: 257359365407097851736353User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/comet/post?r=288161857590172754853666&v=2&id=257359365407097851736353&seq=0&tag=zjo2KktWLcVGFokm1yeoE&xsrf=50aS4zgW2W1XP95GWz4lmdjP&postSeq=1&remark=&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=830395895254979411890363&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=930323713435764188027865&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddffNotes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEcNotes-Pad-Id: zjo2KktWLcVGFokm1yeoENotes-App-Time: 1691634844000Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOusec-ch-ua-mobile: ?0Notes-Socket-Id: 257359365407097851736353User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/log_client_event HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/img/favicon/favicon-32.png HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /paper/emoji/list?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=930323713435764188027865&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=101021215062045305236252&id=257359365407097851736353&channel=streaming&seq=0&create=no&new=yes&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1Host: 70.comet.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddffNotes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEcNotes-Pad-Id: zjo2KktWLcVGFokm1yeoENotes-App-Time: 1691634844000Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOusec-ch-ua-mobile: ?0Notes-Socket-Id: 257359365407097851736353User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.dropbox.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t=50aS4zgW2W1XP95GWz4lmdjP; locale=en
Source: global traffic	HTTP traffic detected: GET /paper/comet/post?r=152644900197624502433053&v=2&id=257359365407097851736353&seq=0&tag=zjo2KktWLcVGFokm1yeoE&xsrf=50aS4zgW2W1XP95GWz4lmdjP&postSeq=2&remark=CLIENT_READY&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /static/img/favicon/favicon-32.png HTTP/1.1Host: paper.dropboxstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /alternate_wtl_browser_performance_info HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /alternate_wtl HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=463197031499690454895468&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddffNotes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEcNotes-Pad-Id: zjo2KktWLcVGFokm1yeoENotes-App-Time: 1691634844000Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOusec-ch-ua-mobile: ?0Notes-Socket-Id: 257359365407097851736353User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/emoji/count?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-tab-id: 1CKSXqh3ruYB6f22RkOunotes-app-time: 1691634844000sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/comet/channel?v=2&r=463197031499690454895468&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/emoji/count?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/comet/post?r=635386945670126860957074&v=2&id=257359365407097851736353&seq=0&tag=zjo2KktWLcVGFokm1yeoE&xsrf=50aS4zgW2W1XP95GWz4lmdjP&postSeq=3&remark=&padIsNew=false HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /paper/log/connection-diagnostic-info?role=work HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /?bgbpbtvq HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 HTTP/1.1Host: larationr.topConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_nun_Nob0yT2WjCUfgBCTog2.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; fpc=AmtiFc-BLE5KrbEEZ3hXsak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; fpc=AmtiFc-BLE5KrbEEZ3hXsak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; fpc=AmtiFc-BLE5KrbEEZ3hXsak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_sb6jQxfN8f3sA8faKcsD7Q2.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vts8ra1it9l0lgwizaxzhg2.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA
Source: global traffic	HTTP traffic detected: GET /?bgbpbtvq HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA
Source: global traffic	HTTP traffic detected: GET /paper/cloud-docs/get-seen-users?localPadId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddffnotes-tab-id: 1CKSXqh3ruYB6f22RkOunotes-app-time: 1691634844000sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36content-type: application/x-www-form-urlencoded; charset=UTF-8x-paper-client-capabilities: [1]x-requested-with: XMLHttpRequestx-notes-user-id: g.251c56293a96f7e3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.dropbox.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vts8ra1it9l0lgwizaxzhg2.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_sb6jQxfN8f3sA8faKcsD7Q2.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: larationr.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: larationr.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: larationr.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: larationr.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: larationr.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/embeddedfonts.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/admin/css/admin.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/o365themedefault.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/masterstyles15.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/masterstyles15mvc.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/website.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/home.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/home15.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/conciergehelper.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/assistancepanel.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/content/css/signup16.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/adoption.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/commonhealthdashboard.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/microsoftajaxcombined.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/jquery/jquery-1_10_2_min.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/headbundle.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?bgbpbtvq HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/controlbundle.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/angularlib.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/angularextensions.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/adminbootstrap.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/adminapp.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/mscorlib.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/listgrid.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/peoplepicker.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/productkeycontrol.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/gridview.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/netperf.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/searchbox.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/passwordstrengthmeter.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/hipcontrol.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/geminiwizard.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/webuivalidation.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/webtrends.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/webtrendsstream.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: larationr.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/home.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_sb6jQxfN8f3sA8faKcsD7Q2.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vts8ra1it9l0lgwizaxzhg2.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/reporting.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/assistancepanel.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/webcontrols.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/transparent.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/header_bg_signup_office.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/O365SharedClusteredImage.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/servicestatus.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_white_panel.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_mos_background_right.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_mos_background_left.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_nav_highlight.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/header_wizard_hl_mos.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.microsoft365.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/list_bullet_5x5.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spinner_16x16_metro.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spinner_24x24_metro.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/website.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/home.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/home15.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/assistancepanel.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/conciergehelper.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/adoption.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/commonhealthdashboard.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/embeddedfonts.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:19:09 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/admin/css/admin.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:13:54 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/o365themedefault.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:22:01 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/masterstyles15.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:19:22 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/css/masterstyles15mvc.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:19:24 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/content/css/signup16.css HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:24:56 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/microsoftajaxcombined.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:19:07 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/jquery/jquery-1_10_2_min.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:18:52 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/headbundle.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:13:19 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/controlbundle.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:13:20 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shell/images/signup_ms_logo.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/angularlib.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:13:29 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/angularextensions.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:13:34 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/adminbootstrap.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:13:36 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/adminapp.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:13:49 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/mscorlib.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:22:10 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/listgrid.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:20:27 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/peoplepicker.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:22:11 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/productkeycontrol.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:22:12 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/gridview.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:22:16 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/netperf.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:25:16 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/searchbox.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/passwordstrengthmeter.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:22:15 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/hipcontrol.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:13:25 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/geminiwizard.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:22:14 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/webuivalidation.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"If-Modified-Since: Tue, 08 Aug 2023 04:22:13 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/webtrends.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/webtrendsstream.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/home.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/reporting.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-pkg/2023.8.3.2/en/js/assistancepanel.js HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shell/images/o365_gallatin_logo.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/image1.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/scrollbar/arrow_staticup_16.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/scrollbar/arrow_staticdown_16.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/webcontrols.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/transparent.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.microsoft365.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=9F94891D29A040C88D2106E8E34BD23A; OIDC=1
Source: global traffic	HTTP traffic detected: GET /Shell/Images/header_bg_signup_office.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/O365SharedClusteredImage.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/servicestatus.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_white_panel.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_mos_background_right.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_mos_background_left.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/pagelayout_nav_highlight.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Shell/Images/header_wizard_hl_mos.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/list_bullet_5x5.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spinner_16x16_metro.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/spinner_24x24_metro.gif HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shell/images/signup_ms_logo.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shell/images/o365_gallatin_logo.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/image1.jpg HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/scrollbar/arrow_staticup_16.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/scrollbar/arrow_staticdown_16.png HTTP/1.1Host: res-h3.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portal.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?bgbpbtvq HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vts8ra1it9l0lgwizaxzhg2.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPowwP1JkfMjcNVbfQCeHns1Z9LOGlgI0L6QuoMrMiKDcBXag8QYkIr7se0A3rolIA4E_pcxSDz8c-4vO799JZE_5XTSYOjha1GNELxiRlgFcgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPx3MNeDf99axE4PeqP6nkSXpEmW1L9VrZE1hi_LbYDIYSevqfl1Psee0iQ7NyRDQrXCIRXFiP6kmszJM-lv6vWABR510a5Lqyhutp3kpTMW5vC5yRW_wYeLJwKsgJuZl8o-VfEbpRsCm8Vvi0RXdoQDb6G5fgyrPEodcIBgdoQ99J3Kw-tyBVk7XjoFZQRVzyxiTM1bo_p3Dq3Nrwx7GHifvhMETFaIqgC4FMESxcSZHw_lM0fwBz8FIkx6XwvsKk9_M90MSr4oAtxlAT3Ozqri9ts1hf3vZHRlPYTkMtpffb0t9wLyBEvl3LEUTag-BfcPwlGQAovyAFhBSoWzZxMUeKKeupVesOlCkraE1AzWiQ4eSOktk4GuA3d3lNgeklhh5SCztAB2BD4Tdgf79jg6wNzpDNQfpouLcpmQtt2eAgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAMAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_sb6jQxfN8f3sA8faKcsD7Q2.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPowwP1JkfMjcNVbfQCeHns1Z9LOGlgI0L6QuoMrMiKDcBXag8QYkIr7se0A3rolIA4E_pcxSDz8c-4vO799JZE_5XTSYOjha1GNELxiRlgFcgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPx3MNeDf99axE4PeqP6nkSXpEmW1L9VrZE1hi_LbYDIYSevqfl1Psee0iQ7NyRDQrXCIRXFiP6kmszJM-lv6vWABR510a5Lqyhutp3kpTMW5vC5yRW_wYeLJwKsgJuZl8o-VfEbpRsCm8Vvi0RXdoQDb6G5fgyrPEodcIBgdoQ99J3Kw-tyBVk7XjoFZQRVzyxiTM1bo_p3Dq3Nrwx7GHifvhMETFaIqgC4FMESxcSZHw_lM0fwBz8FIkx6XwvsKk9_M90MSr4oAtxlAT3Ozqri9ts1hf3vZHRlPYTkMtpffb0t9wLyBEvl3LEUTag-BfcPwlGQAovyAFhBSoWzZxMUeKKeupVesOlCkraE1AzWiQ4eSOktk4GuA3d3lNgeklhh5SCztAB2BD4Tdgf79jg6wNzpDNQfpouLcpmQtt2eAgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAMAAABdS2fcDgAAAA
Source: global traffic	HTTP traffic detected: GET /2/client_metrics/record HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /log_js_sw_data HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: larationr.topConnection: keep-alivesec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://larationr.top/?bgbpbtvqAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPowwP1JkfMjcNVbfQCeHns1Z9LOGlgI0L6QuoMrMiKDcBXag8QYkIr7se0A3rolIA4E_pcxSDz8c-4vO799JZE_5XTSYOjha1GNELxiRlgFcgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPx3MNeDf99axE4PeqP6nkSXpEmW1L9VrZE1hi_LbYDIYSevqfl1Psee0iQ7NyRDQrXCIRXFiP6kmszJM-lv6vWABR510a5Lqyhutp3kpTMW5vC5yRW_wYeLJwKsgJuZl8o-VfEbpRsCm8Vvi0RXdoQDb6G5fgyrPEodcIBgdoQ99J3Kw-tyBVk7XjoFZQRVzyxiTM1bo_p3Dq3Nrwx7GHifvhMETFaIqgC4FMESxcSZHw_lM0fwBz8FIkx6XwvsKk9_M90MSr4oAtxlAT3Ozqri9ts1hf3vZHRlPYTkMtpffb0t9wLyBEvl3LEUTag-BfcPwlGQAovyAFhBSoWzZxMUeKKeupVesOlCkraE1AzWiQ4eSOktk4GuA3d3lNgeklhh5SCztAB2BD4Tdgf79jg6wNzpDNQfpouLcpmQtt2eAgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAMAAABdS2fcDgAAAA

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1916,i,12660512941605008625,15748179457569933284,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1916,i,12660512941605008625,15748179457569933284,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\chrome_BITS_1452_1412300539

Jump to behavior

Source: classification engine

Classification label: mal88.phis.win@37/290@56/14

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_1452_1412300539	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\keys.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_1452_834875125	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\crl-set	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_1452_551639614	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0	0%	Virustotal		Browse
https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0	0%	Avira URL Cloud	safe
https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://larationr.top/?bgbpbtvq	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
http://angular-ui.github.io/bootstrap/	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://larationr.top/favicon.ico	0%	Avira URL Cloud	safe
https://pst-issuer.hcaptcha.com	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
edge-block-previews-env.dropbox-dns.com	162.125.69.16	true	false	unknown
cs1100.wpc.omegacdn.net	152.199.23.37	true	false	unknown
accounts.google.com	142.251.37.13	true	false	high
larationr.top	23.227.196.61	true	false	unknown
ZRH-efz.ms-acdc.office.com	52.97.186.146	true	false	high
dropbox.com	162.125.248.18	true	false	high
www-env.dropbox-dns.com	162.125.69.18	true	false	unknown
paper.dropboxstatic.com	18.165.183.80	true	false	high
part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
www.google.com	142.251.36.164	true	false	high
clients.l.google.com	142.251.36.174	true	false	high
sni1gl.wpc.sigmacdn.net	152.199.21.175	true	false	unknown
www.microsoft365.com	unknown	unknown	false	high
r4.res.office365.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
cfl.dropboxstatic.com	unknown	unknown	false	high
m365cdn.nel.measure.office.net	unknown	unknown	false	high
outlook.office365.com	unknown	unknown	false	high
70.comet.dropbox.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
portal.microsoftonline.com	unknown	unknown	false	high
www.dropbox.com	unknown	unknown	false	high
uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.dropbox.com/paper/ep/redirect/image?url=https%3A%2F%2Fpaper-attachments.dropboxusercontent.com%2Fs_8D66F23E9081292BB340707BF77F870E88B0620DDDFBF6FC9FE7C1CDD93906F0_1691690588179_751d-69c2-bfc5-7ea9.png&hmac=IVMu5yKoRDONl4U8UOJYrumevZezS7mUN0aD2%2FxDcNg%3D	false		high
https://paper.dropboxstatic.com/static/webpack/production/6e501f8b9009ee898fc6.wFEyMPzjGdp0HhzwUx04Vd1h31nD7XJiB3IVsODHoBk.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/c364c30a7132105003e0.8XJOW7LRMgP1ARGwZw08JDY68ADKiGvFWrlYEzy29bw.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/c025b20740bee5bbd20e.CFVe0o7N1UFEbh-B9NSjEJmLH7rMhTo61iCmucFn2tQ.js.gz	false		high
https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fd.png?version=7.0.1	false		high
https://paper.dropboxstatic.com/static/webpack/production/ce3721cd78168aca8dff.TOBxGySy4L8Jev4cz1MMkll3TM-ZkPmz6kB0Q7cRP8c.js.gz	false		high
https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-BoldItalic-190618-Web.woff2	false		high
https://paper.dropboxstatic.com/static/webpack/production/paper_cloud_docs~paper_pifs.fe9af606aefd018129cf886d5e3f19606dbbddff.MLLQ4hZFC6ZgaidRqLtSKQk2VkEALechDq_ssMjHRWk.css.gz	false		high
https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Medium-190618-Web.woff2	false		high
https://outlook.office365.com/owa/prefetch.aspx	false		high
https://paper.dropboxstatic.com/static/webpack/production/paper_admin~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~paper_graphql~paper_influence~887f98f3.fe9af606aefd018129cf886d5e3f19606dbbddff.ARD-Tc17w0zlkOYPGuyNud-Z4Sv7Bt5ccfkX-Fz_qFQ.css.gz	false		high
https://www.dropbox.com/paper/emoji/list?role=work	false		high
https://www.dropbox.com/log/ux_analytics	false		high
https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fe.png?version=7.0.1	false		high
https://www.dropbox.com/paper/cloud-docs/get-dbx-folder-data-by-pad-id?role=work	false		high
https://paper.dropboxstatic.com/static/webpack/production/runtime_e9038aed7abbdbad2158.zZ2kbtQlmumtpAghwuSOWRIAHWon-FbdTs21U26ckrM.js.gz	false		high
https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fc.png?version=7.0.1	false		high
https://paper.dropboxstatic.com/static/webpack/production/c861c239bed0e42e4847.obO1giTD6WsT4sESd05O8sH8NTRGNr7BFGTPTNoAoKo.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/b12f522ce0ee55757f5e.2dcJbNyH591tHPSv0DWyEHi4jMDBGtqFibbP5rsRf_I.js.gz	false		high
https://www.dropbox.com/paper/cloud-docs/get-filesystem-info?localPadId=zjo2KktWLcVGFokm1yeoE&role=work	false		high
https://www.dropbox.com/paper/emoji/count?role=work	false		high
https://www.dropbox.com/static/api/2/dropins.js	false		high
https://paper.dropboxstatic.com/static/webpack/production/203e68a375ea7f28c0de.MMYkLQEeFZd4PYXbLlLiCe5SizWEJT-CGzSC04pJQ8c.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/9172aa6f8832526ab19b.LOASUGzMoQPJ1DBffC3eNU1eLNzsOhspn7RROHtBrrw.js.gz	false		high
about:blank	false		low
https://larationr.top/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/paper/cloud-docs/get-seen-users?localPadId=zjo2KktWLcVGFokm1yeoE&role=work	false		high
https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-MediumItalic-190618-Web.woff2	false		high
https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Bold-190618-Web.woff2	false		high
https://larationr.top/?bgbpbtvq	false	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://www.dropbox.com/log_js_sw_data	false		high
https://www.dropbox.com/paper/comet/channel?v=2&r=463197031499690454895468&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false	false		high
https://www.dropbox.com/paper/emoji/preferences?role=work	false		high
https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg	false	SlashNext: Credential Stealing type: Phishing & Social Engineering	high
https://paper.dropboxstatic.com/static/webpack/production/d5234f674cac144b79bf.cDu6D0nBAZvocplrTbBtBSOvdUuoODvKDRycRtZhb4I.js.gz	false		high
https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fb.png?version=7.0.1	false		high
https://www.dropbox.com/paper/comet/channel?v=2&r=278436657903872528145584&id=257359365407097851736353&channel=shortpolling&seq=0&create=yes&new=yes&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false	false		high
https://paper.dropboxstatic.com/static/webpack/production/paper_bundle.1885980d0c2e444b4c260d20339401ec.6JKOhZEZLVUo0awj9vBTCyS8J99CxnWy1B_2dSb-wc0.css.gz	false		high
https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-SemiItalic-190618-Web.woff2	false		high
https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0	false		high
https://www.dropbox.com/paper/nginx/ping?tabId=1CKSXqh3ruYB6f22RkOu&role=work	false		high
https://paper.dropboxstatic.com/static/webpack/production/58cc5c6db7c1186fa9f3.zY6o-XeH44T0_vpOvZUDLeJeznVBNUebzrAuflJz95U.js.gz	false		high
https://outlook.office365.com/owa/prefetch.aspx	false		high
https://www.microsoft365.com/prefetch/prefetch	false		high
https://paper.dropboxstatic.com/static/webpack/production/paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_jasmine_~1ca7a66a.fe9af606aefd018129cf886d5e3f19606dbbddff.r_7xXGcgUUikEzI1NnDXnlonV8WXcPki_QOxR4zMw88.css.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/2fb2466cd701c4229b26.Hd_QNpBbEqJ5m-AQdNL3G-r6QWSJOt0XRvH7T70qLxc.js.gz	false		high
https://www.dropbox.com/paper/cloud-docs/urls?localPadId=zjo2KktWLcVGFokm1yeoE&role=work	false		high
https://www.dropbox.com/paper/cloud-docs/get-permissions?role=work	false		high
https://paper.dropboxstatic.com/static/webpack/production/baa559eb90d18088047f.62bTZ-1Y5wrXwa9_3c21HWyky0dzLHhP70An-t16gvc.js.gz	false		high
https://paper.dropboxstatic.com/static/webpack/production/89b15544be7d0981c0ce.4YByqBMD2GuNM2mQjudvyReJe0vGQKkrUDx6_ngAh1s.js.gz	false		high
https://www.dropbox.com/paper/cloud-docs/find-and-resolve-scls?role=work	false		high
https://portal.microsoftonline.com/Prefetch/Prefetch.aspx	false		high
https://paper.dropboxstatic.com/static/webpack/production/0f87dfdb09fdf4689436.XmWd3ZCjNs5ikVl6X4w5UBoJH0WCva2GW011KNNjeIU.js.gz	false		high
https://www.dropbox.com/paper/team/emoji-list?role=work	false		high
https://paper.dropboxstatic.com/static/fonts/SourceCodePro-BoldIt-1058.otf.woff2	false		high
https://paper.dropboxstatic.com/static/webpack/production/44358a50a900da035ada.LGT6HPSCk03xwXtkplDP_6Ti9yb6DDIdp68pzO0HY98.js.gz	false		high
https://paper.dropboxstatic.com/static/fonts/SourceCodePro-It-1058.otf.woff2	false		high
https://www.dropbox.com/2/cloud_docs/log_client_event	false		high
https://paper.dropboxstatic.com/static/webpack/production/d7c49816088408423a50.cjIp7UHClzqwu3lMbpCuK9_cMgk8uoSvsL8FX5pOS4Y.js.gz	false		high
https://dropbox.com/hstsping	false		high
https://paper.dropboxstatic.com/static/webpack/production/544eb0bcacbf47681dcb.UBYHq28Ln5Hi8t6eUSEEz2fCkP8WJ0HWYEUftmX8eYE.js.gz	false		high
https://www.dropbox.com/2/cloud_docs/get_doc_state_and_actions_logged_out	false		high
https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Regular-190618-Web.woff2	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=115.0.5790.171&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false		high
https://cfl.dropboxstatic.com/static/metaserver/static/cloud_docs/thirdpartycookie/post.html	false		high
https://paper.dropboxstatic.com/static/webpack/production/560cd16fcac899cdf8de.WBtKv9t3muteHSopmtHgmdgdVDNvltp-EpSjhpmmA2w.js.gz	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mbostock/d3/blob/master/src/format/requote.js	chromecache_511.1.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=449857	chromecache_677.1.dr	false		high
https://help.dropbox.com/files-folders/share/shared-folder-faq#cantcreate	chromecache_532.1.dr	false		high
http://angular-ui.github.io/bootstrap/	chromecache_511.1.dr	false	URL Reputation: safe	unknown
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_677.1.dr	false		high
https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js	chromecache_589.1.dr	false		high
http://www.json.org/json2.js	chromecache_589.1.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_677.1.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_677.1.dr	false		high
http://getbootstrap.com)	chromecache_446.1.dr	false	Avira URL Cloud: safe	low
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_677.1.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=229280	chromecache_677.1.dr	false		high
https://github.com/jquery/jquery/pull/764	chromecache_677.1.dr	false		high
https://openjsf.org/	chromecache_511.1.dr	false	URL Reputation: safe	unknown
http://github.com/jquery/globalize	chromecache_714.1.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_677.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_677.1.dr	false		high
https://help.dropbox.com/share/banned-links	chromecache_532.1.dr	false		high
https://www.onenote.com	chromecache_563.1.dr	false		high
http://underscorejs.org/LICENSE	chromecache_511.1.dr	false		high
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_677.1.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_589.1.dr	false		high
https://pst-issuer.hcaptcha.com	keys.json.0.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/MIT	chromecache_446.1.dr, chromecache_511.1.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_446.1.dr	false		high
https://github.com/jquery/sizzle/pull/225	chromecache_677.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_677.1.dr	false		high
http://github.com/angular-ui/ui-select	chromecache_446.1.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=470258	chromecache_677.1.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_511.1.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_677.1.dr	false		high
http://jquery.org/license	chromecache_677.1.dr	false		high
https://github.com/angular/angular.js/pull/10764	chromecache_511.1.dr	false		high
https://help.dropbox.com/installs-integrations/desktop/dropbox-backup-faq#supporteddrives	chromecache_701.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.97.186.146	ZRH-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
162.125.69.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
13.107.246.60	part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
162.125.69.16	edge-block-previews-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
142.251.36.164	www.google.com	United States	15169	GOOGLEUS	false
18.165.183.80	paper.dropboxstatic.com	United States	3	MIT-GATEWAYSUS	false
23.227.196.61	larationr.top	United States	29802	HVC-ASUS	false
18.165.183.28	unknown	United States	3	MIT-GATEWAYSUS	false
162.125.248.18	dropbox.com	United States	19679	DROPBOXUS	false
142.251.36.174	clients.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.37.13	accounts.google.com	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.sigmacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	38.0.0 Beryl
Analysis ID:	1289702
Start date and time:	2023-08-10 23:17:56 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.win@37/290@56/14
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://larationr.top/?bgbpbtvq Browse: https://larationr.top/?bgbpbtvq Browse: https://larationr.top/?bgbpbtvq

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, wuapihost.exe
Excluded IPs from analysis (whitelisted): 142.251.36.163, 34.104.35.123, 104.16.99.29, 104.16.100.29, 23.0.174.11, 23.10.249.144, 20.190.181.2, 20.190.181.1, 40.126.53.16, 40.126.53.18, 20.190.181.5, 20.190.181.3, 40.126.53.17, 40.126.53.21, 20.190.181.23, 20.190.181.4, 20.190.181.6, 40.126.53.19, 52.109.68.34, 172.217.16.170, 142.251.36.170, 142.251.36.202, 142.251.36.234, 142.251.37.10, 51.132.193.104, 13.107.6.156, 23.53.42.202, 23.53.42.170, 104.109.250.164, 104.109.250.171
Excluded domains from analysis (whitelisted): res-h3.public.cdn.office.net, res-2.cdn.office.net, eudb.ris.api.iris.microsoft.com, onedscolprduks02.uksouth.cloudapp.azure.com, www.tm.lg.prod.aadmsa.akadns.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, home-office365-com.b-0004.b-msedge.net, cfl.dropboxstatic.com.cdn.cloudflare.net, a1894.dscb.akamai.net, arc.msn.com, cdn-office.azureedge.net, login.live.com, update.googleapis.com, displaycatalog.mp.microsoft.com, geo.portal.microsoftonline.akadns.net, res-1-tls.cdn.office.net, www.bing.com, res-prod-h3.trafficmanager.net, e40491.dscg.akamaiedge.net, prdv4a.aadg.msidentity.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, b-0004.b-msedge.net, aadcdn.msauth.net, cdn-office.ec.azureedge.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, ris.api.iris.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1862
Entropy (8bit):	6.028041712256249
Encrypted:	false
SSDEEP:	24:pZRj/flTUnAQF2SxVmdt2qQLzkaoXP1paUiLRB73UyrjxvHvixLtRxHbVjhoXGAG:p/hUFAdtokakP10H3H1oBhkJvTCgN0/
MD5:	715F8C8615AF33796C7EA8507317F291
SHA1:	43B28F00442A2F0F0AF6A31CBFB2D3BE5A1C0128
SHA-256:	16ECC0DF5EDE3DF6DB43541DEE4F2A0ADF5998D9EE347B1DF6649A839054D655
SHA-512:	2526F9F2B2B1CBDD14244A3FE1D48FFAE46FF903979D5EA91CD3341CFF39F1E09255C6D28EC2B8022E1895B4C2770DC78D4B1D9C5671623F8987DF37E02AECA9
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"BFiBuWFmRbwML8jPQVLzb1pYobWC8d61X9vMjjYED6VpL1l-T3I01O1F7g-6rB4gVOzxZFmk_Ewt-KHLisJZiBc-5BeNjcDi9GW8cs8iRPflZh1ueyuC1voFPbSvuXv1DDkU11La6Dt5UXMMM6i4h3gf6HBiSasG49LcXm_D2C-rCWzgNZRu-eTLyd_KVQTROBLP1czlQYbQ3NRhZdUxXiBS4pHdRHyVKxHkWU5YEf2-a0wfVt3Kg7MBD

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\keys.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3785
Entropy (8bit):	5.9757633732827244
Encrypted:	false
SSDEEP:	48:YDsaFVa7u+LaC8MRxFp9PCCJEMYhWYEWCi60PKEy/++taBDETAo7Usjcs3CFOL3h:UDyq+m0plhYvPuW+ozdswsDm4+y
MD5:	940BBEAF28290959B56D458A0CDE08B0
SHA1:	2784B3934368A10B334A21DB215BC1995CB5C352
SHA-256:	FAC8C14F6D3FCD76FD9CB8065E4494094264C95E7A810E3D4B03E3F016ACED2A
SHA-512:	D85D2717240E1FDF2018394D17EE1FB0D159247C6B5466326846F51B176FC9530859C8482DCA908DDA411A5AC302E526CC9181289FF1B05C56DBC3B83F0C0F54
Malicious:	false
Reputation:	low
Preview:	{"https://polyset.xyz":{"PrivateStateTokenV1VOPRF":{"batchsize":1,"id":1,"keys":{"1":{"Y":"AAAAAQQ7W5gOubJT3kTpzNGsekT9RZPXgXGrOMB2+QPw/ZzAuLrM3kc8eyHuTc1KmKjH4sh5+ev5GCI4HVVd46o6rWvNvk0iZQtVuUPhT8X54Ajebng8v5zUnpnPuTjGqlc7+MM=","expiry":"1723067997855000"}},"protocol_version":"PrivateStateTokenV1VOPRF"}},"https://pst-issuer.hcaptcha.com":{"PrivateStateTokenV1VOPRF":{"batchsize":1,"id":1,"keys":{"0":{"Y":"AAAAAAQn0iKkl4Xm6zKsIwQxrjdWuG5y1Dx/HhjZEzg5gzHs/bMzXRC4YqKI8JtrTOg1kzZLcQT4hDYmeuEnGZRSS4ZBtEVwnbk72AH9CB3041g+A2Y8AvXdrBZyBJaswydxU70=","expiry":"1691836104000000"},"102":{"Y":"AAAAZgStKBZhkdiDfCd2M72lOVQEm/8Gs8OokCr6q689DfraBUy2OAqS3fT3CRtHcIFsHHWTmFKfYNYbhDV9lOTeJiwGh/o2c5kSPczpgca9LEoJoNvCttwUfhzApxRQipTktSs=","expiry":"1699612104000000"},"118":{"Y":"AAAAdgTPJ4DSXNbDsSzd0lau1l+PDvS7j7rvWaXeb8Dq+bVbsHi49gWgtAmOvEhrx7qqlsMbowW9oFp+8hpMz0iPetfzNlpZ/rgchHMVGA2mAcUUD6hZpLFwi/WzzjPNzNjghiU=","expiry":"1694428104000000"},"134":{"Y":"AAAAhgQdOOxzj3+ff1GYbZKKas301vAlY5T1+HuRLecI7+aSpZHiJD

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.7282767291238326
Encrypted:	false
SSDEEP:	3:Sdh8XQHRoVtuHrBqJU:Snx31X
MD5:	B90FE752E1B7C638CB9708756C4AC4CC
SHA1:	7F0A0F38DFD48B85DF60FDABC9EAE72AA89CE5BA
SHA-256:	0370355A34DCD13A4B6DA0458F10880F0153F78E036007656E56403B2F390511
SHA-512:	219A1D0DCA9FA3C4D1898FE996E04314FF0B218F8FB9E587A7EE4907BB3F5E8882059913F5BEDF5DD8A68F10862D0B93F0B4371026DEEF950587B12DB8BC9211
Malicious:	false
Reputation:	low
Preview:	1.8dbdf891d2522487b7bfb83486ea742486c57b13372bbbfacbbd7765b4145a11

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	78
Entropy (8bit):	4.410375303145937
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFIPgS1Cdpvn:F6VlMyPgS1Cj
MD5:	DA8BDE5FB98D623CDEB5FB3E07D738D6
SHA1:	D85D6EDAAA2DFE42FA8F3AFF14C5C19B3A65A937
SHA-256:	3D21BF2B29A7478F37009A0545BE6B16EC4A5514DB141FF976DDA802E2D8DEAE
SHA-512:	FD945C988B1257377D7D5CDE2F532FF136F49BDA1A2953D43EE541D0C2D2D90C0C80A8BE1C725EA21578C444A44055DF24630267A78760E4F20F15BC9E0DA165
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "trustToken",. "version": "2023.8.8.3".}

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1511
Entropy (8bit):	5.971910382297839
Encrypted:	false
SSDEEP:	24:pZRj/flTU3Y2efZGKAf8/fjoYz7aoX5JdSn3S+M71XfQoRb1GqAnB0oXZrQwVg2x:p/hUIRk6x7ak7k3idIK0qAWk/o/AKnra
MD5:	272DE59E719CF6AE5AFF00475BA8A9F8
SHA1:	6A15A369EF0A75942364114897291643EC469DA8
SHA-256:	AD51A8939E8B3F9290E79FF0A6F8F084F333951671003362E9E78A73557D6608
SHA-512:	AD284D81A1545FFA646F90369324D70D8A0F146310373C787D5BEEBBDE4DADC6A8C8EC1650EE86A13AA6AD1F822C075FF7EB2E9F76B3856C330746B1BD676582
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"QBwsShHlWLD-I5Fit7iNJ-8wSchMJeyMoMZ75-CvW2s19SzEJJxmh2Efdan1X08iVBO87_kokERx409evWEbE2CzIiOULU3Fir2t1-YH-MIOirHmWs3rFNiURWi7IcV5Jt0qUPhF7mrFu-Ivu7dB1A81Z3qnojzGTtcHAuX2ND_MxBubm6Y4XQbmXBJwv3N_rz9JquUd1XaO4S0Kh7N53vNjVdbQd3q-DjcoqDJjd_967ni5a4K70KA_2pje9CeexWj

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\crl-set

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	23691
Entropy (8bit):	7.835280228099589
Encrypted:	false
SSDEEP:	384:z26XPKh2vsZUiZeWscfm8/ca3PgQXForZKS0ehJ0tspr6FZ7iUv2wBRmBDO9iK6o:zf58vTsE9ca3YQXFoVF0MJ0WpWXFbRmO
MD5:	5F7EC24E38B591705737FFCD6077F230
SHA1:	B4BFED4DCEE26F306D1D6870DC93A1230E634A4C
SHA-256:	F529476888ED82DB7C3A470C4C018CD7B3E4B4995AB7EFF27764928530729238
SHA-512:	276153ED6B52ED4B8227D97AF5A176E04F627F5DB5461FC25B6BEAFF174E78EAF9EF6956FF2704B0F8F7655BFAF0C51AA2E643E48F39BD21062362FFD4627B56
Malicious:	false
Reputation:	low
Preview:	..{"Version":0,"ContentType":"CRLSet","Sequence":8168,"DeltaFrom":0,"NumParents":214,"BlockedSPKIs":["Jdoa1Yu/z7In2HI7GFfUwY57qnQXtPnv+TZrXoafizk=","li5LVLuYp+5dX+uWM/mR08MwDpUU2t57DU+CjHlPjoc=","yP3cdcsb27WMB7TqhHKH9iZlndZrwQomrdm1dbOgo40=","BN3pqpp59hSYaCMl+ghwJ2cH+5ypU4QSC0aJMmhJT8k=","6of0Yt7v/713daoqS34Py5HCLu5t9p7ZAQDMxzsxFHY=","xj1oxkihi3dkHEJ6Zp1hyXaKVfT80DIurJbFdwApnPE=","ev5LBxovH0b4upRKJtWE1ZYLkvtIw7obfKuEkF8yqs0=","tbqN1/iVZMKInT1kU8hJmMd4JJGbZOoINapimGWRvlA=","wO0gU0a7veButWD1zuAqNjTiR0p+ds+PvvVjuxF90OM=","eBpM8ukkUvPuAdDDgaQhTzkEFlw5CtvWH80RJE4Jstw=","/NdsyiNH5c1bOTR/Uc9DZUtpor/JBzZwpr5H2HAebg4=","lo26afv/Fb83YgiUMa3lp+rUt+rxvnACaBC8V9HGT24=","fNKVt1VEgIq9lAlGbwg3xarcAuM7YVDGZE3goJZZ8jw=","9Sk9R+041MMbLULe47WzrOl8omyirANl42Iu6AITH7s=","nFmjzK6kaZhCsGjPxSz5RdtRmGlXyDLNsYynOEn7ue4=","OUz/WJ5okxLPwHHuC8Gf5MYGIWzlQ0Kd5tti5C27O8E=","NuqWEoyJg5+2IfitDh7gucIgb2Kre02ixnZYk8m3ztI=","pqyh7JgJzFtIIf+dKcXr5lGWC5Gx8ZzIm1Xvh4GKlQk=","MO/kE4JHbDOA8C9+I+ZrovhnsFnuHqaHlrRBuFtdElY=","r1kVG

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9675052942529208
Encrypted:	false
SSDEEP:	3:SdgH1AV0pBFv2sG1+AXQJzJHNx:S0O09v2sGRkNHNx
MD5:	7275534B51DBFC3089B7F98B043A1DD5
SHA1:	7E7D9417D97C504FFA1B920648170FD95AC0356D
SHA-256:	73D907A1513AB4817AAE5DC41C1773415B13DF1EF7C00680B9CD76E5FF2BC4E1
SHA-512:	098A4B58423823F6C407D1F530D79D0FF5E8E605CB7D9F74D7371120B1D0BD5FC18BA45FF778F0C10BF93C027C9CEED6EDE5A973DD5D7C5220EDAA7163CEE443
Malicious:	false
Reputation:	low
Preview:	1.8463394e2daeaaf38db0e04ef21ed8b730260f10cce57bbe257364059b9478b4

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	94
Entropy (8bit):	4.760520139428324
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFJGdWTxruhFgS1Eg:F6VlMuUTxZS1d
MD5:	64BF33F3641E2142521201713E344B2A
SHA1:	81A02FF111FE470E1E9409C1740B38C01F4006EB
SHA-256:	883E930D73EF085AED8FC8E8679F1445BB9FA8B2E1F7C75A7308E3A46872C033
SHA-512:	BD3EA4F8BB030D16615233321AA0B282E9220079DFC68D978C962C0A1FB762881FB6D90AB11A48CC979F2C707BF15755CACB1FE46959AD56FA8D2F4A6D3F6BCA
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "crl-set-6392359939256501274.data",. "version": "8168".}

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://larationr.top/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7132)
Category:	downloaded
Size (bytes):	7194
Entropy (8bit):	5.039288540964329
Encrypted:	false
SSDEEP:	192:0AO6Fatca75GHoJYkyRDVIJi6hJR8OAoAg:0AO6Fatt0HoJYkipIJimJR/BAg
MD5:	F480A9AD29AF0C73E240C15C74F4D8F6
SHA1:	548BD3EE6A5A76FEA7538D3D066DA42626C5DE7A
SHA-256:	27D8EC774E32AB0169E163649AB26AC4A4A93EE9F2F662D5A38B2505241C6612
SHA-512:	570DF00EFB21B82096C0A8A89646B65ECE766494D7FA5517BBB1C72A5E25E1223B77AA275A315CAA72E28AE5B5B75B7A48692FED954EE5310E9D8DC3A1254AF7
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-frame_messenger.min-vfl9ICprS.js
Preview:	define("js/file_viewer/libraries/frame_messenger/index",["require","exports","js/file_viewer/libraries/frame_messenger/frame_messenger_base","js/file_viewer/libraries/frame_messenger/frame_messenger_client","js/file_viewer/libraries/frame_messenger/frame_messenger_host","js/file_viewer/libraries/frame_messenger/frame_messenger_logger"],(function(e,s,r,t,i,n){"use strict";Object.defineProperty(s,"__esModule",{value:!0}),s.logFrameMessage=s.FrameMessengerHost=s.FrameMessengerClient=s.SendMessageConverter=s.ReceiveMessageConverter=s.Parameters=s.MessageHandler=s.Message=void 0,Object.defineProperty(s,"Message",{enumerable:!0,get:function(){return r.Message}}),Object.defineProperty(s,"MessageHandler",{enumerable:!0,get:function(){return r.MessageHandler}}),Object.defineProperty(s,"Parameters",{enumerable:!0,get:function(){return r.Parameters}}),Object.defineProperty(s,"ReceiveMessageConverter",{enumerable:!0,get:function(){return r.ReceiveMessageConverter}}),Object.defineProperty(s,"SendMe

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20822)
Category:	downloaded
Size (bytes):	20884
Entropy (8bit):	5.179492368752439
Encrypted:	false
SSDEEP:	384:7BtIkxiiCGOIMe6Hk2qXQmeb2AVrRe22ZzlKW0kBfnDxzwzTCRNNe3K:7BtIkxibGUbk28u/822PKW0KndUnCLIK
MD5:	E5793F30765B70D11765A5B1EBE56A07
SHA1:	C80E6852821C92D9F623CB9F397C9906412BF748
SHA-256:	DA50BB738AE57B32191AD7DBA3976FF656039909EF316D5A400FC50BD65BA07D
SHA-512:	0235CA310542AB3A06D8D80F33B13D686EC20D11A997452C2FD777C3D4C72852B6E34AE1FF03B8105E56019FA396A23488A3118E83571E75E2D8C3AE457DECE5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-previews_core.min-vfl5Xk_MH.js
Preview:	define("typescript/libraries/comments2/src/components/utils/throttle-debounce",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.debounce=t.throttle=void 0,t.throttle=function(e,t){let o=!0,i=null;function r(){o=!0,null!==i&&(e(...i),i=null)}return function(...n){o?(o=!1,e(...n),setTimeout(r,t)):i=n}},t.debounce=function(e,t,o=!1){let i;return function(...r){const n=this,s=o&&void 0===i;void 0!==i&&window.clearTimeout(i),i=window.setTimeout((function(){i=void 0,o\|\|e.apply(n,r)}),t),s&&e.apply(n,r)}}})),define("typescript/libraries/comments2/src/transforms/index",["require","exports","typescript/libraries/comments2/src/transforms/comments","typescript/libraries/comments2/src/transforms/threads","typescript/libraries/comments2/src/transforms/users","typescript/libraries/comments2/src/transforms/revisions","typescript/libraries/comments2/src/transforms/annotations","typescript/libraries/comments2/src/transforms/third_party_source"],(funct

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9028), with no line terminators
Category:	downloaded
Size (bytes):	9028
Entropy (8bit):	5.2055101815002125
Encrypted:	false
SSDEEP:	192:epfigVSPs7ns7nXpVgAy0/0NxfU/S0fUNRf0QaUax0EUNRf8GKbtOOR74s2:ePVS07nynXpZy0/uxfKS0fORfTaUax0t
MD5:	D66AE4644B136B468507E2E758E2C732
SHA1:	8540307D3EAA68D1540AE501E1D0A65682249B62
SHA-256:	78F204FB7B794AAD7425F3822F1C8C0107F0FA1442369A798AEF0DC6BF35B40D
SHA-512:	1A6564216182A71E63EC83417A3DD5C16FC7AB3AD6DBB5A6EA1957770293D08BB73BE9BE9E185CA55D4CBD3CE529A4373E3F8AE7C1C9FCCA68A40B5D007A7397
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/geminiwizard.js
Preview:	var GeminiWizard=function(n,t,i,r,u,f,e,o,s){this.Id=n,this.NavigationPanelId=t,this.Steps=[],this.ForceValidationOnNext=r,this.EnableAnimationOnTranisition=u,this.LastCompletedIndex=-1,this.StartAtStepIndex=typeof f=="undefined"\|\|f==null?0:f,this.CurrentStep=null,this.IsInAnimation=!1,this.NavigationQueue=[],this.QueuedNavigationTimeout,this.BaseFieldCount=3,this.MinimumScreenPadding=50,this.OrginalItemSpacing=30,this.OnNavigationCompleted=null,this.OrginaScreenPadding=30,this.MinimumFieldSpacing=10,this.StepNotStarted=e,this.StepInProgress=o,this.StepCompleted=s,This=this,GeminiWizard.prototype.FocusAfterNavigate=function(){$("input[type='text']:visible",$("#"+This.CurrentStep.Id)).first().focus()},GeminiWizard.prototype.AdjustMinHeight=function(){if(typeof screenHeight!="undefined"&&screenHeight){var n=screenHeight-$(".footer").height(),t=$('.steps-container').outerHeight(!0)+$('.left-nav h1').outerHeight();$(".screen").css("min-height",(n<t?t:n)+"px"),$(".background").css("height",

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3254
Entropy (8bit):	7.881903934112887
Encrypted:	false
SSDEEP:	48:oUrW498bxWFYf4BohZ5UYosBzQq26oZlaEC/seHdtpGsx1Cgv/fZZR:PrGfoOxBzQqUZeswtpGsxZv33R
MD5:	F8AB974B28712B004AF916D2C01D4E86
SHA1:	E62CD02778BA129D1980C97B70B260D4CC785C4B
SHA-256:	0ADB74E5FDE0A3721A35E40D7E4549DDB0952BA017E7789E7653818BAEA2B0DA
SHA-512:	F135A48DC81A28D572AF87B5BC922CB3F31E30233B92E035A2DFCD292BD1E0757A81B40E0986D606BE3E56E529C316AA507B36AFD995191B238B3A64B568D0D3
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fd.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....CIDATx..[kl.....3....M.....+).....8Q..TZ.H#T.J....G).....r.QJ..."..m..P)$.B.h.B...}..%.1.&.Ml..>.qO...zvwfv..M.I#.sg...y..A.u...Et..d.8.<...c.~f.t'.n.......O...C..}..e.........@.+....N..,.Nu...e...Q..,........Z....=...Y....n.T..&.U.&..l.(/...,B@x...l...$M....;v;0/....>.e.PJ.v'9./z..9a......}/a..\|....`v...+..D.BH.....%{.;0.=..5.9.......0.lQ.>w.J.......0...m........tj,.W..{.).Nu..L...\...m...y.sk..3l...J..:.l......3..v..>V.CD......p..5...s.~..u..3@...`...un.`..@."aY.e....U.(..',...g.e..V-_..Y..s..nf..pV...o....c.f.....4....cnMc>....b.`...L..%. ..ol/...@)#D..?.!?...l.. H........^....b....f.....YAk1...."..j~h..uc.-.<.e...o.s..O......,..^^.(.."....A4$`........>.o!.E.<<r.V.a..f...@.+\&..@.N.b.......3...5.W.T....h...B5.q.J.Q>.T"....M"..=sYUD+......&B.& "..C.X.H......_..U......U...^..S....`,W....m..#M.(5.g.~......._..4b..R.[.R..7.$z....0...r..!":;iY

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	1314761
Entropy (8bit):	5.1925524239668635
Encrypted:	false
SSDEEP:	6144:mZ18TNwHUqPb4QOv3dZ4x8PIQpIhDe6RaHc4Rqt/6QYRED7PWMtyJk7eOMTu82:/TGPkZ7IWy/6QYE6Mt5eOMTu82
MD5:	5D2C52CE84CEC342414F7107AF997780
SHA1:	E0191E76B339716EF03261E8615D63F9F8834B52
SHA-256:	D426D1E999F326BE5531F26282F4E3BB18769CAA4991C618D88B4478A989E58B
SHA-512:	E84693287779C3D868C59E22AABD9FE5B3CB094E34728F5DF82F1F1118B65FF369B940699C502637D1EE5F4BDC0F1881EFC114FC8ACF814C4B021BE89FA321AA
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/admin/css/admin.css
Preview:	.fake{color:red}.k-reset{margin:0;padding:0;border:0;outline:0;text-decoration:none;font-size:100%;list-style:none}.k-floatwrap:after,.k-slider-items:after,.k-grid-toolbar:after{content:"";display:block;clear:both;visibility:hidden;height:0;overflow:hidden}.k-floatwrap,.k-slider-items,.k-grid-toolbar{display:inline-block}.k-floatwrap,.k-slider-items,.k-grid-toolbar{display:block}.k-block,.k-button,.k-header,.k-grid-header,.k-toolbar,.k-grouping-header,.k-tooltip,.k-pager-wrap,.k-tabstrip-items .k-item,.k-link.k-state-hover,.k-textbox,.k-textbox:hover,.k-autocomplete,.k-dropdown-wrap,.k-picker-wrap,.k-numeric-wrap,.k-autocomplete.k-state-hover,.k-dropdown-wrap.k-state-hover,.k-picker-wrap.k-state-hover,.k-numeric-wrap.k-state-hover,.k-draghandle{background-repeat:repeat;background-position:0 center}.k-link:hover{text-decoration:none}.k-state-highlight>.k-link{color:inherit}.k-textbox>input,.k-input[type="text"],.k-input[type="number"],.k-textbox,.k-picker-wrap .k-input,.k-button{font-si

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20275)
Category:	downloaded
Size (bytes):	20276
Entropy (8bit):	4.646578752329214
Encrypted:	false
SSDEEP:	384:wG0HaJ6HQ6O0yWS2UAh+NSa4yofSUHGfw8SAjy8bmeFNUEBgwpUzc1thl/v:wGlic3
MD5:	EDDDB11E353CCF4C3F3CFF1E4FB3CCBD
SHA1:	0B2B90AD66082EFB0CF08549904425E6DA2D56BF
SHA-256:	A3C2604437FD833C0B61934414D6998D1E694DB1905E6B7F4CE19FFF7F9B206C
SHA-512:	9E8D564F0EA8EFF86578758E1CB5F7145285AA3DF60ABBA34D624B148AB9312AD1C0788B539BC29F184731BE2387CD2D82F9CF9C823F7323CC65CEEDF63BDA10
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/components/button-vfl7d2xHj.css
Preview:	.tabbing .button-primary:focus,.tabbing .button-secondary:focus,.tabbing .button-tertiary:focus{box-shadow:0 0 0 3px #428bff;text-decoration:none}.tabbing .button-primary::-moz-focus-inner,.tabbing .button-secondary::-moz-focus-inner,.tabbing .button-tertiary::-moz-focus-inner{border-color:transparent}.tabbing .button-as-link:focus{text-decoration:underline}.tabbing .sprite-button:focus{box-shadow:0 0 0 3px #428bff;margin:-2px;padding:2px;text-decoration:none;border-radius:5px}.button-as-link{margin:0;padding:0;cursor:pointer;color:#0061ff;background:none}.button-as-link::-moz-focus-inner{border:0;padding:0}.button-as-link:hover{text-decoration:underline}.button-as-link:disabled:hover{text-decoration:none}.button-as-link--inline{font-size:1em !important;line-height:inherit}.button-primary,.button-secondary,.button-tertiary{margin:2px 0 5px;min-height:34px;line-height:normal;box-sizing:border-box;border-radius:3px;-webkit-appearance:none;margin-top:16px;padding:6px 16px}.maestro .button

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://larationr.top/aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2829)
Category:	downloaded
Size (bytes):	2888
Entropy (8bit):	5.153593191475632
Encrypted:	false
SSDEEP:	48:94ebwVcG9j0SsIG2biHqYHyHDu2Bm292RQHy7nHBtYH1qIgDR1+F+QPE:ifSCrsRWHDuSmIQd9ygNgF+QPE
MD5:	7B52E4910C2BDC93D71E44D336A78598
SHA1:	A3546AF5945F8D48C83DD2CA6857228D3E2BE7BE
SHA-256:	99AC0C4C15C61BBDC405911CC0CA35854057E7D058E290CB1C9782D5663F497F
SHA-512:	E85B28D400B2312CD9DDF7B18903864516D05805D429EA27096157B0885B6B1B9879FCA5677291EC624169D7EF0C64CA77C6F6837C67CC14110CC73FE79FF868
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-thumb-stores.min-vfle1LkkQ.js
Preview:	define("metaserver/static/js/flux/flux_store",["require","exports"],(function(t,e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.FluxStore=void 0;e.FluxStore=class{constructor(t){this._listeners=[],this._dispatcher=t,this._dispatchToken=this._dispatcher.register(this.__invokeOnDispatch.bind(this)),this.__hasChanged=!1}teardown(){this._dispatcher.unregister(this._dispatchToken)}getDispatcher(){return this._dispatcher}getDispatchToken(){return this._dispatchToken}addListener(t){return this._listeners.push(t),()=>this._listeners=Array.from(this._listeners).filter(e=>e!==t)}hasChanged(){return this.__hasChanged}__emitChange(){this.__hasChanged=!0}__invokeOnDispatch(t){if(this.__hasChanged=!1,this.__onDispatch(t),this.__hasChanged)return Array.from(this._listeners).map(t=>t())}}})),define("metaserver/static/js/photos/thumb_loading/http2_thumb_loader",["require","exports","metaserver/static/js/photos/thumb_loading/utils"],(function(t,e,s){"use strict";Object.defineProperty(

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 304
Category:	downloaded
Size (bytes):	237
Entropy (8bit):	7.158372995551144
Encrypted:	false
SSDEEP:	3:FttB8OYTnaz7uTIWavod9IShrUiOLf0ly4/R/deW3mClsWjR7n5i9A+0//6Mk+6C:XtM+7xWko1hr8MFp/wWxsWjNnw0Xjpn
MD5:	D33183F5951A184661A5749DAC3C4417
SHA1:	194B86ADF069203807F1FF5FDB313F4BEF805218
SHA-256:	A01EBE1C778FBB10A326F3EDE0C4508B6F0C95DF2DF35AA0568A4518359836F9
SHA-512:	58BD91619274E33087C6D689000CDBA5901B46F31E0CFEB618D0FDB3CC23A8B61D9B261351588F1558951E924CB9749FA3CD6201D3061533E1E099E6A5F4A631
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_pifs~paper_view_only.fe9af606aefd018129cf886d5e3f19606dbbddff.mvKRac08CsxdXTXpXg6mjQCKhxzd2p4syHrGl6RwLsM.css.gz
Preview:	..........=.MN.0...=...JM.".4.7(.$...3..&..v.P..ch.j....Me.G..h..`...{....7VF.m..S.H>w.D..z.Tt.2....\v.[v'....-...q...j..2...q.E......R..0g.?qY.....$s...!8?............)?...;......7.....?+.=p.j F....[n......4....+.R5AXo....O.0...

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1859436
Category:	downloaded
Size (bytes):	469221
Entropy (8bit):	7.999149070992449
Encrypted:	true
SSDEEP:	12288:lmNfmCYxQHjN2ciht4kwVUjBv0JhDb1U/:oxYxyjA0nw
MD5:	205880BD7552C8BAFDD196C2941135AB
SHA1:	F587AB4FB09A40B0C0B0301558843DE61AFDA406
SHA-256:	67CBD2D77BC19B6D9E48E5DE24ACC7BC63E5FBAD63916E9D787D2F63D2307A21
SHA-512:	DA9F6F4FFAA11A6EC8FF9D207708D249CA2DB35E3838910F9B985AD1C61826410981F3882B26DF941C25F041DB90B6953148A1DB044952D2D6DF2C7F8BF2626B
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/560cd16fcac899cdf8de.WBtKv9t3muteHSopmtHgmdgdVDNvltp-EpSjhpmmA2w.js.gz
Preview:	...........kc.(.].Bf.:..Z.W..a\|.z.g.:~.$q.ZZ.$.......[.oU. .>$..d7.....B.P(................9...a..............jM....1&..=.....(.{.`.{..c/......Y,?...0.......~".<7..En....\|.t...;...cwfn}.Z.(.y3....B...ZO.....~......y.A}..Lm..c.I.M.f.O.n0e...I[.Q.c..C.{....7}'4.,;.?.,.?.?Yv.d.ZO.g.......t.G..n.G.i.Q.(d.I.=...i.......OZ..0.;.....?.Q..s..i..&...\|.....8l.....j...lY.5.....&.......=t\|..7I.ah>a..M.ho...jtjZ<q.Qk.~77.....gJl ...7..Z.K+..[..9.<.......!...#..C........Q1-.q9...c.a%.X,....X...\|@.#I.(....k.5.H....J..X. ..zM...T..U.M..4..a..C..i..!..a7.'.K..<bX."..5u..Q.z..s.'}~f....:.3.R..&.t.....8...{...c.. >...JM#T.............f.V.....;..x....5ik...61C.8>U..`.0....Va.vlK 7=.....V...P.f.E..>Y...U+]4.\|j1.....\|.2....e.\|-.....}/o.(........bR.O[V...9,.K.c.E......\|...?......l.6...........YF`CA......!G.O~s..{..!L....Y".f..n._?/..D..........!...G.g.c.7A.wh....v.h5o. ..2...-.Qcn....X.8_.i...U...P"..F.....K\|h.J..e..k.n~.l..!....-{.......nZ..KA......G

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3037
Entropy (8bit):	7.91875067094988
Encrypted:	false
SSDEEP:	48:ozf5ipgAwSJel7pU7/2ZsofMqeJ71UFDkP4KfD3xJyAsNuVg2o:0qK7pUbWfLzW4QJVg2o
MD5:	C4CE23F7313E8E2319F10E4D8AEB20D1
SHA1:	EBE18FA8C318E3BA6D54636FCA980996B183172A
SHA-256:	E2D2BC5EF69F49E711E2147DA9D5A5D67F478312D30D78AE486B0E1763AF0430
SHA-512:	98E07B9E4D7C40E245BF39071A879E6E094AEB5F2B3B264E0ACA1730B58B4CC8B84664A1F24174966FACE6642033E592F3A58F3C956B346DCE98A8D745DD0E48
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....jIDATx..]...u....G.t.F3.lF.F+...z..uH.IX....b..,!^...1.].....0..<..$.iE...."...`0.b.<..M...H..dY.W..vF.QU..<T.LWwUu.L......{...O.s...&...'~...G.L#r..W"q'..>......lV..N<.s.U..ob{..\|C..k}!.....?.....?,..j......z....}v\.-F\...../._.,..b...nn?..G.E..P.....'gBV..M.T.}...n..(.!..\|.+..z...g...6.......c^....5..........c..`...C......Gq...Xw.8{.?4.6..".{j..P..u..h..c....}.^....B.......q.5.Duk[..C........i..3.#..<.......D..;c+.Y9..1.....[.u`...`.........W.^>....m-X..8vy.g=?..WI...`...1.Ml.3.v.!.s...@..g..!#....+m.^`.....S.....Z.~....~....~FJ...%?.....@...?.b....G.C..:...W.ucM..?6W9st..s..D9#........W..Pu.....5pTU..g..\|.....p.....x@A..4=....(........U.m..........?..0F.Y-....P..........Z..S...7.BW.3wo........A..=..1.y<...;.....R...,J..b.........R.f..A.....>...Pv..C...g.....z.vF...3P..V./3^Z%...F.]~._..F..... .(R@UA..P..<...jz,hT....Y)......-.d.RvQ.a?..

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (843)
Category:	downloaded
Size (bytes):	899
Entropy (8bit):	5.118254809878975
Encrypted:	false
SSDEEP:	24:1bmCnDKPY0B4hOzkmc1yOLBoBZzWxrim+NLJGLS6yjwJ7WLa:1aJrUm4o6xr28Qa
MD5:	BAD4EF0AD1248A3871DBD29D21AD9BC1
SHA1:	3C1397F92451BEDF302D73C879E006F71DE08F8D
SHA-256:	EC373644891C597BB41C46D066EBCFD6AB2F51E2440D585B579BDB6EB45F158F
SHA-512:	12AE3C6C69CEDFA6FA4234334B56433F7819D87DF354BAD861557896BC5359FB7E3E9048F74DE5F01902A6D989E5FEDF17D43A4BD0660AA5EB0D509CDC0FA604
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/clean/flash_pagelet.min-vflutTvCt.js
Preview:	define(["require","exports","metaserver/static/js/core/i18n","metaserver/static/js/core/notify","metaserver/static/js/core/html","metaserver/static/js/core/toast/toast_on_init"],(function(e,o,t,i,s,r){"use strict";Object.defineProperty(o,"__esModule",{value:!0}),o.utils=o.initialize_module=void 0,o.initialize_module=function({message:e,isError:a}){window!==window.top\|\|o.utils.cookies_are_enabled()\|\|i.Notify.error(t.intl.formatMessage({id:"G39vbK",defaultMessage:"Unable to access strictly necessary cookies. The website might not function correctly."})),e?null==a\|\|a?i.Notify.error(new s.HTML(e)):i.Notify.success(new s.HTML(e)):(0,r.showToastFromCookie)()},o.utils={cookies_are_enabled:()=>navigator.cookieEnabled?navigator.cookieEnabled:(document.cookie="this_is_a_test_cookie",-1!==document.cookie.indexOf("this_is_a_test_cookie"))}}));.//# sourceMappingURL=flash_pagelet.min.js-vflxY9qQE.map

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE1LjAuNTc5MC4xNzESFwmmQ-Yw6hifvBIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 134107
Category:	downloaded
Size (bytes):	30097
Entropy (8bit):	7.988708194449055
Encrypted:	false
SSDEEP:	768:am8cpNWE/3BJpWhmZct1itvC7c8v8FeawS9r8SR8V1qvT:d8cpL/3TRZw0tv+c+kwur8a+y
MD5:	892A28CAD5DB513D7228CDC6E6834B18
SHA1:	D4FDA482B754D1D6A8373377AAA7F626EABA6B12
SHA-256:	020C036F013F589194A338F4C79E0C5C181F4FFDB11A3B735B7E7E9B10C6DA60
SHA-512:	2F65A72145626F9ADFF4D954A2BAA7BE38DBC154F33C104EC94CF016D24105F9683596A096697D850F22032E0100B6D601AC4104647183BA9206BB3082AE76EC
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/c861c239bed0e42e4847.obO1giTD6WsT4sESd05O8sH8NTRGNr7BFGTPTNoAoKo.js.gz
Preview:	............n]....O....`.Y.*.d%....F.^...a0.m..E...x.s...o\.jNR2e.9.....8f.Y..o...w....wg.....~.._.z.[...\|w.o....................W...?.}{I....__........o^\|....=x}..G......./.y..........O~x...7oo...}..g7.wO.......y....._^?:}.?{.....on^....oO...~}.........._.~..\|..........x..o^........5=.\|..W..'..o..\|..W.\|.s......~.....y..w..._....._.l...\|.7..2..o......^O/.+.._}.z...h..S.gs..p......~......~...5.y..w..........se.t../.y..).?.\.z...z...;..........S....~..4....w...{...z.....4..{_......../...{...v......+..{?..T.,......zx....,._..............[....:.....o.XK......^...........g...}rzC...._.y{....?<.I#..../.^.....Ow.on.?}yzvv..oO>......O.?zq../.C.../....7..o/....kZ.._.NY.:.....(......-.....o.\.....G_\.\|s.H...'.\|u.......~:..Z..V...{.......J.J?.........._>:.....~}......$G...../.>zu.J....__....O^<}.Y(g.,....J.u.......nY.IX....I.g.z......$W.~jHwg!TdW.......w...ROw..6>w.,..{.....R/...+._.<H......~.O.......].....k.l....

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25173)
Category:	downloaded
Size (bytes):	25228
Entropy (8bit):	5.276344438891898
Encrypted:	false
SSDEEP:	384:biTqJpGdQ8v8YlMZTJrx5+3d8K/So8yBYEXr9+nh0GsCiil2KMdU:bi5dTv80MZt15+3d8KhBYEXxAcCiZ6
MD5:	E494BE7ECA7457AD869FF4168BB9BD56
SHA1:	1F3291DED23CC068BC86D5D9D7B13F0F763E5AD8
SHA-256:	609D8D372FC01CF960F8C78762D4A1110C6819CAC653ABB91645984D94664C87
SHA-512:	3653BE3DD9AA263DADC39DD98225C57126942FD285ECBF82868C87465D352EB616242E64DE109A489EB805C3ED97E59CFF10CB7784F4C2873FCC96B3E9176442
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-external.min-vfl5JS-fs.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/_commonjsHelpers",["exports"],(function(e){"use strict";var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};e.commonjsGlobal=t,e.getAugmentedNamespace=function(e){if(e.__esModule)return e;var t=e.default;if("function"==typeof t){var r=function e(){if(this instanceof e){var r=[null];return r.push.apply(r,arguments),new(Function.bind.apply(t,r))}return t.apply(this,arguments)};r.prototype=t.prototype}else r={};return Object.defineProperty(r,"__esModule",{value:!0}),Object.keys(e).forEach((function(t){var n=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(r,t,n.get?n:{enumerable:!0,get:function(){return e[t]}})})),r},e.getDefaultExportFromCjs=function(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}})),define("metaserver/static/prod_assets_web_modules/dompurify",(function(){"use strict";

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28110)
Category:	downloaded
Size (bytes):	28166
Entropy (8bit):	5.290290829211019
Encrypted:	false
SSDEEP:	768:bTFQpQUrqBhUdHsmMLAcW9+2AGnb0ZpHnf0CS7NnLNIE20U72TSdG18SUsBx9P0F:bTFQpQUryhHNA/a8cST12SUgxB0TFeUD
MD5:	3B68F2F4564E72F31EE07650BC4918DE
SHA1:	90029594EB4FBE9C4C1D5E26236AD48FBB0BEFBA
SHA-256:	2E711D3F2D75D29475DBD3A1B0B256BA92D8A737A579E6C8DF38E6E80B05BDAB
SHA-512:	C6FB7BC76C034A1A0ADFA6DD37765EF948AB85482FCFF731845AF02C66A66F67AABD9669A144A6CA9DB6EEDA7321439DDA932C4BFF368E43A0085AB78EC6378B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-chips.min-vflO2jy9F.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/layer",["exports","react","react-dom","../../common/index.esm4","../../common/index","../../common/index.esm5","../../common/_commonjsHelpers"],(function(e,t,n,r,o,i,a){"use strict";e.ELEVATED_BACKDROP_INDEX=i.ELEVATED_BACKDROP_INDEX,e.ELEVATED_BASE_INDEX=i.ELEVATED_BASE_INDEX,e.Layer=i.Layer,e.LayerContext=i.LayerContext,e.MODAL_BASE_INDEX=i.MODAL_BASE_INDEX})),define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/motion",["exports","react","../../common/Transition","react-dom"],(function(e,t,n,r){"use strict";var o=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var r=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,r.get?r:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)})(t),i=e=>e&&e.scrollTop,a={enter:"cubic-bezier(0, 0.6, 0, 1)",leave:"cubic-bezier(1, 0, 1, 0.5)"

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	159373
Entropy (8bit):	5.226444625327631
Encrypted:	false
SSDEEP:	1536:WgFAhcPyCrbqhRtFV1l0UBVHyfN+e/KOoF07JWwhmbkxXnFRGvTWlGWLwD3CyY8T:W0SCUbyfMe/KOwNDgxVRGvTgGWCTT
MD5:	B4CD7CF90D9F0EE2D9D5504FEF529244
SHA1:	7EDE840F4CBD9FACB3AD35B552E040FB367DB70C
SHA-256:	41A8EB2356079E81D6A1166D5872E9F4BDF6BAE18699A0A552510CA518FC30B8
SHA-512:	7E8C1CE637B0B484B4BABDD7BC7C61A277306D94F837C92EAAA027248ADDE3E5612113D1D0B4BEEC0D807B6F2F9055E087E486B018F4F8CF45C296788534505C
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/jsc/angularlib.js
Preview:	/!. AngularJS v1.3.15. (c) 2010-2014 Google, Inc. http://angularjs.org. License: MIT./.(function(n,t,i){'use strict';;function v(n){return function(){for(var i=arguments[0],u,t,r="["+(n?n+":":"")+i+"] http://errors.angularjs.org/1.3.15/"+(n?n+"/":"")+i,i=1;i<arguments.length;i++)r=r+(1==i?"?":"&")+"p"+(i-1)+"=",u=encodeURIComponent,t=arguments[i],t="function"==typeof t?t.toString().replace(/ \{[\s\S]*$/,""):"undefined"==typeof t?"undefined":"string"!=typeof t?JSON.stringify(t):t,r+=u(t);return Error(r)}}function wr(n){if(null==n\|\|vr(n))return!1;var t=n.length;return n.nodeType===at&&t?!0:l(n)\|\|s(n)\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in n}function r(n,t,i){var u,f,e;if(n)if(o(n))for(u in n)"prototype"==u\|\|"length"==u\|\|"name"==u\|\|n.hasOwnProperty&&!n.hasOwnProperty(u)\|\|t.call(i,n[u],u,n);else if(s(n)\|\|wr(n))for(e="object"!=typeof n,u=0,f=n.length;u<f;u++)(e\|\|u in n)&&t.call(i,n[u],u,n);else if(n.forEach&&n.forEach!==r)n.forEach(t,i,n);else for(u in n)n.hasOwnProperty(u)&&t.call(i,n[u

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	497
Entropy (8bit):	7.471761176000909
Encrypted:	false
SSDEEP:	12:6v/7iby0CDdAfPcBsKDs0TkF4yEiwWh9j3xYC8tqYAME1:py0KahKDtTkFjGWh9CCiqYAMG
MD5:	EC2E6E18A914B2BAE990F7CC9F8CD4DD
SHA1:	33E2B67E19BB8C21E4C36902316E0B00F7FA6017
SHA-256:	C0BCE318A2ABA982ED09E4C18146D93CB202B71AF00FC0764FF794742D83853C
SHA-512:	5727FFEDC630901DB996A97AE7964793E780B3663D37AB5ED0FAD7FEBC9EFF5F198C55D98E21F6DDA8AA934E6883CCE1E6DC4868C5E31057852C75C6B6E2800B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx..GCQ...2Z.BP...JH...Z(.B.-@IK.B...& ....@...d..A..%v:.c0.k.}....w...{..C9.4a....F.\6.d...K..(...K3l........0...o.I@M.=.v=..B.'.^.8.!..f~!..z]..V..l..CD...4.i...&.5.....1...\|Gq...^..`......3.......x.....Q...Q....8......E$.u3..~j.A-z...n.qG...\9......C(..j.#.o..C.z.w],...-.t..v..^.F.....S.z.....7...ly.":..4...]}...e4......../.... ..../........P..3.."9.H:...te...b..)x...lt3.7.XA...byo.w..2F.....W....}...:..)..TQ5.....IEND.B`.

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	5.203798256318991
Encrypted:	false
SSDEEP:	12:U2eAi/ZuYUQxkNP371H5ouSA0CVKR/x6rgYaTmoGcvsMzIoHeBnIocsAvMTIoHew:xeAi/ZuYU7Z371HOu70CViTmzcZU1csP
MD5:	4543CAF91ECBD94FF3BFF234652E3D97
SHA1:	DEA98275BA5D8B807FF6316F99AB657862311794
SHA-256:	A99D90BAC5800A50D031C14820DFCFBF89F9F87FF7A533F0DF41B4AC7C079D77
SHA-512:	CDC9D92326BD7856E3092945A142AD10A46BA7D20741D3231EA151E8D97E39253704AEA952D77F1DB74FC6B9118C98A4D5EEBC541E41D3944A0F1E5B256DA0E5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/content-icons-vflRUPK-R.css
Preview:	/ @generated -- This file is automatically synced from dig-content-icons@3.7.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-ContentIcon {. box-sizing: border-box;.}..dig-ContentIcon,..dig-ContentIcon--overBase {. --dig-color__file__container: #f7f5f2;. --dig-color__file__shadow: #bfbfbf;.}..dig-ContentIcon--overSubtle {. --dig-color__file__container: #fff;. --dig-color__file__shadow: #bfbfbf;.}.

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.213873657284484
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1DSdU8uiXcFDJ8Wg6n:MMHdVBKW/UT5bAkdu6
MD5:	9CC92EF9082283714F2BB00AE05D6DC0
SHA1:	BB6A6B72864CA469F88487B7AE07243E794400E4
SHA-256:	A2435E217FEEBE70621C954CA302A18B9ACA593FF67BE0B6CD3769E2D0F6A000
SHA-512:	A4210E1D1AE6282CEA6EAF8BE585B4A29E78355768A4EE3773AC90AFEB63ED8D8AFCEC57DAFD9B04352BF38BFE42F3ABBA59FE73101277CC3EF53CE415622367
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/scrollbar/arrow_staticdown_16.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:0687816b-601e-004a-09d0-cb694e000000.Time:2023-08-10T21:19:45.1102027Z</Message></Error>

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73377
Entropy (8bit):	5.217754575718506
Encrypted:	false
SSDEEP:	768:l5RC6tHbUu04Lg1CjkZNF4CHvWKGgKK8CwTTNO09k8pgVMdErUUXH53mZyLeaWvX:KvhhggCdErUqcguMonmif
MD5:	35F348A3A4D49ED05B2A9444CFA374A1
SHA1:	B836B0458518706DB832927B68E2BD9E9C83C323
SHA-256:	43F026E94CD9E4D4AF3AE142047100B62EDD72B6CB0BA0A625D31F564E65FE5F
SHA-512:	617720411DFF0178FB3C2F71AED4AD2464B40AF100077FA408058700F72B38CED21090B7A12E7DA87C4CCC9E885EE2CAB01AF81468B8ABC98513741DFCD4169B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-timing-new-proto.min-vflNfNIo6.js
Preview:	define("typescript/dropbox/proto/js_init_data/web_timing_logger/web_timing_logger_pb",["require","exports","@bufbuild/protobuf"],(function(t,e,i){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.WebTimingLoggerServerContext_DWSOptions=e.WebTimingLoggerServerContext_SourceType=e.WebTimingLoggerServerContext=void 0;class n extends i.Message{constructor(t){super(),this.isDws=!1,this.sourceType=s.UNKNOWN,this.subtypes={},this.url="",i.proto3.util.initPartial(t,this)}static fromBinary(t,e){return(new n).fromBinary(t,e)}static fromJson(t,e){return(new n).fromJson(t,e)}static fromJsonString(t,e){return(new n).fromJsonString(t,e)}static equals(t,e){return i.proto3.util.equals(n,t,e)}}var s;e.WebTimingLoggerServerContext=n,n.runtime=i.proto3,n.typeName="web_timing_logger.WebTimingLoggerServerContext",n.fields=i.proto3.util.newFieldList(()=>[{no:1,name:"is_dws",kind:"scalar",T:8},{no:2,name:"dws_opts",kind:"message",T:r},{no:3,name:"source_type",kind:"enum",T:i.proto3.getEnumType(

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 166176
Category:	downloaded
Size (bytes):	49931
Entropy (8bit):	7.994340401208441
Encrypted:	true
SSDEEP:	768:VOn1GMwsn4ghCXDq6+MH+YRv295JuJ1J9oft4uL5WL6G3IXM22TEwm54vijbJ4Qy:VO1G3o4gQe6+OXf8fC25G3IRwmiqwSs
MD5:	C2295F578375683A6FB54652CBFD7F4B
SHA1:	5C521BCA654705D1606BB23825203F3EFC81EF01
SHA-256:	BAD5652F70BB9EC010C0B2BFE31FFFD8E80B517B2C30CD4E8BFE1ACC5514B5E0
SHA-512:	95A773C32221606C32FC32DB5AEAA726F9D3090F5FB2249DA00FED65B93E5E1C2AE40E3B3EE9287A761CF9A5480F01E463C89DAE1772DF5E987F9919B23443F2
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/aa7bc43daf3c3d0c03a8.i3qsTcFgoOzzyfb1BvKL1Ngsl_TBIEdwWAwwi2z1rq4.js.gz
Preview:	............z.H.'.?...c.-...B..+.r..].r..G......6Dh.P.,i.y.}.}.....N.".7...[w.l.J ..........~....G..x.....{;....x{..7..?>......_,.I..P.....q4>...g..8===......Yr%cN..x^\|,f.$...$]....(...(....\|...92..5<W=._wL......(...n..{...z.Q..l..W...$W,......Y.+.f#.b.`o:.gY<V.h..Obe."....+..<...K7....2J.m...t..GW.,.E.S..L9.R=.Q\|.+.2J./.i4....i>.zd)h..7YFz.G.<....uZO.D.l4.........?...XO.gO..6{..j{....F...~.%q.)...,.s....]P.F...5.>.\...1..)Z.q>.........h....4...E..Z.F.z=..-.)...j_U.o...__..}..{..w.......}.l.}....Wo...Ke.....z...2.'.t1G...S.3.3.....T4)..G...6;[Dg.r.^....H!.:.f...8F1..\|.G9.....=.H.....}..{..,...' d.4#.....?/N.....FW.ao.......?.....y.(.z............^..._.)o.}..{..W..}no.>.....}...y..1uU9K.(Q......('T......c....$.g...8;..^qa.%."....E..j.d..(Y.\|...I4..6..q.L...F.G.+._..h.4..4...."J.+..l .r>..j5._Q.(JI/0v.7jeD....re.W"@..I.Q..(h.}..y\....qJ..t....<.......q.g..g.X.~...(.#..L....lPo1....Q..YC.>U.9.gJxN.}./.?.D..dmi.Mj....+].4..y.\|.L...Z.2[....-n.

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	117238
Entropy (8bit):	5.027158817297173
Encrypted:	false
SSDEEP:	768:biXmu0XAuNlHotiaqrmklMie4HGSjIelkkPIfSKUh8Qt9PLoHmNDtDHOH9HDQS:bDuSbN1mklA4mkFPIE8o9TogHOH9HDQS
MD5:	72BB4D66AF1E49A8659C0AE9FBBA1AC3
SHA1:	C41ED00AD16D736146FEF8E219435CF54BCB1080
SHA-256:	C323870A4A66605933E5951C91F28A91BFB002AD3EB9BE5FAD5C713A29624826
SHA-512:	8DC25F132FDDFAB35F024AD6F798700F0D8AFFCD76327445EE147B50A0785E715E56C02C2AA95CC4570E424A5BF2658B1D4310FDE35BF4817F993BF126553D7C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-b.min-vflcrtNZq.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/index.esm3",["exports","./index","react","../react-transition-group/CSSTransition"],(function(e,a,i,n){"use strict";var l=(function(e){if(e&&e.__esModule)return e;var a=Object.create(null);return e&&Object.keys(e).forEach((function(i){if("default"!==i){var n=Object.getOwnPropertyDescriptor(e,i);Object.defineProperty(a,i,n.get?n:{enumerable:!0,get:function(){return e[i]}})}})),a.default=e,Object.freeze(a)})(i),s=({className:e,onComplete:i,value:s=0,isIndeterminate:b=!1,inverse:t=!1,"aria-valuetext":k,...o})=>{const d=Math.min(100,Math.max(0,s)),r=l.useRef(null),[c,u]=l.useState(!1),m=l.useRef(null),f=a.classNames114("dig-Interstitial",{"dig-Interstitial--isIndeterminate":b,"dig-Interstitial--complete":c,"dig-Interstitial--inverse":t},e),g={};return b?g["aria-valuetext"]=k:(g["aria-valuenow"]=d,g["aria-valuemin"]=0,g["aria-valuemax"]=100),l.useEffect(()=>{s>=100&&!c&&u(!0),(()=>{const e=Math.max(800-d/100*700,0);m&&m.current&&m.cur

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.182498575196669
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1VGUo/INkleSFDDPd0Xg6n:MMHdVBKW/UTXDogNklemN0w6
MD5:	C7CB24B7E4AB4797D9243AE5368408A8
SHA1:	12D7F984EF7068018DCA943E1D45709E4593A466
SHA-256:	3967DE0F7AFD863C0565D099DF4D5E9FC2F2B9484B4BE5568E19057FA395F810
SHA-512:	D7EAFF2F0FB6F3B2994FB4C1866722371C415012F0EECC988C92BADCEFA5FA2BE84D92D838D10A18BA0AF368A4643041501D0627A090439DFC9DA4ADD967119E
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/spinner_16x16_metro.gif
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:52d6e231-001e-004c-50d0-cb5af1000000.Time:2023-08-10T21:19:45.0813815Z</Message></Error>

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.302188378686774
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1DSd4SClHLcFDknBWo8g6n:MMHdVBMHgWdzR05D9jrkgnBWox6
MD5:	30AC6E797F3F096C6D2943365612BC0E
SHA1:	BAA700035D33366113A5A510532BE3EEC1B0E63A
SHA-256:	24782BA9E89E83344B50FE3EF388EFD8B79CF43E84541EFCE28A58A658FBE98A
SHA-512:	5B02B6E53E8E1850C8366D8CBFB8243C37F5101FA09875362E561C8D0C3A5A41BBC1EA9F38C0C700914782D8860C60EFCC1F521B6A207B9E9EC7E70D23DAFD3A
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/pagelayout_nav_highlight.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:06878095-601e-004a-52d0-cb694e000000.Time:2023-08-10T21:19:44.5585173Z</Message></Error>

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6805
Entropy (8bit):	5.0695268080762395
Encrypted:	false
SSDEEP:	96:EcnAwv2P7VW0NSlTrMFMFCgjXksPsNA4mWTrY3aGoDf:BAU2zVW0NSdaitIrNf
MD5:	652CC043920DC6F065D26942459CD574
SHA1:	3BB112BC09B852BDC78C814E0F643434EBD47B75
SHA-256:	CFF06C4A63AAE8153E0BB2EC323FADA8AF75B6FD4BD133156BB74555FE6E6AC9
SHA-512:	CF4D7F9425F2EDBD8DA1B8F12CB472CA5AE16DF75206A51D2A08D88B85AC1A91EA444089BD195CC7481D8043F1320B0BBFCAA7006D73DD7B133C37C3329A941F
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/fluent-background-sources/header-default-desktop-652cc04392.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="2560px" height="340px" viewBox="0 0 2560 340" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com/sketch -->.. <title>Background_2560px_Transparency and gradient_9.6.18_Ignite</title>.. <desc>Created with Sketch.</desc>.. <defs>.. <linearGradient x1="50%" y1="0%" x2="50%" y2="36.7807904%" id="linearGradient-1">.. <stop stop-color="#F3F2F1" offset="0%"></stop>.. <stop stop-color="#F3F2F1" stop-opacity="0" offset="100%"></stop>.. </linearGradient>.. <rect id="path-2" x="0" y="0" width="2560" height="340"></rect>.. <linearGradient x1="46.43137%" y1="93.8222137%" x2="82.3039269%" y2="0%" id="linearGradient-4">.. <stop stop-color="#EFEDE9" stop-opacity="0.2" offset="0%"></stop>.. <stop stop-color="#FFFFFF" stop-opacity="0.25" offset="100%"></stop>.

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.296755214843028
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1ArAUbbHdXpXKFDkAQ2dXg6n:MMHdVBMHgWdzR05AMebvXegAQZ6
MD5:	EA49E4475E100DD4629242D5E4C7822E
SHA1:	C0311B59901BDED3C1AA27822A67B96BE7E6F677
SHA-256:	E4D1F87D1BB470522CDAD5E9EEE5FECDCE5CAB0021B0F6C2A5A952F65A78F1FE
SHA-512:	D0C9A1BE9633F9BAFF23DCBF204B77F5AADD97E4C0AB00A77EC03572C9F0417B07418CEBC6B06451019DE768D04DDC14BACBA280604A06A8E7811F161277B87E
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/pagelayout_mos_background_right.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:e876c557-b01e-0014-16d0-cb82ae000000.Time:2023-08-10T21:19:44.2587097Z</Message></Error>

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6447)
Category:	downloaded
Size (bytes):	6504
Entropy (8bit):	5.388895169897931
Encrypted:	false
SSDEEP:	192:bRCOiynUl1ID6dECzMC4M2Gy4Kem39ICnVBC:bQT1Jy4KemGAC
MD5:	34D80A0B40836B991C9559F082A05815
SHA1:	D01152455AF2BE63053F4A090F10826E97648C74
SHA-256:	326B9376E617EFFF605050AE0AA5951398B0A77905497B69DA6E1F8EC269EBA3
SHA-512:	FDA538A1C7FEA4C21E973AD8D3870BFBE9E58B68BCD01E6B0F6176A8B6DAAF1FB0C77CC837BFD0CC56729C84F99E169EE6CFB7F5F969D7A7AFF3FED3CA718A6C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-avatar.min-vflNNgKC0.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/avatar",["exports","../../common/index","react","../../common/person","./hooks","../../common/index.esm2","../../common/_commonjsHelpers","../../@juggle/resize-observer","../../common/useIsMounted","focus-visible","../../common/pictogram_icon","../../common/chevron-down","../../common/index.esm3","../../react-transition-group/CSSTransition","../../common/extends","../../common/Transition","react-dom","../../common/index.esm4"],(function(e,t,a,r,n,o,i,l,c,d,s,u,g,m,v,p,_,h){"use strict";var f=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(a){if("default"!==a){var r=Object.getOwnPropertyDescriptor(e,a);Object.defineProperty(t,a,r.get?r:{enumerable:!0,get:function(){return e[a]}})}})),t.default=e,Object.freeze(t)})(a),y=[["medium","standard"]],b=e=>{const t=y.find(([t,a])=>e===t);return void 0!==t?t[1]:e},x=e=>{const t=y.find(([t,a])=>e===a);return void

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	220
Entropy (8bit):	4.985014409688824
Encrypted:	false
SSDEEP:	3:F+uMXDwKoB6/Q5i6IKBfbtRQ52dlKGgEKhY4LGRFOh55bsLyWrE0D7/YpHhJ9ZPO:F5MTgf5Z3BTtWaK5i4ycvAVx0lf9xPGn
MD5:	330A8E9C74137672E55805B776D73023
SHA1:	07AB02635654A9C6BAF75340CF21561BD40A202F
SHA-256:	E5C5BF79C77EDBD9EAE2F3997076633FC776F663153193A0CA7EBEED01CF98C3
SHA-512:	0C670909B9C9761CF495DB85E0E4F805D5C9F0822D9F11440477369E6F8BCEDB3B5542B4CED5C9D93F61F0C7F58A963FBB81D1E74ECFCD75B2FC28823B9D7A00
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-react-libs.min-vflMwqOnH.js
Preview:	define("metaserver/static/prod_assets_web_modules/classnames",["./common/index","./common/_commonjsHelpers"],(function(s,e){"use strict";return s.classNames114}));.//# sourceMappingURL=pkg-react-libs.min.js-vfltloBxh.map

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4787), with no line terminators
Category:	downloaded
Size (bytes):	4787
Entropy (8bit):	5.3136178165749515
Encrypted:	false
SSDEEP:	96:5iBUcCRgqJY+ebZFBfquEiwQYGQwnCSo3DijVxlJz/odkFVMhMY7PHYh+O8C:5i/PquEiwQ/QJzDeVnN/odkbMhMY7PHI
MD5:	D4A9893F26D6C6BA6370D1AA877D9530
SHA1:	616E7478F40C2EE6DDE03C7D6AFA35265211EDBD
SHA-256:	329E33E61952A1445BF79F6D073FF443339AA13E6338C568D20A3015C0E7BF9E
SHA-512:	9870638699DD51E0EEF34BCE532E24B585FE02E3BB52AE62F0389E97904EE04A12646D24041F277718938A1EA3AF257BDB6D136514B97AB0790FF1E9C1F40820
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/js/netperf.js
Preview:	function NetPerf(){function c(r){var u,l=[],p=['"i":30000,"v":3'],o,a,y,s,h,v,c;if(l.push(p),u=[],r=='u')e?(u.push('0'),u.push('1')):(u.push('1'),u.push('0'));else if(r=='l')u.push('0'),u.push('0'),e=!0;else return;for(o=null,y=f.length,s=0;s<y;s++)h=window.performance.timing[f[s]],o==null?o=h:(a=h>0?h-o:-1,u.push(a));if(u.push('"'+n.encodeJsonStringLiteral(document.URL)+'"'),u.push(n.edgeInfo.isEdge?"1":"0"),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.ds)+'"'),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.f.toString())+'"'),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.cid)+'"'),v=[],n.edgeInfo.prop)for(c in n.edgeInfo.prop)n.edgeInfo.prop.hasOwnProperty(c)&&v.push(c+'='+n.edgeInfo.prop[c]);u.push('"'+n.encodeJsonStringLiteral(v.join(t))+'"'),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.wl)+'"'),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.tid)+'"'),u.push('"'+n.encodeJsonStringLiteral(n.edgeInfo.ipv)+'"'),l.push('"f":['+u.join(t)+']'),i.push('{'+l.join(t)+'}')}function

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	813
Entropy (8bit):	0.3777162536454919
Encrypted:	false
SSDEEP:	3:CUDu//tylaJqAlTlmhy:EX7JqAcy
MD5:	DBC2B30ECD3CE2A7A8965E5B0A569DFF
SHA1:	C32D2FFDBF66B5582C8C184E0C0B436048292807
SHA-256:	9397D5506D9BB44184A4BD44001382209441BD80D8C5FB4F3DFFDB1F966B7995
SHA-512:	496E07788F07A4F31E690E67367086FBAA934CFAEF0256F669B395ADF0EBF8C677D3775BEAB50F5100D178B67F51F5F2AAA7CE8B89EC5B93CAE6F3B2C21BFD6F
Malicious:	false
Reputation:	low
URL:	"https://portal.microsoftonline.com/pp.l?CID=58832aa972084b8d8dac1023314b511a&pageId=Prefetch.aspx&d={B:{S:%27L%27,LT:14009,UT:-1,MT:-1},A:{ET:-1,OT:127,DT:199,CT:458,RT:524,ST:543,MT:-1,LT:14568},C:{LT:1691734782456}}"
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,......................;

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20356), with no line terminators
Category:	downloaded
Size (bytes):	20356
Entropy (8bit):	5.386807579234047
Encrypted:	false
SSDEEP:	384:PPznU821de7UQt24zXzhRU2h0QxJiOxe7C3W:PPzcdB+NK2ii0CG
MD5:	20EB0E32A0FA9B699FEC785F309F6877
SHA1:	90147C648F14FCCAEAD93E91A89674E5F0D9BC11
SHA-256:	CD91901E43CE2FFE1FB9E58697ACF30B069949E51E499378B53FADE7A7C1799B
SHA-512:	8FEE8FD00F49B3D350A8D94ADC7B0ED54C4313660B2809855BB2DDD49B4D11F9335332B578FF400378DB886A9CB38589084C667592A8B63045F8528CFCD97190
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/staticscripts-20eb0e32a0.js
Preview:	var FlushUtilities=function(){function e(){}var t=function(e,t){return t&&t.message?e+": "+t.message:e},n=function(e,t){var n=document.createElement("title");n.innerHTML=t,e.appendChild(n)},r=function(e,t){if(e&&history&&history.replaceState){var n=history.state\|\|{};history.replaceState(n,t,e+window.location.hash)}};return e.redirect=function(e){e&&(window.location=e)},e.onShellInfoLoaded=function(e,i,a){var o=[];try{r(i,e)}catch(e){o.push(t("Caught exception while updating path and query string",e))}try{var l=document.getElementsByTagName("head")[0];n(l,e)}catch(e){o.push(t("Caught exception while setting page title and appending Shell css to <head>",e))}try{var d=document.getElementsByTagName("body")[0],s=document.createElement("div");s.style="display: none",s.id="ShellInfoLoaded",d.appendChild(s)}catch(e){o.push(t("Caught exception while creating ShellInfoLoaded element",e))}try{window.ng2EventService&&window.ng2EventService.broadcastEvent({name:"shellInfoLoaded",args:[]})}catch(e){

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/js/webuivalidation.js
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27210)
Category:	downloaded
Size (bytes):	27267
Entropy (8bit):	5.404113094797107
Encrypted:	false
SSDEEP:	768:PBzI0xEKzp1tF1UHCf/txC7kx1Yx6OXVf:PBzIwrtF12Cf/txCIYx9J
MD5:	DFD41C407793923116B12F04E0FDB0F5
SHA1:	C44B7E0789FE13E98D860E80500C68E19E6E0092
SHA-256:	8F7CB223BC05FB7812F2A4FD9BFC6BB632E976385E1C5F4151BD6EC2E71E3B51
SHA-512:	05D1864C2008F04A01FDDE011FC00FB0CA55C7C5C8FDE15118408538FCFA904E9952EED871F9674F011614E220750CE5C384DA9DE03E9DE923BD819B72CF9C8C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-extensions.min-vfl39QcQH.js
Preview:	define("metaserver/static/js/cloud_docs/constants",["require","exports","js/filepath/filepath","metaserver/static/js/clean/static_urls","metaserver/static/js/core/i18n"],(function(e,o,a,s,t){"use strict";var i,n,r;Object.defineProperty(o,"__esModule",{value:!0}),o.CLOUD_DOCS_PASS_LOG_DELAY_MS=o.CLOUD_DOCS_STORMCROW_LOGGED_OUT_UX_PAPER=o.CLOUD_DOCS_LOGGED_OUT_UX_COOKIE_PERIOD=o.CLOUD_DOCS_LOGGED_OUT_UX_COOKIE_NAME=o.CLOUD_DOCS_AMP_NAMESPACE=o.ActionSourceValue=o.isPointerByExtension=o.isDocsendSupportedFile=o.isHellosignFileByExtension=o.getMicrosoftFileTypeByPath=o.isMicrosoftFileByExtension=o.getGoogleFileTypeByPath=o.isGoogleFileByExtension=o.isCloudBasedFileByExtension=o.canonicalizeFileExt=o.isCloudDocByExtension=o.MAX_DOCSEND_IMAGE_FILE_SIZE=o.MAX_DOCSEND_DOCUMENT_FILE_SIZE=o.DOCSEND_FILE_EXTS=o.DOCSEND_IMAGE_FILE_EXTS=o.DOCSEND_DOCUMENT_FILE_EXTS=o.HELLOSIGN_FILE_EXTS=o.MICROSOFT_FILE_EXTS=o.GOOGLE_FILE_EXTS=o.CLOUD_BASED_FILE_EXTS=o.POINTER_EXTS=o.DSS_TYPE_TO_SUPPORTED_EXTS=o.GO

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 136357
Category:	downloaded
Size (bytes):	32961
Entropy (8bit):	7.992655093569576
Encrypted:	true
SSDEEP:	768:0fj+FqQpwphF/4SLzY0tBNa0BY3UVvU3jHKQ:0fj+C/3tBLlUh
MD5:	B6010B0B5317C70DCD524245FAFD3077
SHA1:	3FBB0D1A97B785216A2B81FBC7C52EE8EE4B5E82
SHA-256:	77D429478BD82754C48F7CC34316EBA3FCEC4ABFBAB9C4B04385B41EC6FA6530
SHA-512:	59B1C7254ADDA704B9D9C8D3D0CDD011E77A70818257765B30A9CA4A167A1B0C17E7929E757C8E470C3EA3D5CB7EBE8CB78223D7F0234F2699FC501CF3DDF9CD
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/d7c49816088408423a50.cjIp7UHClzqwu3lMbpCuK9_cMgk8uoSvsL8FX5pOS4Y.js.gz
Preview:	...........k..Wv ......H".".R....ERb.JUEQ".b$......e&..V...;..n..3;a..g....q.'.......?.d....s.7.@..RwK..}?.=.{.........'.....>..@g.....\|r..qa.(....l..+......)=.l}.....n?t<.bk..g'._v...+.2.s4..........v..o{....a..W....5...r....G.....sw..-w.j............O..o..=..C.....[....W..Eyf..T...:.l...35...14.x....m.0([A.....,...\|j...s+.....+!LF9.5..:...Zt.2......yX.. ..Z#...'...EdO...{..,.5.......Y+O..3._..8.?.8.X+..l..<....i.5.O...=a.V....;.%..f..!_..SN..4=#..k8.]..z....z~f.CL.Co2.Nq.}..88.@/..a=.Nl......a.l(.).d.yV0.&..S./ ....&...8. ..p.Iy...ov.u>..........N..ay.`.{..ee....@..{...P.`......./..{...;...t...{.......:.~.......=.S...>.......>.Nys.:...n...].n}t..../4jl....l{g.U..:8.w.............c..~p........<8.C.V.\|........;jo.!....Z.......;w..w..ow .....=..&x...].....u.C...%6O,.FZ~t.......w.........G...`..Gq.G..;Zy...!.......,.1......k..?.KP....;q.....}h...An[...]..#(...Te...Js.8.8...9......X(..@......@.+M..8nn..i...._Qn[.....`8..].

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 496, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	243248
Entropy (8bit):	7.990223468157218
Encrypted:	true
SSDEEP:	6144:ASeWR+ZqR6BMpTtQ4Z4mXKoi0eClDeQneAznsfELIZQc:HjR+6nBCfEdTFnwEA
MD5:	691DD1415D36705796F813D0445A04D3
SHA1:	3AFC835067F813DB462A79A1ECC5786DE8952CCC
SHA-256:	518B19A34F870F8542707D2BADE2FD051794AD2C50B33C0EC2282F77EC5B4C0E
SHA-512:	75D563FFF5A93FA096F96DBE1F348C028B77E887237972FDA945DF7A4304D3343F6493BED9A922CD8A5D7CBC3302E6A8C018F37FDF50EDFA33B03651D55CB670
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8..=...5iCCPICC Profile..x.c``2a..... w'...(..{.l.,................v....E.!...Z.....qeRvA.... [..........@..@.h..@...x:.}..N.....E!A.@.. .!.......... .{.:..Z......$.$&g+.''...+..........300-A.!.$....r)./H..Q..K.C......+.........[..$n!.T.a......\|riQ...R@\|...s..d.l.o.....&..5'.IXOrc.,.}.]P..iV...u...4.....I\...$.....IDATx.....$.&.~j..g.....n.&........Y..y"..'ow.t7.........&A........7..AU..=<"#".#.#M...p7..\...UM.bf....(..}v5....=............6..>.7/.."....]]..U.}Q.3.bo'.9......o6...<^.7...u........D.....T.P.B...T.P.B.%7..<..2v.bc8....WQ.}....+..=s..E...rY..0gvE.e...k.nP...r....os..k....5;o...,+.u..%9R.d...O.\|...kx.x..v..r..q1^/...4D9v#.)...Jsf.\.'.M.wY...........X.....-.p.r.Zk.b....}["...a3.S..7..v.k_?r<.f................b.q..{s..{..C..P..8.9..Y.!.y..C..vc.....`.5C,.}..c..k.m`.y....{;.x.^.K..k.^#n..w........Y.5.6......d'C........k.f.....?..d'...sr.,......,...pC.^.U..eT*r\.{]Tx}>."...n....\..vY.6....S.m

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	442846
Entropy (8bit):	5.096543663194712
Encrypted:	false
SSDEEP:	6144:eU8O7yci9VJ/2L/gj1GdNg+CHBVQMv+Qmub2tYl03fi2/8022oyklgUVteL4NBvM:QDXg2k
MD5:	E06FCF25933C5F637CD6FDF98A990DB7
SHA1:	D2F9100979F1534040B0019D9CA25A73879F5A44
SHA-256:	4B9FB155C44B0A606A6DDC057A1337166B3AA713743C794AE12394AD2FCCE463
SHA-512:	D6DF5757DE3048D7A2FEF13505327E5B6FEE18206C5A9A08BDFCFC315B0291D226E7A58D9A978E05F30F244D423CBD321D7DC62C8A3157F69A8DA1C4D5B892DD
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-common-8.min-vfl4G_PJZ.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-icons/assets",["exports","../../common/index8","../../common/warning","../../common/person","../../common/arrow-up","../../common/calendar","../../common/chevron-right","../../common/chevron-down","../../common/chevron-up","../../common/clock","../../common/close","../../common/open","../../common/info","../../common/more-horizontal","../../common/search","react"],(function(e,l,t,n,o,c,r,i,a,v,h,m,f,s,d,E){"use strict";e.AccountsPictogram=l.AccountsPictogram,e.ActivityFill=l.ActivityFill,e.ActivityLine=l.ActivityLine,e.ActivityPictogram=l.ActivityPictogram,e.AddCircleFill=l.AddCircleFill,e.AddCircleLine=l.AddCircleLine,e.AddCirclePictogram=l.AddCirclePictogram,e.AddCommentLine=l.AddCommentLine,e.AddCommentPictogram=l.AddCommentPictogram,e.AddFileLine=l.AddFileLine,e.AddFileTemplateLine=l.AddFileTemplateLine,e.AddFolderLine=l.AddFolderLine,e.AddHorizontalLineLine=l.AddHorizontalLineLine,e.AddLine=l.AddLine,e.AddMediaLine=l.A

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31932)
Category:	downloaded
Size (bytes):	53194
Entropy (8bit):	5.382571760823651
Encrypted:	false
SSDEEP:	768:JmneBhpLkzObU/cOTEShONa7zUVvHCIMDzwzOuVrxYrJr0tBt7F4dZkBgeUfU7aE:DBhrbU0OTEShONylIRTrrlEQT
MD5:	939520EADA638AF9C1CCAB3DEBB8B14B
SHA1:	8A3F7D9992E48620C61C58DC1C251DCCE524173F
SHA-256:	57604CC987E25FE54B77B409E487ABEB52CCD8F7FBF8BB08D31D98ED977FD6EC
SHA-512:	4212982022961F884493DC4FE09902C49E01F4FB922608A1DA12DBADB4F3BFC4DC80AED325FEF79B137A3C445A3402B71FD80AEB4182AB091678228303DA5EB5
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/sharedscripts-939520eada.js
Preview:	!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var i=t();for(var n in i)("object"==typeof exports?exports:e)[n]=i[n]}}(this,function(){return function(e){function t(n){if(i[n])return i[n].exports;var r=i[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var i={};return t.m=e,t.c=i,t.i=function(e){return e},t.d=function(e,i,n){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var i=e&&e.e?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="",t(t.s=30)}([function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),function(e){e[e.Unspecified=0]="Unspecified",e[e.String=1]="String",e[e.Int64=2]="Int64",e[e.Double=3]="Double",e[e.Boolean=4]="Boolean"}(t.AWTPropertyType\|\|(t.AWTPropertyType={})),function(e

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	233
Entropy (8bit):	4.593100023907812
Encrypted:	false
SSDEEP:	6:hxuJL/UGKLB9+LgKEUO7BQ47j3Nt6X4QL:hYYuL3b0B56oQL
MD5:	9DA3FC4713DEE47BAC5E53A98E1B87F5
SHA1:	0564AF0CCB9AA9191E7BA80F362F64FF303E77BD
SHA-256:	57F4A9957CFB84388E1B5DA8B7E1610198DF9AA4D578301885A34300A6CD209C
SHA-512:	779559E1237F3F2713DE1E145290C2100869223D8ECD92CE845B47DC9CAB50A0D7DF1C2DEC02A137AFC5342C9C8052FC51DFBA058D1ACC5387887A38EDAA76D8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/cloud_docs/thirdpartycookie/detect.html
Preview:	<!DOCTYPE html>.<html>. <head></head>. <body>. <script>. document.cookie="thirdparty=yes; Max-Age=3600; SameSite=None; Secure";. document.location="post.html";. </script>. </body>.</html>.

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1038)
Category:	downloaded
Size (bytes):	1087
Entropy (8bit):	5.146487088423614
Encrypted:	false
SSDEEP:	24:1bmvCTErCvzDdzrRl1kJF+wFFg3wzsUgX9oiicwjh/OedOu/J1K:1az+l2JFnFgA6XCjhGBCS
MD5:	0093356D3A30A656E9C22633FD2D821E
SHA1:	DD84C3F89B26F2EBDF9ABDAB16EE2654D5A8E1F6
SHA-256:	A7E628C5865577F33B809A2F097DF58312191D5C06D0523913AE21806C5CE84A
SHA-512:	8B9FCDCDE673B5926612C64EEC273A013100BC0713C395A849F329813A5CC05767011F87CA4F3954155FC87BB9DCA539D8B07BA97B8A5AC0C2551A27B6D63EA2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/sign_in/button.min-vflAJM1bT.js
Preview:	define(["require","exports","tslib","react","metaserver/static/js/sign_in/utils","metaserver/static/js/core/i18n","@dropbox/dig-components/buttons","classnames"],(function(t,n,e,i,o,r,a,s){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.SignInButton=void 0,i=e.__importDefault(i),s=e.__importDefault(s);n.SignInButton=t=>{var{isPrimaryButton:n,title:u,icon:l,cont_url:c,variant:d,dropboxOneUpdatesVariant:g}=t,_=e.__rest(t,["isPrimaryButton","title","icon","cont_url","variant","dropboxOneUpdatesVariant"]);const m=c?{cont:c,register_cont:c}:void 0,p=(0,o.getSignInAndContinueUrl)(m);let f=n?"primary":"outline";return f=d\|\|f,i.default.createElement(a.Button,Object.assign({className:(0,s.default)("sign-in-link","control__button",{"control__button--collapsed":!!l}),variant:f,href:p},_),l\|\|u\|\|("V1"===g?r.intl.formatMessage({id:"iypucr",defaultMessage:"Log in"}):r.intl.formatMessage({id:"qviKxB",defaultMessage:"Sign in"})))},n.SignInButton.displayName="SignInButton",n.SignInButton

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6402)
Category:	downloaded
Size (bytes):	6462
Entropy (8bit):	5.207886697153968
Encrypted:	false
SSDEEP:	96:ZbQsyz1u9NF4puqBtvj1XtBuDX6XDVHO48gRPxlCGH57Jo1WIWS:Zb981u9Nq3vxXQX6XDVIgRPvC6BQWS
MD5:	1CBAAA659AE37FCAA41CCFFE35E24644
SHA1:	2514A02F983A204A69BE49943D0D2553B904378B
SHA-256:	C5227A47AD33B602D3BA9713B4A8FC23021DBA58AE0B16124DBEC65F7938F30E
SHA-512:	F76A0714DF8DF226F67003DA2B72CBAB88A02E983FF9A3E919934CD28D97ED8B978C162EF972F052E82FA870745F079578A1C92015A6AF6A24AD79ED12E3EF6A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-security.min-vflHLqqZZ.js
Preview:	define("typescript/dropbox/proto/js_init_data/login_form/login_form_pb",["require","exports","@bufbuild/protobuf"],(function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.EncryptionOptions=void 0;class n extends r.Message{constructor(e){super(),this.key="",this.version=r.protoInt64.zero,this.type="",this.plaintextFallback=!1,this.timestamp=0,r.proto3.util.initPartial(e,this)}static fromBinary(e,t){return(new n).fromBinary(e,t)}static fromJson(e,t){return(new n).fromJson(e,t)}static fromJsonString(e,t){return(new n).fromJsonString(e,t)}static equals(e,t){return r.proto3.util.equals(n,e,t)}}t.EncryptionOptions=n,n.runtime=r.proto3,n.typeName="login_form.EncryptionOptions",n.fields=r.proto3.util.newFieldList(()=>[{no:1,name:"key",kind:"scalar",T:9},{no:2,name:"version",kind:"scalar",T:3},{no:3,name:"type",kind:"scalar",T:9},{no:4,name:"plaintext_fallback",kind:"scalar",T:8},{no:5,name:"timestamp",kind:"scalar",T:2}])})),define("metaserver/static/js/security/crypto

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (36426), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	235681
Entropy (8bit):	5.3447137369281945
Encrypted:	false
SSDEEP:	3072:bGS+R33v/ZhZdjfJDFItgfUhP8CRiaRBr+Xfvdk1y6PgoXgItP+L:bGS83ZBItgfw8CRiaRodk1y6rd6
MD5:	08D0B476ECFD98EC06E9A47989B532F1
SHA1:	47AFA2DC647EBC5B6F4E323200FC452A04EA78E3
SHA-256:	BF954DCC8C10D41EC2942D18A3A3D6E410E516AF7DFD775D46EB1EAB9DE92F6F
SHA-512:	4959F4FF61FD283B49553BE0A3FBDB5B6FC7A9A3BE483CB14BB325B988FB73734B9AE10C285192852F303BEACEE280B725E0AF9CF45816A8229E645B71548FA6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/pithos/privacy_consent.bundle-vflCNC0du.js
Preview:	(() => {const define = dbxPithosConfig._define, require = dbxPithosConfig._require; define((function(){return function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.c

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5796)
Category:	downloaded
Size (bytes):	24524
Entropy (8bit):	5.292605158418187
Encrypted:	false
SSDEEP:	384:BlvvfWpDjd12DNkN8mOANNgiHYs/IgBxgvrwvQ9b02DT08YO/utej:HvvfWpDjd12DaN8mOANiiHYsw/vroQ9l
MD5:	CE47E83DFC175EEF410ED1DC12A5915B
SHA1:	CCD17ED826896CB8DBC07C3AD0A8D8C76487208A
SHA-256:	62A5AFB71F9CDE5041E590B61ED32629BFACB47EB6F05CFD89839D8F50B7AF3B
SHA-512:	920DA52E7A9E53A13A26080040535C7A2A2768082A11EA277EC7305409AEB0B14021BCD33D6AE0E4BD5F620B2D45FE59CD6A601447112A76913C3239EFA2E4FC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-account_core.min-vflzkfoPf.js
Preview:	define("metaserver/static/js/account/email_verify_reasons",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.EmailVerificationReasons=void 0,(function(e){e.SHARE_FOLDER="share_folder",e.CREATE_API_APP="create_api_app",e.PUBLIC_FOLDER="public_folder",e.GENERIC="generic",e.SHMODAL="shmodal",e.SHARE_FILEVIEWER="share_fileviewer",e.MOBILE_SHARE_FOLDER="mobile_share_folder",e.EMAIL_ALIAS="email_alias",e.CHANGE_EMAIL="change_email",e.PROMPT_CAMPAIGN="prompt_campaign",e.ADD_COMMENT="add_comment",e.SUBSCRIBE_TO_COMMENTS="subscribe_to_comments",e.CREATE_FILE_COLLECTOR="create_file_collector",e.JOIN_DISCOVERED_TEAM="join_discovery",e.CREATE_TEAM="create_team",e.NEW_DFB_TEAM_TRY="new_dfb_team_try",e.NEW_DFB_TEAM_BUY="new_dfb_team_buy",e.GIFT_BUY="gift_buy",e.REFER_FRIENDS="refer_friends",e.UJ_VERIFY_EMAIL="uj_verify_email",e.SHOWCASE_USER="showcase_user",e.CLOUD_DOCS="cloud_docs",e.REVERIFICATION_CAMPAIGN="reverification_campaign",e.CHANGE_EMAIL_

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11560)
Category:	downloaded
Size (bytes):	11629
Entropy (8bit):	5.207851321628478
Encrypted:	false
SSDEEP:	192:btWgwaxsckU3Ko25wfP+bgXJ1z57luAFFU7uNJ03vDKFa:bAlayc+l5KPZ5uAFFU2JKia
MD5:	0C09CA31EA4310AAE5C3AE98900FB7A4
SHA1:	4CDDF790534AFF94323147B25F215D8E13AFB781
SHA-256:	10ECC56907B6E4BFD0DD9EB41467B6B4E3781193460B6EED1A26236385CBB5C9
SHA-512:	910CEAF289EAC5F337688A4C982DF5EA76DF81A9D6CB91A47052B0FBFA0CA7E513FE27F4989B73E77944A48420AAAE5E186AB5DB7DB25A5889A5C7D717D680A1
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-react-transition-group.min-vflDAnKMe.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/TransitionGroup",["exports","./Transition","./extends","react"],(function(e,t,n,r){"use strict";var s=(function(e){return e&&e.__esModule?e:{default:e}})(r);function a(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function i(e,t){var n=Object.create(null);return e&&r.Children.map(e,(function(e){return e})).forEach((function(e){n[e.key]=(function(e){return t&&r.isValidElement(e)?t(e):e})(e)})),n}function o(e,t,n){return null!=n[t]?n[t]:e.props[t]}function l(e,t,n){var s=i(e.children),a=(function(e,t){function n(n){return n in t?t[n]:e[n]}e=e\|\|{},t=t\|\|{};var r,s=Object.create(null),a=[];for(var i in e)i in t?a.length&&(s[i]=a,a=[]):a.push(i);var o={};for(var l in t){if(s[l])for(r=0;r<s[l].length;r++){var c=s[l][r];o[s[l][r]]=n(c)}o[l]=n(l)}for(r=0;r<a.length;r++)o[a[r]]=n(a[r]);return o})(t,s);return Object.keys(a).forEach((function(i){var l=a[i];if(r.isValidElement(

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4765)
Category:	downloaded
Size (bytes):	4817
Entropy (8bit):	5.355101149416664
Encrypted:	false
SSDEEP:	96:bXZd+QLjkjGjm6y8AyH56PSesQ5I1YRZunR13DY4e:bXGQLjk6buLyLR1G
MD5:	37C3EC4C6ACE2C5CAE9E4DD071F30FFF
SHA1:	46DA687A22F3F6AF81A0839E58690423332D8389
SHA-256:	A725741E1258B868AF54E07214CE5E90B120365FD08C7D9747CB1DF04236EF8B
SHA-512:	7675CA5DE972E1AA850E9556059528D30705A1B64C6A84A76FBD9C9039F2CD32F8EBE9F241B406CC26D19ABFF39202C8A76993AB959E6A1BE6728EA0C005DB54
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-i.min-vflN8PsTG.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/index.esm5",["exports","react","react-dom","./index.esm4","./index"],(function(e,t,a,r,l){"use strict";function s(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(a){if("default"!==a){var r=Object.getOwnPropertyDescriptor(e,a);Object.defineProperty(t,a,r.get?r:{enumerable:!0,get:function(){return e[a]}})}})),t.default=e,Object.freeze(t)}var o=s(t),n=s(a),d=o.createContext(null),c=o.forwardRef(({children:e,isPortaled:t=!0,_elevateByZ:a=1,_preferAbsolute:s,className:c,...i},m)=>{if(a<=0)throw new Error("`_elevateByZ` must be a positive number.");const{getThemeProps:u}=r.useTheme(),f=o.useContext(d),[p,E,y]=o.useMemo(()=>null===f?[void 0,void 0,void 0]:[f.zIndex,f.portalRootElement,f.preferAbsolute],[f]),b=void 0!==y?y:s,v=l.classNames114("dig-Layer",{"dig-Layer--prefer-absolute":b&&!1===t},c),N=(p\|\|0)+a,_=o.createElement("div",{...i,ref:m,className:v,style:{zIndex:N}},e),g=o.create

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1500327
Category:	downloaded
Size (bytes):	204641
Entropy (8bit):	7.997990438642493
Encrypted:	true
SSDEEP:	6144:ZwcYtuQK17Z4IyNbBoXbZ15Y+0wkH0z2Eb:ZwxfK17Z4IykXbZj0/rc
MD5:	0B34782F75D917E2934705A63663662F
SHA1:	B1AA3DE255CEF98166CB52EE38D2C67543EE0D7C
SHA-256:	BFBC3016510A8BC0CE1CA807EBC41CE264FA64E29D0FDE8D0206BA827C2A9299
SHA-512:	CA9F2CCF4E790F94C47EFBF91854C8B643CC8CAAE85B671B6F7DEC6468B89E513E799D4AAFA01C36CB4A3A52FAA5A925336E689F31F04296C16DE77A0F93B396
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_bundle.1885980d0c2e444b4c260d20339401ec.6JKOhZEZLVUo0awj9vBTCyS8J99CxnWy1B_2dSb-wc0.css.gz
Preview:	...........k..(..B...>.#.P.[..c........7fg....D..D-I..jE.....n...M<. .P.....$.....D.SQ...?..6.m....z......O.<Y&..K.........j0........ 8\..`.4.\|......,.%y...Z...WVR.......uPd.t7`H<<.s....z<A-_P..%./.M.....M...Sz\|[.;#.q1.}v.....>..c2@?..'...F..(.iv..!.#.$.,.....2-......O.r..Ci8Q...1/.s..I...@....j..4..4.`Y..,?.G..............,.T.H.'..W.i.j..K..._._.]yX....u=..B.Mv.=..^....:.....@p..*;..s"V=^./..L..^@2..2)J..9.....U...T.x.>f.\|..^.t.K.t.09..K....e.v..4G.7C.<.C,7.,.e..x...I8..d..F..._...[r..7.....I.79.....;E.O.....am#...>.2....N..h.%..x.-&...N.9.r.".#.58.^.sT .'.,....C......[,..o.[S..J.<....E..0...f..u.K0...,.f.r....!.....HL..M.9............B.).pyh..!..pc"5Q....+D.M...F..+..V,.k._....L......#......N.k@).B#.m.&y.#+KY..: d.dE.u.:. ._KY.=..e....c.y.u=....O..B:....5..y....d0:ge.tv3I.O._Wx.#.r..b.y..:.c.]...]...wg..py.6W4.g.....a4..u..-.H.'.s...S..U.\|......QL....>Fk0.I....k.."/@.?/...G...`..1..#.....8.....$..T...N.....J.....I.4...\'

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45991), with NEL line terminators
Category:	downloaded
Size (bytes):	100459
Entropy (8bit):	5.372572185978001
Encrypted:	false
SSDEEP:	768:lsJ3687fBEc408QYHLMzPnLtedvj39MtqOh2eMrFGob/fmltYUyGSGk8I:lkK4mm/8LMDyj39MPCrF3b/elBycI
MD5:	FA186E7CA5FBD9A290648C2AEA3823B4
SHA1:	15D802B519A7168463A09C289908DC6A423BDB67
SHA-256:	6977F8A19ACC36F414E786CF4A7C17E32CEDA2D50CEA740099A251A7B2E02430
SHA-512:	F57E5F212C365F9FA9B5D74DCBFEB8ACE68BDD572D5B22932A956A3B241A77BE35927E0449D636A31CE53F9491324E2726560D646A3F633FDA5D16F280EEA29F
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/polyfills-bundle-750609c9b89fa9c489d3.js
Preview:	!function(t){var r={};function n(e){if(r[e])return r[e].exports;var o=r[e]={i:e,l:!1,exports:{}};return t[e].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=r,n.d=function(t,r,e){n.o(t,r)\|\|Object.defineProperty(t,r,{enumerable:!0,get:e})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,r){if(1&r&&(t=n(t)),8&r)return t;if(4&r&&"object"==typeof t&&t&&t.__esModule)return t;var e=Object.create(null);if(n.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&r&&"string"!=typeof t)for(var o in t)n.d(e,o,function(r){return t[r]}.bind(null,o));return e},n.n=function(t){var r=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(r,"a",r),r},n.o=function(t,r){return Object.prototype.hasOwnProperty.call(t,r)},n.p="",n(n.s=1)}({"+5TE":function(t,r,n){"use strict";n("Muwe");var e=n("0K2p"),o=n("+iL7"),i=n("GHf2"),a=

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24362)
Category:	downloaded
Size (bytes):	24424
Entropy (8bit):	5.433612540337133
Encrypted:	false
SSDEEP:	384:YCBct58kjuLF9a8Q8iQJiQwQbQxiQlQXQYtDpq8U8yNOyEerEHa0SUgLbqzWG88i:YCMeWuLF9tQHQUQwQbQMQlQXQYttq8U5
MD5:	A34059D276ACFD2E870DA909B60AE37A
SHA1:	9BD623E1EA7FF4AFE1173DEF9689293DCDF148DE
SHA-256:	41513C067B7CBBBA57C40F7454A05E46F827679A506563231AD08E040722BED9
SHA-512:	0AD151C5F5C68EF1E6BDE2707BF48B77B89E46AD19BA64767B035639C7161FD9EDFB9E98C28F8BBB951A11984221FAE5414B06704F68273B3F2D83F5F82966C4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-browse-and-home.min-vflo0BZ0n.js
Preview:	define("metaserver/static/js/clean/bem",["require","exports"],(function(e,t){"use strict";function n(e){function t(t,n){return e+(t?`__${t}`:"")+(n?`--${n}`:"")}return Object.assign(t,{mod:t.bind(null,null)})}Object.defineProperty(t,"__esModule",{value:!0}),t.bemStyles=t.bem=void 0,t.bem=n,t.bemStyles=function(e,t=[]){const a=n(e),r={};return t.forEach(e=>{const[t,n,...i]=e.split("_");if(i.length)throw new Error("Cannot define style keys with more then an element + modifer");r[e]=a(t,n)}),r}})),define("metaserver/static/js/icon/folder_icon",["require","exports","tslib","react","@dropbox/dig-icons","typescript/libraries/spectrum-content-icon-compatibility/src/index","metaserver/static/js/plusplus/icons","metaserver/static/js/sync_everything/ui/icons"],(function(e,t,n,a,r,i,s,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TeamFolderIcon=t.SharedFolderIcon=t.SimpleFolderIcon=t.FolderIcon=t.getDigIcon=t.convertLegacyFolderIconToSpectrum=t.isLegacyFolderIcon=void 0,a=n._

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11866
Category:	downloaded
Size (bytes):	3790
Entropy (8bit):	7.9509896251043
Encrypted:	false
SSDEEP:	96:Nq/MbBnw2kllo4QlpICs5YseuMs+u5sPmCq:Nq/eBXelo4OpAYsehs+csmCq
MD5:	1A56AEC3B0F578225D15307BF444F2EA
SHA1:	796C1633993850677975E80B149BFCD83978862F
SHA-256:	F063055E9D3F9F876BB2C22FF4A8B9D9A9C668FD66F74FA1A90038E62501ABF2
SHA-512:	9A739066E883162ADB608EC155BF559C01DA62B0D0E57787CE9B387B7315ACA47120AFFAB35277DC6EBDC52918AD0D0BAEFDD72E99BA43220B3DFA49B576C3AA
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/2fb2466cd701c4229b26.Hd_QNpBbEqJ5m-AQdNL3G-r6QWSJOt0XRvH7T70qLxc.js.gz
Preview:	...........Zms.6..._a.Z.y.i.N.F2.I._....smF..P$$..@....d.........L{.......g.]...0?.b__._.\|.....x8{}}....O....G..Mg..g..N..ir=.I4.S...R......#/U....:`....m......i..G.j.....s....g/.3cF6....F..y<..I.'..\.....}....'.L.&'..5M.F~.R.ln.0...an..}.e.OI...:7Q.o..7n..8..H....O-...gG.I....3...p.....p.=!....v.....Z.s.}Z..tJ.r...vF......A..aY.n;......!.b...M..2.Zww..._....U....5a..#...s..L..9.A5.eGLN....aHrw....&#.....$..]"..2.>!.%$Z.!..x.5.>)..Y.Z..b"..mLmoE.O...o+.pKb..>.M..R"...-..K.Q0W4...W0G.8+[...o..e...&..Mp.K.FX.q..8.<r.?`....j.n..\..: .H,;`.:0..S;.l.W;;f...\.}........G[V...9...xL.u.Jlu.R..~\.:n}..<.Nmk.(1....)...p..,.).....}2..-.7......x....4}..Hj..o....OB........I?x...XBWS...b...$.CZ[..Q,.!....{.J....3......m.1e..Z.I.b.Z.h!.v....A......T&...:r..!.i:..3e......d..M....fGs8....7.+J..L.\.!jeC.b.,....G...2.%.S..&'.E\|.h...F4.5.<.VQaxg..h&6...... v.....D.Q`..=...#...6......P4.G9..(..g.q.7.n'....7...i...^To..(....`.......E...jc.....,..!.3+.,...M..J.r..p}h....~

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43308, version 1.66
Category:	downloaded
Size (bytes):	43308
Entropy (8bit):	7.995084572292543
Encrypted:	true
SSDEEP:	768:Y6isHlLX1zBleTdZ0MS1wQ1vBIG2z1oCA2/Ovub/uOe:YKlr1zBleTdZJYN5INz1oCdGmbK
MD5:	93B6F18EC99BCB7C3FA7EA570A75E240
SHA1:	60B9E3062FE532CBC18B897FAC542C56A03544C7
SHA-256:	43693F7BDD6146E783FAB3F75BA0A51AA3CF9530ADBF790DBD686FC8A17AA3DB
SHA-512:	AC1A9398B74EB75AC4D52B9A9054A1ADD5A836F2572B99307851A0BB6D93288A13199E06E5DF4F1391209403BF775C9235A679BD081CA7F62B7752ED0FA691C6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2
Preview:	wOF2.......,...............B.......................d.......`..\....a..... ..R.....6.$..x..~.. .....\|..5[r.......bJU..T...^.Ui5.$..c.OI...(...V.%......... ........"..]..$m+.X..........'..p..".Y...q..f.......B[........tjS.6..ZF.V.'8..]L.;f.....p...H.JtYQ.r.......U..v.F.....M..L.Js... ....j)o3/...L.r...%....('......O......7.a..&..z.!/.w.%.....p.P.o..#.....$..~.&r...=.a;.K......RE.....U..F..M..ARd.c.:........Ji..z.X].&..6..2Y.dM..6...8`I....T..BqPc.W.].......q......lG\.....{.j..\|.Ab.s.C...q...w.9...j`. F.a4b..o..?:......~.........Al;...~n=.(.=b.cQlc...+..V.2..J..........wx.Y.q.UxQF....JQ.{...D"PA...Dx...^........].!.......{'.#..I.P...R........p....$K.%Y..!.n..,d..sO...(O@.R...q.(...t:.T....){p1w..Pc..V(._... t\|.....rm....ed%2....D"O"OrM.\....z+.=U..QL.qK...V....Ckw($..........mH..0...v......H=.Y.\|.5.~.3......b.g..X..M.R..Q...UZ.b.lV..-.$#Q..]?1[....O.:.&74.]l...H.W.n.l.?..-.K.r......Z.W..<..HG.c...N...2..V.;..a.....`.T..q.`#...?r...T.Ak....y.

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 534411
Category:	downloaded
Size (bytes):	117779
Entropy (8bit):	7.997289453198004
Encrypted:	true
SSDEEP:	1536:2/I8flmkvTUj9r0tBRdVxNKhdW5FIg3vKak3v4Qdm5YeoE5l4sdm4iZ734En8WyF:2PflmKb4nWfhfyIoklnAn8WyMF0s+
MD5:	A245DBBB2B859A36FEE0D6191F25735C
SHA1:	324BDEA267E0431F35B0983E908430F86DE502A5
SHA-256:	810E54229B61AA101519EC927D23F10DEA0D6B3FC5404402F8B08367DE099021
SHA-512:	57C0ABB3625763C0D6432E2AE0F095319E1298B8AB7531C7DDD0723A73AA98A39CE262AC69777261052E4DC895D9B6A71654C0211F5A2CF351BEC969CBE227EA
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/c6e3e4b583e4f456ca85.4hVQesaocPlhDG3TlmS2PF_aGVO5vUm3IKz_XfWNwU8.js.gz
Preview:	............v.:.0._O!k.s..Z.\|K".v.c+;..[...}2Y^....H....x;..y.........<.T.B. x....^......B.n(.............!.cxp.......Ai...?}..yto}...3.^.@#..o.c.'...M...z.."^....9.GI.......uL.XT....J..$......z....V...yjt.oz.s..{.o.'v.....d..... ........i]_..8..'..<}u...Zga...a3..V.v".g.v\|.gs.v\..c;......d`u..=....s.....E..4....}<q...:.~.... ....L.o...>y..;...F.>..~L.8.....Z...g.z.......of.,....Q0..RP.^>D^a..gR..@Z.A...^,.v>.b1Z...M.H?#o,.\|w.............>.}...I=..)P.j...-'....{w...p..HC..{.1.m/`bcA..d.4..Y^..~.....}.&.fA.G.....}6.a....8.......l.k.f..$x..o...q...Q...].yQ\|..iR\|.3e.......".J%..G?q..._.o..4..SF.rFg\|.............z.......m.....8...^......{l..n..6...-.....G....Eu....5..i.8.{..)..m.5E...\....X.q..\|L..#....1..1...S...(.f8A...OH.6..ns....M.....?..H.y..i3..`..2.....of.s......m....fp...........7.p....#n..Fw..1.I..Bl-../.\|6.....h.#(i.".0.,...\|d<..2u.I....c8...N.Uj9..LX4..cj..+A...{.?.s.:...G...h....M&.<.. .G.d...n.....J..'..........6.q.Av...i..9

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50152)
Category:	downloaded
Size (bytes):	50214
Entropy (8bit):	5.2042941839709735
Encrypted:	false
SSDEEP:	768:0M9Krs/TXMvn669MViEC3oMUhznuKhTwedy6q4lypHDF434qbzy/K4IJxZ:l9R7OaGeUH4c4KGZ
MD5:	E7B4D7554207D3740A027C61DD388788
SHA1:	C4E69E56092C87DEFD743873ED017F13DF49D1C2
SHA-256:	5B3161B25188173D2CCA0CBFF6A0ABA33C48A2E304487EDC2A654882CAF06C44
SHA-512:	BDA84ED4F4A930022F51609D81E85BBCA15B9500A01B302A070282B21ACA38228DCE0DBF7AA34AB093CA25032C7EEF88448393B8124817B85EA9B77A465038FA
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-notifications.min-vfl57TXVU.js
Preview:	define("metaserver/static/js/user_notifications/notification_tray_logger",["require","exports","tslib","metaserver/static/js/deprecated_ajax/ajax_jquery"],(function(e,t,i,s){"use strict";function n(e){s.SilentBackgroundRequest({url:"/log/notif_tray_events",data:{event_dict:JSON.stringify(e)}})}Object.defineProperty(t,"__esModule",{value:!0}),t.logMarkAllAsRead=t.logTrayOpen=void 0,s=i.__importStar(s),t.logTrayOpen=function(e){n({event_name:"tray_popup_shown",badge_count:e})},t.logMarkAllAsRead=function(){n({event_name:"mark_all_as_read"})}})),define("metaserver/static/js/photos/batch_thumb_loader",["require","exports","tslib","metaserver/static/js/deprecated_ajax/ajax_jquery","metaserver/static/js/modules/constants/env","metaserver/static/js/core/uri"],(function(e,t,i,s,n,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.BatchThumbLoader=void 0,s=i.__importStar(s),n=i.__importStar(n);t.BatchThumbLoader=class{constructor({batch_size:e,max_parallel_requests:t,on_batch:i,

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17165)
Category:	downloaded
Size (bytes):	17221
Entropy (8bit):	5.218316122719719
Encrypted:	false
SSDEEP:	384:0VAhW46bRfZKvVcQTyOsLRLFMyO2IfKK9qST8UgS:0VNNflQTyOsLpFMD9qSaS
MD5:	70B48073357AABDDD0246F1D6B50E537
SHA1:	ADCCD76DAB8A727E613AF7647373D700CCA4B858
SHA-256:	EDE93D16124EF6718056564A14B2D4D408E335F26AEAB44C0C37C770F15053CC
SHA-512:	72BE4DBAF858B65979DB5DD11B1DFD5FB51E084E978E0C917B9A8BB64505E8DF198C5B4EB1C25F67320E8778F0F91E49223C6D7ED86A97D888F2CCE4DEE41261
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-telemetry.min-vflcLSAcz.js
Preview:	define("metaserver/static/js/logging/compression",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getBestCompressionCodec=t.IdentityCodec=void 0;class n{inflate(e){return e}deflate(e){return e}}t.IdentityCodec=n,t.getBestCompressionCodec=function(){return new n}})),define("metaserver/static/js/logging/hive/schemas/web-user-action",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.WebUserActionRow=void 0;t.WebUserActionRow=class{constructor(e){this.category="web-user-action",this.session_id=null,this.user_id=null,this.team_id=null,this.on_maestro=!0,this.extra={},this.ua_browser_name=null,this.ua_browser_version=null,this.ua_dist_name=null,this.ua_dist_version=null,this.ua_os_name=null,this.ua_os_version=null,this.authed_user_ids=null,this.identity_gid=null,this.anon_ip=null,this.active_user_id=null,this.team_type=null,this.locale_browser_header=null,this.locale_user_selected=null,thi

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 123406
Category:	downloaded
Size (bytes):	29248
Entropy (8bit):	7.991601728399196
Encrypted:	true
SSDEEP:	768:m4cqVuPUOvnVZPFk7pWs1ipPDPt1FvKAnC+q4ris3iHSk3QlXsMf:rbOvVl/s0FD17C+qad3jPBb
MD5:	F5FA5413A58F2ED2EFC40F2F4EE098B6
SHA1:	8C5081EF6B67AE691BB057C180C9464EFA16BE5C
SHA-256:	E53D1E332EB3E18C1473CB34B81E38A6164DD7BFE03B27E2D31804F5BD6DE7D9
SHA-512:	CF34F85FB6D0674314BB90C79618588381B3B2990535C39E7D353581C9FA0FA547665485BA9DE33D09C034926E0AD9D36C296AD55824564E44F331D38E9F5562
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/3ca391fb196a76f06afb.Sf-O5SKhNZ9n5HaOYmICg0jW_NKUQqCqe-cbrqaYptA.js.gz
Preview:	...........{...0.??.....!.......4.Z.k)M[.^. r$.....u1...?..}..H.N.g......r..3.:...yv?..\|.............?.....pg....7Z.........y...4...wq^..$.H...~...+.z...8K.......2.."..;...`@.qZ.Q:..u...r.g...w.....<..A.$J...$.F.Y..E7.....{..~`&.8....c.\|N..UR..dK`....K2o}...8../..../.o....5...d.8..QB.r.d.!.4....E..h...yt..0.6.....e.u\|.....A..JV..CG.. ...q).y....Y.3.S...4/.a<1T..>z$..[7.qFe....-..J.+..d..^7..S...Z..?.l. ..O...p..w..y6.A...@....6..$k.Q?#..>...<>...O?..a.......:z...=....K(i......+8.el..0d..lz....W.o!1....wwY<...{k..y\|G.].JQ.Y.[.{.=v.4y.x..,.R..yO.....w......`. .g.s..L..k.S..b:."....H.]v.(M...e....9.v..`...j U1...%..l~_........Y(....;...^K\..JGW@...o.C.....(.i....i......,.W.?.....7#?..........I.1....m.(p.nWE.q...+.....S$0h.\...t%..X..tml._..j....v.."..o....=...+........&.ZO.,.'a.N..(.o..0.q"..D.B...k ?.awv3Ot.@0....>......d$.....1Pg......y.`.z...2y. . j.....6..t....w.....,..{..Q}1.K8...... j..j.ch..?:20...?....M..\|..s.F..5m..A...-.E....

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 218487
Category:	downloaded
Size (bytes):	47292
Entropy (8bit):	7.9948296163008425
Encrypted:	true
SSDEEP:	768:LnWLfHC4lFwZL/iomqHvxDcTZBbBfDHMw3OiVG0YZ4eFJVFqWujIcIUpEidTZFCj:DW2rTDcFHQwOq4OIIlR7o
MD5:	3F760BD5B5793F56077232523DC4878C
SHA1:	4446A229540FDD9F59D31598AE814AB6D5CDCEF9
SHA-256:	48EACC347300D274926B91B620EEDDB4620313397B50074054B8A80AB55E2C03
SHA-512:	132DDFD999603F6BEB929EBD979DCD335D73420B5C53628F40955724E346CBE14DDA41D755557E208E99AFE128D50C792F6D9AF8F256582794BF61DBCC0E20EC
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/e3ad0fb7614fb0e8f4d7.ncHbqhUuy1SleHCSwfD-nlmwizFCTHYjxzH_SMRfhlc.js.gz
Preview:	............r.H.(....'\|.1H..m..f{.\V.e.,..n.C.".$J$."@.,..............Yke&..H..$.jz..[..y]...u...u.........7.........o.:=?.l......d..k.>U'.M./.#6.?.Y....E3..z.x0.....].G.h^....n>..ga/........7.._Y/i.....d..g.....s..E.l...7...FkQ..\yS..v..gu7.....)..........H....[.u...@.....~O...r.....!6....i......;....+.c.......!.v....o.+6.`Sg.u6[.g.{..V[..`....~..c....IjI....vY..F.d..nR.......q..to.4D.....zW.y.#.h.."...-..7....K...~.6{.q.... ..q\|.Mf...x...nB.......~..3e.l.:."iN.Q.%......~.....[:\|.........4.xo6.B.....~?..Oq..^.&.Y.....Q4..u...J....wh..K._GA;.......?........m.f....z....u.>..y\|..=V......J..F..x..d.o.>\.z..d.....%...~4...}....>N<./..i4.....E.p...8.oG .4.Rl>.g...%.!.].c.?W....d...E..7`o.1....%.....X...+L=.f>.k......3@\|.....S.p....&Y7z8;.=:=..;X....=.Wt.4.I..D..K..`..J..0...V...G.G/..............[..b.&i.X8H..m=x...S.].&.e....$FJ.J..@.E.dpp@G,@o../$.9..1....gS.w.....I._.~sw2.?...E.M. .4.>d3C..,\..."....dH...Y.....7..5.8F..T.

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3697
Category:	downloaded
Size (bytes):	1395
Entropy (8bit):	7.871043891350247
Encrypted:	false
SSDEEP:	24:XHXpRBfxe/ig+8i7zh9Wqp2hO7xxUhVM3vaquRWb9r0LO9HMjui0bL0xwml9:X5RZw/h099ropL4CqYWbmLTv0/uwa
MD5:	BA7064CA78204C5D214EE0D67AF5E7DD
SHA1:	CDBF68DD21578262EBD2A4F01E4077F89DB6102B
SHA-256:	0A4407E5E5B590E803073C8E3B0C22D811D24D03BD2DEA5B0E8D2A95C0C5E382
SHA-512:	450BCCBB3685B9B01F077AEAF8A50F578D5B00A3F0D10650DE4883B6458C13CCDD621C96F6AC9C737C6F8C4C3D2B8FAA6AAC73CE34A3661280E205DBFBB6DD42
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_admin~paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~pap~98bcc4eb.fe9af606aefd018129cf886d5e3f19606dbbddff.Xbp3O2-COYExGtN144UKWgSeatOvuip7TNL0U7IyRwM.css.gz
Preview:	...........W[..6.~.0Z......=6.....t..m.,..Y.$9....}.m.89.N..D.IQ...4=TUT..z/Vi...1.8............eS!B.(.#..#.'..&A.+.a;M3.iZ.f.ws.,...,>(..Vu....M&...1..;+....K...v...=.@S,.A..'...6gNcf.g8)..pV.UuJ....b..in..v.Q&..(l..V...Z..Sa.J...G.8....(+v&^....z....'........&Cx_(Y...#6..0.....Z,...u/..c.u.:v.......fw..s.k...f...."`..+N....$........X.%.D.z..C.E.3........m6.....6.6.W....../%..z.+J..w{....".N~3..@.M.zv.y.......\|......j....3.Y..HA^.a....^..*24..V%.......}/\|.;..y..O...P1.Ra...8...8d^2...@Fw...f.I..LK^...V/\|z.S0F...J..{..1...c...L.L...5.y.o.w6..V..4...?"~...r..u'....p`............j .^.^-....ut...g..bx._..N,Z6?.w.d.....9S..x.8iz.n.x..k%O...t.)....J...;E...]...[....3r....4....9."?....l..:.C..0....'.......76 ......[....I.b../../.....a.....-d........h.T?..q.].u.jy\|5M.Z0.IN.(]H.G3.x.+.q(.....lO>2.9..t4'.l.d.U.Hp....v...7..G.%.L<......h..5.I4.-..XIi:...U.aE...w....`xO..8[8.asy...."P..u'RAq.?y~.)..:..Q..p...\.cW.o.T4.S1..Q) .......Q.H..g..

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	244230
Entropy (8bit):	4.9963094857650585
Encrypted:	false
SSDEEP:	1536:Ul7zIlIyf7WFyfJWF6/x/Sl3zz3XRYsBPBkGcFsT275lHsqyzqgdSgkj+gT8gixV:UgIyfKFyf4FPzxYsBPCsT27wSror
MD5:	ADF55A9DE136C9E95CBF658409D0A59A
SHA1:	55A3A9BFF231BC72ADC44772997C69B34A8658A3
SHA-256:	342E2C351987FE1EC0480F5593769345047D7E1D196DCCAA28F53DDA2DCE7C75
SHA-512:	504ABE4F9210CC0BD25EBC0A9A131869859847735DE6D78D232BF7C22B5BAFD940768FE64169A5B01D9A1CC699D7111780EC6F5F854C84A0DE4B210F8CB80EC4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/components-vflrfVane.css
Preview:	/ @generated -- This file is automatically synced from dig-components@18.13.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./../! autoprefixer: off /./* -- tokens.css */..dig-Mode--bright,.:root {. --scheme__color: light;. --scheme__inverse__color: dark;. --spacing__base_unit: 8px;. --spacing__unit--0_5: 4px;. --spacing__unit--1: 8px;. --spacing__unit--1_5: 12px;. --spacing__unit--2: 16px;. --spacing__unit--2_5: 20px;. --spacing__unit--3: 24px;. --spacing__unit--4: 32px;. --spacing__unit--5: 40px;. --boxshadow__elevation1: 0px 8px 32px #1e191908, 0px 8px 16px #1e191908, 0px 4px 8px #1e191908,. 0px 2px 4px #1e191908, 0px 1px 2px #1e191908;. --boxshadow__elevation2: 0px 16px 80px #1e191908, 0px 32px

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	158078
Entropy (8bit):	4.770362176832651
Encrypted:	false
SSDEEP:	768:cegLBvTvYBuK0jgN8TrOxFiz5WknlMbMbV:c7LMgjgqXWiFTUMbV
MD5:	509692516B93396BB7DD078EE23247AA
SHA1:	F45D39616084B860AF12F02A4FD87D5F31F9BC19
SHA-256:	6862C6DA0CE6375FA535479FA6608208D7EAC42755D3E5BC70941A75FA78D438
SHA-512:	8D185EE69B2049FC124C4FEA560E22CB67BC84FBA23D45292DE9E5145D8372FE92C2B115841CC7C7868520BC44534BE846DF72E1EF8C0419C47958FBE308A8FE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/foundations-components-vflUJaSUW.css
Preview:	/ @generated -- This file is automatically synced from dig-foundations@1.8.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./../* -- index.css /./! autoprefixer: off */.._4rjmw90 {. box-sizing: border-box;. -webkit-font-smoothing: antialiased;.}..ekabin0 {. appearance: none;.}..ekabin1 {. user-select: none;.}..ekabin2 {. cursor: default;.}..ekabin3 {. cursor: pointer;.}..ekabin4 {. word-break: break-all;.}..ekabin5 {. word-break: break-word;.}..ekabin6 {. word-break: inherit;.}..ekabin7 {. word-break: keep-all;.}..ekabin8 {. white-space: normal;.}..ekabin9 {. white-space: nowrap;.}..ekabina {. overflow: hidden;.}..ekabinb {. overflow: scroll;.}..ekabinc {. overflow: visible;.}..ekabind {. overflow

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3361
Entropy (8bit):	7.878036271697802
Encrypted:	false
SSDEEP:	96:iP675Pk+D0h4nCz9Cx0v7C89KfN+CAfLVWu/Gu:iP6RDVnC5Ou7CTlwfLsu
MD5:	CD5A34185731B928DEAA73D238282AD6
SHA1:	ADC51D268F441C1B1BD650560434A23BFE75F881
SHA-256:	5C4CEF1338D37E798C56FDC594A933D4267848242E5128D57E0CE34D032D748E
SHA-512:	00248261793456A65DC2F1A2318030507D0B47480456F87E518B9D913EB9346611BF74003557F51C2CA0C668ADC404B2566219292C4D9CCA49FF5B08F85F3F9B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[i..G..^Uw....k.c'.1.a" ...K.J.#..`G...H..B.$@..AB........Lb......? ....q.E.D"b...w}...\}.{...9.]...3v........]U.K....y.(.!.7..... ,O.~.[..\|....+..........v..jx.v...rY..g...k...}..U....W.+R.y.......nz..gf..._.l.........l...........Y...a..H.-W..F.x....A..E.o[n..e.pd../.0........\|....!..!..\|_f...B.......u..N!u/H6@....}.z..FFFx9c[.tL..Gv......Ut.u.i..D..........(..(..A....;!..X.s..W.r.r.z...K[.<..."..{...6..J....W.].x.tv]E..z.n...c.-.U.o..[n.Yo......G...=..mI8:.I..ss.uZ..q...j.....<...n)[... ..._...SQ..:.j.....(!.s.y...r.+...tlK... .W.S.U..d7..jd)O..tlK... P..z..D."....&.(.{.".a..2..<..G?.{f.>..@......b......G..e.E.....$...R........\|. ..&R.0.P.5 [.%V.....pd.......E^.z5.0pOO....(m.q%..Q %.F...K[..~e.Z.\|i...t.fE....8s..lq>..,> q.6.D^&& .w......4-.\|.@C./..&F..T..N...a....$%..@.Ph......(.b..O..H#.$. ....%......VUoxq...3.\|.......<K]...!.s..Nq[..$...5.f..{..%

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18633)
Category:	downloaded
Size (bytes):	18711
Entropy (8bit):	5.314355077645767
Encrypted:	false
SSDEEP:	384:K9Vk9fd6/CJlIF4W123Hm/Y9mI0Gmb+vo:K9VwfdcCJlI+pmg556D
MD5:	38B4C901314062F48FEAC0EA114249E9
SHA1:	4345DBF4C0C9F89F36BB1D53FDAA6ECD831F76C5
SHA-256:	2F4D859EBAF8B9FFE0023C8D2753160EF307D584DC9C7336C44C6D64032F636A
SHA-512:	28F1CF5109ECFA5653E0E6FE97A0581F99A3BAA8A642C3C621CCF1B2B77ED600B16254ABA9C354BA2CC5459155AE153BD18EB7206FF7CA815DA22C645ABFD2C1
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-legacy-bh.min-vflOLTJAT.js
Preview:	define("metaserver/static/js/sharing/request_access",["require","exports","tslib","react","classnames","@dropbox/dig-components/buttons","@dropbox/dig-components/typography","@dropbox/dig-components/text_fields","metaserver/static/js/components/ui/css","metaserver/static/js/sharing/api/client","metaserver/static/js/clean/viewer","metaserver/static/js/clean/web_timing_logger","metaserver/static/js/core/browser","metaserver/static/js/core/i18n","metaserver/static/js/core/uri","metaserver/static/js/api_v2/user_client","metaserver/static/js/core/notify","metaserver/static/js/sharing/components/team_card","metaserver/static/js/teams/ui/team_discovery/data/logger","metaserver/static/js/dig-illustrations/spot/paper-airplane","metaserver/static/js/dig-illustrations/spot/give-key","metaserver/static/js/dig-illustrations/spot/target-miss","@dropbox/dig-icons","@dropbox/dig-icons/assets","metaserver/static/js/logging/hive/schemas/sharing-request_access_user_events","metaserver/static/js/logging/t

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 550147
Category:	downloaded
Size (bytes):	161609
Entropy (8bit):	7.998141093045708
Encrypted:	true
SSDEEP:	3072:oaA6fZPgy0IOqNfMc5vuI0QfcJk47NhyCHIK+DbYv4AIEhptke5oqvoivklJhYOM:+6f9gNIRkc5X0Qf4OKScv4ATa7DYb
MD5:	6C45A1193C091A08F258C0D89F840161
SHA1:	9537C94241DA9B8988DAA4C175E5E3B7B7A10149
SHA-256:	81557729DC15395B1E0FAD05598B98CC93565DF5A52D8D703D04D4B8C74640C9
SHA-512:	0BF0954B502B5BBB1D45C44BE089D22B96B063420FBE1792456FEBD4BFA80E8E124AB1793C0DA4EF1A399F8864C9F5101E70BE89E654C11C8312FDF50B9E099A
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/203e68a375ea7f28c0de.MMYkLQEeFZd4PYXbLlLiCe5SizWEJT-CGzSC04pJQ8c.js.gz
Preview:	............v.H....OA..V.E."8...e.eu.[.]U.b.!2)...,........}..E..H.Z....-"..........M.........Wo..........~........q8..e8+....^.......R.W.tzu.+.s.e.5.f..,...d`........2bb..k..&...k..i\Ok..x(...7...+1#2<..U...D...Z..W.Y.7.]...Qu.....>...K..]]..?Y.L3.nmw../j+}pk.....u......Yd..Xu...../X../...MN.t.B..e.....VoX.!d...0/.h.aI....`<..^t:Y......;b..{....N.?.U;...W.V.... ..6..[.......P.....~...`....v.F.....Y.0...!..........WF.y.9.n..]..'....*.....?....I...5\'....P..A.T.,pM.0r...S.:).,..b........:(......#......a+..nV.?...+.L..2.?.y.j....b...1..~..kxV........O.,..Y!.d..?.,..y .a....i(..C...j..y ......?....!.....F5.~...^.\|6(......jx...h....}..%e.Gzq..,.}.v..S...U^-.C..`...P.g..........."...w.{..>E.^..y.y..~.....`.U.<....2`O.)].9./..{9c...@.b...b.....&....-.\|..U.yDa.N`.i,1..<.L....v..h..\|..?-Y.=..S....w...K).\|..x..2.i..E..P..p.....z.... .Q..X......B........?..\..M....i...%I.yk{..........1...............Z."=.kx..\|..A..\|.Y5sjy....t'GN.p...;....[.&..

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	33262
Entropy (8bit):	4.902241569522413
Encrypted:	false
SSDEEP:	384:0p0yf7HfbHINrDzWbAIpqWFyf6HfbHINrDzW0AIpqWC:c0yf7HfbkWbAlWFyf6HfbkW0AlWC
MD5:	EC794844C94ECED396DF1B36CA9F8BE2
SHA1:	EA96D9EB893DF1C050A12DF2B027EEB79B945750
SHA-256:	52BD39DB795949FCB00B46F33157F1BDDE1436B5E7BD1FE10D3C3E8D22EF9331
SHA-512:	074124D1330804F57F4D26C6C88338DE5B0594E7C15DE00F0778EF344B9CB68A7B4761BBE7645D92E7F9817BA7B113D4D520AB3B47935F8FFA9788DB471E0E96
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/foundations-tokens-vfl7HlIRM.css
Preview:	/ @generated -- This file is automatically synced from dig-foundations@1.8.0. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./../! autoprefixer: off /.:root {. --type__title__medium--lineheight: 28px;. --type__title__medium--fontweight_strong: 500;. --type__title__medium--fontweight: 400;. --type__title__medium--fontsize: 22px;. --type__title__standard--lineheight: 28px;. --type__title__standard--fontweight_strong: 500;. --type__title__standard--fontweight: 400;. --type__title__standard--fontsize: 22px;. --type__title__small--lineheight: 26px;. --type__title__small--fontweight_strong: 500;. --type__title__small--fontweight: 400;. --type__title__small--fontsize: 16px;. --type__title__large--lineheight: 36px;

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 152931
Category:	downloaded
Size (bytes):	42449
Entropy (8bit):	7.99400435251627
Encrypted:	true
SSDEEP:	768:lavTo3rw5A0k6v51Wpf0yWo+NcZ79R4TiIwbTSiYmuPkZAG0tq2RS:lSTxkaWpaSZYTrOFhmkZA/tfU
MD5:	3059A3E5A0BA887521C0DA9FB013A9BE
SHA1:	7365C6C7252C98095E44235368F5BB2AEDFD7D96
SHA-256:	5B63ABCA8CA0C307239E536856ED68EC1D37DD247706C1E23CF8E6330CDB5E8F
SHA-512:	7150D4BAE00C0129D99E2AD6594E41A3C76217B5CD6AEE1F2E316BB451E95B43A6DB6A02116D557A7207BF3D7653DA2B413FD5FAF0EAB422B638F4EB607E95C6
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/963f506dd3b13f085f86.9xSTzoX27fePTtpU9w3kQf0jim1dDShjEsYt5H_LWjc.js.gz
Preview:	............v.F. ...p.U.-..rN.(.R.t..L.$.]e]--....@..@......}.u.......w......Nw.UN1.s..S.....(..]\\|:.}....>....b.../?.\\...xx8;.z.Y1v..i8e..%4b...?fi.0.c.d.."..(.%,&q..JV..,....]D.....Y8......v....m..w._.\|....a.g....O..../lX."6.....:(...w..X.9.f.s..M..X.}k...^.I8d..r8>..+...Y.1..'....h\/.&,.U.B.r._.c...&......&.. u..x..!.............W.=?.._.C.w...'.3Lb..E..nQ...Q.S.Kg..8h...e.\|..A?....]/..........{9+gy..../.`./a.[0M.7.I...{p.n......m.+.x...O.....h.A.$..[Ysg...<.',.........=(<..Y.\|.....T<.&.Y..O....]...U9..p....w.\|..sh.<.js..dc.>.M...;6..]....]m_Xo.&.I...{..}a._...G.^&l......wp#...ei.....<.............,K.g..f.=._..4.\.........C.M....p..C.....9..{+.<...$..F.7.s..kDZ..jt..8.m..5c.....N...1,Y.-hz}..[z..7T..n.(.'..l....ir.'..f.........-..-Y.Q.&......6gx..I.5..6......Pnll.k.`....6{......\|(....J'.......QUK1vS.........U/..V..........D.a.r.'....w~v.=.^Q.y..-K..L...Gp......?."1P..U..F...,...''..NR....~qe.:.u..dAH.>+...!..........H..rX.b. (...

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	245606
Entropy (8bit):	5.20857491248555
Encrypted:	false
SSDEEP:	6144:Kp903cuhe87rGh1h4fI+0eDeKlf+pAVmnGNfJazo8yRPfIrEQfhjpa0hW2RhEY/X:Kp9QS
MD5:	DD70354AFBFE6D8A562D6307B223D851
SHA1:	84EB2133B8A3D827065734F283548D8AD99CC2D6
SHA-256:	1B732FBF7BCB2FDA82A4DD8254E1B3B7D23D9BE515FDED51598229554CFB0037
SHA-512:	8D74F8B546B6649579E0A5FDD96CA1C3B994697B5E29CE4961941CC2326A21B023DB06E9BAB75476EF81D66560BF73B78B753ED6920B29E7F5806AC43D0898FA
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-spectrum-content-icons-compatibility.min-vfl3XA1Sv.js
Preview:	define("spectrum/icon_status/bundle",["require","exports"],(function(e,l){"use strict";Object.defineProperty(l,"__esModule",{value:!0}),l.ICONS=void 0,l.ICONS=JSON.parse('\n {"complete":{"attrs":{"width":"18","height":"18","viewBox":"0 0 18 18"},"dangerouslySetInnerIconHtml":"<path d=\\"M9 18A9 9 0 1 0 9 0a9 9 0 0 0 0 18z\\" fill=\\"#00A83E\\"></path><path d=\\"M7.583 10.315l5.128-5.128 1.62 1.62-6.748 6.749-1.62-1.62 1.62-1.621 1.35 1.35-1.62 1.62L3.938 9.91l1.62-1.62 2.025 2.025z\\" fill=\\"#fff\\"></path>"},"fail":{"attrs":{"width":"18","height":"18","viewBox":"0 0 18 18"},"dangerouslySetInnerIconHtml":"<path d=\\"M9 18A9 9 0 1 0 9 0a9 9 0 0 0 0 18z\\" fill=\\"#D5001F\\"></path><path d=\\"M13.91 7.773H4.09v2.454h9.82V7.773z\\" fill=\\"#fff\\"></path>"},"sync":{"attrs":{"width":"18","height":"18","viewBox":"0 0 18 18"},"dangerouslySetInnerIconHtml":"<path d=\\"M9 18A9 9 0 1 0 9 0a9 9 0 0 0 0 18z\\" fill=\\"#0061FF\\"></path><path d=\\"M8.98 3.751h-.19c.063-.002.127-.004.19-.004V2.

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3254
Entropy (8bit):	7.881903934112887
Encrypted:	false
SSDEEP:	48:oUrW498bxWFYf4BohZ5UYosBzQq26oZlaEC/seHdtpGsx1Cgv/fZZR:PrGfoOxBzQqUZeswtpGsxZv33R
MD5:	F8AB974B28712B004AF916D2C01D4E86
SHA1:	E62CD02778BA129D1980C97B70B260D4CC785C4B
SHA-256:	0ADB74E5FDE0A3721A35E40D7E4549DDB0952BA017E7789E7653818BAEA2B0DA
SHA-512:	F135A48DC81A28D572AF87B5BC922CB3F31E30233B92E035A2DFCD292BD1E0757A81B40E0986D606BE3E56E529C316AA507B36AFD995191B238B3A64B568D0D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....CIDATx..[kl.....3....M.....+).....8Q..TZ.H#T.J....G).....r.QJ..."..m..P)$.B.h.B...}..%.1.&.Ml..>.qO...zvwfv..M.I#.sg...y..A.u...Et..d.8.<...c.~f.t'.n.......O...C..}..e.........@.+....N..,.Nu...e...Q..,........Z....=...Y....n.T..&.U.&..l.(/...,B@x...l...$M....;v;0/....>.e.PJ.v'9./z..9a......}/a..\|....`v...+..D.BH.....%{.;0.=..5.9.......0.lQ.>w.J.......0...m........tj,.W..{.).Nu..L...\...m...y.sk..3l...J..:.l......3..v..>V.CD......p..5...s.~..u..3@...`...un.`..@."aY.e....U.(..',...g.e..V-_..Y..s..nf..pV...o....c.f.....4....cnMc>....b.`...L..%. ..ol/...@)#D..?.!?...l.. H........^....b....f.....YAk1...."..j~h..uc.-.<.e...o.s..O......,..^^.(.."....A4$`........>.o!.E.<<r.V.a..f...@.+\&..@.N.b.......3...5.W.T....h...B5.q.J.Q>.T"....M"..=sYUD+......&B.& "..C.X.H......_..U......U...^..S....`,W....m..#M.(5.g.~......._..4b..R.[.R..7.$z....0...r..!":;iY

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	660449
Entropy (8bit):	5.4121922690110535
Encrypted:	false
SSDEEP:	12288:3PUKyvwjOOvwZ1ARuxntuicBh8hS11dsUA:yvjZ+/pIUA
MD5:	D9E3D2CE0228D2A5079478AAE5759698
SHA1:	412F45951C6AEDA5F3DF2C52533171FC7BDD5961
SHA-256:	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
SHA-512:	06700C65BEF4002EBFBFF9D856C12E8D71F408BACA2D2103DDE1C28319B6BD3859FA9D289D8AEB6DD484E802040F6EE537F31F97B4B60A6B120A6882C992207A
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6678.19/scripts/boot.worldwide.3.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.3.mouse.js'] = (new Date()).getTime();..;_n.a.jR=function(n){return n.dS()};_n.a.jZ=function(n){return n.eh()};_n.a.jP=function(n){return n.cC()};_n.a.jQ=function(n){return n.ca()};_n.a.hZ=function(n){return n.dO};_n.a.jU=function(n){return n.ed()};_n.a.jT=function(n){return n.ea()};_n.a.kb=function(n){return n.ej()};_n.a.hM=function(n){return 300};_n.a.fh=function(n){return n.V};_n.a.jV=function(n){return n.bI()};_n.a.ie=function(n){return n.mh()};_n.a.km=function(n){return n.bl()};_n.a.ka=function(n){return n.ei()};_n.a.ko=function(n){return n.cV()};_n.a.eX=function(n){return _y.E.isInstanceOfType(n)?n.y:null};_n.a.jN=function(n){return n.c()};_n.a.gm=function(n){return n.b()};_n.a.jM=function(n){return n.b()};_n.a.ib=function(n){return n.jM()};_n.a.iq=function(n){return n.bG};_n.a.iX=function(n){return _n.V.isInstanceOfType(n)?n

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 224102
Category:	downloaded
Size (bytes):	50458
Entropy (8bit):	7.9951452369356835
Encrypted:	true
SSDEEP:	1536:NUfC51Km7anQnOZ/fF0nSiJuntuwrB/hx:NP5junQkkSiJutZBJx
MD5:	4158CD31625479157AAF571D60760761
SHA1:	1F2EE60B4CF6088BA973672CDC0A38489BA4EE52
SHA-256:	688301F1D5A5AC39833064FBC3246C4BDBDE89CCA4BE33FD52AC3EFDF8113EA8
SHA-512:	0C04C6FEED6C226BC6B2E04B9A8F629A78C483D67A6A96A5721422C5D1C2B9DB8A59822522172DA9398C8035097A8B22EA6F6C8FA875C520FBA388DBB71F06A6
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/40510ae9daba5bc1eecd.V6a3ctxyWdzDRllwjLOfmIDzNHv4uE2gDbtPTAvJzfo.js.gz
Preview:	...........Ys.X. .._A.=..N.)j..X9J-)UjK-.U....qI...L..R...7.~i....3^f&.1..w.#.......K...~l...s..p.\p.....R.p.{.{.9...............M...q..}.....9../g.Z..t.ggz..3...1._...k9L<..o`]X^+./\3......._..K;....X.[..z}A?7....F{.B.s.....rwp..k.5..m......o.._\.`.....k.......zm.%..v.^1\|..\|y.b...E......xv......R................X.....Y......\2....Xm.k....4`A.4..z....8.T.....a....6..>.vS..Md.C.Z.....F.Ka9..a...j.S..v`../_..].m......&a.X.5.5Xek.`o.X..`0}......nm......{......J.....z.5..B7.{b^.3...Y...f..,...]...........C.g.6.[.#..`...BA....,<....B......}..+...S....a...qD...r.R.Wk...H...M6..M...........b.....ak....=\Qy3.^...?..O....l.\|5...J....X-nO.......-4.......~.n.....`.\|a.k........t.6....7...\|e.v.......B.]........U.qC.k..w..8k.H$......i..64..u....r. .7{..w.U..j..Vr..7.......k..j.E.p...}.xG..........{....U..0_q..(...I....5..............-...f.....(Pb..'.@.J~D.*.y=...f..xYyT.#.,......u.q...5..aC.cn......f.......}.Z..........14.

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7714)
Category:	downloaded
Size (bytes):	1066514
Entropy (8bit):	5.598473109308801
Encrypted:	false
SSDEEP:	24576:fGUX3c5h1Z4bJ5AtCMMHdD3TSZWkcSKdpPVS14akDeFpJGQ0QVtLX9BYW65pj:fGUX3MtCMkjVS1EyGQ0ev8
MD5:	39F65E43587E8C244A00FD06606DA665
SHA1:	5AFD4EEF16880410F137BD2DE17EA03236F6FD6E
SHA-256:	D521B7BEAFE2D86CE22F7A20BE980BBA510AC82CE5D798F2010BB99BEA9AEEA0
SHA-512:	0BF50A58FC0F88105750E347BEDA3F4E8E500A5BFAE22CC04F6AA4C1EB174C90DC298A78311A3747DAA271C2A1E2B1FF2F8FDDF83981CFD758837E7130110CF6
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/jsc/angularextensions.js
Preview:	!function(n,t,i){"use strict";;angular.module("angular-tour",["angular-tour.tour"]),angular.module("angular-tour.tour",[]).constant("tourConfig",{placement:"top",animation:!0,nextLabel:"Next",scrollSpeed:500,margin:28,backDrop:!1,useSourceScope:!1,containerElement:"body"}).controller("TourController",["$scope","orderedList",function(n,t){var i=this,r=i.steps=t();i.postTourCallback=angular.noop,i.postStepCallback=angular.noop,i.showStepCallback=angular.noop,i.currentStep=-1,n.$watch(function(){return i.currentStep},function(n){i.select(n)}),i.select=function(n){if(angular.isNumber(n)){i.unselectAllSteps();var t=r.get(n);t&&(t.ttOpen=!0),i.currentStep!==n&&(i.currentStep=n),i.currentStep>-1&&i.showStepCallback(),n>=r.getCount()&&i.postTourCallback(!0),i.postStepCallback()}},i.addStep=function(n){angular.isNumber(n.index)&&!isNaN(n.index)?r.set(n.index,n):r.push(n)},i.unselectAllSteps=function(){r.forEach(function(n){n.ttOpen=!1})},i.cancelTour=function(){i.unselectAllSteps(),i.postTourCa

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1318)
Category:	downloaded
Size (bytes):	1380
Entropy (8bit):	5.132124505106267
Encrypted:	false
SSDEEP:	24:NbmLWsRX6zCXj9WKHcnR2RLZR2SVLc3xA1GbTWMW52ky6XRFLtgQSEsAha/:NaysRXZXpWKHiQ1ZQSJcBA1GblA2kZzu
MD5:	6B0AA5F0F93B2C08C7322BB0F71FCB77
SHA1:	629D080AA342886C53E6F2D15CAC2CFC8106C704
SHA-256:	CEC2D5FBD01B28EBA1B9E3BBA878CA37DC363C4E59D8FF2169494D36B641C1A3
SHA-512:	25A87205F2FB409B5974A1923589346A0B79E7A6E30C8C7D15905550D1D792C9EA8DFCEE6BE3E256E906E51A42F549C476B2039953E4DF28E15CFFD4DE81A093
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-inject-css.min-vflawql8P.js
Preview:	define("js/browser/css/inject_css",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.injectCss=void 0;const n=["loadCssWithCache","CssEntryPoint","css-modules"],l=["css-modules"];function s(e,t,s){if(s[t].length>0){if(l.includes(t)){const n=s[t];for(let t=0;t<n.length;t++){const{elem:l,path:s}=n[t];if(s>e.path)return[l,t]}}return[s[t][s[t].length-1].elem.nextElementSibling,null]}const i=n.indexOf(t);for(let e=i-1;e>=0;e--){const t=s[n[e]];if(t.length>0)return[t[t.length-1].elem.nextElementSibling,null]}for(let e=i+1;e<n.length;e++){const t=s[n[e]];if(t.length>0)return[t[0].elem,null]}return[null,null]}function i(e,t,n,l,i){e.elem.setAttribute("data-loader",t),e.elem instanceof HTMLStyleElement&&e.elem.setAttribute("path",e.path);let c=null,o=null;i\|\|([c,o]=s(e,t,n)),null===o?n[t].push(e):n[t].splice(o,0,e),c?l.insertBefore(e.elem,c):l.appendChild(e.elem)}t.injectCss=function(e,t,n=document){const c=n.defaultView;c.__injectCssCache\|\|(c.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 31842
Category:	downloaded
Size (bytes):	10945
Entropy (8bit):	7.9840812649181085
Encrypted:	false
SSDEEP:	192:9XLXKu8LvzQKTrPgIOa3SvwDmi3APSy+MK4i9r6YEmjEFsGXLc/XkRYWNVSx:9XLXC71PIQawYqy+MT8ulXLYW+x
MD5:	2A94E693FB118FAA6FD42F801249DA80
SHA1:	C71E945A496425146276006367FD32C2A179F715
SHA-256:	09595C02F926939C36D5F3D3BEDA1C831252FE498B250FD60F2DD507AF52C1DD
SHA-512:	D520F4F539885E2B695469A7845AAB3BBA1864FCCEDEBBE9409BD10683DEDE535EB423303170145E59524EA932A1084F7C9ECAD9EAD7DDAD1365ADA7034E68D4
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/d5234f674cac144b79bf.cDu6D0nBAZvocplrTbBtBSOvdUuoODvKDRycRtZhb4I.js.gz
Preview:	...........}}w.......n..N.H...2.'.@S ..ZZ_.\..."..J..c.\|.g.=...@.=.Y..4.{....3qo.t.....O.....>./G.....p....y.....p.......s.x^.k./X~~..Y.~..d...<+'.l...1On....W<[..d...$..<K...........?\0g.:.{...i..y....{+.,X..y2.N?.&.....]].[.y.M+...]h.[..y.Z.X.ny}.....uT.'..r..i7..y.d...o.9.xd..y.V..u.C...e"..X.G.?.i........=...s.{j........./.......y.R.Z.=.....'...?.;:??....Ek...#^,..7..8.6...ucW@..=<...O..)j....;c.r..:..Qc....Y...Q..8...-....Bk.k....A.......^.q.N..2.cD.6G$..Z.CK.b...........5.R....$^p.>._.Z...%G.'v=NA..8._a.....uo-..m}..y..ow..e......_v.S..,...-...5..5/.?d...mt...P@[...M#).:.~Z+..'..y..3.s.`..Y2i-..].Lo.xq.m.s...i....Q._...eE0g.%....D.........<?......Oww.\|.....j.t...Y..v....u.@.....I.L.6.2\|.M...].......y.)KR.../t.o.../`..\|..r>..c.vg./.........G.G.~.:^.....wvX........I....T..[.A.\|..rv..b.....$;...0..<...;.B.R.....G..Pe(.^.q...D.'8..F...H......J,._k...h7.!.=.*......w.g...n>.#.b."......Q<..f.)P..s.R.FS.0.7..,..<..T.......EY3.X....E

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	813
Entropy (8bit):	0.3777162536454919
Encrypted:	false
SSDEEP:	3:CUDu//tylaJqAlTlmhy:EX7JqAcy
MD5:	DBC2B30ECD3CE2A7A8965E5B0A569DFF
SHA1:	C32D2FFDBF66B5582C8C184E0C0B436048292807
SHA-256:	9397D5506D9BB44184A4BD44001382209441BD80D8C5FB4F3DFFDB1F966B7995
SHA-512:	496E07788F07A4F31E690E67367086FBAA934CFAEF0256F669B395ADF0EBF8C677D3775BEAB50F5100D178B67F51F5F2AAA7CE8B89EC5B93CAE6F3B2C21BFD6F
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,......................;

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (52821)
Category:	downloaded
Size (bytes):	52874
Entropy (8bit):	5.379559494068072
Encrypted:	false
SSDEEP:	768:MZoDLd4QQxU7skWcjfKD1UM83jM4cf75UGTK8PvEU5pSMKBpl0mRHBozI3mGktiX:lLcReNHBozI3mQl/vvL
MD5:	CC58D7DB031260582F5900CE3577A419
SHA1:	212120B98A2F32EF6C60DB2CD2A6D8DF61B53AD2
SHA-256:	C9242C4DBB181A20720F9C93974FC83252CCBD2672EBA9B79C90280A4B3BF45E
SHA-512:	BBE2411575A938A1FB547DD25DE5A543E6E614EEE0F717FBE109E67C43E9718927AC762F611BD2C83AEF130EF1B9B8B60B1FE9766C3C02F61C308A5EF4CFE080
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-api_v2.min-vflzFjX2w.js
Preview:	function q(e){throw e}define("metaserver/static/js/deprecated_ajax/ajax",["require","exports","tslib","@dropbox/ttvc","metaserver/static/js/user_centric_perf_metrics/component_visually_complete/ajax","metaserver/static/js/deprecated_ajax/job_progress","metaserver/static/js/deprecated_ajax/util","metaserver/static/js/core/persistence/storage","metaserver/static/js/modules/constants/ajax_strings","metaserver/static/js/modules/constants/page_load","metaserver/static/js/modules/constants/request","metaserver/static/js/core/browser","metaserver/static/js/core/assert","metaserver/static/js/core/attribution_header","metaserver/static/js/core/transport/fetch_utils","metaserver/static/js/core/html","metaserver/static/js/core/notify","metaserver/static/js/core/uri","metaserver/static/js/clean/csrf","metaserver/static/js/clean/viewer"],(function(e,t,r,s,n,o,i,a,c,l,u,h,d,p,f,m,_,g,b,v){"use strict";function j(e){return e}Object.defineProperty(t,"__esModule",{value:!0}),t.SilentBackgroundBeaconReq

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	232394
Entropy (8bit):	5.54543362321178
Encrypted:	false
SSDEEP:	1536:yldzLx/ivZfjbOv/LBbLeXeKEXK81KKVKKdKbSK0cKcyKf75DMkvqBCWcDAPf4bT:Ux/ivZfjbOv/LBbLMTq9cDw4bLl1We/
MD5:	AF8D946B64D139A380CF3A1C27BDBEB0
SHA1:	C76845B6FFEAF14450795C550260EB618ABD60AB
SHA-256:	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
SHA-512:	C5CFB514F993310676E834C8A5477576BD57C82A8665387F9909BA0D4C3C2DE693E738ACAA74E7B4CA20894EA2FEEA5CF9A2428767D03FE1DE9C84538FDC3EE9
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6699.8/resources/styles/0/boot.worldwide.mouse.css
Preview:	.feedbackList{-webkit-animation-duration:.17s;-moz-animation-duration:.17s;animation-duration:.17s;-webkit-animation-name:feedbackListFrames;-moz-animation-name:feedbackListFrames;animation-name:feedbackListFrames;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;animation-fill-mode:both}@-webkit-keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-webkit-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@-moz-keyframes feedbackListFrames{from{-moz-transform:scale(1,1);transform:scale(1,1);-moz-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-moz-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);-moz-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15417)
Category:	downloaded
Size (bytes):	15474
Entropy (8bit):	5.11293142793647
Encrypted:	false
SSDEEP:	192:bR9rtVXd9hTWLZHVz13RkBv7m8hEHE6sNwd9nhLsu/jxCjzbmFIRxbRkiswh:bXVWLZb3RkM8hEHExNwJICjIiWRxVkRS
MD5:	945066289466672B1C9446FF5CC87C03
SHA1:	5C1103348D723F81AEC84A1E4E1C432E01358985
SHA-256:	B3B49E6B11C09B069E62EAB9842ED23BD7A62836A89C95759D6CA27740017AB0
SHA-512:	A4411FD07C25EF22A17494B77DE781BD7E5E6DBFDCC0FACC6F7772C31D65BA2AE2D950C27CB9FBC9FB33F6BB88EF79C0E2A2036A44EA4FC3677020F22E6E618A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-vendor.min-vfllFBmKJ.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/Transition",["exports","react","react-dom"],(function(t,e,n){"use strict";function i(t){return t&&t.__esModule?t:{default:t}}var o=i(e),r=i(n);function s(t,e){if(null==t)return{};var n,i,o={},r=Object.keys(t);for(i=0;i<r.length;i++)n=r[i],e.indexOf(n)>=0\|\|(o[n]=t[n]);return o}function a(t,e){t.prototype=Object.create(e.prototype),t.prototype.constructor=t,t.__proto__=e}function u(){}function c(){}c.resetWarningCache=u,(function(){function t(t,e,n,i,o,r){if("SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"!==r){var s=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw s.name="Invariant Violation",s}}function e(){return t}t.isRequired=t;var n={array:t,bool:t,func:t,number:t,object:t,string:t,symbol:t,any:t,arrayOf:e,element:t,elementType:t,instanceOf:e,node:t,objectOf:e,oneOf:e,oneOfType:e,shap

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3352
Entropy (8bit):	7.873239198854956
Encrypted:	false
SSDEEP:	96:22xh1Jm3gNpDxda7ajnVfAptPHdsWN4lhYGNGGmb:227aADvJVfwP9xNeCGGL
MD5:	B735B5F2FD640F4E93BBFA17772E4790
SHA1:	D8DAE0623C2A479E077764CEA5D81ACBC16698B8
SHA-256:	A42BF0B91B66F18474C243AEC9BAEC010A86E5D4D99AF841C9E762505B0D0C4B
SHA-512:	24544808FB2A0279FBF151A8CFE53B367241425DF16AD4406C92CFEAC5018A9F6F0CAEC649B50524548DE782B0DE549A5B450D9FBB6D672FBA809CDF5726CF2C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[Yl$.y....{x..x.Z+.*..-A..u ..`..,...8@...C.. @.$.O~0......!.. q`.zH..0..6\|..%.:.$...]r..p...CO..p..3...@.{........!...8{..A.5".C@M.......?/.S;....V..f'.HA?2.).g&.e...xs.BD....n..V..B.V...I...S...I..s..).D>...vA2.;...N..aa....._...Dj...9.........HX.]L..0...^..'...$p,..g'_....C..LZ4Z-.i./X..C.....%.&P...O..].K.~^...x..o..w...:...c....S....}..>.C.03.z..;..'/?....g.ZZE..n...1..X..r...~.....Ji..5<....x^..K.`H.. "\.... H.>+..3..4....b~z2..\.^..k.?.0...m.....oX.p(.B2a......[.x....g.I5?....!.).....mx...b.H!.,..KD..H.t..... $L...9..F.1....q...{......'.@....8..iC.k\...q.>.!o..m.Z...H.,..&._....Q....j....D.$.y.a..C.pq.....h..d..\._.Q...C...@(.... ..(..4.8_x...>.I..."l.6Won}..BH.....\|....!1.g'...<055M.659.\|..%.).....E..5.u.`\|...]` ...f&.......e.......0.).C.&...........s......0E?..i..x.U .3... H..B(S.J=4L...m.n.;..>.C..pX'....w1t.].0.....P.R.".

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7267)
Category:	downloaded
Size (bytes):	7342
Entropy (8bit):	5.427487708993771
Encrypted:	false
SSDEEP:	96:C/LfhszPMzXC7B3j9C67qAwrfrqgrcsPHiJb5uZviXvDea5C9N534XTyli5MGbjV:2LfhszPMajcbdqX1fxYWbsLIBjfT1
MD5:	802BA535C88508653ED33DE2C95CA5DA
SHA1:	4D0C604755AE0B70134F7658F4AAAB27A9C2F7A1
SHA-256:	54CC407EB2B20905E834EDD39B1B9D1D5DC6976374AB8541F4671780564AA2A1
SHA-512:	7756DE553C6DA4FE33C55F9221DAF24535B2CD973739C3A1F7394A376CA0CEA6B1C2A1C3CCD73D28C8C538D5E3AF39FC06B13A2250E752340AD945913DDF3F60
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-onboarding-activation-logger.min-vflgCulNc.js
Preview:	define("metaserver/static/js/onboarding/logging/logging",["require","exports","metaserver/static/js/clean/analytics","metaserver/static/js/clean/web_user_action_logger"],(function(_,e,s,i){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.OALogger=e.getEnumKeyStringForNumberValue=void 0,e.getEnumKeyStringForNumberValue=function(_,e){if(void 0!==e)for(const s of Object.keys(_))if(parseInt(_[s],10)===e)return s.toLowerCase()},e.OALogger={logToTeamsWeb:(_,e)=>s.TeamsWebActionsLogger.log(_,e),logToWebUserActions(_,e,s){i.WebUserActionLog.log(_,e,s)},logToProEvents(_,e,i,t,n){s.ProEventsLogger.log(_,e,i,t,n)},logToUXAnalytics(_,e,i){s.UXAnalyticsLogger.log(_,e,i)}}})),define("metaserver/static/js/onboarding/logging/events",["require","exports"],(function(_,e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.OnboardingSurveyModalEvents=e.DeletedFilesEvents=e.FileRevisionsEvents=e.LVEFeatureActivationEvents=e.FileListEmptyUploadEvents=e.CampaignsToolkitSequenceEve

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7808), with no line terminators
Category:	downloaded
Size (bytes):	7808
Entropy (8bit):	5.229365087117069
Encrypted:	false
SSDEEP:	96:L+qs9f6jGaJDM2j/jHHe0Oy6qkmYdcCXiwLPzwL5AcP0F0mqDY3cpS7Z:CCGaG8jrjkmYdcBwLPz4OVvqsMpSd
MD5:	CFAC4D37EBEE0DEB9CA7FF514C67910B
SHA1:	DA0A3FC895086FC6094B24811EC6E494ACACC4C8
SHA-256:	6FEDAE5107F342161BA5B8DC77D5D20A77FEEC58A4417A4CB14C8BAA883D157E
SHA-512:	40DB53C62062B2527DEC3594A669F3A4B32A44F5DF4C0141281EABBCDD0518FA52414C6A862BB1E7A0932C1E9BDB3F13EC5A4BE74C53ADBA73CAC78A460A753E
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/gridview.js
Preview:	var GridViewManager={};GridViewManager._gridViewInstanceIds=[],GridViewManager._gridViewInstances=[],GridViewManager.CreateGridViewInstance=function(n,t,i){var r=n.replace(/_Grid_ListViewUpdatePanel$/i,""),u,f;return GridViewManager._gridViewInstanceIds[r]?null:(u=new GridViewInstance(r,t,i),f=GridViewManager._gridViewInstances.length,GridViewManager._gridViewInstances[f]=u,GridViewManager._gridViewInstanceIds[r]=f,u)},GridViewManager.GetGridViewInstanceByID=function(n){var t=GridViewManager._gridViewInstanceIds[n];return GridViewManager._gridViewInstances[t]},GridViewManager.GetGridViewInstance=function(n){var t=null,i,r,u;if(n){for(i=/(_Grid_ListViewUpdatePanel)\|(_LayoutUpdatePanel)$/i;n&&(!n.id\|\|!n.id.match(i));)n=n.parentElement;n&&n.id&&(r=n.id.replace(i,""),u=GridViewManager._gridViewInstanceIds[r],t=GridViewManager._gridViewInstances[u])}else t=GridViewManager._gridViewInstances[0];return t},GridViewManager.LoadInit=function(){var t,n;for(Sys.Application.remove_load(GridViewMana

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1457)
Category:	downloaded
Size (bytes):	1513
Entropy (8bit):	5.317492117975362
Encrypted:	false
SSDEEP:	24:8HihmLRSlPcPbzLeaelliamqDWio3GMT6pFRAu7jsMRAuK1n1XRAuJXLe6r5Xo4o:2KPcPbzLoApPGMT2vKJ1JbX5XoHSm
MD5:	6DA44F1816AFF4CB20EA1324BBF31882
SHA1:	855040715BCC515D7474F3E06F1E4C82DAB0FA40
SHA-256:	79D23006CB69DD637014CF42CE54A2F265CC74BCBB253A0A4D5655F05A1260D0
SHA-512:	791F0AB018918663DFECB3349CB4677114CFC87D6F5B119C126B31744B8D23C958C61DC89C357014154C560C07387365F33ED89572DF5C9E890F2BD8449FDA91
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-open_with.min-vflbaRPGB.js
Preview:	define("metaserver/static/js/size_class/constants",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.SizeSystem=t.SizeClass=void 0,(function(e){e[e.Small=1]="Small",e[e.Medium=2]="Medium",e[e.Large=3]="Large",e[e.ExtraLarge=4]="ExtraLarge"})(t.SizeClass\|\|(t.SizeClass={})),(function(e){e.DIG="dig",e.MAESTRO="maestro"})(t.SizeSystem\|\|(t.SizeSystem={}))})),define("metaserver/static/js/clean/open_with",["require","exports","tslib","metaserver/static/js/cloud_docs/constants","js/filepath/filepath"],(function(e,t,i,o,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),s=i.__importStar(s);let r=void 0;const a=[{id:"word",icon:"word",name:"Word for the web",exts:["odt","docm","docx"],editor:o.MicrosoftEditors.WORD},{id:"excel",icon:"excel",name:"Excel for the web",exts:["ods","xlsb","xlsm","xlsx"],editor:o.MicrosoftEditors.EXCEL},{id:"powerpoint",icon:"powerpoint",name:"PowerPoint for the web",exts:["odp","ppsx","pptx"],editor:o.M

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.199950150285939
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1sQXZkMFDBRAg6n:MMHdVBMHgWdzR05sukUx6
MD5:	96E6AB2581992506426528C1BF5D22AB
SHA1:	BEA462D1B4BEC082D5775E51F73F66B5EC76AA84
SHA-256:	872012FF343F12F79E9391615479EA7AC72CCB1D4ADF9FEB05E4C0810485F8F8
SHA-512:	1FEF1D30508402DC783513762A008A41AC4C339E541D8D02578A0CED947BFA303D889DB807402C1B3E429903CC54CDCCA6BE5F97E377D6E3A6BCBBDCE479E440
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Images/transparent.gif
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:7ee40e6e-901e-004e-2cd0-cbe449000000.Time:2023-08-10T21:19:43.4313300Z</Message></Error>

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 68093
Category:	downloaded
Size (bytes):	14742
Entropy (8bit):	7.987977315120142
Encrypted:	false
SSDEEP:	384:DsJAEzyCR22AC6j579dvJ17OFO7Br3qifT:4ukwc6l9TffT
MD5:	4290032597940BDF204E32FA7C9CFE82
SHA1:	50354ED125385ED49CCE516AFBE598F77BF49425
SHA-256:	02E98267DCF10ED572B92C41CB97C0B25E6616DD8C47F723D548FC0BD1540906
SHA-512:	31E841EB5231469F80D3224E9670D1DC486A46F62180CBA2D37D9EFC7C248A9C079A8D28B6D7A08AA03310F765B33B72083FC005D7727C6D76D455F8AFDF5D36
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/576659a22164beedaf0d.iBkLR8kQiVXjyu_-bIonCC35MIiJsyM15U4ExVbjfk8.js.gz
Preview:	...........}.r.8...>....5.\|.c.p]./.3.%../.r.h..9.H.I9.(....s^n..t.B.$H.Nf....X..Fw....Z_=........a.....qt.?x{s..U.o.,.........msjO..........w........w.A..\|;....F_.`....P.?z..~...........$xt...Y...[....-...6..v...O.........j..w...e.@....f..Fg.3..M...3..l}i..}}qqz}r..<:.....>[q{.c7..O...#t..Fn\|.E1~...L1...........e...y.....zrvr.....o.....2..........1........B..O.O. .w@a.]........O...........Q].f.>..:NF..v.~.........RX..tzi..s{._.7..+....i..]..1....Yvk.$}..i.!..5......G..c.+..n.C..N..H.'~<>..q....>.P.T....O3[.......u:...4O...v&M.%..8.E!..6x...0.V.f.....&1.5p.P2...~....;.z.o...4..P..}....X..f...Q..aR...:.D....\|..R%...Y.W..D3..,.eC....+.w.v...\|..X!(>..o..\|..G..../..KA..dQ........?.2...;t..^....~..5.....X.......oG..y07....A.:b.....?..:`..V.N9H........x.N7....."............y..kZ..G...._.......X!...A...s.\|..,.L....c>.......`...%.r.$fu.?..WS....NI.~...X..\.?....fV.d..6hY.:.lI...w...5....D"D&}9.o{../....k.8.0...8=..#>.M.P..Kb.A\...T......

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65340), with no line terminators
Category:	downloaded
Size (bytes):	98173
Entropy (8bit):	5.343936799864253
Encrypted:	false
SSDEEP:	1536:b8p3cOWVvK6gME6eb6dUVl3O9f+6YbwwhMBHTj:b8pMh2oXYbKH
MD5:	F8E80183A2FB14E908B63369ADBA86A0
SHA1:	48344F71E63073CEC76041FA37D95DECFCDA6678
SHA-256:	1D73A859DA08F2BAADA5758A7A761510D739E8442EB6C4E5B2E14E67BA3B5CBD
SHA-512:	F6E8A8DD6872502574AEDC04027995771744A08C1BE0FDD4CF4372AB327333E5BDBC8CBBB618AB37096B9FB35D7BCD8D7725C369982E6578FB6A102751211A43
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-external-lodash.min-vfl-OgBg6.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/lodash",["exports"],(function(t){"use strict";var e="object"==typeof global&&global&&global.Object===Object&&global,r="object"==typeof self&&self&&self.Object===Object&&self,n=e\|\|r\|\|Function("return this")(),i=n.Symbol,o=Object.prototype,a=o.hasOwnProperty,u=o.toString,s=i?i.toStringTag:void 0,l=Object.prototype.toString,c=i?i.toStringTag:void 0;function f(t){return null==t?void 0===t?"[object Undefined]":"[object Null]":c&&c in Object(t)?(function(t){var e=a.call(t,s),r=t[s];try{t[s]=void 0;var n=!0}catch(t){}var i=u.call(t);return n&&(e?t[s]=r:delete t[s]),i})(t):(function(t){return l.call(t)})(t)}function h(t){return null!=t&&"object"==typeof t}function p(t){return"symbol"==typeof t\|\|h(t)&&"[object Symbol]"==f(t)}function d(t){return"number"==typeof t?t:p(t)?NaN:+t}function v(t,e){for(var r=-1,n=null==t?0:t.length,i=Array(n);++r<n;)i[r]=e(t[r],r,t);return i}var y=Array.isArray,g=i?i.prototype:void 0,_=g?g.toString:void 0;funct

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	89590
Entropy (8bit):	5.193479693663803
Encrypted:	false
SSDEEP:	1536:x7cx5Yu0kcI4OtiiB2ZaJUx3qVnS8auwqme2cumAaUmE4Y/rHww1erQ+Hfx07im4:+QROIiB2ZAYuwtjR1ec+y7imfg
MD5:	A55B9665B3C5DACA296C27422BF152FA
SHA1:	9220BE1BC39C3ED05FC5CF25D825B8B3A171FCD2
SHA-256:	5B53C6DB5ABDA0AEAD4DEB08A073B3A982E4CEE523A0D5FC2DC69473CD6EFB36
SHA-512:	7950DD0060557B299CEC6D6FD18F89F264E45D8A39E84F97EBB365DC8205ACD4119E7141E0C1867F99BE03D45722D57102D4368DC6E9BA65FCE194B8B24EBF04
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/jsc/controlbundle.js
Preview:	var TextBox=window.TextBox\|\|function(){var r=function(i){var u=t(i),r=n(i),f=i.value;return r&&f.length-u.length>=r?!1:!0},u=function(t){var i=n(t);return i?!1:!0},f=function(r){var u;if(window.clipboardData&&(u=n(r),u)){var f=r.value,e=t(r),o=u-f.length+e.length,s=window.clipboardData.getData("Text").substr(0,o);return i(r,s),!1}return!0},e=function(t){var i=n(t),r=t.value;i&&r.length>i&&(t.value=r.substring(0,i))},n=function(n){var t=n.attributes.multilineMaxLength;return t?parseInt(t.value):null},t=function(n){var t,i;return n.document?(i=n.document.selection.createRange(),t=i.text):t=n.value.substring(n.selectionStart,n.selectionEnd),t},i=function(n,t){var r,i;n.document?(i=n.document.selection.createRange(),i.text=t):n.value=n.value.substring(0,n.selectionStart)+t+n.value.substring(n.selectionEnd)};return{OnKeypressHandler:r,OnBeforePasteHandler:u,OnPasteHandler:f,OnBlurHandler:e,GetMultilineMaxLength:n,GetSelectedText:t,SetSelectedText:i}}();var HelpCallout=window.HelpCallout\|\|fu

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (57834)
Category:	downloaded
Size (bytes):	57902
Entropy (8bit):	5.649814995264548
Encrypted:	false
SSDEEP:	768:N1gLcWgOv9HhN6Xez5xnUQpAnArhEL085PMKVLzzB2aTsgxJ:TOBT6OjPH8nLHB2aTsgH
MD5:	DB141DD68AB50D33EFA6B5953AF1103D
SHA1:	2627E3B147D210D8B32D73D4C027098300B7938F
SHA-256:	DBE26423A528B3F1FD2C7A466351281222204F56C5C0076B96E666C75E18A857
SHA-512:	D4300003276AD622DEB4DC6CBD7973DA2E0343F9DFE8992F8CC8AFECFD35EAE5FE5B44ADDD1DAAF40EB28C14E009F6B493870CE6EAFAF341AD503FE9281A16DC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-coreui-additional.min-vfl2xQd1o.js
Preview:	define("metaserver/static/js/clean/em_string",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Emstring=void 0;class r{static initClass(){this.ACCURACY=2,this.CODEPOINT_TO_WIDTH={32:38,33:25,34:42,35:67,36:58,37:92,38:75,39:25,40:33,41:33,42:58,43:58,44:25,45:33,46:25,47:42,48:58,49:58,50:58,51:58,52:58,53:58,54:58,55:58,56:58,57:58,58:25,59:25,60:58,61:58,62:58,63:50,64:100,65:67,66:67,67:67,68:75,69:58,70:58,71:75,72:83,73:33,74:25,75:67,76:58,77:100,78:83,79:83,80:67,81:83,82:67,83:58,84:58,85:75,86:67,87:100,88:67,89:58,90:58,91:33,92:42,93:33,94:58,95:50,96:67,97:58,98:67,99:50,100:67,101:58,102:33,103:58,104:67,105:25,106:25,107:58,108:25,109:100,110:67,111:67,112:67,113:67,114:42,115:50,116:42,117:67,118:58,119:83,120:58,121:58,122:50,123:42,124:58,125:42,126:58,161:25,162:58,163:58,164:58,165:58,166:58,167:58,168:67,169:92,170:42,171:50,172:58,174:92,175:58,176:50,177:58,178:42,179:42,180:67,181:67,182:75,183:25,184:25,185:42,

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11639), with no line terminators
Category:	downloaded
Size (bytes):	11639
Entropy (8bit):	5.192812704605868
Encrypted:	false
SSDEEP:	192:ZHqaIeeago8L9nN0hUNxiHjib9NUhXkop1R1NWS9rCsnZBSVAx8c3ODqbiQ4:4aIee5o8LdN0hUNQW5NiXkYWyrtyAp30
MD5:	68C7188A72C68095DCF664C384BE4A24
SHA1:	44759AF7DA7C068E57D2C68C914CFBB488EF44C6
SHA-256:	A7321F5898D11C794E86F016F4BE7D8355872A94081ADC22D551D5298D1A2900
SHA-512:	CEF7D483D540E7A5B4404A381D25F39FA66DAE81AA58FCE1F42DFB3E03376E31B680BB623EB81ADAE7061A25967F9D196A47E97BDA94AFCCBDEEC422B0BE07F7
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/peoplepicker.js
Preview:	var PeoplePicker=new function(){var n=this,ft=null,w=null,p=null,y='Too many results, use search.',nt='Total: {0}',k=250,u,c;this.Initialize=function(t,u){var s=$("#"+t);MissingImgUrl=u.MissingImgUrl,w=u.RemoveUserImgUrl,p=u.DeleteUserImgUrl,s.data("GetDataCommand",u.GetDataCommand),s.data("GetAddDataCommand",u.GetAddDataCommand),s.data("AddCommand",u.AddCommand),s.data("DeleteCommand",u.DeleteCommand),s.data("DeleteTooltip",u.DeleteTooltip),s.data("RemoveTooltip",u.RemoveTooltip),s.data("RemoveCommand",u.RemoveCommand),s.data("EmptyListText",u.EmptyListText),s.data("EmptySearchText",u.EmptySearchText),s.data("OnClientAfterGetData",u.OnClientAfterGetData),s.data("OnClientGetDataError",u.OnClientGetDataError),s.data("OnClientAddButtonClick",u.OnClientAddButtonClick),s.data("OnClientSelectionChanged",u.OnClientSelectionChanged),s.data("OnClientBeforeDelete",u.OnClientBeforeDelete),s.data("OnClientAfterDelete",u.OnClientAfterDelete),s.data("AllowMultiSelect",u.AllowMultiSelect),s.data("Sh

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 167967
Category:	downloaded
Size (bytes):	42732
Entropy (8bit):	7.994666807412944
Encrypted:	true
SSDEEP:	768:cfsMvaniQM2SabCsyCvV0M/vdjq5OvVW4w71/Fz2m/zqAYJFkFIhTpuuB4BPEzXk:cfJvaJQRsyIV0M/ljllwRF6qq9PkFIhg
MD5:	BD71DD2DFD3DA7DB8433B7B535B9AEA9
SHA1:	275AA8CFC73D7703BEFFA7D58B2A58F49ED0389D
SHA-256:	DCBE8CF9750C478A2D2A6FEB3109239EF70F028550E67480A6166A0FF89CB0F1
SHA-512:	3D3B01806DB6B5B1122E2859BDBFB63E884FBA4E9280612347394EE6A7D92CF39A70CF27CD3C567EFC0601907CE34E964C7007630434E7292EFEA542F581E1E5
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/00e4f72cc8d07e2964b5.ezimfJZlTtJey57m97Ax4xFG22d8BUDGW-mXRHxj1SA.js.gz
Preview:	............r.H. ...0.j..d...,.V.KfV.S....A$$.D.,..R%q...>....y._...?./Y.D....Ieeu..(. ...........0..w.._.;8:x...~..}>\|....?...x\|<;w[.iz.8;s&.$H>_@. ...a..G.x......0...E.]..A4....0.>gA..B......a..d....^....s.=.:.....i4..8j.^.E..._.A.......$.F..F.9.?..x8....p.C.....e.4.^L....(...o.pXo.n.....F..\|.g..B\|..c.w......z.~...7..?....m8.x<.. q\o...N........i._...x.M#.b.d.t2..`.F7.`....,........\|.R.,.s.:..s.(.x5@. .'.....:L.A..I}.....$.~w.D..:.O...e.x....8.....Mo.~..L.x.`.]..$...u...:..QV..}xD....4.&.......z.P......E0..z\|Y.....7.. ...>..(.).....?.N.S..t..}........._.:[7.....(..D..F*..a....0..<...gP.y.....S.g~.a....{..j......n.R......}.}7.y...x.M0....l...G..>...G....fz.'C....}7l]..i..$N..F.zD].T.H"3i..2..x. U4.^...y....3o.Z0U.;sg3.x{.w.v...[...w..7............[...'...zC........G...F9...c.....G.q...u.<.C...m....\....3..sp.C\....U.c.:6...M..b4l...b...N.#@.E...4.h.4...".^f......!...r]4].m..'.....?...V.v.\|...7&VI.K.. .......)K..R.h...........gf....T..{l

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6626)
Category:	downloaded
Size (bytes):	6691
Entropy (8bit):	5.216858318251075
Encrypted:	false
SSDEEP:	96:UwpykjSrzta/B5sE5dvZIn7tHcJVdo/8blghv6amD:3pykRAEvZc7tHcJVdo/OlKY
MD5:	ED21D0D400F96D285CAC25E268F46E9C
SHA1:	5052D27CECA009766D556F0220E0E248A346D67A
SHA-256:	146AC9BD4CF1A055AD761A5841B5B5382AFA1BD907A69F24D1CE73C42B315AF7
SHA-512:	8C54CBF3DE7C7F42EA0AF60546854F1E155CA7B0499AC9199C59AF7D92CCF0575A6AE0A963EED94095065E297AF06D256A97EFE60850BB217A85C3246414EDFF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-pagelet-shared.min-vfl7SHQ1A.js
Preview:	define("metaserver/static/js/components/loading_indicator",["require","exports","tslib","classnames","react","prop-types","lodash","metaserver/static/js/core/accessible_announce","metaserver/static/js/core/i18n"],(function(e,t,a,s,n,i,r,o,l){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.LoadingIndicator=t.LoadingIndicatorStyle=void 0,s=a.__importDefault(s),n=a.__importDefault(n),i=a.__importDefault(i),r=a.__importStar(r),t.LoadingIndicatorStyle={DOTS:"dots",SPINNER:"spinner",BLUE_SPINNER:"blue_spinner"};class c extends n.default.Component{componentDidMount(){this.props.shouldAnnounceMessage&&o.AccessibleAnnounce.polite(this.props.startMessage)}componentWillUnmount(){this.props.finishMessage&&this.props.shouldAnnounceMessage&&o.AccessibleAnnounce.polite(this.props.finishMessage)}render(){let e={};if(this.props.className){const t=this.props.className.split(" ");e=r.zipObject(t,t.map(e=>!0))}return e=Object.assign(Object.assign({},e),{"c-loader":!0,"c-loader--spinner":th

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576)
Category:	downloaded
Size (bytes):	630
Entropy (8bit):	5.104525783493949
Encrypted:	false
SSDEEP:	12:1bmyTbpTCTtuvpTjYZKIt7D3D3zCxLg9rjbNUzkHDAmL7WyLwV:1bmqbpatuvpjYZKIdD3D3zCNgdNUzkj8
MD5:	9996AB583D80B72842267A8252AD79B7
SHA1:	5604CD3694964D87CADBE6681AB19F31B83BA047
SHA-256:	CF34A4F97849257F5AE0AE6BAF148C0528BCE4B8536152696E3526762A68BAE2
SHA-512:	2108180C2191599180D7583E4397CDDB70BBA4669B6DDD7A4EE1256DE141F1D235328AC88437F955E0DF5A88544A810B27590288ABEE7D34D2038FCDBAB49AD2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/clean/uxa_pagelet.min-vflmZarWD.js
Preview:	define(["require","exports","tslib","metaserver/static/js/clean/analytics","metaserver/static/js/core/exception","metaserver/static/js/ux_analytics/ux_analytics","metaserver/static/js/pap/analytics_client"],(function(e,t,i,s,a,r,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.initialize_module=void 0,a=i.__importStar(a),t.initialize_module=function({UXAConfigs:e}){r.UXAnalytics.initialize(s.UXAnalyticsLogger,e,(function(e){a.reportException({err:e,severity:a.SEVERITY.CRITICAL,tags:["ux_analytics"]})})),(0,n.updateConfigs)({requestId:e.requestId})}}));.//# sourceMappingURL=uxa_pagelet.min.js-vflrd5ssh.map

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25581)
Category:	downloaded
Size (bytes):	25687
Entropy (8bit):	5.469170972270034
Encrypted:	false
SSDEEP:	768:SpMsx1Z70CvEjVJlMiDt4U5BNcGTSLKfwAINpj8:4NIyBj8
MD5:	2C466D28B739E073B3613922A4A17398
SHA1:	E3A3BCBED17213D86D5217758D847E08F27BFFE8
SHA-256:	7010F220D17CCC2F7EE223DBB52B55C990458546108D07053A625B1EC3A4F846
SHA-512:	DE111AFC702A1F47B89328C1261A84F25663192CC677A5FC7892CB4C4E23B048E2DAF1F9B7DF7E4031DB19E7897D8AAE3BDDC04E9C07CF9496492D54FE90B9AC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-browse-and-photos.min-vflLEZtKL.js
Preview:	define("metaserver/static/js/flux/action_type",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.withActionNamespace=void 0;t.withActionNamespace=function(e,t){const r={},s={};for(const a of Object.keys(t\|\|{})){const o=t[a];if(r[a]=`${e}__${o}`,null!=s[o])throw new Error(`Duplicate action value '${o}'!`);s[o]=!0}return r}})),define("metaserver/static/js/sharing/clean/util/guards",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.isEither=t.isBoth=t.isObjectOf=t.isArrayOf=t.isObject=t.isArray=t.isUndefined=t.isNull=t.isNumber=t.isString=t.isBoolean=t.isExactly=t.isUnknown=void 0;t.isUnknown=e=>!0;t.isExactly=e=>t=>t===e;t.isBoolean=e=>"boolean"==typeof e;t.isString=e=>"string"==typeof e;t.isNumber=e=>"number"==typeof e;t.isNull=e=>null===e;t.isUndefined=e=>void 0===e;t.isArray=e=>Array.isArray(e);t.isObject=e=>!(0,t.isNull)(e)&&!(0,t.isArray)(e)&&"object"==typeof e;t.isArrayOf=e=>r=>(0,

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	232394
Entropy (8bit):	5.54543362321178
Encrypted:	false
SSDEEP:	1536:yldzLx/ivZfjbOv/LBbLeXeKEXK81KKVKKdKbSK0cKcyKf75DMkvqBCWcDAPf4bT:Ux/ivZfjbOv/LBbLMTq9cDw4bLl1We/
MD5:	AF8D946B64D139A380CF3A1C27BDBEB0
SHA1:	C76845B6FFEAF14450795C550260EB618ABD60AB
SHA-256:	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
SHA-512:	C5CFB514F993310676E834C8A5477576BD57C82A8665387F9909BA0D4C3C2DE693E738ACAA74E7B4CA20894EA2FEEA5CF9A2428767D03FE1DE9C84538FDC3EE9
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6678.19/resources/styles/0/boot.worldwide.mouse.css
Preview:	.feedbackList{-webkit-animation-duration:.17s;-moz-animation-duration:.17s;animation-duration:.17s;-webkit-animation-name:feedbackListFrames;-moz-animation-name:feedbackListFrames;animation-name:feedbackListFrames;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;animation-fill-mode:both}@-webkit-keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-webkit-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@-moz-keyframes feedbackListFrames{from{-moz-transform:scale(1,1);transform:scale(1,1);-moz-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-moz-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);-moz-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1217)
Category:	downloaded
Size (bytes):	1274
Entropy (8bit):	5.1029774955694185
Encrypted:	false
SSDEEP:	24:8ghdoJainBR8+qIa3zsapGlsuG8Kh7HeAlzsaqhQs8USbFlQbPSF7LeL:bhGJayWDZFdxbC3NbPS5M
MD5:	129919CA46D84B3EE089A45A456206AE
SHA1:	1C9A18701CB5D3DE6D279F8E13460FD4DEAE9CB5
SHA-256:	B5346E33936EAF6481217FC40455E813C33A13D824D6520C7AEDED203BBE37EB
SHA-512:	E92F0BB9E8BBA9709F5EE058FE8709B97238A8EF52E13589B4A4A3633CD0E9386E18EDF90BB73B01B5D1B306DE77C07A18A6F1B1DBD7649466A9BE9754958523
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-badges.min-vflEpkZyk.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/badges",["exports","../../common/index","react","../../common/_commonjsHelpers"],(function(e,t,s,a){"use strict";var i=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(s){if("default"!==s){var a=Object.getOwnPropertyDescriptor(e,s);Object.defineProperty(t,s,a.get?a:{enumerable:!0,get:function(){return e[s]}})}})),t.default=e,Object.freeze(t)})(s),c=({className:e,children:s,inverse:a,status:c,...n})=>{const o=t.classNames114("dig-AccessoryBadge",e,{"dig-AccessoryBadge--inverse":a,[`dig-AccessoryBadge--status-${c}`]:c});return i.createElement("span",{className:o,...n},s)};c.displayName="AccessoryBadge",e.AccessoryBadge=c,e.NotificationBadge=({className:e,children:s,status:a,...c})=>{const n=t.classNames114("dig-NotificationBadge",{"dig-NotificationBadge--dot":!s,"dig-NotificationBadge--label":!!s,"dig-NotificationBadge--status-alert":"alert"===a,"dig-Noti

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 904810
Category:	downloaded
Size (bytes):	254344
Entropy (8bit):	7.99892774399906
Encrypted:	true
SSDEEP:	6144:Mbmzk8jxV9TE+xovyjt4SNiqNgURekfjpL:oaL1nTEQoK/i2zekfjpL
MD5:	36E19613E7BA83A1A238D902B2693894
SHA1:	37C70549E5BA7845B1D49997668F95324E027C5B
SHA-256:	3F6A91B661256BF19E7FA419804C7B4DC5315C5DE4A77F507C72F873BDEC512A
SHA-512:	130E8730DF3569D1F8F69F944100AAEA79DF7756A682276ABF81D6E2C046210DBE979D999B2D4764C2DD4722EB8218BF1DC907F9637A7859FDCC21C0F030F317
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/9454d8fa2212567ac845.WfD7VSo61Cc5xmHVBpbY72RawNlX3T2FkjNti0c6IYw.js.gz
Preview:	............Z..(......)MD..-Iwd...3....x&..'Z.(VK.ImL..w^..;.r..<....J58.^g.g~k.M..5j.j\..8.............]...s.........{k...z...rON.Y8..Y.M..,..8....,Mn.'.9..D....Q"...$.GgQ6)dA.^$s.N...t+....$.&\|.<tN.........<..q.../..=8.UL.A$...a.A...-}..L.o.h...............~...........g.....~.=....y......`k.R.Q...o.>.K..a.e..d%......Y.S...?./.S...ww...r ..<.E9..E9..Y..731....r....z...n...q..............@.f)..S...N...2...)D".x>]7Ko.2..?...H.....=K.^.>..Q&..y8s<?..q..bP......,..ls.7.-\..............D.8p..._...0.... .}.e.Qy...Q.qR....x=u..`..X.n"..\'.?....H.)..I....p..p...A@..e..j=.......N\ .......n/..\|.N..f...?.~...$...O.......N.....^:...Q..O......vx...1?.9.e....G....`gE....H.{.,..].a.....8\O.s.8Z.'z....3sp.[...2N.z[...Na..W7Q...}..4N/..Y.`....WB..u..v........U.Dp.<o.....,.o.M.lM.6o.S.i7...s.0.....7&T...d.ol<~..h.G.X......f7y\|yU.........D......b..x".BD.9.;`....p....I.......b.G~r.1vq......W.?/.a..E../.1+.q...8.....+.G..3..,........3..B...K9i..U

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	813
Entropy (8bit):	0.3777162536454919
Encrypted:	false
SSDEEP:	3:CUDu//tylaJqAlTlmhy:EX7JqAcy
MD5:	DBC2B30ECD3CE2A7A8965E5B0A569DFF
SHA1:	C32D2FFDBF66B5582C8C184E0C0B436048292807
SHA-256:	9397D5506D9BB44184A4BD44001382209441BD80D8C5FB4F3DFFDB1F966B7995
SHA-512:	496E07788F07A4F31E690E67367086FBAA934CFAEF0256F669B395ADF0EBF8C677D3775BEAB50F5100D178B67F51F5F2AAA7CE8B89EC5B93CAE6F3B2C21BFD6F
Malicious:	false
Reputation:	low
URL:	"https://portal.microsoftonline.com/pp.l?CID=31a10a11591b4e65b79292e89a4ab17d&pageId=Prefetch.aspx&d={B:{S:%27L%27,LT:6801,UT:-1,MT:-1},A:{ET:-1,OT:5,DT:5,CT:127,RT:165,ST:166,MT:-1,LT:6994},C:{LT:1691734784155}}"
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,......................;

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 80256, version 1.0
Category:	downloaded
Size (bytes):	80256
Entropy (8bit):	7.997293870492385
Encrypted:	true
SSDEEP:	1536:b3v/dJWGemfrtJQQET8OP+Ec9DLJGXq3bhmj8WLsAhu9qT5C7zx94S:TvV0Gem7Q18c+Ec9D0q3bhmj3vu9qtCl
MD5:	9BE183D893FC4E9776E2AC5C30D05CA5
SHA1:	1C98D7DF402EEC10E05E276FDA9F097FC781FB79
SHA-256:	679054B9F305D91D3EB1DF88FA37A7490784E6E5AE6779A4335E7781504A5031
SHA-512:	AA7018E5397FBEE805D72C8A84AEA059634CCF01A9510B28DAECCB9A8A85457642DC08EB070D3478E73D51F387EB098B089A500709D954969A3DB310B22A96B4
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Semi-190618-Web.woff2
Preview:	wOF2......9...........9............................&..j.`..v.H..s.....D.....,..6.$..T. ..I..B..f[i....E.O?oa........IrV.1...;..ab..<zm..z_..l..t.v.4"=.%..!^%...........d.k.;.... ((X...4.....7..IL..@.K:. +a....n..M...x..V:.b...}....].Y..q#..r.q:...bvZ)....s.._.E....\..5.y.hm7.(....M..G.%I..75..(...Y^.k.."O.........1.7.zOjs.9.C..q...&.............../T...G&..^MR.;.1x..c.K..s.[..\{...RWe.q..G.V.fh#.x..J8@.......d.{.8uY.v.h....\Fie.>a..../.R.$..s.......... q..w;..o.b._........%.....\JMr7...nR..JF.$Y}J".,....'.-.(.pi......\..zX...b....M.:..,..B.>..~..t....N%.u.Z..<.<.n`....3.3'.EM..\|...Y.C+\|.'....Hm..U..u4..V._}...84r..A..U"...l...l>r..>..,kB2...&.1.rl.......[N....J...N..j..J....`!6Uy.........@l...$e`)7a.7a..y...s.Q!M.4.....t`..3.wg...YS.)..Wx_L.9!.?..z..."4)....U.z.:.+.C...K2.%.(...y..;L8w#^....=..j..T....J.-G.\y....P.c..XH......GDBb.j..H%dR...W..\=.....N.n]...Q.1a.E.v*.W.!..d+...oq....0.nI.H.T.. b..%Q&H..Q.z....cD..X..c."V.o.o.~.j...

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2517)
Category:	downloaded
Size (bytes):	2574
Entropy (8bit):	5.089037126818044
Encrypted:	false
SSDEEP:	48:VB7YcLLciAVB2YC9cEiAybBA0YobbBAqqkoSNIjuYtD:UcLwiKC9cEidYotqk8
MD5:	D168BFB5D6227A80BB469DAC84D62DC6
SHA1:	9DA5E0EB26A4BEEAE93B2A46E95F283DCA569F04
SHA-256:	2BDBFBD3E89725C9B390171D122F0C6289207AD3349B50BF637A21E28450D080
SHA-512:	8DA2B87C19A1B8B9E9A1D2D9C7CA45CD115626945BF55874C71F37F975196B9817741996F5507E16B629481975E62A239CA745BDC8088C44CBF2243BDD2FD787
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-files-page.min-vfl0Wi_td.js
Preview:	define("metaserver/static/js/logging/hive/schemas/web-largest_contentful_paint",["require","exports","metaserver/static/js/modules/constants/request"],(function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.LargestContentfulPaintEventRow=void 0;t.LargestContentfulPaintEventRow=class{constructor(e){this.category="web-largest_contentful_paint",this.user_id=null,this.country=null,this.referrer=null,this.session_id=null,this.user_agent=null,this.ua_browser_name=null,this.ua_browser_version=null,this.largest_contentful_paint=e.largest_contentful_paint,this.product_name=e.product_name,this.request_id=s.REQUEST_ID,Object.seal(this)}}})),define("metaserver/static/js/logging/hive/schemas/web-time_to_first_byte",["require","exports","metaserver/static/js/modules/constants/request"],(function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TimeToFirstByteEventRow=void 0;t.TimeToFirstByteEventRow=class{constructor(e){this.category="web-time_to_first_

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (18958)
Category:	downloaded
Size (bytes):	19020
Entropy (8bit):	5.249691561258687
Encrypted:	false
SSDEEP:	384:Dci4Vkliep/HPEKgG4wP78aSCJUAwUhJw/818LkyLqRop4/PJ7G4TS08r0yogyOt:5lia/HPmG4wP78jCJUAwUhGxLOop4/d8
MD5:	198CFB8F56429233786FE282F54B558F
SHA1:	D9DB9C77143177312B419FA0EC250E7485D7B72A
SHA-256:	BAF37E1294D363F362E57FFFC02FA48F2A77EF393107DCA863125C99669E4765
SHA-512:	8CDD1C3C2889B458ECD695C02B4F9218EBE984D756E264D498BD3C02B5288EF416D1B35752A3C50182A44486FE71F51D01F902F447422E7F7B568F04A8051E0D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-deprecated.min-vflGYz7j1.js
Preview:	define("metaserver/static/js/deprecated_ajax/ajax_jquery",["require","exports","tslib","@dropbox/ttvc","metaserver/static/js/user_centric_perf_metrics/component_visually_complete/ajax","metaserver/static/js/deprecated_ajax/job_progress","metaserver/static/js/deprecated_ajax/util","metaserver/static/js/core/persistence/storage","metaserver/static/js/modules/constants/ajax_strings","metaserver/static/js/modules/constants/page_load","metaserver/static/js/modules/constants/request","metaserver/static/js/core/assert","metaserver/static/js/core/attribution_header","metaserver/static/js/core/browser","metaserver/static/js/core/html","metaserver/static/js/core/notify","metaserver/static/js/core/uri","metaserver/static/js/clean/csrf","metaserver/static/js/clean/viewer"],(function(e,t,s,r,n,o,i,a,c,d,u,l,h,_,p,m,f,g,b){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.SilentBackgroundBeaconRequest=t.ValidationSchemaRequest=t.SilentBackgroundRequest=t.BackgroundRequest=t.WebProgress

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.2279808568586015
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1AWyV2/bVVVKFDkH8g6n:MMHdVBMHgWdzR05AWG2/b/VegR6
MD5:	CEBEEBE9ECDA0F0FF0F7C40B70022CB7
SHA1:	9D4F97C4E6034EAAE2074305E75AC28F0263E66A
SHA-256:	243E190398715441F2AED1B2C39A49B4A7E809964CC739340F482717CCBCF6CA
SHA-512:	E36E0E2AD3DA74080F161D267132AB20B7981B75A92365DFBB72D5EEB8BBA70420534E990CB2C9A15CE9AD98DB0E61B99B62F0FD0A9674BCB7FF2F06B9B60B89
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/header_wizard_hl_mos.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:e5205a0e-901e-0003-02d0-cb2ba5000000.Time:2023-08-10T21:19:44.6410432Z</Message></Error>

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Category:	downloaded
Size (bytes):	103533
Entropy (8bit):	5.185345176531187
Encrypted:	false
SSDEEP:	1536:RSJTHB1b0jqznjA95h2cr1L2rdAGLRdZvOZ7qF92c:Ph2p5
MD5:	1602EECFA2399F0692391B9B36ABC205
SHA1:	2B166E5E4FF838B148A64A4B652775437616AFFB
SHA-256:	2A711C7EC604EABA2A65C049A3A87E02473B82B86EEFD19DA5BC26E072F6CA07
SHA-512:	61CD25BF2EFFF9C77C9CA9AB3EAE9D3D8565DE1F77FF793FB5FE78EE3320ADE0510BCBDB5420020661B6C63F0D790A5409F55F13FC6666DCB705FBC040B6C3B5
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-cloud_docs_iframe.min-vflFgLuz6.js
Preview:	define("metaserver/static/js/cloud_docs/cloud_doc_acl_fixer",["require","exports","tslib","lodash","react-intl","react","metaserver/static/js/sharing/async_share_modal_util","metaserver/static/js/api_v2/types","metaserver/static/js/clean/ui/snackbar","metaserver/static/js/sharing/access_level","metaserver/static/js/sharing/actions/sharing_actions","metaserver/static/js/sharing/api/client","metaserver/static/js/sharing/stores/sharing_info","metaserver/static/js/core/i18n","metaserver/static/js/cloud_docs/types","metaserver/static/js/cloud_docs/utils"],(function(e,t,o,s,r,a,i,n,c,d,l,p,u,m,h,g){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.CloudDocAclFixer=void 0,s=o.__importStar(s),a=o.__importDefault(a);t.CloudDocAclFixer=class{constructor(e){this.loadCloudDocMembersToStore=e=>new Promise((t,s)=>o.__awaiter(this,void 0,void 0,(function*(){l.SharingActions.listMembers({user:this.user,contentId:e.docInfo.fileId,isFolder:!1,client:this.shareApiClient}).then(()=>t({succes

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11124)
Category:	downloaded
Size (bytes):	11177
Entropy (8bit):	5.239631405545881
Encrypted:	false
SSDEEP:	192:6QpKS6ABz4bzkwO2g/52gX2iCEfLYhnljLkebphslw1LeAkm7tJksbKz:6fah4bg12g/oACZhndkebpdedm7TXmz
MD5:	7AEB30EC7AD9D0F52A2729CCF47E1E91
SHA1:	EAF621274FB429A279F8304C2F0EC42EE75F7088
SHA-256:	47AD28A3FC253F2C5E56B4D9A209B8726C0C126BC283603C9F3EE73D34763D24
SHA-512:	2AC1E78F21DC3920C82D6D9E280AADCAC22CF3D885F5E137C76CD1A46068D7F051FBDB56E69B9C2C5072A450440B20913C01F540DFF83A393C3D1BBEF647FB11
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-coreui.min-vfleusw7H.js
Preview:	define("metaserver/static/js/clean/init_react",["require","exports","tslib","metaserver/static/js/core/exception","react","react-dom"],(function(e,t,n,o,s,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getReactInitData=t.mountComponent=void 0,o=n.__importStar(o),s=n.__importDefault(s),r=n.__importDefault(r);t.mountComponent=function(e,t){let n;n=null!=t.component_name?e[t.component_name]:e;const i=Date.now();(function e(){const c=document.getElementById(t.elem_id);if(c){const e=t.component_name\|\|"unknown_react_component",i=new a(e).start();try{r.default.render(s.default.createElement(n,t.props),c),i.end()}catch(e){console.error(e),o.reportException({err:e,exc_extra:{componentDesc:Object.assign(Object.assign({},t),{props:"redacted"}),domElementExists:!!c}})}}else Date.now()-i<1e4?window.requestAnimationFrame(e):o.reportStack("React container not found in DOM after 10s: "+t.elem_id)})()};const i=!(!window.performance\|\|!window.performance.now);class a{constructor(e){th

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	77101
Entropy (8bit):	5.39522597172119
Encrypted:	false
SSDEEP:	1536:FIIjoRWrkhNSYlgZt3SPka3Hg3QOpSWia2HZOXR2q6jThUBlPE:FIZAr6SYnHUBlPE
MD5:	B33F8A37797CDE9A4A57D18BA5CD12E4
SHA1:	EB060BA279E2202D0E692A045C01DE24BB300804
SHA-256:	AF0E554E8337C49917CD21C97D1F49E932713932357E89A51C054C58D3B41EBA
SHA-512:	410E0A03D9A1B6B4050193D07123763A3437573CE989DD57EC425901BD35EC645EB197ADE1384FA206821B853EFA375FD1602B5EE88CAA9FB9F345F3AEEB7502
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-fvsdk-support.min-vflsz-KN3.js
Preview:	define("js/pap-events/filesystem_item_actions/star_file",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Star_File=void 0,t.PAP_Star_File=function(e){return{class:"filesystem_item_actions",action:"star",object:"file",properties:e}}})),define("js/pap-events/filesystem_item_actions/unstar_file",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Unstar_File=void 0,t.PAP_Unstar_File=function(e){return{class:"filesystem_item_actions",action:"unstar",object:"file",properties:e}}})),define("metaserver/static/js/onboarding_checklist/async_share_button_tooltip",["require","exports","tslib","metaserver/static/js/async/loadable","metaserver/static/js/clean/web_timing_logger","metaserver/static/js/browse/data/store"],(function(e,t,s,n,i,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.AsyncOnboardingChecklistShareButtonTooltip=void 0,t.AsyncOnboardingChecklistShareButton

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3041), with no line terminators
Category:	downloaded
Size (bytes):	3041
Entropy (8bit):	5.443939715136298
Encrypted:	false
SSDEEP:	48:8/JawL2CDpLGLg0ELdcImwDb3+qoekDYk/GCqpufqv0wgViv9Y+eMNzeRqKb+mpZ:cL5ug3dVf+qpkMkgpufqvFgVi++ecUqK
MD5:	2A29FC3105377608989FDCF710A47554
SHA1:	F6AC20B91A57841A4F84A7DAFA490502FB20D6A4
SHA-256:	8DC4107571BA20983D62DF95A23D5CABC961418C55B75A8CEB1437A83CC7AB3F
SHA-512:	85FFFBC2A8681989E048E9A3E754ADE8D60C9FA603F88747C73C0EC02848EEF34A703EA47F0DCF40B59405B02FBA2C1B3F1700DE8D7710B9DBC6F7291B1EAB5A
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/js/passwordstrengthmeter.js
Preview:	var PasswordStrengthMeter=function(){function n(n,t,i){(this.PasswordMeterDiv=document.getElementById(n+"_passwordStrengthMeter"),this.PasswordStrengthMeterId=n,this.PasswordTextBox=document.getElementById(t),this.PasswordTextBox!=null)&&(this.PropertySheetId=i,this.PasswordTextBox.PasswordStrengthManager=this,this.PasswordTextBox.onchange=this.TextChangedHandler,this.PasswordTextBox.onkeyup=this.TextChangedHandler,this.PasswordTextBox.PasswordStrengthManager.EvaluatePassword(!1),this.PasswordStrengthMeterDisplayed=!1)}return n.prototype.EvaluatePassword=function(t){var i='weak',r;this.SetMeterLevel(this.PasswordStrengthMeterId,n.METERLEVEL_URGENT),r=this.PasswordTextBox.value,n.ClientSideStrongPassword(r)?(i='strong',this.SetMeterLevel(this.PasswordStrengthMeterId,n.METERLEVEL_HEALTHY)):n.ClientSideMediumPassword(r)?(i='medium',this.SetMeterLevel(this.PasswordStrengthMeterId,n.METERLEVEL_CAUTION)):n.ClientSideWeakPassword(r)&&(i='weak'),this.PasswordMeterDiv.innerText=i,this.PropertyS

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 64584, version 1.3801
Category:	downloaded
Size (bytes):	64584
Entropy (8bit):	7.996835296394317
Encrypted:	true
SSDEEP:	1536:OflHh/Z3j0qlC0emW75hltTVIAXu+O+TFaCkGt:EHdSKCXVTDFZ4Gt
MD5:	197F00BE92B49F2CCBA2E43105AF9F7D
SHA1:	14922675CC816A3C7538E7703E2D8A143A75C99E
SHA-256:	B6CEE80EB7532FF69B4038A549FE5B51FD10E55B025A2EB01B8D781B806FD88E
SHA-512:	C7A0EF16F2B4A01D9E1FE5D855FA2DBC970875134C203A58A1F1748CC468ECC4814BF69AAF4EB44DFB727C32AD717C85B260487BCA1E1DB5B266C0F27F11AD9A
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/SourceCodePro-BoldIt-1058.otf.woff2
Preview:	wOF2OTTO...H....... .............................F...I.....H..>.`....6.$..p....:. [2....F.n..A..Wv..}z'E..'... (.o....5....4l..oCmf.......M..[...vwi@(.i."X..;/..!$....i..y/.m..y.$....F..)...I.F.mtt.w.@8..g._..mi.pd....5.J.d........5NZW..]~.......aEX.V....).....HHO.F.e#.pF..I...\| 1}7..J)..<....q......7...+..X....!Bf=...4.e...HH....}g..0P...M..#..y+...^...\|.......$...Z........B.3..1.c..-...:3.v.KD.j..{-.#..'..X\|..$...k.&$...2W(..[xrUU(.;n3..f.......N....,2.....9Q?.3f.N...EaZ.......cJ).d..1...~%q.`.\X.b....p..b.....1.v50J7.WZ....PA..ye.d..E...q..U.....>..#...........l....fU..L....Ju...?NoJ'.SE...S........eP"Z.X.....7."KH.,+aE$%=].!b.p..d<.p..1#..1d...b.0!r..!.9L...Q..g.Le"T.{~.._....zU...7.ph.}0.x...33..........A....D,X`..........:.>.?...".Y=4:..=$kx(. .O.....tf...:.....$%k[aD.g.u...L.3...[W..w$^.g ....-Y...v.s...[.)..7.......%....7.D&.....Mrz..u.{......x...y.@d.9...CyR.../....0...iCN.:)X...R"......6..Y...u....w..B...Xh..,C.'.q.....

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17195)
Category:	downloaded
Size (bytes):	579775
Entropy (8bit):	5.462052287862876
Encrypted:	false
SSDEEP:	6144:ty1f03G7qfpTtVTrSvURy3L1ExMc/9nZhu8hYuBa91JLTZARk6H:I1f03G7qyKS1JTZ41
MD5:	45ED853B85329AEBEB31C6331EDA4314
SHA1:	0C326EAE0FE491943662145F041A51F6293B7C56
SHA-256:	68F46D02E7DB05AF27B06F9789929F57237A6A34F049B79A3A4B60DAD6F56C0D
SHA-512:	894A1277552777E9AC2AD946DA76D3EB3D84AC9F253B4331BB68DE2DDD6E58D87F7448039E1851E21A54809AAB02A6C33243D32B624842075FA2DE003913EEAE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-account_connected_apps.min-vflRe2FO4.js
Preview:	define("js/pap-events/cloud_docs/create_google_shortcut",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Create_GoogleShortcut=void 0,t.PAP_Create_GoogleShortcut=function(e){return{class:"cloud_docs",action:"create",object:"google_shortcut",properties:e}}})),define("js/pap-events/cloud_docs/dismiss_cloud_docs_manual_conversion_modal",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Dismiss_CloudDocsManualConversionModal=void 0,t.PAP_Dismiss_CloudDocsManualConversionModal=function(e){return{class:"cloud_docs",action:"dismiss",object:"cloud_docs_manual_conversion_modal",properties:e}}})),define("js/pap-events/cloud_docs/dismiss_configure_gdd_migration_modal",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Dismiss_ConfigureGddMigrationModal=void 0,t.PAP_Dismiss_ConfigureGddMigrationModal=function(e){return{class:"cloud_do

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 402323
Category:	downloaded
Size (bytes):	116150
Entropy (8bit):	7.997100306476673
Encrypted:	true
SSDEEP:	1536:I4JOG/HUL+hag6kPOTihCrqZmLxARTaMmyBmNBTiIej8wnW2HonR2bJdDWP:I4Jlhk+OOqnxAvVBqpDej8w5InR2bJk
MD5:	AEC76401B3EA856665A74F68B798E8C4
SHA1:	0B64D6EB046C2C52172BFF3831B87167C2525076
SHA-256:	73DF76B54F1D24BCEE6C3D1F6894065636DEFB4B85A2C9D7EF46D771878A85C8
SHA-512:	21887BCD8BAC6FF7EEB1DE0CAD9613DD4FCABEADF22F69FA52109D1796EDE2CEA66817853E53C23036B22783A91653D9DBC3D542FBA9AADBD0982103A30BE8CD
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/6e501f8b9009ee898fc6.wFEyMPzjGdp0HhzwUx04Vd1h31nD7XJiB3IVsODHoBk.js.gz
Preview:	...........mw.F.&......6...h...(v...dlG.....4E..)R!).N......$.d......g.....~....z..z4........7...v....?......y....B.....su=....?........U.j0..wq9.4....x..r4x..t2~.<.,......b<p?.......~..Eo>\|..^..r00.?..zG....I.1.N....G.._...h............Pn.w.G._N...\|1Z.z..+.._g...l...;\..;.......z........d2..w&pw./{.h.`q7=<.=Xt&w'.G}........x4..YR.......%....n....u....]e1...W.^.pw2x.=..\|.................O.....<.........G........k..^..D.w........1......\J.....]<h...$.\|2.....x...._Lg.{...u..'..Gw.........N...OG....g)..t)u;.w.~..<x.`..j0}.9..{..?7....6~...3.,.....z1.{...G..'.4~t.......<8....Q...D....u........O.....;..0ht.X....] ..\|.....L...x0y...M...g.............>..p...k..q.............4.?.....N.:....D...'...`4.8A}......Aov..wG...>..-.....qg:y...^..4vm.R...@:8...M...>....;`.2..\|...M..u.......n]...2............`-wdin.+.6..\.0....29.*..t"e..Y...VY...H.z.kG.....(.+.Fql....y.G~K...._~..8;.....w3q.{..^..x....hc...+Z....,N..>.r..~P....\&.6.i:.....w'B3.... ..qp......

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45781)
Category:	downloaded
Size (bytes):	45832
Entropy (8bit):	5.354406590152778
Encrypted:	false
SSDEEP:	768:z0jgGS/fQ2VP5Twkb9t8pLrUPLWA0aCJyRj5fOsH3wj0n9qSetRgvvztwus9UpW7:Msh0293nkSeaqu5pXDdYoQgVKMSTqx4
MD5:	9B98BEFEE82747D5B5C3ED640C15A97A
SHA1:	2CC53344CAE61B70E86BAA625D74196180CE6297
SHA-256:	964BEC51C6F20340F4534ABF4D468C8CBDAD5948FB9DBA12010DEE0E20F192EB
SHA-512:	EABD3618CBA309E08BB2694F3F88B7F2A7544806C7CC18EE9CFD3FC1064741800325C89C9B0D3D2EB119DD293A7D7F14B20174E5F9FF2A5FE544615B8448AF57
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core.min-vflm5i-_u.js
Preview:	define("metaserver/static/js/clean/dbmodal_stack",["require","exports"],(function(e,t){"use strict";function o(e,t={detail:null}){if("function"==typeof CustomEvent)return new CustomEvent(e,t);const o=document.createEvent("CustomEvent");return o.initCustomEvent(e,!0,!0,t.detail),o}Object.defineProperty(t,"__esModule",{value:!0}),t.DBModalStack=t.createCustomEvent=void 0,t.createCustomEvent=o;class n{static initClass(){this.__stack=[],this.CLEAR="dbmodal:clear"}static pop(e){null!=e?n.remove(e):e=n.__stack.pop(),null!=e&&e._hide();const t=n.top();null!=t?t._show():this.trigger(n.CLEAR)}static push(e){n.remove(e);const t=n.top();(null!=t?t.visible:void 0)&&t._hide(),n.__stack.push(e),e._show()}static top(){const{length:e}=n.__stack;return e?n.__stack[e-1]:null}static remove(e){const t=[];for(const o of Array.from(n.__stack))o!==e&&t.push(o);n.__stack=t}static clear(){for(let e=n.__stack.length-1;e>=0;e--){const t=n.__stack[e];t.visible&&t._hide()}this.trigger(n.CLEAR),n.__stack=[]}static

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 45281
Category:	downloaded
Size (bytes):	15547
Entropy (8bit):	7.983148497564046
Encrypted:	false
SSDEEP:	384:XEJgo433kgzUM/EEnUFhdx6DZgIjoeFgSDGsA+hgL+:4PyUM/XIzsvjt7DGsN+C
MD5:	DD977C5BF0413B561E91851DC4A22D24
SHA1:	32DB7E116C442823579A8D7AB56D185AF1E07379
SHA-256:	09002C2634297034055918CDEFD68ABAB214FFEBDBEC1333C83A228C45E3F33C
SHA-512:	1DEA88BE741584C7EA72E92B0BF6582DA7DF950E579850573B58E4DCD849A947826E917D4F9B5F2767BA69FEAF32BC2EE78D4BEDF0E5DB84A02BA1E89941F286
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/44358a50a900da035ada.LGT6HPSCk03xwXtkplDP_6Ti9yb6DDIdp68pzO0HY98.js.gz
Preview:	...........}kw...w...'[..aFr......N.6.S;i..MA...TI.H.....A....>...e. ....ya..o"6.o........^........\L&..56...qWY..G#.B.$.?.`E..%.L.}....p.g..4.uU...N.4...\E3..:.7..-.1Y.....Y.B......Y[YJ.)O..[..Ml......z..4M...Y0.S.....:.<KX;.:y..G.(....7Bx.5...6....Cb?q.....}.!.o..e......(...r.P.q..k...KH.....#......u....C?...F.........U...:........5..9....W}..0....KzE...t.0.....@.. r.Q.Z.w..bW.$..w....dF.......n5?.....:0l;./.K..._....,i.mY.....7n..El...+..NX.ki&P....X.9...#..5..%.....$.q(......R.6K.5w..*Nx...4.ty;.o...F:H.. y..%es..${{.ZN.>J...R.].$.\R..l:}.\..Y4...N.X..2.V....{.D\=sH...#..;.....I.\|...<..D.....`.]UX..cm:...'k.e...F..2..{..\o........%z$j.....0.......0.....e.L5.T...pD.`s.-9M.b,y...&.h.&..r....N.D0y7X..wv..T.%E.............$..)1.D.5.$>.....t...o......c..;q.....8..E.kjH.5...{..1m.....}....g......t.......E.. ..q,..H.CJ94.c~..g.a.QjL..(H..VAA...T.:.'. .4.R0..0l6e.R...af8.i.x...D...i...:\|..7mFo..tFA...8I.K._Di{...y..R...x.,..N...4...N.F.,.tj..

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2779)
Category:	downloaded
Size (bytes):	2848
Entropy (8bit):	5.3854277849026
Encrypted:	false
SSDEEP:	48:449rarz+zY+zmm+ZBNzGjSzXTWsa1LgblASaRaFyebnVc/wZ9Ro1zB8/z8z7z8zz:40r0eYeN+ZBNzGjSzXTWZylAIFyebnVZ
MD5:	32BD02B335C35C4BB804AA5F6F500D7A
SHA1:	105EC0F585DE6F41E2C28DF5DE5FE83FB76B63A2
SHA-256:	B7F4C3FD895479FE164C006FB55B9ED930F449BE25829EDD65881939A4FB96AF
SHA-512:	55F6EEABC0518293CAA5C55A2E2C75CE436A5020BFA0AB28155EB189DF8D3F93018DD0C1876B31DC6425D5757F43688207D560BD030A75A4265A91802D178B04
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-lazy-ux-analytics.min-vflMr0Csz.js
Preview:	define("metaserver/static/js/clean/ux_analytics_globals",["require","exports"],(function(e,r){"use strict";Object.defineProperty(r,"__esModule",{value:!0}),r.DBX_UXA_GLOBAL=void 0;const t=void 0!==self&&self?self:window;t._DBX_UXA_GLOBAL=t._DBX_UXA_GLOBAL\|\|{},r.DBX_UXA_GLOBAL=t._DBX_UXA_GLOBAL})),define("metaserver/static/js/clean/lazy_marketing_tracker",["require","exports","metaserver/static/js/clean/ux_analytics_globals","metaserver/static/js/ux_analytics/lazy_ux_analytics"],(function(e,r,t,n){"use strict";var i;Object.defineProperty(r,"__esModule",{value:!0}),r.resetForTesting=r.unloadMarketingTrackerLoggingQueue=r.pushToMarketingTrackerLoggingQueue=r.registerLogToMarketingTrackerFunction=r.InclusionMethod=void 0,(function(e){e.BASE="BASE",e.TOP_FRAME="TOP_FRAME",e.CLIENT="CLIENT",e.NEED_TO_DEFINE="NEED_TO_DEFINE"})(i=r.InclusionMethod\|\|(r.InclusionMethod={}));r.registerLogToMarketingTrackerFunction=(e,r=i.NEED_TO_DEFINE)=>{t.DBX_UXA_GLOBAL.logToMarketingTracker\|\|(t.DBX_UXA_GLOBAL.

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1483)
Category:	downloaded
Size (bytes):	1550
Entropy (8bit):	5.215352338162081
Encrypted:	false
SSDEEP:	48:1aAZD6tUraFCEzQzV/de+IK1u1zfDd/Dw+8MMUz9p:lZDviB8t5gfDRDp9p
MD5:	CCEB6629B5BD8A8AB3ACA01ECFB2C96B
SHA1:	A5FFC50AB9090B300C91A5ADA436A2C00D7BA400
SHA-256:	8A82F78C5D142BBA443AE69FD392D7FB03F315381CD37D2C6C9EDF78F238A190
SHA-512:	CDFE46DF35220E17C820B669712560D27BCE707953046D37BDD5F72FA06841BF5A2C000EE8FE609C9CF0FC0CE2D2DDE25BA1A8609C0C0E4C177E3CA2DE0E96B0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/ux_analytics/window_history_listeners.min-vflzOtmKb.js
Preview:	define(["require","exports","tslib","metaserver/static/js/ux_analytics/lazy_ux_analytics","metaserver/static/js/ux_analytics/dispatch_custom_event"],(function(t,e,a,s,l){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.installHistoryListeners=e.lib=e.SPA_HISTORY_STATE_CHANGE=void 0,l=a.__importStar(l),e.SPA_HISTORY_STATE_CHANGE="SPAHistoryStateChange";const i=t=>{const a={detail:{eventSource:t}};(0,s.runAfterUxaListening)(()=>{l.dispatchCustomEvent(e.SPA_HISTORY_STATE_CHANGE,a)})},n=history.pushState,o=history.replaceState,r=t=>{i("popState")};e.lib={oldReplaceState:o,oldPushState:n,resetHistoryListenersInstalled:()=>{self._DBX_UXA_historyListenersInstalled=!1},getHistoryListenersInstalled:()=>self._DBX_UXA_historyListenersInstalled,installPushStateMonkeyPatch:()=>{Object.defineProperty(history,"pushState",{value:(t,a,s)=>{const l=location.pathname+location.hash;e.lib.oldPushState.call(history,t,a,s),l!==location.pathname+location.hash&&i("pushState")},writable:!0})},ins

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1312)
Category:	downloaded
Size (bytes):	1369
Entropy (8bit):	4.98826817172651
Encrypted:	false
SSDEEP:	24:8XYLmq9Vu5N0dpnBcdATZyMTmuz9VIvguvQ5AIKvewL:IwOaJBcdAThTvzP8Q5AX
MD5:	A05BDED48437652A9F90A7291409EB33
SHA1:	2AE12BD7AE556E1B38C761595860302DB34AC8D9
SHA-256:	9CD33F86489E059EC2820774194A26FA73471D2456669212B6D7D20372466F3D
SHA-512:	380FC67EB4F4E4FCC2440C7CF1F6C1BC2BC4204A601B57C77A11752788E005C4B41C691C9D4000F237356088CD882DBD2452B184C2ABF999A78EF7428D941A60
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-file-store.min-vfloFve1I.js
Preview:	define("metaserver/static/js/file_store/utils",["require","exports","tslib","js/filepath/filepath"],(function(e,i,n,t){"use strict";function r(e){return"fq_path"in e}function s(e){return e.is_dir}function o(e){return e.is_dir&&"fq_path"in e}function l(e){return`${e.ns_id}:${e.sjid}`}function u(e){return s(e)?o(e)?t.filename(e.fq_path):e.filename:r(e)?t.filename(e.fq_path):e.filename}function f(e){return 0===e.bytes}Object.defineProperty(i,"__esModule",{value:!0}),i.isSymLink=i.isEmptyFile=i.getFilenameWithoutExtension=i.getFilename=i.getExtension=i.getFileRevisionOrHrefId=i.getFileRevisionId=i.isBrowseFolder=i.isFolder=i.getFileStoreId=i.isSharedFile=i.isBrowseFile=i.areFilesEqual=void 0,t=n.__importStar(t),i.areFilesEqual=function(e,i){return e.ns_id===i.ns_id&&e.sjid===i.sjid},i.isBrowseFile=r,i.isSharedFile=function(e){return!r(e)},i.getFileStoreId=function(e){return l(e)},i.isFolder=s,i.isBrowseFolder=o,i.getFileRevisionId=l,i.getFileRevisionOrHrefId=function(e){return`${e.ns_id}:$

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	813
Entropy (8bit):	0.3777162536454919
Encrypted:	false
SSDEEP:	3:CUDu//tylaJqAlTlmhy:EX7JqAcy
MD5:	DBC2B30ECD3CE2A7A8965E5B0A569DFF
SHA1:	C32D2FFDBF66B5582C8C184E0C0B436048292807
SHA-256:	9397D5506D9BB44184A4BD44001382209441BD80D8C5FB4F3DFFDB1F966B7995
SHA-512:	496E07788F07A4F31E690E67367086FBAA934CFAEF0256F669B395ADF0EBF8C677D3775BEAB50F5100D178B67F51F5F2AAA7CE8B89EC5B93CAE6F3B2C21BFD6F
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,......................;

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26186)
Category:	downloaded
Size (bytes):	26248
Entropy (8bit):	5.382494865000126
Encrypted:	false
SSDEEP:	768:UqRoUIel1Uj+xzI+qRcivQCBZUPPiFBEpm6:HPE+6vQCjp6
MD5:	B28C598B02C790BDE11B2B33AFF2C49C
SHA1:	E2ACCFBEEF9F824AE6E14C41C20823DE78644CCC
SHA-256:	A1E85BC4CBA7FC91A2E95AE3133F41E73EA0336EB9AA46135B535124BFB802A5
SHA-512:	DC077224B1D9AFD231B29AD71D64538822A754AC22DF411B2EBC9B725E310F39C4AC5FF5B0C5B0972C26F6A039E9E52B0502CAE52E0E19EB10A17FF4F7A1429A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-browse-uncommon.min-vflsoxZiw.js
Preview:	define("metaserver/static/js/clean/base64",["require","exports"],(function(e,t){"use strict";function r(e){const t=[];let r=0,s=0,i=0,n=0,o=0;for(e+="";r<e.length;)i=e.charCodeAt(r),i<128?(t[s++]=String.fromCharCode(i),r++):i>191&&i<224?(n=e.charCodeAt(r+1),t[s++]=String.fromCharCode((31&i)<<6\|63&n),r+=2):(n=e.charCodeAt(r+1),o=e.charCodeAt(r+2),t[s++]=String.fromCharCode((15&i)<<12\|(63&n)<<6\|63&o),r+=3);return t.join("")}Object.defineProperty(t,"__esModule",{value:!0}),t.decode=t.encode=void 0,t.encode=function(e){const t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";let r=void 0,s=void 0,i=void 0,n=void 0,o=void 0,a=void 0,_=void 0,l=void 0,u=0,c=0,d="";const m=[];if(!e)return e;for(;r=e.charCodeAt(u++),s=e.charCodeAt(u++),i=e.charCodeAt(u++),l=r<<16\|s<<8\|i,n=l>>18&63,o=l>>12&63,a=l>>6&63,_=63&l,m[c++]=t.charAt(n)+t.charAt(o)+t.charAt(a)+t.charAt(_),u<e.length;);d=m.join("");const g=e.length%3;return(g?d.slice(0,g-3):d)+"===".slice(g\|\|3)},t.decode=function(e,t){

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12393)
Category:	downloaded
Size (bytes):	12462
Entropy (8bit):	5.229126985619421
Encrypted:	false
SSDEEP:	384:x3yuLoSI2I8H5smP4Kru1/Wlge+G4avNOmx2OZ/:xiu8PmAKruIx7/OC
MD5:	36CD89D98F6BFDD086F902ED3A361AF7
SHA1:	A94D9F6AAD65916378C6426626D3A0F5C280DBB9
SHA-256:	ADC63C980CB78BD9C33A386E89571C8AA9E33B0B2CF1037E5DD664796CBEE299
SHA-512:	29BEBD555720C9F16EC656E33C66A302C9DA7F6ACC78ED806F673AFFDEA3D36ABFE42076C4F72DC5E323241F6AE573706C3008AC26C81E83D02C902C45B0DC49
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-folder-overview-common.min-vflNs2J2Y.js
Preview:	define("metaserver/static/js/clean/open_in_mobile_app",["require","exports","tslib","react","@dropbox/dig-components/typography","metaserver/static/js/clean/clipboard_v3","metaserver/static/js/core/i18n","metaserver/static/js/clean/analytics","metaserver/static/js/core/browser","metaserver/static/js/core/browser_detection","metaserver/static/js/core/assert","typescript/component_libraries/spectrum-sharing/src/utils/sharing_constants"],(function(e,t,r,i,s,n,a,o,c,u,l,d){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.cleanup=t.open_android_intent=t.open_ios=t.open_on_click=t.registerLoggingHandlers=t.CopyUrlLabelText=void 0,i=r.__importDefault(i),o=r.__importStar(o),c=r.__importStar(c),u=r.__importStar(u);function m(){return u.iOS&&(window.location.pathname.startsWith("/s/")\|\|window.location.pathname.startsWith("/sh/")\|\|window.location.pathname.startsWith("/scl/"))}t.CopyUrlLabelText=e=>m()?i.default.createElement(s.Text,Object.assign({color:"faint",tagName:"div"},e),a.i

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 125476
Category:	downloaded
Size (bytes):	38869
Entropy (8bit):	7.994277084866265
Encrypted:	true
SSDEEP:	768:znHDwTDkS+D1YvVI+pyhe8KYIN+Md+qEGB3RsfdryffmS7PWb+oGH/AtSi5:znhJ1YvVtl8Kum+qEGs1WX7ubjGfAtSc
MD5:	12798204852E9D8CC8328254469AD415
SHA1:	D4C85377CA255B53CA43F4A72EDB6EAEC84F0BE3
SHA-256:	DB41B5FDE3DB6CB82A03059677BB3924FA32FCF40FD57B90BCE040E23126FF69
SHA-512:	531F1F437819930903247C852FB101627F3C285E373F78EC39A1931CC9668D7C3972558366AF6DBA1514762C5BE7088301F57C045446566DCE1492DDD5178B25
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/3a78e91d6aadf6acf68f.vvRP4rRPgDOCZoHXFooGsAZ7v3LTGdymEN13v3SRmS0.js.gz
Preview:	...........}{..F......~=Z2....t.TY].qZ.q..N....KI#..D\|..I.._...C...{.lwc..yb0...`..0..7.W.;/v.........y.............sv..=I..<..."...."../.C~s.G.;.e...D...h...p..Q<T...x..h......'......l..v.z.<.fa.9.e,r..<..i.....#'c.....]$<.hc.r].cP.cl....Z9F.9n...6G...k..........6G.9..d#.#.o....6z.8J...?....i{.'Ns'.gA.G^..x.e...oy....s...k...p..3'i_...B.....o{...n..#....A.n...h..3h.]d.a..L.u..6:...T...].!.d.BL\.D...~.......".....Tt.G....>..)...3.z@.Pcv..!...-...0.+\|...^Gy.`.$.$<M.NC\|.....}.K.i;.g...ZN.y;.....0.0Q86....lL..3...k8./o....V.T}.I^.cG.....j.x..@N....e;.aE;...}..8..:...4\|H.}...$.;+."..4.....+..=...u.rj.......$......!.SW#....n.5nN.q.#.^ ..&TZ.d.H...('..8v.E.g.<..8....e,.E..g..{.S..30C.B...(...I.......0.ve.M..tW\|.r.m.`..XS..A...Cz.>.D.c D u......E"'.7.....9L8lb!O=.....4.!W@..k&......UO.a.:V..q"...^4.....@.a....,>...U..+I\'rE.....<.\:...Xr.a.E).\|.8...@..W\Q+..Z..;k......_.......J.!.X B.?.Y.N......i,K..S..I..=Nb.%0..lXuc.......y.{..

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37475)
Category:	downloaded
Size (bytes):	38792
Entropy (8bit):	5.254713385700844
Encrypted:	false
SSDEEP:	768:aIEaVtKEXmlvN6RUpp8IRG/FCdUginscCP6c9nfwMa3lUYXowydUxdMrC9j4nHzA:5zApPDRDO9bqCiVW
MD5:	76F3433C860915913CCDCBFFE68B1E88
SHA1:	2FE6890F6E39149CB0357E5CD27CDDF0E45AE474
SHA-256:	1CE02D615E92B31863AA53A68F61BCC65D628AF565C0F55056A97B7D0C873241
SHA-512:	8A11E00B1706E07C6A2E08E821916706A34D64C78F6E79666915A6B86F285FBDF4033181FD1685ED693BDF6A1EA35C1AE7843C2858707DB988F79B0E9FD7526E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-modules-unneeded-for-home.min-vfldvNDPI.js
Preview:	define("metaserver/static/js/clean/downloads",["require","exports","tslib","metaserver/static/js/api_v2/user_client","js/filepath/filepath","metaserver/static/js/metrics/index","metaserver/static/js/clean/ui/snackbar","metaserver/static/js/core/browser_detection","metaserver/static/js/core/assert","metaserver/static/js/core/html","metaserver/static/js/core/i18n","metaserver/static/js/core/notify","metaserver/static/js/core/uri"],(function(t,e,s,o,i,n,r,a,l,d,c,u,p){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.get_zip=e.getZipDownloadUrl=e.showGetZipUrlErrorSnackbar=e.zip_batch_by_ns_id=e.get_blockserver_link=e.get=void 0,i=s.__importStar(i),a=s.__importStar(a);const h=["dl-web.dropbox.com","dl.dropboxusercontent.com"],_=c.intl.formatMessage({id:"L64bdq",defaultMessage:"There was an error downloading your file."});let m=!1,f={};function b({source:t,type:e}){(0,n.getMetricsReporter)().createStats({ns:"web_file_actions",name:"download/failed"},{source:t,type:e}).record(

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	249
Entropy (8bit):	4.975328551374136
Encrypted:	false
SSDEEP:	6:pcYdWHWqR2LVeHVXMOkufN0cYh35AHRKO+6pmQsI:pXR5e1XMOkAebJ0p
MD5:	3461BB2CE406006E896AC49EFC40A5D6
SHA1:	2A53521B28C3CDA52812AEED7EE1C7F80F2BC78E
SHA-256:	37AF57A33E6053D39F7E06D6B1C1677739FF83F2835661A72300A5057798D301
SHA-512:	6384464FC33A06BD59C5F43D9163BC7ECFED108B9D5654FBD66CD30F2FCA03BFDF4D401FAE194F16C76EAFEB4BA1E08A9033E5D96038661213137A01AC08DC19
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/user_survey/user_survey.module.out-vflNGG7LO.css
Preview:	._user-survey-iframe_1jh31_1{background-color:transparent;border:none;bottom:0;position:fixed;right:0;z-index:11000}._user-survey-iframe-bottom-left_1jh31_10{bottom:0;left:0;right:auto;top:auto}./# sourceMappingURL=user_survey.module.out.css.map /

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 508079
Category:	downloaded
Size (bytes):	130243
Entropy (8bit):	7.997695551301533
Encrypted:	true
SSDEEP:	3072:JNgZA3OlXchnP8fHnblAxy1eqHEaM0IPC7EAVJ71K:JSZBlscH+ygqH9MNPUbJRK
MD5:	F8CAAD8EC85B0EAFE2DEBB6738CE99EA
SHA1:	C91D4383FD63D627347F51A1059B7A5F0A4B1D29
SHA-256:	1AD2C702C9CC907E6F3AEEA07E1FAE8ED2C7BEC60778396ACEF57983EBAD7E98
SHA-512:	F0554D601C9E52DEA54B4169C846202E38F3A0EAD4F62AB3758693506264520F8807D9BC13679593AFB236AF39999875FC42C89D2C6C0B683DD6910C81D7A48D
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/87df4624ffe7b5a7c2ce.GFvBN5WXECmkVw2Fb6h_LbiNdghMP8zM-DyMiIk6pQg.js.gz
Preview:	............v.H.0..O..\|.C...(K.P..'..V.,y,.{..i.@D.D....(.-3k.3?..._..Y+Y.S...(..y....B.(J..9..."..].].^...a.$.........7....`.r.'?.]^..-....Vg:...O..?e...Tb..#.fq.1.0..Yp.$.L...<.a....d^N..~....$...w.....g. ......[w.._. ..l...}.@.\|..=..e.`.1.....=Y_.....P0........d"...S.I..Y..S'.....(...n.\|0._.?cN.Q.v..z).gi.....;........!..(../...&.11...F1.n.K.....-/............{(.._(7../[..........>n..q....:..?.t.j..$..my...s..X....2..V..O.......$....t..... .A.X....w...A..N.........>[.>.z....k..S-.-o....../.z....i..A..zO.^...1.z.,..a.1D5...y.+A..q.!].;.}.Y.d...-?:y.u.....~.=}.:.t.........l..<k}../...<..c\|y.K.&..r?..h..p.7...........3..5..pq.b...;d,....m...w....?..Y<....!.....%.\|4.I.\|....9..kcs......%..8I2vVL.....LSv.0...QK).f.rA:.(.\7..}..\...8o...6Z.%.6w..,h.4...{.\|A..$..?H&.$....d..j.8].........D/y.a......$......;.7.J.(...{?8.Z=,.tvu......fo......%q.&Q..f.e....(.r.........7.!.}..M....[wLA.}/...~.?......#\|}...>.;1..*;..?.m.l..f[...y.."..

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24945)
Category:	downloaded
Size (bytes):	35070
Entropy (8bit):	5.051956823638353
Encrypted:	false
SSDEEP:	384:1B21YWf8EzY+Ye77bUnz3DCTFpDx1qYk7IdbBeueWaO2tnmKxMKCSXL2QKl1a:myEzY+Ye77bUnz3DCLZexp
MD5:	D046870D17DE8600288AEEA55CC9D9D9
SHA1:	67DD712CD1D7D94EE1CD3808E4714B0BDCB28621
SHA-256:	12FD034CC5E83EC32306E4DB83519C32B5EB3F109B8D66D3904591E39FA62322
SHA-512:	D69DF5110D81A66E02F32DFBCF1DA6233CAE9EE04A83AF5DD674EF8A4DEAB552AE639FDBA597ED0CFDF59A3E4A3E7A0B1182A7BC269B039F35AE3833CEC342EB
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/scooter/scooter-scoped-vfl0EaHDR.css
Preview:	/!. . * SCOOTER. . ---. * /. * /______. * 0 0. . scoot. * verb [no obj.]. * go or leave somewhere quickly: "I'd better scoot". . /.scooter-css *,.scooter-css ::after,.scooter-css ::before{position:relative;margin:0;padding:0;box-sizing:inherit}.scooter-css input,.scooter-css button,.scooter-css textarea,.scooter-css select{font:inherit;-webkit-appearance:none;-moz-appearance:none;appearance:none}.scooter-css input[type='checkbox']{-webkit-appearance:checkbox;-moz-appearance:checkbox;appearance:checkbox}.scooter-css input[type='radio']{-webkit-appearance:radio;-moz-appearance:radio;appearance:radio}.scooter-css ul,.scooter-css ol{margin-left:46px}.scooter-css p,.scooter-css table{margin-bottom:23px}.scooter-css table{border-collapse:collapse}html.scooter-css,.scooter-css:root{box-sizing:border-box;font:81.25%/1.75 'Open Sans', 'Helvetica Neue', Arial, sans-serif;color:#3d464d}.f-headline,.f-subhead,.f1,.f2,.f3,.f4{display:block;margin-bottom:23px;font-weight:400;

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 133376
Category:	downloaded
Size (bytes):	41585
Entropy (8bit):	7.994324727532402
Encrypted:	true
SSDEEP:	768:1pRByEisGXowAIpglskM5f2lc7laVIl68cKSYY+ks5HFdW5Wwi3VXgI:HyEisBlNeuaD6FY1ksz45WwqXj
MD5:	895D732E3F4C851612D16D80D33D6732
SHA1:	A254062FA941E9A6EC8F1147AB243F04BAECF8FC
SHA-256:	5201F4627152DB5E2BE92565BCC1460074D242532A4D482DC4054D5FC254F4C8
SHA-512:	E98D04CEDB1750D2A6AF1811D45BC7FEA633239CDE60564FD383162B8AEF1F6BEFF3953B60C47B049DBF5BC2D46F8C75CA7C06FFFF4BBAC47BA352A39A778F2B
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/2cdc887fa30d028a6cac.yYomW_BQJnWDD10UrVD9zI1YaI83_RjUsYv9vtzPLm0.js.gz
Preview:	...........iw... ....Q....\e.6.4[...]K.W...I...6.Ig&.Xb....ez.Yz.g.e....y.=..=..?2........@f.R...).........@ ...=......'.7.n...I....._=.t..w..8?..Y..,:,...}w8......`4..y....S...Y.P~.....8....`.......7...O6o.f....R.>+4..Z.....^....[g...A\.....a.9......,z..gcV....W.s.s.E.I2..d...c....M. ...).K.t...#H.9....eV.Y<..b\|.E5.{..#.`....`.1?.....US..m..&,t..@c...4.4_...o..}..0..]..r..q.=.....^....+...U....aN.].&H}%.6..A....8...3....6d...M...?.0=..!,.......>h...\.a...Nx../.>..T^WO..q0x...#.^..Z.WO.....P...\|...J..4....q..I...J.f4.7.0........>....Cw.v..s...S.r....Q.N..d..?\.e2...'.7x.Q[WI..\..]...x...5.......7...Jfq5z...\|8#T....0.x..Dl.v.6x..A....z6W..Ek/..78]40..izFWD...g....2.+"h6..a..U.o..!.r...i..v5d....A..........;.c..wp8..c.!__...3...C6.BX._..y.]............WD.......GA8...d.W2...e..t].y..........~.{.w..j..\..h.g]%.9.]...J.<..'....?..M*<r.O.?.,.$.+R................tnWB.I.....[o..~y...r..........Y^..>.w.xq.Jg:.+'....9.]....H..wBX G[>...y..A...e.

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18098)
Category:	downloaded
Size (bytes):	18099
Entropy (8bit):	4.795993462801882
Encrypted:	false
SSDEEP:	192:os1Zdn9dla3ur3JM7x5vh9TnTnDlv0yxfJb9qRq98/JhIEQHV:PPdnvla3ul+DqgRV
MD5:	4DCB45E4528D6C0B6087DE5B0E7F9BC9
SHA1:	F02FB25904952F2B7A6D8FA4BCB96D046A4A873D
SHA-256:	7634AAD36F213BDA5BD418AAD28F52F601BAE49B942164818698D0074FA7DE04
SHA-512:	1F62A56881CE103979A08FCB830F6CA6C0C6E79BD82E74EA180BE905EDF905B8C5D2DF5D1EC1CB9BB69B12D50BFE9DD3D07CA08EBEB9AEFBEBF64E906396F659
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/notifications-vflTctF5F.css
Preview:	@keyframes notification{0%,100%{transform:rotate(0deg)}12%,62%{transform:rotate(-5deg)}37%,87%{transform:rotate(5deg)}}@keyframes bounce{1%{transform:scale(0.7)}25%{transform:scale(1.1)}45%{transform:scale(0.9)}63%{transform:scale(1.05)}79%{transform:scale(0.95)}100%{transform:scale(1)}}div#account-header #notification-feed-nav-link{position:relative;height:32px}div#account-header #notification-feed-nav-link #notifications-bell-active{display:none}div#account-header #notification-feed-nav-link.active #notifications-bell{display:none}div#account-header #notification-feed-nav-link.active #notifications-bell-active{display:inline-block;vertical-align:middle}.legacy-notification-button{background:none}.legacy-notification-button .notification-button-bell-container{position:relative}.legacy-notification-button .notifications-bell{display:inline-block;vertical-align:middle;margin-top:-7px}.legacy-notification-button .notifications-bell.shake{transform-origin:5.5px -18px;animation:notificatio

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	1308890
Entropy (8bit):	5.368263246977828
Encrypted:	false
SSDEEP:	24576:YSqej7h9pHCUaL/UkVyPdi0D6SR0iFnTghQo4UpVjWp4j4RSouNHuni7gznlodtS:YSqej7h9pHCUaL/UkVyPdi0D6SR0iFnJ
MD5:	0A53FFFF860EBB848DA5CE4F25D8E956
SHA1:	1FBBF838A7EEC294A9F938C9701186F77D29C802
SHA-256:	6D700C526B69E1B216E5C2E35313902D67D0973AF3510E97FD9FE489F6980E4B
SHA-512:	A8767000FC26DFB97DEED3E2586F0C937FA6872E1A4B1FE3AF917EB8A025E126E0CAD3604428E646477598FBA602C595DFC5494EF21760303290D51F6D621602
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/app-bundle-e1284a8b1c0dc04e1fbc.js
Preview:	/! For license information please see app-bundle-e1284a8b1c0dc04e1fbc.js.LICENSE.txt /.!function(e){function t(t){for(var i,r,s=t[0],c=t[1],u=t[2],d=t[3]\|\|[],p=0,h=[];p<s.length;p++)r=s[p],Object.prototype.hasOwnProperty.call(o,r)&&o[r]&&h.push(o[r][0]),o[r]=0;for(i in c)Object.prototype.hasOwnProperty.call(c,i)&&(e[i]=c[i]);for(f&&f(t),l.push.apply(l,d);h.length;)h.shift()();return a.push.apply(a,u\|\|[]),n()}function n(){for(var e,t=0;t<a.length;t++){for(var n=a[t],i=!0,r=1;r<n.length;r++)0!==o[n[r]]&&(i=!1);i&&(a.splice(t--,1),e=c(c.s=n[0]))}return 0===a.length&&(l.forEach((function(e){if(void 0===o[e]){o[e]=null;var t=document.createElement("link");t.crossOrigin="anonymous",c.nc&&t.setAttribute("nonce",c.nc),t.rel="prefetch",t.as="script",t.href=s(e),document.head.appendChild(t)}})),l.length=0),e}var i={},r={112:0},o={112:0},a=[],l=[];function s(e){return c.p+""+({11:"officehome-async-styles",16:"vendors~action-context-menu-rc~app-gallery-rc~app-host-component~appbar~cc~cc-rc~copd-

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994), with no line terminators
Category:	downloaded
Size (bytes):	994
Entropy (8bit):	4.934955158256183
Encrypted:	false
SSDEEP:	12:U8Chx3fpler8DDMv1+I+zpcuVkicq32EXgBA5e2KMLT:JC3G0z1Ddf2NGe2KG
MD5:	E2110B813F02736A4726197271108119
SHA1:	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857
SHA-256:	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
SHA-512:	E79CF6DB777D62690DB9C975B5494085C82E771936DB614AF9C75DB7CE4B6CA0A224B7DFB858437EF1E33C6026D772BE9DBBB064828DB382A4703CB34ECEF1CF
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6699.8/resources/images/0/sprite1.mouse.css
Preview:	.image-loading_blackbg-gif{background:url('loading_blackbg.gif');width:16px;height:16px}.image-loading_whitebg-gif{background:url('loading_whitebg.gif');width:16px;height:16px}.image-thinking16_blue-gif{background:url('thinking16_blue.gif');width:16px;height:16px}.image-thinking16_grey-gif{background:url('thinking16_grey.gif');width:16px;height:16px}.image-thinking16_white-gif{background:url('thinking16_white.gif');width:16px;height:16px}.image-thinking24-gif{background:url('thinking24.gif');width:24px;height:24px}.image-thinking32_blue-gif{background:url('thinking32_blue.gif');width:32px;height:32px}.image-thinking32_grey-gif{background:url('thinking32_grey.gif');width:32px;height:32px}.image-thinking32_white-gif{background:url('thinking32_white.gif');width:32px;height:32px}.image-clear1x1-gif{width:1px;height:1px;background:url('sprite1.mouse.png') -0 -0}.csimg{padding:0;border:none;background-repeat:no-repeat;-webkit-touch-callout:none}span.csimg{-ms-high-contrast-adjust:none}

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3600)
Category:	downloaded
Size (bytes):	3659
Entropy (8bit):	5.2045683933583
Encrypted:	false
SSDEEP:	48:XnkIPkhTWe/WhqJM8e3CwfvR7SAvB9MlMGh4g3xcFXyKEroqOFAezc+TUMrd:XkIPkhTWeuEM8emA5fGh3xcEwBzXbrd
MD5:	F295F673C72F173D81AB88E570846B83
SHA1:	60EE5B98C4F7537F2AC34EA456AFABBF6196BCA7
SHA-256:	44C70FF1E5F1409205692E85D1CA366E98285F17C512D02EA9112E69F7AFE8DA
SHA-512:	E98FAA65684BDB2FE924D415F875E15095496139C0382AF41D465EFB0CEC5B86061A9AACA62A59AF1AEEC772C5489C8FFC50A650A1B5DB0D4831B570E3ABC1A8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-api_v2-extra.min-vfl8pX2c8.js
Preview:	define("metaserver/static/js/core/attribution_header",["require","exports","metaserver/static/js/modules/constants/page_load"],(function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getAttributionHeader=void 0,t.getAttributionHeader=function(){if(!window.ensemble)return void 0!==n.YAPS_PROJECT&&void 0!==n.YAPS_DEPLOYMENT?`${n.YAPS_PROJECT}:${n.YAPS_DEPLOYMENT}`:void 0;const e=window.ensemble.getPageletInfoForExceptionReporting().filter(e=>void 0!==e.yaps_deployment&&void 0!==e.yaps_project);return 0!==e.length?e.sort((e,t)=>e.pagelet_name<t.pagelet_name?-1:1).map(e=>`${e.yaps_project}:${e.yaps_deployment}`).join(";"):void 0}})),define("metaserver/static/prod_assets_web_modules/eventemitter3",["./common/_commonjsHelpers"],(function(e){"use strict";var t={exports:{}};!(function(e){var t=Object.prototype.hasOwnProperty,n="~";function r(){}function o(e,t,n){this.fn=e,this.context=t,this.once=n\|\|!1}function s(e,t,r,s,i){if("function"!=typeof r)throw new TypeError("

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://larationr.top/aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 26110
Category:	downloaded
Size (bytes):	8415
Entropy (8bit):	7.969332772481249
Encrypted:	false
SSDEEP:	192:d0U1FpVzRFUJsYmpDtpF4Rdi4jNS5geu4x5:d0UJfqJsYmyXGT
MD5:	F48C693B4CB0A06D506F86B8263AFCB7
SHA1:	B6528F5DBD61E3F6DB7D8347AA81CA938A1A5DD1
SHA-256:	8586E26E0E92DA5D0D7846662A525888A68075C016B9E876651A02166A8AC65C
SHA-512:	BFC128E45702DAA912A4700E6A03EB483328BF1604824D21D5D75C658C208F5C120FB97A3D0BA7538A933B5B8BD100B65B4A4B415EE5393004B537D6B3985DDD
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/baa559eb90d18088047f.62bTZ-1Y5wrXwa9_3c21HWyky0dzLHhP70An-t16gvc.js.gz
Preview:	...........]{s.6.._....9..DK~.x.0....2~d..$..(.....-..........d.*.X.A..ht...@.G/p.q........3......./.?.....k<?...."......4..............G..Y./.14M..!......g.s.0;....M....\|..s......U.......I`...4Jb.......u..^.....ZL..{.]0'.JV.....V/..V.03..:...~.W'....$4.....N...N..Q}..Tb-.W.N`R.\|_..^Db....t..1.p..F.{.f4..p.......h<..T[.Xe`. .....TO...k..j.C.'a..il,B..x....\|.....s.. .v....P'2.X.&...n.)vT.#j....../........=...w.)..R..b/...a..>8...:.T/X$1HB`.....@..u.9..T"d...9n....xy....."M...q.y.I6~}.gC5....z5..\|......~b.c.}......s.^..o..ji=.2rtm...a\|m..j.....[./w(\|v..Z. D%.4.f..U.B%!.G..8Z...(G...G.F1.".i....SM......kxI.@{...zj......?:,.....W.....!.5....0L.<.:..M........j..u..R.T.y...~...6......@..%(J.Z}PxH..M&.JbS....C...^0..l.^..%....8.\..... .../M....,.@......(../.,.5.E]..u.(.g..J.peUjI..Tk.y.......u\.^...{..).g.......^.G...p.y....^y.h..~M..({g..'I..).6.....A.c..........G....f^6....y+,.!Z.@;x...(3->.......I....X.........{..9.....wo.N&.4-y3...

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14461)
Category:	downloaded
Size (bytes):	14462
Entropy (8bit):	5.070928426297679
Encrypted:	false
SSDEEP:	192:JQNPyw5a9nhYm1lrMzXy00hukrmjJPyuu42afvyRtrMyqHdyb+imipupm2OSFQsX:JE90Mimipupm2OSFQsGeR+5ZJ0Fj5z
MD5:	FDBE69C33C580A63D1723E7B8A148896
SHA1:	C3AEB1D22E7CF125B5FFA66F3097A18010B56429
SHA-256:	9379D33253FECAB70E7E46BE435BBD1DFCDC970E25B18D2010EEB2D1CAAA6DBB
SHA-512:	7AD7AF11A546C7FD29EF1D716B03736D914A7A18D53404857C1E657B47DAECDD92FD3F68458926F8FB0D7E10C0D1E0D89F5B1880D14FBCCF36C767D2D602661D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/maestro_layout-vfl_b5pwz.css
Preview:	@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflk7bxjs.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflyEJFZg.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Regular-Web-vflJ3txfq.ttf") format("truetype");font-weight:400;font-style:normal}@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vfl38XiTL.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vflyja8tN.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vflbI0jjP.ttf") format("truetype");font-weight:500;font-style:normal}@font-face{font-family:'Atlas Grotesk Web';font-display:swap;src:url("/static/metaserver/static/fonts/paper-atlasgrot

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 496, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	243248
Entropy (8bit):	7.990223468157218
Encrypted:	true
SSDEEP:	6144:ASeWR+ZqR6BMpTtQ4Z4mXKoi0eClDeQneAznsfELIZQc:HjR+6nBCfEdTFnwEA
MD5:	691DD1415D36705796F813D0445A04D3
SHA1:	3AFC835067F813DB462A79A1ECC5786DE8952CCC
SHA-256:	518B19A34F870F8542707D2BADE2FD051794AD2C50B33C0EC2282F77EC5B4C0E
SHA-512:	75D563FFF5A93FA096F96DBE1F348C028B77E887237972FDA945DF7A4304D3343F6493BED9A922CD8A5D7CBC3302E6A8C018F37FDF50EDFA33B03651D55CB670
Malicious:	false
Reputation:	low
URL:	https://uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com/p/thumb/AB9lmxu6tlgeO1DY9f4mZYQIZtSNHK7X--vfWqgNa1P4Zq17YwXLsxJqY8dO22TUvc889Io-U7Nm4R2ItGOCgVUv524NL2y5DNHF11D-KeaE1auFPb6fvo9LHETT3pPe-QdvVSVNFo8ozXiWsiXBPxfYpotT45lR2Hahvm6VTOhSwxg9sNZ8SJJn09oDQH7_BCDpQSplkS_VPQR9owSmJwLdxTjdOJZXH84owBImVlv4qg_TXRp0MWY5TpuRc-dL50aibHPoXXnITaIZ1R9wly9X643PV-S5uxo0d2e8oNEuLP55UDdUhQrkFYkhzBHiPOEw8V8HWSbctlS3dO2Cq3Ot9RWQUZKq1R7KFZvSOoROt1nJYR3yC4gqp5p1Ky1xcWK-fN6veA8d59R0dokwD9fzfGUIH_xGN1otBRFO5-EvMA/p.png
Preview:	.PNG........IHDR.............8..=...5iCCPICC Profile..x.c``2a..... w'...(..{.l.,................v....E.!...Z.....qeRvA.... [..........@..@.h..@...x:.}..N.....E!A.@.. .!.......... .{.:..Z......$.$&g+.''...+..........300-A.!.$....r)./H..Q..K.C......+.........[..$n!.T.a......\|riQ...R@\|...s..d.l.o.....&..5'.IXOrc.,.}.]P..iV...u...4.....I\...$.....IDATx.....$.&.~j..g.....n.&........Y..y"..'ow.t7.........&A........7..AU..=<"#".#.#M...p7..\...UM.bf....(..}v5....=............6..>.7/.."....]]..U.}Q.3.bo'.9......o6...<^.7...u........D.....T.P.B...T.P.B.%7..<..2v.bc8....WQ.}....+..=s..E...rY..0gvE.e...k.nP...r....os..k....5;o...,+.u..%9R.d...O.\|...kx.x..v..r..q1^/...4D9v#.)...Jsf.\.'.M.wY...........X.....-.p.r.Zk.b....}["...a3.S..7..v.k_?r<.f................b.q..{s..{..C..P..8.9..Y.!.y..C..vc.....`.5C,.}..c..k.m`.y....{;.x.^.K..k.^#n..w........Y.5.6......d'C........k.f.....?..d'...sr.,......,...pC.^.U..eT*r\.{]Tx}>."...n....\..vY.6....S.m

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57110)
Category:	downloaded
Size (bytes):	57184
Entropy (8bit):	5.109128544239661
Encrypted:	false
SSDEEP:	768:WPDR65eMCHIMHxDBSUVHFnmHOtHO0V0BxAKhLLncolnGDBFnxfD/Cguc:WPDR65eM2Im5muAIKhLLCxOq
MD5:	D46D0D1F4F5AC34A1754B2506A9A48CA
SHA1:	B8722B4A718496A995ED03D324B0EA70A2D75B57
SHA-256:	471C4932EEF05AE101E6504F1D02FE137B2E81081EB8D34795928B4EFEB2049F
SHA-512:	B45B7C3CBD5700062CA53A4A42A972A86E55EC5F65265D077C33F4370A496FD2F0E4F6AE1767D3056123664C366628BBC42BB474F6CA28CCC111CD03124910A4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-externals-unneeded-for-home.min-vfl1G0NH0.js
Preview:	define("typescript/component_libraries/spectrum-sharing/src/utils/sharing_util",["require","exports"],(function(t,e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.isRighteousLink=void 0,e.isRighteousLink=function(t){return Boolean(t&&t.audience_options&&t.effective_audience&&t.link_access_level)}})),define("metaserver/static/prod_assets_web_modules/immutable",["./common/_commonjsHelpers"],(function(t){"use strict";var e,r={exports:{}};e=r,t.commonjsGlobal,e.exports=(function(){var t=Array.prototype.slice;function e(t,e){e&&(t.prototype=Object.create(e.prototype)),t.prototype.constructor=t}function r(t){return u(t)?t:P(t)}function n(t){return s(t)?t:N(t)}function i(t){return a(t)?t:H(t)}function o(t){return u(t)&&!h(t)?t:V(t)}function u(t){return!(!t\|\|!t[c])}function s(t){return!(!t\|\|!t[_])}function a(t){return!(!t\|\|!t[p])}function h(t){return s(t)\|\|a(t)}function f(t){return!(!t\|\|!t[l])}e(n,r),e(i,r),e(o,r),r.isIterable=u,r.isKeyed=s,r.isIndexed=a,r.isAssociative=h,r.i

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31220, version 1.0
Category:	downloaded
Size (bytes):	31220
Entropy (8bit):	7.9922945477639304
Encrypted:	true
SSDEEP:	768:uErHoikL6e4Qme5J20E4INgcgS8rB/HJlceZWv04uWHZ11zi5O:DIikWe4QYHFx8rB/7QvdnVoO
MD5:	BD65225294E9AD1114DED0A8BDE4D38B
SHA1:	B4AD89CF62BA389A9FE273E3154F0C509B36F79C
SHA-256:	15ACF74F7B49F0E1684532D3B16624880610E0CE41E4518696DC6568FCF0612E
SHA-512:	769E0CA17D129A8E8DD77C1426526F630AA7B15DC6C6592ADEB33D573894D1282398FEC044229F00ED9DF21BFA390AD567695EC0EFE814EBC92C63FCBA85EF29
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/KaTeX_Main-Regular.woff2
Preview:	wOF2......y...........y.........................?FFTM..`..J.:........H....6.$.....L.. ..}..F......G.m.4L.m.....Lfv ......J....nR.1..I.6.?.^....&..(.USn}..}........f...wa.M...xU..OR.c..z.3^Q.+.]T.1...b%W%..6q._xc...'4.k.6.w...G(X!^.9.F...h,.{.~Yr....../H.6.0K....'..h)..)........hA...z.2.K.7Z<1....JZ...=4.z.Os.......J..!....$H..!.H ....b....B....I..[;.nk....v..?....$.h.>f....0....-.$.dl..BuU..5.V}...,.=..hp......5V..ul.3....e:.N.uG....?..fP.....X..l..YS...+....p.o....;E....\......=..}BQ..a.r@......q91+1.qN\.o..+.c[.A...q...U_..........Ei.V.IHV.,...3...;....].0$lH.d.@ i..... .}..).....&p..u...8..3.... ......\|..0}(...76nN...t...A@+....&L6.....C.K,.)n.OI. n,DK.V.........u.4.){..+..VvI.ZNX..'.......e...O...7..{..S..~.o...........?d.y.l........5.=g.K.L....o5+..".....]9s......I2......1.V....g..R.CUO.:i....._:.k.@Mj....!.7w.C.x.k.......WI.I.J`..cK.A%.-..RI.H`..v.h{R.SF"J.n..5x..'.t..{..q.{8.\|.....S...vk...4..B.............t......n..J...%R.X..).0$

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65531), with no line terminators
Category:	downloaded
Size (bytes):	132747
Entropy (8bit):	5.3409378756099795
Encrypted:	false
SSDEEP:	1536:RAT3l9R3hfpsG3UkzArmJ166wrrkZjAsyTXUI3v8vHDu1h:RqHR3hOG3UkzAk16J/oAscSju1h
MD5:	46E13C89DF263B71EADB1BA08E4B2DBE
SHA1:	DA671F21B8F95D2CD60D052257C0545B7DCA73CA
SHA-256:	B096CD815268932C77887070421716D6F8ECE83E71F05DC7C13DE94D7754F999
SHA-512:	C3BD75C134497C89938321939AD060FAAE63E3F8C8B668BAE2715586B64CB1EEDBD9D0ECBFBD83A16779B9A66FC00DB2C4779DA63EDD0CB6225366C11F5195F8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-action-bar.min-vflRuE8id.js
Preview:	define("js/file_viewer/preview_error/preview_error.module.css",["require","exports","css!js/file_viewer/preview_error/preview_error.module.out.css"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.illustrationContainer=t.ctaLink=t.ctaSecondary=t.message=t.header=t.img=t.container=void 0,t.container="_container_9t5i9_1",t.img="_img_9t5i9_12",t.header="_header_9t5i9_16",t.message="_message_9t5i9_24",t.ctaSecondary="_ctaSecondary_9t5i9_29",t.ctaLink="_ctaLink_9t5i9_34",t.illustrationContainer="_illustrationContainer_9t5i9_38";t.default={container:"_container_9t5i9_1",img:"_img_9t5i9_12",header:"_header_9t5i9_16",message:"_message_9t5i9_24",ctaSecondary:"_ctaSecondary_9t5i9_29",ctaLink:"_ctaLink_9t5i9_34",illustrationContainer:"_illustrationContainer_9t5i9_38"}})),define("js/file_viewer/preview_error/download_dropdown",["require","exports","tslib","react","react-intl","react-redux","@dropbox/dig-components/buttons","@dropbox/dig-components/menu","js/file_view

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37562)
Category:	downloaded
Size (bytes):	37626
Entropy (8bit):	5.297071236887549
Encrypted:	false
SSDEEP:	768:PxvBBa60kgCbYw5GWzThUx/Y5MAO70yc6A:plpgKYFp8j
MD5:	547B3ED7FFDD1BA97F213E9905B84F1E
SHA1:	03148C6DE23DE15E520D0233E965471A11429658
SHA-256:	FF68507001B16C620DE6986F52536891FF24FE1EF191E19ECE8875029137B21A
SHA-512:	6018B36F781665A17614E1A6B904A77A0CC0A3850030A75CB8E8ED08783F53846BD65C9431FFBA1BDF66633EA501F9E4CA14E5064C1A867073D00173B426AEB8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-icons-no-home.min-vflVHs-1_.js
Preview:	define("spectrum/icon_action/index",["require","exports","tslib","react","spectrum/icon_templates/actionable/index","spectrum/svg_icon_bundle/index","spectrum/icon_action/bundle"],(function(e,l,t,a,n,c,h){"use strict";Object.defineProperty(l,"__esModule",{value:!0}),l.IconAction=l.ICONS=void 0,a=t.__importStar(a),Object.defineProperty(l,"ICONS",{enumerable:!0,get:function(){return h.ICONS}});l.IconAction=e=>{const{name:l}=e,t=a.createElement(c.SvgIconBundle,{focusable:"false",icon:h.ICONS[l]});return a.createElement(n.Component,Object.assign({icon:t},e))},l.IconAction.displayName="IconAction"})),define("spectrum/icon_action/bundle",["require","exports"],(function(e,l){"use strict";Object.defineProperty(l,"__esModule",{value:!0}),l.ICONS=void 0,l.ICONS=JSON.parse('\n {"add-comment":{"attrs":{"width":"32","height":"32","viewBox":"0 0 32 32"},"dangerouslySetInnerIconHtml":"<path fill-rule=\\"evenodd\\" clip-rule=\\"evenodd\\" d=\\"M13.446 20H21v-9H11v11l2.446-2zM14 22h7.5a1.5 1.5 0 0 0

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24020)
Category:	downloaded
Size (bytes):	24088
Entropy (8bit):	5.019234558953539
Encrypted:	false
SSDEEP:	384:SKEo7N5GfnRVxy5aV9qOU2KBxKTWQnhUJNgvIDPDoHMdlH8OOIKTvD2EXBiAuMQz:S4gfnRVxy5aV8B4TWQhUJNgvcdlcOOIN
MD5:	88A17257F3A3214682B29FC2CD260E65
SHA1:	5012C0979DAF8FCF11B8D5DB14BCC93F449FD001
SHA-256:	A75875181901CE470C091094CE75A5153E63B3074BD5F480241A9016071DFEF1
SHA-512:	16AACB61D25D81A6A1F2101DE0FA633362C0E456FAA2FB778470D0FB4F4457EAC8909EE27E96E7E58916CF31E06AA63C54211B6A3B9C0D701EC95B9FE7DFBE54
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-file-viewer-constants.min-vfliKFyV_.js
Preview:	define("typescript/dropbox/proto/js_init_data/file_viewer/enums_pb",["require","exports","@bufbuild/protobuf"],(function(p,e,s){"use strict";var t,m,o,_;Object.defineProperty(e,"__esModule",{value:!0}),e.FileViewOriginType=e.FileViewTargetType=e.PreviewSourceAction=e.ShareModalVariant=void 0,(function(p){p[p.Off=0]="Off",p[p.Closed=1]="Closed",p[p.Prefilled=2]="Prefilled",p[p.Unfilled=3]="Unfilled",p[p.LinkSettings=4]="LinkSettings"})(t=e.ShareModalVariant\|\|(e.ShareModalVariant={})),s.proto3.util.setEnumType(t,"file_viewer.ShareModalVariant",[{no:0,name:"Off"},{no:1,name:"Closed"},{no:2,name:"Prefilled"},{no:3,name:"Unfilled"},{no:4,name:"LinkSettings"}]),(function(p){p[p.None=0]="None",p[p.Visit=1]="Visit",p[p.Click=2]="Click"})(m=e.PreviewSourceAction\|\|(e.PreviewSourceAction={})),s.proto3.util.setEnumType(m,"file_viewer.PreviewSourceAction",[{no:0,name:"None"},{no:1,name:"Visit"},{no:2,name:"Click"}]),(function(p){p[p.PRIVATE=0]="PRIVATE",p[p.SHARED_LINK=1]="SHARED_LINK",p[p.SHARED_C

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 7122
Category:	downloaded
Size (bytes):	3268
Entropy (8bit):	7.9301289024367225
Encrypted:	false
SSDEEP:	96:F/MmBtO6t6Pgn7yUswIe1TUyK+lSOcMLtAJ98qllZ:F/LBuMWUsY14yKe5xA4qllZ
MD5:	F4678E1B0C9E12576736ACB06E9C6C6E
SHA1:	9C930BDDBD314EB0991FDCB66E15CCA7B060F0DD
SHA-256:	094D4604E74105E207D00C7D272D65C3C17F012F0DB7B01BFA63F255940CC14F
SHA-512:	8FB8E1D8C38E7757763D15E3D61FC67C39E534CD062EAC2DFC96C41D5EBE0B88260DA793E051D22A0D8B38127587F06C786C81952DBD594746B101C27E2D07AF
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/runtime_e9038aed7abbdbad2158.zZ2kbtQlmumtpAghwuSOWRIAHWon-FbdTs21U26ckrM.js.gz
Preview:	...........Y.S.:.....;...k.i.t....""....M....6.A......[.9g....04.+k=YYI.$?.,t...y.l.$.@.J.O(..BT@Vr/>.\|.H...>.C!..B`.?..?...p@..to...,t.>....T...Ft..a...4.H..$t&.(..q!.ww...aw7..,..Y...e.....C.s~....../`.'...../.......4...X>....<...ti\@q...`...C..,.sa._.y.2o.!......t.3a...T...O....!."KG......2.....e.e..>.!.....<._....\|.._..2.P..)...-.k\|d..).e.f^.,.....E!...l.....(3+.._+bi.<.QB.....z.KI!(.......bQ&L\|..p...../C...o..T-.@...c.../.'..&.P`i..\.R../..\;.....?S.lmO.'.p%..U.....CL...B...1.YfY....-CVH.9.....\|..[R..&.....v..G..W....[.....m9....(.J......^.c.\a..xH&.f.E)IJ./E\a.(y.q..W....... ?..GI....s.g...Y..;..e.....v_7...q.(.6.O..~....].7.j..'...]{.....%.QH...s.Y.+i../J?C.k._..J..v+p....[.;.....Q....c......6.O>..Q..~.?%M.$.![...{...OC.f..f...!_.>U.y9!..&....9.[#.k].....V............O...[.__.....1...:"..%C.M.3..kD.$...`.y....l.H..0l...lBB*.....%..............I,..t....w....<k_.4.B;.(..&....W.S.\|...4..Y@.!!..,.....W.!.__.'.7.x.t..M...R'..E+../.]f=....?..e...S.

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (684)
Category:	downloaded
Size (bytes):	685
Entropy (8bit):	5.033559356693095
Encrypted:	false
SSDEEP:	12:pA7LVcO/PfNVVUragN6L03eSuET6rvLhd9cdxA1WcdWScdAzZpcDkfQk:iVcOnfNVV4NePS9T6rzhdOjAR4HDkfQk
MD5:	E2826FD92D6DCAF79021355095EC49D9
SHA1:	1572DA7F97839408214F18AF79C69611040E2084
SHA-256:	2C456C7236EE6F3541118C38AE364CF303F38926BA99C7FD65794802B172ACBD
SHA-512:	AAE0EE51EF9775A745E1B4A4607829609A54C211ED1C96303875FE6465770CBB54E267833E48C43BB7723891FF3D774F33200D6D8F5368817B085F946315EF85
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/notify-vfl4oJv2S.css
Preview:	#notify-wrapper{width:100%;height:0px;left:0;top:0;text-align:center;position:fixed;z-index:10001}#notify-wrapper .left-align{text-align:left}#notify,.notify{margin:8px;padding:8px 16px;font-size:12px;display:inline-block}.notify-msg .button-as-link{font-size:12px}.notify-portal-component{width:100%;height:0}.server-error{background-color:#f4e5ea;border:1px solid #9a0032;color:#9a0032}.server-warning{background-color:#fef5da;border:1px solid #9a6500;color:#9a6500}.server-success{background-color:#e5efe0;border:1px solid #2d8000;color:#2d8000}.server-info{background-color:#fff;border:1px solid rgba(0,0,0,0.05);color:#666}.maestro #notify-wrapper.with-top-notification{top:48px}.

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	659798
Entropy (8bit):	5.352921769071548
Encrypted:	false
SSDEEP:	12288:nEMsQrWEWbnByixmwgXZewhYcFiG4DUIxo:nEMsJpBJgHKcFQNo
MD5:	9786D38346567E5E93C7D03B06E3EA2D
SHA1:	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0
SHA-256:	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
SHA-512:	4962CDF483281AB39D339A7DA105A88ADDB9C210C9E36EA5E36611D7135D19FEC8B3C9DBA3E97ABB36D580F194F1860813071FD6CBEDE85D3E88952D099D6805
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6699.8/scripts/boot.worldwide.1.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.1.mouse.js'] = (new Date()).getTime();..;_a.d.G=function(n,t){this.b=n;this.a=t};_a.d.G.prototype={b:0,a:0};_a.fo=function(n){this.s=n};_a.fo.prototype={s:null,t:null,i:function(){return this.s.currentTarget},e:function(){return this.t?this.t.x:this.s.pageX},f:function(){return this.t?this.t.y:this.s.pageY},o:function(){return this.s.relatedTarget},b:function(){return this.s.target},n:function(){return this.s.timeStamp\|\|+new Date},a:function(){var n=this.s.which;!n&&_a.o.a().K&&this.s.type==="keypress"&&(n=this.u());return n},u:function(){return this.s.keyCode},m:function(){return this.s.originalEvent},j:function(){return this.s.type},k:function(){return this.s.originalEvent.touches},q:function(){return this.s.isDefaultPrevented()},g:function(){return this.s.shiftKey},h:function(){return _j.G.a().P?this.s.metaKey:this.s.ctrlKey},l:

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4052
Category:	downloaded
Size (bytes):	1215
Entropy (8bit):	7.86306308308889
Encrypted:	false
SSDEEP:	24:XmnvrTZ23aCethom8H4edTPM3cB+yxFbi24vF:XIAaCetd8H4edT0i+W1IvF
MD5:	82D7DE85DD6B810A879D57DD51BE2E6F
SHA1:	545265A4441AE135583463573A91F932A66B378B
SHA-256:	73E099161BB484A28F4947216D881368B537970AF5834E08F53490EB7E37BF6D
SHA-512:	7E91AFE0D45A09308BC4A118D6ED2668812B6753C565F648E78878518DE175AB126ED3E7CB1A88AB63E3A55B1D69A145F52B40B11BA7279E625C0D3AD94427E5
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_jasmine_~1ca7a66a.fe9af606aefd018129cf886d5e3f19606dbbddff.r_7xXGcgUUikEzI1NnDXnlonV8WXcPki_QOxR4zMw88.css.gz
Preview:	...........W.n.6.}.W.(.$..V.mE.Q...-.,.-.$P"e3.H..\|.....E....k...3.3...6..,D\|.da....:.%#.....R.....&....\HLd..........[.+..2..!I... \.u0i......4x..DuMd..`.....k.=FJ.z...j.....(...&..&t..G....}..E...~d....][4R.....%r5...{g.....8...qU.Y.Rh...C.....!.....~.Z....a..`....yP..8Y9.=..T..5Z...QA~k..[oG.'.=...8MNAQ.('..3a........W..(.......E....O@..cK.tD....R...$w.r.....\h-..X..r.......j]u=.0m..7......6...;.%..).L..aG..a.\|.V>..jV..``......rfb.do..X..X.&.y..q..%S ..-.k...["5-....k.......f...b..S.%2..~..........0J&..).G.E.>..0..Q.....A.A....2....s&....+.)..V.Q[.8...Z?....i.a...zQ_.kV...A...8c.,n3~.I..1$x.'.+....gV..A..u..Z`tp.....A... ..>.y0......r..S...}(G.:.wQw.L....gfZ.e..TY.....jvm..R..L..pv.?.z.:,......un.....n6O.I...y.L#G.Ws..;.f<._@.\|=..Fs..Y...{/.....@Z....~?..:......-..a7r.s..X\.8..c.._....].k..n....0..E.{.C..E.....xu]......e...p.;...99.9`.......,.e....0.B^H.).....e$.....a^_....f.2%....{.H........iy..k.....>.....p...V..........X..{...n.p

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17498)
Category:	downloaded
Size (bytes):	17559
Entropy (8bit):	5.182231006632157
Encrypted:	false
SSDEEP:	384:2By/hdefcPdkCyza//deeTaMVYfaHQ1PXh+B3V5:2B+OfcPdVAG0eTaMV6aHQ1PXQBF5
MD5:	CA64747BA2A778A12107A0E5269FD845
SHA1:	124A07E77374EB75A0FB07BC0D224339E5CDA514
SHA-256:	24DBB6710AE61D8D003C50BF939561C50A14CB97268B93A19991C28B349412F8
SHA-512:	EFEFD47317A04FFF9295B660CF2801101AE7A11AB87575504304B18C6C35974B39F98CCECEEEE8C9AACD4A9F4AF36D452E4DD71424B80B9425EE50C328B3B5F2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-timing-helpers.min-vflymR0e6.js
Preview:	define("metaserver/static/js/user_centric_perf_metrics/component_visually_complete/constants",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.CONFIG=void 0,t.CONFIG={idleTimeout:500,networkTimeout:6e4}})),define("metaserver/static/js/user_centric_perf_metrics/component_visually_complete/ajax",["require","exports","metaserver/static/js/user_centric_perf_metrics/component_visually_complete/network_idle_observable"],(function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.decrementAjaxCount=t.incrementAjaxCount=void 0,t.incrementAjaxCount=(0,i.getNetworkIdleObservable)().incrementAjaxCount,t.decrementAjaxCount=(0,i.getNetworkIdleObservable)().decrementAjaxCount})),define("metaserver/static/js/user_centric_perf_metrics/component_visually_complete/network_idle_observable",["require","exports","metaserver/static/js/user_centric_perf_metrics/component_visually_complete/constants"],(function(e,t,i){"use strict";Object

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (61371), with no line terminators
Category:	downloaded
Size (bytes):	61371
Entropy (8bit):	5.237542510810988
Encrypted:	false
SSDEEP:	384:J66D8dHRGWZMKGrhEDa/Vi7XVl1TqI4iv1SxXlSlE4GYLQ6IgXm0gWtMZAGn6wpL:BmRaI9ahvYsw2DAGn6wppscyO1
MD5:	6D4AD7661B98C4CE3444484CBC068A7E
SHA1:	9A4BC733289A99B8D11D8904B5098EFBE3D98C64
SHA-256:	1461BE81ED64FF3244D8EF01E12F34D0D66D8FD6D5912BBBD2FFF6316AAF0D53
SHA-512:	1026990C1984BA88BC049AB3BE5F051DD314559F52E228DBA0A3F7D76AD208BC45A2228A0E847303AD8B76ED0B3920EE806B41C918282DF8D5BE8E7EE4379B91
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/listgrid.js
Preview:	var NavigatePage,BOX,ListGrid;(function(n){n[n.NoChange=0]="NoChange",n[n.First=1]="First",n[n.Previous=2]="Previous",n[n.Next=4]="Next",n[n.Last=8]="Last",n[n.Direct=16]="Direct"})(NavigatePage\|\|(NavigatePage={})),function(n){var t;(function(n){function i(n){var t=document.createElement("div");return t.appendChild(document.createTextNode(n)),t.innerHTML.replace(/\"/g,""")}function t(n){var t=i(n);return t.replace(/\'/g,"'")}function o(n,t){return t.length?t.length>n.length?!1:n.substr(0,t.length)==t:!0}function u(n){return n!==null&&n!==undefined&&n!=''}var a,v,s,h,f,c,l,r,e;(function(n){n[n.ascending=0]="ascending",n[n.descending=1]="descending"})(a=n.SortOrder\|\|(n.SortOrder={})),function(n){n[n.clientInitiated=0]="clientInitiated",n[n.serverInitiated=1]="serverInitiated"}(v=n.DataFetchMode\|\|(n.DataFetchMode={})),s=function(){function n(){this.AddButton='AddButton',this.ArrowDown='ArrowDown',this.ArrowUp='ArrowUp',this.CloseButton='CloseButton',this.DeleteButton='DeleteButto

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (714)
Category:	downloaded
Size (bytes):	772
Entropy (8bit):	5.256824108353672
Encrypted:	false
SSDEEP:	12:QTpBm9HjTCThWifxTG4UKYcjKem0yF92E7qxXas+KyS5IcjKEAVQiOm:8PmFfahWifhG4ULSOrFEFxXvGSBA7Om
MD5:	60B1C153555B9F0F4B0332950A818B4A
SHA1:	55A2F64AFA82460C36B4E8D17374554F4FA34D31
SHA-256:	9A0FFFC5D5B8F5A00EA1B586C09CDBD261BED84181C296D98A2E81DCA7451228
SHA-512:	A92FAA9BBF45AE644AF4AC49B2C4B4A4D67723465AA5DA1861E145F6879BB20FC2CB4C07308999606E4681268D40763835C8029D1F78617C15491886FE84065D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-i18n-legacy.min-vflYLHBU1.js
Preview:	define("metaserver/static/js/core/format_html",["require","exports","tslib","react-intl","metaserver/static/js/core/exception","metaserver/static/js/modules/constants/page_load","metaserver/static/js/core/i18n"],(function(e,t,r,a,s,o,c){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.legacyFormatHtmlAsReact=void 0,o=r.__importStar(o);const i=(0,c.localeToBcp47LangTag)(o.PAGE_LOCALE),n=(0,a.createIntl)({messages:{},locale:i,onError:e=>{if(e.code!==a.ReactIntlErrorCode.MISSING_TRANSLATION)return(0,s.reportException)({err:e,tags:["format_html"],severity:s.SEVERITY.CRITICAL})}});t.legacyFormatHtmlAsReact=function(e,t){return n.formatMessage({id:e,defaultMessage:e,description:"nothing"},t)}}));.//# sourceMappingURL=pkg-i18n-legacy.min.js-vflBCujlE.map

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 22415
Category:	downloaded
Size (bytes):	7055
Entropy (8bit):	7.969938413044282
Encrypted:	false
SSDEEP:	96:nRz2QS0Xxm0ASDIgy6kOkN0sXazECZ5DllsSUBcGoj8jvgQTAl4VGwIRDudmC7:N5Bm0d0ekEsa3HsSaVoj8jvdACV8GN7
MD5:	955FFB05052A297436DFFBEABE3C571A
SHA1:	31BDA728E019C879D01387C21077F0D1B832645C
SHA-256:	1E6B74D254206E3C138959CF37FBB3BE68899F90DFF77821467B12042A62FE24
SHA-512:	E03228C6B51F000B109B8EB79DF194A59E553F306001BADA041646B1C1F556C43F1A2D1D2C149E0875C80784940C602DAC3FABE401325FA4569B93F0D17C210F
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/f86dc7c73976519634fe.u7wxnX1c69kWdR8C87ycEdr8hwUX3Duf9i9JSrzjAlI.js.gz
Preview:	...........<is....+d.....\|.....h&..\|$o..IH."8 h.Q..}..P.%....&.F..n4hO.8.....p~xrx..T].....\|.....>;....;.M.td..Z.M.....~.....$.....nu:[. .}...fD..L...g.t.6.cv!8. .lI.~...y.E."...e.[.......K..".w.!.~:.I..C..b.g..e..4I..r...Jv..1....7...c2M....a.\|.Lf.`2.q[..>.....2)..p....=J.n.g4`..2in~.cf;..Yk?r.0M"..7..1.......h.+..,..hF.R...RsB.... ...i.Ih....EL..4.xW...i.+..@^.i....H.......e..Y..........4A8.'..d.vD.4..B}..iv!X......T.j....J....k..k./.pH.......^.8....!>...d.....t..kwH....<z.../.xrl.=##\|..\?.4.C.:.4..q.{.0.8Jzo-b.mFy...i. ..}.......Y._<.=.e.[.b.X..C.%.A.A.Y..@0........r~..e..Jf"..(L......:....."s...W.....c...>...<. f...%.B.L.8.8.._..}.. ... .....}B (4..!.k$e.z.....H.xS=...?..K.............Hj._.N...U.6P....2.N.,!HDb..H.......@........ .~D..5.PQ7F....XnD....I...n.!.t..d..3Bm.$...,.P?.O...(...nd...I2.l.....Y`.~.>..W....<+.0....&<>.B..W............lNRM.+5.+.....JouM..bF.....}........oU...n ............I.".M}.q.Y.................q@E..r.

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 612
Category:	downloaded
Size (bytes):	374
Entropy (8bit):	7.473766520130553
Encrypted:	false
SSDEEP:	6:XtzmYXektBQTGLOuAPv942AJr+CDJ/okUlpB+FDuXi8Xi/yRCLyT8HCSW2yEV1/n:X9pt2AOuA9R699okIv+FDki8Xi6R92vz
MD5:	3E996FD1348D2E5CB92B7481B6ACF059
SHA1:	4074B01A457EEAC1F136CDEB4E5CDC3DF23E8F0A
SHA-256:	11DB3C6E3E71D07675246230509F804235FCBB7B1BD763CEF865B26335B966E9
SHA-512:	9BEEE20A1D18BC468E300B4D3402B18E4071259D806F8F40423228F9AC3270BFEDDBE27D42C17A15D833FFD048490CDB1BDBAA05A520AD52AECC653F9B586A19
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_cloud_docs~paper_pifs.fe9af606aefd018129cf886d5e3f19606dbbddff.MLLQ4hZFC6ZgaidRqLtSKQk2VkEALechDq_ssMjHRWk.css.gz
Preview:	.............n.0.........I.e.d.!!.p..H=[..8..-.i.F....@...,....=..NFFj!.....hY..t....M!#AP.'...0.gg... ...'..[Pw]p.....E.+g\.2&.....K\6.EN.l.mtfL.....W.?5.......-.N.u.d.....;q.r.HS]..\|...2g.c.U ........s.:f......._...z.`...b....hhe...@..Y..V.....r[e..%.6l.^...D8.._..)pj.M)GR..i..YZ6..7YtcP...g......._.T.(...\|.Y.B...^.4..*....j.7.N..u.m..u.b,..W.....'d...

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4715)
Category:	downloaded
Size (bytes):	4773
Entropy (8bit):	5.065717707191547
Encrypted:	false
SSDEEP:	96:nS0uzR/HKo/tli+5OD0UXmkf62wq0HmjUlopwpio1A28ylwn7x0Y0HmvHTwHh706:nSQD+5OQkEXmjAopwpio1A28ylwn7x01
MD5:	8A06C56B45D76766C8DA5FAA08F838C5
SHA1:	B4C8917EE7207D18E58D4BC95695201C0BCE5B4B
SHA-256:	0CC08947E3EA21E30DCFC1473499A577E360AB64C08A981E657B5A2F23B878D0
SHA-512:	FB1CD38E4BE5FE8FCB65EF89245AC0C162D4E1716670CE6BAE9EA81C1E79B4286F2F1E73DC92BABD90E6A1E053AB821F15C50D263775A36C77D992EC57FD7BBF
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-api_v2-flux.min-vfligbFa0.js
Preview:	define("metaserver/static/js/flux/dispatcher",["require","exports","tslib","flux","metaserver/static/js/core/assert","metaserver/static/js/core/exception"],(function(t,e,i,s,r,a){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.DispatcherClass=e.Dispatcher=void 0,s=i.__importStar(s),a=i.__importStar(a);let n=null;class c extends s.Dispatcher{dispatch(t){(0,r.assert)(null!=t.type,"Invariant error: cannot dispatch action without 'type' property."),(0,r.assert)(null===n,`Invariant error: cannot dispatch ${t.type} while also dispatching ${n}.`),n=t.type;try{"function"==typeof this.dispatch_begin&&this.dispatch_begin();try{return super.dispatch({action:t})}catch(t){return a.reportException({err:t}),console.error(t)}finally{"function"==typeof this.dispatch_end&&this.dispatch_end()}}finally{n=null}}}e.DispatcherClass=c;const h=new c;e.Dispatcher=h})),define("metaserver/static/js/flux/base_store",["require","exports","metaserver/static/js/flux/dispatcher","metaserver/static/js/c

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	80766
Entropy (8bit):	5.381064916349293
Encrypted:	false
SSDEEP:	1536:dr1MdLE9ANUGZwX8LUYxiDoYOXKHgBryrvVLGywAOn:bWpTUYxikzAE
MD5:	E797F3299401A0A139D6509C44430A43
SHA1:	DFE77156C0DF5126550E45B58971F5FEE8EA22E9
SHA-256:	5F93E5F63D80229F69E41DF88F91ACFC60D963B5FCFE025BBD9023C4DF697800
SHA-512:	A0D6B81CC2E28C5772630CD5DE894D72B556217F2E0D8D0490E9B3F02701171BF63D873BA618684BBA3C4C4B5A10FDDCE275C28734A920F315FBAA8E2E6A5782
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/jsc/headbundle.js
Preview:	var Namespace={Register:function(n){for(var r=!1,t="",u=n.split("."),i=0;i<u.length;i++)t!=""&&(t+="."),t+=u[i],r=this.Exists(t),r\|\|this.Create(t)},Create:function(n){for(var i=n.split('.'),r=window,t=0;t<i.length;t++)("undefined"==typeof r[i[t]]\|\|null===r[i[t]])&&(r[i[t]]={}),r=r[i[t]]},Exists:function(n){for(var i=n.split('.'),r=window,t=0;t<i.length;t++)if("undefined"!=typeof r[i[t]]&&null!==r[i[t]])r=r[i[t]];else return!1;return!0}},Shared;Namespace.Register("Microsoft.Online.BOX.JS.Shared"),Microsoft.Online.BOX.JS.Shared=new function(){function n(){O365.Log.WriteLog(509159,O365.LogLevel.Info,"account switch intiated"),clearcache()}function t(n){var r=window.location.hostname.toUpperCase(),u=n.origin.toUpperCase(),t,i;if(u.indexOf(r)!=-1&&n.data){t=null;try{t=JSON.parse(n.data)}catch(f){return}if(t&&t.eventId){if(t.eventId==="abtSignOutEventForHostUserGenerated")try{i="/estslogout",window.open(i,'_self')}catch(f){O365.Instrument.ClientInstrument.getInstance().logMessage(504151,"Fai

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	689016
Entropy (8bit):	4.210696031972732
Encrypted:	false
SSDEEP:	6144:DnQWWDY3mr16XRxcpuEhjMPRKkC0d7xyF0FA9OgoUE0HUN4oe+:DBWU3xhDKkTshoj5
MD5:	3B72E939A304CE05F0CEAB4A0AC39DD9
SHA1:	B2CFD3CB1BD0EE53C795E040063D0F55F544D939
SHA-256:	CC58721894324D6F6F53B7FE4CB0D08F923AA75E52506C0A58D29E4390B7CEDD
SHA-512:	F4AF43BA51B76496C98A30F06D9903440C4957E18F82B09D2B9C706CAD5939446D8BAA4353FD0620A2F68CEA79878824CD2313594997F0F8403C13FF767E6112
Malicious:	false
Reputation:	low
URL:	https://larationr.top/aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_sb6jQxfN8f3sA8faKcsD7Q2.js
Preview:	!(function (e) {. function n(n) {. for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++). (i = o[s]),. Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]),. (a[i] = 0);. for (t in r) Object.prototype.hasOwnProperty.call(r, t) && (e[t] = r[t]);. for (d && d(n); c.length; ) c.shift()();. }. var t,. i = {},. a = { 22: 0 };. function o(n) {. if (i[n]) return i[n].exports;. var t = (i[n] = { i: n, l: !1, exports: {} });. return e[n].call(t.exports, t, t.exports, o), (t.l = !0), t.exports;. }. Function.prototype.bind \|\|. ((t = Array.prototype.slice),. (Function.prototype.bind = function (e) {. if ("function" != typeof this). throw new TypeError(. "Function.prototype.bind - what is trying to be bound is not callable". );. var n = t.call(arguments, 1),. i = n.length,. a = this,. o = function () {},. r = function () {. return (.

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994), with no line terminators
Category:	downloaded
Size (bytes):	994
Entropy (8bit):	4.934955158256183
Encrypted:	false
SSDEEP:	12:U8Chx3fpler8DDMv1+I+zpcuVkicq32EXgBA5e2KMLT:JC3G0z1Ddf2NGe2KG
MD5:	E2110B813F02736A4726197271108119
SHA1:	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857
SHA-256:	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
SHA-512:	E79CF6DB777D62690DB9C975B5494085C82E771936DB614AF9C75DB7CE4B6CA0A224B7DFB858437EF1E33C6026D772BE9DBBB064828DB382A4703CB34ECEF1CF
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6678.19/resources/images/0/sprite1.mouse.css
Preview:	.image-loading_blackbg-gif{background:url('loading_blackbg.gif');width:16px;height:16px}.image-loading_whitebg-gif{background:url('loading_whitebg.gif');width:16px;height:16px}.image-thinking16_blue-gif{background:url('thinking16_blue.gif');width:16px;height:16px}.image-thinking16_grey-gif{background:url('thinking16_grey.gif');width:16px;height:16px}.image-thinking16_white-gif{background:url('thinking16_white.gif');width:16px;height:16px}.image-thinking24-gif{background:url('thinking24.gif');width:24px;height:24px}.image-thinking32_blue-gif{background:url('thinking32_blue.gif');width:32px;height:32px}.image-thinking32_grey-gif{background:url('thinking32_grey.gif');width:32px;height:32px}.image-thinking32_white-gif{background:url('thinking32_white.gif');width:32px;height:32px}.image-clear1x1-gif{width:1px;height:1px;background:url('sprite1.mouse.png') -0 -0}.csimg{padding:0;border:none;background-repeat:no-repeat;-webkit-touch-callout:none}span.csimg{-ms-high-contrast-adjust:none}

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	662286
Entropy (8bit):	5.315860951951661
Encrypted:	false
SSDEEP:	12288:YfmmzLJTD/JilMGk4hBR310FaHHxpJy7qVfb4cSPo:Yfm+T7US7SR310FaHHTJy7qJ4rPo
MD5:	12204899D75FC019689A92ED57559B94
SHA1:	CCF6271C6565495B18C1CED2F7273D5875DBFB1F
SHA-256:	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
SHA-512:	AA397E6ABD4C54538E42CCEDA8E3AA64ACE76E50B231499C20E88CF09270AECD704565BC9BD3B27D90429965A0233F99F27697F66829734FF02511BD096CF030
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6678.19/scripts/boot.worldwide.2.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.2.mouse.js'] = (new Date()).getTime();.._y.lC=function(){};_y.lC.registerInterface("_y.lC");_y.jw=function(){};_y.jw.registerInterface("_y.jw");_y.lA=function(){};_y.lA.registerInterface("_y.lA");var IDelayedSendEvent=function(){};IDelayedSendEvent.registerInterface("IDelayedSendEvent");var IIsShowingComposeInReadingPaneEvent=function(){};IIsShowingComposeInReadingPaneEvent.registerInterface("IIsShowingComposeInReadingPaneEvent");var ISendFailedO365Event=function(){};ISendFailedO365Event.registerInterface("ISendFailedO365Event");var ISendFailureRemoveO365Event=function(){};ISendFailureRemoveO365Event.registerInterface("ISendFailureRemoveO365Event");_y.gw=function(){};_y.gw.registerInterface("_y.gw");_y.iB=function(){};_y.iB.registerInterface("_y.iB");_y.ih=function(){};_y.ih.registerInterface("_y.ih");_y.jy=function(){};_y.jy.regis

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (477)
Category:	downloaded
Size (bytes):	528
Entropy (8bit):	5.049770571965184
Encrypted:	false
SSDEEP:	6:FHwCmSymbwptWRcVbuK08Gh7IGY8juzCRoTMSTu1n6BBdQIuzCRhqXQp1n1t7TYe:1bmSyz7FQcNSoTMR6BB7wS8MfUP45RW8
MD5:	4145AF3480090298A2C0DF493D5F62F5
SHA1:	2B414C9AC5A7BD5A4C9E58969E1EB9C338445CB6
SHA-256:	149FECD49818E493683FE75DCABA92274D9E336C5A18A6D3B3B1A38D9BC2DDB6
SHA-512:	44905520A6946AFD751FB46CFDF4A710CBEAC3A166B2B529ACCD6095B71E98B67CC58EEC8FA5F495D8FBF81521D7EB0B5BFD0A22F0042DF93A30EB770EEA95B1
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/accessibility/tabbable.min-vflQUWvNI.js
Preview:	define(["require","exports"],(function(e,i){"use strict";Object.defineProperty(i,"__esModule",{value:!0}),i.initialize_module=void 0;class t{constructor(){t.initialized\|\|this.listen()}listen(){t.initialized=!0,document.addEventListener("keydown",e=>{if(9===e.keyCode)return document.body.classList.add("tabbing")}),document.addEventListener("mousedown",e=>document.body.classList.remove("tabbing"))}}i.default=t,t.initialized=!1,i.initialize_module=function(){return new t}}));.//# sourceMappingURL=tabbable.min.js-vflhngSQ5.map

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.276739927693353
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1ET4CYRROFDQAg6n:MMHdVBMHgWdzR05ETzS0m6
MD5:	7CAE103E7B622C92F2F3FF7DE4C4F1AF
SHA1:	68FBD9B24EDF66618CD2FA76BAB1FA22F7109558
SHA-256:	964E4C1EE6215B6B9E72B2F86D14988108EC4F9FB666B6DA391815D954C15FC8
SHA-512:	A42906466BBBE370BC07CE66A93AB87F3AE5C4D1FD1F5B86F547C714A4A70C11B9930FE0CBFA9902F76898C7D8060F78EF80CA57ABF29EC3B945AFD83ECABBF8
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/header_bg_signup_office.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:a84074e3-301e-0057-28d0-cb64f2000000.Time:2023-08-10T21:19:43.8138980Z</Message></Error>

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3275
Entropy (8bit):	7.886151392866353
Encrypted:	false
SSDEEP:	48:oAZYVtRlc5cEhL43QIa/Jjqh6SFydc3wWM1uF4TBKW2RtDglwfrzQXBdrz:5YVtROThMg9/Vqh6hdnWYTTl2DWwrsxR
MD5:	BEAA0ED7207B6D54F5BC7A8118F30E9D
SHA1:	E48803791A228C5DD8D4A2BA101DDEFEE63D5868
SHA-256:	008AED4B5DE1B7EA70A1D384E6811AD451747E37668F4F9ECC3AD68FDA892147
SHA-512:	3CA0ED2DAFAF070C9E20C540278FC2522EE6F4A306EE18BC7F8233F4739DF207CA5B9EEF46C1EE6D4A0702A39FE4EA976FC92B29C6FBF0B10E58C8E47C4701C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....XIDATx..[[l.W...sf..{..IC...i.!.K.Em!.B....U..U...j!..xh..E.A....P...P.....4..-M..c;..;.3s....wgv.^'....z.\........8....b$MD....R.& Gl.......r..(h.:>qlh..^P..=.}.,d..dfz..........\.....\....m.M...e..L3.8..76.XC...\.7.%.p..G.......)&<k........e...:.z.J.Q&3......,...G...#imY.L.T.....v..?.@<.....@N....Vm....^..e..P...[.(...Q,....C...twO/..f.....3.pi\|l;.(R5.R.I.n../..J.8.J.l...8.....m..s.sk..g..D.D...[........x...>V..0.@.m.M....j....e..z......^.......,..@.Z.m,.R...}.(...H$.gEo...WC)..\...M+]...j.(D..a.v....,.."Z...5....]Q...L..+]}.....DD..^.....P..i.J.R.D$@...J.c!...i.b4E.[O>....t...hWa:N.@....m.....i-.....G.v)..s....W..?F.../.RJ.s..(D.0'....".P...G..!.d2..}.].....WDT..+Rb..`.....+..u.x..w.}V......6.}.3.K..q...!..}@.._#&`...$....{.'...X=/_. a!.....n..DY.(..a>.t......`..."."j.M...J)....a......h../%Ik......1.zGW/.++..CM..A.._.D..n...... .T.v.^.$.@.W.

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44890)
Category:	downloaded
Size (bytes):	44949
Entropy (8bit):	5.636581975475068
Encrypted:	false
SSDEEP:	768:GtAPOtRq9yLtfhlmUxhM//4AKHGcZ0jvr+ug6wXJP5ve4sP:GtAoobrM95GN
MD5:	091135FD7F2ED296C3B1E02BF8267610
SHA1:	F8373748CE7B8BD5289AC473F805C76C6F4D8D04
SHA-256:	EE083626C452E61D7356146AD47F01A022622FC0AB2DB0817C21171A287348FD
SHA-512:	1F1CCE6D7C7B75E52D6C28C0FFF14C48905E9DA07699A9BCFFC98A79B8E734DBA968D3D99254386F339319AA5B666E94816E388A1B984146B30735761C30AB00
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-embedded_app.min-vflCRE1_X.js
Preview:	define("metaserver/static/js/accessibility/utils",["require","exports"],(function(_,e){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.accessibleBrandedColorPalette=e.accessibleColorPalette=void 0,e.accessibleColorPalette=["#006AFF","#0073E1","#007BC3","#007F9B","#008578","#008750","#008928","#008800","#0573EB","#0579C3","#0580A0","#05857D","#058655","#058932","#05890A","#0A71F0","#0A78CD","#0A7FAA","#0A8487","#0A855F","#0A8737","#0A880F","#0F6EF5","#0F76D7","#0F7DB4","#0F818C","#0F8669","#0F8741","#0F8819","#146DFF","#1475DC","#147BBE","#14819B","#148473","#14864B","#148723","#1969FF","#1972E1","#1979C3","#1980A0","#198278","#198550","#198728","#198700","#1E70E6","#1E79C8","#1E7FA5","#1E837D","#1E8555","#1E8832","#1E880A","#236EEB","#2376D2","#237CAF","#238187","#23845F","#23883C","#238914","#286DF5","#2876D7","#287CB4","#28808C","#288469","#288541","#288619","#2D6AFA","#2D73DC","#2D7BB9","#2D8096","#2D836E","#2D8446","#2D8823","#3267FF","#3271E1","#3279C3","#327D9B","

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 421028
Category:	downloaded
Size (bytes):	94627
Entropy (8bit):	7.996723628575681
Encrypted:	true
SSDEEP:	1536:9GcMPr2usOZcYUZTAasfkShhhbJck4+KdrauA/8OgxxlJgyh7/vvXInc1I1aqPuy:0cMyusOeTF1S3hbJj8vcJgxxlJgyBnvw
MD5:	5C3729B768565D111532B0E648364F99
SHA1:	5433CDEA8995CC90678D959D7F1D7B8F6DC48353
SHA-256:	E7E22C18B3B9E0568E9473AAA2CB5FE0D0FDB7AB0E8713D677545CD0A9973B06
SHA-512:	05495C756188E9C46D080879D865051525D2BD5875A74C899C02F1E127318685BBD97A41D8FD3083E921A13AE18D2C4DC1DCD48709E3E2CDE48F543EDAA0AB9C
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/ea67d264b690942c8510.zy-U6PEBZo5tZvAwyC0Mt1Ga6AOObigtU7jOeqlAl_Q.js.gz
Preview:	...........k{...(.._.......0.l..3....0.$.......$\|.1....t...e.....Q_............r...e.y..p........?t.....//.;..X..B..,.....k...o.........8p..g.2..mO~,.......]Z..5}.a..d.......::..fM.....h97......L.[g..m.e..9s..s...`k.``.W...........Ne.6../?.......T..3.....g.Ko...U+.R..........X?7...?^^BPd...~.c.Z..A...u.......1[....z/...r.v....j..ze.Y..u.U..L...z.........u.(..y.g.)p....L...a.....t..mx....."`G$\..`...t..B..pW.;M..^<....\|..'jq....H..;.8.... ..Wvw..N..60"..k.>.b.L......e..S .5$....K.4.6...>B:6....m...o...2_.l.1.m...+...@A.RW.{..z.....}......s.P.5A.&.h.-,....nF.R\|..1'`......D<6;.r.*.]$..tN.=u..M.sv{3.ck3...1r...".)(>.f6.N0ol/".........0.Z..Ts.......+.Ns:d...20+....~..X5..lD..ll....7.O1.<\|+...l...l.W$w.8.s._L.........9.K..1+b.~.e+.......vrP.........W...\O...K....g......PJ.....(u._J.%..M.3...]........ya.4W..M.......7..'%..e.,....;. ..1..).....=......].$\... &.L.Hq+...s{E...j........B=h.....{7.&.Wr........W.).#.....g...N5.9b%

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65272), with no line terminators
Category:	downloaded
Size (bytes):	94157
Entropy (8bit):	5.550169665032203
Encrypted:	false
SSDEEP:	1536:psIRhmgd/LjKKbP57N2riFHCxo/Inf4u/5C5yBzeo5ocN/MSV4bghevgdJguC2zd:eIRhmU7NN+eYfC2zvl
MD5:	D857E1529860597080473BB6827938C0
SHA1:	8B665FA6F3B73098F1B7C7EE0673373859358421
SHA-256:	B020C08F74AE92DF525EF53FD242FC31AE030993CD22FD521D755DA344DC913C
SHA-512:	FD8634E998FF9CF2CE3961566739D8981D28FC64C18B15AEB831F31608C12896193D419DCA548DC469D60D65883604D263ED3FC7BCEA1487321AF67421408982
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/css/masterstyles15.css
Preview:	.adminScoped *{line-break:strict}.o15table,.o15table2{width:100%;margin-bottom:30px;border-collapse:separate;border-spacing:1px}.o15table th,.o15table2 th{font-weight:normal;white-space:nowrap;width:25%;font-size:11px}.o15table th,.o15table td{padding:5px 12px;vertical-align:top;text-align:left}.adminScoped h4{line-height:normal}.adminScoped h5{line-height:normal}.adminScoped h6{line-height:normal}.adminScoped a:hover{text-decoration:underline;cursor:pointer}.adminScoped a[disabled]{color:#666!important}.adminScoped a[disabled]:hover{cursor:default;text-decoration:none}.adminScoped p{margin:1ex 0 1ex 0}.adminScoped img{border-style:none}.adminScoped hr{border:solid 1px #505050;margin:8px 0 8px 0}.DropdownList-disabled,.TextBox-disabled{opacity:.4;filter:alpha(opacity=40)}.adminScoped th{font-weight:normal;text-align:left}.adminScoped select:disabled{color:#c3cdd2;background-color:#fff;border:solid 1px #d5dee2}.adminScoped option{padding-left:10px}.adminScoped option:disabled{color:#c3c

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3361
Entropy (8bit):	7.878036271697802
Encrypted:	false
SSDEEP:	96:iP675Pk+D0h4nCz9Cx0v7C89KfN+CAfLVWu/Gu:iP6RDVnC5Ou7CTlwfLsu
MD5:	CD5A34185731B928DEAA73D238282AD6
SHA1:	ADC51D268F441C1B1BD650560434A23BFE75F881
SHA-256:	5C4CEF1338D37E798C56FDC594A933D4267848242E5128D57E0CE34D032D748E
SHA-512:	00248261793456A65DC2F1A2318030507D0B47480456F87E518B9D913EB9346611BF74003557F51C2CA0C668ADC404B2566219292C4D9CCA49FF5B08F85F3F9B
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fc.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[i..G..^Uw....k.c'.1.a" ...K.J.#..`G...H..B.$@..AB........Lb......? ....q.E.D"b...w}...\}.{...9.]...3v........]U.K....y.(.!.7..... ,O.~.[..\|....+..........v..jx.v...rY..g...k...}..U....W.+R.y.......nz..gf..._.l.........l...........Y...a..H.-W..F.x....A..E.o[n..e.pd../.0........\|....!..!..\|_f...B.......u..N!u/H6@....}.z..FFFx9c[.tL..Gv......Ut.u.i..D..........(..(..A....;!..X.s..W.r.r.z...K[.<..."..{...6..J....W.].x.tv]E..z.n...c.-.U.o..[n.Yo......G...=..mI8:.I..ss.uZ..q...j.....<...n)[... ..._...SQ..:.j.....(!.s.y...r.+...tlK... .W.S.U..d7..jd)O..tlK... P..z..D."....&.(.{.".a..2..<..G?.{f.>..@......b......G..e.E.....$...R........\|. ..&R.0.P.5 [.%V.....pd.......E^.z5.0pOO....(m.q%..Q %.F...K[..~e.Z.\|i...t.fE....8s..lq>..,> q.6.D^&& .w......4-.\|.@C./..&F..T..N...a....$%..@.Ph......(.b..O..H#.$. ....%......VUoxq...3.\|.......<K]...!.s..Nq[..$...5.f..{..%

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19020)
Category:	downloaded
Size (bytes):	19086
Entropy (8bit):	5.365323085607599
Encrypted:	false
SSDEEP:	384:QF1pIde0jjnRXwbyOT2z6cZSqtdC6E7XDHN1KHiJU3Oo4aPU9bGzTAzekKw+u+/Z:QfT03nRXwbyOT2z6cZSKdC6EjDHN1KHH
MD5:	FD3C6983E5C29D2E56C5A7F6AA09CD2C
SHA1:	FA53BF0504B2D44C3D4A36C276FFB2768FBC44D6
SHA-256:	89933AFD707A706EE1E5821B5110D94E005B2B89CBCB7CC31ED9E08A77357BC1
SHA-512:	FA27D4C9F38399621C56B170848862E67DC0B4717A91C2F92390152B5D944685F033F52551023A128ED1247888DAA73214FAFCE801013A1A239273C7ED5D083A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-exception-reporting.min-vfl_Txpg-.js
Preview:	define("metaserver/static/js/core/assert",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.assert=t.overrideEnvironmentForTesting=void 0;let n="production";t.overrideEnvironmentForTesting=function(e){n=e},t.assert=function(e,t,r={}){if(e)return;"production"!==n&&alert(`Assertion Error: ${t}`);const o=new Error(`Assertion Error: ${t}`),{tags:i=[],exc_extra:s=null}=r;throw o.assertOptions={tags:i.concat("module:exception","assert"),exc_extra:s},o.isAssertion=!0,o}})),define("js/common/exception_tag_registry",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.clear_all_tags=t.unregister_tag=t.register_tag=t.get_registered_tags=void 0;let n=new Set;if(window.ensemble){const e=window;e.REGISTERED_EXCEPTION_TAGS\|\|(e.REGISTERED_EXCEPTION_TAGS=new Set),n=e.REGISTERED_EXCEPTION_TAGS}t.get_registered_tags=function(){const e=[];return n.forEach(t=>e.push(t)),e},t.register_tag=function(e){n.add(e)

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 85632, version 1.0
Category:	downloaded
Size (bytes):	85632
Entropy (8bit):	7.9972316340835095
Encrypted:	true
SSDEEP:	1536:jiLJAZyC7996hxR3pBaFkKarzpwkrFLoY/387MX/AU4eGa2dccd7fWSNI0wItX3d:jKWB96NpB4wJrbMuAU5aDWi3d
MD5:	D0768F14362AC267F79F96EBB4D3E6C1
SHA1:	44F75583C947B15A4B4C7B9388841EBC4F2D4A61
SHA-256:	49C13FE5BCF96044A62CDA22CF8439AB12F3645DE3A2CE1C0623A2D0A75864E6
SHA-512:	D12884670C414FE143D7F5F192529A718CA81588CFD6B6ED69AA10C7344C8C1D793949B27D5F02AE7BDE930C6DA217D3C1DB7D2282CE4AB7891D5998C1F33294
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-SemiItalic-190618-Web.woff2
Preview:	wOF2......N...........N...............................j.`..v.H..s........h..,..6.$..T. .....B..f[....Je.....:.D&.U;G..%....v..v...0...b.-...r...M.x..m..=@g.;...........&..O.w.v...@....?$M4.i__K.T.".H.I.rfddf.5..Xk..y..x.......t.,..X.x......d.;L.%`...E..2........(.E.L.k..U..[j.............SK"/t^..e...;.f....CE7.B"..k.4.q.<..^..Gw.^E.7..Nn.E).@a..A.......{d.B:..&.&.C..).."7.$,.i.m."P.>....\|...-.;(...DsV.A...c....WH..h:<r...;.2Un....L.."UZ.u3.....&...)E.....Wt.Z..z7p......2..=.......F.5../.{F".\H./.E...pg...(..Zp..?..6Pp..m....}.P.;...[.v%......Y3.t.....)na.^.=;,..W.....n-...x.j.F.\......YPO.`NR.{.....}-#..;..U.V.>...q^..e....&...B^X.>l...S...^m.>A.L.K.'..8...k.../....7...P5....'....l..Wa.....^...iY....._....].F.....D86......aZ.#...;....0.F......{...6.....N'.-.".d..c... ....8...(.C.....J...U....3.B...K.H`.....O.AG.w$.........(....;.;.....8.$...U.gl.tQ:.....9..l..m.g>..F{.l]..O..E.#....x..Qq......yb[..(D....i#.6.;.........\|..

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38677), with no line terminators
Category:	downloaded
Size (bytes):	38677
Entropy (8bit):	5.2403199684773
Encrypted:	false
SSDEEP:	768:mlxte81WzOZm5eiSPuAAjmFl9+pW4bg1WMG1yKyAIHo7lYSF5bsbMb8jssi1+:ix91WzZYiOuIl9+pW4b7IXSo
MD5:	F0CCEF116CC550152B90DB0EA68D8FB0
SHA1:	1D813F3F06C36AA45AE76A8B5AAD50B24FCC460D
SHA-256:	811E2184ACAC6E3DC10851B5E1DDD6F431AB4FEFF39A4914EE487A961F7761DB
SHA-512:	2105C19E40EE71D0278832B430A9E208606AFE052F6C05A3CE53D5B2F31E114246853E836A971891F1EA9B7165EC08D63F9F4B516D141BC8E7DBC0073240F72A
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/jsc/hipcontrol.js
Preview:	function HipChallenge(){this.LoadingTrials=3,this.CurrentLoadingAttempt=0,this.FailOverMessage='',this.ShouldShowMessageOnFailing=!0,this.IsActive=!1,this.IsUILess=!1,this.IsChallengeLoading=!1,this.ChachedLoadingParams=!1,this.CachedLoadParam1=null,this.CachedLoadParam2=null,this.CachedLoadParam3=null,this.ChallengeId='',this.Verified=!1,this.FailOverChallengeId="",this.LoadTimeOut=2e3,this.LoadTimeOutHandle=null,this.UILoaded=!1,this.PrerequisiteChallenge='',this.ConnectionFailed=!1,this.ShowValidation=!1,this.Loaded=!1,this.DependantChallengeId='',this.GradedActionChallenge='',this.ShowErrorPanel=function(){},this.Deactivate=function(){},this.Activate=function(){},this.ShowConnectivityError=function(){},this.GetVerificationData=function(){this.NotImplementedException()},this.GetUserResponse=function(){this.NotImplementedException()},this.GetChallengeType=function(){},this.Show=function(){this.UILoaded=!0},this.Hide=function(){this.UILoaded=!1},this.Verify=function(){return!0},this.V

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://larationr.top/aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 64312, version 1.3801
Category:	downloaded
Size (bytes):	64312
Entropy (8bit):	7.997085385162933
Encrypted:	true
SSDEEP:	1536:ewb33uqE+oLBcBXDGQK6DrmE2B/AUPvE22Ri:ewT3uSowTG76mE2B/AUPnP
MD5:	39746FA9261B312CCCBDC84FA3868586
SHA1:	86DCF95798DB4F095A2DBA3905394EECE26C2BA6
SHA-256:	FE2B97EC6926B7B6FF62113D76B0DBDF3AE10EA8F2F7A779803B6ABC8B3E1F03
SHA-512:	8D5B9CDFB0D54AD0E1024C29900BF94BE70285997F10CBF97BB5022D1F1C3559659DFDCCC332D288835B8C9F1CD22607C4F99C18580305BB6F4DEDD396600418
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/SourceCodePro-It-1058.otf.woff2
Preview:	wOF2OTTO...8.......\.............................F...q.....~..>.`....6.$..p...... [l....Cv}..,M..Q....!.(.....{R".v.;\|...2g#c..H.r......._.,bl.,.... B...g...n..8%............./`%.ik.6..6...W.SS..t8'Xn.]........p....R....-L8.d)..~...s.3.M5S.T3...{..M<_.H.....E....cFfq%.:..q[x. ""...{0..!TR.T....@DD.D.f..jV.C]..R.....D..KK.).X<H .d ..w...Vr...=..k.yXB.....x.S.'G+..x...3.M+...r...S.u....Z.`-....p..6..&.`0.#..._.dsZ...,.W..Kh?......{.....>V<.......wt..N:i)=.4J.$...(.A...Rq..%y&e..$!m0\|..Y31.n..tA.....x8#.5....oy.SOr.@#...ZJ.b.{..}..... ..hV..K7..v.8#YeRLOV..W2..S.]..\|..H..c.C_.V;....[.Cl.8.........4..f.1..)..ZO#..$.../.vR...I.I.......w.S..~X!:....1.=.z.wW(.V..=[.{z..%C.3I.p....d..?...%1...AIP...Y.LcF.e,@.l.\.FH.....E2l..}....j$.xE...g.w...2K..\|s.y...#.7.T..]..4?.5M>..@mjB..$......k/......-:.d[Gi..N..R@.oJ.qo.bts =.8....{&.]0...D....k..BU..z[.]..b.#.O...Q$".d..H.. ".4..dB...7....'.C..A.z.o....My.....K.fE.....t.P.....>.E....eb..d.1t;.......

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9395)
Category:	downloaded
Size (bytes):	9447
Entropy (8bit):	5.300816382471203
Encrypted:	false
SSDEEP:	192:li4WCVt1rzoeYR/GAmpACqAJKKFQP1JXUcIUYwJGyXUfUoJD0jeQV7L1p5lUrT:lik1YeKBCqAVQdJkQIsuCZ7P5lUrT
MD5:	7C878D4293A5376FF13BAF6E259A0ABA
SHA1:	9E7780C1F94C33DB83CD90C65CCBCE780E3102E0
SHA-256:	5093B1B631954DFAE4ED12257B7B1228B7137C55EDB34773A1C3D3A106CED645
SHA-512:	8A86238E0F21133A3E6A2CA4E171F45A78AE929A33EF87AE1D83507AE3167DCED389FCDDAD88204B56559A7E8A0D28DD95A78480E56E5779FE991F73B08881EA
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-g.min-vflfIeNQp.js
Preview:	define("metaserver/static/js/clean/ui/radio",["require","exports","tslib","classnames","react","react-dom"],(function(e,t,o,n,a,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.RadioGroup=t.RadioItem=t.RadioItemVariant=void 0,n=o.__importDefault(n),a=o.__importDefault(a),r=o.__importStar(r),t.RadioItemVariant={Normal:"normal",Large:"large"};const i=Object.keys(t.RadioItemVariant).map(e=>t.RadioItemVariant[e]);class s extends a.default.Component{constructor(){super(...arguments),this._handleClick=()=>{this._isSelected()\|\|(r.findDOMNode(this.refs.input).focus(),"function"==typeof this.props._radioGroupData.onSelect&&this.props._radioGroupData.onSelect(this.props.value))},this._handleChange=()=>{"function"==typeof this.props._radioGroupData.onSelect&&this.props._radioGroupData.onSelect(this.props.value)},this._getId=()=>this.props._radioGroupData.name+"_"+this.props.value,this._isSelected=()=>this.props._radioGroupData.radioGroupValue===this.props.value}render(){const e=

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5478)
Category:	downloaded
Size (bytes):	5539
Entropy (8bit):	5.060775024773589
Encrypted:	false
SSDEEP:	96:CzQoHz9kgak+IDipTtjO1Uh+pzepVfk6vrNXH3rBGZ04:CzQapkpk+6Uh+FePcmrh3g04
MD5:	AA4B7174791BEBD489207BEA34CE0699
SHA1:	0782C9BADFBA5473F259CB78C2836D22C37427EE
SHA-256:	E7699BAFD178438ABEB2FB3C51383C55A430964AA4F420841BD4A3F25A3D5689
SHA-512:	1201C6C60E27E9863B0A53AD1BF485D995CEAA36A30B9927BDF3DEC25CAF7591C6E30698B4E35405AE2F6B8F2B825DAA724E65D625307A71DFD8464ED84FA6B8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-icon-essential.min-vflqktxdH.js
Preview:	define("metaserver/static/js/icon/icon_helper",["require","exports","metaserver/static/js/clean/filetypes","js/filepath/filepath","metaserver/static/js/icon/extension_map"],(function(e,i,_,t,p){"use strict";var a;function r(e,_=i.ICON_SIZES.SMALL){switch(_){case i.ICON_SIZES.LARGE:return`${e}_32`;case i.ICON_SIZES.XLARGE:return`${e}_64`;default:return e}}function w(e,{size:i}={}){return r((0,p.getIconNameForExtension)(e),i)}Object.defineProperty(i,"__esModule",{value:!0}),i.folder_icon=i.spectrumFolderIcon=i.file_icon=i.extension_icon=i.toSpectrumIconSize=i.ICON_SIZES=i.SpectrumIconSize=void 0,(function(e){e.Small="small",e.Large="large"})(a=i.SpectrumIconSize\|\|(i.SpectrumIconSize={})),i.ICON_SIZES={SMALL:"SMALL",LARGE:"LARGE",XLARGE:"XLARGE"},i.toSpectrumIconSize=function(e){return e===i.ICON_SIZES.XLARGE?a.Large:a.Small},i.extension_icon=w,i.file_icon=function(e,{size:i}={}){return w((0,t.file_extension)(e).toLowerCase(),{size:i})},i.spectrumFolderIcon=function({fileType:e=_.FileType

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	365
Entropy (8bit):	5.087664742263788
Encrypted:	false
SSDEEP:	6:U2ycV6jI4siXvXJ+Lt1UcA2xkN7w23biE1H5ouSLn8hrK9IVKDd/xWJrr0Q82aQm:U2eAi/ZQUQxkNP371H5ouSA0CVKR/x6a
MD5:	1F974E787FE58CE73795A4F658F2EDE6
SHA1:	62D00A8FA41C198EA15045FD5DD6C937EAD6749A
SHA-256:	81B587ED44393532F2B670F9B8CF3AB9036FAC869378D98790C9B949D3ABBE64
SHA-512:	6897B088FC7A40754CFA00A2885C4962999ACB26C67425617EE033D56ED89D9733F11B08C61555A22E34D8A5419443CCFBDEBA7537089E897FF62DD37CE91954
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/icons-vflH5dOeH.css
Preview:	/ @generated -- This file is automatically synced from dig-icons@2.15.1. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./.

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	5.342168892726887
Encrypted:	false
SSDEEP:	12:1bmSyv6/rS5Ddjege8g6FaL8DzjLEFI5DDc0nlslfiV0+Qurwr7O:1bmLC/+W6F/HcFmls5uMPO
MD5:	E8C27CC72A944D004C4404B1B0FE0141
SHA1:	46BB14C225786A3C4F5C57450DB241BE53F7E75D
SHA-256:	F2EF244EC44C422C6152C8DAAC1B2F850ED0D9A41AEFC1057368C33A8A4B90F9
SHA-512:	40A6220B05020AACEA825E9B635F51716DD8633290FFAA779B4CCDE303364F687A329867BB1B5896B3717916AA2E4551D010486060CF98CB83E322EAE24AA9E4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/ux_analytics/element_observers/observer_constants.min-vfl6MJ8xy.js
Preview:	define(["require","exports"],(function(e,E){"use strict";Object.defineProperty(E,"__esModule",{value:!0}),E.ElementInteractionEventType=E.ELEMENT_INTERACTION_EVENT=E.UXA_INTERACT_SELECTOR=E.UXA_ID_SELECTOR=E.UXA_INTERACT_ATTR=E.UXA_ID_ATTR=void 0,E.UXA_ID_ATTR="data-uxa-log",E.UXA_INTERACT_ATTR="data-uxa-interactions",E.UXA_ID_SELECTOR="[data-uxa-log]",E.UXA_INTERACT_SELECTOR="[data-uxa-interactions]",E.ELEMENT_INTERACTION_EVENT="element_interaction_event",(function(e){e.ELEMENT_HIDE="elementHide",e.ELEMENT_SHOWN="elementShown"})(E.ElementInteractionEventType\|\|(E.ElementInteractionEventType={}))}));.//# sourceMappingURL=observer_constants.min.js-vflfCai8k.map

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	514
Entropy (8bit):	5.124846569501154
Encrypted:	false
SSDEEP:	12:bRqovGaEtGxPGcfUG2Fylde9hWKg2JW3dwVxK:AoQt5XyyWK5Y3KVxK
MD5:	5EDAB37A211161F2D01BE84B3D4F93D9
SHA1:	13548A897F0AC5900E4AC430BF39EF36B1B858A9
SHA-256:	23EA7EE74019E814F9774D1F6803462CA3A6B948C97E8F966B3723DAE54A22E0
SHA-512:	F80E3014CF0F6F98B1BF713672C48C60D50FD3E9BEDB43B9F27861C1E0A58C256B37980D2B6085A63167447B505E769CD5D382381C151C7671C359F07D0293F2
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/index.web-vflXtqzei.css
Preview:	@import url('./components-vflrfVane.css');.@import url('./logos-vflbhj-4c.css');.@import url('./icons-vflH5dOeH.css');.@import url('./foundations-tokens-vfl7HlIRM.css');.@import url('./foundations-components-vflUJaSUW.css');.@import url('./content-icons-vflRUPK-R.css');./* For any images that are circle cropped, scale them up a bit so that they're still cropped as a squircle /..dig-Avatar-image--modern[src='circle_crop=1'],..dig-Avatar-image--modern[srcset*='circle_crop=1'] {. transform: scale(1.075);.}.

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2377)
Category:	downloaded
Size (bytes):	2432
Entropy (8bit):	5.139136261950352
Encrypted:	false
SSDEEP:	48:rLZ5erNRHD8XMFsZCVErtFREHdVWCNQijsFZoIzVFZpr9UyG3Sx0EmN:p5ejo8skVE5FRlCNt4XGyG3UNmN
MD5:	A0FCAD688B9BA56E2E4A003E08F5C001
SHA1:	2F2B915FB7765BF67C5E20781080A8752BB9FED6
SHA-256:	FB8DC117A76F0FB9833C686807AD8269478FCDD25F7653B77F9569E4FF957573
SHA-512:	34BA04E7540E9E0B111EC475E272829EF13D177950F936512023BAF49BCD0A62EFDC41BCCBFC82BF394F0DD4A615B5B54AABE25A804AFBE0EC42E3910FA795C1
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-loadable.min-vfloPytaI.js
Preview:	define("metaserver/static/js/api_v2/team_client",["require","exports","metaserver/static/js/api_v2/types","metaserver/static/js/api_v2/client_base","metaserver/static/js/clean/viewer"],(function(e,t,a,r,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.TeamApiV2Client=void 0;class s extends r.ApiV2ClientBase{constructor(e){super(e)}_headers(e){const t=o.Viewer.get_viewer().get_user_by_id(e.subjectUserId);return Object.assign({[a.ApiV2HeaderNames.DropboxUid]:String(t.id)},e.headers)}}t.TeamApiV2Client=s})),define("metaserver/static/js/async/loadable",["require","exports","tslib","react","metaserver/static/js/core/cancelable_promise","metaserver/static/js/core/exception"],(function(e,t,a,r,o,s){"use strict";var i;Object.defineProperty(t,"__esModule",{value:!0}),t.Loadable=t.LoadState=void 0,r=a.__importDefault(r),(function(e){e[e.Default=0]="Default",e[e.Loaded=1]="Loaded",e[e.Error=2]="Error"})(i=t.LoadState\|\|(t.LoadState={})),t.Loadable=function(e){const{loader:t,loadi

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5082)
Category:	downloaded
Size (bytes):	5083
Entropy (8bit):	4.931498303456814
Encrypted:	false
SSDEEP:	48:sal1qQzFHzjzjGQH7awKT0j5L1QkKvk+yvMdRIRCrHfZ2PMRpe6nMOqOxpOq92Oc:tBfySNKY6kSQwVr/Z2A6Oz9Q3
MD5:	0E80CBB2EF9225FDC2B4DEFA7D321901
SHA1:	BD0862DEAD0CDAD41CC33D88856225717C6B173E
SHA-256:	E34014DB1E6DA64AE844602B85DAFC41024F5694E49058A6F138DC7415E0AD25
SHA-512:	5BED798924D325326B30C5089EF51E7086D5281B113EDC519A58632528FB95B082ED723813F4C1F4E73D7D05F0DADB70B2BDD478DEFCB5124A2E9A7020271C09
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/font_paper_atlas_grotesk-vflDoDLsu.css
Preview:	@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflugmAly.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflWr14lv.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Thin-Web-vflYSEsbG.ttf") format("truetype");font-weight:100;font-style:normal}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflP-manv.woff2") format("woff2"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflmKWqdQ.woff") format("woff"),url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-ThinItalic-Web-vflHYkDrv.ttf") format("truetype");font-weight:100;font-style:italic}@font-face{font-family:'AtlasGrotesk';src:url("/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Light-Web-vflvAXMid.woff2") format("woff2"),url("

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3275
Entropy (8bit):	7.886151392866353
Encrypted:	false
SSDEEP:	48:oAZYVtRlc5cEhL43QIa/Jjqh6SFydc3wWM1uF4TBKW2RtDglwfrzQXBdrz:5YVtROThMg9/Vqh6hdnWYTTl2DWwrsxR
MD5:	BEAA0ED7207B6D54F5BC7A8118F30E9D
SHA1:	E48803791A228C5DD8D4A2BA101DDEFEE63D5868
SHA-256:	008AED4B5DE1B7EA70A1D384E6811AD451747E37668F4F9ECC3AD68FDA892147
SHA-512:	3CA0ED2DAFAF070C9E20C540278FC2522EE6F4A306EE18BC7F8233F4739DF207CA5B9EEF46C1EE6D4A0702A39FE4EA976FC92B29C6FBF0B10E58C8E47C4701C7
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fb.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....XIDATx..[[l.W...sf..{..IC...i.!.K.Em!.B....U..U...j!..xh..E.A....P...P.....4..-M..c;..;.3s....wgv.^'....z.\........8....b$MD....R.& Gl.......r..(h.:>qlh..^P..=.}.,d..dfz..........\.....\....m.M...e..L3.8..76.XC...\.7.%.p..G.......)&<k........e...:.z.J.Q&3......,...G...#imY.L.T.....v..?.@<.....@N....Vm....^..e..P...[.(...Q,....C...twO/..f.....3.pi\|l;.(R5.R.I.n../..J.8.J.l...8.....m..s.sk..g..D.D...[........x...>V..0.@.m.M....j....e..z......^.......,..@.Z.m,.R...}.(...H$.gEo...WC)..\...M+]...j.(D..a.v....,.."Z...5....]Q...L..+]}.....DD..^.....P..i.J.R.D$@...J.c!...i.b4E.[O>....t...hWa:N.@....m.....i-.....G.v)..s....W..?F.../.RJ.s..(D.0'....".P...G..!.d2..}.].....WDT..+Rb..`.....+..u.x..w.}V......6.}.3.K..q...!..}@.._#&`...$....{.'...X=/_. a!.....n..DY.(..a>.t......`..."."j.M...J)....a......h../%Ik......1.zGW/.++..CM..A.._.D..n...... .T.v.^.$.@.W.

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 18334
Category:	downloaded
Size (bytes):	4574
Entropy (8bit):	7.959832911716927
Encrypted:	false
SSDEEP:	96:/oXSWQ1gzoWJE93zNTwtLqCsHKqDykE+H62yHig:/oXSWQKzh695TWO7l3Rg
MD5:	2E87EF19236C2EE364FCF6D7E3DFFC35
SHA1:	F7A3285175D22EAB5D8889BDD52D9D2682D01CBB
SHA-256:	E4FE4E9395029A60E4AEE7BAC601C30F560E0E3B2CFD762A1AD9AC3C27B004C8
SHA-512:	0430146A3D444177A14E3C8406F0C60845E81BFBF0F8CB17C3715EA939F927EA6905B6AAD9C033A9D4C90B97D13CB2FFDC2132132CB726B431333A0B6F2704CA
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/b12f522ce0ee55757f5e.2dcJbNyH591tHPSv0DWyEHi4jMDBGtqFibbP5rsRf_I.js.gz
Preview:	...........\.r.....t.\d.E.N.8.p..[.=..Z..9..R..."9d.F..>.>.>....$;..?&......C...d.....z.W........O.....z......{U.'.H........>....F/..rh.b:...Y..F...pl...h..o.=...m...\gZ..f...Z..k2.s..1.Ug.U..5.n.....<......./<k..6{$..j.z...J.../=`z.x..>...dcF..[.U.v.:..G..t.H..h..*{.f.woU-....T...........-x...\|..^.\|x.ac\|..T..<..~....C\|}.jS....E.cCij@_.q..\.\|"&....'...h..h..!.Ue....Z3.Z.I....?..t'..E.[.........Z}..S.z..$.u-.<.l.h...s..?X.X...8N...8R.Cu.k:...<3....."S6".7.yI....,......N..1...'..rDU.de.+#a...G..M.~...4h...y.Xn{z...[<B....).Y...f.<RJ.)1M..<6.C.A..q.....l............c.).^..Bn......,..7d!......"6r.G.FzN.!e.N`!3...p.F..J......~~..@F.+s.E2r.2.GIed .\|K$..[.x.<...SoL#..S..v..7y.>SV.J.c...H.%......Zg%O...,.7...~.kR..'..9.b..\|......s]......tx........K...rH}.P..a.Qo.".k.&U...'.!J...H.f.....wuU=..L1.a......w(...Q._.G.tj[.u.}h......?..7.=z..]T.j.o.!z./.2.+.-.;......'E..lI..Gq......0.8N.0.....T;.)`c5..'c.P....8.PV...,.5m....iD.so8..j{..b.

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3037
Entropy (8bit):	7.91875067094988
Encrypted:	false
SSDEEP:	48:ozf5ipgAwSJel7pU7/2ZsofMqeJ71UFDkP4KfD3xJyAsNuVg2o:0qK7pUbWfLzW4QJVg2o
MD5:	C4CE23F7313E8E2319F10E4D8AEB20D1
SHA1:	EBE18FA8C318E3BA6D54636FCA980996B183172A
SHA-256:	E2D2BC5EF69F49E711E2147DA9D5A5D67F478312D30D78AE486B0E1763AF0430
SHA-512:	98E07B9E4D7C40E245BF39071A879E6E094AEB5F2B3B264E0ACA1730B58B4CC8B84664A1F24174966FACE6642033E592F3A58F3C956B346DCE98A8D745DD0E48
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....jIDATx..]...u....G.t.F3.lF.F+...z..uH.IX....b..,!^...1.].....0..<..$.iE...."...`0.b.<..M...H..dY.W..vF.QU..<T.LWwUu.L......{...O.s...&...'~...G.L#r..W"q'..>......lV..N<.s.U..ob{..\|C..k}!.....?.....?,..j......z....}v\.-F\...../._.,..b...nn?..G.E..P.....'gBV..M.T.}...n..(.!..\|.+..z...g...6.......c^....5..........c..`...C......Gq...Xw.8{.?4.6..".{j..P..u..h..c....}.^....B.......q.5.Duk[..C........i..3.#..<.......D..;c+.Y9..1.....[.u`...`.........W.^>....m-X..8vy.g=?..WI...`...1.Ml.3.v.!.s...@..g..!#....+m.^`.....S.....Z.~....~....~FJ...%?.....@...?.b....G.C..:...W.ucM..?6W9st..s..D9#........W..Pu.....5pTU..g..\|.....p.....x@A..4=....(........U.m..........?..0F.Y-....P..........Z..S...7.BW.3wo........A..=..1.y<...;.....R...,J..b.........R.f..A.....>...Pv..C...g.....z.vF...3P..V./3^Z%...F.]~._..F..... .(R@UA..P..<...jz,hT....Y)......-.d.RvQ.a?..

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.258651347372226
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1A+uAVJ3D9T0FDkALAg6n:MMHdVBMHgWdzR05A+uw9t8gA56
MD5:	47D424A0DF9B22A309F0531517BAF5AC
SHA1:	F2BF52D486D3B491ED801FFD8E2DD46748B0BD1E
SHA-256:	43EFA4214BC42FB7885564FD4AFFFFBD8159057CDE93A2E8354DFDEE72D2E978
SHA-512:	E5FAF98437B11ACBA57A855DDB723DE2F0E41137007455009DE7E63EF0FFBA86B622119CB19FE8EF6E24FF642A1D6B85A603B2A0F1B51F9E47F9DE88C8B9580C
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/pagelayout_white_panel.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:e58f4036-101e-000d-54d0-cb0215000000.Time:2023-08-10T21:19:44.2539170Z</Message></Error>

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7311)
Category:	downloaded
Size (bytes):	7371
Entropy (8bit):	5.394406119224433
Encrypted:	false
SSDEEP:	192:b+zU9NafmwijSnS78S8w4myu86gaW6vPhDEjrA3lRW9mW05v:buU9NafmljSSISX4my16gaWEZDEnA3lx
MD5:	974F262F184EE736D152F5CD991CC9A8
SHA1:	9DF1BD32359116BBD134E292AD1445A7BFF4931B
SHA-256:	26B9EDD7FEC2243A3D2F26AEC0E54978C7BA1C4CDBA0F3952E0A63E34DB75577
SHA-512:	14126DDAC26D79EB8FB16176B323202C3E34992CDB61E9D42F49F79ACD84A5971F1E6B7A612C22B43AF17C1F959710673ED04B6A7FE9565D02525D06DBF5BBC6
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-time-tracking.min-vfll08mLx.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/chevron-right",["exports","react"],(function(e,t){"use strict";var r=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)})(t);e.CheckmarkLine=e=>r.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},r.createElement("path",{d:"M5.5 11.5 10 16l8.25-8.25",stroke:"currentColor",strokeWidth:1.5,strokeMiterlimit:10,vectorEffect:"non-scaling-stroke"})),e.ChevronLeftLine=e=>r.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},r.createElement("path",{d:"m14.75 5.75-6.25 6.5 6.25 6.5",stroke:"currentColor",strokeWidth:1.5,strokeMiterlimit:10,vectorEffect:"non-scaling-stroke"})),e.ChevronRightLine=e=>r.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},r.createElement("path",{d:"m9.25 5.7

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2091)
Category:	downloaded
Size (bytes):	2155
Entropy (8bit):	5.230868053254922
Encrypted:	false
SSDEEP:	48:1aY/95gtP+7YLE2OpfaURsF5GR2RB4JQqJb6Z4JQqxDXE4bE8YQThnWJ:Z/95gtP+7YgfaURs1bRqRsRqjA8n9nE
MD5:	66F6A047FDCAB066EA70ED8EE1031417
SHA1:	CD86689A69226A05B0AECC2CA7BCBB5FAD4DBACE
SHA-256:	B0FFEFEE74EF21C76A903990FE14CFF784C73D193CC9778B6ADE57B445A4C9B2
SHA-512:	7413B64D39B30F2F88F206260BE6C8F96F5FD0A43FB9F26E92C3B07B6A9C54615B3F5CCCD7677FCD78D31D0B909D070D963F8F9041170943A479BB3852DD7BCC
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/ux_analytics/element_observers/intersection_observer.min-vflZvagR_.js
Preview:	define(["require","exports","metaserver/static/js/ux_analytics/dispatch_custom_event","metaserver/static/js/ux_analytics/element_observers/observer_constants","metaserver/static/js/ux_analytics/element_observers/observer_constants"],(function(e,t,n,s,r){"use strict";var a;Object.defineProperty(t,"__esModule",{value:!0}),t.createIntersectionObserverManager=t.ElementStatus=void 0,(function(e){e.VIEWING="VIEWING",e.VIEWED="VIEWED"})(a=t.ElementStatus\|\|(t.ElementStatus={})),t.createIntersectionObserverManager=function(e=.5){const t=new Map,o=new IntersectionObserver((function(t){t.forEach(t=>{const n=t.target;t.intersectionRatio>=e&&i(n,a.VIEWING),t.intersectionRatio<e&&i(n,a.VIEWED)})}),{threshold:e});function i(e,o){const i=e.getAttribute(s.UXA_ID_ATTR),E=t.get(i);if(E)switch(o){case a.VIEWING:E.status===a.VIEWED&&(E.status=a.VIEWING,E.lastViewStarted=performance.now(),(0,n.dispatchCustomEvent)(r.ELEMENT_INTERACTION_EVENT,{detail:{eventType:s.ElementInteractionEventType.ELEMENT_SHOWN,ext

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4046)
Category:	downloaded
Size (bytes):	4107
Entropy (8bit):	5.495722269093445
Encrypted:	false
SSDEEP:	96:XlZoGUAd8EGUKlZ2lZDGUrLlZ3blZt81I8ZXI4E:XlZoGUAd8EGUKlZ2lZDGUflZ3blZt8h4
MD5:	4A2EAD31625C4E58C5EBCA3A3FDAC38A
SHA1:	C2E823EE8DDD858BF2A7929880DA3DA3B9C531FA
SHA-256:	2C41806A7C0274D778EFD2F23DE50137BE314825CC58C1A8DACC73FFE17A08B2
SHA-512:	7D3920E157ADA2074EF542FA1F8A157ABEFE2932E7EBEB2183DB0D26D5CADE38229F1F086ED5B44972CEA93A45D33FF0EB3A9152CBA71A558A1AEDC8DCCC2910
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-form-icons.min-vflSi6tMW.js
Preview:	define("spectrum/icon_arrow/bundle",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.ICONS=void 0,t.ICONS=JSON.parse('\n {"right-small":{"attrs":{"width":"12","height":"12","viewBox":"0 0 12 12"},"dangerouslySetInnerIconHtml":"<path d=\\"M6.243 5.998L4.12 3.878l.707-.708 2.829 2.828-.354.354-2.475 2.475-.707-.707 2.122-2.122z\\" fill=\\"#637282\\" fill-rule=\\"evenodd\\"></path>"},"right":{"attrs":{"width":"24","height":"24","viewBox":"0 0 24 24"},"dangerouslySetInnerIconHtml":"<path d=\\"M10.414 7.05l4.95 4.95-4.95 4.95L9 15.534 12.536 12 9 8.464z\\" fill=\\"#637282\\" fill-rule=\\"evenodd\\"></path>"}}\n ')})),define("spectrum/icon_arrow/index",["require","exports","tslib","react","spectrum/icon_templates/stateless/index","spectrum/svg_icon_bundle/index","spectrum/icon_arrow/bundle"],(function(e,t,n,r,o,l,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.IconArrow=t.ICONS=void 0,r=n.__importStar(r),Object.define

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6211), with no line terminators
Category:	downloaded
Size (bytes):	6211
Entropy (8bit):	5.3158609905293925
Encrypted:	false
SSDEEP:	192:A+WIcvKEXdcG/e9wbhThrdCdOc+34lR7WeA2LBjN4V44my7L9n:zWIcvXdcG/e9wbhThrdCwR34lR7WeA2I
MD5:	8C897EE3F367AA947878162E2BC8AC94
SHA1:	59283273B67F5EA8A828C7E6E96D10171105E0BA
SHA-256:	CA25FA24DBC81BF352C0D983707B22998F14B6FEE08B128F81FE52D6B54C3CAB
SHA-512:	D3CD37FD1D6AEF195F7179BA4CB34FE4EEA662BAAA65BB13CC8A58538D42FA2F3627FBF0BADD710BC6BFB24F2A9EA64BCEE8D0CDEE56A821F5CFDC9383500FBC
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/productkeycontrol.js
Preview:	window.O365=window.O365\|\|{},O365.ProductKeyControl=function(n,t,i){var r={Empty:{imgSrc:null,imgAlt:null},Incomplete:{imgSrc:null,imgAlt:null},Complete:{imgSrc:null,imgAlt:null},Validating:{imgSrc:'https://res-h3.public.cdn.office.net/admincenter/admin-content/webcontrols/images/spinner_16x16.gif',imgAlt:'Validating product key'},Valid:{imgSrc:'https://res-h3.public.cdn.office.net/admincenter/admin-content/images/greencheck_default_16x16_metro.png',imgAlt:'Valid product key'},Invalid:{imgSrc:'https://res-h3.public.cdn.office.net/admincenter/admin-content/images/alert_high_default_16x16_metro.png',imgAlt:'Invalid product key'}},ut=function(n){var y="ValFieldError",e=!0,f="",o,s=$(n),w=s.parent(),h=s.attr("id"),i=h+"_v",u=i+"_val",c=i+"_err",r=i+"_err_ClientState",l=i+"_f",a=document.createElement("div"),v,t;a.innerHTML="<span id='"+u+"' style='display:none;'></span><input type='hidden' name='"+r+"' id='"+r+"' />",w[0].appendChild(a),v=$("#"+u),t=v[0],t.enabled=!0,t.controltovalidate=h,t

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1477)
Category:	downloaded
Size (bytes):	1537
Entropy (8bit):	5.131315697910104
Encrypted:	false
SSDEEP:	48:1aYVs1HZz7GbnnFZFaO/lfhmh0h7zJ/hIwIzQbtn6T/:ZOpZz0FZFaO/58upzjbq/
MD5:	956A73E69039B2A9E8FC55294A78ACAA
SHA1:	783A2E1C60D0B62F782C56146E3C0D0F72D045E8
SHA-256:	1B1D1CD7EA229EE4678424B54D53B011E5455B1D62F8FC489666261C050444C6
SHA-512:	5CB04508191C8C51E3E4DF364B7C4906113100E77C1F12883B03977982CB62A2A83E169C68F1D2D8CFDC0DED90EC3EA93605FAB101FAE5177686784E136EB472
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/ux_analytics/element_observers/mutation_observer.min-vfllWpz5p.js
Preview:	define(["require","exports","metaserver/static/js/ux_analytics/element_observers/observer_constants"],(function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.createMutationObserverManager=void 0,t.createMutationObserverManager=function(e=document.body,t=n.UXA_INTERACT_SELECTOR){const r=new Set;let i=null,s=o();const u=new MutationObserver((function(){if(null!==i)return;i=requestAnimationFrame(()=>{const e=o(),t=c(e,s);a(c(s,e)),(function(e){r.forEach(t=>{t.addElements(e)})})(t),s=e,i=null})}));function o(){return Array.from(e.querySelectorAll(t)).filter(e=>e instanceof HTMLElement).map(e=>e).filter(e=>l(e))}function l(e){var t;if(!e.hasAttribute(n.UXA_ID_ATTR)\|\|!e.hasAttribute(n.UXA_INTERACT_ATTR))return!1;const r=null===(t=e.getAttribute(n.UXA_INTERACT_ATTR))\|\|void 0===t?void 0:t.trim().split(/\s+/);return!(r&&r.indexOf("shown")<0)}function a(e){r.forEach(t=>{t.removeElements(e)})}function c(e,t){return e.filter(e=>t.indexOf(e)<0)}function f(){u.observe(e,{chi

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (989)
Category:	downloaded
Size (bytes):	1064
Entropy (8bit):	5.008429331561416
Encrypted:	false
SSDEEP:	24:1bmvDtdPpgx53AzVIUrG8Sme4ucqgm0W5:1aRwP3AzVIqS7Ncrmh5
MD5:	70B8695BE752F1847CD18ED5D798DC6E
SHA1:	8D6FEA7C736462A2428FFB455F31D0F42AE55F61
SHA-256:	62121B1110EC337F9AF7F559A77C4B12FBBCC111FA730E592E54D7B529EC0981
SHA-512:	A82F75A4700841186DDBADDD53968F6A5C811797F2F941146BFBD23D4CCF3970039F55FDA2CA26FDF829BCAD24BEB7DE2130233B28D9C77CFD14853777AEA13F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/cloud_docs/paper/cloud_doc_notifications_dropdown.min-vflcLhpW-.js
Preview:	define(["require","exports","tslib","react","metaserver/static/js/user_notifications/dropdown","metaserver/static/js/components/ui/css"],(function(o,t,e,i,s,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.CloudDocNotificationsDropdown=void 0,i=e.__importDefault(i);class r extends i.default.Component{render(){const o={position:"absolute",display:this.props.visible?"block":"none",top:this.props.top+"px",right:this.props.right+"px",opacity:this.props.hideDropboxNotificationBell?0:1,pointerEvents:this.props.hideDropboxNotificationBell?"none":"auto"};return i.default.createElement("div",{style:o},i.default.createElement(s.UserNotificationsDropdown,{isPagelet:!0,handleNotificationCountChange:this.props.handleNotificationCountChange,shouldOpenDropdown:this.props.shouldOpenDropdown}))}}r.displayName="NotificationsDropdownComponent",t.CloudDocNotificationsDropdown=(0,n.requireCssWithComponent)(r,["/static/metaserver/static/css/components/button-vfl7d2xHj.css"])}));.//# source

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7600), with no line terminators
Category:	downloaded
Size (bytes):	7600
Entropy (8bit):	4.755347264022592
Encrypted:	false
SSDEEP:	96:gTJ0Z6QYvW81oyLEfqSorX5Kjb6tk63LA5D287sq5pY+0dnk3P54aaoJ99orOoY0:S0dYjueAynT8js
MD5:	BC6A941A872D57146E13823F6935A7F2
SHA1:	E648D16D68417B81616454539EDD8303E04DBEC7
SHA-256:	D132D49C1C8945F5C43AE470BADF2B6EDCD584297E84E59DD2034FFB7DC863B3
SHA-512:	F9629A3E82E24FC48DEA4C677491235AAB0098CEDF40DB9F98E53CA430B5DD105A2D9F092E007351AFE2BCCCD2A430C9020EDAE55665E3F3517703A3D00CDB71
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/css/o365themedefault.css
Preview:	.o365-theme-base,.o365-theme-base input,.o365-theme-base textarea,.o365-theme-base select{background-color:#fff;color:#333;border-color:#666}.o365-theme-base h1,.o365-theme-base h3,.o365-theme-base h4,.o365-theme-base h5,.o365-theme-base h6{color:#333}.o365-theme-base h2{color:#666}.o365-theme-base a{color:#0078d7}.o365-theme-base input:focus,.o365-theme-base input:hover,.o365-theme-base textarea:focus,.o365-theme-base textarea:hover,.o365-theme-base select:hover,.o365-theme-base select:focus{border-color:#2b88d8}.o365-theme-base a[disabled],.o365-theme-base a[disabled]:hover{color:#666!important}.o365-theme-base input[disabled],.o365-theme-base textarea[disabled]{background-color:#f4f4f4;border-color:#eaeaea;color:#a6a6a6}.o365-theme-base input:disabled,.o365-theme-base textarea:disabled{background-color:#f4f4f4;border-color:#eaeaea;color:#a6a6a6}.o365-theme-base input[type=submit]{background-color:#0078d7;border-color:#0078d7}.o365-theme-base .DataTable td,.o365-theme-base .DataTable

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.26670635533768
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1CRAeX7db6FDy5g6n:MMHdVBMHgWdzR05CRAerxOh6
MD5:	73F3C916C910C5169B5ECEDFBC9147BC
SHA1:	028747DFFF6186636F181D0DDBC65DC383C30E4D
SHA-256:	D640DDF131DB070C49FD089104343FA658CCE98F39B1F9600E2E6E0189FC80C0
SHA-512:	29E11BC6FFEFC8DD3DB4A3B0527F89A47FD412967D27086A5761C5D59D2D607E284818849B33A5903F8860AC34EEA5E56BFF1753FC782A3BB147C1D425EB08CC
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Images/list_bullet_5x5.gif
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:f6ff8abe-401e-003f-14d0-cb0262000000.Time:2023-08-10T21:19:45.0751043Z</Message></Error>

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (947)
Category:	downloaded
Size (bytes):	1021
Entropy (8bit):	5.000851501493354
Encrypted:	false
SSDEEP:	24:8rBmAsGFaFTtyfdHF5Maea4OZreA8b+De8f1kmXpjO:1HGWtyvaShZ4b+K8am5O
MD5:	B5767DE546B420B3F6F6BF125DAF96F8
SHA1:	8D74912F01084176BD24654000FBAFC88B69093C
SHA-256:	DF4056FEC8713C927959855F3D678CEF555A2C1BD5CBB187336FDE51AAA02355
SHA-512:	5EB0D946A908B49C8A9330886B8A810EBF0323252501E9C1B56AA3040FCB862B4901752DB5C1FF16773EE8B4F43DC666C62057DF6CBF2CF9DC29B7F906D5EB9D
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-referrer-cleansing-redirect.min-vfltXZ95U.js
Preview:	define("metaserver/static/js/clean/referrer_cleansing_redirect",["require","exports","tslib","sjcl","metaserver/static/js/core/browser","js/browser/cookies","metaserver/static/js/core/uri"],(function(e,r,t,c,s,i,n){"use strict";Object.defineProperty(r,"__esModule",{value:!0}),r.safe_open_tab_and_redirect=r.redirect=r.get_redirect_uri=void 0,c=t.__importStar(c),s=t.__importStar(s);const o=function(e){const r=c.codec.utf8String.toBits(i.Cookies.read("__Host-js_csrf")),t=new c.misc.hmac(r).encrypt(e);return c.codec.base64.fromBits(t)};function a(e){const r=n.URI.parse(e).getScheme();if(r&&!["http","https"].includes(r))return"#";const t=new n.URI({scheme:"https",authority:"www.dropbox.com",path:"/referrer_cleansing_redirect"});return t.setQuery({url:e,hmac:o(e)}),t}function _(e,r=window,t=!1){t&&(r.opener=null),s.redirect(a(e),r)}r.get_redirect_uri=a,r.redirect=_,r.safe_open_tab_and_redirect=function(e){_(e,s.unsafe_open_tab(""),!0)}}));.//# sourceMappingURL=pkg-referrer-cleansing-redirect

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	90807
Entropy (8bit):	5.144432976018183
Encrypted:	false
SSDEEP:	1536:rqLkX8GT+I1MWMqc7FPWVz8Nk0q0p00Ngk7mPb9k:oc8GT+I1MWFc7FPWVz8Nk0q0p00Ngk7Z
MD5:	4FE48A0C2E6727ACE786B7D9044ECDC6
SHA1:	D266A9F44101611032DAFC8E7FA790316DE31C40
SHA-256:	D4A8D59B9EDE4268B7CCF1A942D5F8A64D75844954D03E717B9BFAE606E0D641
SHA-512:	CEE579E86FC705BEF85C16C6290FD3ED87773D48C510C77D55D2FA086E61C715CBD58E32ACC17B00ADC6F268D1866EAC786A5097CD032483185F6D2E86404716
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/bundles/app-bundle-ca0d21868140c01fa0ea.css
Preview:	.officeHome-callout{z-index:100;position:relative;margin:16px auto;width:288px}.officeHome-callout.officeHome-callout--arrowSide:after,.officeHome-callout.officeHome-callout--arrowSide:before{content:"";position:absolute;transform:rotate(-45deg);height:0;width:0}.officeHome-callout.officeHome-callout--arrowSide:before{z-index:0;outline:1px solid transparent;box-shadow:0 0 5px 0 rgba(0,0,0,.4)}@media (-ms-high-contrast:active),(-ms-high-contrast:none){.officeHome-callout.officeHome-callout--arrowSide:before{box-shadow:0 0 5px 1px rgba(0,0,0,.4)}}.officeHome-callout.officeHome-callout--arrowSide:after{z-index:10}.officeHome-callout.officeHome-callout--arrowSide:after,.officeHome-callout.officeHome-callout--arrowSide:before{top:40px;display:none;left:-4px;border:10px solid #fff;border-right-color:transparent}.officeHome-callout.officeHome-callout--arrowBottom:after,.officeHome-callout.officeHome-callout--arrowBottom:before,.officeHome-callout.officeHome-callout--arrowTop:after,.officeHome

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2188)
Category:	downloaded
Size (bytes):	2237
Entropy (8bit):	5.246892423218319
Encrypted:	false
SSDEEP:	48:1hnSbgjv3NuzO42sQvg6kMmHXY9MQKO6uCdn:HQYcJ2s33Y+X5
MD5:	169422D0058F77E9777B724869D37613
SHA1:	D5412C77CA32CC32A656C49EFD4641F18B6AC702
SHA-256:	F03ECFA54B3ECF591A619F06F961A9DCFD0E6351F8E0DAD8B1F29FCE4BA6F5B5
SHA-512:	59FF49E42B16697E9823A8BCE521E4CB8AF5F3AFF9FDA14903B6D0DC50E555B3B5AD158D2DE3774B88864F794B245F2C896CCB659CB14D9E006708E6D24CB6EE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/prod_assets_web_modules/common/index.esm-vflFpQi0A.js
Preview:	define(["exports","react","./index"],(function(e,i,t){"use strict";function a(e){if(e&&e.__esModule)return e;var i=Object.create(null);return e&&Object.keys(e).forEach((function(t){if("default"!==t){var a=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(i,t,a.get?a:{enumerable:!0,get:function(){return e[t]}})}})),i.default=e,Object.freeze(i)}var r=a(i),n=({className:e,children:i,...a})=>{const n=t.classNames114("dig-Label",e);return r.createElement("label",{className:n,...a},i)},s=r.forwardRef((({children:e,className:i,href:a,onClick:n,inverse:s=!1,hasNoUnderline:d=!1,isBold:l=!1,variant:c="primary",...o},m)=>{const g=t.classNames114("dig-Link",i,{"dig-Link--primary":"primary"===c,"dig-Link--hasNoUnderline":d,"dig-Link--isBold":l,"dig-Link--inverse":s}),f={onClick:n};switch(typeof a){case"string":f.href=a;break;case"function":f.href="#",f.onClick=e=>{e.preventDefault(),a(e),n&&n(e)}}return r.createElement("a",{className:g,ref:m,...f,...o},e)}));s.displayName="Link";var d=[["m

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (560)
Category:	downloaded
Size (bytes):	614
Entropy (8bit):	5.067451670582602
Encrypted:	false
SSDEEP:	12:QTPLmyTsOTaXY/BY1X5XqhDDMKGaG8G2A13AMktQ2jPu+:8PLmqs2aI/BY1X5XqhfMKvJ4i3h
MD5:	89A81EB784A7B7D90BF9ED9B6FC6BFAF
SHA1:	4742E4685FB509FFE4739ADE902C375FFDDE3020
SHA-256:	BECE4D693EBBB13317B704A7BCF009D08556B36D7013A56BBC92AFDD001DD8E5
SHA-512:	C5E9848790D88DFE0854AC074FBC498D23620BE8F0E45D4D644A1E9E92C579AAB9A4078BA53FF3A327DA0965C0FFEF41D903E5D41157EDBA18EB0D094DAB550C
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-sign-in.min-vfliaget4.js
Preview:	define("metaserver/static/js/sign_in/utils",["require","exports","tslib","metaserver/static/js/core/browser","metaserver/static/js/core/uri"],(function(e,t,n,r,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getSignInAndContinueUrl=void 0,r=n.__importStar(r),t.getSignInAndContinueUrl=function(e={}){const t=Object.assign(Object.assign({},e.additionalQuery),{cont:e.cont?e.cont:r.get_href()});return e.register_cont&&(t.register_cont=e.register_cont),e.signupTag&&(t.signup_tag=e.signupTag),new i.URI({path:"/login",query:t}).toString()}}));.//# sourceMappingURL=pkg-sign-in.min.js-vflzTKQoo.map

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30690)
Category:	downloaded
Size (bytes):	30745
Entropy (8bit):	5.216307937746292
Encrypted:	false
SSDEEP:	768:UpQfskEq3LqhHsmTeDV2h/zk2zirYOASDce/:UOg7vYwC
MD5:	1BDAF7559222D2169DB1600E32E9BEAC
SHA1:	D897BE265F0B55DB65604E822AFF5B2508A80957
SHA-256:	D170F78CA49BF2EF248FAC921D3234CB238EAF86D04A1A3E6B405263C3B54D7A
SHA-512:	48D4AF5CACD274EFFC8F87260F84A16854E869FE71CDA80185DBF6150F9BDF95FE95B38C5407AE996FE4D95E33D81E9D06DD410BD971E54E144EAD852206FE93
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-base.min-vflG9r3VZ.js
Preview:	define("spectrum/checkbox/index",["require","exports","tslib","spectrum/checkbox/checkbox"],(function(e,t,r,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),r.__exportStar(o,t)})),define("spectrum/checkbox/checkbox",["require","exports","tslib","classnames","spectrum/util/debounce","react"],(function(e,t,r,o,n,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Checkbox=void 0,o=r.__importDefault(o),i=r.__importStar(i);class s extends i.PureComponent{constructor(e){super(e),this.triggerChange=(e,t,r)=>{!this.props.disabled&&this.props.onChange&&this.props.onChange(e,t,r)},this.handleChange=e=>{let t=e.currentTarget.checked?"checked":"unchecked";"mixed"===this.props.checked&&(t="unchecked"),this.debouncedTriggerChange(t,{shiftKey:!1},{target:e.currentTarget})},this.handleClick=e=>{let t="unchecked";"unchecked"===this.props.checked&&(t="checked"),this.input&&(this.input.focus(),this.debouncedTriggerChange(t,{shiftKey:e.shiftKey},{target:this.input}))},this.

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.267977229685579
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1DXX3jK/0FD3ag6n:MMHdVBKW/UT1HTKUbr6
MD5:	FAA65A354C3078519E0D25CAE050C342
SHA1:	664F94755C32D6596EC2C563D30A4E452FFB7D11
SHA-256:	CF65137C5D57B8934A6D0B6E3B8B9C826499B7E9A4C249ABD83DDABE4E1DC8DA
SHA-512:	2867A02D03A419062699D0FEDAC497A74002648983A07DA0FFDD5DE4BF1839AAA289F8ECDBF9409708D2F85A4E2C93C9E61CDA863410EA53E4EDE906445DF208
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/webcontrols.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:9425b667-601e-0075-28d0-cba1ed000000.Time:2023-08-10T21:19:43.4315784Z</Message></Error>

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15820), with no line terminators
Category:	downloaded
Size (bytes):	15820
Entropy (8bit):	5.036084866767802
Encrypted:	false
SSDEEP:	192:VlxxgkrOOIrUC8ZvLtqiZ30EEAizFM62T1Qfktq/P0DRcjKjRDJgVXH4/HU:Vlx3lIcVaXP1jKjRDJgx3
MD5:	89BF4B5A3206F43733057C233C5DB63F
SHA1:	2738781309E08596B763CDD12C6B67B6EE75B907
SHA-256:	408DE09E503D66A837CFB11DFC24CB96FACC4958436520AA78A845CDE5EE9ACF
SHA-512:	DA4193F705AB074D37A4BD3C82833BF49670ED5CD277F49815566FB612EF37B09215441CF39FB04D9F211B553EC2AA6E594B88B4DCB48866280FD0C392DD677A
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/css/masterstyles15mvc.css
Preview:	.pl-shell-footer-hide{display:none}.pl-padding-hide{display:none}.mvc-validator>.field-validation-error{border:1px solid red}.adminScoped input[type=submit]{min-width:100px;display:inline-block;margin-right:10px;margin-left:0;margin-top:5px;text-transform:lowercase;vertical-align:baseline;border:1px solid;color:#fff;text-align:center;line-height:normal;font-size:13px;padding:0 0 0 0}.mpl-layout{margin-left:50px;margin-right:50px;line-height:normal}.mpl-layout.gemini{font-family:"SegoeUI-Light-final","Segoe UI Light","Segoe UI",Segoe,Tahoma,Helvetica,Arial,Sans-Serif;-webkit-font-smoothing:antialiased;font-size:16px;line-height:20px}.mpl-layout.gemini *{box-sizing:border-box}.mpl-layout-table{width:100%}.mpl-banner-box.gemini{position:absolute;top:0;padding-top:17px;padding-bottom:17px;padding-left:30px;padding-right:42px}.mpl-banner-box-text.gemini{font-size:36px;line-height:36px}.mpl-banner-box-hidden{display:none}.mpl-header-td{min-width:300px}.mpl-header-td{vertical-align:middle}.mp

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	690285
Entropy (8bit):	5.295047538901373
Encrypted:	false
SSDEEP:	12288:7KWN2Id+Jue9v8E8m8t8E8E8M8m8U08Ehv481usi:7KWN2IoJue9v8E8m8t8E8E8M8m8U08E8
MD5:	39D8D889CF22F2DD0746D950F8BD26DF
SHA1:	FECDE1AF1C793119948973D2F93E14BFB7E158E3
SHA-256:	2EE7E7C028A86026075E9D08162CD4C2F566F9B5599307C43F8F09EDA2430045
SHA-512:	2191DB3C75D74A8F23892753C6597338435CE5D6B9EB4FEAE22E0E6069B0D9F749F3D477873DEF56CDBCAF6054B6EF1D564C103E4C79586B9A93576C0E0C68DD
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/jsc/adminapp.js
Preview:	Array.prototype.find\|\|Object.defineProperty(Array.prototype,'find',{value:function(n){var i,u,f,t,r;if(this==null)throw new TypeError('"this" is null or not defined');if(i=Object(this),u=i.length>>>0,typeof n!='function')throw new TypeError('predicate must be a function');for(f=arguments[1],t=0;t<u;){if(r=i[t],n.call(f,r,t,i))return r;t++}return undefined},configurable:!0,writable:!0}),Object.entries\|\|(Object.entries=function(n){for(var i=Object.keys(n),t=i.length,r=new Array(t);t--;)r[t]=[i[t],n[i[t]]];return r}),typeof Object.assign!='function'&&Object.defineProperty(Object,"assign",{value:function(n){'use strict';;var f,r,i,u;if(n==null)throw new TypeError('Cannot convert undefined or null to object');for(f=Object(n),r=1;r<arguments.length;r++)if(i=arguments[r],i!=null)for(u in i)Object.prototype.hasOwnProperty.call(i,u)&&(f[u]=i[u]);return f},writable:!0,configurable:!0}),String.prototype.startsWith\|\|(String.prototype.startsWith=function(n,t){return this.substr(!t\|\|t<0?0:+t,n.lengt

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 68806
Category:	downloaded
Size (bytes):	22001
Entropy (8bit):	7.990440557101642
Encrypted:	true
SSDEEP:	384:mfMSFSBy5y9cvOpBR63rnR6eQ3gNYpjeFeQZG76PclZ1qRAw/JThUvEDCYtFeSZx:m1SBycoGmMeyBpjedd0lZdwhS8DCYtFX
MD5:	039F0F3FDCD37730668F08158CB3DC24
SHA1:	86D53243AE6260E1AF11FA89A2568E91587E0AF3
SHA-256:	553C8F5A18EFF1DF9DE80E361A0B707C9EB1B9A0B2DB034BED6031F6FC68BB03
SHA-512:	84D55C4BC252F9E5BF6595C5E5970F92263E77ED4DB0F4280FAC48AD262158835D778AB81B49CFF9143F14D2D9B6C1A7C099625264FA61A5586A80FAE52A08AC
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/a21c5224998b633286f4.rQRcp3jmk733KBe7uAe0ZL46KWMlMUvqfxvueAS1xRA.js.gz
Preview:	............z.8.(._OA...1-....G..W..e9.....G....EjH...~.........@..9Iw.:3.uL..B.P(T.R.?z..>6F....i..b@.......W?.G#..//w.Fc..g..;}a/X4....o.{.N&...=.....9c@.".c..>.?.?\.#7tb....l........5'.}..\|.....2p./...L..x....9I.e./`...0$O...G#._...g...`.K..h....i...[....=..W..6...:.i.6....N..0...5...=.8..6.s.p.s.........n...sn=.^...+{...2I.@7ks......m/..4n#..\|.....\b.....E....{....^..2.0..oA.A.1.x.X...-.yqc.......m8...6.....u.{..8...D[...[..L..,}..2'...U.........*tY.K.....+s./...#...l....s>+.n<.......Kf.vb.^.Xl.3R.Z.(..a@.r...1?f.,Pf..r..!._,....-.t..>[l...7.>o%...t.N.n.....3...F<...{.`.y.k2..{ .A....u....5.$\`Sm...ZI.......U/....7.r....2\.l....R...x.E....^l..W`.B5..z........{q..@..'.saG. r.Z.ne..1..k.s/Q.c....M}f....r...T.W.Z.)........$.V.%..`...[..d$E......)?chG..D!j..t...Nw..E-.o...k!.hn..,o.0z.0.#3B.SU..b.6.v......7e.x.&..+LS.$....D..fxo%w.}.e>K...+...Ys..f..mB........`....P..EBo.P.@.C.v..[.c..{K....i.., .o.B..$!F.Y.X..%.H..fM...=....\..=a....Q...6!.

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12031)
Category:	downloaded
Size (bytes):	12086
Entropy (8bit):	5.295320505730473
Encrypted:	false
SSDEEP:	192:b/xbzQqmLwBQTQUdkbzBvh14ESdiqPSeDTrZHObzgzhqSSYn4Imp/XmNa:b/BOLwSQUoxvaiqPSETr148zMlYnr8Xx
MD5:	EF84719785445B90D8CB40C4FFABD205
SHA1:	5C1B3049555B94B3058F8473C700E5CC57CDC3A5
SHA-256:	6D9A19AC440F3E0CFDF382A306515BBC7F34BC61CD31123B0C8844A6256B8D20
SHA-512:	66AE961E09D1E5B259AD078D40FB45DB564E0362C31D994FA0A45280CFC6D075537C8E0C82E5F6315EBF8CFC7709C1CB64958A1294037BB0B0B0440EC9C709EB
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-common-7.min-vfl74Rxl4.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/chips",["exports","../../common/index","react","../../common/index.esm2","focus-visible","../../common/pictogram_icon","../../common/chevron-down","../../common/close","../../common/_commonjsHelpers","../../common/index.esm3","../../react-transition-group/CSSTransition","../../common/extends","../../common/Transition","react-dom","../../common/index.esm4"],(function(e,t,o,n,i,r,a,s,c,l,d,u,m,p,f){"use strict";var g=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(o){if("default"!==o){var n=Object.getOwnPropertyDescriptor(e,o);Object.defineProperty(t,o,n.get?n:{enumerable:!0,get:function(){return e[o]}})}})),t.default=e,Object.freeze(t)})(o),h=[["medium","standard"]],v=e=>{const t=h.find(([t,o])=>e===t);return void 0!==t?t[1]:e},b=e=>{const t=h.find(([t,o])=>e===o);return void 0!==t?t[0]:e},C=g.forwardRef(({children:e,className:o,size:i="medium",withIcon

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10488)
Category:	downloaded
Size (bytes):	10547
Entropy (8bit):	5.2044635995485
Encrypted:	false
SSDEEP:	192:bFZxLAXKErn27JGbjMiTNWLNaCFsQkHpskRQFkBN770M2HUHqDrmA:bFz0XKU2d2jMiTNWrFsQsipYx70M2tr
MD5:	E4AA671B4CDF0ABA1F74604AA505EB92
SHA1:	E853F80BEF4D0AB8844571E80F2804199CCF95C8
SHA-256:	AFEAF316987F213B0FB59314855DF64A3DFD5504A17E54CB1D4252B18BF90BCD
SHA-512:	17ABB986754A935904834E452CEAC097E44FEBF2BC3B5D5762B261E05AEECD1559F14FA51F2FB0829EA524139F002CE6A41E66AE8CE1B8E21D8EBE4FACC9D8B4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-controls.min-vfl5KpnG0.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/controls",["exports","../../common/index","react","focus-visible","../../common/index.esm8","../../common/_commonjsHelpers"],(function(e,t,n,a,r,s){"use strict";e.Checkbox=r.Checkbox,e.RadioButton=r.RadioButton,e.SegmentedControl=r.SegmentedControl,e.Toggle=r.Toggle})),define("metaserver/static/prod_assets_web_modules/common/index.esm7",["exports","react","./index","../@dropbox/dig-components/menu","./pictogram_icon","./chevron-down","./clock","../@dropbox/dig-components/hooks"],(function(e,t,n,a,r,s,i,l){"use strict";var c=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(n){if("default"!==n){var a=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(t,n,a.get?a:{enumerable:!0,get:function(){return e[n]}})}})),t.default=e,Object.freeze(t)})(t),o=c.createContext({isNative:!1,selectedItem:{value:"",label:"",activeID:"",accessory:null},setActiveValue

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (447)
Category:	downloaded
Size (bytes):	511
Entropy (8bit):	4.893974168781742
Encrypted:	false
SSDEEP:	12:1bm6TtDKuTtDK/6+RZX52N2cF9V/DRbGMhF8:1bmCtDtKRZp2N2cF9V/Nbbk
MD5:	BD4CC84F5B4B9381AE75D717F51F54DC
SHA1:	CC5C003BC2731E49128DD1676241013343529116
SHA-256:	EFD70C927426409576268A0B3C6C5268619ECC2B97FBCD323F8104E331A3CDCB
SHA-512:	9A8737C990C07ED4C97ADB989DD1840AF46A1106B332A9D0458F15C1531D3D5B9AC748A61A57257A8DDD0655B5343F7CA068A8897EF4DAAC77B98DB65256E06F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/ux_analytics/element_observers/interaction_observers.min-vflvUzIT1.js
Preview:	define(["require","exports","metaserver/static/js/ux_analytics/element_observers/mutation_observer","metaserver/static/js/ux_analytics/element_observers/intersection_observer"],(function(e,t,r,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.setUpElementShown=void 0,t.setUpElementShown=function(){const e=(0,r.createMutationObserverManager)(),t=(0,s.createIntersectionObserverManager)();e.registerElementMutationListener(t)}}));.//# sourceMappingURL=interaction_observers.min.js-vflckiRCN.map

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1312)
Category:	downloaded
Size (bytes):	1368
Entropy (8bit):	5.162663476219639
Encrypted:	false
SSDEEP:	24:1bmqDKPcFC6QMV49Ts51iOqepNWAtKRvN7K6QEWRR19h/RLJMnLVjJ47:1aLUHCsT9EoKpzWB/WK
MD5:	9D713D8E754325A6083C11280F9E25DC
SHA1:	B15D602B03041873BDD208E47E5C03CCA8B2539B
SHA-256:	63BD8DC5F3BF84522F65119AAE07FA782E755226C012F2E767F87E3F2C38E444
SHA-512:	3DE049B3B93CC227144D15BEAF5B8734632F8BDE7409484E387B2388247122335E396600DE3214359B772F955A7F8AAAAE876F5EEA1C7005055373BD5117C9BB
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/core/toast/toast_on_init.min-vflnXE9jn.js
Preview:	define(["require","exports","tslib","metaserver/static/js/core/notify","metaserver/static/js/core/html","js/browser/cookies","metaserver/static/js/css/css","metaserver/static/js/security/csrf_hmac","metaserver/static/js/clean/csrf"],(function(e,t,s,o,i,r,n,a,c){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.decodeToastCookie=t.showToastFromCookie=void 0;function u(e,t){return s.__awaiter(this,void 0,void 0,(function(){const s=yield(0,a.readHmacCookieToken)(e,t);if(null==s)return null;if(s.startsWith("er:"))return[!0,s.substring(3)];if(s.startsWith("ok:"))return[!1,s.substring(3)];throw new Error("unrecognized format of message in toast cookie")}))}t.showToastFromCookie=function(){var t;return s.__awaiter(this,void 0,void 0,(function(){const a=r.Cookies.read("toast");if(a){const d=yield u(a,null!==(t=(0,c.readCsrfToken)())&&void 0!==t?t:void 0);if(null!=d){const t=(0,n.require_css)("/static/metaserver/static/css/notify-vfl4oJv2S.css"),[a,c]=d,{default:u}=yield new Pro

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	111335
Entropy (8bit):	5.175245498868799
Encrypted:	false
SSDEEP:	768:VO/aadq0VUIl/iAehpASwB9U8RQw0+ALGjXhSnIsZhhZdYydF+uMVVJDC7Y4GWKl:VkVDrypDejS6SeK6W6W9gDt
MD5:	51C521A6F012D416039B9AFB031DADD8
SHA1:	9464AB80374CC60ABD11EB15817DEEDAEE263E9D
SHA-256:	4E08A7150C20D14343C3AC332BA0B20FD71D29B7DA9CABBBA4D95D5F9FF4D4B9
SHA-512:	658E1ADDC0E9AB26FD108ECFFFC66AD7D0E5190BE5A352538D11219FBADCFE19D3C76368794B44FD7119B90378C3B46F780766A074664BF3CA1AA1E0A9F0FCA3
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-sharing-core.min-vflUcUhpv.js
Preview:	define("metaserver/static/js/components/title_bubble",["require","exports","tslib","classnames","react","react-dom","prop-types","jquery","metaserver/static/js/components/ui/css"],(function(e,t,s,i,r,n,a,o,l){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),i=s.__importDefault(i),r=s.__importDefault(r),n=s.__importStar(n),a=s.__importDefault(a),o=s.__importDefault(o);class c extends r.default.Component{constructor(){super(...arguments),this.state={isChildFocused:!1}}componentDidMount(){(0,o.default)(n.findDOMNode(this)).on("focusin.title-bubble",e=>this.setState({isChildFocused:!0})).on("focusout.title-bubble",e=>this.setState({isChildFocused:!1})).on("mouseenter.title-bubble",()=>"function"==typeof this.props.onMouseEnter?this.props.onMouseEnter():void 0)}componentWillUnmount(){(0,o.default)(n.findDOMNode(this)).off("focusin.title-bubble").off("focusout.title-bubble").off("mouseenter.title-bubble")}render(){const e={"c-title-bubble":!0,"is-child-focused":this.state.isChil

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	129350
Entropy (8bit):	5.261182324318669
Encrypted:	false
SSDEEP:	1536:YiMhhynFlCjUN7Vp7ZxfHfJw0e7fVhZwV6wtU+jlvW3bpaWxJS5K6A5S2:YiMhhynpp7xwbcRBOrLSWI2
MD5:	A97E3D0C20E9CED1A06B873A1E84FAB8
SHA1:	EA23C901FDC6330B7AC02ACE9C7283D303FF1F5A
SHA-256:	21CFB3E869798AF28F36870E4E5E1B906460722A82C052C0EB842012EA1D34C9
SHA-512:	1F003FC840C56D710904F60AB4583067F4A78BD5360F1CEB0AFD36E4DE0FB02801AD2195CDB2CF917E03F9D70AC64C50B2535C5D99A4678A07DC25DB1BCE0E04
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-react.min-vflqX49DC.js
Preview:	"use strict";(function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t(require("react")):"function"==typeof define&&define.amd?define("metaserver/static/prod_assets_web_modules/react-dom",["react"],t):e.ReactDOM=t(e.React)})(this,(function(e){function t(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}function n(){if(nl)for(var e in rl){var n=rl[e],l=nl.indexOf(e);if(!(-1<l))throw Error(t(96,e));if(!ll[l]){if(!n.extractEvents)throw Error(t(97,e));for(var i in ll[l]=n,l=n.eventTypes){var a=void 0,o=l[i],u=n,c=i;if(il.hasOwnProperty(c))throw Error(t(99,c));il[c]=o;var s=o.phasedRegistrationNames;if(s){for(a in s)s.hasOwnProperty(a)&&r(s[a],u,c);a=!0}else o.registrationName?(r(o.registrationName,u,c),a=!0):a=!1

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 86404, version 1.0
Category:	downloaded
Size (bytes):	86404
Entropy (8bit):	7.997550567294311
Encrypted:	true
SSDEEP:	1536:U3aZ6VW9x6OoobSWd6pDFWSV454Po+5+FD7cOkzUPFMKsu:H6VW/2hVFRV4Avo0OPNMKsu
MD5:	6FF72A8066505BF68A02551C27EF4E49
SHA1:	5F7BEEC0EE4C210DB8E9339A8B98745B3F223AC6
SHA-256:	C9B2E1944C0C69D696B74B0E42396F0ABFACEB74FFBF21E5276ECA6F1484E95B
SHA-512:	B5A8F48E4219717BBA707F7EEE054E6182082F73960F217840C93312885B57C55AF25C250CA42DF9FE6130AA25A2A4583D97F61A1E4D0AEDBBB667BD0BD2BC1C
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-MediumItalic-190618-Web.woff2
Preview:	wOF2......Q...........Q"...........................x..d.`....<..s.....D.....4..6.$..d. ........Z[.x...2...$...j.S..+..k........&.u..c.C..?C.........c...v..........."rsw..v..S.J......F1....$.<.kZ1..n./.]65.....WJ..4....T.n.F..GDC......9H.....Z..l)...~Pf.h.!r.Dhx..C..-...\.<.$b..rWT>le.vI.J...3..q.==.T...RJ .8+.....\|.^.j~..W)..B2......Vr..YSE...b...HB...?..r-...R..w.$]I..~t.+..g&.Ig.Qq.Rj.[.T...}..djkB?.I..f....1.d..h.rd_..]7_xJH.^.}........ ..,l..`x...l.YY.mU.=.8.......$I...\|....2m.g~wL}....u........H.#..._.I.T...P.&3.bxcWY.. _.8...<.._...r..f)..SY.,...9uR....B.BDa}L..z.8cV..n...[.....~{Xn...\]..mS..T....7.....n..,..w.TE$H.'.@&}.w8<..ED.f\|..y(.........d*Lg.....(.UUu...n....8v..v....=..q.....:., ..........'....a.....+.~.,..D0.j1.F.&C.0.+/T4.;s.=. .._.Z.......96.Z.[.(.fl.`..1F.............W.z..........fL...i.=.....1.@0jbb....0.3.."...o......~g.....?.%5.``.Q...i..E.`.a<...h...OI..@.&..?....~.....q.`..g..FFZFZFZZZZJJJJJ".H$..D".....y...{.ut:...D.

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 279795
Category:	downloaded
Size (bytes):	62991
Entropy (8bit):	7.994813043963216
Encrypted:	true
SSDEEP:	1536:cTWhHg8hX/XdaXOVIbt2yrKIUXfYjVevFXR:cGAM0eVIbH7ZjVevFXR
MD5:	348553722263BA16701F45C9F1D90F60
SHA1:	687DB1C2AF81EF7D7532BEBBB1989CE5ECA32460
SHA-256:	49C3C63471EA58728C43F37C6F04978D39D111D5B7E14AF6A6A0158373670AFD
SHA-512:	BEFB920E5CEE277FFD8898CE50C4622207933E3F98F1FA69DF0C6A0E59C7D60AC1D9179601AC3B836B364F22E90BCE99F474830CDF2D079A3BFCBB2D7DE96ABB
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/c364c30a7132105003e0.8XJOW7LRMgP1ARGwZw08JDY68ADKiGvFWrlYEzy29bw.js.gz
Preview:	...........iw.H...].....+.&P...Y>^....r.._....E.A....,...7.....Aj...QwYL..FF.......0;5....z.....8\|\|...o/.....i.._?\|....b...Cg.....%......0M.. .V.a6X....(]%.A.}./'..h.,>-.y..4;.PUa2.B..;.{.{.k..V..r......w._......0.Mf..<.*.g..^..(Y...4....1.\|p....[.'..u<\|0.>.R......4.....xJ..xp&.]d\|./.'Y~8..g.e".?...y.....r..x.x6\|...g.d..u<<..n.....e.e2[....l......ar...W.e6./...d=...Q.cR..\.'.x..U=X....wY.....vj.d.w..I.....'....O.lJ.bty..I...w...x.h.SW.8.....:.0.N...e.O..\|5..P3...\........u{....^J?...M.......F..._.....E.7B.no..&e_!.R.9>.T..A.w.g.r.......P.Sd..?.CDY......G...45{...'.....L...?!.C...>.~%....,.k.. N...$.=......n.1.Q...@..w.n..~.....A.9...o.O......^..u..X..f..I<.F.....{.h...~.....#.`_$...c..?..IL8.... J.3yp>..tN...X....H.J...A.....Fe..L..:.=Q...>.j.....o..3.....E.....8......yqo.6.f..).......l.<;...d.D..Kv._.v.?x....g.^v.}.<...8......zE...{y.\.3-.{7Qr.V.~...ou...=.....^.....M._.....D.I.....Y<..N....Kr>!.?4...47.W..2.R..f#d.......zTHeB.s.._.\

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38455)
Category:	downloaded
Size (bytes):	38511
Entropy (8bit):	5.304551746080718
Encrypted:	false
SSDEEP:	768:tF8MORaxc2O5OvO8OaOWO7OZOPOAODOpOpOv2pTkpZ8KmObeUYHvm2v36/vLVP8f:tFmwG1b/qQmBiAAxbxz3f8b
MD5:	A4D1A208D3A0F00555E93665E1DE053D
SHA1:	DEDCACB8D8604FB9BBCDCA9DCC56FBD79E3C3923
SHA-256:	120AFE71A03E5F15CF3B64AEA123BA540017CC215F66985DBA71799988EFBC40
SHA-512:	B83C2820356788A36A1A7807C6C5656ACE9FC768A17A0D2696BDD3F0EB86A772C496B5A2BBF12EBC06ECF5F40FBCE533156F5D4C07AFCD1EB535FE4C16E004F9
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-uuid.min-vflpNGiCN.js
Preview:	define("metaserver/static/js/edison/ui/spa_product_name",["require","exports","@dropbox/ttvc","metaserver/static/js/core/exception"],(function(e,t,n,i){"use strict";let r;Object.defineProperty(t,"__esModule",{value:!0}),t.setSpaProductName=t.getSpaProductName=t.startNavigation=void 0;t.startNavigation=function(){r=void 0,(0,n.start)()};t.getSpaProductName=()=>r;t.setSpaProductName=e=>{void 0!==r?(0,i.reportStack)(`setSpaProductName: SPA_PRODUCT_NAME already set! Tried to set product to "${e}", but was already set to "${r}"`,{severity:i.SEVERITY.NONCRITICAL,tags:["user_centric_perf"]}):r=e}})),define("metaserver/static/js/pap/analytics_client",["require","exports","tslib","metaserver/static/js/clean/viewer","metaserver/static/js/clean/active_user","metaserver/static/js/modules/constants/auth","metaserver/static/js/api_v2/noauth_client","metaserver/static/js/api_v2/transport/beacon","js/pap-client/index","js/pap-events/experimentation/exposure_stormcrow"],(function(e,t,n,i,r,s,o,a,c,p){"

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5933
Category:	downloaded
Size (bytes):	1838
Entropy (8bit):	7.894826921495498
Encrypted:	false
SSDEEP:	48:XTEaDiik7p0Kll2S/MNiCS38YTGvpdDzPILRa8dcPbNq:Bizp0qAS6+9YXDzQ9a8dco
MD5:	7E41BD7B5A609DB26FFB8A072800D138
SHA1:	C460CF0E480C551D61FDC92A5AC692D1682102AD
SHA-256:	8250C422642C1E8192AB0B944C8856ECA6863CCBE9A9BF629050B4BFFB6B7992
SHA-512:	475087F2EE50CDD0A66D1A765EFB4EB3005E130B1973DFD4528A8FCFAD88B93F082E473B706A8B8247CB8658CF680D2D8BE1BDD1F208333C5874F308545228B9
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_native_desktop~paper_pifs~paper_view_only.fe9af606aefd018129cf886d5e3f19606dbbddff.KpDs5k5SZCk7D2mDdczRh5YHqhnZ3SjEXRfr_OfKMJg.css.gz
Preview:	...........XY..6.~.p.....V.o.-.....A...@K..,M.$.......C.ay.....bif8.7..u.g.,^q..aX....P.T..-..;.%...:%....e...9&.\E..8....".Eh#9-.^..._+^.._=.R\|..........?I.......n+x.R/.....<..8.....4....z.MD...30.....~q...L\/K.8..U.uO.;.k..0.:..Oz.XQ.ZmUm.H..r..(!..y.x.9......8..%I...88.....y.E\. ...3.O.g.P.....a..(...&N0.....V.=....{.QJ..y.x..W...=.\|.=Y....l..lS.).C....q..p\|.!.z..vXJ..-...d...u...2.#...P...WX..H.'. ....+..p8g.J.pRu.a..u:...!...<r...^......D..3...,>..-.^..O.wV}.."..L@...t].U6.D..Ry<...C....._...P..A...q~2m`.....D...pN....6.'w=D.{[bkLG.l..ccQ.$SV..@...PV.b[....E.jhDN.. .MR..'..JF.>.I.b...y.2....I.SJ.I.`.%...V..6.w@...m....H[...5%p..`.;.+....K.@..Y=..s.n..W......+.T.id3 Lr..r.N.]...E.Rh.a.w...S.....mK.L...A.._0J...L&=.P.g...88x.M..fR.....n...&..7......qc....1..3...........x`...<.....~..4.....J..E).f...7*...YTo.S;.w.lW.ZnV.%...D&k..@.S".t....+.........Q0.F..N.??..6......BC......._?.U........m/C@.....X....}......[..^C..v..f......ye7.h+

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41478), with NEL line terminators
Category:	downloaded
Size (bytes):	87467
Entropy (8bit):	5.340257233567569
Encrypted:	false
SSDEEP:	1536:AM04QbGvT3vmk2r1nuEkK9h/5mv643Zgtw7yUh5WNgu0VoWq:HsbGvT3vY1nuKR
MD5:	6DAC7CEC2F8EB2CC4F14A0B435000637
SHA1:	77F1BEDDB86009DC6E039BC75D9E4C9DAA14264F
SHA-256:	4322E0AD921CA5A46FE06023B52BC159B50C5570FC4F7F74BA417CF497F4C021
SHA-512:	95FD4DCEA6450BD29DA24C4B9C3F96EDB02C22F9BE7DFE6C2C9D9BC2D164402FA34C7E1D69ECBAEB2656D6EB283D8D225B2E2ABA585BD7B11B1E6F76DB6887D8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-i18n.min-vflbax87C.js
Preview:	define("metaserver/static/js/datetime/datetime",["require","exports","tslib","metaserver/static/js/modules/constants/time","metaserver/static/js/core/assert","metaserver/static/js/core/i18n","typescript/libraries/dbx-i18n/src/index"],(function(e,t,r,n,a,o,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getMonths=t.daysAfterToday=t.increment_date=t.applyTimezoneOffset=t.agoFromDate=t.ago=t.getTimeBands=t.format_time_ago=t.format_time_remaining=t.format_time=t.format_date_timezone_offset=t.get_utc_offset_date=t.format_date_utc=t.format_date=t.localized_time_format=t.localized_datetime_format=t.localized_date_format=void 0,n=r.__importStar(n),t.localized_date_format=n.DATE_FORMAT,t.localized_datetime_format=n.DATETIME_FORMAT,t.localized_time_format=n.TIME_FORMAT;function s(e,t){const r=[o.intl.formatMessage({id:"EBx+nl",defaultMessage:"am"}),o.intl.formatMessage({id:"5qHjxe",defaultMessage:"pm"})];return t.replace(/'[^']*'\|y+\|M+\|d+\|h+\|k+\|K+\|H+\|m+\|s+\|S+\|a+/g,(function(t)

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2478)
Category:	downloaded
Size (bytes):	2547
Entropy (8bit):	5.132118727832554
Encrypted:	false
SSDEEP:	48:1aiIVxjn6XMOC5kg9+0GDe12T98FaCXLm93AtWq9VaPZ8r2sZorV:r8Oc9KgI0GlmgCXLm1A9LJ+V
MD5:	461D0AA9FD8C5D015AFEA3908B04BD77
SHA1:	42C6919C0CE11DE15D55C496BAED101E20DE5B2B
SHA-256:	3C70847B1494CA71FE5F08FD8C7030C76AF9660B70337F014276703EA3ACBBB4
SHA-512:	A3763C807007E7D71EE46D5ACB29A9073D1CFEAFE110CFC8258BBC17098C9086EEEB83D2765EF87085FB5918F1A21A52FC9F2FF238FA0DDB5E2137B87118DFBD
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/cloud_docs/shared_components/cloud_doc_signin_component.min-vflRh0Kqf.js
Preview:	define(["require","exports","tslib","react","react-dom","metaserver/static/js/core/browser","metaserver/static/js/core/i18n","metaserver/static/js/clean/ui/snackbar","metaserver/static/js/components/ui/css","metaserver/static/js/sign_in/button","metaserver/static/js/cloud_docs/event_logging","metaserver/static/js/cloud_docs/types","metaserver/static/js/cloud_docs/constants","metaserver/static/js/cloud_docs/shared_components/routing"],(function(e,t,n,o,s,i,a,r,c,l,d,u,m,g){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.showCloudDocSignInComponent=t.signInHandler=t.CloudDocSigninComponent=void 0,o=n.__importDefault(o),s=n.__importDefault(s),i=n.__importStar(i);const p=e=>{const{onSigninClicked:t,title:n,cont_url:s}=e;return o.default.useEffect(()=>{(0,d.logLoggedOutUXSnackBarAction)(u.PromptActionTypes.Impression,e.fileExtension,e.loggedOutUXPaperVariant)}),o.default.createElement("div",{className:"cloud-doc-signin-title-bar"},o.default.createElement("span",{className:"c

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	7.471761176000909
Encrypted:	false
SSDEEP:	12:6v/7iby0CDdAfPcBsKDs0TkF4yEiwWh9j3xYC8tqYAME1:py0KahKDtTkFjGWh9CCiqYAMG
MD5:	EC2E6E18A914B2BAE990F7CC9F8CD4DD
SHA1:	33E2B67E19BB8C21E4C36902316E0B00F7FA6017
SHA-256:	C0BCE318A2ABA982ED09E4C18146D93CB202B71AF00FC0764FF794742D83853C
SHA-512:	5727FFEDC630901DB996A97AE7964793E780B3663D37AB5ED0FAD7FEBC9EFF5F198C55D98E21F6DDA8AA934E6883CCE1E6DC4868C5E31057852C75C6B6E2800B
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/favicon/favicon-32.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx..GCQ...2Z.BP...JH...Z(.B.-@IK.B...& ....@...d..A..%v:.c0.k.}....w...{..C9.4a....F.\6.d...K..(...K3l........0...o.I@M.=.v=..B.'.^.8.!..f~!..z]..V..l..CD...4.i...&.5.....1...\|Gq...^..`......3.......x.....Q...Q....8......E$.u3..~j.A-z...n.qG...\9......C(..j.#.o..C.z.w],...-.t..v..^.F.....S.z.....7...ly.":..4...]}...e4......../.... ..../........P..3.."9.H:...te...b..)x...lt3.7.XA...byo.w..2F.....W....}...:..)..TQ5.....IEND.B`.

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	117891
Entropy (8bit):	4.35190250889669
Encrypted:	false
SSDEEP:	3072:bcfg/X1uM9xnUKVIJ1sg9MHNKz52cDL53JdN2:wfg/X1uM9xnUKVIJ1sg9MHNKz52cDL54
MD5:	81A542D14C4D071066B66BDE466443CA
SHA1:	CCA1F346B513F68EEED21188F03E1BFAA17FB89C
SHA-256:	E4B4809716351627A31505039F271B5208DA09182D83A46A5869DECEFFE4ACB9
SHA-512:	394EE14C30E757F789FB893CA5CF17B17694D0A1041D0E18E9652D0D58C3768A17D5276586A4C5F13AD88C62A7D53D3E98C6E9C6933AC9E33C66FDDACE620CBE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-common-3.min-vflgaVC0U.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/index3",["exports","./index","react"],(function(C,e,l){"use strict";var V=(function(C){if(C&&C.__esModule)return C;var e=Object.create(null);return C&&Object.keys(C).forEach((function(l){if("default"!==l){var V=Object.getOwnPropertyDescriptor(C,l);Object.defineProperty(e,l,V.get?V:{enumerable:!0,get:function(){return C[l]}})}})),e.default=C,Object.freeze(e)})(l);const r=({className:C,size:l,src:r,...a})=>{const H=e.classNames114("dig-GlyphLogo",C);return V.createElement(r,{className:H,width:l,height:l,focusable:"false",...a})};r.displayName="GlyphLogo";const a=({className:C,size:l,src:r,...a})=>{const H=e.classNames114("dig-WordmarkLogo",C);return V.createElement(r,{className:H,height:l,focusable:"false",...a})};a.displayName="WordmarkLogo";const H=C=>V.createElement("svg",{viewBox:"0 0 64 64",fill:"none",...C},V.createElement("path",{d:"M37.4709 26.6373C37.4709 28.7119 37.1001 30.5043 36.3821 32.0088C34.7517 28.5943 31.338 26.73

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	660449
Entropy (8bit):	5.4121922690110535
Encrypted:	false
SSDEEP:	12288:3PUKyvwjOOvwZ1ARuxntuicBh8hS11dsUA:yvjZ+/pIUA
MD5:	D9E3D2CE0228D2A5079478AAE5759698
SHA1:	412F45951C6AEDA5F3DF2C52533171FC7BDD5961
SHA-256:	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
SHA-512:	06700C65BEF4002EBFBFF9D856C12E8D71F408BACA2D2103DDE1C28319B6BD3859FA9D289D8AEB6DD484E802040F6EE537F31F97B4B60A6B120A6882C992207A
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6699.8/scripts/boot.worldwide.3.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.3.mouse.js'] = (new Date()).getTime();..;_n.a.jR=function(n){return n.dS()};_n.a.jZ=function(n){return n.eh()};_n.a.jP=function(n){return n.cC()};_n.a.jQ=function(n){return n.ca()};_n.a.hZ=function(n){return n.dO};_n.a.jU=function(n){return n.ed()};_n.a.jT=function(n){return n.ea()};_n.a.kb=function(n){return n.ej()};_n.a.hM=function(n){return 300};_n.a.fh=function(n){return n.V};_n.a.jV=function(n){return n.bI()};_n.a.ie=function(n){return n.mh()};_n.a.km=function(n){return n.bl()};_n.a.ka=function(n){return n.ei()};_n.a.ko=function(n){return n.cV()};_n.a.eX=function(n){return _y.E.isInstanceOfType(n)?n.y:null};_n.a.jN=function(n){return n.c()};_n.a.gm=function(n){return n.b()};_n.a.jM=function(n){return n.b()};_n.a.ib=function(n){return n.jM()};_n.a.iq=function(n){return n.bG};_n.a.iX=function(n){return _n.V.isInstanceOfType(n)?n

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	117730
Entropy (8bit):	5.368929556892379
Encrypted:	false
SSDEEP:	1536:ZkGOsxj1AtlfgoRipKpHpwVpmO4JwJQ+V+t+9+Ks54YGVGF1JJXgIJE3qxvYqgi/:Zbxj1AtlzPHe3qxvYvimzXCKijfrZ
MD5:	31C06B87D711C12BC4C1EB010055A885
SHA1:	7F92B02E2FEDACDABE5274D77C52E27F900445EF
SHA-256:	ADA1A4E60B7F70B78E84B6AB7FADC20F8415B32D49C8B41214FF5B30F14F6801
SHA-512:	BE6813E4B85B64FE7293B68A8F424EBABC0EC803990DAE7161B920810460F856CCC0443A4F3C9483FFE81FDC4AE9A97D4314BFB8E4B20E6173D5FEEE6BB3EC8B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-maestro-nav.min-vflMcBrh9.js
Preview:	define("typescript/libraries/dbx-i18n/src/display_format",["require","exports","react-intl"],(function(e,t,n){"use strict";function r(e,n,r=2,a=!0,i=!0,l=!0,u=o.DEFAULT){n=l?parseFloat(n):Math.max(0,parseFloat(n));const c=Math.abs(n);let p,m;const d=s[u];return c<1024?(r=0,p=n,m=e.formatMessage(d.bytes,{count:n}),a=!0):c<1024t.SWITCH_UNIT_THRESHOLD?(p=n/1024,m=e.formatMessage(d.KB)):c<1048576t.SWITCH_UNIT_THRESHOLD?(p=n/1048576,m=e.formatMessage(d.MB)):c<1073741824t.SWITCH_UNIT_THRESHOLD\|\|0===r&&n<1099511627776?(p=n/1073741824,m=e.formatMessage(d.GB)):(p=n/1099511627776,m=e.formatMessage(d.TB)),`${e.formatNumber(p,{maximumFractionDigits:r,minimumFractionDigits:i?0:r})}${a?" ":""}${m}`}var o;Object.defineProperty(t,"__esModule",{value:!0}),t.FormatBytesLocation=t.formatFolderFilesCount=t.formatGigabytes=t.format_bytes=t.SWITCH_UNIT_THRESHOLD=void 0,t.SWITCH_UNIT_THRESHOLD=900,t.format_bytes=r,t.formatGigabytes=function(e,t){return r(e,1073741824(t=parseFloat(t)))},t.formatFolderFile

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 91504
Category:	downloaded
Size (bytes):	27787
Entropy (8bit):	7.991811890869751
Encrypted:	true
SSDEEP:	768:3CrSCfah592aNOL4SnVGNpDiG72kKs3MEKyHfGc5YcAP:3sah5925L4LFiBV5FSYp
MD5:	1F440F98E8C90C270C5CAC0A7E629031
SHA1:	034ADE232E7BFAAFA13B3FB2CB8A4F06ED7BF218
SHA-256:	ACFFE995DF3469303490665A9B881B757CA5229B6E3F54F9429B72E5552A9F4C
SHA-512:	B9EE5479DE338F0B72E935D6A2944BE57FFFD8CA77E47867DD80C01DBB22D04043353CEB5BA4AF5526B0670DAEF809B79AE16309D5FC9481144EF666AEC86D03
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/544eb0bcacbf47681dcb.UBYHq28Ln5Hi8t6eUSEEz2fCkP8WJ0HWYEUftmX8eYE.js.gz
Preview:	...........ko.. .]...I..%;q.),..v.W%v.v..H...%1.H.....{...`>.`z0.....1..t.0.n4....%...._.....(.J.sn..9....^{..c?..........G;{;O_......o..?9;.?..$..Y.....t.9.. ...........>.......g.7.._.P...K..&T.8.?...\|G"..p.....u.y..P.Y.Fs.{N...A....k=...F..Dz+..Fd....,..^F@b.[F...h.....L....;.J...`@...........R......LK....Fd@"R.:.W...J!...z....a..[...B..B...4.,..^.. :.H9.A.xN&1-o.i....l..6......r.. W.._../../7E).(O...<....qQ.Y.G't.2..r....\|..7rNO.t6.&?...Ny-..p.76.i....G.$..c...;...w.$=s.d.g;.9..l.cV6.i.....].v...q.....r....a.......PQ.T^.`.".=-.5Pl..@FK...w....l..6pQ...j...5DuA....#....^.p...i...6.T..1.h.J......>}....=;}.s....h...........x...=..v..8:...Nv_...:.v^.. ............E.x...1..A.@.!>.}.f...9.u.....(B.}.L{.....^w...<8....?;8=.?9.....H....x...@$.MO....h..g.s..v.z..`......Z..C.........o...h{;.v.#.<.\|}.b....J<..O.<E......<:a..9..vNw0+...=. .>.v.....wO......==.A.....<x......+G...........s\|p.%..9..G.!.8......@..y.......>..V.."....@.l. .dx6

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3352
Entropy (8bit):	7.873239198854956
Encrypted:	false
SSDEEP:	96:22xh1Jm3gNpDxda7ajnVfAptPHdsWN4lhYGNGGmb:227aADvJVfwP9xNeCGGL
MD5:	B735B5F2FD640F4E93BBFA17772E4790
SHA1:	D8DAE0623C2A479E077764CEA5D81ACBC16698B8
SHA-256:	A42BF0B91B66F18474C243AEC9BAEC010A86E5D4D99AF841C9E762505B0D0C4B
SHA-512:	24544808FB2A0279FBF151A8CFE53B367241425DF16AD4406C92CFEAC5018A9F6F0CAEC649B50524548DE782B0DE549A5B450D9FBB6D672FBA809CDF5726CF2C
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3ff.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[Yl$.y....{x..x.Z+.*..-A..u ..`..,...8@...C.. @.$.O~0......!.. q`.zH..0..6\|..%.:.$...]r..p...CO..p..3...@.{........!...8{..A.5".C@M.......?/.S;....V..f'.HA?2.).g&.e...xs.BD....n..V..B.V...I...S...I..s..).D>...vA2.;...N..aa....._...Dj...9.........HX.]L..0...^..'...$p,..g'_....C..LZ4Z-.i./X..C.....%.&P...O..].K.~^...x..o..w...:...c....S....}..>.C.03.z..;..'/?....g.ZZE..n...1..X..r...~.....Ji..5<....x^..K.`H.. "\.... H.>+..3..4....b~z2..\.^..k.?.0...m.....oX.p(.B2a......[.x....g.I5?....!.).....mx...b.H!.,..KD..H.t..... $L...9..F.1....q...{......'.@....8..iC.k\...q.>.!o..m.Z...H.,..&._....Q....j....D.$.y.a..C.pq.....h..d..\._.Q...C...@(.... ..(..4.8_x...>.I..."l.6Won}..BH.....\|....!1.g'...<055M.659.\|..%.).....E..5.u.`\|...]` ...f&.......e.......0.).C.&...........s......0E?..i..x.U .3... H..B(S.J=4L...m.n.;..>.C..pX'....w1t.].0.....P.R.".

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://portal.microsoftonline.com/WebResource.axd?d=SYxG2gKEltHc92c7-eKy7vreyN1e2QqrvpdCCR4utt35Rwac9rd_c8SeOHxrYQBj6_mlgMwB-OaZiOiHvHjimRyiyb40s7dxOv3AMLtzClV2W-wogtkMOc2pDBD_sJZyRKzfvgJtVY-JClcKNVaTSg2&t=638137640945220281
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 42218
Category:	downloaded
Size (bytes):	11108
Entropy (8bit):	7.980865401928556
Encrypted:	false
SSDEEP:	192:gS+Ghql4naFahFtUewp1vvyTJ06yaun+tnIZLc4pUOohIOB4TQmg9zX:gwkOvFy9p1/TypIZLXpUOohf4SL
MD5:	92A29031F7E95831D14114E94E6AE377
SHA1:	4D1D05AEABAF3CA679088208B1BC234DF990869B
SHA-256:	2905AD6ACB13D5D4105E8289317385B50B10B0466A1938A47218168784761DDB
SHA-512:	57B84B2963419C210EF604C858230D43085DE4D6EDD5EC946D00863D31AC80D1B0ABEC3C933DE49002B43A59CFB66C566AF6CDBE3B40D9C652E38E781898BA5A
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/9172aa6f8832526ab19b.LOASUGzMoQPJ1DBffC3eNU1eLNzsOhspn7RROHtBrrw.js.gz
Preview:	...........=io.J...+d.`.;.#...N.+...7.'X..@.-.1Ejx....U}..<$.H..7..f...uWu...............N..'...7_.u5.XK[<?....i..[.kS{J...;pC'.n.......I.0h.#...?.....y...B.&...C..H\|...O4....S.[......5..Z... .......K.H........ .....>?.B.i..}:......n....._>...R`...n....nD..nx...6<w.n.....nL.=.t..-....><O....1.?:.1..;...[...%/=.. ?...1L..}.....X.1...[.......G......jlG^pwi...{.B.....6....+.=x.1.a.\....B3...W.xS..I..y..v`...!q\|.D...4..Mh.>.u..Z.o.ab'.z.a..=.....71..^h.....3.H.FA3.'.4..0.MIMsy1.3.,~7...a.......\....Y..S..d..u...u..E.....'.:..\|.@.%...C,. ...]."8.....l..O.V....k....SV..S.Nn".<.;q\|..II4..#{..2,...b....^]\|1c{D.ML....#;.d..0..i.. ......q..}.....#.8.#$u...h.K...j.].a..'..D:z@Rl.t...'%q.M..m......B%\a....>....;....(.:Fc......K;'$..\|....<....zK__.X..g..f/...>....?....4k9.o.1O.".. .s3..:.g......s. .<.n_..1dDl..y...+._.R.#..J...>2.....d.3li........$zQK.O.1.\3.....t....8&./..o.G.xj.....\|.H.#NI.YA.....$./I..?.=.>_o..........?...bg..P..0...FE..yn

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3002), with no line terminators
Category:	downloaded
Size (bytes):	3002
Entropy (8bit):	4.7190485043580335
Encrypted:	false
SSDEEP:	48:smxvfXnxvfN+xvfxxvf17xvWxZdxvfunxvfc+xvfaxvfQ7xvWuZOxvf6xvf9+xvn:p/l1WP/oJ2lEWiMNgCFWfvgSkzWdxOU
MD5:	AB36DF9C284D54357F808AC87F4AB9C2
SHA1:	2261F05D52452A921E0F18AB024EB79FC7900E6B
SHA-256:	FD14188303495CDFCECCA4376D58CBEE2AA0E02D04586D8C1B8B49D163AEDA62
SHA-512:	1CE8722235924A5B7D9599F534CFEC635290CB3B4C1040025FAA0B98295DE54491B5613FAAD1FA3E5F8F8AA7995161D2DDFD588697FB9B7B3A6FB1A790E01EA4
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/css/embeddedfonts.css
Preview:	@font-face{font-family:'SegoeUI-Regular-final';src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.eot') format('embedded-opentype');src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.eot?iefix') format('embedded-opentype'),url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.woff') format('woff'),url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.ttf') format('truetype'),url('https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-regular-final.svg#web') format('svg');font-style:normal;font-weight:normal}@font-face{font-family:'SegoeUI-SemiBold-final';src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semibold-final.eot') format('embedded-opentype');src:url('https://res-h3.public.cdn.office.ne

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 76848, version 2.2490
Category:	downloaded
Size (bytes):	76848
Entropy (8bit):	7.9975204464424285
Encrypted:	true
SSDEEP:	1536:2H6P1MhLunbIBae4NZy0m7ShldxYtdnumnSbFd/jhsRtjIG5SYA/c1JLDY:xa8nbmn4m72Ld2txucafjhktjj5SYJLs
MD5:	7B64AE005DCD81A935C942003BC42592
SHA1:	BCCD94576804EDD18F26BC7661D3F85B6B3EFC73
SHA-256:	8E89E4C4CBC9F5B62D5CC9939383F42998F58FCD22FA2D0F07A15EBCC11BE892
SHA-512:	DA3997372DA50B62FA1227CBD416019D17C40C4C811A85ABAB667DE3CCC7CCF071801B0AEC893128A819077A9AA8B0CD23BAC07A89D86D8CE5E4342BAE61F4A1
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/SourceCodePro-Regular-2038.otf.woff2
Preview:	wOF2OTTO..,0.......l..+..........................F...S..j..\..J.`..f.6.$..B....N. [~....2.....`..ADT=...m..of..:.6^HZ..s..\|{........"............,.6g7d....QD...~m.@. p..T...s...:.3N>...H...P.[.n...Z...!Q2.lK.]..Bn.A..UL...H.!..t..........{.-...........Z{@ff...".H...Z..D..<._T.(..\|%QH..v.g....i..?.'.vl-.$.3v2R...C#..ol.R.Z...9.2b"...-..w.....7q..s.....F.B....K..=...e.S..Z...N..<.W].....N.[..@f.1.V.N..r..D...K..r.P.E....o...DNwKD%.w....g.....@....z'o...,....>G8..Fx...^.ff%?...j........2?P.0.=...^8..L......p'.'.;f......{a/........p."........(..JnaP,...>..<.d..\|VL......\IA.......\L..rj.l.....9...Z...._a.!.adE.K..S.....D......1..5==....R...I.B...]+....u...y...R....a...P........{..U...f.........../.]@..c......<..7L...n..b.u..q.,...E.../9...tS^.L....^.......\.. +vu..S4..c...t..x~...#7."....M..RCR..OU..u.F...3...6<^[...N...Ui..X.9d.B.RH).8&.A.dYDf..'nJ.@..{....{n...M..ga.P.#...:...[..D... *.....3q...\.Y9v..4-W.jek[..ll.......w...c.m._Y.i..". ..""..bn.G

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58947)
Category:	downloaded
Size (bytes):	59000
Entropy (8bit):	5.303921504310528
Encrypted:	false
SSDEEP:	768:P96Et847pxeVrXYmYBEXG/QZHtr8cHIAa9I9oeja25OWxVIobXnQ+53rmSlAPx/a:VSrY9xKIoLny6gMnFFok
MD5:	713AC86FC2DFC189031814871E39A459
SHA1:	2524B38B46C55310D4F81C9F21725E0EEC7A7E67
SHA-256:	D90C15617456F9BB6CAF8BB99A72CE447D6D5BFA9F0E7F88DA84B268E29B7E62
SHA-512:	1193182745158C290F363A4BD5FEDFBD790026B9ECA4ECD82ADBDAF1DFF1F6C1DAB43E0E719EF2D1710E844113B35F1F5595A5BFEBD3B050A6CD700E6B2A5C67
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-timing.min-vflcTrIb8.js
Preview:	define("metaserver/static/js/metrics/index",["require","exports","tslib","typescript/libraries/shared/apex-metrics/src/index","typescript/libraries/shared/apex-metrics/src/sink/index","typescript/libraries/shared/apex-metrics/src/no_op","metaserver/static/js/metrics/unload","metaserver/static/js/metrics/server_view_sink","metaserver/static/js/core/exception","metaserver/static/js/core/browser_detection","metaserver/static/js/uuid/insecure_uuid"],(function(e,t,s,i,r,n,a,o,c,l,p){"use strict";function u(){return new i.BrowserPerformanceClock}function d(){return s.__awaiter(this,void 0,void 0,(function*(){const{NoAuthApiV2Client:t}=yield new Promise((t,s)=>{e(["metaserver/static/js/api_v2/noauth_client"],t,s)}).then(s.__importStar),i=new t;return(0,r.clientBaseAdaptor)(i)}))}function m(){return()=>p.InsecureUUID.v4()}function h(){return{detectBrowser:f,detectOS:_}}function f(){const e=[[!!l.chrome,"chrome"],[!!l.edge,"edge"],[!!l.mozilla,"firefox"],[!!l.msie,"msie"],[!!l.safari,"safari"]]

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 78156, version 1.0
Category:	downloaded
Size (bytes):	78156
Entropy (8bit):	7.997212603610092
Encrypted:	true
SSDEEP:	1536:Jv7ad/dUazCgOy4RPiKgKeBcxQMwtm9SdHf9BqREzL:Jq/Tz5OyOP9gKGc+LcO/9B/X
MD5:	9C03B55DB2514E78544FC6EF3688CB3D
SHA1:	BE95C3384839101A823BF888C08E1B5F228D2C1F
SHA-256:	3820C628FA5191F2A8405E9B1411A48B38AD38D8DAA051E7CA1D7FAEE29793F7
SHA-512:	76E7E5759F13B6C802AE892D3356968D11B976C96572190D95BDAAF20F848150DEFB1AF72C9E112D1A7FD17FCFC23B6BA13D4DA17E180602D2F09217BAA2634F
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Regular-190618-Web.woff2
Preview:	wOF2......1L.......p..0............................^..d.`.......s.....P.....4..6.$..d. ..<.....l[.I..J......Tt..5.9.t..}......D..t..g1....z-..A.m. ............nY<k...t.].r.A.cTr....f.T...E...$.)f.......Z...(..MG%b.]. .b..Pe.9..E..,.>././163.A..X1jTK..z.j.u,.[.M.....7.....7.. ...=..l.8...#>..H-...5U..3UK4e.t..bMS..s.......68q...Gpm..........:..w.(a:....^...A..F\|..2....n.,..k....h.I...<(..t%...1{..[~...n.{..J..Y..W......\|?}.!......7.....s...>.w&.....4..#..Xy.....V...2...1.8RD...W1....T;.D3\.J.N.dn.....~uy..k.}..,=H.r(U2.+L.V....C~.?uS....Rq.Q....3.W..t....2)?.Z.r.U..y....].....5N..A..Y.1s.E^aX.'.b..$(.....d>.,Y.O.Qv..o.b..T2..kG)-.S.....3.i.-2!.y^.l.....43+..f*Y......}A!MTu1.8...s).W\|..._....{...$........v..J.Q.....j)h.Yj.......F..{.....aB..."J.g.?SV%.eF..'....g...=.ff...'.r).&.........D.7...M...9.....f,F."..X..K. ...Y.....Y.n.5...5...<.TsJ.j..YB.g..xL....YfN'z.....%LD14[3z.!hh.\|,nl......z......m.>=s.[X3f.c..3..1)....I!.c...x..R..-u..A.D

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33348)
Category:	downloaded
Size (bytes):	33404
Entropy (8bit):	5.226285705195057
Encrypted:	false
SSDEEP:	768:RfZYuwHcMkgI0nOW7huJh6zNthp7s2IVN7Gh76CVQzySI4qx/B4P:rYu0oeRNv9cCh76CFrx/B4P
MD5:	CB14FFF14534982C3C65A5003D528F13
SHA1:	F72F77624901CD27A1EEE457F37500BAB1FD87BE
SHA-256:	F99F08E114887EB8644DCED900457779F96ACE06DD7A9A5511C47B4F43A98CF9
SHA-512:	A995A2B3B58E4140007AB3DFCE7F3A41DA803F6B55DA8111218F99E7FA64F9C54EEE20A6C86932FCFC77A25A2FECB5E307743DBD2D02EE6A69A9C08CBFBD4477
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-modal.min-vflyxT_8U.js
Preview:	define("metaserver/static/js/clean/ux_analytics_modal_tracking",["require","exports","tslib","react"],(function(e,t,o,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.UXAnalyticsModalTracking=void 0,n=o.__importDefault(n);t.UXAnalyticsModalTracking=function(e){return n.default.createElement("span",{className:"uxa-modal uxa-modal-tracking-span",id:e.id,style:{display:"none"}})}})),define("metaserver/static/js/logging/hive/schemas/web-modal-activity",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.WebModalActivityRow=t.FolderType=t.ModalEventName=t.ModalName=void 0,(function(e){e.MOVE="move",e.COPY="copy",e.NEW_FOLDER="new_folder",e.UPLOAD="upload",e.SEARCH_FILTER="search_filter",e.KEYBOARD_SHORTCUTS="keyboard_shortcuts",e.EXPORT_LEGAL_HOLD="export_legal_hold",e.FOLDER_OVERVIEW_PIN_TO="folder_overview_pin_to",e.CLOUD_DOCS_CREATE="cloud_docs_create",e.DELETED_FILES_FILTER="deleted_files_filter",e.HOME_NEW_FOLDER="home_

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 514
Category:	downloaded
Size (bytes):	344
Entropy (8bit):	7.244883269159184
Encrypted:	false
SSDEEP:	6:Xtr8jFCXlVuwBuyRRKT770scylLK4I8JZvBn66hReWGb66zCifxRQE1wXt6KfCYJ:Xl8ClVFBvRRKTMpyl9Nhh7eWGb66zC8C
MD5:	5E25F7AB365B6BD1BDBF8817B379F25B
SHA1:	D23376F6E6A5C2F4D8A4985775FF20E7C14B4001
SHA-256:	544DED5D76568DD95565631F255748707126C9BD29566FD06A78C7EEDB7F59A2
SHA-512:	DA997F1D71DDE26453A461C9210FB5A1B4B00D26041BB1C12C0B956E449550047C494ED21B5238B349B2CEAC242538A33DE50E90030A2354707228983C1BBDE0
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_admin~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~paper_graphql~paper_influence~887f98f3.fe9af606aefd018129cf886d5e3f19606dbbddff.ARD-Tc17w0zlkOYPGuyNud-Z4Sv7Bt5ccfkX-Fz_qFQ.css.gz
Preview:	..........eP.N.0...+@\`Z.v....nHpA.....F.IH....v+0.S.^l?......h.+.-.{k...........v;ol...@j...!kH....t...?JgZ..7.\|..>..q.1....8.Bvp`-9..1..h.j=...$.*_m"...R..OS.....e......A...+..4..._-&..............l=N.....\)u0^..M..r~w..qz.\|.'...<Z....R..u1..~.....peZdhx3..MU.p8.r...T..Z..4.S.nE..u((..D...(N.U.E.&.........Q..7MX../...A......

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	659798
Entropy (8bit):	5.352921769071548
Encrypted:	false
SSDEEP:	12288:nEMsQrWEWbnByixmwgXZewhYcFiG4DUIxo:nEMsJpBJgHKcFQNo
MD5:	9786D38346567E5E93C7D03B06E3EA2D
SHA1:	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0
SHA-256:	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
SHA-512:	4962CDF483281AB39D339A7DA105A88ADDB9C210C9E36EA5E36611D7135D19FEC8B3C9DBA3E97ABB36D580F194F1860813071FD6CBEDE85D3E88952D099D6805
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6678.19/scripts/boot.worldwide.1.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.1.mouse.js'] = (new Date()).getTime();..;_a.d.G=function(n,t){this.b=n;this.a=t};_a.d.G.prototype={b:0,a:0};_a.fo=function(n){this.s=n};_a.fo.prototype={s:null,t:null,i:function(){return this.s.currentTarget},e:function(){return this.t?this.t.x:this.s.pageX},f:function(){return this.t?this.t.y:this.s.pageY},o:function(){return this.s.relatedTarget},b:function(){return this.s.target},n:function(){return this.s.timeStamp\|\|+new Date},a:function(){var n=this.s.which;!n&&_a.o.a().K&&this.s.type==="keypress"&&(n=this.u());return n},u:function(){return this.s.keyCode},m:function(){return this.s.originalEvent},j:function(){return this.s.type},k:function(){return this.s.originalEvent.touches},q:function(){return this.s.isDefaultPrevented()},g:function(){return this.s.shiftKey},h:function(){return _j.G.a().P?this.s.metaKey:this.s.ctrlKey},l:

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.547137089637331
Encrypted:	false
SSDEEP:	12:hYYLDZlXLDDNolXuFDDNobLs8K5eX4i/JVWXt6oQL:hYiZlXjil+xibLs8K5tIVWXtI
MD5:	7B315D950DA2C78A9982857E93D2319D
SHA1:	C59DF20162C8A959C3AA35A327CE6A93E520BB65
SHA-256:	F28CCD20DB510F849331C56C41AF7762E9C93A7D6C8E186856AA2B7DAF51868B
SHA-512:	CFD1F33773CB572232ECF4E681F3A6384BC4652EF300F600708C8E99BCB8CC2923A8C11D9230EE3164C16DE0985EA7ED89FCE95043B4FFAD741729B4744ACE0A
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/cloud_docs/thirdpartycookie/post.html
Preview:	<!DOCTYPE html>.<html>. <head></head>. <body>. <script>. if (window.parent) {. if (/thirdparty=yes/.test(document.cookie)) {. window.parent.postMessage('static/thirdpartycookie:supported', '');. } else {. window.parent.postMessage('static/thirdpartycookie:not_supported', '');. }. }. document.cookie = 'thirdparty=; expires=Thu, 01 Jan 1970 00:00:01 GMT;';. </script>. </body>.</html>.

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.242749346346503
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH11sGB/0FDkSWM4R8g6n:MMHdVBKW/UTB/8gb5x6
MD5:	1958E8FBA4F9196170938D7170FB4D77
SHA1:	7FE5D549D279EC60E0983C627556E4997D8674D1
SHA-256:	FFE5771EA8DB54EA71C3CF9B69394CBFA2AEE39F8E4E9D12BC793A76FD88C7EB
SHA-512:	0233868C1BE382C465255C0E451B789B81470F88BA8057B5832AF85A9A3CA8102F6C5E88FC48DA85B20C57A4F5DBB3268DD0521D9164F2EBF0EB9BDC1535603A
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/shell/images/o365_gallatin_logo.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:77ac0647-901e-0061-77d0-cbe982000000.Time:2023-08-10T21:19:44.8581293Z</Message></Error>

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 87400, version 1.0
Category:	downloaded
Size (bytes):	87400
Entropy (8bit):	7.997700712809817
Encrypted:	true
SSDEEP:	1536:GX+MnPUc8H5+X/ZjDP7/ltyFmPevNjEad99aF1O8FMBjFUY/CImb:q/ZjbTnGmPINjEq99a7O8FMBhUPImb
MD5:	EE4A8E042003216A751B343365276DEB
SHA1:	17C4E71EA77FE2A716A547464092B0979F4861E2
SHA-256:	440DF30B344DC7F6D13B5ABB6D317F896B39905833021003BDC4B0C37D049D14
SHA-512:	EDDF91BC69A3C87FA11C3685BF4CA671EB14100A6B863E9AE4A719C290EFE667B296B970220334D54DE796635E644424EC26846A29E1AF5770A0484A53583BC2
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-BoldItalic-190618-Web.woff2
Preview:	wOF2......Uh.........U............................@..d.`....>..s........`..4..6.$..d. ..o.....T[C..._...m5.SW.i.s.I......Zwh6.G<.8..........:.r..FT..ft..uD...........Dlz:..r.<..$....6.u..X..5...$...+.CIk.....E...R4kRm....".U......."o...q..~...01G<.1...,.r....Yc^tp..a~...:.Z..JU.1..,...BU..{...,S.&\.^..I..L.G...9...dhQ9...q..cd.Y..qRi.....O..vJ....=`.vb.swd..(.~!J....)\|.ir...]....#..".U.~.....m.1..Q.Ec.u.B.L...?,.......r....(E..cd..]l`8.dP..Q./.:.I...vbv.*[..g.c..N.]/gi..p`.>P.~Q.......^.}..5.EB,.!.xA.....S....=.{x.6......$]j...I.F.\|..I.n..+tLy..i.b.'.....{6..iE=~......x1fP..n.'..E....;..Y....B.{\|...Y@v1.....>.d.....t{.j.,Q.8R...1+.s.'c..{....a:.........A.....<./.\|.......j.\..+j.T;D.h...p...t'..,.%.d..8.. .e'.....K....m.... [%L...e...h.....a.8!....D....n...j9.r..^.{.../ ...#......v:@.W..'rS...X..\|.....1......x....7...1Q.5....o..O..NE:W.q...&F.baTa.F.2..:.`........s......}.3...4..`.......g..... . ...X..B^.;..n.n..I...aT.y...?.I'.%&6

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.186613282059109
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1LRufHgdKFDkOg6n:MMHdVBKW/UTKYdegP6
MD5:	A08A67E98F4C0B9F3942768775A7C123
SHA1:	C9BCF77C2634208DC71C610A89C17C321F20ADC3
SHA-256:	2014CD7EA1CD2D73F1BDF758FE326001CD8FCAFC14420EEFF4C71A2064856E74
SHA-512:	0DF7F0B50BD04BA6D1914AD0C29F94E9FE09737C02FD8B05A5E362AA41B297CE08F5806D418AAB85CE0EA15430124F056D73E3BB19A9CA7C9D164E55AFB86333
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/scrollbar/arrow_staticup_16.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:40313047-901e-0013-3bd0-cbeecd000000.Time:2023-08-10T21:19:44.8807326Z</Message></Error>

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13418)
Category:	downloaded
Size (bytes):	13470
Entropy (8bit):	5.2525822223733805
Encrypted:	false
SSDEEP:	192:MEeIesESvqzDTzBR0zKy0KNS9nsj+M8k0gwuSdEOXzLZ9OS4TQ4:DeIelYzGy0Ksnsj+M8FvfFj1Z4TQ4
MD5:	1C9CC52B4F73AFD45488B705C4E59C53
SHA1:	EAFC4E7645EC258F2D53D72AF489606F084FCAB5
SHA-256:	1A17FE5E8C52585857ED6990D868887F771B985AE28A5CB85E2A97A64ED29FDD
SHA-512:	9BBA870415F74DB51A8548102DC39151968B3DECD73B41B73C4498B719DEC6E1B238DF5DED371DE604457917DEB5B45075B7331D1670210CCC4187C844467265
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-h.min-vflHJzFK0.js
Preview:	define("metaserver/static/js/maestro/layout/global_header/utils",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.generateGHLogName=t.GLOBAL_HEADER_VARIANT=void 0;t.GLOBAL_HEADER_VARIANT=()=>{const e=document.documentElement;let t="OFF";return e&&(e.classList.contains("global-header")?t="V2":e.classList.contains("global-header--V1")&&(t="V1")),t};t.generateGHLogName=(e,t)=>`gh_${e}_${t?`select-${t}`:"trigger"}`})),define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/global_header",["exports","focus-visible","react","../../common/index.esm","../../common/index.esm2","../../common/chevron-down","../../common/chevron-right","../../common/chevron-up","../../common/close","../../common/open","../../common/search","../../common/pictogram_icon","../../common/index","../../common/index3","./badges","./menu","../../common/index.esm3","../../common/index.esm6","../../common/index.esm7","./avatar","../../common/index.esm4","

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 111100
Category:	downloaded
Size (bytes):	20105
Entropy (8bit):	7.980108733727221
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG4UbcFII2IydQcrQl4V5Cxt:9CGEiL/w7R81UgFIjicru4Vsxt
MD5:	E759D76139117DE00214DA95C3B6C0ED
SHA1:	C11ACF355368525D321B781F06ECB3B4DD3F8980
SHA-256:	636E68CF84FBB20CB7DA5B5F3CDDAD43946C81A3899ACDE89C77F14769781834
SHA-512:	EA34A4166814D39338A1360CBBB9520966D669963A28C839E4AA4B874A4D6247A1B1E7591F3099C5CBB92E01B629F9E71481D468150D78A02D897CEB0AF8AE26
Malicious:	false
Reputation:	low
URL:	https://larationr.top/aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Category:	downloaded
Size (bytes):	663451
Entropy (8bit):	5.3635307555313165
Encrypted:	false
SSDEEP:	12288:YhqblwQ9eTw/suNyIzaJS/pWYawUWufSxwDr2o/5YP1B:Yhqblt9e8/sMzaJS/pWYawUWufSxwDrW
MD5:	761CE9E68C8D14F49B8BF1A0257B69D6
SHA1:	8CF5D714D35EFFA54F3686065CB62CCE028E2C77
SHA-256:	BEAA65AD34340E61E9E701458E2CCFF8F9073FDEBBC3593A2C7EC8AFEACB69C1
SHA-512:	CEC948666FBA0F56D3DA27A931033C3A581C9C00FEC4D3DDCF41324525B5B5321AE3AB89581ECC7F497DE85EF684AB277C8A2DB393D526416CEB76C91A1B9263
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6678.19/scripts/boot.worldwide.0.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.0.mouse.js'] = (new Date()).getTime();../* Empty file */;Function.__typeName="Function";Function.__class=!0;Function.createCallback=function(n,t){return function(){var r=arguments.length;if(r>0){for(var u=[],i=0;i<r;i++)u[i]=arguments[i];u[r]=t;return n.apply(this,u)}return n.call(this,t)}};Function.prototype.bind=Function.prototype.bind\|\|function(n){if(typeof this!="function")throw new TypeError("bind(): we can only bind to functions");var u=Array.prototype.slice.call(arguments,1),r=this,t=function(){},i=function(){return r.apply(this instanceof t?this:n,u.concat(Array.prototype.slice.call(arguments)))};this.prototype&&(t.prototype=this.prototype);i.prototype=new t;return i};Function.createDelegate=function(n,t){return function(){return t.apply(n,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Error.__typeNam

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/js/langpack/icu-en.json?19579.0
Preview:	{}

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	356
Entropy (8bit):	5.3158041486539815
Encrypted:	false
SSDEEP:	6:FJtKSDLTmSyCAFwptRcVMRGdf0fe2oEd0jQBIZv/0CepMS7gIyvPqX8EV:h7XTmSyOZcczZd0jQB+v/91IKqX88
MD5:	E65841349DBB384CD62D65B4DFCCB804
SHA1:	B51D1CD5A4CDF7054B34C517CFAD6A25051A5E42
SHA-256:	E866A6ABA53442429F25AEB09D84C52D8B37DDF63E3879A0F59BDF62AB542A62
SHA-512:	617C7D3E37AEE017FA5E3B73BF181423F5704207A580452F7A38598E719691AE8032B9BD53F146E5275D67CE20069963D0CAC1D20100332FB348F39C65F0397E
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-spectrum-uuid.min-vfl5lhBNJ.js
Preview:	define("spectrum/util/uuid_generator",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.generateUUID=void 0,t.generateUUID=function(e){const t=()=>Math.floor(65536*(1+Math.random())).toString(16).substring(1);return`${e}-${t()+t()+t()+t()}`}}));.//# sourceMappingURL=pkg-spectrum-uuid.min.js-vflOK_SM2.map

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	768
Entropy (8bit):	5.30255924241322
Encrypted:	false
SSDEEP:	12:U2eAi/ZdUQxkNP371H5ouSA0CVKR/x6rgYaTmJlKd5/3Fo2dga9FTCG5Z:xeAi/ZdU7Z371HOu70CViTmJlKpDdgMZ
MD5:	6E18FEE1CF92501669DFBEDD97F4FC3E
SHA1:	CAB5EBFE81C0771C02227B162CAEDEC1C39E52A1
SHA-256:	0864FEF5EBAB2D3BEDEC21CD154D062DC3C77174C6925A7C2F1909D47592EFDC
SHA-512:	21283933F90B91E2FFFD2C31FFAC426DAE7C54D2E51562C959D55AF2EBB1E258551A1EC4B75628FCE7BC66144576117A84DCC8D9676F3F0D82B804481104EA33
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/dig-components/logos-vflbhj-4c.css
Preview:	/ @generated -- This file is automatically synced from dig-logos@2.2.2. DO NOT MODIFY! /../. This file should not be imported into your CSS or SASS files - the CSS variables will be available on the page for you to use.. DO NOT USE THIS FILE OR THE CSS VARIABLE TOKENS WITHOUT FIRST TALKING TO THE DESIGN SYSTEMS ON-CALL (SEE #design-systems ON SLACK)./...dig-Mode--bright,.:root {. --color__glyph__primary: #1e1919;. --color__glyph__accent: #0061fe;. --color__inverse__glyph__primary: #696663;. --color__inverse__glyph__accent: #3984ff;.}..dig-Mode--dark,..dig-Theme--dark {. --color__glyph__primary: #696663;. --color__glyph__accent: #3984ff;. --color__inverse__glyph__primary: #1e1919;. --color__inverse__glyph__accent: #0061fe;.}.

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65399)
Category:	downloaded
Size (bytes):	93146
Entropy (8bit):	5.265820615168494
Encrypted:	false
SSDEEP:	1536:ElQF9RJBsvCipiGzxaUCZaq0s6DPINAx9DmLhgfYsTDTkVRWd1M4tgUVA06fu:ECRJDNizWRF4XYfu
MD5:	2C84DDD7EB49D7F61BE23D6FC145887A
SHA1:	38A20CC871F34D86652F7C0C98C9BA6F8DB780A0
SHA-256:	2589FE90B2849F35F294CB20BF433135E44CE0CA8CE98D8E4F0CA7B62FA50191
SHA-512:	8C60683163719094F96A7F363C18D823E83D898C52F7DBA12B34FF5390A0D98057EF31E7392A174F15F435BC1B1C8CF56E0CF322B521C665AAC6BE206E17D13E
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/js/jquery/jquery-1_10_2_min.js
Preview:	/! jQuery v1.10.2 with a fix integrated from v1.12.2, 3.4.0, and 3.5.0 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license /.(function(n,t){function ci(n){var t=n.length,r=i.type(n);return i.isWindow(n)?!1:1===n.nodeType&&t?!0:"array"===r\|\|"function"!==r&&(0===t\|\|"number"==typeof t&&t>0&&t-1 in n)}function ue(n){var t=pi[n]={};return i.each(n.match(s)\|\|[],function(n,i){t[i]=!0}),t}function ou(n,r,u,f){if(i.acceptData(n)){var h,o,c=i.expando,l=n.nodeType,s=l?i.cache:n,e=l?n[c]:n[c]&&c;if(e&&s[e]&&(f\|\|s[e].data)\|\|u!==t\|\|"string"!=typeof r)return e\|\|(e=l?n[c]=b.pop()\|\|i.guid++:c),s[e]\|\|(s[e]=l?{}:{toJSON:i.noop}),("object"==typeof r\|\|"function"==typeof r)&&(f?s[e]=i.extend(s[e],r):s[e].data=i.extend(s[e].data,r)),o=s[e],f\|\|(o.data\|\|(o.data={}),o=o.data),u!==t&&(o[i.camelCase(r)]=u),"string"==typeof r?(h=o[r],null==h&&(h=o[i.camelCase(r)])):h=o,h}}function su(n,t,r){if(i.acceptData(n)){var e,o,s=n.nodeType,u=s?i.cache:n,f=s?n[i.expando]:i.expando;if(u[f]){if(t&&(e=r?u[f]:u[f].d

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.226713827015644
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1Ue/WFDk0HRQg6n:MMHdVBKW/UT+eCg0HR16
MD5:	C0BAD761242F80325C64C87200C8217C
SHA1:	67B63C577EC914BA15C18A2E3E1B33B0117C6744
SHA-256:	C7F93B277EB5695C9AEC37B8E9962E41F8D3D56BB1CF265195FE8367E3869DFB
SHA-512:	6C0910905065232919E01A4DF7ED0CB0FA7BDC6C42D775206D17556933BE5840C40CC131ACD657BB5C1AC36ABC11ABEB8F2C88FC1DCBAB34BC7AFC4D9909458F
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/backgrounds/image1.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:1f2e9a87-d01e-003d-6cd0-cbbcda000000.Time:2023-08-10T21:19:44.8671946Z</Message></Error>

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24942), with no line terminators
Category:	downloaded
Size (bytes):	24942
Entropy (8bit):	5.213985584208541
Encrypted:	false
SSDEEP:	384:H3xbuOg4kiHaATrphVIVXxvz0uvcIUwBnAw1Lmbfoi+H9JT59gpHb:HtXnaAphSxhz0uvc2BnAbf9+HfTgRb
MD5:	4542D764783C82BD784326FB357F0C62
SHA1:	FC5619DAD451C77794AB8759C404D3233F5FA1A8
SHA-256:	965993B2B2C5B69E0AAF3C76372CC5D1494E638C79AF67F2FEFA0AECF67572A1
SHA-512:	51A469D84B7064CA03259E443C776FB208168AE4240F76553331F806F5D9A11BD3B55D5B5BA8257BBF66CD7116CB5B4AACA1E1754AD96656FB011E297E1CC701
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/js/mscorlib.js
Preview:	(function(){function f(t){n?n.push(t):setTimeout(t,0)}function i(){var i,t,r;if(n)for(i=n,n=null,t=0,r=i.length;t<r;t++)i[t]()}var u={version:"0.7.2.0",isUndefined:function(n){return n===undefined},isNull:function(n){return n===null},isNullOrUndefined:function(n){return n===null\|\|n===undefined},isValue:function(n){return n!==null&&n!==undefined}},e=!1,n=[],t,r;document.addEventListener?document.readyState=="complete"?i():document.addEventListener("DOMContentLoaded",i,!1):window.attachEvent&&window.attachEvent("onload",function(){i()}),t=window.ss,t\|\|(window.ss=t={init:f,ready:f});for(r in u)t[r]=u[r]})(),Object.__typeName="Object",Object.__baseType=null,Object.clearKeys=function(n){for(var t in n)delete n[t]},Object.keyExists=function(n,t){return n[t]!==undefined},Object.keys?Object.getKeyCount=function(n){return Object.keys(n).length}:(Object.keys=function(n){var t=[],i;for(i in n)t.push(i);return t},Object.getKeyCount=function(n){var t=0,i;for(i in n)t++;return t}),Boolean.__typeName

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1368)
Category:	downloaded
Size (bytes):	1433
Entropy (8bit):	5.010808468847545
Encrypted:	false
SSDEEP:	24:8WGpmkw/KS/K1ntwkozs4GnCsiQgGsd825hViXom1ZIuHv0yJh8yJlyJLZyJngut:zbkxTTe8257cFZ
MD5:	B8D8F7E55EA520FE9139FD383431D710
SHA1:	1DEDDC6653BECA05B969A2CF93FD632EABF0DAE1
SHA-256:	77131597BC899A14A87F401898774383E7A2F83ED42027EE431F04618AB325B7
SHA-512:	A84E4E0754E5FB5D6EDAEAC13853A93F94D00327CB19A5A84952563E69FE94330A76EB79392008681E326E5AD17F80B10060F55D4B3347CA0A86187FE5620033
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-sharing-sync-login.min-vfluNj35V.js
Preview:	define("metaserver/static/js/sharing/components/shared_content_icon",["require","exports","tslib","react","typescript/libraries/spectrum-content-icon-compatibility/src/index","typescript/libraries/spectrum-content-icon-compatibility/src/index"],(function(e,t,r,n,o,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.SharedContentIcon=void 0,n=r.__importDefault(n);class i extends n.default.Component{render(){const{className:e,variant:t}=this.props;return this.props.isFolder?n.default.createElement(s.IconContent,{className:e,name:a(t)}):n.default.createElement(o.FileIcon,{className:e,path:this.props.contentName,variant:t})}}function a(e){return"large"===e?"folder_shared-large":"folder_shared-small"}t.SharedContentIcon=i,i.displayName="SharedContentIcon"})),define("js/browser/externally_hosted_script",["require","exports","tslib"],(function(e,t,r){"use strict";function n(e,t){const r=document.createElement("script");return r.setAttribute("src",e),r.setAttribute("nonce",t),do

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	539647
Entropy (8bit):	5.381957482254162
Encrypted:	false
SSDEEP:	3072:F3jThwXAhlzz+y92sqKXisaFB3VcLSEaEldyp0LFDbQi2val651x9xdnyLRJ0iTp:F3Phwq22EhxdywuKGkEUZa4uUy
MD5:	221712C77C654C11F645EE71B55AEB8D
SHA1:	39DFF7EFA84FEAD485A5101247CA03CC843F0840
SHA-256:	B523D1A4A5FC029B7C456A0747D34544BF3D86329398CF5FFBF1668EB70CFFEF
SHA-512:	3571D073ECCC6271A24EFC1ADA5E9FD0ACE3E987AAEAAA6725AF6FBCD22622D66917FF4BD44A3B2181D380F1FC98DE55BDC91D33D6DA08A084FC03AD7C12598B
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/jsc/adminbootstrap.js
Preview:	var AdminApp,Admin;(function(n){'use strict';;n.app=AdminApp=angular.module("AdminSPA",["ngRoute","ngAnimate","ngCookies","ui.bootstrap","ui.router","ngSanitize","ngResource","angular-tour","kendo.directives","ngMessages","mgo-angular-wizard","ngAria","ngCsvImport","infinite-scroll","angular-momentjs","LivePerson"]).run(["$rootScope","$state","$stateParams","$window","$http","$templateCache","$timeout","ConciergeIntegrationService","HelperService",function(t,i,r,u,f,e,o,s,h){function st(){o(function(){var n=angular.element(document.querySelector('#DelayLoadAdminFooter'));n.length>0&&$('#AdminAppFooter').load("/AdminPortal/Home/adminfooter",function(){o(function(){var u=angular.element(document.querySelector('#AdminFeedbackDiv')),n,t,i,r;u.length>0&&$(u).trigger("AdminFeedbackDiv",!0),n=angular.element(document.querySelector('#WizardCatalogDiv')),n.length>0&&$(n).trigger("WizardCatalogDiv",!0),t=angular.element(document.querySelector('#ModernModalFeedbackContainerV2')),t.length>0&&$(t).

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8480)
Category:	downloaded
Size (bytes):	8540
Entropy (8bit):	5.421382731725046
Encrypted:	false
SSDEEP:	192:b2hq2kjUqu8vpr1EnO8Bd4UCK7YgmxM32YZrRVxwOSEUpvQL:b4qJj31vJ10drqOYgmxVYZrRVxwOSEUs
MD5:	CF80CD290904122DBD65A5E7EED580FC
SHA1:	0CF612857C4997DA5C6A6EC34F1A6089DD2691B7
SHA-256:	3D4D1A172372AB71A37FD7866C06CF7F3FF0AA391A3E143DFDE56CBBC4840338
SHA-512:	F2F0CDD0A7BBFFB809246E5067DE3108A013085B70050E2679F822A3CF155D83286DC5E3E82713A7A293CE4F9BCC2B48CC09BE8BC140AA8E1CEA08F1D4320E50
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-icons-assets2.min-vflz4DNKQ.js
Preview:	define("metaserver/static/prod_assets_web_modules/common/chevron-down",["exports","react"],(function(e,t){"use strict";var r=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:function(){return e[r]}})}})),t.default=e,Object.freeze(t)})(t);e.ChevronDownLine=e=>r.createElement("svg",{viewBox:"0 0 24 24",fill:"none",...e},r.createElement("path",{d:"m5.25 9.25 6.5 6.25 6.5-6.25",stroke:"currentColor",strokeWidth:1.5,strokeMiterlimit:10,vectorEffect:"non-scaling-stroke"}))})),define("metaserver/static/prod_assets_web_modules/common/close",["exports","react"],(function(e,t){"use strict";var r=(function(e){if(e&&e.__esModule)return e;var t=Object.create(null);return e&&Object.keys(e).forEach((function(r){if("default"!==r){var n=Object.getOwnPropertyDescriptor(e,r);Object.defineProperty(t,r,n.get?n:{enumerable:!0,get:fu

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	259584
Entropy (8bit):	5.071812306917431
Encrypted:	false
SSDEEP:	6144:yeLfh6nxcr8uVgTdp2YmD1BFEFy41tE/2VX82KLHIPf2hAC1+Rx:yGxYmDTmFyGsDMPfOAC8Rx
MD5:	61F46098504166008495633ECD1CF14B
SHA1:	1A2E92B644346D88E12A34CDE7F9662E24153EC5
SHA-256:	4CC76D1027E2AE7347B941502F52BC9A1F00A7978634E42C9676B69AAA2B1B3D
SHA-512:	BA25DFC06BE7D1E5A05AA51435CA10B796DB5CEBD34ECFC3AAA5456B9387644D36C2DB38051AFE2318918103D683A2AC27D2AD4ABCF733FC0CED5DBC20DEA44F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/prod_assets_web_modules/jquery-vflYfRgmF.js
Preview:	/!. jQuery JavaScript Library v2.2.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:23Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..}

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1422)
Category:	downloaded
Size (bytes):	1474
Entropy (8bit):	5.09035587818912
Encrypted:	false
SSDEEP:	24:1bmq2euHhaAq55A8Ffx1eMW/68XXWwVV6wj6/4Fzi88f:1aDI5T4S8XGmV/k+2N
MD5:	C2FF7386FD53FA805130D74C7ACF01C9
SHA1:	4E784B6BA19EE8B92789719D66280C8FC7662269
SHA-256:	03EFEDADEE1AFA357EBF28DC1614BCEDF337E4F46A6EC332AE96783F28250E6A
SHA-512:	45435B7C20ADD36A89689CF989C98D5D1D3BC11B8E3A33994040E55BE9F77990AD81A55EC5F3ECC8237F1C028751E35177C41F043B128323E27A53FD6DBB3732
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/security/csrf_hmac.min-vflwv9zhv.js
Preview:	define(["require","exports","tslib","metaserver/static/js/security/crypto","metaserver/static/js/security/util","metaserver/static/js/clean/csrf","metaserver/static/js/core/uri"],(function(e,t,r,n,o,i,s){"use strict";function c(e){return r.__awaiter(this,void 0,void 0,(function(){const t=encodeURIComponent(e),r=(0,o.stringToBytes)(t),s=(0,i.readCsrfToken)();if(""===s\|\|null===s)throw new Error("Missing CSRF token");const c=(0,o.stringToBytes)(s),d=yield(0,n.hmacMessage)(c,r);return btoa((0,o.bytesToString)(d))}))}function d(e,t,n){return r.__awaiter(this,void 0,void 0,(function(){const r=s.URI.parse(e),o=yield c(n);return r.updateQuery({[t]:o}),r.toString()}))}Object.defineProperty(t,"__esModule",{value:!0}),t.readHmacCookieToken=t.addHeaderRedirectToken=t.addUrltoken=t.csrfHmacUrltoken=void 0,t.csrfHmacUrltoken=c,t.addUrltoken=d,t.addHeaderRedirectToken=function(e){return r.__awaiter(this,void 0,void 0,(function*(){return yield d(e,"rtoken","header_redirect")}))},t.readHmacCookieToke

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 22965
Category:	downloaded
Size (bytes):	7410
Entropy (8bit):	7.97755830522829
Encrypted:	false
SSDEEP:	192:BlEaK65K3tmEpb5IndCp/dDgg2zUZzZ4YXRTd2mq5+B2N:BlEaNunbW0Zd0VUJSr5+2
MD5:	73812C68911F25D2B749DBF6BBE666C2
SHA1:	48EF93F8BE833BBD0E0FDF903A375BAD7EE72F0B
SHA-256:	CF6AC1733E0E8C1AD3B7CBA1F170D057F10A2D4058CD44CB8A03319FB414903A
SHA-512:	46F312446A167651C108C61260EC8233EB2F260923090B3E58AB2EDBC002869710764C5C2F3B4FD1DA446A51E18A15D532DACDA60CC0E389BD2946077A514E71
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/b7447ec7a5639b81bb9e.5B1z69DJcJdOytocwBFk4mleBWMQRi8eATiNFmXWFrY.js.gz
Preview:	...........<iw.8...+h.F!MR&)Y.EQ.;.vzrM....h.h.....G.....[..$(Q...//...P(....(..7.....N....~..^<?......x~.?.b.:..e...3....I..eB....y.g$...yz..=..]/.%I./.:I..<.\.q3[......R. ..EN..4?&...,t.y.r.;..x.E4.231.~..)Q.,.f..i.[..u...R..Os.\.aH..^......VbzI:_RS.i.d.&.7)I:....).9.R..$.i..\...<.....2.g.rxp..w..\.Y.E4#1`..y..........Ds...nF......l...)..O....[y.F..g..6t Y..J....:.L_C.Wo?...............G..nyi../.a.O>\|8........}.....b..~..z.....~.%.w8......~p.$....^...LhF.....a...e.Kb...`..z.z.........n.Ek.....Y'./...n.mq.9..w.n3..W.\|=......a.9....&...!<(.P...F:N\.w..t....c.u.z...[%...T..B.@..=...)H..A\|E^$.M4.U.-X.........`..}...-.'...>...EJ..\|.@.06.)....c..Z.5.f..r.x.5c.Ze.(U@.....$.u....A.T.8.. ..z ...%8.........%.S`.tIfQ...@xc&.a......&q.\.pwA.@..K.i....#.......HG..c.+....Bt..W..&..l..K:V.4.D0cF.-2...........9Q7..S1-..^...j..QL...2c..Q..D^%...U..D..\92.W+...`.4.S.=.E.y..P.9..T.D.R........y.....5.<M...:.l.......g@...s...a./..W.P.t...-[.....R.d..

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.296620321314291
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1185Rdh/0FDkKIhAg6n:MMHdVBMHgWdzR05+5/h/8gKIhF6
MD5:	12E32FEBAB61A77E488C84A1447EE9D8
SHA1:	CEB097644D778029011AC5E51F532FEEF746522C
SHA-256:	56DDC033AF07BC9B125C8E96A9348315ADF67B234DF94FECBB3A64CCD32476B2
SHA-512:	5FD59939D62D237665AC3B596F622A4FCEA6C36D66C0667C5F914EC35BB90621986EC9570253E2DB853202FE9511529FCDC60C4AF1F8301182CE268A12E7EE3B
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/pagelayout_mos_background_left.jpg
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:77ac03f2-901e-0061-54d0-cbe982000000.Time:2023-08-10T21:19:44.2634711Z</Message></Error>

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6081)
Category:	downloaded
Size (bytes):	6144
Entropy (8bit):	5.12988454589802
Encrypted:	false
SSDEEP:	96:TFyB6ymruDe2ygnrnEbD2xMzzHMSZKQl4iQt+s6M2natjv8YMwExDsfW:0cLruDeOETzzsSZKK4C9nkjvfgsW
MD5:	7BD596821FAD0D793C36B7F8F91DA87A
SHA1:	32911FF43B5CF886EFAD1A46C78DAB9F4800BADC
SHA-256:	CF3B26634DC46ADEF8767BB22CC8AFBE043C20AEEE8B176291C7E8262C1E7E2C
SHA-512:	80BDDC260E1D7F86A26762D84F42E5FEF7F6A479AFE9ECC5ECAFD9696CC30CD92D5A08DD8CA6EF9A7B9CF494103DEF33C68205552CED294B12BACF2862DDBDB4
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-url-and-css.min-vfle9WWgh.js
Preview:	define("js/browser/css/css_cache",["require","exports","js/browser/css/inject_css"],(function(e,t,s){"use strict";function r(e){try{const t=new URL(e);return t.pathname?decodeURIComponent(t.pathname):""}catch(e){return""}}function i(e=document){const t=c(e),s=e.querySelectorAll('link[rel="stylesheet"]');for(let e=0;e<s.length;e++){let i=r(s[e].href);0,null==t.already_loaded_css_paths[i]&&(t.loaded_css[i]=Promise.resolve(),t.already_loaded_css_paths[i]="loaded")}}function c(e){const t=e;return t._cssCache\|\|(t._cssCache={loaded_css:Object.create(null),already_loaded_css_paths:Object.create(null)}),t._cssCache}Object.defineProperty(t,"__esModule",{value:!0}),t.loadCssWithCache=t.getOrCreateCache=t.rescanForMoreCssLinks=void 0,t.rescanForMoreCssLinks=i,i(),t.getOrCreateCache=c,t.loadCssWithCache=function(e,t,r,i){let c=t.loaded_css[r];return c\|\|(c=new Promise((c,n)=>{const a=e.createElement("link");return a.href=i,a.rel="stylesheet",a.type="text/css",a.crossorigin="anonymous",a.onload=func

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3789)
Category:	downloaded
Size (bytes):	3848
Entropy (8bit):	5.0803181659327
Encrypted:	false
SSDEEP:	96:oPOmXP+owrPmVrxEwYiQK7ZpUxaHrFsePeJLeJOvJed0s46p3Gv8cC:oPOkGQ1pUwHrFcC0op2jC
MD5:	3C8D77BBC9AC96372C0D5E71C5ADDADE
SHA1:	6398514B640F20EF01C84E781F6FC76C1DE63470
SHA-256:	194E435610833CA04BDD2CAF361A1243775B66E3DB17D47690E5BD19CC307F74
SHA-512:	AD501F52549DBD8B5E288B7CCC1ED4C175414EAFE6982E6BC54FE85A227D78AB1508442FC286E2B9404C7E9252E558EDA443F9D7E751A8196921DF1682ECCCD0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-snackbar.min-vflPI13u8.js
Preview:	define("spectrum/button/index",["require","exports","tslib","spectrum/button/button"],(function(e,t,r,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),r.__exportStar(s,t)})),define("spectrum/button/button",["require","exports","tslib","classnames","react"],(function(e,t,r,s,a){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Button=void 0,s=r.__importDefault(s),a=r.__importStar(a),t.Button=a.forwardRef((e,t)=>{const{children:n,className:c="",disabled:o,href:i,size:l="default",variant:u="primary",fullWidth:m=!1,onClick:b,shouldWrapContent:d=!1,type:p}=e,_=r.__rest(e,["children","className","disabled","href","size","variant","fullWidth","onClick","shouldWrapContent","type"]),f=t\|\|a.createRef();let{tagName:g="button"}=_,k=r.__rest(_,["tagName"]);const y=(0,s.default)(c,{"mc-button":"styleless"!==u,"mc-button-styleless":"styleless"===u,"mc-button-primary":"primary"===u,"mc-button-secondary":"secondary"===u\|\|"borderless"===u,"mc-button-circular":"circular"===u

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 12411
Category:	downloaded
Size (bytes):	4524
Entropy (8bit):	7.959976164363993
Encrypted:	false
SSDEEP:	96:DiEAXunWX/4trPAN0325A/TwA+t4TyY0vEavVQiZKAwVD3vPlWfhnt8:DixXuno/4WN0325cwA+4H0yi8AwF3n0s
MD5:	078BF31EA544E63EEB616600B04136EB
SHA1:	7276938FDA8582CB6BD1A1DFD0A1BDC3CA2B186C
SHA-256:	BC75F25969F51EF4549F1F0A15174AB0B437EEC525275ACF84B323EB8F6F778E
SHA-512:	33D702B85C303439B05EE666096EA86C8FFF1F36A026F340B391E169FBAD1D82574D275FB4141CC0AA2DC4679F1AEEBA6CF9E1BF86286DC26701B0D0D3661685
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/58cc5c6db7c1186fa9f3.zY6o-XeH44T0_vpOvZUDLeJeznVBNUebzrAuflJz95U.js.gz
Preview:	...........Z{s.F......T@e.....CT...x.]~d.N.....D..p..%..~....$('u.........{..8.....{y...k.p}uw..._.............X.77..pQ.+.9.ws..m.<N.iDiV.wq..._.%.Q3.S.l.]..2...z1}...O.9...=y.4X.<.I.]F$.^....R$.tf.....'v%q.W,.:....6..J0Y.>.....@.${UJ....ig.G.\3.Y\|.q).tp..&..O.r...q+\xC.X....#E.}...d.x...w_..m...{..l.n...X.0...(~.k.H...A...u..c..O.$..&...l.r....UM\|.Ok.{.O.(.x!oJ...3...Q.t.d.\w......E.....n..0........-..W{.....L->^...N.,.\.....!U...P.....IdB.t{....'..)..v...."=.l...M.....h.......X.9a(.9..cv.\.....Gsc........g?.D.'7... F.2?..^^..U.u..."V.h.Vp59.l.8..k"."..<M.D._....6.._.Q8.....e...G..N..N.8).nq.Oe.Q.L<$i.\|."s.$B.u.H...c.......Ob...'....b.r%mk.I....!p&.....w."I............2..........L,.L&.sE."...A8.....".\.!..y;.?}...6....f:.O.....t..\fi&l.?.....\|.....)..S2~.9..D....e......<..?.!..........[.(..F......(.=.!...y....i.Hh..M.....C...m....J.....8V..$jB[W...x#.\...S...w..X...+.B-5..n..G.....v.:[...W.z/..8~....8'.J.u.a........]..'.~.

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30804)
Category:	downloaded
Size (bytes):	30945
Entropy (8bit):	5.224734952721315
Encrypted:	false
SSDEEP:	768:3woZF+cT60/E3YN5WP6N8QALdxaNIF6nZg6ZhYaAL+YP:33XTbEBP6URxCdKbqu
MD5:	6B3902EBD93CF5693755F5477C09BB3A
SHA1:	418CF6B5E8EACEC0037AACA9284E5F9FA1D31DC8
SHA-256:	7338885D85C5EA33E53608F778A73A206C661CD3E5E06B8CC232674E01B70766
SHA-512:	7EA94C330BFB26EEB5C6582B548BD0E5566EB4BE56A02ABE103F86D0A0F6F246A77576879DB061FD22F11D31AF9B94873E17EDC083F11656B61E602BA7EB90FA
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/alameda_bundle/alameda_bundle_chrome_en-vflazkC69.js
Preview:	/! For license information please see alameda_bundle_chrome_en.js.LICENSE /.!function(e,n){for(var t in n)e[t]=n[t]}(window,function(e){var n={};function t(r){if(n[r])return n[r].exports;var o=n[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,t),o.l=!0,o.exports}return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var o in e)t.d(r,o,function(n){return e[n]}.bind(null,o));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46188, version 1.66
Category:	downloaded
Size (bytes):	46188
Entropy (8bit):	7.994727284862106
Encrypted:	true
SSDEEP:	768:1NNzV0ynJc0ZFM5VB4R4HFlW3dhjfPlHRGSngzacOTXs4bS8PQefNYYI6xS:MWcx5VB4R4HFlwP1UTacOTXTS8PZfNY5
MD5:	DFC5E24CBC1B134E0C00C61E84EC999A
SHA1:	D3B1A8EF1D0F6F9162986479252570525719F203
SHA-256:	B5DB3E633EC765FC01A19C06B0955D56C2503285E59D8D348D08EC34ABBFEAF3
SHA-512:	48726CB83BDD0EB6822A73734AE272286483E8AEB6E18F57E635ED9269CA3C6C62E2D900224138DAFE32A79A94C3C7694307FF413505D695A77FE602681DF27B
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/fonts/paper-atlasgrotesk/AtlasGrotesk-Medium-Web-vfl38XiTL.woff2
Preview:	wOF2.......l...............B.......................&.......`..\.2..a.....\..M.....6.$..x..~.. .....\|..?[....r.O.tf.$...d.wSc....=.3-=7v=.....`n.u...h.\|.I........d"c.\.%i.@QU...s..b.&n.T..%J..Zj....^(....3....k.vV..{8(..M{J/.C..w<.uV....=u.2t..Y.......`...C3K.'wp.F.R....5C..2w<.N=.+...@..A..:....._....X....y.Zn....DE..`....Yh.82....."..3YM..f.]...?..'.".s5...#.O..P....4....;6W.U.S.....Y.CGD....v...].....&..".....9.X.d.m.g..m...3c..%b...]....<b(....h...,.v...._z........R..z23?.S.?3...Y`...e...qL...m6YJ...h....#l.........B..m.`....KDQq. s...."c9G..\e.U....5....fu...e7...n..kDM...`. 7......OB.&(.R...Y.....Ir.^......Q..V~}.!r!.J[;`.iU@Z........I8.8..b.5...e.Z%%.-t.B[.%...^..R..d....kM.LN...*T..L.a.X[.jd)...F....J.,pN..TE.v.5U.h...J#?M.[./..laM.'.HI....9.^.....\|.....!5%.X... .).~=..t..T...J..!.........Ml...2.Tx......I$.yRi.R.....l.X.$..o\|Oz..[i.1?l...0#.._.......)....I..Q.c......B...0.."...@.k..~)5...\|[!..p..8.6.OL$.(..`.C.e3.L............[4...%

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 60223
Category:	downloaded
Size (bytes):	21869
Entropy (8bit):	7.988347666522011
Encrypted:	false
SSDEEP:	384:SkuUsyYfra0Y1aOjo++m6+w/JDafuQ/xwW4xNMP/LDyCXitBW7cYQ5LOGY:SknviaV1pU++m9QWf9uMPD+CXifWwfLc
MD5:	B0363E551626C07EE9EE81EBA4B59918
SHA1:	09B77036B9F5A6FB89EBDC05096EBE5178D3628E
SHA-256:	4BB0C496CB7C703DEDF4E014B9FDB89FC1EED71BB4A873B3D56EAA00DA783964
SHA-512:	0CCB301E2E4BC414ADC007C6459BCD5B45A082A5FBAD30B7CA2D795AB5A0370EC591105DE1CCBFF425EFFFA85D721D474DDDC0465817E31E66A4B46C3BEB3CE2
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/3ee69373c43503423dee.hQ390ZRL-Hgo8uZZODlkclJcvKXLvy33mubixfvo22U.js.gz
Preview:	...........}{.....\|.Fg.D2..<....g6...g.d..2+D........t?...~J..=.........ztWW.OQ2I.:..?.^]_}...=.\...?..........p.t..\|n...#..Y.....e..d.%..}:..?F..>M..2.&X&_V.$f.%....~....I.............F.{..$,.4..[....V9k.E.......f.'.........qSJy..e.f`3g.M..4.4...3..g.S3aO.;6e.KBv.eif[.<.. O~W4.%.(..(...M..f....N%G..1.XN?c.K......;..a...:n.'....7........pt..3'...W...0cA..d..N....w.(.@O;.`..l..g..v..4.n.pnW2$C.y`..o&6D.....j.(...ur...K.........B.r.I..?..#?A.O.dX....c.e..sx.e&...C.@'...4...2..v._....Z.;...j..b.@........$....).3.X.9.!.T.....%.b./.`.},R.,..L....1..'QW.k..........7...g...z.c.0.5..P<..Ab.....B..u.f..0...W.L^..9}1l.....E..@..Q.:\|.....L..S.. 1=d../..;..^9..'+...(..].I..<....<..._.A...N.F..$L.....:..K:Hvh...p).t.n.A&.....r..B.,.i......W...Oz.W.}._']...S.K/i......x.....A0q.9D9....n..t..]T..U...@)fP....V.`'._..6ROZ..>:.y.d..C ..2...u......S.......F.O.).d. ]../r.Q..w.9.~.@.JN>..."-6K.O:a.X.$.u4.J...-v...T6.O.}z.Y..;e..S=...aV.s...N._n....3c.5.G6.f~...G

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.269133654814256
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV14eEOg//cFD+z8g6n:MMHdVBMHgWdzR054eEtXkY6
MD5:	C939651225219804B356E850F66E8C3D
SHA1:	1574D304896D781930C3309A1D5861A85D894660
SHA-256:	139870A10575FC8443DC7B69D08E4A67C1FBA879AA7CCD82AB190427B79559C5
SHA-512:	D56FA5B7EE16FA37EF75616A989CA1580A78CD6FB3CE76627D9280C5D1C3DB7B5D011ECBB3571BC28DAB719983073C0E6153FFAB66E852C134668D56A6BBB752
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/Shell/Images/O365SharedClusteredImage.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:d0cc63a9-f01e-003a-6dd0-cbd0b9000000.Time:2023-08-10T21:19:43.9062594Z</Message></Error>

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21154), with no line terminators
Category:	downloaded
Size (bytes):	21168
Entropy (8bit):	5.248539515269941
Encrypted:	false
SSDEEP:	192:bkzWdxMSkiRYUXVTebI38CI2hpE++Gv30v5z6X/PfGIR2Mh4fZqZXY+iSvkDDx9g:bkCdxMSkiRYUXV80DhpnMUAMq6XpJ
MD5:	AE56D659C1CC69B972F3D7B2B38C425F
SHA1:	19F9ADC9A3604225404AD9795E235D23F09693FB
SHA-256:	DB5AB466F75DD7BF3DB635C5E2187FD07FE0EC437E8C75AF7D5DA0B7CC556285
SHA-512:	160298C9AA2E89A2794C5166FBE643755A90A9AA27DABAA0039F6BA2C1FAEEDDF61A86E49778EE314FBBEEA077D8A03F744D7E9C7878C2F46854A300D2EABE1F
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/content/css/signup16.css
Preview:	@font-face{font-family:'SegoeUI-SemiLight-final';src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.eot');src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.eot?iefix') format('embedded-opentype'),url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.woff') format('woff'),url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.ttf') format('truetype'),url('https://res-h3.public.cdn.office.net/admincenter/admin-pkg/en/css/webfonts/segoeui-semilight-final.svg#web') format('svg');font-style:normal;font-weight:normal}html,body{height:100%}body{font-family:'SegoeUI-Regular-final','Segoe UI','Segoe WP',Tahoma,Arial,sans-serif}.hiddenImportant{display:none!important}.hidden{display:none}a{color:#da3b01;text-decoration:none}a:hover{color:#b22a0f}.container{min-height:10

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1165)
Category:	downloaded
Size (bytes):	1220
Entropy (8bit):	5.176993393602081
Encrypted:	false
SSDEEP:	24:1bmL80tsfxMGgFDw8WaLRSOvU0F2/Q8W+LKmG0Xx8wSwTdWLIR3US4DXGovhV:1aQ0ts5AVw8WqRSOvUO2/Q8WuKm1B8wW
MD5:	EBA452C32CA0A0ECB8D1C1D5E8BE911C
SHA1:	84BE36BCA4254FA177497EB53C8A742C7C8EC783
SHA-256:	A72EBBC3F651C26091FBDD89AE351616CF0D90B82C4BA7B4BBAF325866563AB1
SHA-512:	732C2E0F1962E93D488AB7805FF0256A13783E1839E294669CF203280FE9A0E8CD33A4D07593E156C19DD3F0EC836E290B4E753B6155C523E0BFDAB12B715F35
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/ux_analytics/analytics_id.min-vfl66RSwy.js
Preview:	define(["require","exports"],(function(e,i){"use strict";Object.defineProperty(i,"__esModule",{value:!0}),i.maybeSaveAnalyticsId=i.getAnalyticsId=i.lib=void 0;i.lib={analyticsTrackingIsAllowed:()=>(()=>{var e,i;const n=null===(i=null===(e=window.dropbox)\|\|void 0===e?void 0:e.privacyConsent)\|\|void 0===i?void 0:i.getConsentCategories();if(void 0===n)return{analyticsAllowed:!1,generalMarketingAndAdvertisingAllowed:!1,performanceAndFunctionalityAllowed:!1,socialMediaAdvertisingAllowed:!1};const{analytics:t,"general marketing and advertising":l,"performance and functionality":a,"social media advertising":d}=n;return{analyticsAllowed:t,generalMarketingAndAdvertisingAllowed:l,performanceAndFunctionalityAllowed:a,socialMediaAdvertisingAllowed:d}})().analyticsAllowed};i.getAnalyticsId=()=>{const e=document.cookie.split("; ").find(e=>e.startsWith("dbx_js_analytics_id="));return e?e.split("=")[1]:null};i.maybeSaveAnalyticsId=e=>{if(null===(0,i.getAnalyticsId)()&&i.lib.analyticsTrackingIsAllowed()

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://larationr.top/aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5099)
Category:	downloaded
Size (bytes):	5100
Entropy (8bit):	5.104563734149195
Encrypted:	false
SSDEEP:	96:bg3zU7/ieGEKaxnMKcDEq3XJk+YJga7RPL8AwuYSQqJ:c4jVGOn5cDRHm/PLfwuvJ
MD5:	E3828224AC2780E4EC9EF8E2C2A15500
SHA1:	662A3A4767A7A4197EF2C3988EC81613E0FBF3B5
SHA-256:	9C6D21234D6D91925F4E4F4074ACB17F349CD75BB45B2E3786739D67655D0846
SHA-512:	BE150C516DD254923178E77EAC02FB4C83050B8183AA5F0A535E1DC24DACACEF7F087FB06A094B394E02D28C7E4E0CEEED4EBF7D8248CA3413E29746248C0415
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/cloud_docs/loading_page-vfl44KCJK.css
Preview:	body,input,textarea,select,button,.normal{font-family:"Open Sans","lucida grande","Segoe UI",arial,verdana,"lucida sans unicode",tahoma,sans-serif;font-size:13px;color:var(--dig-color__text__base, #000);font-weight:normal}.maestro body:not(.dig-Button),.maestro input:not(.dig-Button),.maestro textarea:not(.dig-Button),.maestro select:not(.dig-Button),.maestro button:not(.dig-Button),.maestro .normal:not(.dig-Button){font-family:AtlasGrotesk,sans-serif}body{background-color:var(--dig-color__background__base, #fff);min-height:100%;margin:0;padding:0}a,a *{cursor:pointer;outline:none}a{color:var(--dig-color__primary__base, #0061ff);text-decoration:none}a:focus{text-decoration:underline}a img{border:0}p,h1,h2,h3,h4,h5{margin:0 0 1em 0;line-height:1.6em}h1{font-size:18pt;font-weight:normal;margin:10px 0}h2{padding-top:3px;padding-bottom:10px;margin-bottom:4px;font-size:10pt}h3{padding:0;margin:0;font-size:10pt}h4{margin:0 0 0.5em 0;font-weight:bold;font-size:14px}h5{margin:0 0 0.5em 0;font-

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3319
Entropy (8bit):	7.8575716148182195
Encrypted:	false
SSDEEP:	96:t5lSI71nPxWZ52FLIs6bqPXzg7axScZWIwHqYfZN:ToI71PUv2lIs6r7axBWIwZfP
MD5:	DA7F263D7E44EB65E76522941FF95B79
SHA1:	C102BF1E458401E9E05BCD3C9F641C8235986299
SHA-256:	A53A8D6DAD77F024A0677D32B9410D45C3D3E7ABC11EAD59C93D9808D281DB7B
SHA-512:	27BAF203306C4B1DF08D605232AFA7925173B14AA1F9143F7B6A31B17A7D037BEFDB817C59FA7AB242AF4296196BCB959D15BA6C25B936E0D899C288C37A0AA9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[]l\G....{..c;N.&.iJI..(mQ.........7@%@.T....!Q..O}@.@.......6..B..T)R.R~...Nh..6...b..{........}.]..N....sf.7.o...H#...?..I...)!<J.....'.9.j.6....=.".Y......Gc~.&3..........}ef.._-9..Y...W.[.....oiz...g...p......WI..`...7C.}$...Yb9......6.......e.t...X..z...............\.<U...........].Bj?.u.P.7n..V..@# ...@..x.._>..z.ZZ..8\|...D....{h...........'.i.]..[.zW..;{...so......<.u..B.f.......?....zRk.(.F..;.Y.........S:.J...!B.C......w].[....o....0rp..:.vh...i.Wp..4...X..@.L.X.-....c.fh"&.;..B.J.P)..J:....:....\.....ynm.....:E.FL..hz'.,... ...;Kk....Rz%.D..........N..e..Yj.....;\|...m....rJ.....T.....Lj...<`dx.^%xP..}..sp.1.....0G.....XN.B.\..h.....E.P.T.-.....xi.."P:+..Z.........n.$..@o...:..<.Q.3.N...I{...c...sH..u..6..............)C.E.6p..4..F.....].9}..ze.....YN0..2.(...(B...]....Cr"W..S..U..X........e.;..v.=w..Id....,.I\|C.~.................i

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 233280
Category:	downloaded
Size (bytes):	65210
Entropy (8bit):	7.993737067547282
Encrypted:	true
SSDEEP:	1536:N9eMcC2NX46jvPJRZ/zb5qlLXAUN2UNef+b4u3f4Mo65TYF:NEMX4XTvhjzbALQyMe4uP4Mo6A
MD5:	C30A969FCF7B3398F8A4D7EAA4063148
SHA1:	7C8B50D7335159A130A8862E1CCB1C8C2944D700
SHA-256:	7416596F1B81C7794CBBB4241677F3F7F4A2A9B77E64BF16160E3734EFE7FE4C
SHA-512:	FF385996511C61621A891492AC3CCB08B4A45C854FE70CE7F3DBCB5231DA3BD1C642C2806C8603AC4938C4128B513F97EE161D89ABB396204623AAF366A7EEFC
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/ce3721cd78168aca8dff.TOBxGySy4L8Jev4cz1MMkll3TM-ZkPmz6kB0Q7cRP8c.js.gz
Preview:	............w.6.(....[w.W...Q....v.....N.;....qh....I-I.....\|.)....{.97}b@ .B...B.....\|Q<.........7.Q.........O.WW..s<?_\.G.uu7...?.....s....Y.g9._.77W.Y.xU..'...@.......T../...jQ.U......Ow.'..}..6={...u>.."..Vm..M:J?.......:..\..CR...c.k.=...v.$.}...`...dX%./...8...j...p.5.q:..%.i.H_.z8.n..7..?...Q.....;::.....i~[....x..Y...2?.L....A..=...%PK..=.......`.j..S..+....Zn...J..b...X.M.\.....-.....-...d...[.e. .k-@...r4/.yR....]./..2._.U.L..E..nbHI.......7..N...>:...e6O..u3...i.4.h...dS.8N.......UZ..(..e..6...W-....o...j.^.....^n...RC..n.e../. ...N..>q..6.xnyt../TM...C........j.....r..L...iA5-.&..>........H.....1.=.D..;8.F._hGx.sQ...hu.....5....A.^;}'a..I@Z....!.Su.:<i.7...S.rj.b...../......^.....a:".h..Y.jNx...x..N...K.-.\|...m}.U.<.\.)......iD.[.a.....L.(V.)...........tC.....<..3.k.5..z5..x~l[.C%.. ..\~...y3A.A%...A.K@..]C!C..y.!..j..j..5+....n[Xn{3..j....)..]z.........7..2..K.........p.......nV.(.u.D....(i)..DH.e.x.....).......T.f.....5.1..R...

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 85096, version 1.0
Category:	downloaded
Size (bytes):	85096
Entropy (8bit):	7.997143828952949
Encrypted:	true
SSDEEP:	1536:CHEKYQoriayzxUhQXTDF1PYOvyQV5xwiJliuCHx673ZwCMbrYBrMYADfSvlsBJ4G:CkKAilzLXTJ1Plv3zyiJliuCHxA3PBro
MD5:	95E97662A93CAE50B0DAB432DF119AEA
SHA1:	8D2582583203248D7E7091643B206B41670F06B4
SHA-256:	7DDBB15E310036B76C1DABC3D596A153E74FEEA6EF999152A68264A37DF173B4
SHA-512:	D51AF73C37F0500C9EAAF67E38C6ED47D658862F59C776960BA8C9D7977FCE65BC2793FCE79D0BCC2F06E205F9DAF1E414E6C298C5C12B2C43F4919F5C7DA965
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Medium-190618-Web.woff2
Preview:	wOF2......Lh......-...L..............................d.`....<..s.....8..{..h..6.$..d. ..L.....Z[)........$j....1..!&.T.V..........o".t..@....g.H1..}.a.....@.f..........d....v....J.....w.G....L....cr/0....yO..2....>.(..2..Vi.R.,..&..\|.e!`\m..3Kh.R.d...B.,....h.....Y.t..d.n.....R}...;1.'$.:NP../X=....s...:.N.........#..e..R.yw(4......&vJiDo.EH.jcv..3...lh...%..{.J.p?.L....L....[T.T...+.].$...."/.R...t].T.B.v.lo..]...ke.7X\..'...pbG.s.B.".Y...\.^..+.....@.................W......S?..E.oo..O..._..T.(`."P.8_3{a..7..$.....#.9..@..?......w.f....'..L..#..8..................r....t.q.W7.h.P~......mnT=H3x....E.fHU...eF@.q.>D.&..ZzWb....FM...-.......=$.D.8....+{_.J%(...R................!...d..>.N...s.....)@.[6..S....^.J..NA%KN.$.p.......7.m7.d..4.4.0..w.S..\.{.{@..#..f..V...=.....^..}]J..G3.O..YICS....7.....f..2..u.....x.G.5$V..u..Di.:.............07k.....L...Y.8K0..U. ..g..-..).."..lS.UX...o...;..V..2.D'.b!V.a..`#.511..1......t.ElJ.`J...Mx.M.b.

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37765)
Category:	downloaded
Size (bytes):	38876
Entropy (8bit):	5.135981956246058
Encrypted:	false
SSDEEP:	768:Rgs3H3fi5gveV67ScgnEFEL7jRddvh85N86IWB/YUlXiA0v4wDVCkQ:hM8FEL7Vvh85N86IWB/YUlXiA0v4wDM
MD5:	15E295DCE700091B89FB7BD73A35EC95
SHA1:	A85B828EDAA48115641C94A903E99E0BD93479AE
SHA-256:	0C6FC1E234D334143B8D39611C98668C32A1A1714B3D79FDB1B4306017021417
SHA-512:	B26826DCA5B72FA7964D18F48187F6A5C73C94A45CDF515BF3C16425A3EC0516AD661AD298AC666017616FA87B8635FC2708EC5E5F05FCAFF67DFEABC19A96AE
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-account.min-vflFeKV3O.js
Preview:	define("metaserver/static/js/account/change_email_modals",["require","exports","tslib","react","ts-key-enum","metaserver/static/js/account/email_verify_reasons","metaserver/static/js/account/set_password_modal","metaserver/static/js/clean/form","metaserver/static/js/clean/ui/input_dig","metaserver/static/js/components/ui/modal_controller","metaserver/static/js/clean/ui/modal_dig","metaserver/static/js/clean/viewer","metaserver/static/js/core/i18n","metaserver/static/js/core/notify","styled-components"],(function(e,t,a,s,i,r,o,n,l,m,d,u,c,f,h){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.ChangeEmailModal=t.ChangeEmailWarningModal=void 0,s=a.__importDefault(s),n=a.__importStar(n),l=a.__importStar(l),m=a.__importStar(m),h=a.__importDefault(h);const g=l.text,p=l.password,_=[r.EmailVerificationReasons.ADD_COMMENT,r.EmailVerificationReasons.SUBSCRIBE_TO_COMMENTS,r.EmailVerificationReasons.SHARE_FILEVIEWER],v=h.default.div`. .change-email-input {. width: 100%;. }.`;cla

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3319
Entropy (8bit):	7.8575716148182195
Encrypted:	false
SSDEEP:	96:t5lSI71nPxWZ52FLIs6bqPXzg7axScZWIwHqYfZN:ToI71PUv2lIs6r7axBWIwZfP
MD5:	DA7F263D7E44EB65E76522941FF95B79
SHA1:	C102BF1E458401E9E05BCD3C9F641C8235986299
SHA-256:	A53A8D6DAD77F024A0677D32B9410D45C3D3E7ABC11EAD59C93D9808D281DB7B
SHA-512:	27BAF203306C4B1DF08D605232AFA7925173B14AA1F9143F7B6A31B17A7D037BEFDB817C59FA7AB242AF4296196BCB959D15BA6C25B936E0D899C288C37A0AA9
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/img/ace/emoji/270b-1f3fe.png?version=7.0.1
Preview:	.PNG........IHDR...@...@......iq.....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<.....IDATx..[]l\G....{..c;N.&.iJI..(mQ.........7@%@.T....!Q..O}@.@.......6..B..T)R.R~...Nh..6...b..{........}.]..N....sf.7.o...H#...?..I...)!<J.....'.9.j.6....=.".Y......Gc~.&3..........}ef.._-9..Y...W.[.....oiz...g...p......WI..`...7C.}$...Yb9......6.......e.t...X..z...............\.<U...........].Bj?.u.P.7n..V..@# ...@..x.._>..z.ZZ..8\|...D....{h...........'.i.]..[.zW..;{...so......<.u..B.f.......?....zRk.(.F..;.Y.........S:.J...!B.C......w].[....o....0rp..:.vh...i.Wp..4...X..@.L.X.-....c.fh"&.;..B.J.P)..J:....:....\.....ynm.....:E.FL..hz'.,... ...;Kk....Rz%.D..........N..e..Yj.....;\|...m....rJ.....T.....Lj...<`dx.^%xP..}..sp.1.....0G.....XN.B.\..h.....E.P.T.-.....xi.."P:+..Z.........n.$..@o...:..<.Q.3.N...I{...c...sH..u..6..............)C.E.6p..4..F.....].9}..ze.....YN0..2.(...(B...]....Cr"W..S..U..X........e.;..v.=w..Id....,.I\|C.~.................i

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://larationr.top/aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.260314512731484
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH1iHQeBRX6FDk1Ag6n:MMHdVBKW/UTijIg1F6
MD5:	874332CE72C707DF2A3CE5B842469422
SHA1:	EC9460D34843353CDE6D3632DDECFFB3C196BD77
SHA-256:	D2DE73B5E73646094064C943979AD8CA97CC0F4082908383607CD90B4E97C17F
SHA-512:	8A01CD1576172F227A27D5DC1F441CF85D2B0157025CE4A4DEB892A3A57F824B617CCFC6E66D6D2836099B3FF3A89125C20C81459535B4CE1B7D2B43AA54F9B3
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/shell/images/signup_ms_logo.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:7a70a18b-b01e-0059-5fd0-cb4d42000000.Time:2023-08-10T21:19:44.6039691Z</Message></Error>

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 82560, version 1.0
Category:	downloaded
Size (bytes):	82560
Entropy (8bit):	7.9969346853325245
Encrypted:	true
SSDEEP:	1536:Qm6+Juu2ZGBB/hVq73dtJEiO9fqsyAD7S1ULwSzuIAm4YBD:QAJuu5B5VqDdtOpvea0sD
MD5:	3777CF6535DB972DF634D4CB16895797
SHA1:	C82654E2FE488D321F3CE0FA494F846530E25875
SHA-256:	1F8D64D90C3DF5741AE4A60E80AE4A2CDCB7D212B12AA9A822F18FBF93FD2AB3
SHA-512:	428C278A5901CBA420E354D5BC6B55DE45F47F78E5C28508487D7A250DCA28C3AEFDDB998B2FD26C9E4750E8F11B6DD35648897D718896317D3BF87FA3ABC3EA
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-RegularItalic-190618-Web.woff2
Preview:	wOF2......B........x..B............................h..d.`.......s...........4..6.$..d. ........l[.g..Sd.....v.F..O..z....).H.!...Y.E.%c....c-$..!.sl.!....3.........gM......Z+.X.V...]B.y..b..B..5m../...!_V....7.{@...S..].2.m;5Yv.M... ..=I......U.K......":.W........].S..(...xI...q..X...Z.\| ..@...).o..+5Mz.ks.,...t.....!.3.'I....>...2j.R.\|....e..cp=.....p..m.;h..Y. Y0.....K......I.!{.....R..%..:.A.e..".........=..(...9=.EJ.R.0.)%.Z....~...qV..D.r\|...6.M.%.....\...Twx..>....\|j/mdi..../.F.....b{....{..........61x...'.v.u. .....Zy{.}Rc..2.....Z.....m....a`Uf.P...n?...A.!]L......3(TMn..b...N.&<P^..-.-.%R.S1.'.\|>..._.g..{.,.l...4g...T@Y....b./..,a.....O......v.....Eo.Ce......&...Q1....y.h._W...p.5m..,.q<....I.s..&...!.T<M.].f_&....<":..P..`.....iV].'......F%...@.t..I.\|zA......"C..,}!....K...@eH.lo.k.+' .._8.ri.@.....')!!!))%)-%-##+++.v...................=8Y9y\|\|..[.g...N.......,...w.>E....../...6.....$../...........-];H.>.7.....0...T...R.....*.S.

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65522), with no line terminators
Category:	downloaded
Size (bytes):	696631
Entropy (8bit):	5.359493047645591
Encrypted:	false
SSDEEP:	6144:gJGGazytTerc0MGxDRqwruJ+jGp9HE13TDcc3FTGeFZ:UGuGmoohEnie
MD5:	FBB5EF240C03CF6B284876F9D578B17B
SHA1:	A395647BF426FD5DC280A4927995CE29251E5342
SHA-256:	AE24AF7EA53357E3FB4C776201C069C5FDDDC0BD6E6C0A2D833E6F8F9A9F892E
SHA-512:	2719597F79414A89EA9B495D5F005B6FA50EA05D982C027E107949FE52F0775934DC201160BC491591EC35DC840447DA05EB272410163B9F19648A4A72373251
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-sharing.min-vfl-7XvJA.js
Preview:	define("js/pap-events/organize_around_people/click_create_group_suggestion",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Click_CreateGroupSuggestion=void 0,t.PAP_Click_CreateGroupSuggestion=function(e){return{class:"organize_around_people",action:"click",object:"create_group_suggestion",properties:e}}})),define("js/pap-events/organize_around_people/click_match_group_suggestion",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Click_MatchGroupSuggestion=void 0,t.PAP_Click_MatchGroupSuggestion=function(e){return{class:"organize_around_people",action:"click",object:"match_group_suggestion",properties:e}}})),define("js/pap-events/organize_around_people/shown_create_group_suggestion",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.PAP_Shown_CreateGroupSuggestion=void 0,t.PAP_Shown_CreateGroupSuggestion=function(e){return{cla

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (423)
Category:	downloaded
Size (bytes):	482
Entropy (8bit):	4.818829452715539
Encrypted:	false
SSDEEP:	12:QTgfxNBd5yZEB9GNT2nOoRcp9e9Iu2RKPyyzy8VKY:8ghdwZEPyPyzvVKY
MD5:	5469DBE753C3B16DCF884F4C30F8BB9A
SHA1:	7F43ADEAA27828C963428322FDA5FFD7CCE42532
SHA-256:	6EDFDE42889DAFBB08F0D5E0BD533C0CAEC97F33513D70862E1F877993BD9629
SHA-512:	63957FEFACF888E78BFFD35A9E7600B768818281432DC6AB8386A7FAD192018655A912DA2CC6EEFEF85BF7823B544B437DEEB2092BB4F6ED772344CFB578064F
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-progress.min-vflVGnb51.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/progress_indicators",["exports","../../common/index","react","../../react-transition-group/CSSTransition","../../common/index.esm3","../../common/_commonjsHelpers","../../common/extends","../../common/Transition","react-dom"],(function(o,e,n,r,s,t,i,m,a){"use strict";o.Interstitial=s.Interstitial,o.ProgressBar=s.ProgressBar,o.Spinner=s.Spinner}));.//# sourceMappingURL=pkg-dig-progress.min.js-vflpo2KQA.map

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	292
Entropy (8bit):	4.732763378845963
Encrypted:	false
SSDEEP:	6:UnKq8fCEap95RVvWR95RVvWcF7lIANAL0NueXtBQVn:2XkCdh1WRh1WcVS+uatBQVn
MD5:	BC0928158EAC5A1DF70E02C1DA3FAA45
SHA1:	6AD279A30FE941809FA741BDB742EF5298150A3B
SHA-256:	7B5E58EE749D0FB60C08241AE892E833E203ADF562B216487B1F1F3D0D690A4C
SHA-512:	0C33F2A4BA5342D322482A9C369B57EA8CDED931ADF1914051C430714F043FEAB48A8AF491F8A54DEEE889964A79F1DC9F94237E5E42992DCBDCA21D506C4E41
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/cloud_docs/frame-vflvAkoFY.css
Preview:	html,body{width:100%;height:100%;overflow-y:hidden}.cloud-doc-iframe{position:absolute;width:100%;height:100%;border:0}.gdd-doc-iframe{position:absolute;width:100%;height:100%;border:0}.third-party-cookie-iframe{width:0;height:0;display:none}.paper_integration .devtools-portal{display:none}.

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3163)
Category:	downloaded
Size (bytes):	3219
Entropy (8bit):	5.178298974638202
Encrypted:	false
SSDEEP:	48:l9u7o8pyAyoMH9MgdAcMzfHMUrGsycX5XyX5XP0XmpYQ3blHP4fBi+SCyt:rapL1c/Gc4GsycpCpf026ffBrK
MD5:	CA96C5C279D6FFFD534A5B63EC0D7BA8
SHA1:	CDFF7BFD277DB1AFDE355F062B53EEBCFF9FFDDE
SHA-256:	54ACE8C08A67787D6ED3D7D16DA681A67994559E24AC040A541E3E3EBCAB1743
SHA-512:	FB4CA4C7BD73C412F04591A8D1906C5000EE68CFBF556BBAF5D1F0A8A9F83592889A38C425EE56D2826EBDA79B14EF361E915ACB9DB2E91F8D779313EB21A686
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-mcl-icons.min-vflypbFwn.js
Preview:	define("spectrum/util/raf_throttle",["require","exports"],(function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.RafThrottle=void 0;t.RafThrottle=class{constructor(e,t){this.ticking=!1,this.currentRequestId=-1,this.request=()=>{this.ticking\|\|(this.ticking=!0,this.currentRequestId=this.window.requestAnimationFrame(()=>{this.thunk(),this.ticking=!1}))},this.cancelPending=()=>{this.window.cancelAnimationFrame(this.currentRequestId)},this.thunk=e,this.window=t\|\|window}}})),define("spectrum/vertically_fixed/index",["require","exports","tslib","spectrum/vertically_fixed/vertically_fixed"],(function(e,t,s,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),s.__exportStar(i,t)})),define("spectrum/vertically_fixed/vertically_fixed",["require","exports","tslib","classnames","exenv","react","spectrum/util/raf_throttle"],(function(e,t,s,i,n,r,o){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.VerticallyFixed=void 0,i=s.__importDefault(i),r=s.__i

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61314)
Category:	downloaded
Size (bytes):	61375
Entropy (8bit):	5.5031148247738875
Encrypted:	false
SSDEEP:	1536:y3GOMHWxEv8G2zJb/yX2iWXRuP5u+Rr1TlG8:yWOMHmE8Bzt/yuhYblL
MD5:	612FDCBDA8C863554CAA8FD2B153267C
SHA1:	806212B956AADC63817AF6401702C8756A0FCAC9
SHA-256:	3587763A1F099BD6D189A0F0B393D75A2CCC2A580FC7B9082A8627FA9F9EBE20
SHA-512:	F429C5CBC70FC2DAE10744BDB5C821F6D8E931FA5121F2A70BB20B8A19513835FBB612FB5D6A8078FC1D89A24374FF0168CBF0F7C2013B4654682192B5A995B8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-core-analytics.min-vflYS_cva.js
Preview:	define("typescript/dropbox/proto/hql_events/ux_analytics/ux_analytics_events_pb",["require","exports","@bufbuild/protobuf","../extensions_pb"],(function(e,t,n,a){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.UXAnalyticsScrollPage=t.UXAnalyticsDismissModal=t.UXAnalyticsShownModal=t.UXAnalyticsHeartbeatPage=t.UXAnalyticsDismissPage=t.UXAnalyticsSelectElement=t.UXAnalyticsSelectLinkNoSessionStorage=t.UXAnalyticsSelectLink=t.UXAnalyticsShownPage=t.ElementPositionFields=t.TimeAndLocationFields=t.UXACommonFields=void 0;class i extends n.Message{constructor(e){super(),this.urlPii="",this.orgReferrerPii="",this.httpReferrerPii="",this.previousUrlPii="",this.requestId="",this.visitId="",this.requestSeq=n.protoInt64.zero,this.uxaV=0,this.instanceEventCount=n.protoInt64.zero,this.instanceInitTs=n.protoInt64.zero,this.spaSource="",this.hashFragmentPii="",this.variants="",this.adobeTargetVariants="",this.warpVariants="",this.cmsPageUuid="",this.paramAd="",this.paramCamp="",this.pa

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 216
Category:	downloaded
Size (bytes):	181
Entropy (8bit):	6.827201655249741
Encrypted:	false
SSDEEP:	3:FttBNlSlCOdGdi/gYNHuP23diB6eFtMENub/lmoYmSGXSRj/zo+INulWIgOP/ht:XtVSoOdKOgYNOP23diB68MVb/lmdRno8
MD5:	6BF47ADC17B49450F9B48DE8B1159C36
SHA1:	8147D0E908A817FB6BDEF6E003E96715998C7682
SHA-256:	2CBDA27DD954AA22F100ADF799245CB60592E365A5CCBC88F9977E96F2122ACC
SHA-512:	588B7DF6B84220048ADA5C46728FC389624D7ECBBE6B3C438980F21F56D2904CD4E6E686D0E73A6124BD425EC4CDC993605F658A210E294499B89F79444D3A57
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_native_desktop~paper_pifs~paper_te~b48e404f.fe9af606aefd018129cf886d5e3f19606dbbddff.U3P7jv3GEaRkYi8e_Tzgd_iua_HB6JPDDd6wz0Flp6g.css.gz
Preview:	..........=....0.Fw.Bp..6ZK+.8.8.$.^..I.(b.]..x.w...{.R.]...>>....5 .M...b1.6y...6..q.u..R.@?eH.......U!.mhHh.?7".;r.p..e.4...'.t........n...c.^Q......;...D.....+..:.......

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52357)
Category:	downloaded
Size (bytes):	52421
Entropy (8bit):	5.426025145950107
Encrypted:	false
SSDEEP:	1536:ncPPfP8jPPUoiiSagwtzFQxP4bPxxPhJPQ7PEjPWYVXHlOv+Wpeat6+:cfOBFaaTDamuYVS+WpeatH
MD5:	949BF8F850020DD12352D2CA1233DBB7
SHA1:	5578416A6AD1CEB89E17C6C433C6BFC5A8601BD3
SHA-256:	F3D1FF544B1DE037CDD8239D3D1233BEC277FDA7B8D09327E8BF59FBE5BBEB75
SHA-512:	0BDD7A9087A1CAAA2C116A235A7144D4FD365BC21545B2A947805E304B8B782D6C1F04A20EB367EB0F935B9EFA22E8F199E6FAA97DEAB1D034D3A9F3453203CD
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-campaigns_toolkit.min-vfllJv4-F.js
Preview:	define("js/pap-events/campaigns_client/cancel_campaign_sequence",["require","exports"],(function(e,a){"use strict";Object.defineProperty(a,"__esModule",{value:!0}),a.PAP_Cancel_CampaignSequence=void 0,a.PAP_Cancel_CampaignSequence=function(e){return{class:"campaigns_client",action:"cancel",object:"campaign_sequence",properties:e}}})),define("js/pap-events/campaigns_client/complete_campaign_sequence",["require","exports"],(function(e,a){"use strict";Object.defineProperty(a,"__esModule",{value:!0}),a.PAP_Complete_CampaignSequence=void 0,a.PAP_Complete_CampaignSequence=function(e){return{class:"campaigns_client",action:"complete",object:"campaign_sequence",properties:e}}})),define("js/pap-events/campaigns_client/confirm_campaign_format",["require","exports"],(function(e,a){"use strict";Object.defineProperty(a,"__esModule",{value:!0}),a.PAP_Confirm_CampaignFormat=void 0,a.PAP_Confirm_CampaignFormat=function(e){return{class:"campaigns_client",action:"confirm",object:"campaign_format",proper

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 78992, version 1.0
Category:	downloaded
Size (bytes):	78992
Entropy (8bit):	7.996774816040856
Encrypted:	true
SSDEEP:	1536:zbQC+WBW4KFawRjjXGLBFoadyiQMeJZjAt+JHKReyy2Bgvcf8xGj:PQCf5wRjjWLB1dRQdjDJZ+BgvEH
MD5:	CBDA27012EF85AF41A43B5F63F8F01DE
SHA1:	1013AF6F986DFE48FB0B1DD32FEEEC6D9832F92F
SHA-256:	85562292D87897A6E0F1EB0E1DBACDF1F89B6A607393484F1B5D5987CD7908BC
SHA-512:	0ED76162E316CFC4B8EF08E86D8DCFC7C1F24F279727DFF657BBB9742983BC9FA33213C040A64E80502C4D45C1AEB99042AEB727B573836D0A146FE98B60F339
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/AtlasGrotesk-Bold-190618-Web.woff2
Preview:	wOF2......4........\..40...........................t..f.`..\|.>..s.....@..H..4..6.$..d. ..0.....T[.[...6..om....ZUw}...-.(.?..r....%j.5<._..h.+.....]oV.,............]2.s...$9q..._.B....F.A.Q....Z..j..D..np..<^2<....f......8j.J8.2.....2...j.V.g.i.E5......H1.o=.\.;L......].H...L..z.....Yd4......].Z..w.3.i..=F.Y.m...aY"...w&_..p{....{.hO...:.n.x.8yQ....L.e.pi.].~....."&....F.W...""..".A...ff+...l...2.O.G..y.....D.0..U........e..Q%.q.o...&."..;.<h..+...xP.a..a...../4......\|A(.U...f.....;.....r.r...Gg.k..A...%.J.......\%U&.+x..\|.....w...U..YcB.2K.{>.&.....O.5G........z..Sk.].......P..K...-.9...X.?..+7..&..S....q.3-....p....X...J.*.O...z....wI...s.....R.......(...4k.....<..l........p4....O_..}jBIM...E&.................$\|...a6xJ...q......S..R3.5.b...f3D..cE@\|g...........,.x..Q...F.8...a.""..... ly...-...?...g......pi"..4.......h......]}...8<9;g.....J..j=.v........F.jTm..........B.Y....{D.5..K...$.@h.>.....=...J4......b.X(...X....."j^..W\|.n..h....6...Q1..1.

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (858)
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	4.841738130865104
Encrypted:	false
SSDEEP:	12:QTgfxNBd52LfhB9nrddskeEoRctopJkpjNT2nOe9Iu2RdoUJ4MDqK/Km4nTgfxNh:8ghdEbhPsTQJTuQ7GghdbapdXs/js8
MD5:	761E6A56C40602553B5765B9A9B19ADD
SHA1:	F442C27B84B5BC9C5C8BC4C312E5E6A58866C07A
SHA-256:	5075519B8878EFD4915E02C11423F307D2FBB6920ECCC88A58AEA4AA9E0FCC06
SHA-512:	2676519E3E3470CE05A1F5E86B042375D3131D7DF3C6E738CF566665EB13C29DB4459CF19FEE43F5F769C416F9F4DFA1A5293BF0D774623CF652895C11FCB306
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dig-d.min-vfldh5qVs.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/buttons",["exports","../../common/index","focus-visible","react","../../common/pictogram_icon","../../common/chevron-down","../../common/index.esm3","../../common/index.esm4","../../common/index.esm2","../../common/_commonjsHelpers","../../react-transition-group/CSSTransition","../../common/extends","../../common/Transition","react-dom"],(function(o,t,e,n,m,s,c,i,r,d,a,u,p,l){"use strict";o.Button=r.Button,o.IconButton=r.IconButton,o.SplitButton=r.SplitButton,o.StylelessButton=r.StylelessButton})),define("metaserver/static/prod_assets_web_modules/@dropbox/dig-components/typography",["exports","react","../../common/index","../../common/index.esm","../../common/_commonjsHelpers"],(function(o,t,e,n,m){"use strict";o.Label=n.Label,o.Link=n.Link,o.Text=n.Text,o.Title=n.Title}));.//# sourceMappingURL=pkg-dig-d.min.js-vflYDGkqk.map

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	228581
Entropy (8bit):	5.223873821636117
Encrypted:	false
SSDEEP:	3072:H7b73vmxkXfmzDLk6Pp/en4CYjd+Lo5QIeQ0H:b33vekXKk2p/eHYILo5Qd
MD5:	84B399257C7078B6C8051DA088694690
SHA1:	1219498C3CAF8229F5B22EC8DFAC409995808ED2
SHA-256:	2E8859F136956CE2AE0C5330BF402A9CF673B6A5191E394232FA2CC6364C3C43
SHA-512:	4BB038DC7C07AD69E109A27A5ABD8FB9B22EADECA72BB8C0FB35ABE0DDC56F3FDA358064E1FE0425EDABC7303D9AC99A66A88A28D9CA58B031BF6D7A3F9DBEED
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/admincenter/admin-pkg/2023.8.3.2/en/jsc/microsoftajaxcombined.js
Preview:	var $get,$create,$addHandler,$addHandlers,$clearHandlers,$common,CommonToolkitScripts,$AA;(function(n,t){function vt(){function ru(n,i){function l(n){if(typeof f!==h)throw Error.argument("value",String.format(t.Res.enumInvalidValue,n,this.__typeName));}var r=this,u,f,c,o,s,y;if(i){if(u=r.__lowerCaseValues,!u){r.__lowerCaseValues=u={},o=r.prototype;for(s in o)u[s.toLowerCase()]=o[s]}}else u=r.prototype;if(r.__flags){for(var a=(i?n.toLowerCase():n).split(dt),v=0,e=a.length-1;e>=0;e--)y=a[e].trim(),f=u[y],typeof f!==h&&l.call(r,n.split(dt)[e].trim()),v\|=f;return v}return c=i?n.toLowerCase():n,f=u[c.trim()],typeof f!==h&&l.call(r,n),f}function uu(n){var u=this,e,t,r,s,h,c,o;if(typeof n===f\|\|n===i)return u.__string;if(e=u.prototype,u.__flags&&n!==0){if(r=u.__sortedValues,!r){r=[];for(t in e)r.push({key:t,value:e[t]});r.sort(function(n,t){return n.value-t.value}),u.__sortedValues=r}for(s=[],h=n,t=r.length-1;t>=0;t--)if((c=r[t],o=c.value,o!==0)&&(o&n)===o&&(s.push(c.key),h-=o,h===0))break;if(

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 352
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	7.146872106953667
Encrypted:	false
SSDEEP:	6:XtGeY5R6bwlfK8WyRy7UPWsknVIq5EGdZ7KYvwY4qtOOES1THs+rqEHq8En:XIxqwlfnZRXWskVIqxb7/ZO7S1THscDw
MD5:	6C3194FDC28B6804D557BE186D86036E
SHA1:	FDE62337E5100311CE52FF10B68EDB08945C2A7F
SHA-256:	6C32483F9F14971B245A1B43F460BE9385331EB0CCF466621E3F93FD89040693
SHA-512:	B175811F9B35B9737C49EC55580288FDF0F4B164E5392ECA6D505E1E91B52C232F54EA86937D1C674C038ACF7C074C5CD4650843B2F686CF12304063B14287A4
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/0f87dfdb09fdf4689436.XmWd3ZCjNs5ikVl6X4w5UBoJH0WCva2GW011KNNjeIU.js.gz
Preview:	.............n.@...>...H.0*.0,.E[..6TSc&#.S."C...".^m...s..;.~...gD.r=..G..o.N.x.{..B.....no.4.G}..2.."..TNc..L.e..N.'.."..&3..!.@!.!O.).)d.K.S#..J.<..,.........4.s...>n....4..[.f.g.G...jo.j5..K.g..h.....^.G.R.XVJ.2...D.8YRQ...8...a..Bv....v..[..=mX.m.y..?^...>...x.......7.....G.D.....#`...

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.945787382366693
Encrypted:	false
SSDEEP:	3:yionv//thPnFuXf8Lts7CX9/gm6Kp0syxtuIdsvFQAahUMZ/jp:6v/lhPBR/C+aNuqsvFQA0UMpp
MD5:	3EDA15637AFEAC6078F56C9DCC9BBDB8
SHA1:	97B900884183CB8CF99BA069EEDC280C599C1B74
SHA-256:	68C66D144855BA2BC8B8BEE88BB266047367708C1E281A21B9D729B1FBD23429
SHA-512:	06B21827589FCAF63B085DB2D662737B24A39A697FF9138BDF188408647C3E90784B355F2B8390160CA487992C033CE735599271EE35873E1941812AB6C34B52
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6678.19/resources/images/0/sprite1.mouse.png
Preview:	.PNG........IHDR...X..........x......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..1......Om.O ...j.a...\BW....IEND.B`.

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 328009
Category:	downloaded
Size (bytes):	79619
Entropy (8bit):	7.996784510263948
Encrypted:	true
SSDEEP:	1536:+eg+iFC2SddTvcLBfv+Q5dA3Fyb0GsN5rIVhVl:+eg+iFgdAl5dA34YGkJILVl
MD5:	629EFFA9F7B432972733489BCC0561F0
SHA1:	25F2176B8D9958830BF9685ADC7546EB8142401D
SHA-256:	3BDA574E3E830B76BF4DB7209D0F569EA5183C216AF2701AC4DAE9CD2D08BC3C
SHA-512:	578125B3E35B7ED44694A9B678685544E0B1166E327438552C2D096B256CC46213F548342025332BA40DB586BD204CF236CE3870D81CCB6325F57BBA0FCF21DE
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/c025b20740bee5bbd20e.CFVe0o7N1UFEbh-B9NSjEJmLH7rMhTo61iCmucFn2tQ.js.gz
Preview:	............r..(._O.h.z....N.8.V.:..q...c'..9).%R.;..&);jGS..........(.$w....@..l...S.w,..X....7.7^..7........W'G.........?_\].W......Vg6.'.O..3{.FW...F......a.s....1...#....x`'.{..$..3o$$......F...mms{{.7.......k%.....0.8.....(.j..X..+7>....6..k.:.=..[{I'...{..c.}..s?._..S..?.Y.e.nGa...z.O:.;...\|.?.'c..hu..%M.5.g.fV.u[..d..u.3...A..I..Z.ZV.w.j.W..a.w.q2..~$~.}..i9...x.y..u.\|r>.?}.._\|..}.7.t.%>t.bpC(c........Z.~.C..T.?..P..`y'..........-...]Y...x.5.co..........b.E..x...>->.y.f.i.......~....?.?......N&...4...U.+u..q....[{...T..-.7?...~.x..q.....o..l........Z.%...._`k.......2...{.0H.`.....}...Kks{g......Z..<.b...kG........E(.~..lY!..BT.........x./....~../..v....n.V9h.>...R.g-X.f..;....=L.h.j6b...t^..A........[.[/...nk....7......`.......<..`...^.f......~...9u/..6..4........J.C[w.S..Fu..=...U.Wh.u..A.\|..n.k...l.]..]..K&.p..~9...a.v..u..&.......:.G.,k..m.....B}M.=G.{.kv...&...dc...r...U.....9....w.Q.r6t.....Vr...t...R.

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Category:	downloaded
Size (bytes):	663451
Entropy (8bit):	5.3635307555313165
Encrypted:	false
SSDEEP:	12288:YhqblwQ9eTw/suNyIzaJS/pWYawUWufSxwDr2o/5YP1B:Yhqblt9e8/sMzaJS/pWYawUWufSxwDrW
MD5:	761CE9E68C8D14F49B8BF1A0257B69D6
SHA1:	8CF5D714D35EFFA54F3686065CB62CCE028E2C77
SHA-256:	BEAA65AD34340E61E9E701458E2CCFF8F9073FDEBBC3593A2C7EC8AFEACB69C1
SHA-512:	CEC948666FBA0F56D3DA27A931033C3A581C9C00FEC4D3DDCF41324525B5B5321AE3AB89581ECC7F497DE85EF684AB277C8A2DB393D526416CEB76C91A1B9263
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6699.8/scripts/boot.worldwide.0.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.0.mouse.js'] = (new Date()).getTime();../* Empty file */;Function.__typeName="Function";Function.__class=!0;Function.createCallback=function(n,t){return function(){var r=arguments.length;if(r>0){for(var u=[],i=0;i<r;i++)u[i]=arguments[i];u[r]=t;return n.apply(this,u)}return n.call(this,t)}};Function.prototype.bind=Function.prototype.bind\|\|function(n){if(typeof this!="function")throw new TypeError("bind(): we can only bind to functions");var u=Array.prototype.slice.call(arguments,1),r=this,t=function(){},i=function(){return r.apply(this instanceof t?this:n,u.concat(Array.prototype.slice.call(arguments)))};this.prototype&&(t.prototype=this.prototype);i.prototype=new t;return i};Function.createDelegate=function(n,t){return function(){return t.apply(n,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Error.__typeNam

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 78503
Category:	downloaded
Size (bytes):	21209
Entropy (8bit):	7.98790450844856
Encrypted:	false
SSDEEP:	384:ZRHAkte5JBqMjEco6MlJoHFYjizdp01ZzLfry1c2+KbVol6YApRjJF:ZpAkte5HqrlJoHFYji41Z/zy1c2+KbV3
MD5:	2083EF61249AD1C7AF5DC60E5795BEB0
SHA1:	5D06C85D9BA6C7BB34C321D900396DCD5C9E2290
SHA-256:	A7219D845059DC1CE6A7FC486CAD5F54E472361E80520E8F77914A0DAC493358
SHA-512:	44B09A97284D4857AD4A8A6CB6BE13570C5D25A2D735FE555C97371553C5C2F7B979C776C9A828BC733ECFED31BCFDAF2C516E7ADA04FF38B97B6C85AD88ED7B
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/webpack/production/89b15544be7d0981c0ce.4YByqBMD2GuNM2mQjudvyReJe0vGQKkrUDx6_ngAh1s.js.gz
Preview:	............n#I.(....`.3GI...dg.I..RUMI.=..".bv....T....`?...a...c....~4.}......?.V\2"3....q..`....u.uqo.x..//..?.....8:.<.....O//.Gk<<._x..<.....,...2.N.....W..K.y<.0.c0I...a2.D.0..WI.....4....._Q<..Y<`.........m..otw^.F.x.GI.2?.c..../l...l...}.@....}..e'.p>a....B..........,.....Y..$..i.o...............\|..!....E................O..3....`..v.[.?...u.....C.)...u...>.`...bhp.=.X.8..K....x...+.)\|.....N.....f...p...{........7,.....8..,e.w.............4e......!v....?`B...`....y.y.g.+T..'....a~.h.<.'Z5..c.v...Iv.:..Iz.N8.9..s.c...G...8...exZ.{.%iz..f.=...v.....I>J...'<.&.5..Y,<..@A.w/.l2....Q....}..}..Mg..4..n..)C.>I....8..dr.LgI..\.4e.<...\|2Y........}L'.E...#......+\|8~......sY;ON.4..]........a....G#7nOX\|...... >.E..w..q;._e..._\|.k...bo... q...m.={.v.ss...k....n...`..$..,..jm..]s.e..<./w..ub.>f.....p.2s..\|..)j[..Y..Y.,....)N.4.l.eZ....E.M..s.\|....h_ECq..n..7j.c?.....y..I.r.~.p...z..S......M..Y3...Ix5aP......@..nK.N.....i.T...Mt..'-..r6..Bn.[..wr

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	398672
Entropy (8bit):	4.8258811875558365
Encrypted:	false
SSDEEP:	6144:vi0BFwOq0lY5WNNehgz13V2b9WL/3V4Y+l7LxcEc+PyrkKhvDSfnASwNhNVY4/Y8:v7co/
MD5:	47BF6BC4C62758046FBC62FF1E90A465
SHA1:	AFE8949CD71A6740D27D26A3079311307D31A04C
SHA-256:	84E18B1DAE2C4F6778BF7F4097AC829976B117853EA32743B7047796A6C01AC9
SHA-512:	E054D457AF339B7ED030D55B17982F27971D49B95636836BBC473E5A0F644D6F91813D289FED57635499EBA70FEF0CD0FD0728E7ED0C184F91261E75742CEED8
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/js/packaged/pkg-dropbox-api-v2-client.min-vflR79rxM.js
Preview:	define("metaserver/static/prod_assets_web_modules/@dropbox/api-v2-client",["exports"],(function(e){"use strict";var t="app",r="user",i="team",a="dropboxapi.com",n="dropbox.com",s={api:"api",notify:"bolt",content:"api-content"},u={accountAppleLogin:function(e){return this.request("account/apple_login",e,"app","api","rpc","private:account_info.read")},accountAppleSignup:function(e){return this.request("account/apple_signup",e,"app","api","rpc","private:account_info.write")},accountChangeName:function(e){return this.request("account/change_name",e,"user","api","rpc","account_info.write")},accountCheckPasswordlessState:function(e){return this.request("account/check_passwordless_state",e,"app","api","rpc","private:account_info.read")},accountCheckUserWithEmailExists:function(e){return this.request("account/check_user_with_email_exists",e,"app","api","rpc","private:account_info.read")},accountCompleteRegistration:function(e){return this.request("account/complete_registration",e,"app","api","

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 77628, version 2.2490
Category:	downloaded
Size (bytes):	77628
Entropy (8bit):	7.997399359312532
Encrypted:	true
SSDEEP:	1536:fLgIYQv50I0Sbp9dEkMi0SKsk0wP33p5Q9xOstd0sT:07Qv50kp9dqidkZbOxXOsT
MD5:	748FD04DF3AEE82492EC3B5615213218
SHA1:	0AAC50D2E0FEE7EF3CD91C806A9A8A7F0E445B6D
SHA-256:	A7B709CDDAA8AE92BD3C9EC9D013295FFA3B408C5BA4EFA0395F78FFE1CC65F5
SHA-512:	33642738F6E3243360B9B970A5B4E36309EC13F5DC428ED83933C99940383614AF8525310AA9BE9C444E9605DD238A8CCA1B55E9118F214449320A2E866FA369
Malicious:	false
Reputation:	low
URL:	https://paper.dropboxstatic.com/static/fonts/SourceCodePro-Bold-2038.otf.woff2
Preview:	wOF2OTTO../<.......T.............................F......j..b..J.`..f.6.$..B....d. [f....c.]}.......fv.._................../..`..G.<..............\|?..xH3....6.....9..n..l.D...D......B....3'~V.n.yS.w.b./......H.X0..:n9...j.-......m.v.....RU&..v4...!..V..X.M.^..}JhJ./....4.u-...^'..H...E...d....>..e.......[.....}p....d...78..>......$.G.-1D.'..b.`gw...{.:.......C!QH.!P-....CB.....w].gb63....X.V........$...a.G..."....O.....Z..)...3bf1b!ff4.....M.q%V.oY...\.4..z\|.3B.....F..CI.%B.X..6.;..z.../...T.[.).T.JEZ.C..1...D.q.......>.N.x....L..7..q%NTX....H..e........UKR~.2.r+.;.D.3..3...%..lv;.....T.3v.%;..{.D'R..'..<..Mf6..RJ)..4....ffL.f."k..>.;....rM.!z...> .>[._`..h...N...kx.h..LsH.+:B\.....(...9J....,...5...>..../.1o.b..`...".....e..n......M...i.+:..B+Ri......2.r<....g...DB.I..J.<.8..#..P].e.LN+..&c.._L..I.Y.....-...}e7.<.$...;....]....yM.&m....(.._~..-....QQT.<.{.s.\|cL.2<wNw.\|s:wu.-l...9......V...t...7.a...b.u."f..B.!..h{.'...=..f..?C .f.5.p"A....Kb`j..

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	662286
Entropy (8bit):	5.315860951951661
Encrypted:	false
SSDEEP:	12288:YfmmzLJTD/JilMGk4hBR310FaHHxpJy7qVfb4cSPo:Yfm+T7US7SR310FaHHTJy7qJ4rPo
MD5:	12204899D75FC019689A92ED57559B94
SHA1:	CCF6271C6565495B18C1CED2F7273D5875DBFB1F
SHA-256:	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
SHA-512:	AA397E6ABD4C54538E42CCEDA8E3AA64ACE76E50B231499C20E88CF09270AECD704565BC9BD3B27D90429965A0233F99F27697F66829734FF02511BD096CF030
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.6699.8/scripts/boot.worldwide.2.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.2.mouse.js'] = (new Date()).getTime();.._y.lC=function(){};_y.lC.registerInterface("_y.lC");_y.jw=function(){};_y.jw.registerInterface("_y.jw");_y.lA=function(){};_y.lA.registerInterface("_y.lA");var IDelayedSendEvent=function(){};IDelayedSendEvent.registerInterface("IDelayedSendEvent");var IIsShowingComposeInReadingPaneEvent=function(){};IIsShowingComposeInReadingPaneEvent.registerInterface("IIsShowingComposeInReadingPaneEvent");var ISendFailedO365Event=function(){};ISendFailedO365Event.registerInterface("ISendFailedO365Event");var ISendFailureRemoveO365Event=function(){};ISendFailureRemoveO365Event.registerInterface("ISendFailureRemoveO365Event");_y.gw=function(){};_y.gw.registerInterface("_y.gw");_y.iB=function(){};_y.iB.registerInterface("_y.iB");_y.ih=function(){};_y.ih.registerInterface("_y.ih");_y.jy=function(){};_y.jy.regis

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	223
Entropy (8bit):	5.224870815338036
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8FWtkwgRTH189bxtHzMFDkGEsdWAg6n:MMHdVBKW/UTW91zUgPsdWF6
MD5:	26F92829F1CCA2B854C63E802F97277A
SHA1:	4C36AC85471A955C4F9A50C0286F98842719D845
SHA-256:	A30A21F16959AFF7A69710183800023BB06A045E9CBB20E908BB0B658356E279
SHA-512:	2E9E60C7D2BB910C83F6FD0E471BD7136F97D8D7FC337AE11EADB3167BAC182286E23C3DA9C0B3F440BBB71F6DD480DA60802F7200E5E08D0380CD048869A078
Malicious:	false
Reputation:	low
URL:	https://res-h3.public.cdn.office.net/images/servicestatus.png
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist..RequestId:0302d592-d01e-0060-38d0-cbb65e000000.Time:2023-08-10T21:19:44.2377771Z</Message></Error>

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (400)
Category:	downloaded
Size (bytes):	69950
Entropy (8bit):	4.965487921279896
Encrypted:	false
SSDEEP:	384:VTKNQce3HN2N70QZ7y767lii7o78LD1VeP1daXYdaFbMhV7HnZ7PHQFvFP:YNQcu2l06emllw9LyYoFbY9ZcFvFP
MD5:	900B7BCA75D94C788A31D87EE7567B5D
SHA1:	8CFED3490DB8F875BC56C8C52E69FC4E3C4CE103
SHA-256:	6759E599840416EB8ECC3E9918DC6E73291C5BB5C575776BFD0070EF62DB987A
SHA-512:	F5820B828A345B2F3F6B473B5F0599F815DC94FA917F3129CFEB6FECFDA5A5558D0C305BA7FC86A089D56FA4F112CD8FDCE783A1570F0C89CC8ED1967C65DEF0
Malicious:	false
Reputation:	low
URL:	https://cfl.dropboxstatic.com/static/metaserver/static/css/spectrum/index.web-vflkAt7yn.css
Preview:	/! @generated -- DO NOT MODIFY /../* -- account_menu/index.web.css */..mc-account-menu-item {. width: 100%;. box-sizing: inherit;. padding: 4px 16px;. margin: 16px 0 0;. font-family: Atlas Grotesk, AtlasGrotesk, sans-serif;. font-size: 14px;. line-height: 24px;. font-weight: 400;. text-align: left;. color: inherit;. cursor: pointer;. outline: none;. background-color: transparent;. border: none;. text-decoration: none;. display: block;.}..mc-account-menu-item:hover {. text-decoration: none;.}..mc-account-menu-item-disabled,..mc-account-menu-item:disabled {. background-color: transparent;. cursor: auto;.}..mc-account-menu-title {. width: 100%;. box-sizing: inherit;. display: -ms-flexbox;. display: flex;. -ms-flex-align: center;. align-items: center;. margin: 0 0 16px;. padding: 16px;. text-align: left;. font-family: Atlas Grotesk, AtlasGrotesk, sans-serif;. font-size: 14px;. line-height: 24px;.

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.38.8.8.860456532023883 08/10/23-23:19:20.387842	UDP	2023883	ET DNS Query to a *.top domain - Likely Hostile	60456	53	192.168.2.3	8.8.8.8

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 10, 2023 23:18:51.056016922 CEST	49708	443	192.168.2.3	142.251.36.174
Aug 10, 2023 23:18:51.056077003 CEST	443	49708	142.251.36.174	192.168.2.3
Aug 10, 2023 23:18:51.056170940 CEST	49708	443	192.168.2.3	142.251.36.174
Aug 10, 2023 23:18:51.059631109 CEST	49708	443	192.168.2.3	142.251.36.174
Aug 10, 2023 23:18:51.059668064 CEST	443	49708	142.251.36.174	192.168.2.3
Aug 10, 2023 23:18:51.063031912 CEST	49709	443	192.168.2.3	142.251.37.13
Aug 10, 2023 23:18:51.063091993 CEST	443	49709	142.251.37.13	192.168.2.3
Aug 10, 2023 23:18:51.063201904 CEST	49709	443	192.168.2.3	142.251.37.13
Aug 10, 2023 23:18:51.063393116 CEST	49709	443	192.168.2.3	142.251.37.13
Aug 10, 2023 23:18:51.063425064 CEST	443	49709	142.251.37.13	192.168.2.3
Aug 10, 2023 23:18:51.412640095 CEST	443	49709	142.251.37.13	192.168.2.3
Aug 10, 2023 23:18:51.413265944 CEST	49709	443	192.168.2.3	142.251.37.13
Aug 10, 2023 23:18:51.413333893 CEST	443	49709	142.251.37.13	192.168.2.3
Aug 10, 2023 23:18:51.415283918 CEST	443	49709	142.251.37.13	192.168.2.3
Aug 10, 2023 23:18:51.415389061 CEST	49709	443	192.168.2.3	142.251.37.13
Aug 10, 2023 23:18:51.419100046 CEST	49709	443	192.168.2.3	142.251.37.13
Aug 10, 2023 23:18:51.419244051 CEST	443	49709	142.251.37.13	192.168.2.3
Aug 10, 2023 23:18:51.419816971 CEST	49709	443	192.168.2.3	142.251.37.13
Aug 10, 2023 23:18:51.419852972 CEST	443	49709	142.251.37.13	192.168.2.3
Aug 10, 2023 23:18:51.463608027 CEST	443	49708	142.251.36.174	192.168.2.3
Aug 10, 2023 23:18:51.463957071 CEST	49708	443	192.168.2.3	142.251.36.174
Aug 10, 2023 23:18:51.464030981 CEST	443	49708	142.251.36.174	192.168.2.3
Aug 10, 2023 23:18:51.464679956 CEST	443	49708	142.251.36.174	192.168.2.3
Aug 10, 2023 23:18:51.464790106 CEST	49708	443	192.168.2.3	142.251.36.174
Aug 10, 2023 23:18:51.465511084 CEST	443	49708	142.251.36.174	192.168.2.3
Aug 10, 2023 23:18:51.465610027 CEST	49708	443	192.168.2.3	142.251.36.174
Aug 10, 2023 23:18:51.467619896 CEST	49708	443	192.168.2.3	142.251.36.174
Aug 10, 2023 23:18:51.467742920 CEST	443	49708	142.251.36.174	192.168.2.3
Aug 10, 2023 23:18:51.467864037 CEST	49708	443	192.168.2.3	142.251.36.174
Aug 10, 2023 23:18:51.467904091 CEST	443	49708	142.251.36.174	192.168.2.3
Aug 10, 2023 23:18:51.473408937 CEST	443	49709	142.251.37.13	192.168.2.3
Aug 10, 2023 23:18:51.473495007 CEST	49709	443	192.168.2.3	142.251.37.13
Aug 10, 2023 23:18:51.473520994 CEST	443	49709	142.251.37.13	192.168.2.3
Aug 10, 2023 23:18:51.473781109 CEST	443	49709	142.251.37.13	192.168.2.3
Aug 10, 2023 23:18:51.473891973 CEST	49709	443	192.168.2.3	142.251.37.13
Aug 10, 2023 23:18:51.474602938 CEST	49709	443	192.168.2.3	142.251.37.13
Aug 10, 2023 23:18:51.474622965 CEST	443	49709	142.251.37.13	192.168.2.3
Aug 10, 2023 23:18:51.507872105 CEST	49708	443	192.168.2.3	142.251.36.174
Aug 10, 2023 23:18:51.513730049 CEST	443	49708	142.251.36.174	192.168.2.3
Aug 10, 2023 23:18:51.514074087 CEST	443	49708	142.251.36.174	192.168.2.3
Aug 10, 2023 23:18:51.514241934 CEST	49708	443	192.168.2.3	142.251.36.174
Aug 10, 2023 23:18:51.518170118 CEST	49708	443	192.168.2.3	142.251.36.174
Aug 10, 2023 23:18:51.518199921 CEST	443	49708	142.251.36.174	192.168.2.3
Aug 10, 2023 23:18:52.177129030 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.177201986 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.177315950 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.178267002 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.178330898 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.178399086 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.178942919 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.178977966 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.179714918 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.179753065 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.315526962 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.316603899 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.325603962 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.325666904 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.325854063 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.325921059 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.327455044 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.327583075 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.328188896 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.328294039 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.330132008 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.330357075 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.330612898 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.330795050 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.330928087 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.330960989 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.372327089 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.372332096 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:52.372370005 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:52.412398100 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.071769953 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.071852922 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.071921110 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.071939945 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.071995974 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.072052956 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.072086096 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.072113037 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.090313911 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.090528011 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.237981081 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.238065958 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.238138914 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.238188028 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.238223076 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.238251925 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.238264084 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.255579948 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.255664110 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.255716085 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.255762100 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.255809069 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.259923935 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.260113001 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.260130882 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.300338030 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.300379992 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.340323925 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.371428013 CEST	49718	443	192.168.2.3	162.125.248.18
Aug 10, 2023 23:18:53.371485949 CEST	443	49718	162.125.248.18	192.168.2.3
Aug 10, 2023 23:18:53.371575117 CEST	49718	443	192.168.2.3	162.125.248.18
Aug 10, 2023 23:18:53.372551918 CEST	49718	443	192.168.2.3	162.125.248.18
Aug 10, 2023 23:18:53.372591972 CEST	443	49718	162.125.248.18	192.168.2.3
Aug 10, 2023 23:18:53.378242016 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.378269911 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.378315926 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.378351927 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.378372908 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.378422022 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.378422022 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.378446102 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.378504038 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.393012047 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.393085003 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.393146038 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.393193007 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.393225908 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.393254042 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.395298004 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.395380974 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.395415068 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.395502090 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.444400072 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.444458961 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.444511890 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.444551945 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.444581985 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.444627047 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.448647976 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.448734045 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.448754072 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.448776960 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.448846102 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.448846102 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.490032911 CEST	443	49718	162.125.248.18	192.168.2.3
Aug 10, 2023 23:18:53.490509987 CEST	49718	443	192.168.2.3	162.125.248.18
Aug 10, 2023 23:18:53.490588903 CEST	443	49718	162.125.248.18	192.168.2.3
Aug 10, 2023 23:18:53.491841078 CEST	443	49718	162.125.248.18	192.168.2.3
Aug 10, 2023 23:18:53.491950035 CEST	49718	443	192.168.2.3	162.125.248.18
Aug 10, 2023 23:18:53.495701075 CEST	49718	443	192.168.2.3	162.125.248.18
Aug 10, 2023 23:18:53.495830059 CEST	443	49718	162.125.248.18	192.168.2.3
Aug 10, 2023 23:18:53.495997906 CEST	49718	443	192.168.2.3	162.125.248.18
Aug 10, 2023 23:18:53.496032953 CEST	443	49718	162.125.248.18	192.168.2.3
Aug 10, 2023 23:18:53.536389112 CEST	49718	443	192.168.2.3	162.125.248.18
Aug 10, 2023 23:18:53.536410093 CEST	443	49718	162.125.248.18	192.168.2.3
Aug 10, 2023 23:18:53.538003922 CEST	49718	443	192.168.2.3	162.125.248.18
Aug 10, 2023 23:18:53.538155079 CEST	443	49718	162.125.248.18	192.168.2.3
Aug 10, 2023 23:18:53.538268089 CEST	49718	443	192.168.2.3	162.125.248.18
Aug 10, 2023 23:18:53.551486015 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.551589966 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.551670074 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.551713943 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.551789999 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.583957911 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.584022045 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.584134102 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.584172964 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.584204912 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.584222078 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.604943991 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.604984999 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.605042934 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.605071068 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.605101109 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.605122089 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.605133057 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.645359993 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.712447882 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.712521076 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.712699890 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.712701082 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.712753057 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.712835073 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.737550020 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.737601042 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.737787008 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.737787008 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.737833977 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.737917900 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.843856096 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.843914032 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.844054937 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.844105005 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.844175100 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.868057013 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.868115902 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.868288994 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.868340969 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.868374109 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.868422985 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.896927118 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.896958113 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.897176981 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.897229910 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.897268057 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.897320032 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.998899937 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.998963118 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.999078035 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.999130011 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:53.999170065 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:53.999214888 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.041846037 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.041903973 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.042135954 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.042171955 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.042263985 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.051316023 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.051364899 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.051523924 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.051551104 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.051688910 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.109986067 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.110024929 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.110157967 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.110158920 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.110207081 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.110270977 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.133179903 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.133265018 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.133410931 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.158886909 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.158922911 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.159041882 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.159087896 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.159198999 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.216406107 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.216473103 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.216582060 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.216633081 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.216667891 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.216697931 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.275212049 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.275276899 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.275434971 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.275470972 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.275499105 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.275544882 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.276460886 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.276561022 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.323169947 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.323270082 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.323348045 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.323370934 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.323400021 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.323422909 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.396023035 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.396065950 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.396136045 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.396148920 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.396181107 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.396197081 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.398607016 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.398705959 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.398719072 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.398744106 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.398773909 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.398803949 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.399352074 CEST	49711	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.399360895 CEST	443	49711	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.662173986 CEST	49732	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.662245035 CEST	443	49732	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.662328959 CEST	49732	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.662766933 CEST	49732	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.662807941 CEST	443	49732	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.711347103 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.711416960 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.711438894 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.711515903 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.711566925 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.711565971 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.711566925 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.711623907 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.711661100 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.711661100 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.711693048 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.750051975 CEST	443	49732	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.767682076 CEST	49732	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.767740965 CEST	443	49732	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.770052910 CEST	443	49732	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.771195889 CEST	49732	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.771439075 CEST	443	49732	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.771603107 CEST	49732	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.818820000 CEST	443	49732	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.873404980 CEST	49738	443	192.168.2.3	142.251.36.164
Aug 10, 2023 23:18:54.873465061 CEST	443	49738	142.251.36.164	192.168.2.3
Aug 10, 2023 23:18:54.873539925 CEST	49738	443	192.168.2.3	142.251.36.164
Aug 10, 2023 23:18:54.874233007 CEST	49738	443	192.168.2.3	142.251.36.164
Aug 10, 2023 23:18:54.874270916 CEST	443	49738	142.251.36.164	192.168.2.3
Aug 10, 2023 23:18:54.880619049 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.880680084 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.880810022 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.880810022 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.880856991 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.880960941 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.885952950 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.886116028 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.886161089 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:54.926438093 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:54.957935095 CEST	443	49738	142.251.36.164	192.168.2.3
Aug 10, 2023 23:18:54.970088005 CEST	49738	443	192.168.2.3	142.251.36.164
Aug 10, 2023 23:18:54.970155954 CEST	443	49738	142.251.36.164	192.168.2.3
Aug 10, 2023 23:18:54.971604109 CEST	443	49738	142.251.36.164	192.168.2.3
Aug 10, 2023 23:18:54.971714973 CEST	49738	443	192.168.2.3	142.251.36.164
Aug 10, 2023 23:18:54.973357916 CEST	49738	443	192.168.2.3	142.251.36.164
Aug 10, 2023 23:18:54.973638058 CEST	443	49738	142.251.36.164	192.168.2.3
Aug 10, 2023 23:18:55.014467955 CEST	49738	443	192.168.2.3	142.251.36.164
Aug 10, 2023 23:18:55.014512062 CEST	443	49738	142.251.36.164	192.168.2.3
Aug 10, 2023 23:18:55.035006046 CEST	49740	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.035063982 CEST	443	49740	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.035186052 CEST	49741	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.035218000 CEST	443	49741	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.035238028 CEST	49740	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.035290003 CEST	49741	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.035959959 CEST	49742	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.036026955 CEST	443	49742	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.036108971 CEST	49742	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.037106991 CEST	49743	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.037166119 CEST	443	49743	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.037291050 CEST	49743	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.038271904 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.038305998 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.038412094 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.039144993 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.039275885 CEST	49745	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.039309978 CEST	443	49745	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.039308071 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:55.039361000 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.039382935 CEST	49745	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.040236950 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.040265083 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.040487051 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.040990114 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.041023970 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.041106939 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.041663885 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.041712999 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.041791916 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.042435884 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.042494059 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.042579889 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.043139935 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.043195009 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.043262959 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.043726921 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.043793917 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.043868065 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.044548035 CEST	49743	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.044583082 CEST	443	49743	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.045066118 CEST	49742	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.045101881 CEST	443	49742	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.045566082 CEST	49741	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.045598030 CEST	443	49741	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.046152115 CEST	49740	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.046186924 CEST	443	49740	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.046597958 CEST	49745	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.046617031 CEST	443	49745	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.047604084 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.047636986 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.047954082 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.048002958 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.048059940 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:55.048063040 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.048084974 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.048089981 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.048116922 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:55.048244953 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.048271894 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.048472881 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.048511982 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.048681974 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.048722029 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.048954010 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.048985958 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.049177885 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.049206018 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.049257994 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.049416065 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:55.049433947 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.049479008 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.049508095 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:55.049534082 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:55.050714016 CEST	49712	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:55.050736904 CEST	443	49712	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.055444002 CEST	49738	443	192.168.2.3	142.251.36.164
Aug 10, 2023 23:18:55.076710939 CEST	443	49732	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.076921940 CEST	443	49732	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.077008009 CEST	49732	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:55.077586889 CEST	49732	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:55.077603102 CEST	443	49732	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:55.077646971 CEST	49732	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:55.077661991 CEST	49732	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:55.306303024 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.306634903 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.306687117 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.311012030 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.311115026 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.472445011 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.472937107 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.473404884 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.473443985 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.475570917 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.476408958 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.476460934 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.480914116 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.481010914 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.484623909 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.484812975 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.485018015 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.485054016 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.487977028 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.488008022 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.488116980 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.488164902 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.488281012 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.489788055 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.489840031 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.489909887 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.489909887 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.489938021 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.498243093 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.498280048 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.498378992 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.498410940 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.498437881 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.500281096 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.500308037 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.500397921 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.500431061 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.500457048 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.501950026 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.502041101 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.502069950 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.502075911 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.502125025 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.502145052 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.508810043 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.509280920 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.509336948 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.511266947 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.511388063 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.511904955 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.512095928 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.512315989 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.512355089 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.522244930 CEST	49746	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.522281885 CEST	443	49746	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.523536921 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.523601055 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.523706913 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.525494099 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.526720047 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.526758909 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.535046101 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.535070896 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.535171032 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.535207987 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.535307884 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.536830902 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.536870003 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.536940098 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.536963940 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.536993980 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.545386076 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.545449972 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.545526028 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.545552969 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.545581102 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.545617104 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.545681000 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.545696020 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.545753956 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.547395945 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.547445059 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.547508001 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.547530890 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.547559977 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.547593117 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.549243927 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.549331903 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.549355030 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.549376965 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.549403906 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.549415112 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.549469948 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.550198078 CEST	49749	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.550224066 CEST	443	49749	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.551091909 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.551140070 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.551239014 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.553416967 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.553441048 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.676364899 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.690650940 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.690733910 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.694638014 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.694746971 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.695230961 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.695482016 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.695497990 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.695635080 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.727696896 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.727746964 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.727824926 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.727874041 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.727905035 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.727948904 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.729551077 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.729598999 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.729655027 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.729684114 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.729734898 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.738737106 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.738816023 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.738862991 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.738894939 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.738926888 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.740680933 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.740726948 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.740813017 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.740834951 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.740896940 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.742691994 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.742744923 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.742820024 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.742820024 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.742846012 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.742875099 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.743495941 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.743567944 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.743587017 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.743627071 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.743648052 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.743691921 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.766716957 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.782449007 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.811542034 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.816162109 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.816229105 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.816246033 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.816272974 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.816303015 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.820549965 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.820707083 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.821321964 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.821324110 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.821428061 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.821554899 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.821577072 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.821887016 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.821904898 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.822511911 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.822541952 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.822581053 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.842438936 CEST	443	49745	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.843102932 CEST	49745	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.843139887 CEST	443	49745	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.847548008 CEST	443	49745	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.847636938 CEST	49745	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.849463940 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.849493027 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.849534988 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.849581957 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.849582911 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.849620104 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.849649906 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.849672079 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.851130009 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.851175070 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.851241112 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.851269960 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.851293087 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.859900951 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.859957933 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.860034943 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.860059023 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.860076904 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.860297918 CEST	49745	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.860752106 CEST	443	49745	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.860814095 CEST	49745	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.861507893 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.861525059 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.861900091 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.861944914 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.861979961 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.862001896 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.862045050 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.863782883 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.863826990 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.863876104 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.863920927 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.863926888 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.863987923 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.864003897 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.864285946 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.864356041 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.882042885 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.882376909 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.882421970 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.883090973 CEST	443	49743	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.883389950 CEST	49743	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.883420944 CEST	443	49743	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.885294914 CEST	443	49743	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.885324001 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.885407925 CEST	49743	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.885462046 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.886058092 CEST	443	49740	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.886168003 CEST	443	49742	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.886240005 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.886439085 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.886794090 CEST	49743	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.886933088 CEST	443	49743	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.886990070 CEST	49740	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.887044907 CEST	443	49740	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.887167931 CEST	49742	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.887203932 CEST	443	49742	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.887640953 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.887695074 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.887711048 CEST	49743	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.887731075 CEST	443	49743	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.888398886 CEST	443	49740	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.888514996 CEST	49740	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.889131069 CEST	443	49742	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.889137030 CEST	49740	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.889205933 CEST	49742	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.889247894 CEST	443	49740	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.889749050 CEST	49742	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.889839888 CEST	443	49742	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.889849901 CEST	49740	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.889885902 CEST	443	49740	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.890005112 CEST	49742	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.890021086 CEST	443	49742	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.896503925 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.900521040 CEST	49745	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.900538921 CEST	443	49745	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.900823116 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.900880098 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.901524067 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.901653051 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.902348042 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.902529001 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.902643919 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.918365955 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.918668985 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.918729067 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.919501066 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.919977903 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.920139074 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.920155048 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.920181036 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.927581072 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.927918911 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.927948952 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.927963018 CEST	49743	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.927999973 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.928042889 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.928078890 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.928126097 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.934540987 CEST	49740	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.936301947 CEST	49742	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.938813925 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.938857079 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.939030886 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.939049959 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.939201117 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.940156937 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.940185070 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.940398932 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.940413952 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.940665007 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.941504955 CEST	49745	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.941867113 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.941898108 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.941953897 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.941967964 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.941997051 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.942013025 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.943690062 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.943757057 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.943787098 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.943800926 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.943823099 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.943824053 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.943881989 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.960270882 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.969595909 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.969645023 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.969743967 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.969786882 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.970837116 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.970928907 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.970956087 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.970963001 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.971009016 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:55.971044064 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.971044064 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.971079111 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:55.977019072 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.002330065 CEST	49748	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.002355099 CEST	443	49748	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.003371954 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.003453016 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.003535032 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.004700899 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.004736900 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.009100914 CEST	49751	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.009135962 CEST	443	49751	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.009505033 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.009560108 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.009629965 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.010884047 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.010920048 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.030957937 CEST	49756	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.030992985 CEST	443	49756	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.031315088 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.031367064 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.031443119 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.033380032 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.033425093 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.055166960 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.060888052 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.060909986 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.061063051 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.061117887 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.061147928 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.062685966 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.062720060 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.062804937 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.062833071 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.062863111 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.062912941 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.153063059 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.153135061 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.153209925 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.153214931 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.153251886 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.153280020 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.153280973 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.155118942 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.155173063 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.155222893 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.155260086 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.155291080 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.157074928 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.157119036 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.157174110 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.157198906 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.157215118 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.162931919 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.162982941 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.163036108 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.163065910 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.163086891 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.164499998 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.164544106 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.164596081 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.164622068 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.164639950 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.164645910 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.164709091 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.164726019 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.164784908 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.230015039 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.232918024 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.245203972 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.245367050 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.245404959 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.245914936 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.245959997 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.246005058 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.246030092 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.246047020 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.246896982 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.246941090 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.246989965 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.247014999 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.247030973 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.247581005 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.247623920 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.247667074 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.247687101 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.247705936 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.247910976 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.247951984 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.247972965 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.247989893 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.248049021 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.248744011 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.248820066 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.262674093 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.263981104 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.264013052 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.264075994 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.264137983 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.264193058 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.264229059 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.264229059 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.264235020 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.264262915 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.264309883 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.264331102 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.264331102 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.264398098 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.264403105 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.265824080 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.265876055 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.265934944 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.265965939 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.265994072 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.266026020 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.266098022 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.266098022 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.266098022 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.270591974 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.273591042 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.275588989 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.275660992 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.275702000 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.275734901 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.275773048 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.275954962 CEST	443	49745	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.276083946 CEST	443	49745	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.276154995 CEST	49745	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.277581930 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.277661085 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.277678013 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.277700901 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.277741909 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.279548883 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.279618979 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.279628992 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.279664993 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.279695988 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.280155897 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.280229092 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.280246973 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.280309916 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.280355930 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.302862883 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.317398071 CEST	443	49742	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.317562103 CEST	443	49742	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.317684889 CEST	49742	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.334192991 CEST	443	49740	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.334737062 CEST	443	49740	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.334866047 CEST	49740	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.339201927 CEST	443	49743	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.339380026 CEST	443	49743	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.339484930 CEST	49743	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.342555046 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.370338917 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.371890068 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.371917009 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.371961117 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.372044086 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.372132063 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.372132063 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.372132063 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.372172117 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.372251034 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.386051893 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.387619972 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.387634993 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.387659073 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.387765884 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.387773991 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.387823105 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.387860060 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.387860060 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.387916088 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.410711050 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.410748959 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.411338091 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.411851883 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.411873102 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.412002087 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.412020922 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.413292885 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.413325071 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.416501045 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.416721106 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.416887999 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.417198896 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.417218924 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.417300940 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.420490026 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.420644999 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.420978069 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.421185970 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.421569109 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.421591997 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.440475941 CEST	49744	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.440520048 CEST	443	49744	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.441395998 CEST	49766	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.441458941 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.441560030 CEST	49766	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.442285061 CEST	49766	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.442327023 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.442562103 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.444016933 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.444114923 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.444129944 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.444219112 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.444219112 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.444268942 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.444500923 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.446073055 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.446118116 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.446202993 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.446202993 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.446222067 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.453825951 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.453921080 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.454185009 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.454204082 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.455936909 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.455984116 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.456048965 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.456070900 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.456096888 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.457690001 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.457734108 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.457791090 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.457808971 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.457830906 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.457938910 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.458000898 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.460622072 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.460748911 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.461553097 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.462515116 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.462569952 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.462632895 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.462680101 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.462697029 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.462776899 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.462820053 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.462853909 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.464493036 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.464554071 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.464596987 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.464623928 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.464653015 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.464656115 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.464711905 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.464726925 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.464776993 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.471190929 CEST	49743	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.471235991 CEST	443	49743	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.471601963 CEST	49767	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.471657038 CEST	443	49767	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.471739054 CEST	49767	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.472908974 CEST	49767	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.472940922 CEST	443	49767	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.474438906 CEST	49740	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.474483967 CEST	443	49740	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.476928949 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.477030039 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.477032900 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.477071047 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.477103949 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.477121115 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.477205992 CEST	49742	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.477237940 CEST	443	49742	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.478280067 CEST	49745	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.478313923 CEST	443	49745	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.478372097 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.478431940 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.478444099 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.478455067 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.478509903 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.479458094 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.479523897 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.479552984 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.479563951 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.479609966 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.486917973 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.487777948 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.490995884 CEST	49766	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.491035938 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.491735935 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.492336988 CEST	49766	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.492450953 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.492515087 CEST	49766	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.494136095 CEST	49747	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.494182110 CEST	443	49747	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.494493961 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.494517088 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.494586945 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.499821901 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.499840021 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.503067017 CEST	49762	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.503086090 CEST	443	49762	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.503472090 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.503530025 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.503622055 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.507958889 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.507993937 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.532551050 CEST	49766	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.538893938 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.552722931 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.552808046 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.552885056 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.552908897 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.552922964 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.552953005 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.553546906 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.553633928 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.553642988 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.553690910 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.553755999 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.553811073 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.554748058 CEST	49750	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.554761887 CEST	443	49750	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.568321943 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.568510056 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.568525076 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.568567991 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.568594933 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.568619967 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.568814039 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.568912983 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.571118116 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.571166039 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.571238041 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.571269035 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.571299076 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.571300030 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.571324110 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.571341038 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.571394920 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.571413040 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.571470022 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.571530104 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.572177887 CEST	49755	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.572200060 CEST	443	49755	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.713219881 CEST	443	49767	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.713793993 CEST	49767	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.713860035 CEST	443	49767	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.715060949 CEST	443	49767	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.718337059 CEST	49767	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.718487024 CEST	49767	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.718506098 CEST	443	49767	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.718667984 CEST	443	49767	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.729425907 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.731785059 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.731853962 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.732811928 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.733844995 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.734011889 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.734118938 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.750714064 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.754034996 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.754097939 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.754962921 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.756778002 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.757019043 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.757042885 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.757067919 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.778815031 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.813676119 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.827682018 CEST	49767	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.855631113 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.855717897 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.855792999 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.855819941 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.855895042 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.855895996 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.855895996 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.855945110 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.856015921 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.893407106 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.893464088 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.893481970 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.893543005 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.893558979 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.893589020 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.893596888 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.893634081 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.931478024 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.931526899 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.931600094 CEST	49766	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.931627035 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.931663990 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.931720972 CEST	49766	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.943883896 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.944139004 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.944170952 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.946022987 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.946070910 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.946152925 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.946152925 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.946181059 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.948105097 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.948179007 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.948215961 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.948246002 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.948270082 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.948324919 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.986069918 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.986126900 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.986148119 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.986162901 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.986196041 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.986223936 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.986223936 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.986239910 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.986270905 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.988023996 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.988092899 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.988109112 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.988131046 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.988159895 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.988168001 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.988200903 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.988236904 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.988259077 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.988281012 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.996248007 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.996304035 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.996328115 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.996380091 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.996397972 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.996440887 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.996496916 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:56.996515036 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:56.996572971 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.012202978 CEST	49766	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.012252092 CEST	443	49766	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.034348011 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.034450054 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.034473896 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.034528017 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.034595013 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.034612894 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.034682035 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.034740925 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.074351072 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.074414968 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.074537039 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.074537992 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.074546099 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.074592113 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.074629068 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.074733973 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.074831963 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.094980955 CEST	49760	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.095026016 CEST	443	49760	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.108187914 CEST	49765	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.108228922 CEST	443	49765	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.158519030 CEST	443	49767	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.158638000 CEST	443	49767	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.158720016 CEST	49767	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.160659075 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.162151098 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.162175894 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.162218094 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.162237883 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.162255049 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.162332058 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.162332058 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.162332058 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.162381887 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.162462950 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.162674904 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.162760973 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.164511919 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.164602995 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.164630890 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.164652109 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.164681911 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.164685011 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.164746046 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.172801971 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.172835112 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.173017979 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.173063040 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.188509941 CEST	49767	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.188555002 CEST	443	49767	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.190182924 CEST	49768	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.190226078 CEST	443	49768	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.222616911 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.263722897 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.263739109 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.263806105 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.263851881 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.263855934 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.263883114 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.263910055 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.263936043 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.264648914 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.264697075 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.264748096 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.264764071 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.264813900 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.266643047 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.266666889 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.266726971 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.266738892 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.266743898 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.266776085 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.266803026 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.266851902 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.348901987 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.348997116 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.349031925 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.349080086 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.349123001 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.349286079 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.349350929 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.349838972 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.349869013 CEST	443	49769	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.349939108 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.349940062 CEST	49769	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.494249105 CEST	49792	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.494301081 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.494399071 CEST	49792	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.494627953 CEST	49792	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.494657993 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.660319090 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.660654068 CEST	49792	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.660676956 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.661214113 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.662190914 CEST	49792	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.662292957 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:57.662389994 CEST	49792	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:57.706828117 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.123256922 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.123306036 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.123424053 CEST	49792	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.123445034 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.123465061 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.123502016 CEST	49792	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.123543024 CEST	49792	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.150644064 CEST	49792	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.150690079 CEST	443	49792	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.162659883 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.162734985 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.162897110 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.164232016 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.164273024 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.373075962 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.373413086 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.373457909 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.374187946 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.374684095 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.374813080 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.374875069 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.422837973 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.481213093 CEST	443	49741	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.481528044 CEST	49741	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.481590986 CEST	443	49741	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.483081102 CEST	443	49741	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.483182907 CEST	49741	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.483705044 CEST	49741	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.483937979 CEST	443	49741	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.484215975 CEST	49741	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.484244108 CEST	443	49741	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.513716936 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.613790989 CEST	49741	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.808099031 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.809743881 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.809770107 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.809808969 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.809827089 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.809843063 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.809861898 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.809909105 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.809937954 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.809952974 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.809982061 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.809982061 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.898849964 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.898935080 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.898967981 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.898971081 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.899019003 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.899049044 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.899081945 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.899297953 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.899389982 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.906121016 CEST	49811	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.906152964 CEST	443	49811	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.930228949 CEST	443	49741	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.930401087 CEST	443	49741	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.930592060 CEST	49741	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.935000896 CEST	49741	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.935044050 CEST	443	49741	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.938821077 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.938878059 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.938992023 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.939285040 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.939317942 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.949925900 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.949981928 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.950112104 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.950368881 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.950407982 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.978254080 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.983614922 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.984487057 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.985045910 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.985212088 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.985229015 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.985256910 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.992526054 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.993899107 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.993952990 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.994465113 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.995230913 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:58.995351076 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:58.995414019 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.026737928 CEST	49828	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.026807070 CEST	443	49828	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.026953936 CEST	49828	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.027486086 CEST	49828	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.027513981 CEST	443	49828	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.035851002 CEST	49829	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.035924911 CEST	443	49829	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.036034107 CEST	49829	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.036463022 CEST	49829	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.036490917 CEST	443	49829	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.038825989 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.041507006 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.041567087 CEST	443	49830	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.041693926 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.042005062 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.042040110 CEST	443	49830	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.060039997 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.060098886 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.060199022 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.061177015 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.061206102 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.061748981 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.061806917 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.061898947 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.062252045 CEST	49834	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.062292099 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.062395096 CEST	49834	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.062829971 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.062887907 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.062988043 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.063266039 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.063306093 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.063452959 CEST	49834	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.063483000 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.063647032 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.063685894 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.082372904 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.082442999 CEST	443	49836	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.082691908 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.082942963 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.082972050 CEST	443	49836	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.084719896 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.084779024 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.084860086 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.085345030 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.085395098 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.085825920 CEST	49839	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.085869074 CEST	443	49839	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.085952044 CEST	49839	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.086174011 CEST	49839	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.086203098 CEST	443	49839	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.113820076 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.122854948 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.465837002 CEST	443	49830	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.466226101 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.466298103 CEST	443	49830	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.468745947 CEST	443	49830	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.468885899 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.469345093 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.469580889 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.469602108 CEST	443	49830	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.469635963 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.469736099 CEST	443	49830	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.470477104 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.470633984 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.470644951 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.470705032 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.470762014 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.470762014 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.470813036 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.470875978 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.472177982 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.472208977 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.472260952 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.472292900 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.472347021 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.472347021 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.472397089 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.472456932 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.478619099 CEST	443	49829	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.478945971 CEST	49829	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.478979111 CEST	443	49829	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.479700089 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.480048895 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.480083942 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.480192900 CEST	443	49829	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.480676889 CEST	49829	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.480889082 CEST	49829	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.480907917 CEST	443	49829	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.480962038 CEST	443	49829	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.481029034 CEST	49829	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.481664896 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.482142925 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.482299089 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.482316971 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.482393980 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.482773066 CEST	443	49828	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.483062029 CEST	49828	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.483105898 CEST	443	49828	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.484302044 CEST	443	49828	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.484736919 CEST	49828	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.484872103 CEST	49828	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.484889984 CEST	443	49828	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.484913111 CEST	49828	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.484947920 CEST	443	49828	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.494262934 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.494530916 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.494569063 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.497143984 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.497255087 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.497673988 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.497767925 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.497805119 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.508610964 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.508676052 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.508693933 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.508765936 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.508811951 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.508837938 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.508841991 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.508841991 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.508841991 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.508860111 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.508886099 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.508893013 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.508924961 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.508946896 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.510654926 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.510943890 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.510983944 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.512103081 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.512602091 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.512728930 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.512747049 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.512820005 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.522825003 CEST	443	49829	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.522824049 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.522867918 CEST	443	49830	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.538886070 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.561070919 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.561165094 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.561254978 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.561306953 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.561692953 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.561799049 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.562094927 CEST	49826	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.562128067 CEST	443	49826	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.567502975 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.567873955 CEST	49834	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.567936897 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.568556070 CEST	443	49839	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.569488049 CEST	443	49836	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.569554090 CEST	49839	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.569591999 CEST	443	49839	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.569741964 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.569798946 CEST	443	49836	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.569845915 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.569973946 CEST	49834	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.570585966 CEST	49834	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.570708036 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.570799112 CEST	443	49839	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.570888042 CEST	49839	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.571053028 CEST	443	49836	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.571142912 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.571383953 CEST	49834	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.571425915 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.571829081 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.571942091 CEST	443	49836	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.572201967 CEST	49839	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.572298050 CEST	443	49839	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.572335958 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.572381973 CEST	443	49836	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.572405100 CEST	49839	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.572432041 CEST	443	49839	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.574193954 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.574254036 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.574367046 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.574600935 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.574630022 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.598718882 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.598747969 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.598881960 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.598922014 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.598941088 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.599487066 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.599895000 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.599916935 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.600748062 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.600796938 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.600860119 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.600879908 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.600909948 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.601638079 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.601732969 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.601737976 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.601762056 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.601835966 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.603302002 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.603400946 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.603857040 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.604067087 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.604085922 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.609534979 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.610281944 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.611232996 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.611696005 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.611856937 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.611877918 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.613851070 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.614979982 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.615039110 CEST	49834	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.622900009 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.622935057 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.622988939 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.623001099 CEST	49828	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.623004913 CEST	49839	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.623016119 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.646902084 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.654843092 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.690875053 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.690936089 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.691113949 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.691113949 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.691164970 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.691251993 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.692753077 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.692800999 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.692950010 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.692950010 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.692996979 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.693079948 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.693833113 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.693917036 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.693948984 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.693972111 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.694055080 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.694226980 CEST	443	49829	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.694354057 CEST	443	49829	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.694442034 CEST	49829	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.695291042 CEST	49829	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.695338011 CEST	443	49829	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.695631981 CEST	443	49830	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.695952892 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.696007013 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.696069002 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.696088076 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.696116924 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.696156025 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.696419001 CEST	443	49830	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.696569920 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.696708918 CEST	49830	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.696743011 CEST	443	49830	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.697284937 CEST	443	49828	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.697441101 CEST	443	49828	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.697524071 CEST	49828	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.698106050 CEST	49828	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.698139906 CEST	443	49828	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.700860023 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.700982094 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.700999022 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.701385021 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.701467037 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.713887930 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.713932037 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.714200020 CEST	49827	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.714226007 CEST	443	49827	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.721062899 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.721108913 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.721232891 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.721525908 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.721555948 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.722897053 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.723004103 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.760010004 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.760385990 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.760431051 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.761332989 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.761822939 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.761979103 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.761995077 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.762017012 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.766802073 CEST	49842	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.766870975 CEST	443	49842	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.766957045 CEST	49842	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.767354965 CEST	49843	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.767388105 CEST	443	49843	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.767457008 CEST	49843	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.767805099 CEST	49842	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.767838001 CEST	443	49842	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.768055916 CEST	49843	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.768081903 CEST	443	49843	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.797250986 CEST	443	49836	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.797413111 CEST	443	49836	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.797502041 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.798549891 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.798590899 CEST	443	49836	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.798618078 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.798660994 CEST	49836	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.799887896 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.799956083 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.800062895 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.800702095 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.800744057 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.813848972 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.813857079 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.857590914 CEST	443	49843	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.858175039 CEST	49843	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.858237028 CEST	443	49843	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.860030890 CEST	443	49843	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.860156059 CEST	49843	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.860610962 CEST	49843	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.860764980 CEST	443	49843	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.860933065 CEST	49843	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.860964060 CEST	443	49843	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.864422083 CEST	443	49839	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.864598989 CEST	443	49839	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.864715099 CEST	49839	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.866949081 CEST	49839	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.866995096 CEST	443	49839	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.908749104 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.908788919 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.908803940 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.908865929 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.908905983 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.908925056 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.908943892 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.909025908 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.909068108 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.909068108 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.909068108 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.909101963 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.915842056 CEST	443	49842	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.915898085 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:18:59.915956974 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:18:59.916038990 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:18:59.916203022 CEST	49842	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.916265965 CEST	443	49842	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.916591883 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:18:59.916623116 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:18:59.918073893 CEST	443	49842	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.918154955 CEST	49842	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.918919086 CEST	49842	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.919142962 CEST	443	49842	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.919145107 CEST	49842	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.922837973 CEST	49843	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.953897953 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.954318047 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.954386950 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.955482960 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.955980062 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.956136942 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:18:59.956151962 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.956214905 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.962826014 CEST	443	49842	162.125.69.18	192.168.2.3
Aug 10, 2023 23:18:59.971362114 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.971421003 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.971441984 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.971503973 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.971570015 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.971570969 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.971570969 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.971621037 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.978902102 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.978966951 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.978985071 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.979007959 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.979139090 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.979139090 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.979156017 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.979233980 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.996912956 CEST	49835	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.996958971 CEST	443	49835	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.998811960 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.998838902 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.998955965 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.998976946 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.999054909 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.999054909 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.999054909 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:18:59.999139071 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:18:59.999192953 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.000766993 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.000828981 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.000883102 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.000911951 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.000936985 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.001961946 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.002022982 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.002142906 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.002341032 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.002425909 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.002437115 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.002486944 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.002526045 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.002547979 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.002562046 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.002599001 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.002629042 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.007038116 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.007122993 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.007217884 CEST	49834	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.007250071 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.007333994 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.007416964 CEST	49834	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.013902903 CEST	49842	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.013948917 CEST	443	49842	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.020906925 CEST	49834	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.020962954 CEST	443	49834	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.025250912 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.025250912 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.025623083 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.025654078 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.025754929 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.026081085 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.026108027 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.026474953 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.026540995 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.026577950 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.026597023 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.026638985 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.026658058 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.026689053 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.026690006 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.026740074 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.026782036 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.026782036 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.026829004 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.026840925 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.037947893 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.038834095 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.039411068 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.040072918 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.040184975 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.040214062 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.047931910 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.047997952 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.048017979 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.048080921 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.048094034 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.048142910 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.048178911 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.048178911 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.048191071 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.048223019 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.048386097 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.048440933 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.049635887 CEST	49840	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.049665928 CEST	443	49840	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.053144932 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.053204060 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.053307056 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.053519964 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.053550959 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.058305025 CEST	443	49843	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.059094906 CEST	443	49843	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.059181929 CEST	49843	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.059349060 CEST	49843	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.059371948 CEST	443	49843	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.059423923 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.059454918 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.059508085 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.059526920 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.059530973 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.059582949 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.059608936 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.059639931 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.060409069 CEST	49850	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.060461998 CEST	443	49850	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.060564041 CEST	49850	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.061928034 CEST	49850	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.061958075 CEST	443	49850	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.064795017 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.064810991 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.064887047 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.064914942 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.064938068 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.064943075 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.065001011 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.065037966 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.065118074 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.066756010 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.066771030 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.066823006 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.066910982 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.066914082 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.067008972 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.071393013 CEST	49833	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.071415901 CEST	443	49833	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.075170994 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.075326920 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.075454950 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.075501919 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.075598001 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.076136112 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.076204062 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.076464891 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.076610088 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.076682091 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.076745033 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.076745033 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.076772928 CEST	443	49838	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.076862097 CEST	49838	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.077652931 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.077822924 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.077840090 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.078058958 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.078115940 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.078233957 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.078278065 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.078325033 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.078949928 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.080125093 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.080158949 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.081110954 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.081244946 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.081696987 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.082583904 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.082714081 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.082814932 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.082844973 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.086802006 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.091439009 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.091562033 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.091598988 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.091653109 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.091656923 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.091698885 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.092094898 CEST	49832	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.092111111 CEST	443	49832	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.093915939 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.094213009 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.094278097 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.095089912 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.102415085 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.102572918 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.103324890 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.103338957 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.103399992 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.103508949 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.103781939 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.103816032 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.110836983 CEST	443	49842	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.110995054 CEST	49842	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.112051010 CEST	49842	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.112086058 CEST	443	49842	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.116884947 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.117249012 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.121331930 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.121433020 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.122571945 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.122720003 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.122821093 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.122932911 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.122971058 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.147294044 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.147861958 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.147919893 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.148606062 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.149096966 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.149235964 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.149274111 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.150808096 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.167478085 CEST	443	49850	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.167881012 CEST	49850	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.167933941 CEST	443	49850	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.169070959 CEST	443	49850	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.169554949 CEST	49850	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.169703960 CEST	49850	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.169719934 CEST	443	49850	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.169778109 CEST	443	49850	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.190855026 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.200262070 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.200304031 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.200319052 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.200409889 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.200449944 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.200474977 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.200474977 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.200602055 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.200602055 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.202519894 CEST	49844	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.202560902 CEST	443	49844	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.213934898 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.215266943 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.216253996 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.216279030 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.216347933 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.216372013 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.216389894 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.216413021 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.216455936 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.216490984 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.216490984 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.216490984 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.216490984 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.216531992 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.216543913 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.216603041 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.216660976 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.217470884 CEST	49841	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.217499018 CEST	443	49841	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.223146915 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.223166943 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.223176956 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.223176956 CEST	49850	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.223217964 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.223221064 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.223339081 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.223707914 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.223742962 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.263554096 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.264002085 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.264067888 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.265086889 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.265530109 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.265662909 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.265678883 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.265705109 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.313962936 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.354479074 CEST	443	49850	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.355240107 CEST	443	49850	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.355410099 CEST	49850	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.358316898 CEST	49850	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:00.358364105 CEST	443	49850	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:00.469235897 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.478703022 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.478729010 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.478852987 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.478887081 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.478887081 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.478902102 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.478919983 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.478970051 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.479020119 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.479020119 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.479020119 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.479032993 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.479072094 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.485246897 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.486916065 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.486939907 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.486982107 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.487000942 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.487018108 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.487096071 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.487097025 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.487097025 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.487097025 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.487158060 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.487186909 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.487232924 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.510397911 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.510462999 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.510531902 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.510616064 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.510616064 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.510616064 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.510669947 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.522830009 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.522876024 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.523029089 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.523029089 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.523077011 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.532126904 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.532222033 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.532385111 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.532432079 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.532505989 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.534440994 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.534497976 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.534543991 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.534565926 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.534596920 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.544476986 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.544528961 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.544611931 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.544634104 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.544675112 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.547840118 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.547916889 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.547943115 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.548022985 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.548054934 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.548054934 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.548085928 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.548115969 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.552841902 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.552897930 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.552989960 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.552989960 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.553039074 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.560163975 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.560209036 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.560376883 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.560422897 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.560489893 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.564631939 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.564687014 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.564759016 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.564811945 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.564856052 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.569029093 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.569088936 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.569202900 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.569202900 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.569251060 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.573210001 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.573263884 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.573394060 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.573395014 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.573466063 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.576479912 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.576499939 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.576594114 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.576618910 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.576688051 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.576697111 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.576724052 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.576755047 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.576899052 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.577071905 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.577141047 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.577590942 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.577647924 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.577697039 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.577723980 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.577759027 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.577759027 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.580746889 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.580802917 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.580854893 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.580872059 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.580900908 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.584389925 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.584430933 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.584527016 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.584573030 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.584630966 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.588198900 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.588267088 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.588396072 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.588396072 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.588443995 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.589469910 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.590992928 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.591114044 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.591121912 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.591176033 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.591211081 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.591394901 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.591484070 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.592199087 CEST	49847	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.592226028 CEST	443	49847	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.592677116 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.592753887 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.592858076 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.592870951 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.592921019 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.592958927 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.593022108 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.602453947 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.602551937 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.602684975 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.602967024 CEST	49846	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:00.603010893 CEST	443	49846	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:00.605211020 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.605247974 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.624551058 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.624568939 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.624737978 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.624758005 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.624804020 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.624846935 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.624864101 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.624883890 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.626312017 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.626344919 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.626492023 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.626492977 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.626539946 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.626626968 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.627213955 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.627305984 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.627322912 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.627351999 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.627413988 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.628062010 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.629807949 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.629832983 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.629946947 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.629964113 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.629964113 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.629992962 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.630011082 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.630058050 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.630088091 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.630124092 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.630124092 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.630124092 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.630124092 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.638261080 CEST	49848	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.638305902 CEST	443	49848	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.639375925 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.639409065 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.639456034 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.639473915 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.639484882 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.639537096 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.639537096 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.639565945 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.639625072 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.639646053 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.639710903 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.643629074 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.683763027 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.683850050 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.683943987 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.683969975 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.684026957 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.684062958 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.684062958 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.686156034 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.686227083 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.686266899 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.686315060 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.686347961 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.710927963 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.710988045 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.711008072 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.711047888 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.711097002 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.711100101 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.711152077 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.711189032 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.711189032 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.711420059 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.711436033 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.720808983 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.720957041 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.721002102 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.721709967 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.721731901 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.721780062 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.721800089 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.721816063 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.721818924 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.721846104 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.721857071 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.721863985 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.721898079 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.721898079 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.721925020 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.724165916 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.724208117 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.724284887 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.724296093 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.724343061 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.724360943 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.733314037 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.733366966 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.734822989 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.738149881 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.738343000 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.738360882 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.738500118 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.743654013 CEST	49851	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.743710995 CEST	443	49851	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.745506048 CEST	49855	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.745587111 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.745697021 CEST	49855	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.746248960 CEST	49855	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.746282101 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.774183989 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.774332047 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.774369001 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.774422884 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.774460077 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.774785042 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.774857998 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.774957895 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.775307894 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.775343895 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.776596069 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.776657104 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.776700974 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.776721954 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.776748896 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.776799917 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.778271914 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.778332949 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.778456926 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.778481960 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.778556108 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.779398918 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.779500961 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.779520988 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.782202959 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.782249928 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.782309055 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.782329082 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.782362938 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.784254074 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.784327030 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.784379959 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.784411907 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.784436941 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.787643909 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.787975073 CEST	49855	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.788021088 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.788779020 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.789513111 CEST	49855	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.789632082 CEST	49855	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.789655924 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.789683104 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.797522068 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.797636986 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.797709942 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.797709942 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.797760963 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.797847033 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.797852039 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.797885895 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.797928095 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.797956944 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.799717903 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.799786091 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.799825907 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.799874067 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.799906015 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.799973011 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.799997091 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.800075054 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.800132036 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.806646109 CEST	49853	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.806689024 CEST	443	49853	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.810484886 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.810543060 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.810673952 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.810673952 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.810719967 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.810795069 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.813055038 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.813102961 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.813136101 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.813200951 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.813237906 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.813265085 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.813268900 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.813328981 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.813354969 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.813671112 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.813705921 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.814133883 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.814222097 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.814230919 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.814260960 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.814299107 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.814325094 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.814361095 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.814893007 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.816313028 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.816380978 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.816515923 CEST	49852	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.816549063 CEST	443	49852	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.817136049 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.817975044 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.818053007 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.818077087 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.818129063 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.823896885 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.830833912 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.830893040 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.831012011 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.831363916 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.831401110 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.854625940 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.855047941 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.855117083 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.856103897 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.856621027 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.856765985 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.856786013 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.863785982 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.863864899 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.863945007 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.863982916 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.864018917 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.864025116 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.864067078 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.864101887 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.864125013 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.864154100 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.864279985 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.864350080 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.867518902 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.871208906 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.872240067 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.872790098 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.872958899 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.872978926 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.873009920 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.890168905 CEST	49849	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.890228033 CEST	443	49849	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.898901939 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.912808895 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.912877083 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.912995100 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.913594961 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.913631916 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.913943052 CEST	49855	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.913973093 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.927966118 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.927968979 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.948143959 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:00.951948881 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:00.952841997 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.014086962 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.035249949 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.035617113 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.035636902 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.078819036 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.113945007 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.206646919 CEST	49860	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.206717014 CEST	443	49860	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.206808090 CEST	49860	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.207101107 CEST	49860	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.207134008 CEST	443	49860	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.210659027 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.212251902 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.212275028 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.212316036 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.212336063 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.212338924 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.212353945 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.212383986 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.212387085 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.212409973 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.212435961 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.212459087 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.221446991 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.221477032 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.221549034 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.221822023 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.221837997 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.253809929 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.253876925 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.253911018 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.253928900 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.253959894 CEST	49855	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.253998041 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.254025936 CEST	49855	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.254178047 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.254246950 CEST	49855	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.255111933 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.255153894 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.255166054 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.255204916 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.255220890 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.255250931 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.255273104 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.256076097 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.256089926 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.256118059 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.256130934 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.256150007 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.256164074 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.256195068 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.256207943 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.260400057 CEST	49855	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.260428905 CEST	443	49855	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.263911963 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.263976097 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.264050007 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.264482975 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.264513969 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.295101881 CEST	443	49860	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.300837994 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.300924063 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.301014900 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.301069021 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.301134109 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.302083969 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.302109957 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.302146912 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.302165031 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.302165985 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.302201986 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.302227020 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.303546906 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.303565979 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.303603888 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.303658962 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.303697109 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.303718090 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.303766012 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.305185080 CEST	49860	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.305191994 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.305212021 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.305234909 CEST	443	49860	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.305269957 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.305270910 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.305315971 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.305330992 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.305355072 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.306519032 CEST	443	49860	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.307548046 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.308052063 CEST	49860	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.308296919 CEST	443	49860	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.308310032 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.308350086 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.308521986 CEST	49860	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.308568954 CEST	49860	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.308598995 CEST	443	49860	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.309684038 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.314469099 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.314601898 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.314635992 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.339143991 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.339529991 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.339574099 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.343991041 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.344126940 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.344577074 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.344758987 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.344775915 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.344805956 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.345112085 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.345204115 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.345228910 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.345278978 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.345288038 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.345324993 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.352951050 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.352993965 CEST	443	49856	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.353018999 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.353056908 CEST	49856	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.358795881 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.359069109 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.359121084 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.359181881 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.359253883 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.359586000 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.359606981 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.360893011 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.360913992 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.360945940 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.360960007 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.360972881 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.361033916 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.361033916 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.361087084 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.361164093 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.371623039 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.373243093 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.373265028 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.373303890 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.373322010 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.373337984 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.373347998 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.373402119 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.373436928 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.373436928 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.373464108 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.373624086 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.373696089 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.391638041 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.391727924 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.391762972 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.391803980 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.391813993 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.391863108 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.391864061 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.394129038 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.394159079 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.394226074 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.394227028 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.394252062 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.394253969 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.394288063 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.394293070 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.394309044 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.394961119 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.395095110 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.395127058 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.395859003 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.395912886 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.395956993 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.395991087 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.396015882 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.397595882 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.397659063 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.397712946 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.397735119 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.397758007 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.397763014 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.397780895 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.397800922 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.397821903 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.397845030 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.398175955 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.398436069 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.399557114 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.399585009 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.399614096 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.399652958 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.399681091 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.399735928 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.399735928 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.400227070 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.400347948 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.400419950 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.400485039 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.400558949 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.413948059 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.442819118 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.449903965 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.449961901 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.450011015 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.450059891 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.450093031 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.451709032 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.451735973 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.451798916 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.451822042 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.451852083 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.463617086 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.463727951 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.463747025 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.463788033 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.463823080 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.463829994 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.464059114 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.464076042 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.464135885 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.465692997 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.465761900 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.465807915 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.465825081 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.465850115 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.465872049 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.466037035 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.466109037 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.482276917 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.482388973 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.482975006 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.483047962 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.483092070 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.483128071 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.483159065 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.484035969 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.484091997 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.484137058 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.484164953 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.484191895 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.485651016 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.485724926 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.485769987 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.485781908 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.485816956 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.485852003 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.485876083 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.487467051 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.487518072 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.487585068 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.487601995 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.487617970 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.487629890 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.487672091 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.488907099 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.488959074 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.489007950 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.489038944 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.489084959 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.489959955 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.490026951 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.490068913 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.490084887 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.490117073 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.490145922 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.490168095 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.491837025 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.491885900 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.491950989 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.491983891 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.492012024 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.492049932 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.492065907 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.492636919 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.492695093 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.492727041 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.492743969 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.492804050 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.493521929 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.493623972 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.493647099 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.494574070 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.494616985 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.494664907 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.494683981 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.494716883 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.496182919 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.496225119 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.496296883 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.496339083 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.496376038 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.496679068 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.496679068 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.496710062 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.496748924 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.505914927 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.507065058 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.507091999 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.507149935 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.507180929 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.507185936 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.507205963 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.507224083 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.507224083 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.507235050 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.507247925 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.507263899 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.507266045 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.507282019 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.522965908 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.522984982 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.522983074 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.523092985 CEST	443	49860	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.523246050 CEST	443	49860	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.523328066 CEST	49860	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.523710966 CEST	49860	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.523746014 CEST	443	49860	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.529582024 CEST	49864	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.529616117 CEST	443	49864	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.529717922 CEST	49864	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.530025005 CEST	49864	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.530035973 CEST	443	49864	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.540586948 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.540607929 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.540667057 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.540693045 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.540693045 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.540741920 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.540766001 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.540828943 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.540828943 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.542444944 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.542478085 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.542538881 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.542558908 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.542584896 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.542607069 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.544477940 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.544509888 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.544584036 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.544591904 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.544611931 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.544641018 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.544658899 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.544676065 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.546289921 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.546361923 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.546402931 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.546422005 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.546447992 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.546463013 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.546516895 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.551789999 CEST	49858	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.551826954 CEST	443	49858	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.554369926 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.554450989 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.554481983 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.554541111 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.554604053 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.554639101 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.556474924 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.556546926 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.556583881 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.556591034 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.556613922 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.556617975 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.556655884 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.558183908 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.558228016 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.558248043 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.558275938 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.558284998 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.558305025 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.558331013 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.558363914 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.558397055 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.559170961 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.559178114 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.559204102 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.559253931 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.559820890 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.559916019 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.560642004 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.560717106 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.561467886 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.561552048 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.564090014 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.564151049 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.564196110 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.564222097 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.564246893 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.564270020 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.564450979 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.564527988 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.573441982 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.573487997 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.573546886 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.573577881 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.573596001 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.573926926 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.573965073 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.574014902 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.574016094 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.574033976 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.574039936 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.574069977 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.574088097 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.574773073 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.574831009 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.574872971 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.574897051 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.574922085 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.574938059 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.574944973 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.575508118 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.575551033 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.575579882 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.575598001 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.575627089 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.576090097 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.576128960 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.576180935 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.576200962 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.576215982 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.576905966 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.576967955 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.577002048 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.577023983 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.577043056 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.577076912 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.577568054 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.577610016 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.577636003 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.577653885 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.577670097 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.577696085 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.578174114 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.578214884 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.578248024 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.578267097 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.578284025 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.578310966 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.578845978 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.578888893 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.578921080 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.578938007 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.578955889 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.578980923 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.579018116 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.579070091 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.579082012 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.579119921 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.579206944 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.579258919 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.580380917 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.589148045 CEST	49854	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.589176893 CEST	443	49854	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.601560116 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.601655006 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.601680040 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.601710081 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.601741076 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.601803064 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.601809025 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.601809025 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.603568077 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.603591919 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.603630066 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.603647947 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.603652954 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.603688955 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.603718042 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.603718042 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.603729963 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.603826046 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.603851080 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.604140997 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.607258081 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.607296944 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.608172894 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.608620882 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.608743906 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.608793974 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.617537975 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.617602110 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.617726088 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.617930889 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.617959976 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.622951031 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.636673927 CEST	443	49864	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.637053967 CEST	49864	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.637115955 CEST	443	49864	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.638178110 CEST	443	49864	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.638624907 CEST	49864	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.638822079 CEST	49864	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.638838053 CEST	443	49864	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.638869047 CEST	443	49864	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.644911051 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.645020008 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.645037889 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.645091057 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.645112991 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.645164967 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.645322084 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.645694971 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.645777941 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.645800114 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.646035910 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.646094084 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.646107912 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.646135092 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.646168947 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.646445036 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.646519899 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.646538973 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.646608114 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.646675110 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.646693945 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.646763086 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.646821976 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.646841049 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.647110939 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.647181988 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.647196054 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.647705078 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.647778034 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.647804022 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.647860050 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.647938013 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.647962093 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.648650885 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.648695946 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.648741961 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.648762941 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.648789883 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.649255037 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.649326086 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.649343967 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.649363995 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.649393082 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.649591923 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.649660110 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.650800943 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.654704094 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.655021906 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.656090021 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.656572104 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.656717062 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.656733990 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.663979053 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.687226057 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.687350988 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.687407017 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.687452078 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.687484980 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.687622070 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.687684059 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.691895962 CEST	49859	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.691934109 CEST	443	49859	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.697633028 CEST	49857	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.697684050 CEST	443	49857	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.698798895 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.706295013 CEST	49867	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.706330061 CEST	443	49867	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.706427097 CEST	49867	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.706707001 CEST	49867	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.706736088 CEST	443	49867	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.708091021 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.709228992 CEST	49868	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.709283113 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.709353924 CEST	49868	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.709975958 CEST	49868	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.710011005 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.713954926 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.723946095 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.724886894 CEST	49864	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.737669945 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.737701893 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.737713099 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.737735033 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.737745047 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.737761021 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.737763882 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.737785101 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.737804890 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.737835884 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.737844944 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.737859011 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.737901926 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.737911940 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.757143974 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.757170916 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.757257938 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.757278919 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.757318020 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.757333994 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.757369041 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.757400036 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.757400036 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.757400036 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.757400036 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.757416964 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.757450104 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.768234015 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.768559933 CEST	443	49867	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.768599033 CEST	49868	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.768663883 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.768774986 CEST	49867	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.768820047 CEST	443	49867	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.769139051 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.769476891 CEST	443	49867	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.769623995 CEST	49868	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.769735098 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.770014048 CEST	49867	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.770152092 CEST	443	49867	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.770205021 CEST	49868	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.770287991 CEST	49867	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.803154945 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.803185940 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.803241014 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.803261042 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.803268909 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.803278923 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.803299904 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.803304911 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.803317070 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.803332090 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.803356886 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.803381920 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.810842037 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.813950062 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.814824104 CEST	443	49867	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.824143887 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.824176073 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.824263096 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.824302912 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.824311972 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.824356079 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.824388027 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.824405909 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.824405909 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.824407101 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.824450970 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.824450970 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.824958086 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.825057983 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.825079918 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.825144053 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.825161934 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.825633049 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.825742006 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.827054977 CEST	49862	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.827089071 CEST	443	49862	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.828572035 CEST	443	49864	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.828736067 CEST	443	49864	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.828821898 CEST	49864	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.829490900 CEST	49864	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:01.829521894 CEST	443	49864	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:01.833794117 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.833858967 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.833966970 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.834413052 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.834445953 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.874877930 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.874910116 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.874919891 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.874955893 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.874984980 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.875029087 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.875036955 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.875088930 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.875093937 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.875138044 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.875143051 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.875488997 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.875560999 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.876517057 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.876991987 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.877131939 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.877159119 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.877190113 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.890171051 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.891418934 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.891473055 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.891545057 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.891581059 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.891609907 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.891633987 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.918225050 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.918243885 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.918284893 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.918335915 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.918343067 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.918391943 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.918416023 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.918420076 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.947290897 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.947309971 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.947348118 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.947360039 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.947387934 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.947446108 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.947487116 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.947487116 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.974545956 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.974569082 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.974628925 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.974700928 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.974704027 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.974755049 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.974761963 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.974828005 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.979964972 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.980046988 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.980118036 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.980145931 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.980174065 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.980199099 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.982156992 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.982223988 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.982284069 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.982317924 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.982347012 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.982352018 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.982419968 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.982436895 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:01.982482910 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:01.984512091 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.984585047 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.984599113 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.984643936 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.984662056 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.984711885 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.984755993 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.984755993 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.995399952 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.995448112 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.995560884 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.995577097 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:01.995609045 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:01.995639086 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.014112949 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.036794901 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.036866903 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.036900997 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.036962986 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.037002087 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.053143978 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.053252935 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.053297043 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.053332090 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.053370953 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.053385019 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.053423882 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.053451061 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.067759037 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.067888021 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.067915916 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.067954063 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.068001986 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.068068027 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.068135023 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.068156004 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.068214893 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.068268061 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.068303108 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.068305016 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.068335056 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.068357944 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.068437099 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.069401979 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.069519043 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.069540977 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.069631100 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.069654942 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.069694042 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.069715023 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.069750071 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.070817947 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.070890903 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.070920944 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.070940018 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.070982933 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.072097063 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.072184086 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.072207928 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.072233915 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.072263002 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.072360992 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.072429895 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.076410055 CEST	49863	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.076441050 CEST	443	49863	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.081146002 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.081213951 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.081268072 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.081325054 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.081367016 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.087318897 CEST	49870	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.087388039 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.087481976 CEST	49870	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.087949038 CEST	49870	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.087990999 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.094070911 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.095536947 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.095575094 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.095635891 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.095655918 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.095686913 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.095721006 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.095756054 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.095761061 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.095777988 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.095830917 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.097152948 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.097237110 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.097279072 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.097326994 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.097358942 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.107378960 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.107453108 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.107481956 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.107532024 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.107563972 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.110989094 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.111094952 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.111115932 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.111140013 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.111192942 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.111200094 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.111274958 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.111413956 CEST	49861	443	192.168.2.3	162.125.69.16
Aug 10, 2023 23:19:02.111443043 CEST	443	49861	162.125.69.16	192.168.2.3
Aug 10, 2023 23:19:02.124247074 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.127245903 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.127578974 CEST	49870	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.127624989 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.128531933 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.129089117 CEST	49870	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.129203081 CEST	49870	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.129219055 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.129262924 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.159935951 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.159965992 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.160074949 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.160079002 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.160125017 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.160167933 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.160203934 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.160203934 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.160203934 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.162827969 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.162919044 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.162930965 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.162949085 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.162980080 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.163009882 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.163009882 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.163022995 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.163084984 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.170901060 CEST	49865	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.170933962 CEST	443	49865	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.181319952 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.181386948 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.181482077 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.181756973 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.181785107 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.182195902 CEST	443	49867	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.182254076 CEST	443	49867	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.182404995 CEST	443	49867	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.182488918 CEST	49867	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.182488918 CEST	49867	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.183805943 CEST	49867	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.183840036 CEST	443	49867	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.185127020 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.185298920 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.185343027 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.187129021 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.187176943 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.187283993 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.187298059 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.187341928 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.187388897 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.187417030 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.187489986 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.187562943 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.187844038 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.187901020 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.187992096 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.188414097 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.188445091 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.190835953 CEST	49866	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.190866947 CEST	443	49866	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.192434072 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.192491055 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.192534924 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.192599058 CEST	49868	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.192651987 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.192693949 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.192704916 CEST	49868	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.192733049 CEST	49868	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.192750931 CEST	49868	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.199148893 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.199197054 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.199285030 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.199501991 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.199533939 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.204406977 CEST	49868	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.204451084 CEST	443	49868	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.218972921 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.219404936 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.219443083 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.220741034 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.221240997 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.221358061 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.221390009 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.224998951 CEST	49870	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.225740910 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.226108074 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.226706028 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.227677107 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.227803946 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.227816105 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.235461950 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.235791922 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.237657070 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.237776995 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.238296032 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.238428116 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.238452911 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.262926102 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.270862103 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.278863907 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.314055920 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.314055920 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.314106941 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.414069891 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.427028894 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.479156017 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.479207993 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.479224920 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.479310989 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.479321957 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.479321957 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.479356050 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.479374886 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.479410887 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.479410887 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.479412079 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.479429960 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.479432106 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.479477882 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.568587065 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.568624020 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.568706036 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.568734884 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.568778038 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.568829060 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.568871021 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.568937063 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.568954945 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.570573092 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.570605040 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.570671082 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.570697069 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.570713043 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.570761919 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.570813894 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.585062027 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.585108995 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.585124969 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.585196972 CEST	49870	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.585231066 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.585257053 CEST	49870	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.585258007 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.585344076 CEST	49870	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.588159084 CEST	49870	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.588211060 CEST	443	49870	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.614051104 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.614098072 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.616661072 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.616695881 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.616777897 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.616806030 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.616844893 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.616888046 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.616915941 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.654426098 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.654681921 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.654706001 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.654745102 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.654798031 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.654829979 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.654856920 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.654882908 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.654901028 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.654927969 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.654927969 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.654927969 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.654927969 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.654959917 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.656874895 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.656894922 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.659441948 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.659471989 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.659544945 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.659574032 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.659593105 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.659610033 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.659615993 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.659629107 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.659667015 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.660387993 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.660455942 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.660490990 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.660501957 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.660556078 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.666928053 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.666997910 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667018890 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667052984 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667077065 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667135954 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.667186022 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667196035 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667227030 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667246103 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667253017 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.667253017 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.667294025 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667309046 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.667323112 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667346954 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.667370081 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.667372942 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667421103 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.667431116 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667454958 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667467117 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.667501926 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.667503119 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.667525053 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.667567015 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.671072006 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.671138048 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.671197891 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.671206951 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.671233892 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.671344042 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.671401024 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.684604883 CEST	49869	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.684642076 CEST	443	49869	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.687108040 CEST	49873	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.687153101 CEST	443	49873	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.700942993 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.701000929 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.701021910 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.701093912 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.701127052 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.701148987 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.701178074 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.701189041 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.701241970 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.702692986 CEST	49872	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.702728987 CEST	443	49872	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.714246035 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.742989063 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.743020058 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.743124962 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.743153095 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.743227959 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.743262053 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.743310928 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.743387938 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.744004011 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.744028091 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.744112968 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.744143963 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.744167089 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.744224072 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.744296074 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:02.744384050 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.748342991 CEST	49871	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:02.748374939 CEST	443	49871	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.636323929 CEST	49874	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.636404037 CEST	443	49874	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.636507988 CEST	49874	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.636837959 CEST	49874	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.636874914 CEST	443	49874	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.737735987 CEST	49875	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.737828970 CEST	443	49875	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.737945080 CEST	49875	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.738378048 CEST	49875	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.738419056 CEST	443	49875	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.759677887 CEST	443	49874	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.760076046 CEST	49874	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.760144949 CEST	443	49874	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.760605097 CEST	443	49874	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.761045933 CEST	49874	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.761146069 CEST	443	49874	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.761205912 CEST	49874	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.784640074 CEST	49876	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.784708023 CEST	443	49876	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.784821033 CEST	49876	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.785464048 CEST	49877	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.785514116 CEST	443	49877	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.785593987 CEST	49877	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.785876989 CEST	49876	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.785944939 CEST	443	49876	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.786173105 CEST	49877	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.786202908 CEST	443	49877	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.802839041 CEST	443	49874	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.814254045 CEST	49874	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.826911926 CEST	49878	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.826942921 CEST	443	49878	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.827132940 CEST	49878	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.827469110 CEST	49878	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.827491999 CEST	443	49878	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.835128069 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.835189104 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.835270882 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.835515022 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.835541010 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.837240934 CEST	49880	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.837275028 CEST	443	49880	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.837347984 CEST	49880	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.837634087 CEST	49880	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.837661982 CEST	443	49880	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.838310957 CEST	49881	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.838372946 CEST	443	49881	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.838459969 CEST	49881	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.838676929 CEST	49881	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.838711977 CEST	443	49881	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.904562950 CEST	443	49875	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.904912949 CEST	49875	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.904947042 CEST	443	49875	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.905962944 CEST	443	49875	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.906435966 CEST	49875	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.906577110 CEST	49875	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.906586885 CEST	443	49875	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.906605959 CEST	443	49875	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.913753986 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.914072037 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.914138079 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.914561987 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.915019989 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.915167093 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.915182114 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.915276051 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.926683903 CEST	443	49878	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.927033901 CEST	49878	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.927098036 CEST	443	49878	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.929646969 CEST	443	49878	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.929821968 CEST	49878	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.930175066 CEST	49878	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.930329084 CEST	49878	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.930351019 CEST	443	49878	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.930408001 CEST	443	49878	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.931556940 CEST	443	49880	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.931826115 CEST	49880	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.931889057 CEST	443	49880	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.932589054 CEST	443	49880	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.933037043 CEST	49880	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.933248043 CEST	443	49880	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.934341908 CEST	49880	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.944853067 CEST	49882	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.944916010 CEST	443	49882	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.945022106 CEST	49882	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.945586920 CEST	49883	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.945632935 CEST	443	49883	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.945703983 CEST	49883	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.945885897 CEST	49882	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.945921898 CEST	443	49882	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.946094036 CEST	49883	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.946125984 CEST	443	49883	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.946873903 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.946954012 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.947047949 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.947520971 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.947580099 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.947658062 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.947789907 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.947851896 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.947879076 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:03.947902918 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:03.962644100 CEST	443	49877	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.962968111 CEST	49877	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.963011980 CEST	443	49877	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.964597940 CEST	443	49877	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.964735985 CEST	49877	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.965925932 CEST	49877	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.966110945 CEST	443	49877	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:03.966111898 CEST	49877	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:03.974797964 CEST	443	49880	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.006803989 CEST	443	49877	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.014158964 CEST	49877	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.014197111 CEST	443	49877	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.025299072 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.028989077 CEST	49878	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.029026985 CEST	49875	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.029032946 CEST	443	49878	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.043649912 CEST	443	49876	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.070815086 CEST	49876	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.070885897 CEST	443	49876	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.073376894 CEST	443	49876	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.073910952 CEST	49876	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.074110031 CEST	49876	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.074129105 CEST	443	49876	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.074456930 CEST	443	49876	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.079255104 CEST	443	49881	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.079651117 CEST	49881	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.079716921 CEST	443	49881	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.081486940 CEST	443	49881	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.081592083 CEST	49881	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.082228899 CEST	49881	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.082453012 CEST	49881	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.082473040 CEST	443	49881	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.082499027 CEST	443	49881	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.095022917 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.096034050 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.096043110 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.096082926 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.096426964 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.096491098 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.097764015 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.097902060 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.098140955 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.098284006 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.098619938 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.098823071 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.098838091 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.098869085 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.101968050 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.102134943 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.102158070 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.102185011 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.113940001 CEST	443	49882	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.114145994 CEST	49877	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.114393950 CEST	443	49883	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.125153065 CEST	49878	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.125165939 CEST	49876	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.141133070 CEST	443	49875	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.141340017 CEST	443	49875	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.141447067 CEST	49875	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.214210033 CEST	49881	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.214231968 CEST	443	49881	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.214286089 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.214293003 CEST	49882	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.214330912 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.234186888 CEST	49883	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.234204054 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.234239101 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.269762993 CEST	443	49877	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.270946980 CEST	443	49877	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.271127939 CEST	49877	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.314213991 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.314256907 CEST	49881	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.341301918 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.341358900 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.341381073 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.341419935 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.341438055 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.341454983 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.341486931 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.341541052 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.341578007 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.341578007 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.341602087 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.341634035 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.341634035 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.341650009 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.341706991 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.358887911 CEST	443	49876	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.359074116 CEST	443	49876	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.359158993 CEST	49876	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.383481026 CEST	443	49880	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.383625984 CEST	443	49880	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.383728027 CEST	49880	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.385932922 CEST	443	49881	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.386121988 CEST	443	49881	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.386250973 CEST	49881	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.425304890 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.430366993 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.430519104 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.430624008 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.430644989 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.430677891 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.430680037 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.430738926 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.502515078 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.502619028 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.502752066 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.502867937 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.502867937 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.510714054 CEST	49883	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.510778904 CEST	443	49883	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.510956049 CEST	49882	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.511014938 CEST	443	49882	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.511293888 CEST	49876	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.511351109 CEST	443	49876	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.512085915 CEST	49886	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.512146950 CEST	443	49886	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.512264013 CEST	49886	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.512362957 CEST	443	49882	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.512518883 CEST	443	49883	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.512588024 CEST	49877	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.512604952 CEST	443	49877	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.513098955 CEST	49887	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.513150930 CEST	443	49887	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.513221979 CEST	49887	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.513617039 CEST	49881	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.513660908 CEST	443	49881	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.514050007 CEST	49888	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.514105082 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.514190912 CEST	49888	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.514533997 CEST	49875	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.514554977 CEST	443	49875	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.516597033 CEST	49882	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.516968012 CEST	49886	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.517035961 CEST	443	49886	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.517149925 CEST	443	49882	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.517837048 CEST	49883	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.518028021 CEST	49887	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.518066883 CEST	443	49887	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.518296957 CEST	443	49883	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.518351078 CEST	49888	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.518384933 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.519452095 CEST	49882	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.519623995 CEST	49883	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.521331072 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.521383047 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.521471977 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.521497011 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.521524906 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.521578074 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.521579027 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.561995983 CEST	443	49874	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.562160969 CEST	443	49874	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.562292099 CEST	49874	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.562798977 CEST	443	49883	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.562813044 CEST	443	49882	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.563766956 CEST	49874	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.563807964 CEST	443	49874	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.590533972 CEST	49890	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.590593100 CEST	443	49890	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.590677977 CEST	49890	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.590965986 CEST	49890	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.591001987 CEST	443	49890	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.593974113 CEST	49880	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.593993902 CEST	443	49880	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.598562956 CEST	49884	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.598607063 CEST	443	49884	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.600637913 CEST	49885	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.600682974 CEST	443	49885	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.603214025 CEST	49892	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.603250027 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.603327036 CEST	49892	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.603661060 CEST	49892	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.603677034 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.604646921 CEST	49879	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.604657888 CEST	443	49879	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.607708931 CEST	49893	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.607757092 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.607909918 CEST	49893	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.608278036 CEST	49893	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.608308077 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.654505968 CEST	49898	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.654567957 CEST	443	49898	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.654731989 CEST	49898	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.655051947 CEST	49898	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.655083895 CEST	443	49898	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.659591913 CEST	443	49878	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.659813881 CEST	443	49878	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.659903049 CEST	49878	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.661010981 CEST	49878	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.661034107 CEST	443	49878	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.666095972 CEST	49899	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.666122913 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.666203022 CEST	49899	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.666573048 CEST	49899	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:04.666589022 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:04.934341908 CEST	443	49738	142.251.36.164	192.168.2.3
Aug 10, 2023 23:19:04.934473038 CEST	443	49738	142.251.36.164	192.168.2.3
Aug 10, 2023 23:19:04.934639931 CEST	49738	443	192.168.2.3	142.251.36.164
Aug 10, 2023 23:19:04.945058107 CEST	443	49883	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.945126057 CEST	443	49883	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.945255995 CEST	49883	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.945266008 CEST	443	49883	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:04.945349932 CEST	49883	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:04.994360924 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.020421028 CEST	443	49882	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.020478010 CEST	443	49882	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.020613909 CEST	443	49882	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.020665884 CEST	49882	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:05.020716906 CEST	49882	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:05.108263969 CEST	443	49887	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.114294052 CEST	49888	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.122080088 CEST	443	49886	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.160799980 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.217133045 CEST	49892	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:05.217211008 CEST	49886	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.221400976 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.235050917 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.273753881 CEST	443	49890	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.283585072 CEST	443	49898	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.314275980 CEST	49899	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.314831018 CEST	443	49887	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.314980984 CEST	49890	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.314990044 CEST	49887	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.323288918 CEST	49893	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:05.323293924 CEST	49898	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.823493958 CEST	49898	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.823559999 CEST	443	49898	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.823668957 CEST	49890	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.823698044 CEST	443	49890	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.827204943 CEST	443	49898	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.827269077 CEST	443	49890	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.827419043 CEST	49898	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.828033924 CEST	49890	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.848984003 CEST	49893	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:05.849021912 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.849167109 CEST	49899	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.849225998 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.849469900 CEST	49892	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:05.849540949 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.849873066 CEST	49886	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.849905968 CEST	443	49886	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.850008965 CEST	49887	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.850045919 CEST	443	49887	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.850850105 CEST	49888	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.850878000 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.851460934 CEST	443	49887	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.851524115 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.852128983 CEST	443	49886	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.852128983 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.852473021 CEST	49890	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.852765083 CEST	443	49890	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.852893114 CEST	49898	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.853221893 CEST	443	49898	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.853290081 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.853332996 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.853365898 CEST	49899	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.854434013 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.854497910 CEST	49888	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.854511976 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.854695082 CEST	49887	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.854949951 CEST	443	49887	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.855053902 CEST	49892	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:05.855421066 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.855772018 CEST	49886	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.856142998 CEST	49893	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:05.856194973 CEST	443	49886	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.856945992 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.857070923 CEST	49899	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.857351065 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.857971907 CEST	49888	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.858184099 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.858810902 CEST	49890	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.858850956 CEST	443	49890	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.859040976 CEST	49898	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.859071016 CEST	49890	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.859081030 CEST	443	49898	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.859874964 CEST	49887	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.860013962 CEST	49892	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:05.860146046 CEST	49887	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.860162973 CEST	443	49887	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.860688925 CEST	49886	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.860757113 CEST	49893	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:05.861246109 CEST	49899	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.861275911 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.862078905 CEST	49899	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.862627983 CEST	49888	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.862646103 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.862746000 CEST	49888	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.902833939 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.902861118 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:05.902895927 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.902928114 CEST	443	49886	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.902945995 CEST	443	49890	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.906836033 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:05.925338984 CEST	49898	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:05.970546007 CEST	49738	443	192.168.2.3	142.251.36.164
Aug 10, 2023 23:19:05.970592976 CEST	443	49738	142.251.36.164	192.168.2.3
Aug 10, 2023 23:19:06.114573956 CEST	443	49898	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.114762068 CEST	443	49898	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.114877939 CEST	49898	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.124140024 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.124320984 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.124490023 CEST	49899	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.135998011 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.136213064 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.136328936 CEST	49888	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.144860983 CEST	443	49886	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.145277977 CEST	443	49886	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.145452023 CEST	49886	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.165133953 CEST	443	49887	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.165302992 CEST	443	49887	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.165395021 CEST	49887	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.165633917 CEST	443	49890	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.165818930 CEST	443	49890	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.165894985 CEST	49890	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.273571968 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.273650885 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.273861885 CEST	49892	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.273916006 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.273958921 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.274015903 CEST	49892	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.277174950 CEST	49892	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.290556908 CEST	49883	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.290596962 CEST	443	49883	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.292177916 CEST	49888	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.292222977 CEST	443	49888	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.292691946 CEST	49901	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.292758942 CEST	443	49901	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.292860985 CEST	49901	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.293909073 CEST	49899	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.293953896 CEST	443	49899	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.298928976 CEST	49902	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.299017906 CEST	443	49902	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.299125910 CEST	49902	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.299886942 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.299940109 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.300014973 CEST	49893	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.300062895 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.300117970 CEST	49893	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.300395012 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.300982952 CEST	49890	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.301027060 CEST	443	49890	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.301403046 CEST	49903	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.301461935 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.301541090 CEST	49903	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.301666021 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.301776886 CEST	49893	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.302620888 CEST	49887	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.302665949 CEST	443	49887	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.302987099 CEST	49904	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.303045988 CEST	443	49904	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.303131104 CEST	49904	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.308360100 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.308360100 CEST	49886	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.308427095 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.308463097 CEST	443	49886	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.308495998 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.308876038 CEST	49906	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.308933973 CEST	443	49906	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.309006929 CEST	49906	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.311464071 CEST	49901	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.311527967 CEST	443	49901	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.316188097 CEST	49882	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.316246986 CEST	443	49882	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.319889069 CEST	49902	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.319936037 CEST	443	49902	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.320377111 CEST	49898	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.320420027 CEST	443	49898	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.322266102 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.322325945 CEST	443	49907	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.322412968 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.323492050 CEST	49903	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.323549986 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.324883938 CEST	49904	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.324955940 CEST	443	49904	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.325135946 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.325165033 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.325985909 CEST	49906	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.326031923 CEST	443	49906	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.336699009 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.336736917 CEST	443	49907	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.340678930 CEST	49892	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.340717077 CEST	443	49892	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.369510889 CEST	49893	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:06.369559050 CEST	443	49893	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:06.465900898 CEST	49914	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.465958118 CEST	443	49914	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.466093063 CEST	49914	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.466396093 CEST	49914	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.466419935 CEST	443	49914	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.472151995 CEST	49915	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.472208023 CEST	443	49915	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.472296953 CEST	49915	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.472508907 CEST	49915	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.472543955 CEST	443	49915	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.501235008 CEST	49916	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.501235008 CEST	49918	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.501239061 CEST	49917	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.501239061 CEST	49919	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.501239061 CEST	49921	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.501243114 CEST	49920	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.501276970 CEST	443	49916	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.501291990 CEST	443	49917	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.501291990 CEST	443	49919	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.501306057 CEST	443	49921	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.501310110 CEST	443	49920	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.501312017 CEST	443	49918	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.501394033 CEST	49916	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.501420975 CEST	49917	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.501462936 CEST	49920	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.501497030 CEST	49919	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.501498938 CEST	49918	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.501499891 CEST	49921	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.502523899 CEST	49918	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.502554893 CEST	443	49918	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.503010988 CEST	49921	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.503051996 CEST	443	49921	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.503318071 CEST	49919	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.503350019 CEST	443	49919	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.503626108 CEST	49920	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.503665924 CEST	443	49920	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.503834009 CEST	49917	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.503864050 CEST	443	49917	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.504039049 CEST	49916	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.504074097 CEST	443	49916	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.807848930 CEST	443	49920	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.808407068 CEST	49920	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.808454037 CEST	443	49920	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.812144995 CEST	443	49920	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.812248945 CEST	49920	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.814157009 CEST	49920	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.814371109 CEST	49920	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.814537048 CEST	443	49920	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.827440977 CEST	443	49920	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.827554941 CEST	49920	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.827586889 CEST	443	49920	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.827617884 CEST	443	49920	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.827682018 CEST	49920	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.828861952 CEST	49920	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.828891039 CEST	443	49920	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.844069004 CEST	443	49916	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.844358921 CEST	49916	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.844398022 CEST	443	49916	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.847676992 CEST	443	49916	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.847771883 CEST	49916	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.848279953 CEST	49916	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.848455906 CEST	49916	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.848545074 CEST	443	49916	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.860896111 CEST	443	49916	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.860979080 CEST	443	49916	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.860994101 CEST	49916	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.861071110 CEST	49916	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.862329006 CEST	49916	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.862365961 CEST	443	49916	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.913712025 CEST	443	49915	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.914136887 CEST	49915	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.914201975 CEST	443	49915	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.916134119 CEST	443	49915	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.916743040 CEST	49915	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.916909933 CEST	49915	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.916932106 CEST	443	49915	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.917332888 CEST	443	49915	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.931454897 CEST	443	49918	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.931782007 CEST	49918	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.931809902 CEST	443	49918	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.936157942 CEST	443	49918	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.936253071 CEST	49918	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.936928988 CEST	49918	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.937130928 CEST	49918	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.937545061 CEST	443	49918	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.958213091 CEST	443	49918	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.958364010 CEST	49918	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.958390951 CEST	443	49918	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.958451033 CEST	49918	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.958461046 CEST	443	49918	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.958534002 CEST	49918	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.959868908 CEST	49918	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:06.959899902 CEST	443	49918	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:06.963948011 CEST	443	49901	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.964348078 CEST	49901	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.964409113 CEST	443	49901	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.966926098 CEST	443	49901	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.967437029 CEST	49901	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.967619896 CEST	49901	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.967634916 CEST	443	49901	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.967806101 CEST	443	49901	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.987071037 CEST	443	49902	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.987396002 CEST	49902	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.987427950 CEST	443	49902	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.989631891 CEST	443	49902	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.990283966 CEST	49902	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.990478992 CEST	49902	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:06.990492105 CEST	443	49902	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:06.990729094 CEST	443	49902	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.014359951 CEST	49915	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.023356915 CEST	49901	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.092195988 CEST	443	49904	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.092518091 CEST	49904	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.092592001 CEST	443	49904	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.096323967 CEST	443	49904	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.096440077 CEST	49904	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.096920967 CEST	49904	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.097193003 CEST	443	49904	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.098237038 CEST	49904	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.098284006 CEST	443	49904	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.114351034 CEST	49902	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.125283003 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.125751019 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.125785112 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.127986908 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.128514051 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.128706932 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.128726959 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.128992081 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.155069113 CEST	443	49915	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.155250072 CEST	443	49915	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.155353069 CEST	49915	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.156136036 CEST	49915	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.156172991 CEST	443	49915	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.188075066 CEST	443	49919	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.188452005 CEST	49919	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.188513041 CEST	443	49919	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.192711115 CEST	443	49919	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.192837954 CEST	49919	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.193366051 CEST	49919	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.193551064 CEST	49919	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.193933964 CEST	443	49919	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.212395906 CEST	443	49906	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.212770939 CEST	49906	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.212827921 CEST	443	49906	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.214380026 CEST	49904	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.214479923 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.215219975 CEST	443	49919	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.215322018 CEST	49919	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.215359926 CEST	443	49919	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.215390921 CEST	443	49919	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.215451956 CEST	49919	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.215451956 CEST	49919	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.216495991 CEST	49919	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.216533899 CEST	443	49919	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.217067957 CEST	443	49906	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.217175961 CEST	49906	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.217710018 CEST	49906	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.217880011 CEST	49906	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.217897892 CEST	443	49906	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.218014002 CEST	443	49906	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.245949030 CEST	443	49901	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.246218920 CEST	443	49901	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.246325016 CEST	49901	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.246890068 CEST	49901	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.246922016 CEST	443	49901	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.247417927 CEST	49923	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.247478008 CEST	443	49923	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.247567892 CEST	49923	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.248039961 CEST	49923	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.248070002 CEST	443	49923	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.268709898 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.270200968 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.270226955 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.270273924 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.270313025 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.270345926 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.270369053 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.270385027 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.270409107 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.270437002 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.270448923 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.270509005 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.293911934 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.294209957 CEST	49903	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.294254065 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.297888994 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.297986984 CEST	49903	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.298540115 CEST	49903	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.298760891 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.298805952 CEST	49903	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.303006887 CEST	443	49907	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.303394079 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.303456068 CEST	443	49907	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.307457924 CEST	443	49907	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.307609081 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.308000088 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.308248043 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.308268070 CEST	443	49907	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.308576107 CEST	443	49907	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.314455986 CEST	49906	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.314501047 CEST	443	49906	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.332679033 CEST	443	49904	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.332886934 CEST	443	49904	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.332966089 CEST	49904	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.333816051 CEST	49904	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.333848953 CEST	443	49904	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.334692001 CEST	49924	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.334737062 CEST	443	49924	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.334845066 CEST	49924	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.336003065 CEST	49924	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.336031914 CEST	443	49924	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.342823982 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.360285044 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.360343933 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.360403061 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.360421896 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.360474110 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.360589981 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.360738039 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.360812902 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.362411022 CEST	49905	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:07.362437963 CEST	443	49905	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:07.402717113 CEST	443	49921	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.402964115 CEST	49921	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.402988911 CEST	443	49921	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.404213905 CEST	443	49914	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.404536963 CEST	49914	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.404603958 CEST	443	49914	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.405106068 CEST	443	49921	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.405215025 CEST	49921	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.405637026 CEST	443	49914	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.405865908 CEST	49921	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.406110048 CEST	49921	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.406151056 CEST	443	49921	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.406490088 CEST	49914	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.406747103 CEST	49914	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.406764984 CEST	443	49914	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.406795979 CEST	443	49914	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.414438009 CEST	49906	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.416460991 CEST	443	49917	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.416974068 CEST	49917	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.417004108 CEST	443	49917	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.418817997 CEST	443	49921	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.418915987 CEST	443	49921	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.418962955 CEST	49921	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.419011116 CEST	49921	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.419200897 CEST	443	49917	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.419332981 CEST	49917	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.425414085 CEST	49903	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.425457954 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.425551891 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.425596952 CEST	443	49907	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.426706076 CEST	49917	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.427069902 CEST	443	49917	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.427932978 CEST	49917	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.427964926 CEST	443	49917	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.431495905 CEST	49921	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.431541920 CEST	443	49921	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.449681044 CEST	443	49917	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.449791908 CEST	49917	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.449836016 CEST	443	49917	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.449871063 CEST	443	49917	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.449922085 CEST	49917	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.449948072 CEST	49917	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.450706005 CEST	49917	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:07.450731039 CEST	443	49917	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:07.461146116 CEST	443	49906	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.461313009 CEST	443	49906	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.461467028 CEST	49906	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.462487936 CEST	49906	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.462529898 CEST	443	49906	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.462907076 CEST	49927	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.462975979 CEST	443	49927	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.463095903 CEST	49927	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.463927984 CEST	49927	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.463960886 CEST	443	49927	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.476378918 CEST	49928	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.476422071 CEST	443	49928	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.476530075 CEST	49928	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.476819992 CEST	49928	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.476844072 CEST	443	49928	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.556569099 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.556812048 CEST	49903	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.556855917 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.556891918 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.556957960 CEST	49903	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.557545900 CEST	49903	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.557570934 CEST	443	49903	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.558109999 CEST	49929	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.558146000 CEST	443	49929	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.558238983 CEST	49929	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.559204102 CEST	49929	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.559235096 CEST	443	49929	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.585633039 CEST	443	49923	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.586399078 CEST	49923	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.586426973 CEST	443	49923	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.587487936 CEST	443	49923	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.587994099 CEST	49923	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.588222027 CEST	443	49923	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.588391066 CEST	49923	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.588499069 CEST	49923	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.588506937 CEST	443	49923	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.604227066 CEST	443	49902	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.604476929 CEST	443	49902	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.604559898 CEST	49902	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.606338024 CEST	49902	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.606379032 CEST	443	49902	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.606770039 CEST	49930	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.606805086 CEST	443	49930	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.606884003 CEST	49930	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.607811928 CEST	49930	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.607829094 CEST	443	49930	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.608612061 CEST	443	49924	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.608865976 CEST	49924	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.608895063 CEST	443	49924	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.609597921 CEST	443	49924	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.610316038 CEST	49924	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.610579967 CEST	443	49924	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.610816002 CEST	49924	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.610918999 CEST	49924	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.610939980 CEST	443	49924	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.614864111 CEST	443	49914	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.614943027 CEST	49914	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.623403072 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.639621973 CEST	443	49914	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.639887094 CEST	443	49914	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.639978886 CEST	49914	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.640604973 CEST	49914	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.640625000 CEST	443	49914	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.641443014 CEST	49932	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.641498089 CEST	443	49932	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.641593933 CEST	49932	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.641849995 CEST	49932	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.641875982 CEST	443	49932	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.644018888 CEST	443	49927	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.644316912 CEST	49927	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.644386053 CEST	443	49927	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.645203114 CEST	443	49927	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.645684958 CEST	49927	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.645843983 CEST	443	49927	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.645852089 CEST	49927	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.645884037 CEST	49927	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.645920992 CEST	443	49927	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.665842056 CEST	443	49928	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.666172028 CEST	49928	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.666233063 CEST	443	49928	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.667464018 CEST	443	49928	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.667942047 CEST	49928	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.668093920 CEST	49928	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.668108940 CEST	443	49928	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.668134928 CEST	443	49928	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.714421988 CEST	49928	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.725411892 CEST	49927	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.863661051 CEST	443	49928	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.864022017 CEST	443	49928	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.864090919 CEST	49928	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.868669033 CEST	443	49923	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.868801117 CEST	443	49923	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.868858099 CEST	49928	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.868891954 CEST	443	49928	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.868890047 CEST	49923	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.870117903 CEST	49923	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.870152950 CEST	443	49923	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.870512962 CEST	49939	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.870544910 CEST	443	49939	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.870620012 CEST	49939	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.871603966 CEST	49939	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.871619940 CEST	443	49939	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.878055096 CEST	443	49927	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.878954887 CEST	443	49927	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.879053116 CEST	49927	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.882452011 CEST	49927	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.882483006 CEST	443	49927	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.883037090 CEST	49940	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.883085012 CEST	443	49940	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.883166075 CEST	49940	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.883964062 CEST	49940	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.883990049 CEST	443	49940	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.885226011 CEST	443	49930	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.885641098 CEST	49930	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.885675907 CEST	443	49930	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.887052059 CEST	443	49930	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.887607098 CEST	443	49924	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.887727976 CEST	443	49924	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.887819052 CEST	49924	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.890022039 CEST	49930	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.890320063 CEST	443	49930	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.891288042 CEST	49924	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.891316891 CEST	443	49924	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.891674042 CEST	49941	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.891716003 CEST	443	49941	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.891812086 CEST	49941	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.893352985 CEST	49941	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.893388033 CEST	443	49941	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.894308090 CEST	49930	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.894435883 CEST	49930	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.894459963 CEST	443	49930	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.900418997 CEST	443	49929	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.910470963 CEST	443	49932	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.913963079 CEST	49929	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.913999081 CEST	443	49929	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.914354086 CEST	49932	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.914408922 CEST	443	49932	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.915307045 CEST	443	49932	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.916034937 CEST	49932	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.916192055 CEST	49932	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.916207075 CEST	443	49932	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.916227102 CEST	443	49932	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.916313887 CEST	443	49929	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.916882992 CEST	49929	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.917267084 CEST	443	49929	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.919779062 CEST	49929	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.920460939 CEST	49929	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.920484066 CEST	443	49929	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.953726053 CEST	49943	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.953779936 CEST	443	49943	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:07.953866005 CEST	49943	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.954305887 CEST	49943	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:07.954338074 CEST	443	49943	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.012307882 CEST	443	49907	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.012507915 CEST	443	49907	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.012588978 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.013216972 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.013242006 CEST	443	49907	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.013264894 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.013308048 CEST	49907	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.013667107 CEST	49944	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.013725042 CEST	443	49944	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.013817072 CEST	49944	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.015564919 CEST	49944	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.015603065 CEST	443	49944	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.025465012 CEST	49932	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.112361908 CEST	443	49930	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.112507105 CEST	443	49930	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.112596035 CEST	49930	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.113416910 CEST	49930	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.113444090 CEST	443	49930	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.113878012 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.113945007 CEST	443	49945	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.114063025 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.114661932 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.114694118 CEST	443	49945	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.128740072 CEST	443	49929	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.128963947 CEST	443	49929	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.129061937 CEST	49929	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.129611969 CEST	49929	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.129643917 CEST	443	49929	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.130006075 CEST	49946	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.130067110 CEST	443	49946	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.130152941 CEST	49946	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.134686947 CEST	49946	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.134721041 CEST	443	49946	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.162311077 CEST	443	49932	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.162518024 CEST	443	49932	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.162606955 CEST	49932	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.168354034 CEST	49932	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.168392897 CEST	443	49932	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.373589993 CEST	443	49939	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.401809931 CEST	49939	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.401864052 CEST	443	49939	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.404062033 CEST	443	49939	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.409163952 CEST	49939	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.409698963 CEST	443	49939	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.423995018 CEST	49939	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.424163103 CEST	49939	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.424175024 CEST	443	49939	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.432503939 CEST	443	49943	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.432919979 CEST	49943	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.432984114 CEST	443	49943	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.433810949 CEST	443	49943	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.440432072 CEST	49943	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.440865040 CEST	443	49943	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.442760944 CEST	49943	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.469702005 CEST	443	49940	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.470222950 CEST	49940	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.470278978 CEST	443	49940	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.471359968 CEST	443	49940	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.472048998 CEST	49940	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.472219944 CEST	443	49940	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.472335100 CEST	49940	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.472335100 CEST	49940	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.472373962 CEST	443	49940	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.486886978 CEST	443	49943	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.514761925 CEST	443	49941	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.515109062 CEST	49941	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.515178919 CEST	443	49941	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.516612053 CEST	443	49941	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.517203093 CEST	49941	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.517637968 CEST	443	49941	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.517776966 CEST	49941	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.517913103 CEST	49941	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.517931938 CEST	443	49941	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.524837017 CEST	443	49945	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.525157928 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.525217056 CEST	443	49945	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.527805090 CEST	443	49945	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.527926922 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.528678894 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.528909922 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.528909922 CEST	443	49945	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.528909922 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.528938055 CEST	443	49945	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.528960943 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.551429987 CEST	443	49944	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.551525116 CEST	443	49946	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.551713943 CEST	49944	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.551755905 CEST	443	49944	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.551954985 CEST	49946	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.552011967 CEST	443	49946	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.552491903 CEST	443	49944	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.552939892 CEST	49944	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.553109884 CEST	443	49944	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.553133965 CEST	49944	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.553261042 CEST	443	49946	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.553363085 CEST	49946	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.554965019 CEST	49946	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.555077076 CEST	443	49946	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.555115938 CEST	49946	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.570835114 CEST	443	49945	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.594847918 CEST	443	49944	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.598929882 CEST	443	49946	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.614485025 CEST	49944	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.614734888 CEST	49946	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.614778042 CEST	443	49946	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.625773907 CEST	443	49943	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.625941038 CEST	443	49943	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.626040936 CEST	49943	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.626580000 CEST	49943	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.626614094 CEST	443	49943	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.634651899 CEST	49950	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.634716034 CEST	443	49950	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.634803057 CEST	49950	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.635154009 CEST	49950	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.635190964 CEST	443	49950	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.685549021 CEST	443	49939	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.685699940 CEST	443	49939	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.685830116 CEST	49939	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.686849117 CEST	49939	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.686882019 CEST	443	49939	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.687300920 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.687375069 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.687484026 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.689104080 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.689163923 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.697938919 CEST	443	49940	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.698127031 CEST	443	49940	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.698227882 CEST	49940	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.705553055 CEST	49940	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.705585957 CEST	443	49940	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.706401110 CEST	49952	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.706463099 CEST	443	49952	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.706557035 CEST	49952	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.708034992 CEST	49952	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.708069086 CEST	443	49952	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.714555979 CEST	49946	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.725517988 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.725569010 CEST	443	49945	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.777270079 CEST	443	49950	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.777606964 CEST	49950	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.777679920 CEST	443	49950	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.779272079 CEST	443	49950	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.779758930 CEST	49950	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.779827118 CEST	49950	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.779850006 CEST	443	49950	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.780462980 CEST	443	49950	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.784636974 CEST	443	49941	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.785082102 CEST	443	49941	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.785233974 CEST	49941	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.785607100 CEST	443	49945	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.785722971 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.786385059 CEST	49941	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.786431074 CEST	443	49941	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.787166119 CEST	49953	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.787228107 CEST	443	49953	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.787339926 CEST	49953	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.790697098 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.792160034 CEST	49953	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.792222023 CEST	443	49953	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.792484045 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.792541027 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.792563915 CEST	49945	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.792603970 CEST	443	49945	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.793113947 CEST	49954	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.793170929 CEST	443	49954	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.793243885 CEST	49954	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.793662071 CEST	49954	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.793694019 CEST	443	49954	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.794769049 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.795690060 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.796020031 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.796036959 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.796163082 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.841562033 CEST	443	49952	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.842186928 CEST	49952	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.842204094 CEST	443	49952	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.842632055 CEST	443	49952	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.843194962 CEST	49952	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.843358994 CEST	49952	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.843379974 CEST	443	49952	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.843481064 CEST	443	49952	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.845172882 CEST	443	49946	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.845335960 CEST	443	49946	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.845444918 CEST	49946	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.846424103 CEST	49946	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.846455097 CEST	443	49946	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.846865892 CEST	49955	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.846939087 CEST	443	49955	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.847040892 CEST	49955	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.848546982 CEST	49955	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.848604918 CEST	443	49955	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.866067886 CEST	443	49944	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.866245985 CEST	443	49944	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.866404057 CEST	49944	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.869508028 CEST	49944	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.869554043 CEST	443	49944	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.869998932 CEST	49959	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.870057106 CEST	443	49959	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.870143890 CEST	49959	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.872961044 CEST	49959	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.872997999 CEST	443	49959	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.914618969 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.925520897 CEST	49950	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.925534010 CEST	49952	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.974136114 CEST	443	49950	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.974299908 CEST	443	49950	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.974423885 CEST	49950	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.991489887 CEST	49950	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:08.991540909 CEST	443	49950	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:08.996912003 CEST	443	49954	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.003550053 CEST	443	49955	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.021725893 CEST	443	49953	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.029937983 CEST	49954	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.029982090 CEST	443	49954	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.031809092 CEST	49955	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.031874895 CEST	443	49955	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.031929016 CEST	49953	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.031990051 CEST	443	49953	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.032484055 CEST	443	49953	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.033101082 CEST	443	49954	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.033227921 CEST	49954	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.033648968 CEST	443	49955	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.041022062 CEST	49960	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.041066885 CEST	443	49960	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.041165113 CEST	49960	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.044802904 CEST	49955	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.045105934 CEST	443	49955	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.045238018 CEST	49954	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.045517921 CEST	443	49954	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.046681881 CEST	49953	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.046896935 CEST	443	49953	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.047143936 CEST	49960	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.047168970 CEST	443	49960	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.047422886 CEST	49955	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.047477961 CEST	49954	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.047502995 CEST	443	49954	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.047609091 CEST	49953	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.047653913 CEST	49953	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.047678947 CEST	443	49953	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.057250977 CEST	443	49959	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.094839096 CEST	443	49955	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.110380888 CEST	443	49952	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.110817909 CEST	443	49952	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.110901117 CEST	49952	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.113501072 CEST	49959	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.113552094 CEST	443	49959	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.115034103 CEST	443	49959	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.116334915 CEST	49959	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.116449118 CEST	49952	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.116496086 CEST	443	49952	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.116606951 CEST	443	49959	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.118596077 CEST	49961	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.118655920 CEST	443	49961	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.118758917 CEST	49961	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.120193958 CEST	49961	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.120222092 CEST	443	49961	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.120688915 CEST	49959	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.125063896 CEST	49954	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.138881922 CEST	443	49960	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.139769077 CEST	49960	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.139828920 CEST	443	49960	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.140876055 CEST	443	49960	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.141377926 CEST	49960	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.141484022 CEST	49960	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.141509056 CEST	443	49960	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.141608953 CEST	443	49960	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.162827969 CEST	443	49959	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.200265884 CEST	49968	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.200321913 CEST	443	49968	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.200432062 CEST	49968	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.200747967 CEST	49968	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.200782061 CEST	443	49968	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.214523077 CEST	49960	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.262963057 CEST	443	49953	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.263185978 CEST	443	49953	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.263308048 CEST	49953	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.263957024 CEST	49953	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.263989925 CEST	443	49953	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.264530897 CEST	49969	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.264569044 CEST	443	49969	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.264647961 CEST	49969	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.265055895 CEST	49969	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.265081882 CEST	443	49969	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.275329113 CEST	443	49954	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.275490046 CEST	443	49954	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.275612116 CEST	49954	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.276288986 CEST	49954	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.276326895 CEST	443	49954	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.277009010 CEST	49970	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.277070045 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.277153015 CEST	49970	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.277702093 CEST	49970	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.277734041 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.284991026 CEST	443	49955	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.285176992 CEST	443	49955	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.285264969 CEST	49955	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.286547899 CEST	49955	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.286547899 CEST	49955	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.286580086 CEST	443	49955	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.286633968 CEST	49955	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.294241905 CEST	49971	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.294290066 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.294375896 CEST	49971	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.294770002 CEST	49971	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.294809103 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.324265957 CEST	49972	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.324342012 CEST	443	49972	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.324455023 CEST	49972	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.324805975 CEST	49972	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.324839115 CEST	443	49972	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.327730894 CEST	443	49960	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.327894926 CEST	443	49960	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.327970982 CEST	49960	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.332360029 CEST	49960	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.332403898 CEST	443	49960	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.338131905 CEST	49973	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.338192940 CEST	443	49973	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.338278055 CEST	49973	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.338634968 CEST	49973	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.338670969 CEST	443	49973	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.417170048 CEST	443	49959	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.417474031 CEST	443	49959	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.417619944 CEST	49959	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.468641043 CEST	49959	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.468687057 CEST	443	49959	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.469403982 CEST	49974	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.469444990 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.469546080 CEST	49974	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.469840050 CEST	49974	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.469872952 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.522650957 CEST	443	49961	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.524504900 CEST	49961	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.524549961 CEST	443	49961	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.526587963 CEST	443	49961	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.527524948 CEST	49961	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.528014898 CEST	443	49961	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.528497934 CEST	49961	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.528620958 CEST	49961	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.528640032 CEST	443	49961	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.575839996 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.575907946 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.575927973 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.576035023 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.576082945 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.586637974 CEST	49975	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.586704969 CEST	443	49975	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.586865902 CEST	49975	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.592451096 CEST	49975	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.592490911 CEST	443	49975	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.661832094 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.661864996 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.661953926 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.661993980 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.662017107 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.662055016 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.745527029 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.752434015 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.752465010 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.752525091 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.752554893 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.752578020 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.752701998 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.752702951 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.752765894 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.752854109 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.758455992 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.758481979 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.758608103 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.758649111 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.758668900 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.790982962 CEST	443	49961	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.791137934 CEST	443	49961	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.791224957 CEST	49961	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.814637899 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.828677893 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.828705072 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.828804016 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.828893900 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.828893900 CEST	49970	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.828893900 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.828893900 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.848197937 CEST	49961	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.848237991 CEST	443	49961	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.849222898 CEST	49976	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.849265099 CEST	443	49976	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.849360943 CEST	49976	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.849642992 CEST	49970	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.849678040 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.853899956 CEST	49976	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.853944063 CEST	443	49976	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.854913950 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.855016947 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.855040073 CEST	49970	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.856283903 CEST	49970	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.856529951 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.858058929 CEST	49970	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.858093977 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.858357906 CEST	49970	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.881202936 CEST	49977	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.881261110 CEST	443	49977	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.881361008 CEST	49977	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.884663105 CEST	49977	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.884695053 CEST	443	49977	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.898833036 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.910916090 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.910943985 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.911009073 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.911042929 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.911057949 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.915839911 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.915971041 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.915998936 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.925512075 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.925584078 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.925609112 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.925640106 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.925673962 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.925712109 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.925712109 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.931912899 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.932013035 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.932044983 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.996929884 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.996979952 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.997090101 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:09.997142076 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:09.997172117 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.050476074 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.075611115 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.075711966 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.075781107 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.075835943 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.075872898 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.079011917 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.079042912 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.079160929 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.079202890 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.079235077 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.082485914 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.082509995 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.082587957 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.082622051 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.082647085 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.090509892 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.090536118 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.090590954 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.090609074 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.090675116 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.090711117 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.090738058 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.093822002 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.093925953 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.093951941 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.100730896 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.100770950 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.100835085 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.100871086 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.100898027 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.108124018 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.108170033 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.108226061 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.108259916 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.108284950 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.111521959 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.111618042 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.111665964 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.115045071 CEST	443	49968	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.115103960 CEST	49971	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.116091013 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.116204023 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.116251945 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.126764059 CEST	443	49973	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.127120972 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.127280951 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.127346992 CEST	49970	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.133625031 CEST	443	49969	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.134661913 CEST	443	49975	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.145658970 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.145962000 CEST	443	49972	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.158627033 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.158682108 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.158802986 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.158802986 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.158838034 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.160954952 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.161003113 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.161022902 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.161070108 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.161098003 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.161114931 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.213939905 CEST	49972	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.214006901 CEST	443	49972	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.214121103 CEST	49974	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.214185953 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.214338064 CEST	49975	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.214407921 CEST	443	49975	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.214514971 CEST	49969	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.214593887 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.214610100 CEST	443	49969	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.216895103 CEST	49970	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.216926098 CEST	443	49970	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.217802048 CEST	443	49969	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.217832088 CEST	443	49972	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.217935085 CEST	443	49972	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.217951059 CEST	49972	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.219146013 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.219150066 CEST	443	49975	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.219213963 CEST	443	49978	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.219238997 CEST	443	49975	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.219269037 CEST	49975	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.219305992 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.219337940 CEST	443	49977	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.219400883 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.219459057 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.219482899 CEST	49974	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.219768047 CEST	49973	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.219805002 CEST	443	49973	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.220927000 CEST	49968	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.220984936 CEST	443	49968	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.221858978 CEST	443	49973	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.222194910 CEST	49971	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.222222090 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.222271919 CEST	443	49968	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.223539114 CEST	443	49976	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.224438906 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.226432085 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.226531029 CEST	49971	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.226557970 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.231770039 CEST	49974	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.232069969 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.232454062 CEST	49977	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.232522011 CEST	443	49977	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.232729912 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.232790947 CEST	443	49978	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.235259056 CEST	443	49977	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.235356092 CEST	49977	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.235358000 CEST	49975	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.235687017 CEST	443	49975	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.236716986 CEST	49969	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.237119913 CEST	443	49969	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.238253117 CEST	49972	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.238559008 CEST	443	49972	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.239389896 CEST	49974	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.239434958 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.239567041 CEST	49974	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.239844084 CEST	49975	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.239886045 CEST	443	49975	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.240115881 CEST	49969	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.241013050 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.241044998 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.241090059 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.241137028 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.241154909 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.241189003 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.241204023 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.241255045 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.243439913 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.243490934 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.243562937 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.243593931 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.243609905 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.243637085 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.245801926 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.245847940 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.245924950 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.245955944 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.245976925 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.246006966 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.247307062 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.247404099 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.247426987 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.249754906 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.249802113 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.249869108 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.249900103 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.249919891 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.250864983 CEST	49969	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.250883102 CEST	443	49969	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.251569986 CEST	49972	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.251605988 CEST	443	49972	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.252089977 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.252135038 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.252185106 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.252216101 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.252235889 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.253520012 CEST	49977	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.253830910 CEST	443	49977	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.254995108 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.255038023 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.255088091 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.255115032 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.255134106 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.257369041 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.257414103 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.257456064 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.257478952 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.257503986 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.259143114 CEST	49971	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.259423018 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.259538889 CEST	49976	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.259593964 CEST	443	49976	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.259665012 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.259706020 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.259768009 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.259790897 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.259807110 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.260873079 CEST	49968	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.260904074 CEST	443	49976	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.261240959 CEST	443	49968	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.261275053 CEST	49973	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.261881113 CEST	443	49973	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.266957045 CEST	49977	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.267020941 CEST	443	49977	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.268183947 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.268233061 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.268263102 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.268290997 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.268311977 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.268692017 CEST	49971	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.268718004 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.268780947 CEST	49968	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.269135952 CEST	49973	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.269320011 CEST	49971	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.270584106 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.270627022 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.270689011 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.270719051 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.270735979 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.272933960 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.272979021 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.273066998 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.273094893 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.273139000 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.276175022 CEST	49976	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.276474953 CEST	443	49976	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.276772022 CEST	49976	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.282835007 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.310899019 CEST	443	49968	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.314610958 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.314683914 CEST	49972	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.314814091 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.314837933 CEST	443	49973	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.322810888 CEST	443	49976	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.323429108 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.323532104 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.323563099 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.324198961 CEST	49975	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.324528933 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.324568987 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.324625015 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.324651003 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.324652910 CEST	49977	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.324671984 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.325352907 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.325397015 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.325438023 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.325465918 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.325484037 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.325889111 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.325932980 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.325982094 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.326021910 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.326045036 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.326080084 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.326150894 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.326170921 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.349221945 CEST	443	49978	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.349627972 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.349692106 CEST	443	49978	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.350867033 CEST	443	49978	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.352830887 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.352941990 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.352971077 CEST	443	49978	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.352999926 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.353064060 CEST	443	49978	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.405966997 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.406023979 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.406120062 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.406162977 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.406183004 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.406585932 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.406642914 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.406706095 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.406706095 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.406709909 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.406750917 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.406773090 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.407607079 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.407649040 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.407722950 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.407756090 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.407778025 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.408660889 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.408713102 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.408751011 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.408771992 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.408792019 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.409637928 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.409677982 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.409779072 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.409799099 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.409821033 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.409840107 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.409904957 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.409918070 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.409955978 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.410023928 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.414644957 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.423537016 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.424540997 CEST	443	49975	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.424946070 CEST	443	49975	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.425276041 CEST	49975	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.426729918 CEST	49951	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.426754951 CEST	443	49951	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.427644014 CEST	49980	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.427700043 CEST	443	49980	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.427810907 CEST	49980	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.428047895 CEST	49975	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.428092003 CEST	443	49975	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.435688019 CEST	49980	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.435731888 CEST	443	49980	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.452807903 CEST	443	49977	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.452940941 CEST	443	49977	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.453097105 CEST	49977	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.461505890 CEST	49977	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.461550951 CEST	443	49977	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.463074923 CEST	49981	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.463138103 CEST	443	49981	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.463244915 CEST	49981	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.464018106 CEST	49981	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.464062929 CEST	443	49981	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.469336987 CEST	443	49973	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.469504118 CEST	443	49973	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.469604015 CEST	49973	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.470812082 CEST	49973	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.470812082 CEST	49973	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.470858097 CEST	443	49973	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.470956087 CEST	49973	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.498420954 CEST	443	49976	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.498797894 CEST	443	49976	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.498940945 CEST	49976	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.499416113 CEST	49976	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.499417067 CEST	49982	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.499417067 CEST	49976	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.499453068 CEST	443	49976	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.499465942 CEST	443	49982	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.499536037 CEST	49976	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.499588013 CEST	49982	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.500494957 CEST	49982	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.500533104 CEST	443	49982	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.505934000 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.506061077 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.506176949 CEST	49974	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.506570101 CEST	49974	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.506619930 CEST	443	49974	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.507082939 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.507141113 CEST	443	49983	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.507239103 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.507930994 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.507963896 CEST	443	49983	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.532752037 CEST	443	49969	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.533086061 CEST	443	49969	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.533204079 CEST	49969	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.535538912 CEST	49969	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.535572052 CEST	443	49969	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.536087036 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.536134005 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.536235094 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.536772013 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.536806107 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.543500900 CEST	443	49968	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.544437885 CEST	443	49968	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.544562101 CEST	49968	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.544715881 CEST	49968	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.544734001 CEST	443	49968	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.548504114 CEST	443	49980	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.548791885 CEST	49980	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.548836946 CEST	443	49980	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.549894094 CEST	443	49980	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.550369024 CEST	49980	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.550529003 CEST	49980	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.550549984 CEST	443	49980	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.550570965 CEST	49980	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.550586939 CEST	443	49980	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.556653976 CEST	443	49981	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.556961060 CEST	49981	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.557106018 CEST	443	49981	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.558012962 CEST	443	49981	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.558548927 CEST	49981	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.558732033 CEST	49981	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.558749914 CEST	443	49981	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.558777094 CEST	443	49981	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.566256046 CEST	49985	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:10.566306114 CEST	443	49985	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:10.566406965 CEST	49985	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:10.566689014 CEST	49985	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:10.566705942 CEST	443	49985	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:10.590908051 CEST	443	49980	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.597246885 CEST	443	49978	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.597369909 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.597393990 CEST	443	49978	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.597460032 CEST	49986	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.597460985 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.597508907 CEST	443	49986	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.597644091 CEST	49986	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.598550081 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.598570108 CEST	443	49978	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.598613977 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.598651886 CEST	49978	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.599174023 CEST	49987	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.599242926 CEST	443	49987	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.599319935 CEST	49987	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.600183010 CEST	49986	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.600214005 CEST	443	49986	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.600496054 CEST	49987	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.600534916 CEST	443	49987	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.614612103 CEST	49981	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.672246933 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.672312975 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.672399044 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.672678947 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.672713995 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.709558964 CEST	443	49983	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.711815119 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.711842060 CEST	443	49983	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.711916924 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.712234974 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.712261915 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.713541031 CEST	443	49983	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.713591099 CEST	443	49985	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:10.713628054 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.714404106 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.714482069 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.714879990 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.715049982 CEST	443	49983	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.715316057 CEST	49985	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:10.715379953 CEST	443	49985	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:10.716320992 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.716651917 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.716841936 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.716860056 CEST	443	49983	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.716871977 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.717091084 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.717113018 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.717175961 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.717530012 CEST	443	49985	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:10.718332052 CEST	49985	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:10.718647957 CEST	49985	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:10.718664885 CEST	443	49985	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:10.718696117 CEST	443	49985	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:10.723630905 CEST	49980	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.729598999 CEST	443	49982	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.729969978 CEST	49982	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.730027914 CEST	443	49982	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.730958939 CEST	443	49982	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.731436014 CEST	49982	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.731544018 CEST	443	49982	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.731592894 CEST	49982	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.731703997 CEST	49982	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.731755972 CEST	443	49982	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.744411945 CEST	443	49981	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.744652987 CEST	443	49981	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.744731903 CEST	49981	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.745131016 CEST	49981	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.745150089 CEST	443	49981	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.758891106 CEST	443	49983	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.758908987 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.790065050 CEST	443	49980	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.790215969 CEST	443	49980	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.790297031 CEST	49980	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.791497946 CEST	49980	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.791527987 CEST	443	49980	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.791914940 CEST	443	49972	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.791985989 CEST	49989	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.792056084 CEST	443	49972	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.792059898 CEST	443	49989	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.792150021 CEST	49972	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.792179108 CEST	49989	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.792886019 CEST	49972	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.792920113 CEST	443	49972	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.793622971 CEST	49989	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.793669939 CEST	443	49989	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.800944090 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.801242113 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.801299095 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.802683115 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.803158998 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.803312063 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.803329945 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.803375959 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.808712006 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.808788061 CEST	443	49990	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.808865070 CEST	443	49986	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.808900118 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.809122086 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.809145927 CEST	443	49990	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.809444904 CEST	49986	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.809510946 CEST	443	49986	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.811024904 CEST	443	49986	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.811623096 CEST	49986	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.811824083 CEST	49986	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.811847925 CEST	443	49986	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.811880112 CEST	443	49986	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.814637899 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.818198919 CEST	443	49987	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.818506002 CEST	49987	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.818567991 CEST	443	49987	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.820626974 CEST	443	49987	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.821212053 CEST	49987	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.821444035 CEST	443	49987	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.821454048 CEST	49987	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.821626902 CEST	49987	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.821909904 CEST	443	49987	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.822088003 CEST	49987	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.822143078 CEST	443	49987	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.828097105 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.828373909 CEST	49985	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:10.862238884 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.862577915 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.862668991 CEST	49971	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.864058971 CEST	49971	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.864097118 CEST	443	49971	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.864756107 CEST	49991	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.864820004 CEST	443	49991	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.864937067 CEST	49991	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.865514994 CEST	49991	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.865550041 CEST	443	49991	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.912302017 CEST	443	49990	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.913892984 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.913937092 CEST	443	49990	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.914628029 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.917239904 CEST	443	49990	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.917335033 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.923619986 CEST	443	49989	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.927828074 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.928299904 CEST	443	49990	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.928384066 CEST	49989	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.928437948 CEST	443	49989	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.928812981 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.928843021 CEST	443	49990	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.930147886 CEST	443	49989	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.962606907 CEST	443	49983	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.962760925 CEST	443	49983	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.962812901 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.962878942 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.972039938 CEST	443	49991	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.979434013 CEST	49989	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.979809046 CEST	443	49989	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.982085943 CEST	49983	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.982132912 CEST	443	49983	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.982558012 CEST	443	49982	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.982688904 CEST	49982	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.982707977 CEST	443	49982	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.982801914 CEST	49982	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.983105898 CEST	49992	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.983159065 CEST	443	49992	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.983264923 CEST	49992	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.983968973 CEST	49991	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.984000921 CEST	443	49991	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.985187054 CEST	443	49991	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.986495018 CEST	49982	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.986529112 CEST	443	49982	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.987253904 CEST	49993	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.987294912 CEST	443	49993	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.987390041 CEST	49993	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.988933086 CEST	49992	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.988996029 CEST	443	49992	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.989396095 CEST	49989	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.989512920 CEST	49989	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.989641905 CEST	443	49989	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.991455078 CEST	49991	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.991672039 CEST	443	49991	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.992371082 CEST	49993	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.992414951 CEST	443	49993	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:10.993405104 CEST	49991	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.993479013 CEST	49991	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:10.993592024 CEST	443	49991	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.009886026 CEST	443	49986	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.010025024 CEST	49986	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.014650106 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.022206068 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.022399902 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.022444963 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.022481918 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.022553921 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.074973106 CEST	443	49992	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.096041918 CEST	443	49993	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.097385883 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.097455978 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.097474098 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.097511053 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.097532034 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.097543001 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.097593069 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.097625971 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.097625971 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.097661972 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.106607914 CEST	49984	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.106652975 CEST	443	49984	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.107300043 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.107388973 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.107470989 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.108890057 CEST	49992	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.108954906 CEST	443	49992	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.109134912 CEST	49993	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.109193087 CEST	443	49993	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.110196114 CEST	443	49992	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.110382080 CEST	443	49993	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.111740112 CEST	49986	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.111784935 CEST	443	49986	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.112749100 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.112809896 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.113774061 CEST	49992	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.114201069 CEST	443	49992	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.114842892 CEST	49993	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.115523100 CEST	443	49993	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.116583109 CEST	49992	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.117114067 CEST	49992	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.117176056 CEST	443	49992	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.117573977 CEST	49993	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.117609024 CEST	49993	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.117645979 CEST	443	49993	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.122299910 CEST	443	49985	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:11.122716904 CEST	443	49985	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:11.122813940 CEST	49985	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:11.189186096 CEST	49985	443	192.168.2.3	18.165.183.80
Aug 10, 2023 23:19:11.189235926 CEST	443	49985	18.165.183.80	192.168.2.3
Aug 10, 2023 23:19:11.196676016 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.197078943 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.197139978 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.198290110 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.198755026 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.198916912 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.198934078 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.198978901 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.199013948 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.199035883 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.199035883 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.199090958 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.199232101 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.199404955 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.199580908 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.199701071 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.199878931 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.199927092 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.199935913 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.199935913 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.199960947 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.200033903 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200062990 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.200093985 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200150967 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200167894 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.200202942 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200215101 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200231075 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.200246096 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200265884 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.200298071 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200330019 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200341940 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.200356007 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200396061 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.200401068 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200434923 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200464010 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.200469971 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200469971 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200514078 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.200563908 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.235347033 CEST	443	49987	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.235539913 CEST	49987	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.235548973 CEST	443	49987	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.235629082 CEST	49987	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.239864111 CEST	49987	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.239892960 CEST	443	49987	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.241082907 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.241132975 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.241260052 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.242945910 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.242983103 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.271814108 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.271856070 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.271954060 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.271987915 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.272042036 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.272097111 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.272095919 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.272176027 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.274350882 CEST	443	49989	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.274486065 CEST	49989	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.274518013 CEST	443	49989	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.274601936 CEST	49989	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.275180101 CEST	49989	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.275226116 CEST	443	49989	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.275791883 CEST	49996	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.275839090 CEST	443	49996	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.275928974 CEST	49996	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.276592016 CEST	49996	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.276623011 CEST	443	49996	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.277650118 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.277760983 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.277784109 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.297460079 CEST	443	49991	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.297581911 CEST	49991	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.297626019 CEST	443	49991	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.297877073 CEST	443	49991	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.297954082 CEST	49991	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.299139977 CEST	49991	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.299165010 CEST	443	49991	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.299643040 CEST	49997	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.299700022 CEST	443	49997	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.299793959 CEST	49997	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.300641060 CEST	49997	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.300673008 CEST	443	49997	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.354497910 CEST	443	49993	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.354628086 CEST	49993	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.354671955 CEST	443	49993	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.354720116 CEST	443	49993	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.354784966 CEST	49993	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.356167078 CEST	49993	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.356195927 CEST	443	49993	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.356640100 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.356703997 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.356862068 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.357527018 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.357558012 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.357955933 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.358822107 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.358853102 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.360631943 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.361675978 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.361905098 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.361975908 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.362149000 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.362293005 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.362452030 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.362523079 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.362608910 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.362682104 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.367260933 CEST	443	49996	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.368078947 CEST	49996	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.368130922 CEST	443	49996	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.369343996 CEST	443	49996	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.370219946 CEST	49996	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.370378017 CEST	49996	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.370393038 CEST	443	49996	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.370419979 CEST	49996	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.370559931 CEST	443	49996	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.396814108 CEST	49999	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.396874905 CEST	443	49999	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.396979094 CEST	49999	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.397499084 CEST	49999	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.397532940 CEST	443	49999	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.411932945 CEST	443	49992	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.412046909 CEST	49992	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.412082911 CEST	443	49992	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.412113905 CEST	443	49992	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.412179947 CEST	49992	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.413408995 CEST	49992	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.413430929 CEST	443	49992	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.414036989 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.414094925 CEST	443	50000	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.414202929 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.415607929 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.415666103 CEST	443	50000	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.416033030 CEST	443	49997	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.416323900 CEST	49997	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.416379929 CEST	443	49997	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.420213938 CEST	443	49997	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.420381069 CEST	49997	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.420799971 CEST	49997	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.421154022 CEST	443	49997	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.421309948 CEST	49997	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.421335936 CEST	443	49997	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.421423912 CEST	49997	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.429291010 CEST	49996	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.429291964 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.435480118 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.435508013 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.435556889 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.435580015 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.435632944 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.435640097 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.435672045 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.435720921 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.435720921 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.435753107 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.445136070 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.445163012 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.445250988 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.445281982 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.445302963 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.445350885 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.445350885 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.445389986 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.445427895 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.445473909 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.455477953 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.455527067 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.455593109 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.455615044 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.455648899 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.455677032 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.461865902 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.461992025 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.462012053 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.462821007 CEST	443	49997	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.475454092 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.475876093 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.475924015 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.479408026 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.479603052 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.480356932 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.480500937 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.480530024 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.480560064 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.480597973 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.485970974 CEST	443	49990	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.521923065 CEST	443	50000	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.522360086 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.522418976 CEST	443	50000	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.522430897 CEST	443	49999	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.522856951 CEST	443	50000	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.523087025 CEST	49999	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.523104906 CEST	443	49999	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.523531914 CEST	443	49999	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.523564100 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.523663998 CEST	443	50000	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.523988008 CEST	49999	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.524106979 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.524139881 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.524171114 CEST	443	50000	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.524199963 CEST	443	49999	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.524250031 CEST	49999	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.537693024 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.537714005 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.544527054 CEST	50001	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.544591904 CEST	443	50001	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.544780016 CEST	50001	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.545495987 CEST	50001	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.545530081 CEST	443	50001	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.546089888 CEST	50002	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.546159029 CEST	443	50002	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.546328068 CEST	50002	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.546931982 CEST	50002	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.546979904 CEST	443	50002	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.548979998 CEST	50003	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:11.549041033 CEST	443	50003	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:11.549128056 CEST	50003	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:11.549377918 CEST	50003	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:11.549412012 CEST	443	50003	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:11.566824913 CEST	443	49999	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.592842102 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.592926979 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.592942953 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.596638918 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.596662998 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.596748114 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.596754074 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.596791983 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.596826077 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.596826077 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.596837997 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.596853971 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.596867085 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.596892118 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.596924067 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.599953890 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.599996090 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.600037098 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.600047112 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.600075006 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.600092888 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.603343010 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.603379011 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.603435993 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.603446960 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.603480101 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.607448101 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.607505083 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.607542992 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.607554913 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.607593060 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.611010075 CEST	443	49996	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.611109018 CEST	49996	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.611138105 CEST	443	49996	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.611181974 CEST	443	49996	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.611241102 CEST	49996	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.612045050 CEST	49996	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.612066984 CEST	443	49996	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.612648964 CEST	50004	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.612689972 CEST	443	50004	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.612767935 CEST	50004	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.613305092 CEST	50004	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.613322973 CEST	443	50004	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.617444038 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.617489100 CEST	443	49990	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.617567062 CEST	49999	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.622035027 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.622093916 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.622136116 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.622164011 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.622196913 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.624798059 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.624855042 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.624919891 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.624950886 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.624975920 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.626461029 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.626586914 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.626607895 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.629689932 CEST	443	50003	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:11.629971027 CEST	50003	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:11.629992008 CEST	443	50003	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:11.631901026 CEST	443	50003	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:11.633497000 CEST	50003	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:11.633681059 CEST	50003	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:11.633773088 CEST	443	50003	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:11.641978025 CEST	50005	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.642033100 CEST	443	50005	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.642129898 CEST	50005	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.642436981 CEST	50005	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.642466068 CEST	443	50005	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.650414944 CEST	443	50003	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:11.650520086 CEST	50003	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:11.651918888 CEST	50003	443	192.168.2.3	18.165.183.28
Aug 10, 2023 23:19:11.651951075 CEST	443	50003	18.165.183.28	192.168.2.3
Aug 10, 2023 23:19:11.704241991 CEST	443	49997	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.704406977 CEST	443	49997	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.704498053 CEST	49997	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.705276966 CEST	49997	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.705307961 CEST	443	49997	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.706126928 CEST	50006	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.706192017 CEST	443	50006	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.706285954 CEST	50006	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.707946062 CEST	50006	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.707977057 CEST	443	50006	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.718463898 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.718543053 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.718564034 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.718947887 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.719012976 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.720448971 CEST	49998	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.720463037 CEST	443	49998	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.720868111 CEST	50007	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.720907927 CEST	443	50007	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.720982075 CEST	50007	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.722158909 CEST	50007	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.722183943 CEST	443	50007	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.726847887 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.727689981 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.732132912 CEST	443	49999	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.732286930 CEST	443	49999	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.732378960 CEST	49999	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.733686924 CEST	49999	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.733721018 CEST	443	49999	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.741852045 CEST	443	50004	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.742147923 CEST	50004	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.742213964 CEST	443	50004	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.743191004 CEST	443	50004	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.743627071 CEST	50004	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.743786097 CEST	50004	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.743808985 CEST	443	50004	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.743834972 CEST	50004	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.743855000 CEST	443	50004	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.749725103 CEST	443	50001	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.750006914 CEST	50001	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.750051022 CEST	443	50001	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.750963926 CEST	443	50001	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.751458883 CEST	50001	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.751604080 CEST	50001	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.751619101 CEST	443	50001	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.751717091 CEST	443	50001	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.757715940 CEST	443	50000	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.757795095 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.757988930 CEST	443	50000	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.758290052 CEST	443	50000	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.758507967 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.759180069 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.759222031 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.759288073 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.759318113 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.759326935 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.760041952 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.760041952 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.760059118 CEST	443	50000	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.760127068 CEST	50000	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.760495901 CEST	50008	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.760546923 CEST	443	50008	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.760642052 CEST	50008	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.760822058 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.760905027 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.760930061 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.760962009 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.760997057 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.761007071 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.761028051 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.761040926 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.761056900 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.762546062 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.762595892 CEST	50008	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.762617111 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.762639046 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.762639046 CEST	443	50008	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.762660980 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.762706995 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.763453960 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.763562918 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.763572931 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.764298916 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.764391899 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.764400959 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.766104937 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.766146898 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.766195059 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.766207933 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.766238928 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.766922951 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.767043114 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.767055988 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.768785954 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.768836021 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.768892050 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.768906116 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.768923998 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.769865990 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.770015955 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.770032883 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.771754980 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.771800041 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.771851063 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.771863937 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.771909952 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.772563934 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.772675037 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.772686005 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.773653030 CEST	443	50002	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.773938894 CEST	50002	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.773967028 CEST	443	50002	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.774455070 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.774522066 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.774528027 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.774542093 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.774595022 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.775021076 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.775103092 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.775116920 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.775130987 CEST	443	50002	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.775796890 CEST	50002	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.775943041 CEST	50002	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.775952101 CEST	443	50002	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.776048899 CEST	443	50002	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.784204006 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.784312010 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.784333944 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.784362078 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.784426928 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.787841082 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.787884951 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.787949085 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.787970066 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.788002014 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.789691925 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.789741993 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.789778948 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.789794922 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.789819002 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.790793896 CEST	49995	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.790822029 CEST	443	49995	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.791279078 CEST	50009	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.791338921 CEST	443	50009	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.791438103 CEST	50009	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.791446924 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.791486025 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.791537046 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.791555882 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.791577101 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.792582989 CEST	50009	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.792618990 CEST	443	50009	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.793236971 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.793288946 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.793343067 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.793359995 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.793385029 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.794020891 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.794106007 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.794126034 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.812963963 CEST	443	50005	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.813276052 CEST	50005	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.813309908 CEST	443	50005	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.814918995 CEST	443	50005	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.815015078 CEST	50005	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.815629959 CEST	50005	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.815799952 CEST	443	50005	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.815820932 CEST	50005	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.836252928 CEST	50002	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.858828068 CEST	443	50005	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.896634102 CEST	443	50006	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.896980047 CEST	50006	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.897026062 CEST	443	50006	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.897592068 CEST	443	50006	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.898124933 CEST	50006	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.898238897 CEST	443	50006	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.898948908 CEST	50006	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.898948908 CEST	50006	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.898992062 CEST	443	50006	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.914352894 CEST	50001	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.914501905 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.914505005 CEST	50004	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.924632072 CEST	443	50008	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.924956083 CEST	50008	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.924997091 CEST	443	50008	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.926733017 CEST	443	50008	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.927313089 CEST	50008	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.927490950 CEST	50008	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.927500963 CEST	443	50008	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.927576065 CEST	443	50008	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.928580999 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.928621054 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.928713083 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.928740978 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.928766012 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.928951979 CEST	443	50009	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.929120064 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.929219007 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.929230928 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.929270983 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.929281950 CEST	50009	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.929291964 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.929332972 CEST	443	50009	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.929539919 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.929622889 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.929652929 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.929671049 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.929737091 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.929738045 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.929768085 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.929897070 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.929960012 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.929994106 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.930027008 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.930087090 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.930289984 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.930375099 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.930396080 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.930428982 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.930479050 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.930680990 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.930742979 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.930792093 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.930811882 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.930845022 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.930989981 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.931061983 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.931070089 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.931097031 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.931137085 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.931272030 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.931334972 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.931346893 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.931370020 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.931408882 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.931605101 CEST	443	50009	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.931690931 CEST	50009	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.931725979 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.931798935 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.931803942 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.931830883 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.931889057 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.931997061 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.932061911 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.932074070 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.932092905 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.932151079 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.932243109 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.932310104 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.932352066 CEST	50009	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.932493925 CEST	443	50009	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.932749033 CEST	49988	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.932780027 CEST	443	49988	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.933634996 CEST	50009	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.933661938 CEST	443	50009	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.941477060 CEST	443	50007	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.941828966 CEST	50007	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.941874981 CEST	443	50007	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.945086956 CEST	443	50007	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.945203066 CEST	50007	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.945806026 CEST	50007	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.946008921 CEST	443	50007	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.946012020 CEST	50007	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.955173969 CEST	443	50001	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.955343962 CEST	443	50001	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.955455065 CEST	50001	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.955892086 CEST	50001	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.955929041 CEST	443	50001	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.980998993 CEST	443	50002	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.981393099 CEST	443	50002	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.981502056 CEST	50002	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.981762886 CEST	50002	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.981796980 CEST	443	50002	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.982841969 CEST	50010	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.982897997 CEST	443	50010	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.982997894 CEST	50010	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.983222961 CEST	50010	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:11.983258009 CEST	443	50010	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:11.990814924 CEST	443	50007	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.002150059 CEST	443	50004	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.002265930 CEST	50004	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.002295971 CEST	443	50004	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.002325058 CEST	443	50004	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.002424002 CEST	50004	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.003921032 CEST	50004	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.003952026 CEST	443	50004	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.004494905 CEST	50011	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.004538059 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.004631996 CEST	50011	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.005830050 CEST	50011	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.005860090 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.016784906 CEST	443	50005	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.016925097 CEST	50005	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.016933918 CEST	443	50005	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.017172098 CEST	50005	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.017455101 CEST	50005	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.017486095 CEST	443	50005	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.023713112 CEST	50008	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.023765087 CEST	50009	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.025670052 CEST	50007	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.025698900 CEST	443	50007	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.087136984 CEST	443	50010	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.087526083 CEST	50010	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.087574959 CEST	443	50010	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.088630915 CEST	443	50010	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.089281082 CEST	50010	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.089493036 CEST	443	50010	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.089529037 CEST	50010	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.107764006 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.108115911 CEST	50011	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.108165026 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.109240055 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.110011101 CEST	50011	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.110188961 CEST	50011	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.110208035 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.110238075 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.110269070 CEST	50011	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.130922079 CEST	443	50010	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.133200884 CEST	50007	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.150825977 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.160721064 CEST	443	50008	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.161137104 CEST	443	50008	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.161369085 CEST	50008	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.161752939 CEST	50008	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.161788940 CEST	443	50008	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.162497997 CEST	50012	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.162565947 CEST	443	50012	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.162686110 CEST	50012	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.163295984 CEST	50012	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.163335085 CEST	443	50012	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.167437077 CEST	50013	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.167505026 CEST	443	50013	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.167603970 CEST	50013	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.167915106 CEST	50013	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.167948008 CEST	443	50013	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.173094988 CEST	443	50009	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.173261881 CEST	443	50009	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.173548937 CEST	50009	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.174527884 CEST	50009	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.174571037 CEST	443	50009	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.175617933 CEST	443	50006	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.175776005 CEST	443	50006	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.175868988 CEST	50006	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.176451921 CEST	50006	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.176472902 CEST	443	50006	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.189750910 CEST	443	50007	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.189928055 CEST	443	50007	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.190074921 CEST	50007	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.190478086 CEST	50007	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.190509081 CEST	443	50007	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.192893028 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.193042040 CEST	443	49990	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.193429947 CEST	443	49990	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.193519115 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.193677902 CEST	49990	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.196374893 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.196429014 CEST	443	50014	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.196541071 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.196825027 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.196849108 CEST	443	50014	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.200577021 CEST	50015	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.200637102 CEST	443	50015	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.200737000 CEST	50015	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.201036930 CEST	50015	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.201071978 CEST	443	50015	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.203027010 CEST	50016	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.203083992 CEST	443	50016	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.203174114 CEST	50016	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.203416109 CEST	50016	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.203448057 CEST	443	50016	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.205883026 CEST	50017	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.205940008 CEST	443	50017	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.206026077 CEST	50017	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.206262112 CEST	50017	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.206290960 CEST	443	50017	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.214004993 CEST	50010	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.290442944 CEST	443	50012	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.290695906 CEST	443	50013	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.291281939 CEST	50013	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.291316986 CEST	443	50013	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.291436911 CEST	50012	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.291480064 CEST	443	50012	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.291842937 CEST	443	50013	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.292140007 CEST	443	50012	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.293450117 CEST	50012	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.293672085 CEST	443	50012	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.293819904 CEST	50013	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.293927908 CEST	443	50013	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.294040918 CEST	50012	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.294107914 CEST	50012	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.294224977 CEST	443	50012	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.294231892 CEST	50013	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.294348955 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.294461966 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.294507027 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.294576883 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.294991970 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.295013905 CEST	443	50010	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.295089006 CEST	443	50010	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.295160055 CEST	50010	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.296327114 CEST	49994	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.296355009 CEST	443	49994	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.298254013 CEST	50010	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.298290014 CEST	443	50010	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.299169064 CEST	50018	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.299196005 CEST	443	50018	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.299370050 CEST	50018	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.299858093 CEST	50018	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.299874067 CEST	443	50018	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.314901114 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.317799091 CEST	50011	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.334824085 CEST	443	50013	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.348603010 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.348747969 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.348767042 CEST	50011	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.348826885 CEST	50011	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.349489927 CEST	50011	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.349525928 CEST	443	50011	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.357151985 CEST	443	50015	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.357513905 CEST	50015	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.357577085 CEST	443	50015	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.359051943 CEST	443	50015	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.359225988 CEST	50015	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.359695911 CEST	50015	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.359846115 CEST	443	50015	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.360193968 CEST	443	50014	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.360543013 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.360546112 CEST	50015	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.360567093 CEST	443	50014	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.360575914 CEST	443	50015	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.360665083 CEST	50015	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.361449957 CEST	443	50014	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.361973047 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.362169981 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.362169981 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.362201929 CEST	443	50014	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.362241030 CEST	443	50017	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.362288952 CEST	443	50014	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.362571001 CEST	50017	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.362622023 CEST	443	50017	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.363924980 CEST	443	50017	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.364051104 CEST	50017	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.364548922 CEST	50017	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.364651918 CEST	443	50017	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.364703894 CEST	50017	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.375617027 CEST	443	50016	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.377945900 CEST	50016	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.378005981 CEST	443	50016	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.379147053 CEST	443	50016	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.382185936 CEST	50016	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.382404089 CEST	50016	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.382420063 CEST	443	50016	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.382550001 CEST	443	50016	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.394756079 CEST	443	50018	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.395077944 CEST	50018	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.395140886 CEST	443	50018	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.396245003 CEST	443	50018	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.396902084 CEST	50018	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.397130966 CEST	443	50018	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.397150040 CEST	50018	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.406902075 CEST	443	50015	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.410837889 CEST	443	50017	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.414122105 CEST	50017	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.414169073 CEST	443	50017	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.424650908 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.425698996 CEST	50016	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.438818932 CEST	443	50018	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.494493961 CEST	443	50013	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.494659901 CEST	443	50013	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.494817972 CEST	50013	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.495467901 CEST	50013	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.495501995 CEST	443	50013	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.514094114 CEST	50017	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.590132952 CEST	443	50012	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.590280056 CEST	443	50012	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.590423107 CEST	50012	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.591363907 CEST	50012	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.591403961 CEST	443	50012	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.595725060 CEST	50021	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.595784903 CEST	443	50021	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.595941067 CEST	50021	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.596491098 CEST	50021	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.596524000 CEST	443	50021	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.597440958 CEST	443	50014	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.597551107 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.597592115 CEST	443	50014	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.597630978 CEST	443	50014	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.597707987 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.598325014 CEST	443	50017	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.599246025 CEST	443	50017	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.599347115 CEST	50017	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.599813938 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.599848032 CEST	443	50014	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.599895954 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.599914074 CEST	50014	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.602826118 CEST	443	50018	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.602945089 CEST	50018	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.603032112 CEST	443	50016	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.603174925 CEST	443	50018	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.603260994 CEST	443	50016	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.603336096 CEST	50018	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.603348970 CEST	443	50018	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.603408098 CEST	50018	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.603425026 CEST	50016	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.603888035 CEST	50017	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.603916883 CEST	443	50017	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.606137991 CEST	50018	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.606168032 CEST	443	50018	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.606436014 CEST	50016	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.606472969 CEST	443	50016	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.616394997 CEST	50022	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.616461992 CEST	443	50022	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.616559029 CEST	50022	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.617032051 CEST	50022	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.617069006 CEST	443	50022	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.641596079 CEST	443	50015	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.641762972 CEST	443	50015	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.641952038 CEST	50015	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.642760038 CEST	50015	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.642802954 CEST	443	50015	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.694143057 CEST	443	50021	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.694503069 CEST	50021	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.694566965 CEST	443	50021	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.695986032 CEST	443	50021	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.696989059 CEST	50021	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.697222948 CEST	443	50021	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.697244883 CEST	50021	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.717905045 CEST	443	50022	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.718266964 CEST	50022	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.718311071 CEST	443	50022	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.719527006 CEST	443	50022	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.720148087 CEST	50022	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.720319033 CEST	50022	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.720335007 CEST	443	50022	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.720372915 CEST	443	50022	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.738830090 CEST	443	50021	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.814163923 CEST	50022	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.825870037 CEST	50021	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.922374010 CEST	443	50022	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.922564030 CEST	443	50022	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.922734976 CEST	50022	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.925436020 CEST	50022	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.925476074 CEST	443	50022	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.926723957 CEST	50023	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.926809072 CEST	443	50023	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.927057028 CEST	50023	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.927280903 CEST	50023	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.927304029 CEST	443	50023	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.932771921 CEST	443	50021	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.933454990 CEST	443	50021	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:12.933571100 CEST	50021	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.933741093 CEST	50021	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:12.933777094 CEST	443	50021	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.021334887 CEST	443	50023	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.021676064 CEST	50023	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.021738052 CEST	443	50023	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.022870064 CEST	443	50023	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.023360014 CEST	50023	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.023526907 CEST	50023	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.023544073 CEST	443	50023	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.023571968 CEST	443	50023	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.124339104 CEST	50023	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.225200891 CEST	443	50023	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.225387096 CEST	443	50023	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.225528002 CEST	50023	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.226280928 CEST	50023	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.226316929 CEST	443	50023	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.227611065 CEST	50024	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.227658033 CEST	443	50024	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.227757931 CEST	50024	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.228024006 CEST	50024	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.228050947 CEST	443	50024	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.330696106 CEST	443	50024	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.331242085 CEST	50024	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.331300020 CEST	443	50024	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.332417011 CEST	443	50024	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.332917929 CEST	50024	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.333076000 CEST	50024	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.333091974 CEST	443	50024	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.333132982 CEST	443	50024	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.414534092 CEST	50024	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.542176008 CEST	443	50024	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.542351961 CEST	443	50024	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.542460918 CEST	50024	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.545407057 CEST	50024	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.545447111 CEST	443	50024	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.548721075 CEST	50025	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.548783064 CEST	443	50025	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.548882961 CEST	50025	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.549168110 CEST	50025	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.549199104 CEST	443	50025	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.633826971 CEST	443	50025	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.634444952 CEST	50025	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.634505033 CEST	443	50025	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.635780096 CEST	443	50025	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.636392117 CEST	50025	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.636591911 CEST	50025	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.636615992 CEST	443	50025	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.678904057 CEST	443	50025	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.726161003 CEST	50025	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.833250046 CEST	443	50025	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.833427906 CEST	443	50025	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.833539009 CEST	50025	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.835864067 CEST	50025	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.835902929 CEST	443	50025	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.839813948 CEST	50026	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.839884996 CEST	443	50026	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.839988947 CEST	50026	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.840390921 CEST	50026	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.840426922 CEST	443	50026	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.923073053 CEST	443	50026	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.923799038 CEST	50026	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.923846006 CEST	443	50026	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.925002098 CEST	443	50026	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.926079035 CEST	50026	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.926307917 CEST	443	50026	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:13.926326036 CEST	50026	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:13.966820955 CEST	443	50026	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.116811991 CEST	50026	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.125590086 CEST	443	50026	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.125760078 CEST	443	50026	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.125871897 CEST	50026	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.182945013 CEST	50026	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.182993889 CEST	443	50026	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.189862967 CEST	50027	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.189930916 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.190149069 CEST	50027	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.190623045 CEST	50027	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.190658092 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.784646988 CEST	50028	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.784717083 CEST	443	50028	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.784838915 CEST	50028	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.785242081 CEST	50028	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.785269022 CEST	443	50028	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.878087997 CEST	443	50028	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.878447056 CEST	50028	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.878493071 CEST	443	50028	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.879653931 CEST	443	50028	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.880309105 CEST	50028	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.880530119 CEST	443	50028	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:14.881345987 CEST	50028	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.881577015 CEST	50028	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:14.881593943 CEST	443	50028	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.294188023 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.294639111 CEST	50027	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.294686079 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.295825958 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.296464920 CEST	50027	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.296685934 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.296756029 CEST	50027	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.338888884 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.479979992 CEST	443	50028	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.480168104 CEST	443	50028	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.480272055 CEST	50028	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.481590986 CEST	50028	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.481640100 CEST	443	50028	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.502866030 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.503040075 CEST	50027	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.503637075 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.503746033 CEST	50027	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.503770113 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.503801107 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.503864050 CEST	50027	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.535640955 CEST	50027	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.535670042 CEST	443	50027	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.538657904 CEST	50029	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.538718939 CEST	443	50029	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.538829088 CEST	50029	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.539417028 CEST	50029	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.539450884 CEST	443	50029	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.573394060 CEST	50030	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.573470116 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.573591948 CEST	50030	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.574151039 CEST	50030	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.574187994 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.620964050 CEST	443	50029	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.621268988 CEST	50029	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.621295929 CEST	443	50029	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.622390985 CEST	443	50029	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.622807026 CEST	50029	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.622961044 CEST	50029	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.622976065 CEST	443	50029	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.623007059 CEST	443	50029	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.657612085 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.658032894 CEST	50030	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.658081055 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.659300089 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.659900904 CEST	50030	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.660106897 CEST	50030	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.660134077 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.660175085 CEST	50030	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.660175085 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.702817917 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.726334095 CEST	50029	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.726339102 CEST	50030	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.825799942 CEST	443	50029	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.825964928 CEST	443	50029	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.826106071 CEST	50029	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.826874971 CEST	50029	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.826910019 CEST	443	50029	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.827538013 CEST	50031	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.827604055 CEST	443	50031	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.827698946 CEST	50031	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.827908993 CEST	50031	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.827944040 CEST	443	50031	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.902695894 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.902868986 CEST	50030	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.902918100 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.902956963 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.903059006 CEST	50030	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.906500101 CEST	50030	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.906531096 CEST	443	50030	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.910460949 CEST	443	50031	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.911211967 CEST	50031	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.911266088 CEST	443	50031	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.912337065 CEST	443	50031	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.914093018 CEST	50031	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.914299965 CEST	443	50031	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:15.914745092 CEST	50031	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:15.954896927 CEST	443	50031	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.107477903 CEST	443	50031	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.107641935 CEST	443	50031	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.107789040 CEST	50031	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.109122992 CEST	50031	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.109153986 CEST	443	50031	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.111263037 CEST	50032	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.111341000 CEST	443	50032	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.111459017 CEST	50032	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.111850977 CEST	50032	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.111886024 CEST	443	50032	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.228182077 CEST	443	50032	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.228914022 CEST	50032	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.228957891 CEST	443	50032	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.230065107 CEST	443	50032	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.230734110 CEST	50032	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.230947018 CEST	50032	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.230967045 CEST	443	50032	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.230998993 CEST	443	50032	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.335846901 CEST	50032	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.450485945 CEST	443	50032	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.450651884 CEST	443	50032	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.450737000 CEST	50032	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.451606035 CEST	50032	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.451636076 CEST	443	50032	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.716372013 CEST	50033	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.716449976 CEST	443	50033	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.716584921 CEST	50033	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.717422962 CEST	50033	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.717457056 CEST	443	50033	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.809547901 CEST	443	50033	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.809990883 CEST	50033	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.810035944 CEST	443	50033	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.811182022 CEST	443	50033	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.811773062 CEST	50033	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.811922073 CEST	50033	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.811922073 CEST	50033	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:16.811949015 CEST	443	50033	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.811990976 CEST	443	50033	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:16.929649115 CEST	50033	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.051774979 CEST	443	50033	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.051942110 CEST	443	50033	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.052002907 CEST	50033	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.052071095 CEST	50033	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.054084063 CEST	50033	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.054131985 CEST	443	50033	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.221692085 CEST	50034	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.221769094 CEST	443	50034	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.221914053 CEST	50034	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.222253084 CEST	50034	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.222286940 CEST	443	50034	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.320314884 CEST	443	50034	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.320946932 CEST	50034	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.321014881 CEST	443	50034	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.322077036 CEST	443	50034	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.323160887 CEST	50034	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.323400021 CEST	443	50034	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.323659897 CEST	50034	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.323818922 CEST	50034	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.323841095 CEST	443	50034	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.602302074 CEST	443	50034	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.602480888 CEST	443	50034	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:17.602624893 CEST	50034	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.615669966 CEST	50034	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:17.615719080 CEST	443	50034	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:20.397594929 CEST	50035	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:20.397658110 CEST	443	50035	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:20.397756100 CEST	50035	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:20.398096085 CEST	50035	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:20.398121119 CEST	443	50035	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:20.481009007 CEST	443	50035	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:20.481379986 CEST	50035	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:20.481445074 CEST	443	50035	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:20.482508898 CEST	443	50035	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:20.483154058 CEST	50035	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:20.483387947 CEST	443	50035	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:20.483668089 CEST	50035	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:20.483793974 CEST	50035	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:20.483815908 CEST	443	50035	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:20.582247019 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.582303047 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.582406998 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.582948923 CEST	50037	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.583009958 CEST	443	50037	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.583103895 CEST	50037	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.583280087 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.583318949 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.583538055 CEST	50037	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.583576918 CEST	443	50037	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.747510910 CEST	443	50035	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:20.747672081 CEST	443	50035	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:20.747786045 CEST	50035	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:20.748286963 CEST	50035	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:20.748322010 CEST	443	50035	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:20.887775898 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.888168097 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.888221025 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.889766932 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.889897108 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.890314102 CEST	443	50037	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.893413067 CEST	50037	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.893476009 CEST	443	50037	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.894624949 CEST	443	50037	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.894818068 CEST	50037	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.897661924 CEST	50037	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.897866011 CEST	50037	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.897887945 CEST	443	50037	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.897912979 CEST	443	50037	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:20.904355049 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:20.904603958 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.015294075 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.015337944 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.026644945 CEST	50037	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.026690960 CEST	443	50037	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.115269899 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.138633013 CEST	443	50037	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.138746977 CEST	50037	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.139549017 CEST	50037	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.139595032 CEST	443	50037	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.142985106 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.143023014 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.166080952 CEST	50043	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:21.166146994 CEST	443	50043	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:21.166244984 CEST	50043	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:21.166548014 CEST	50043	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:21.166572094 CEST	443	50043	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:21.258956909 CEST	443	50043	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:21.300947905 CEST	50043	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:21.301012993 CEST	443	50043	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:21.302273035 CEST	443	50043	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:21.457062006 CEST	50043	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:21.457386017 CEST	50043	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:21.457386017 CEST	50043	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:21.457415104 CEST	443	50043	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:21.457549095 CEST	443	50043	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:21.526381016 CEST	50043	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:21.598495007 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.598640919 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.598670006 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.598722935 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.598745108 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.598802090 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.598845005 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.598845005 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.598845005 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.598900080 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.598941088 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.598942041 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.598964930 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.598987103 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.598987103 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.599008083 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.599062920 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.599078894 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.599483967 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.599567890 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.607779980 CEST	50036	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.607825041 CEST	443	50036	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.695355892 CEST	443	50043	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:21.695511103 CEST	443	50043	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:21.695574999 CEST	50043	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:21.695575953 CEST	50043	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:21.704906940 CEST	50043	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:21.704951048 CEST	443	50043	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:21.708703995 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.708767891 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.708892107 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.709206104 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.709239006 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.968843937 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.969338894 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:21.969405890 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:21.970360041 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.026401997 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.027782917 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.027941942 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.027981043 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.028198957 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.126413107 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.376678944 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.376740932 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.376766920 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.376846075 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.376847982 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.376847982 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.376879930 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.376929998 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.376957893 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.376990080 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.376990080 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.376991034 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.377022982 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.377033949 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.377094030 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.377151966 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.377166986 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.377182961 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.377206087 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.377221107 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.377275944 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.377286911 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.377305031 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.377459049 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.499041080 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.499183893 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.499202013 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.499242067 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:22.499289036 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.499335051 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.545752048 CEST	50044	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:22.545799017 CEST	443	50044	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.186695099 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.186763048 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.186891079 CEST	50047	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.186914921 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.186981916 CEST	443	50047	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.187060118 CEST	50047	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.187216043 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.187251091 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.187386990 CEST	50047	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.187431097 CEST	443	50047	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.423423052 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.423501015 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.423585892 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.424006939 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.424046040 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.497945070 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.499397993 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.499464035 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.500842094 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.502284050 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.502455950 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.502691031 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.506247997 CEST	443	50047	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.506680012 CEST	50047	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.506787062 CEST	443	50047	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.507514000 CEST	443	50047	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.508559942 CEST	50047	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.508783102 CEST	443	50047	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.509104967 CEST	50047	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.509154081 CEST	443	50047	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.545489073 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.545794010 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.545828104 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.546909094 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.547379017 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.547550917 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.547569036 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.547586918 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.547599077 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.590903044 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.615436077 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.624593019 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.798280954 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.798417091 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.798471928 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.798518896 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.798588991 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.799288034 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.799321890 CEST	443	50049	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:23.799371004 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.799392939 CEST	50049	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:23.935812950 CEST	443	50047	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.936445951 CEST	443	50047	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.936580896 CEST	50047	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.938076973 CEST	50047	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.938076973 CEST	50047	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:23.938127041 CEST	443	50047	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:23.938224077 CEST	50047	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.097047091 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.097110033 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.097187996 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.097194910 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.097194910 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.097238064 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.097254992 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.097302914 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.097333908 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.097368002 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.097368002 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.097397089 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.097604990 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.097650051 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.097692966 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.097716093 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.097739935 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.097771883 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.134931087 CEST	50051	443	192.168.2.3	13.107.246.60
Aug 10, 2023 23:19:24.134996891 CEST	443	50051	13.107.246.60	192.168.2.3
Aug 10, 2023 23:19:24.135078907 CEST	50051	443	192.168.2.3	13.107.246.60
Aug 10, 2023 23:19:24.137073994 CEST	50051	443	192.168.2.3	13.107.246.60
Aug 10, 2023 23:19:24.137109995 CEST	443	50051	13.107.246.60	192.168.2.3
Aug 10, 2023 23:19:24.221049070 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.221107006 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.221234083 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.221235037 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.221283913 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.221322060 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.221365929 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.221391916 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.221673012 CEST	50046	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.221700907 CEST	443	50051	13.107.246.60	192.168.2.3
Aug 10, 2023 23:19:24.221728086 CEST	443	50046	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.222382069 CEST	50051	443	192.168.2.3	13.107.246.60
Aug 10, 2023 23:19:24.222412109 CEST	443	50051	13.107.246.60	192.168.2.3
Aug 10, 2023 23:19:24.223774910 CEST	443	50051	13.107.246.60	192.168.2.3
Aug 10, 2023 23:19:24.223870039 CEST	50051	443	192.168.2.3	13.107.246.60
Aug 10, 2023 23:19:24.225008965 CEST	50051	443	192.168.2.3	13.107.246.60
Aug 10, 2023 23:19:24.225095034 CEST	443	50051	13.107.246.60	192.168.2.3
Aug 10, 2023 23:19:24.233666897 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.233705997 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.233793020 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.234119892 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.234139919 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.234677076 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.234735012 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.234828949 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.235196114 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.235256910 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.235340118 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.235367060 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.235378027 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.235575914 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.235609055 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.315664053 CEST	50051	443	192.168.2.3	13.107.246.60
Aug 10, 2023 23:19:24.315707922 CEST	443	50051	13.107.246.60	192.168.2.3
Aug 10, 2023 23:19:24.515609026 CEST	50051	443	192.168.2.3	13.107.246.60
Aug 10, 2023 23:19:24.528007030 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.528345108 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.528398037 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.532800913 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.532991886 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.533480883 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.533687115 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.533693075 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.533871889 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.545862913 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.546207905 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.546266079 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.547044039 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.547576904 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.547775030 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.547800064 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.554595947 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.555082083 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.555133104 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.556070089 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.558665991 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.558783054 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.558937073 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.615551949 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.615555048 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.615602016 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.626532078 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.715536118 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.829642057 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.915595055 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.915646076 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.921740055 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.921799898 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.921821117 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.921861887 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.921881914 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.921901941 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.921915054 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.921972990 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.922007084 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.922007084 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.922041893 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.922322035 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.922369957 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.922427893 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.922447920 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.922472000 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.928262949 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.928323984 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.928344011 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.928380966 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.928397894 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.928426981 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.928464890 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.928514957 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.928549051 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.928550959 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.928550959 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.928570986 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.928571939 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.928600073 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.928611994 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.928745985 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.928793907 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.928816080 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.936105967 CEST	50054	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.936134100 CEST	443	50054	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.951221943 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.951241016 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.951283932 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.951293945 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.951303005 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.951354027 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.951354027 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.951406002 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.951468945 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:24.951540947 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.952224016 CEST	50052	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:24.952250004 CEST	443	50052	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.024648905 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.043684006 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.043715000 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.043884039 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.043942928 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.043948889 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.043948889 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.043981075 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.044023037 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.044064999 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.044064999 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.044064999 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.044096947 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.044294119 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.044339895 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.044374943 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.044392109 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.044420004 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.044462919 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.074970007 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.075031996 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.075119972 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.075169086 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.075205088 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.075252056 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.166348934 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.166408062 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.166569948 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.166569948 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.166624069 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.166697979 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.166770935 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.166829109 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.166884899 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.166906118 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.166934013 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.166970015 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.167515039 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.167558908 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.167661905 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.167661905 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.167707920 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.167783022 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.168452978 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.168499947 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.168551922 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.168571949 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.168596983 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.168621063 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.169158936 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.169208050 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.169260979 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.169275999 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.169301987 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.169339895 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.176172972 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.197084904 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.197143078 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.197345972 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.197345972 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.197395086 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.197478056 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.240885019 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.240946054 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.241066933 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.241066933 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.241111994 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.241190910 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.289992094 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.290054083 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.290138006 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.290160894 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.290210009 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.291213989 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.291270018 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.291270971 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.291301012 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.291351080 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.292385101 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.292431116 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.292442083 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.292459965 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.292505980 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.292505980 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.292543888 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.293255091 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.293303967 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.293350935 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.293360949 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.293379068 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.293411970 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.293910027 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.293955088 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.294001102 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.294009924 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.294050932 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.294069052 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.294826031 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.294878960 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.294934988 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.294944048 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.294976950 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.295620918 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.295672894 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.295676947 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.295701981 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.295706034 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.295754910 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.295785904 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.296331882 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.296374083 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.296417952 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.296426058 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.296441078 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.296469927 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.297075033 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.297123909 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.297178984 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.297187090 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.297219992 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.297231913 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.297822952 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.297868967 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.297950029 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.297959089 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.297997952 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.298005104 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.320672989 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.320729971 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.320820093 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.320837021 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.320858002 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.320888996 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.321578026 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.321629047 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.321676970 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.321685076 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.321715117 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.321733952 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.363320112 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.363378048 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.363555908 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.363574982 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.363625050 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.363632917 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.363847971 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.363897085 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.363924026 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.363930941 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.363962889 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.363982916 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.412317038 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.412374020 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.412477016 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.412492990 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.412509918 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.412539005 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.413233042 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.413285971 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.413347960 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.413358927 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.413393974 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.413417101 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.413922071 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.413969040 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.414015055 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.414026022 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.414051056 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.414072990 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.414617062 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.414660931 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.414707899 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.414715052 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.414746046 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.414767981 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.416496992 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.416546106 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.416604996 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.416614056 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.416637897 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.416662931 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.417924881 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.417972088 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.418021917 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.418030977 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.418076992 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.418888092 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.419763088 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.419814110 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.419862032 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.419869900 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.419904947 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.420380116 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.420433998 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.420442104 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.420460939 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.420464993 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.420506001 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.420547962 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.420878887 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.420923948 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.420980930 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.420988083 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.421049118 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.421049118 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.421277046 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.421312094 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.421376944 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.421381950 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.421423912 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.421423912 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.421725035 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.421770096 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.421832085 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.421838999 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.421853065 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.421885014 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.422041893 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.422080040 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.422116995 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.422122955 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.422152042 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.422169924 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.422398090 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.422435045 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.422480106 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.422487020 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.422518015 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.422542095 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.422753096 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.422811031 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.422831059 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.422837019 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.422875881 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.422894001 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.423094034 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.423129082 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.423165083 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.423171043 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.423198938 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.423218012 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.423437119 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.423475027 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.423517942 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.423525095 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.423563004 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.423660994 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.423700094 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.423711061 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.424988031 CEST	50053	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.425005913 CEST	443	50053	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.464950085 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.465048075 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.465228081 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.465519905 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.465564966 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.502619982 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.502688885 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.502912998 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.503339052 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.503375053 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.551474094 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.551501989 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.551660061 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.551935911 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.551951885 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.721065044 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.727677107 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.727706909 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.728713989 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.729283094 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.729422092 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.729464054 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.760610104 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.761151075 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.761218071 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.762259960 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.763066053 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.763137102 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.763336897 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.770904064 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.805255890 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.805704117 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.805732012 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.808885098 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.809072018 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.810008049 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.810209036 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.810311079 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.810389996 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.815686941 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.915621042 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:25.915651083 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:25.930648088 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.015664101 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.168184042 CEST	50059	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:26.168256044 CEST	443	50059	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:26.168389082 CEST	50059	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:26.168664932 CEST	50059	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:26.168697119 CEST	443	50059	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:26.285036087 CEST	443	50059	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:26.285439014 CEST	50059	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:26.285496950 CEST	443	50059	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:26.286628008 CEST	443	50059	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:26.287209034 CEST	50059	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:26.287369967 CEST	50059	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:26.287389040 CEST	443	50059	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:26.287453890 CEST	443	50059	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:26.327672958 CEST	50059	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:26.345468998 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.345549107 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.345572948 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.345638990 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.345662117 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.345660925 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.345660925 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.345716000 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.345762968 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.345798016 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.345798016 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.345798016 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.345870972 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.345931053 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.345952988 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.345979929 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.346015930 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.348807096 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.348941088 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.348969936 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.348999023 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.349045038 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.349070072 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.354028940 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.354087114 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.354135990 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.354187965 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.354223967 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.354228973 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.354228973 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.354228973 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.354257107 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.354302883 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.354304075 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.354304075 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.354324102 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.354372025 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.354470968 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.354532957 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.368568897 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.368644953 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.368665934 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.368704081 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.368714094 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.368724108 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.368769884 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.368769884 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.368793964 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.368818998 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.368855000 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.368877888 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.368922949 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.368973017 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.369049072 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.369074106 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.369112968 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.369132996 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.369143963 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.369343042 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.369414091 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.369429111 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.369474888 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.369488955 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.369541883 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.381458998 CEST	50056	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.381521940 CEST	443	50056	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.384008884 CEST	50057	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.384053946 CEST	443	50057	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.385159969 CEST	50058	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.385205030 CEST	443	50058	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.398648024 CEST	50060	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.398705006 CEST	443	50060	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.398811102 CEST	50060	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.399733067 CEST	50061	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.399795055 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.399888039 CEST	50061	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.400270939 CEST	50060	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.400309086 CEST	443	50060	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.401122093 CEST	50061	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.401158094 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.458033085 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.458112955 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.458213091 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.458456039 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.458477020 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.462483883 CEST	50063	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.462533951 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.462639093 CEST	50063	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.462937117 CEST	50063	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.462958097 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.465861082 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.465909004 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.466010094 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.466800928 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.466835022 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.556433916 CEST	443	50059	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:26.557137012 CEST	443	50059	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:26.557236910 CEST	50059	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:26.558094025 CEST	50059	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:26.558118105 CEST	443	50059	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:26.692754030 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.726833105 CEST	50061	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.726864100 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.728122950 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.729203939 CEST	50061	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.729487896 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.730201006 CEST	50061	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.743403912 CEST	443	50060	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.768804073 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.770560026 CEST	50060	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.770616055 CEST	443	50060	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.771008015 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.771064043 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.772660017 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.772789001 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.772985935 CEST	443	50060	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.774796963 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.792437077 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.792601109 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.795787096 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.795968056 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.796691895 CEST	50060	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.796982050 CEST	443	50060	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.797086000 CEST	50063	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.797149897 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.797321081 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.797348976 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.797800064 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.797832966 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.798057079 CEST	50060	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.798125982 CEST	443	50060	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.798418045 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.798578978 CEST	50063	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.798634052 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.798716068 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.800895929 CEST	50063	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.801007986 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.802058935 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.802165031 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.811816931 CEST	50063	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.811873913 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.811883926 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.811902046 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:26.915749073 CEST	50063	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:26.991446972 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.002827883 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.002931118 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.018917084 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.019114971 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.038952112 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.039016008 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.039124966 CEST	50063	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.039165974 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.039237976 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.039303064 CEST	50063	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.057112932 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.057172060 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.057292938 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.058334112 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.058368921 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.071485996 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.071580887 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.071697950 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.071741104 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.071826935 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.074047089 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.074188948 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.074285030 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.078183889 CEST	50063	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.078223944 CEST	443	50063	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.081677914 CEST	50064	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.081716061 CEST	443	50064	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.105488062 CEST	50066	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.105550051 CEST	443	50066	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.105645895 CEST	50066	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.106035948 CEST	50066	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.106070995 CEST	443	50066	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.112957954 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.112987041 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.113095045 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.113130093 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.113183975 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.113214016 CEST	50061	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.113255024 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.113260984 CEST	50061	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.113337040 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.113384008 CEST	50061	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.113393068 CEST	50061	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.113509893 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.113524914 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.114939928 CEST	50061	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.114953041 CEST	443	50061	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.116147995 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.116189003 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.116220951 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.116280079 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.116331100 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.116363049 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.116400003 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.118231058 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.118268013 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.118357897 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.118386030 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.118439913 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.227788925 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.231929064 CEST	443	50060	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.232166052 CEST	443	50060	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.232254028 CEST	443	50060	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.232315063 CEST	50060	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.232315063 CEST	50060	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.236293077 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.236324072 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.236414909 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.236440897 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.236474037 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.236529112 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.236529112 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.236529112 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.236557961 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.236620903 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.237390995 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.237461090 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.237498045 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.237519979 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.237549067 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.237576962 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.238347054 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.238411903 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.238442898 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.238461018 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.238492966 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.238517046 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.299499035 CEST	50060	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.299545050 CEST	443	50060	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.317656994 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.318192959 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.318240881 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.321693897 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.321805954 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.326297998 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.326437950 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.326596975 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.326627016 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.355792046 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.355869055 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.355952024 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.356014967 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.356054068 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.356093884 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.357079029 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.357147932 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.357196093 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.357230902 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.357259989 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.357310057 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.357893944 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.357963085 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.358002901 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.358021975 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.358051062 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.358082056 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.358973026 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.359029055 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.359086990 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.359105110 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.359134912 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.359172106 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.359522104 CEST	443	50066	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.359734058 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.359792948 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.359843969 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.359865904 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.359894037 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.359930038 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.360486031 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.360551119 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.360603094 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.360625982 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.360654116 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.360693932 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.367958069 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.390202999 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.390232086 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.390443087 CEST	50066	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.390502930 CEST	443	50066	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.390520096 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.394032955 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.394161940 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.394258022 CEST	443	50066	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.394351959 CEST	50066	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.394856930 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.395083904 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.395653009 CEST	50066	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.395965099 CEST	443	50066	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.396229982 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.396250010 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.396534920 CEST	50066	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.396564007 CEST	443	50066	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.415704012 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.439632893 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.439692974 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.439807892 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.439807892 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.439867973 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.439946890 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.475969076 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.476046085 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.476114035 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.476175070 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.476211071 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.476249933 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.478071928 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.478138924 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.478184938 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.478207111 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.478238106 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.478267908 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.479227066 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.479291916 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.479346037 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.479377031 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.479399920 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.479446888 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.479962111 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.480029106 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.480067015 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.480092049 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.480119944 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.480166912 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.480812073 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.480875969 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.480923891 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.480952978 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.480978012 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.481009007 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.481678009 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.481740952 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.481776953 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.481798887 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.481831074 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.481859922 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.482395887 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.482458115 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.482508898 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.482537031 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.482574940 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.482619047 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.483175993 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.483242989 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.483278036 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.483299017 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.483326912 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.483355999 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.483835936 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.483900070 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.483937025 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.483958960 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.483990908 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.484028101 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.484663010 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.484724998 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.484770060 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.484791994 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.484819889 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.484854937 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.511854887 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.511889935 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.512005091 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.512005091 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.512063026 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.512145042 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.513421059 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.513451099 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.513520002 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.513544083 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.513576031 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.513607979 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.515717030 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.524794102 CEST	50066	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.560810089 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.560884953 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.560990095 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.561044931 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.561124086 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.561124086 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.561430931 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.561527967 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.561547995 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.561577082 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.561626911 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.561654091 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.596424103 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.596512079 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.596575975 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.596645117 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.596679926 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.596714973 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.597315073 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.597388983 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.597426891 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.597450018 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.597479105 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.597536087 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.598340034 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.598409891 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.598453999 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.598483086 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.598506927 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.598548889 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.599072933 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.599138975 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.599179983 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.599200964 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.599229097 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.599257946 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.600689888 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.600755930 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.600807905 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.600837946 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.600862980 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.600891113 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.605254889 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.605319977 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.605448961 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.605472088 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.605546951 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.606466055 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.606513023 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.606576920 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.606595039 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.606625080 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.606653929 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.607177019 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.607244968 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.607280970 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.607301950 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.607330084 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.607363939 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.607928991 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.608005047 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.608062983 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.608084917 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.608113050 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.608161926 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.608767986 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.608825922 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.608874083 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.608895063 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.608922005 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.608975887 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.609309912 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.609373093 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.609419107 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.609440088 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.609466076 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.609496117 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.609863997 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.609929085 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.609958887 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.609976053 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.610008001 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.610039949 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.610493898 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.610553980 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.610603094 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.610630035 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.610651970 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.610697031 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.610924006 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.610970020 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.611021996 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.611043930 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.611069918 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.611115932 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.612502098 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.612570047 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.612617016 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.612637997 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.612664938 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.612711906 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.612950087 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.613015890 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.613049984 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.613069057 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.613097906 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.613121033 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.613584995 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.613755941 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.613856077 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.615204096 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.624855995 CEST	50062	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.624921083 CEST	443	50062	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.636885881 CEST	443	50066	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.636926889 CEST	443	50066	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.637026072 CEST	443	50066	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.637041092 CEST	50066	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.637094975 CEST	50066	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.704592943 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.704653025 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.704674006 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.704726934 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.704758883 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.704777956 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.704813957 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.704854012 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.704874039 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.704874039 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.704874039 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.704885960 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.704912901 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.704921961 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.704966068 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.705013990 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.705068111 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.738570929 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.738636971 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.738738060 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.739245892 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.739276886 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.743655920 CEST	50066	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.743701935 CEST	443	50066	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.744951963 CEST	50065	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.744980097 CEST	443	50065	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.889560938 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.889625072 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.889703989 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.889729023 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.891710997 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.891727924 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.891750097 CEST	443	50067	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:27.891787052 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:27.891814947 CEST	50067	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.001204014 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.001544952 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.001585007 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.002654076 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.004451990 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.004570007 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.004592896 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.004800081 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.115937948 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.172882080 CEST	50069	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.172945023 CEST	443	50069	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.173047066 CEST	50069	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.173372984 CEST	50070	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.173454046 CEST	443	50070	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.173543930 CEST	50070	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.173759937 CEST	50069	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.173791885 CEST	443	50069	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.174103022 CEST	50070	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.174143076 CEST	443	50070	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.459662914 CEST	443	50070	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.460247993 CEST	50070	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.460285902 CEST	443	50070	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.461520910 CEST	443	50070	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.462322950 CEST	50070	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.462516069 CEST	50070	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.462579012 CEST	443	50070	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.464397907 CEST	443	50069	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.464704990 CEST	50069	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.464770079 CEST	443	50069	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.465823889 CEST	443	50069	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.466521025 CEST	50069	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.466732979 CEST	443	50069	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.466780901 CEST	50069	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.466881037 CEST	443	50069	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.515839100 CEST	50070	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.524939060 CEST	50069	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.700848103 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.701085091 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.701112986 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.701154947 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.701172113 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.701240063 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.701383114 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.701416016 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.701494932 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.701514006 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.701560020 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.701576948 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.701823950 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.701849937 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.759954929 CEST	443	50070	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.764452934 CEST	443	50070	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.764607906 CEST	50070	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.765038967 CEST	50070	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.765060902 CEST	443	50070	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.774507999 CEST	50073	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.774553061 CEST	443	50073	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.774641991 CEST	50073	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.775202036 CEST	50073	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.775223970 CEST	443	50073	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.804270029 CEST	443	50069	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.807821989 CEST	443	50069	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.807954073 CEST	50069	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.807960033 CEST	443	50069	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.808033943 CEST	50069	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.808641911 CEST	50069	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.808677912 CEST	443	50069	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.815898895 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.817756891 CEST	50074	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.817796946 CEST	443	50074	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.817902088 CEST	50074	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.818141937 CEST	50074	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.818172932 CEST	443	50074	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.824419022 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.824448109 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.824489117 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.824510098 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.824536085 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.824564934 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.824577093 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.824593067 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.824634075 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.824654102 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.825110912 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.825135946 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.825170040 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.825206041 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.825227976 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.825251102 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.825387955 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.825459003 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.826313019 CEST	50068	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.826339960 CEST	443	50068	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.935137033 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.935206890 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:28.935323954 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.935631037 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:28.935661077 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.047717094 CEST	443	50073	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.058500051 CEST	50073	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.058533907 CEST	443	50073	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.059694052 CEST	443	50073	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.060359955 CEST	50073	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.060564041 CEST	443	50073	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.060580969 CEST	50073	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.080267906 CEST	443	50074	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.080697060 CEST	50074	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.080755949 CEST	443	50074	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.081814051 CEST	443	50074	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.082632065 CEST	50074	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.082834005 CEST	50074	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.082853079 CEST	443	50074	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.082886934 CEST	443	50074	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.102802992 CEST	443	50073	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.173463106 CEST	443	50051	13.107.246.60	192.168.2.3
Aug 10, 2023 23:19:29.173639059 CEST	443	50051	13.107.246.60	192.168.2.3
Aug 10, 2023 23:19:29.173707962 CEST	50051	443	192.168.2.3	13.107.246.60
Aug 10, 2023 23:19:29.189210892 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.189568043 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.189598083 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.190442085 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.190953016 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.191113949 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.191148996 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.215879917 CEST	50074	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.227158070 CEST	50073	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.234839916 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.327910900 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.342761993 CEST	443	50073	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.343066931 CEST	443	50073	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.343265057 CEST	50073	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.351078033 CEST	50073	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.351134062 CEST	443	50073	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.366652966 CEST	443	50074	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.366740942 CEST	443	50074	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.366915941 CEST	443	50074	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.366940975 CEST	50074	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.367028952 CEST	50074	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.396249056 CEST	50074	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.396296024 CEST	443	50074	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.434139013 CEST	50051	443	192.168.2.3	13.107.246.60
Aug 10, 2023 23:19:29.434182882 CEST	443	50051	13.107.246.60	192.168.2.3
Aug 10, 2023 23:19:29.827264071 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827323914 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827342987 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827431917 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827461958 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827508926 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827538013 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.827538013 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.827538967 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.827579021 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.827615976 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827666044 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827689886 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.827764988 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827784061 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827838898 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827857018 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827857018 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.827903986 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.827944040 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.827991009 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.828105927 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.828169107 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.828183889 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:29.828296900 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:29.828366995 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:30.131705046 CEST	50075	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:30.131757975 CEST	443	50075	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:30.147857904 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.147908926 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.148000956 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.148271084 CEST	50079	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.148335934 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.148411989 CEST	50079	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.148606062 CEST	50080	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.148654938 CEST	443	50080	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.148722887 CEST	50080	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.149111032 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.149173021 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.149247885 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.149513960 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.149542093 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.149597883 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.149864912 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.149892092 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.149960041 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.150202990 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.150237083 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.150405884 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.150432110 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.150646925 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.150681019 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.150876045 CEST	50080	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.150922060 CEST	443	50080	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.151145935 CEST	50079	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.151174068 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.151407003 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.151428938 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.275737047 CEST	443	50080	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.279726028 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.295589924 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.300380945 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.300451040 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.300498962 CEST	50079	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.300566912 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.300657034 CEST	50080	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.300705910 CEST	443	50080	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.303102016 CEST	443	50080	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.303225040 CEST	50080	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.303888083 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.303968906 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.304572105 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.304725885 CEST	50079	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.306571960 CEST	50080	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.306699991 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.306865931 CEST	50079	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.306910038 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.306952953 CEST	443	50080	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.307025909 CEST	50080	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.307075977 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.307111025 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.307147026 CEST	50079	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.307169914 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.307214022 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.308690071 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.308938026 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.308971882 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.311131954 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.311233044 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.316272974 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.320014000 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.328402996 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.328447104 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.328571081 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.328607082 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.328696966 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.328819036 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.328867912 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.328921080 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.328939915 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.328965902 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.328988075 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.329205036 CEST	443	50080	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.329310894 CEST	50080	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.329355001 CEST	443	50080	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.329391956 CEST	443	50080	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.329431057 CEST	50080	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.329461098 CEST	50080	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.329773903 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.329804897 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.329875946 CEST	50079	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.329935074 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.329991102 CEST	50079	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.330008030 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.330061913 CEST	50079	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.345029116 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.345081091 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.345138073 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.345166922 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.345194101 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.345232010 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.345259905 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.345468044 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.345521927 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.345550060 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.345582962 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.345616102 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.345988035 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.346036911 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.346085072 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.346111059 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.346144915 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.346144915 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.361398935 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.361454964 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.361845970 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.361876965 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.361934900 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.361978054 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.362312078 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.362334013 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.362374067 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.362428904 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.362453938 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.362483025 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.362708092 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.362895966 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.362941980 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.363029003 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.363049030 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.363401890 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.363451004 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.363759995 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.363780022 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.363893032 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.363930941 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.364228964 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.364249945 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.364443064 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.364495993 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.364816904 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.364861965 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.365001917 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.365026951 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.365489960 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.382920980 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.382975101 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.383060932 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.383104086 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.383133888 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.383157969 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.383503914 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.383548975 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.383604050 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.383621931 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.383656025 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.383670092 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.383948088 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.383991957 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.384044886 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.384068966 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.384099007 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.384124994 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.384138107 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.384402037 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.384452105 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.384490967 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.384519100 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.384552002 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.384552002 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.384975910 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.385016918 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.385072947 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.385099888 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.385123968 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.385360956 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.385410070 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.385449886 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.385474920 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.385508060 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.385508060 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.385883093 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.385922909 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.385977983 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.385997057 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.386020899 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.386306047 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.386358976 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.386395931 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.386421919 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.386454105 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.386821985 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.386862993 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.386921883 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.386941910 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.386976004 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.387310028 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.387361050 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.387403011 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.387428999 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.387454987 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.387778997 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.387820005 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.387875080 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.387893915 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.387918949 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.388226032 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.388283014 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.388326883 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.388354063 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.388385057 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.411016941 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.411070108 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.411214113 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.411267042 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.411307096 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.419229984 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419285059 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419353962 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.419356108 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419389009 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419425964 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.419447899 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419475079 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.419497967 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419528008 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.419550896 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.419570923 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419605017 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419641018 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419678926 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.419708967 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419743061 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.419745922 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419858932 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.419878960 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419903040 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419943094 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.419981956 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420006037 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420036077 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420038939 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420038939 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420074940 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420109987 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420135021 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420166969 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420166969 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420176983 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420217037 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420253992 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420279026 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420310974 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420310974 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420340061 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420366049 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420414925 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420434952 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420460939 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420470953 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420507908 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420550108 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420577049 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420610905 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420610905 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.420620918 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.420728922 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.430959940 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.431318045 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.498106956 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.498159885 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498231888 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498275995 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498410940 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.498459101 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498487949 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.498528004 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498629093 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498632908 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.498678923 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498682022 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.498703957 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498717070 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.498754025 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498778105 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.498800993 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498876095 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.498898029 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498930931 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.498956919 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.498990059 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.499005079 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.499362946 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.499404907 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.499569893 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.499625921 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.499669075 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.499694109 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.499727964 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.499727964 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.499767065 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.499804020 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.499842882 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.499866009 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.499897003 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.499912024 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500157118 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500209093 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500252962 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500277996 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500308037 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500344038 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500382900 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500421047 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500443935 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500475883 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500477076 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500498056 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500547886 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500588894 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500612974 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500644922 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500644922 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500670910 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500709057 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500763893 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500786066 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500809908 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500824928 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500874043 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500894070 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.500917912 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.500952959 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501003027 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501050949 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501085997 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501111984 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501143932 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501143932 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501173019 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501218081 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501259089 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501285076 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501317978 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501317978 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501341105 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501382113 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501393080 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501393080 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501451969 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501488924 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501490116 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501507998 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501562119 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501581907 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501606941 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501641989 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501650095 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501694918 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501724005 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501749992 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501780033 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501796007 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501889944 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501936913 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.501970053 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.501996994 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502029896 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.502029896 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.502157927 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502181053 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502270937 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.502342939 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502386093 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502439022 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.502439022 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.502459049 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502492905 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.502516985 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502564907 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502585888 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.502609968 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502646923 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.502701044 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502733946 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502768040 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.502794027 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502842903 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.502903938 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502909899 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502938986 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.502949953 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.503009081 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503035069 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.503077030 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.503077984 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503077984 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503110886 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503120899 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.503149986 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503177881 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.503207922 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503257990 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.503313065 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.503323078 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503346920 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.503395081 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503446102 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.503480911 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.503535986 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503535986 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503561974 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503597975 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503774881 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.503804922 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.503923893 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.504484892 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.504648924 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.504668951 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.504725933 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.504740000 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.521732092 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.521760941 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.521837950 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.521841049 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.521886110 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.521940947 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.521955013 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.521970987 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.521970987 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.521970987 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.522020102 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.522021055 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.522545099 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.522572994 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.522641897 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.522669077 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.522722006 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.522784948 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.522799969 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.522805929 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.522845984 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.522890091 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.522926092 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.522948980 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.522980928 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.537844896 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.537898064 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.537975073 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.538000107 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.538026094 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.538249969 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.538292885 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.538367987 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.538368940 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.538403988 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.546833038 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.553356886 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.553412914 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.553503990 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.553539991 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.553558111 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.553618908 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.553699970 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.553714991 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.553755999 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.553792000 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.553792953 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.553805113 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.553849936 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.627078056 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.627125978 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.671883106 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.710809946 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:30.727056026 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:30.816488981 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.034815073 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.034986973 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.191910028 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.192162037 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.192331076 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.250327110 CEST	50080	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.250375986 CEST	443	50080	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.250740051 CEST	50084	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.250808001 CEST	443	50084	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.250905037 CEST	50084	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.255522966 CEST	50084	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.255557060 CEST	443	50084	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.269738913 CEST	50079	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.269776106 CEST	443	50079	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.270178080 CEST	50085	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.270246983 CEST	443	50085	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.270349979 CEST	50085	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.271841049 CEST	50083	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.271859884 CEST	443	50083	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.277869940 CEST	50086	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.277930021 CEST	443	50086	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.278028011 CEST	50086	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.278947115 CEST	50081	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.278991938 CEST	443	50081	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.279369116 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.279407024 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.279483080 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.280203104 CEST	50085	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.280246973 CEST	443	50085	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.282361031 CEST	50078	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.282388926 CEST	443	50078	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.283709049 CEST	50088	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.283744097 CEST	443	50088	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.283828020 CEST	50088	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.286247969 CEST	50086	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.286289930 CEST	443	50086	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.287626982 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.287681103 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.289657116 CEST	50088	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.289694071 CEST	443	50088	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.292829037 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.292856932 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.292876959 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.292957067 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293029070 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293334961 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293344021 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293360949 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293428898 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293440104 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293453932 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293474913 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293504000 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293504000 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293535948 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293554068 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293565989 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293586969 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293612957 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293612957 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293626070 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293646097 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293683052 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293683052 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293695927 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293713093 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.293744087 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293744087 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.293791056 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.296154976 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.296437979 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.298952103 CEST	50082	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.298971891 CEST	443	50082	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.299382925 CEST	50089	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.299432993 CEST	443	50089	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.299516916 CEST	50089	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.302407026 CEST	50089	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.302431107 CEST	443	50089	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.357924938 CEST	443	50084	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.381753922 CEST	443	50085	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.404773951 CEST	50085	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.404848099 CEST	443	50085	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.404978991 CEST	50084	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.405045986 CEST	443	50084	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.405754089 CEST	443	50085	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.406024933 CEST	443	50084	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.409379005 CEST	50085	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.409548044 CEST	443	50085	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.409822941 CEST	50084	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.410024881 CEST	50085	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.410077095 CEST	443	50084	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.410080910 CEST	50084	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.443144083 CEST	443	50089	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.444119930 CEST	443	50088	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.450820923 CEST	443	50085	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.450856924 CEST	443	50084	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.466562986 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.466584921 CEST	443	50086	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.482532024 CEST	50088	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.482615948 CEST	443	50088	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.482665062 CEST	50089	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.482726097 CEST	443	50089	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.482805014 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.482836008 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.482938051 CEST	50086	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.482975960 CEST	443	50086	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.485968113 CEST	443	50088	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.486082077 CEST	50088	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.486100912 CEST	443	50089	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.486166954 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.486191988 CEST	50089	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.486237049 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.486265898 CEST	443	50086	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.486342907 CEST	50086	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.487601042 CEST	50088	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.487886906 CEST	443	50088	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.488111973 CEST	50089	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.488342047 CEST	443	50089	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.488569021 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.488785028 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.489049911 CEST	50086	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.489289045 CEST	50088	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.489294052 CEST	443	50086	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.489340067 CEST	443	50088	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.489341021 CEST	50089	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.489367008 CEST	443	50089	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.489413977 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.489443064 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.489540100 CEST	50086	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.489566088 CEST	443	50086	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.506378889 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.506411076 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.506510019 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.506556034 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.506628036 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.506654978 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.506680965 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.506719112 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.506745100 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.506745100 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.506800890 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.534076929 CEST	50086	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.534080029 CEST	50088	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.534141064 CEST	50084	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.600017071 CEST	50087	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.600061893 CEST	443	50087	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.600573063 CEST	50090	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.600653887 CEST	443	50090	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.600773096 CEST	50090	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.601486921 CEST	50090	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.601521969 CEST	443	50090	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.616053104 CEST	50089	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.661360979 CEST	443	50090	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.662606001 CEST	50090	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.662681103 CEST	443	50090	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.663475037 CEST	443	50090	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.672275066 CEST	50090	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.672471046 CEST	50090	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:31.672475100 CEST	443	50090	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.714806080 CEST	443	50090	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:31.725588083 CEST	50090	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:32.077408075 CEST	443	50085	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.077745914 CEST	443	50085	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.084112883 CEST	50085	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:32.107844114 CEST	443	50084	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.108417988 CEST	443	50084	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.108567953 CEST	50084	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:32.163182974 CEST	443	50088	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.163446903 CEST	443	50088	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.163634062 CEST	50088	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:32.180975914 CEST	443	50089	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.181245089 CEST	443	50089	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.181334972 CEST	50089	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:32.183178902 CEST	443	50086	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.183373928 CEST	443	50086	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.183444977 CEST	50086	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:32.341521978 CEST	443	50090	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.341815948 CEST	443	50090	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:32.341928959 CEST	50090	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.043056965 CEST	50091	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:34.043138981 CEST	443	50091	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:34.043231964 CEST	50091	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:34.043577909 CEST	50091	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:34.043617010 CEST	443	50091	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:34.044529915 CEST	50092	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:34.044603109 CEST	443	50092	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:34.044712067 CEST	50092	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:34.056946039 CEST	50092	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:34.057012081 CEST	443	50092	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:34.062131882 CEST	50090	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.062184095 CEST	443	50090	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.064081907 CEST	50086	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.064130068 CEST	443	50086	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.065949917 CEST	50089	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.065977097 CEST	443	50089	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.067800999 CEST	50088	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.067850113 CEST	443	50088	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.069593906 CEST	50084	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.069638968 CEST	443	50084	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.071208000 CEST	50085	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.071238041 CEST	443	50085	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.120701075 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.120770931 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.120908022 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.121370077 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.121401072 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.122797966 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.122843981 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.122915030 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.123193026 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.123209953 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.123974085 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.124034882 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.124119997 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.124324083 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.124358892 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.125057936 CEST	50096	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.125078917 CEST	443	50096	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.125138044 CEST	50096	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.125353098 CEST	50096	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.125366926 CEST	443	50096	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.126173019 CEST	50097	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.126199007 CEST	443	50097	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.126266956 CEST	50097	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.126450062 CEST	50097	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.126478910 CEST	443	50097	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.127300024 CEST	50098	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.127357960 CEST	443	50098	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:34.127456903 CEST	50098	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.127639055 CEST	50098	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:34.127674103 CEST	443	50098	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.182079077 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.183020115 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.183067083 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.184282064 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.184753895 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.184904099 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.184920073 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.184962034 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.212512016 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.212543011 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.212647915 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.212686062 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.212775946 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.212810993 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.212858915 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.212893009 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.212912083 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.212939024 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.212965965 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.212979078 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.228054047 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.228210926 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.228298903 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.228300095 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.228368044 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.228770018 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.228816032 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.228871107 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.228898048 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.228919983 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.228939056 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.228986025 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.229022026 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.229039907 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.229084015 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.243423939 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.243480921 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.243598938 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.243598938 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.243654013 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.244575977 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.244626045 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.244658947 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.244679928 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.244712114 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.244792938 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.244839907 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.244870901 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.244889975 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.244915009 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.245260954 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.245316029 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.245366096 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.245388031 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.245409012 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.249774933 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.256778955 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.256836891 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.258018017 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.258771896 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.258910894 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.258928061 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.259016991 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261137009 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261190891 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261250019 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.261276007 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261338949 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261354923 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.261393070 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261462927 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.261482000 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261548042 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261569023 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.261593103 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261651993 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.261672020 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261693001 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.261701107 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261761904 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261791945 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.261806965 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.261862993 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.261965036 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.262012005 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.262079000 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.262095928 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.262123108 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.262146950 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.262166977 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.262214899 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.269902945 CEST	50100	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:35.269973993 CEST	443	50100	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:35.270066023 CEST	50100	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:35.270644903 CEST	50100	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:35.270677090 CEST	443	50100	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:35.271524906 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.275831938 CEST	50093	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.275863886 CEST	443	50093	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.279386044 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.279414892 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.279541016 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.279587984 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.279695988 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.279716015 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.279773951 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.279830933 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.279854059 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.279870033 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.279923916 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.280509949 CEST	50101	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.280559063 CEST	443	50101	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.280631065 CEST	50101	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.281049013 CEST	50101	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.281078100 CEST	443	50101	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.294976950 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.295042992 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.295111895 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.295161963 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.295193911 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.295324087 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.295416117 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.295433998 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.295816898 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.295932055 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.295950890 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.296057940 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.296117067 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.296139956 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.296154022 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.296202898 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.296360970 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.296416044 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.296473980 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.296474934 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.296490908 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.296767950 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.296837091 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.301353931 CEST	50094	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.301381111 CEST	443	50094	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.304857016 CEST	50102	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.304917097 CEST	443	50102	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.305011988 CEST	50102	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.306066036 CEST	50102	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.306103945 CEST	443	50102	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.349092007 CEST	50103	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:35.349123001 CEST	443	50103	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:35.349236012 CEST	50103	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:35.350430965 CEST	50103	443	192.168.2.3	162.125.69.18
Aug 10, 2023 23:19:35.350450993 CEST	443	50103	162.125.69.18	192.168.2.3
Aug 10, 2023 23:19:35.411422968 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.411789894 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.411854982 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.415998936 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.416129112 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.416878939 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.417079926 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.417104006 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.417280912 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.436167002 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.436191082 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.436372042 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.436397076 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.436456919 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.436515093 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.436992884 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.437011003 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.437530994 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.452332973 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.452456951 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.452508926 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.452559948 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.452593088 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.452639103 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.452655077 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.452682018 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.452737093 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.452749968 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.452759027 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.452770948 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.452826023 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.452847004 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.452861071 CEST	443	50097	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.453181982 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.453241110 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.453270912 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.453286886 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.453315973 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.453475952 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.453542948 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.456527948 CEST	443	50096	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.478476048 CEST	443	50098	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.491116047 CEST	443	50092	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:35.492975950 CEST	443	50091	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:35.495841980 CEST	50091	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:35.495903015 CEST	443	50091	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:35.496017933 CEST	50092	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:35.496068954 CEST	443	50092	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:35.496151924 CEST	50098	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.496182919 CEST	443	50098	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.496284008 CEST	50096	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.496340036 CEST	443	50096	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.496471882 CEST	50097	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.496532917 CEST	443	50097	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.496586084 CEST	443	50091	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:35.496742010 CEST	443	50092	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:35.497143984 CEST	50091	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:35.497246981 CEST	443	50091	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:35.498080015 CEST	443	50098	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.498189926 CEST	50098	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.498935938 CEST	50092	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:35.499054909 CEST	443	50092	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:35.499448061 CEST	50098	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.499583960 CEST	443	50098	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.499622107 CEST	50091	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:35.499722004 CEST	443	50096	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.499774933 CEST	50092	443	192.168.2.3	23.227.196.61
Aug 10, 2023 23:19:35.499803066 CEST	443	50092	23.227.196.61	192.168.2.3
Aug 10, 2023 23:19:35.499839067 CEST	50096	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.499954939 CEST	50098	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.499991894 CEST	443	50098	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.500302076 CEST	443	50097	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.500381947 CEST	50097	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.500514984 CEST	50096	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.500633955 CEST	50095	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.500662088 CEST	443	50095	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.500771046 CEST	443	50096	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.501825094 CEST	50097	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.502046108 CEST	443	50097	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.502340078 CEST	50096	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.502387047 CEST	443	50096	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.502435923 CEST	50097	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.502470016 CEST	443	50097	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.504909992 CEST	50104	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.504965067 CEST	443	50104	152.199.21.175	192.168.2.3
Aug 10, 2023 23:19:35.505059958 CEST	50104	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.505280018 CEST	50104	443	192.168.2.3	152.199.21.175
Aug 10, 2023 23:19:35.505290031 CEST	443	50104	152.199.21.175	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 10, 2023 23:18:51.016594887 CEST	192.168.2.3	8.8.8.8	0x7a08	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:51.016892910 CEST	192.168.2.3	8.8.8.8	0x91de	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Aug 10, 2023 23:18:51.017304897 CEST	192.168.2.3	8.8.8.8	0x52d6	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:51.017550945 CEST	192.168.2.3	8.8.8.8	0xa28c	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Aug 10, 2023 23:18:52.138268948 CEST	192.168.2.3	8.8.8.8	0x7b9a	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:52.138830900 CEST	192.168.2.3	8.8.8.8	0xbc98	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Aug 10, 2023 23:18:53.126369953 CEST	192.168.2.3	8.8.8.8	0x6c88	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:53.126876116 CEST	192.168.2.3	8.8.8.8	0x93b3	Standard query (0)	cfl.dropboxstatic.com	65	IN (0x0001)	false
Aug 10, 2023 23:18:53.355180025 CEST	192.168.2.3	8.8.8.8	0x3c6e	Standard query (0)	dropbox.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:53.355864048 CEST	192.168.2.3	8.8.8.8	0xf22b	Standard query (0)	dropbox.com	65	IN (0x0001)	false
Aug 10, 2023 23:18:54.843465090 CEST	192.168.2.3	8.8.8.8	0xad45	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:54.844623089 CEST	192.168.2.3	8.8.8.8	0x798c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 10, 2023 23:18:55.004797935 CEST	192.168.2.3	8.8.8.8	0xe653	Standard query (0)	paper.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:55.005306959 CEST	192.168.2.3	8.8.8.8	0x3bca	Standard query (0)	paper.dropboxstatic.com	65	IN (0x0001)	false
Aug 10, 2023 23:18:58.090905905 CEST	192.168.2.3	8.8.8.8	0xb7d1	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:58.091140032 CEST	192.168.2.3	8.8.8.8	0x2928	Standard query (0)	cfl.dropboxstatic.com	65	IN (0x0001)	false
Aug 10, 2023 23:18:59.046135902 CEST	192.168.2.3	8.8.8.8	0x2b72	Standard query (0)	cfl.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:59.046582937 CEST	192.168.2.3	8.8.8.8	0xa9dc	Standard query (0)	cfl.dropboxstatic.com	65	IN (0x0001)	false
Aug 10, 2023 23:18:59.729991913 CEST	192.168.2.3	8.8.8.8	0x8051	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:59.730360985 CEST	192.168.2.3	8.8.8.8	0x819a	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Aug 10, 2023 23:18:59.868977070 CEST	192.168.2.3	8.8.8.8	0xad1a	Standard query (0)	uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:59.869256973 CEST	192.168.2.3	8.8.8.8	0xe058	Standard query (0)	uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com	65	IN (0x0001)	false
Aug 10, 2023 23:19:01.177545071 CEST	192.168.2.3	8.8.8.8	0xbaa3	Standard query (0)	uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:01.177810907 CEST	192.168.2.3	8.8.8.8	0xefb0	Standard query (0)	uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com	65	IN (0x0001)	false
Aug 10, 2023 23:19:06.468358994 CEST	192.168.2.3	8.8.8.8	0xc73f	Standard query (0)	paper.dropboxstatic.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:06.469151974 CEST	192.168.2.3	8.8.8.8	0xad85	Standard query (0)	paper.dropboxstatic.com	65	IN (0x0001)	false
Aug 10, 2023 23:19:09.283907890 CEST	192.168.2.3	8.8.8.8	0x7d69	Standard query (0)	70.comet.dropbox.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:09.284302950 CEST	192.168.2.3	8.8.8.8	0x303b	Standard query (0)	70.comet.dropbox.com	65	IN (0x0001)	false
Aug 10, 2023 23:19:20.387841940 CEST	192.168.2.3	8.8.8.8	0xbf4c	Standard query (0)	larationr.top	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:20.388094902 CEST	192.168.2.3	8.8.8.8	0xbf61	Standard query (0)	larationr.top	65	IN (0x0001)	false
Aug 10, 2023 23:19:22.550662041 CEST	192.168.2.3	8.8.8.8	0x8e18	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:22.550901890 CEST	192.168.2.3	8.8.8.8	0xcbf9	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Aug 10, 2023 23:19:24.106342077 CEST	192.168.2.3	8.8.8.8	0x6416	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:24.106759071 CEST	192.168.2.3	8.8.8.8	0xa451	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 10, 2023 23:19:26.420264006 CEST	192.168.2.3	8.8.8.8	0x5490	Standard query (0)	larationr.top	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:26.420442104 CEST	192.168.2.3	8.8.8.8	0x32e2	Standard query (0)	larationr.top	65	IN (0x0001)	false
Aug 10, 2023 23:19:29.094561100 CEST	192.168.2.3	8.8.8.8	0x51c6	Standard query (0)	portal.microsoftonline.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:29.094917059 CEST	192.168.2.3	8.8.8.8	0x50f3	Standard query (0)	portal.microsoftonline.com	65	IN (0x0001)	false
Aug 10, 2023 23:19:37.377067089 CEST	192.168.2.3	8.8.8.8	0x4bea	Standard query (0)	www.microsoft365.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:37.377562046 CEST	192.168.2.3	8.8.8.8	0xa26f	Standard query (0)	www.microsoft365.com	65	IN (0x0001)	false
Aug 10, 2023 23:19:37.648854017 CEST	192.168.2.3	8.8.8.8	0x58c5	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:37.649097919 CEST	192.168.2.3	8.8.8.8	0xcf1a	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Aug 10, 2023 23:19:37.937508106 CEST	192.168.2.3	8.8.8.8	0xab65	Standard query (0)	r4.res.office365.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:37.937809944 CEST	192.168.2.3	8.8.8.8	0xe162	Standard query (0)	r4.res.office365.com	65	IN (0x0001)	false
Aug 10, 2023 23:19:44.337166071 CEST	192.168.2.3	8.8.8.8	0xa5c5	Standard query (0)	portal.microsoftonline.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:44.339407921 CEST	192.168.2.3	8.8.8.8	0x590b	Standard query (0)	portal.microsoftonline.com	65	IN (0x0001)	false
Aug 10, 2023 23:20:06.855241060 CEST	192.168.2.3	8.8.8.8	0x1346	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:20:06.855597973 CEST	192.168.2.3	8.8.8.8	0xb209	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Aug 10, 2023 23:20:07.444924116 CEST	192.168.2.3	8.8.8.8	0x368e	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:20:07.445287943 CEST	192.168.2.3	8.8.8.8	0x7d3e	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Aug 10, 2023 23:20:08.455552101 CEST	192.168.2.3	8.8.8.8	0xbf68	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:20:08.455692053 CEST	192.168.2.3	8.8.8.8	0xc648	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Aug 10, 2023 23:20:22.555398941 CEST	192.168.2.3	8.8.8.8	0xb46	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:20:22.555824995 CEST	192.168.2.3	8.8.8.8	0xd70a	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Aug 10, 2023 23:20:22.628977060 CEST	192.168.2.3	8.8.8.8	0x54c5	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:20:22.629246950 CEST	192.168.2.3	8.8.8.8	0x47cc	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 10, 2023 23:18:51.045382023 CEST	8.8.8.8	192.168.2.3	0x7a08	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:51.045382023 CEST	8.8.8.8	192.168.2.3	0x7a08	No error (0)	clients.l.google.com		142.251.36.174	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:51.058124065 CEST	8.8.8.8	192.168.2.3	0x52d6	No error (0)	accounts.google.com		142.251.37.13	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:51.058260918 CEST	8.8.8.8	192.168.2.3	0x91de	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:52.169358969 CEST	8.8.8.8	192.168.2.3	0xbc98	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:52.175746918 CEST	8.8.8.8	192.168.2.3	0x7b9a	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:52.175746918 CEST	8.8.8.8	192.168.2.3	0x7b9a	No error (0)	www-env.dropbox-dns.com		162.125.69.18	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:53.153779984 CEST	8.8.8.8	192.168.2.3	0x93b3	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:53.161695957 CEST	8.8.8.8	192.168.2.3	0x6c88	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:53.369832039 CEST	8.8.8.8	192.168.2.3	0x3c6e	No error (0)	dropbox.com		162.125.248.18	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:54.859220982 CEST	8.8.8.8	192.168.2.3	0x798c	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 10, 2023 23:18:54.871778965 CEST	8.8.8.8	192.168.2.3	0xad45	No error (0)	www.google.com		142.251.36.164	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:55.034030914 CEST	8.8.8.8	192.168.2.3	0xe653	No error (0)	paper.dropboxstatic.com		18.165.183.80	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:55.034030914 CEST	8.8.8.8	192.168.2.3	0xe653	No error (0)	paper.dropboxstatic.com		18.165.183.60	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:55.034030914 CEST	8.8.8.8	192.168.2.3	0xe653	No error (0)	paper.dropboxstatic.com		18.165.183.86	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:55.034030914 CEST	8.8.8.8	192.168.2.3	0xe653	No error (0)	paper.dropboxstatic.com		18.165.183.28	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:58.117815971 CEST	8.8.8.8	192.168.2.3	0xb7d1	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:58.119833946 CEST	8.8.8.8	192.168.2.3	0x2928	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:59.073282957 CEST	8.8.8.8	192.168.2.3	0xa9dc	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:59.082448959 CEST	8.8.8.8	192.168.2.3	0x2b72	No error (0)	cfl.dropboxstatic.com	cfl.dropboxstatic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:59.758904934 CEST	8.8.8.8	192.168.2.3	0x819a	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:59.766155958 CEST	8.8.8.8	192.168.2.3	0x8051	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:59.766155958 CEST	8.8.8.8	192.168.2.3	0x8051	No error (0)	www-env.dropbox-dns.com		162.125.69.18	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:18:59.891819954 CEST	8.8.8.8	192.168.2.3	0xe058	No error (0)	uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com	edge-block-previews-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:59.915175915 CEST	8.8.8.8	192.168.2.3	0xad1a	No error (0)	uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com	edge-block-previews-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:18:59.915175915 CEST	8.8.8.8	192.168.2.3	0xad1a	No error (0)	edge-block-previews-env.dropbox-dns.com		162.125.69.16	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:01.214710951 CEST	8.8.8.8	192.168.2.3	0xbaa3	No error (0)	uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com	edge-block-previews-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:01.214710951 CEST	8.8.8.8	192.168.2.3	0xbaa3	No error (0)	edge-block-previews-env.dropbox-dns.com		162.125.69.16	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:01.220949888 CEST	8.8.8.8	192.168.2.3	0xefb0	No error (0)	uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com	edge-block-previews-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:06.498676062 CEST	8.8.8.8	192.168.2.3	0xc73f	No error (0)	paper.dropboxstatic.com		18.165.183.28	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:06.498676062 CEST	8.8.8.8	192.168.2.3	0xc73f	No error (0)	paper.dropboxstatic.com		18.165.183.86	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:06.498676062 CEST	8.8.8.8	192.168.2.3	0xc73f	No error (0)	paper.dropboxstatic.com		18.165.183.60	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:06.498676062 CEST	8.8.8.8	192.168.2.3	0xc73f	No error (0)	paper.dropboxstatic.com		18.165.183.80	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:09.313718081 CEST	8.8.8.8	192.168.2.3	0x7d69	No error (0)	70.comet.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:09.313718081 CEST	8.8.8.8	192.168.2.3	0x7d69	No error (0)	www-env.dropbox-dns.com		162.125.69.18	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:09.328389883 CEST	8.8.8.8	192.168.2.3	0x303b	No error (0)	70.comet.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:20.581427097 CEST	8.8.8.8	192.168.2.3	0xbf4c	No error (0)	larationr.top		23.227.196.61	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:22.579507113 CEST	8.8.8.8	192.168.2.3	0xcbf9	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:22.587629080 CEST	8.8.8.8	192.168.2.3	0x8e18	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:24.128405094 CEST	8.8.8.8	192.168.2.3	0x62d6	No error (0)	dual.part-0032.t-0009.t-msedge.net	part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:24.128405094 CEST	8.8.8.8	192.168.2.3	0x62d6	No error (0)	part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:24.128405094 CEST	8.8.8.8	192.168.2.3	0x62d6	No error (0)	part-0032.t-0009.t-msedge.net		13.107.213.60	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:24.130146027 CEST	8.8.8.8	192.168.2.3	0xa451	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:24.131026983 CEST	8.8.8.8	192.168.2.3	0x6416	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:24.131026983 CEST	8.8.8.8	192.168.2.3	0x6416	No error (0)	cs1100.wpc.omegacdn.net		152.199.23.37	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:24.133941889 CEST	8.8.8.8	192.168.2.3	0xb5d9	No error (0)	dual.part-0032.t-0009.t-msedge.net	part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:27.030267000 CEST	8.8.8.8	192.168.2.3	0x5490	No error (0)	larationr.top		23.227.196.61	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:29.153439045 CEST	8.8.8.8	192.168.2.3	0x51c6	No error (0)	portal.microsoftonline.com	geo.portal.microsoftonline.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:29.233716011 CEST	8.8.8.8	192.168.2.3	0x50f3	No error (0)	portal.microsoftonline.com	geo.portal.microsoftonline.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:30.142739058 CEST	8.8.8.8	192.168.2.3	0x266c	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:30.142739058 CEST	8.8.8.8	192.168.2.3	0x266c	No error (0)	sni1gl.wpc.sigmacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:30.147221088 CEST	8.8.8.8	192.168.2.3	0xb654	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:37.400298119 CEST	8.8.8.8	192.168.2.3	0x4bea	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:37.400298119 CEST	8.8.8.8	192.168.2.3	0x4bea	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:37.414421082 CEST	8.8.8.8	192.168.2.3	0xa26f	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:37.414421082 CEST	8.8.8.8	192.168.2.3	0xa26f	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:37.664747000 CEST	8.8.8.8	192.168.2.3	0xcf1a	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:37.669915915 CEST	8.8.8.8	192.168.2.3	0x58c5	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:37.669915915 CEST	8.8.8.8	192.168.2.3	0x58c5	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:37.669915915 CEST	8.8.8.8	192.168.2.3	0x58c5	No error (0)	outlook.ms-acdc.office.com	ZRH-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:37.669915915 CEST	8.8.8.8	192.168.2.3	0x58c5	No error (0)	ZRH-efz.ms-acdc.office.com		52.97.186.146	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:37.669915915 CEST	8.8.8.8	192.168.2.3	0x58c5	No error (0)	ZRH-efz.ms-acdc.office.com		52.97.135.50	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:37.669915915 CEST	8.8.8.8	192.168.2.3	0x58c5	No error (0)	ZRH-efz.ms-acdc.office.com		52.97.201.226	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:37.669915915 CEST	8.8.8.8	192.168.2.3	0x58c5	No error (0)	ZRH-efz.ms-acdc.office.com		52.97.201.242	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:19:37.965095997 CEST	8.8.8.8	192.168.2.3	0xab65	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:37.966815948 CEST	8.8.8.8	192.168.2.3	0xe162	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:44.463983059 CEST	8.8.8.8	192.168.2.3	0x590b	No error (0)	portal.microsoftonline.com	geo.portal.microsoftonline.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:19:44.549734116 CEST	8.8.8.8	192.168.2.3	0xa5c5	No error (0)	portal.microsoftonline.com	geo.portal.microsoftonline.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:20:06.879177094 CEST	8.8.8.8	192.168.2.3	0xb209	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:20:06.882946968 CEST	8.8.8.8	192.168.2.3	0x1346	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:20:06.882946968 CEST	8.8.8.8	192.168.2.3	0x1346	No error (0)	www-env.dropbox-dns.com		162.125.69.18	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:20:09.472593069 CEST	8.8.8.8	192.168.2.3	0x368e	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:20:09.472593069 CEST	8.8.8.8	192.168.2.3	0x368e	No error (0)	www-env.dropbox-dns.com		162.125.69.18	A (IP address)	IN (0x0001)	false
Aug 10, 2023 23:20:09.472920895 CEST	8.8.8.8	192.168.2.3	0x7d3e	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:20:22.579333067 CEST	8.8.8.8	192.168.2.3	0xd70a	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:20:22.591768980 CEST	8.8.8.8	192.168.2.3	0xb46	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:20:22.643965960 CEST	8.8.8.8	192.168.2.3	0x47cc	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 10, 2023 23:20:22.665281057 CEST	8.8.8.8	192.168.2.3	0x54c5	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

accounts.google.com

clients2.google.com

www.dropbox.com

https:

dropbox.com

paper.dropboxstatic.com

uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com

70.comet.dropbox.com

larationr.top

res-h3.public.cdn.office.net

outlook.office365.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.3	49709	142.251.37.13	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:51 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CONSENT=PENDING+904; SOCS=CAISHAgCEhJnd3NfMjAyMjA4MDgtMF9SQzEaAmVuIAEaBgiAvOuXBg; AEC=Ad49MVGiijyX5dxPFAKxKYso-rIS24Ht-Pxs5fU9hHrAzfASnm-jqdQE1g; NID=511=WyMJovC2uA2AEbHQkGfP-KDdYCeg5Q7Mv6gxYT-qeugtrnXImrhmp1SixwS4ydh_E8Z0hdfCLAXvg2WUqsBSfqpx5SFvCCoeGeevqlEfkoxYi9FTISb8Cu7rr5rf9PyyNbLqf2QbxG7ja7jAB6UJQd5CPvMGcYUasORCRKRL1-arNYzfADAWHJvBLXml-Km_uewDreOyJ-MjxAI-i38Tl6LXI3zB; 1P_JAR=2023-08-10-10
2023-08-10 21:18:51 UTC	0	OUT	Data Raw: 20 Data Ascii:
2023-08-10 21:18:51 UTC	1	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 10 Aug 2023 21:18:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-WeIgpVReqrtEIjMFwflJoQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-08-10 21:18:51 UTC	3	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-08-10 21:18:51 UTC	3	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.3	49708	142.251.36.174	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:51 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=115.0.5790.171&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-115.0.5790.171 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:51 UTC	3	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-8D0Ua9ehJz9OCp3577aPvA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 10 Aug 2023 21:18:51 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6065 X-Daystart: 51531 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-08-10 21:18:51 UTC	3	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 30 36 35 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 35 31 35 33 31 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6065" elapsed_seconds="51531"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-08-10 21:18:51 UTC	4	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-08-10 21:18:51 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.3	49747	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	721	OUT	GET /static/fonts/AtlasGrotesk-MediumItalic-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:56 UTC	1084	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 86404 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:43 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:18:57 GMT Cache-Control: max-age=43200 ETag: "6ff72a8066505bf68a02551c27ef4e49" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: RefreshHit from cloudfront Via: 1.1 9f25aa45df27e50f380232059fde4c1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: B0Jsh7ZvGoRApU816Adxn2pz6e16XWpjRaMNfGiirlATD0v93aYUeA==
2023-08-10 21:18:56 UTC	1085	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 51 84 00 10 00 00 00 04 b4 c8 00 01 51 22 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 d9 78 1c ce 64 06 60 00 8c 02 08 3c 09 82 73 11 0c 0a 86 ef 44 86 8e 09 0b 94 34 00 01 36 02 24 03 a8 64 04 20 05 91 0b 07 eb 00 0c 84 5a 5b c4 78 94 0e a5 32 f6 f7 a3 24 d0 c0 ea 90 80 6a f4 53 b6 b5 2b 00 ce 6b 05 be 82 0e 19 a6 87 c2 26 e2 75 8d d1 a9 63 0c 43 ed a3 1e 3f 43 9d fb d3 10 aa ec 1c b5 a5 63 be eb 15 76 ce fe ff ff ff ff ff ff ff d5 c9 22 72 73 77 ee 7f 76 af fc 53 a4 4a 13 91 aa 88 89 09 46 31 89 d0 80 bb c5 24 a6 3c 17 6b 5a 31 89 9d 6e af 2f cd 5d 36 35 10 ba 0f 9b d1 b8 57 4a 19 b8 34 93 d8 b9 1b ca 54 95 6e f4 46 ee 15 47 44 43 ce cc b4 15 ba 03 f7 39 48 ee 0e c9 c0 b9 5a e8 c5 6c 29 ab Data Ascii: wOF2QQ"xd`<sD46$d Z[x2$jS+k&ucC?Ccv"rswvSJF1$<kZ1n/]65WJ4TnFGDC9HZl)
2023-08-10 21:18:56 UTC	1101	IN	Data Raw: a4 32 82 30 62 da a4 60 a5 25 0f 37 c9 e1 97 fa 12 ba c7 56 25 9e 0d e7 1c 25 04 cf 92 ee a5 72 7f 16 01 57 77 67 65 c8 85 9e 70 19 7e 10 e7 00 fd 70 80 2b 00 92 05 81 a0 2e 46 f8 e9 6d 3c 22 e7 2c 14 f8 b1 22 e7 00 9c c9 6a 3f 13 b5 18 08 77 7b 81 4d 38 1f 91 e5 1c 35 90 e9 f5 b9 de 1a 83 f4 ea 78 fd 2b 4e 02 48 23 64 73 9d 01 7b 28 80 e1 f8 f8 e2 5b 88 61 fd 5d 84 f6 2e c7 7e d8 fc bb 24 f6 37 50 3b 1f c3 e2 a9 c0 bb 90 59 fa c2 2d 77 53 97 d2 70 73 bb 2c 11 b0 13 e9 cc bc 88 f1 65 20 8b c8 4b b8 87 50 57 45 7d a0 31 4e 0a 7f 70 7e 38 b3 24 d9 e9 f3 c2 63 5a 7a ba dd f3 2f 7f 35 c5 42 d6 43 93 d1 44 9c 91 ac 1f f4 ac 71 6f d9 09 15 56 34 9c 4c 52 ab 87 21 95 e7 a7 01 5b bc 6d e1 d1 5c 90 15 74 7c 46 bc 01 4a 3a 67 a4 8b c6 b9 54 8a e8 29 7d 8e cb d3 68 Data Ascii: 20b`%7V%%rWwgep~p+.Fm<","j?w{M85x+NH#ds{([a].~$7P;Y-wSps,e KPWE}1Np~8$cZz/5BCDqoV4LR![m\t\|FJ:gT)}h
2023-08-10 21:18:56 UTC	1117	IN	Data Raw: 8c bb da 95 05 f7 41 6a 21 e1 11 32 02 0c af ac 13 ea b7 d6 77 df 29 84 99 19 58 83 02 fe 2b a8 55 30 7e 4d 53 75 84 9f 6c d8 2b 2b ab 57 b1 7d f0 48 52 9d 02 00 be af c7 22 32 e7 e3 f0 0a 55 0e aa b2 ac 86 66 b5 d0 2c a4 2f ca 49 0c 66 3a be 04 de 0f 2f 58 66 8e d5 cd bb 05 7c 38 0b a4 5f e1 17 34 98 49 ad eb aa 42 fb 12 d0 af b0 10 78 2d c0 fd b0 30 e4 bd 2d 31 af ea e6 41 7e 38 8e 8e 44 72 58 6b 67 bb fd e9 3c 3d be b9 8f 63 57 4d 43 24 48 21 d6 02 ba 4f 61 53 bd 6c b2 3c c6 4f 05 f6 cd 42 f2 17 93 76 55 41 fd 9a 6d c4 2e 52 2f 1f 8a 92 5c d2 39 ed ac ed 26 12 e6 87 14 15 31 aa e6 96 c5 01 90 96 4f b8 a2 19 e2 4f 5d 91 9a 17 08 e9 15 ff a4 e2 fa c4 b6 c9 7c 56 9c 50 d5 d5 ce 5d 18 8c df 15 c6 a1 40 f9 6d 75 6b 1d 8b ea af 45 fb 79 10 f2 a1 f7 34 bc ef Data Ascii: Aj!2w)X+U0~MSul++W}HR"2Uf,/If:/Xf\|8_4IBx-0-1A~8DrXkg<=cWMC$H!OaSl<OBvUAm.R/\9&1OO]\|VP]@mukEy4
2023-08-10 21:18:56 UTC	1135	IN	Data Raw: 7e fd 01 58 9f c9 91 f1 b9 4f a3 65 69 ae 26 8f d3 5d 16 0c 4a 88 65 0a 5b 90 af f0 f8 5c 49 d6 8e 7f c6 c1 ff b4 d5 bb 89 d2 bf d3 ef 9e 86 8a f2 ef af a8 b0 f9 2a 3c 85 50 0f 61 a5 7c 27 12 e6 cf c0 a1 9a af d0 80 f9 26 06 47 a3 57 4b d9 de e3 da f2 14 4b 92 a4 ff 04 83 94 a7 bc ba f0 f6 aa 9b ea 2b 35 86 5b b3 6f d7 73 99 e6 4a dd 78 ce bd 8d 29 da f4 95 92 d3 ca 78 b3 1d 1e e2 93 18 de 6b 5e aa 48 e4 a6 36 10 bc 24 c1 45 7a d5 17 85 8b 5a 44 f4 de 99 60 ea f0 50 92 3e 43 0a fa f3 9f 30 6f 0a ae e4 84 ff 2f 5f 19 68 fd e1 8f 65 57 e0 15 49 69 74 f2 2a d4 60 0e fd cb 52 4a 1c 9f 72 a7 9b 1a cd 25 84 09 13 e1 4f f2 e1 25 f9 69 ad 7e c6 d6 1b 57 18 8c bb 67 06 18 8c fa e4 ee f8 5d 39 b8 74 8f 86 9b 91 c2 5b c4 cd ca e0 a5 2c e2 c4 4f b5 d1 8e be 8a ac 7e Data Ascii: ~XOei&]Je[\I<Pa\|'&GWKK+5[osJx)xk^H6$EzZD`P>C0o/_heWIit`RJr%O%i~Wg]9t[,O~
2023-08-10 21:18:56 UTC	1151	IN	Data Raw: 19 ee 49 fb f8 a8 0d 90 3a 06 1a 68 bc 41 48 9a e8 8d 49 dd 8e a4 85 11 0f 08 79 b8 a1 ef f1 9b fe 62 3e 49 b2 03 21 3a a5 22 8b 4d 63 c8 c2 0b 85 fd ed 40 4c 85 f7 bb 13 94 3b cd 93 fd 44 74 62 3f b7 7a 91 4a a7 51 f8 98 57 fe e3 d6 1e 23 33 3b 43 a7 02 4c 8a 77 a7 a6 43 d0 73 49 14 a4 3a 3a 1c 93 8a c6 2e 55 a1 50 43 82 80 bd 16 7b d0 6a 4a ce fd a7 03 f2 68 14 e0 f9 fc 38 3a 4f d5 99 b6 0a c5 12 d8 04 49 de f7 70 88 57 3b d4 21 a3 bf 0e c2 dd 10 cb 5c f4 71 d2 fe e6 4b 0e 68 c3 20 66 7f 3b f2 d9 b8 10 49 cc 14 06 2d 0e 1b a9 a3 66 d9 49 09 69 56 8c 1d a6 11 24 68 ce 6f 57 19 68 5b f5 8d 34 38 2e 5a a6 2f b6 f4 68 2a 4c 7b 1c 08 c9 62 4d 46 5c 74 5a 21 23 7d e8 19 2d 3e fa d6 ef 08 39 53 f3 8a 52 19 af a4 d2 ae 8e 5a ff dd 74 72 17 77 d5 bd f2 e8 99 43 Data Ascii: I:hAHIyb>I!:"Mc@L;Dtb?zJQW#3;CLwCsI::.UPC{jJh8:OIpW;!\qKh f;I-fIiV$hoWh[48.Z/h*L{bMF\tZ!#}->9SRZtrwC
2023-08-10 21:18:56 UTC	1167	IN	Data Raw: f7 53 b8 ba 49 ee c2 1d 1c 72 91 38 88 a2 78 77 de b3 1a 3b 9b ff 58 af 4a b5 82 f2 80 42 4e 81 6c 5b aa de 6a b5 f5 a3 e1 6e 73 4d 82 c0 8a 1e 29 5e 4b 52 62 35 58 58 ba eb dc f3 83 8e fb 3b ca d4 33 12 54 92 e9 4f 05 3b e8 56 b1 1a 85 74 f8 1c 8f f0 f0 a9 eb 4b 82 57 f4 f2 80 29 a4 80 0e c9 31 50 01 20 43 00 5b 05 9f be 4d f9 80 da fd 5a a7 7c 37 2d 63 81 8a 42 32 1a 99 aa a6 25 8a e6 a6 72 b1 ba d1 24 77 a0 e8 29 43 14 be 55 8d d3 dd 53 a5 24 55 ff 81 47 c3 b7 8f 46 6c 0f 72 42 c7 8d 99 5c 20 d4 8d b9 bc 27 f9 60 e8 c9 9d c6 8d 14 a0 ed 47 8e c2 6e 74 91 99 be 51 99 90 32 78 24 04 1d 10 f1 44 87 4f b4 e8 5c af fb cc 99 2e 70 54 66 ce 2f bf 9e 52 c8 8d 11 e4 6d b5 c6 03 c9 a4 0d 74 9f 82 6c 7b 00 5e e3 bd fc 81 a9 f1 de 22 db 8d 05 a2 de ea 08 99 6c 72 Data Ascii: SIr8xw;XJBNl[jnsM)^KRb5XX;3TO;VtKW)1P C[MZ\|7-cB2%r$w)CUS$UGFlrB\ '`GntQ2x$DO\.pTf/Rmtl{^"lr

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
100	192.168.2.3	49904	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4397	OUT	GET /paper/ep/stateless/calendars/calendar-events?padId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:07 UTC	4426	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:07 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:07 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/ep/stateless/calendars/calendar-events X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: b3c39d62-d7c0-4d41-b4b9-f2846a0e12f1 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 7469d31ac3c1445585c20278242f9a95 Connection: close
2023-08-10 21:19:07 UTC	4428	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"success":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
101	192.168.2.3	49905	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4399	OUT	GET /static/webpack/production/d7c49816088408423a50.cjIp7UHClzqwu3lMbpCuK9_cMgk8uoSvsL8FX5pOS4Y.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:07 UTC	4408	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 32961 Connection: close Date: Thu, 10 Aug 2023 21:19:08 GMT Last-Modified: Wed, 12 Jul 2023 17:21:14 GMT ETag: "b6010b0b5317c70dcd524245fafd3077" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8f2341b304c32ec6530aa5361edb2fe4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 7-JMoELeAzgnU_z9xbrFrK7uTOyCXaWBC4tK46vIKkWUerZYWnlJAQ==
2023-08-10 21:19:07 UTC	4408	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 93 1b 57 76 20 f8 1d bf 02 cc 90 ca 48 22 f1 aa 22 8b 52 82 c9 8c 12 0b 45 52 62 b1 4a 55 45 51 22 0a 62 24 81 04 90 14 90 09 65 26 aa 08 56 96 c3 b3 11 3b d3 eb 6e 8f 1d 33 3b 61 b7 a3 67 bc 13 e1 d9 71 cf 86 27 c6 e1 89 8d f1 da e3 0f d6 3f d9 b5 64 fb 93 ff c2 9e 73 ee bd 99 37 1f 40 15 9f 52 77 4b 8f c2 7d 3f cf 3d af 7b ce cd ca a9 e3 0e bc d3 fa 93 27 f7 f7 b6 b6 b7 3e ba df a1 40 67 fb c9 ed bb 0f 1f 7c 72 f8 e4 89 71 61 89 28 ea f6 d4 fa 6c 1e 8c 2b dd ae d2 1f fb 9e eb 29 3d ed 6c 7d b3 b5 a9 0f e7 6e 3f 74 3c b7 62 6b a1 e6 ab 67 27 96 5f 76 db a5 c6 d5 2b a5 32 fc 73 34 b6 cb bb f7 8e ca f7 9d be ed 06 76 89 12 6f 7b b3 85 ef 8c c6 61 b9 d2 57 cb eb cd d6 35 ad fc c8 72 ad c0 09 cb 47 f0 fb 95 13 fa 73 77 Data Ascii: kWv H""RERbJUEQ"b$e&V;n3;agq'?ds7@RwK}?={'>@g\|rqa(l+)=l}n?t<bkg'_v+2s4vo{aW5rGsw
2023-08-10 21:19:07 UTC	4428	IN	Data Raw: 0a 19 55 eb 9b 1b 59 e2 21 d1 8e cd 1f 0e ed 30 75 6b 8a 68 d0 64 9f 47 39 f4 5c 17 cf 18 ea 16 e0 67 db b1 f1 73 69 10 07 b6 02 cf 4d b4 0d 05 40 be c3 b4 1d df 76 f0 f7 d0 9a 52 fc d0 83 6a 50 05 0a 43 31 c8 86 1c 42 b1 9a 89 7f a9 03 c0 c0 3c 4c b8 9b fc 3d a0 4c 5d c8 39 a6 fe d4 09 92 88 35 8d 5e cc a7 28 ce 1c 1f d7 e0 ff ff f7 77 fe 2d fc 0d 18 e2 4e b7 a0 52 27 95 8f 2d 22 54 96 1f 51 5a b4 63 3f 45 d2 90 24 ec 7e f3 a7 48 92 5e 88 a8 65 fb 2f a2 5d ff 05 44 cd 68 6b 86 79 ce 24 ce 74 a2 8f e7 d8 a0 c3 53 3e 9e 4f a4 d8 d6 1c 49 c9 3c 08 79 fc d0 9e 41 3c 8c 42 88 46 a1 8d ee 46 3c 67 ef 2b a4 89 5e 92 f0 c0 3b 41 2a 24 15 d9 b6 5f a4 53 70 73 d8 d2 c5 53 bd 76 5e 31 af 74 bf 84 34 20 da 03 55 ad 60 6e f7 c4 ed e1 e8 31 7c 1b 25 1d 1f d7 a2 6e aa Data Ascii: UY!0ukhdG9\gsiM@vRjPC1B<L=L]95^(w-NR'-"TQZc?E$~H^e/]Dhky$tS>OI<yA<BFF<g+^;A*$_SpsSv^1t4 U`n1\|%n
2023-08-10 21:19:07 UTC	4444	IN	Data Raw: 3b a3 6a b9 b2 8c 6c ff a3 7c 3c ba 05 d1 1f e5 3f 8a 44 2f 94 cb 65 cc 3d 13 cd bd b6 d6 ae 63 f4 7f fd 52 8c 3f c0 84 72 85 fe 17 e6 e8 b1 48 ff 4b f4 bf 4c ff ab 94 50 a1 97 0a 7f 59 c3 ff 6a 85 5e 16 ee d3 7f 8b fe 29 a1 c6 12 ea 94 50 a7 84 7a fb 10 aa 1f 16 73 e1 89 46 71 a3 c6 2b 98 a5 fe a9 ee ac c2 e8 36 bd 42 b9 38 b7 58 af d6 96 02 03 a0 33 29 b0 af a6 29 ec 51 3a 76 ec b3 55 5e a0 d8 10 c8 e7 da 4c 21 9f 33 58 ce 5a 33 47 57 5e 36 f9 54 ff 8f 91 0f 52 cf 13 73 3a f5 a4 10 4f b9 5c 25 72 f8 f2 f3 cf f3 f1 84 2a 26 fc f7 e7 3f 4b 24 dc 63 09 3f 89 27 34 89 84 fe e7 8f 51 1a ba f3 8d b9 d9 42 51 99 5b c6 2c 0b ab 73 2b cd b9 03 0c d6 5b 4f f5 b9 9b c9 5f b1 81 17 6e ff 67 0e fc dd 57 19 78 ce 50 52 4f 7c dc e4 ff fc d3 df e4 41 c8 e5 bf fa ed e7 Data Ascii: ;jl\|<?D/e=cR?rHKLPYj^)PzsFq+6B8X3))Q:vU^L!3XZ3GW^6TRs:O\%r*&?K$c?'4QBQ[,s+[O_ngWxPRO\|A

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
102	192.168.2.3	49919	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4401	OUT	GET /static/img/ace/emoji/270b-1f3fc.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:07 UTC	4401	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3361 Connection: close Date: Thu, 10 Aug 2023 21:19:05 GMT Last-Modified: Tue, 19 Jul 2022 19:30:31 GMT ETag: "cd5a34185731b928deaa73d238282ad6" Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 abd012b9637ad93b7c9aa82d2cfb262c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: pEvL6sSI3XAjcG3F7eQj0QItrqsvCkmPHhCaJIXYE_axy0aaycEpKQ== Age: 2
2023-08-10 21:19:07 UTC	4402	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c ae 49 44 41 54 78 9c cd 5b 69 8c 1c 47 15 fe 5e 55 77 cf ce cc da bb 6b af 63 27 c6 31 ce 61 22 20 89 03 88 4b 09 4a 00 23 04 84 60 47 09 89 04 48 d8 0e 42 08 24 40 06 db 41 42 0b 12 ac 03 82 1f 89 b8 4c 62 02 c1 11 04 81 ed 3f 20 01 81 1f 08 71 0b 45 08 44 22 62 af 9d b5 77 7d ec e1 f5 5c 7d d4 7b fc e8 ee 39 bc 5d b3 bb b3 33 76 9e dc 9e 99 ae ae e3 fb ea 5d 55 d5 4b e8 a1 1c 1d dd 79 9b 28 19 21 e8 37 8b f0 10 11 bd 20 2c 4f 05 7e ee 5b f7 8f 7c bb d4 cb be 17 2b d4 ab 86 7f Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[iG^Uwkc'1a" KJ#`GHB$@ABLb? qED"bw}\}{9]3v]UKy(!7 ,O~[\|+

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
103	192.168.2.3	49906	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4405	OUT	GET /paper/comet/channel?v=2&r=278436657903872528145584&id=257359365407097851736353&channel=shortpolling&seq=0&create=yes&new=yes&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEc Notes-Pad-Id: zjo2KktWLcVGFokm1yeoE Notes-App-Time: 1691634844000 Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 Notes-Socket-Id: 257359365407097851736353 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:07 UTC	4454	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:07 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 3c436709-08a6-4d27-bcd4-eabf745f3286 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 8 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: f40e47bec7734326a359d6e3264425e1 Connection: close
2023-08-10 21:19:07 UTC	4454	IN	Data Raw: 36 3a 6f 6f 62 3a 6f 6b Data Ascii: 6:oob:ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
104	192.168.2.3	49903	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4424	OUT	GET /paper/log/latency?metric=initial-page-load-total-latency2&values=%7B%22executed%22%3A10051%2C%22rendered%22%3A9365%2C%22responseStart%22%3A951%7D&tags=%7B%22pageName%22%3A%22editor%22%7D&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:07 UTC	4454	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:07 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:07 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/log/latency X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 553f17ac-85df-4c3f-bd8d-0f4a3599830e X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 72a5d889d71b48c8a7d9775ca1ab5ba1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
105	192.168.2.3	49907	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4425	OUT	GET /paper/nginx/ping?tabId=1CKSXqh3ruYB6f22RkOu&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] cache-control: no-cache, no-store, max-age=0 x-requested-with: XMLHttpRequest sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:08 UTC	4475	IN	HTTP/1.1 204 No Content Content-Security-Policy: sandbox; frame-ancestors 'self'; Referrer-Policy: origin Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Paper-Request-Id: ada84286-a2b2-4578-96c8-f5408470bbb8 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Date: Thu, 10 Aug 2023 21:19:07 GMT Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote Server: envoy X-Dropbox-Request-Id: 58a805b9435f447cabee58bcb79b0eb4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
106	192.168.2.3	49921	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4445	OUT	GET /static/img/ace/emoji/270b-1f3fe.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:07 UTC	4446	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3319 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:33 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:19:07 GMT Cache-Control: max-age=43200 ETag: "da7f263d7e44eb65e76522941ff95b79" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ca6974974a9175b71fb6a84145111ed2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: BmGp0F7ieCleCMD_Mts3w61fa1X6gN00LZSEmjPfoN0mfv1Jwq9KhA== Age: 1
2023-08-10 21:19:07 UTC	4446	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 84 49 44 41 54 78 9c d5 5b 5d 6c 5c 47 15 fe ce cc bd 7b d7 eb b5 63 3b 4e 93 26 0d 69 4a 49 9c 04 28 6d 51 a1 8d 8b 02 a2 88 82 e0 01 37 40 25 40 02 54 04 12 0f 08 21 51 09 a9 2a 4f 7d 40 f0 40 85 90 ca 03 a0 92 d2 36 0d a5 42 08 09 54 29 52 dd 52 7e 2a a8 aa b4 4e 68 9a bf 36 a6 8e ff 62 af bd 7b 7f e6 1c 1e e6 de f5 ae 7d ef 5d af bd 4e ca 89 ae d7 d9 b9 73 66 ce 37 e7 6f ce 8c 09 1b 48 23 b7 ef bf 99 14 3f 08 c2 87 49 a8 1f c0 29 21 3c 4a 8e fa d9 d1 e3 27 2a 1b 39 f6 6a 89 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[]l\G{c;N&iJI(mQ7@%@T!QO}@@6BT)RR~Nh6b{}]Nsf7oH#?I)!<J'*9j

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
107	192.168.2.3	49914	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4445	OUT	GET /paper/ep/stateless/calendars/calendar-events?padId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:07 UTC	4461	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:07 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:07 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/ep/stateless/calendars/calendar-events X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 4213d133-aaab-4a0b-8970-4ecb4881a755 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: b22c86958f2c4f46aadf668dd5fd7ae4 Connection: close
2023-08-10 21:19:07 UTC	4462	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"success":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
108	192.168.2.3	49917	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4449	OUT	GET /static/img/ace/emoji/270b-1f3ff.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:07 UTC	4450	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3352 Connection: close Date: Thu, 10 Aug 2023 21:19:07 GMT Last-Modified: Tue, 19 Jul 2022 19:30:34 GMT ETag: "b735b5f2fd640f4e93bbfa17772e4790" Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d75d7156b5e1833582c3070298720664.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: mHfMv8cN8mWZrGWrbQXrr0m8N_m6l-3PLAqvwTHZx9UlS8laivUSqg== Age: 1
2023-08-10 21:19:07 UTC	4450	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c a5 49 44 41 54 78 9c cd 5b 59 6c 24 c7 79 fe fe aa ee 9e 7b 78 cc 88 a4 78 ec 5a 2b ee 2a d6 ea b0 2d 41 8e 93 75 20 0b 96 60 d8 b0 1f 2c 18 91 80 38 40 10 08 c8 43 1e 94 20 40 f4 24 c8 4f 7e 30 92 87 18 81 01 fb 21 87 a0 20 71 60 04 7a 48 0c d8 30 10 c0 36 7c 09 b6 25 81 3a b8 24 97 bb cb 99 5d 72 97 c7 70 ce be ea f7 43 4f cf f4 70 ba 86 33 bc d6 1f 40 ce b0 7b ba aa fe af be ff a8 aa 21 e1 14 b1 38 7b df c7 41 ea 35 22 fa 43 40 4d 10 c4 b2 02 bf 9e b0 c5 3f 2f dd b9 53 3b cd Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[Yl$y{xxZ+*-Au `,8@C @$O~0! q`zH06\|%:$]rpCOp3@{!8{A5"C@M?/S;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
109	192.168.2.3	49923	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4456	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 633 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:07 UTC	4457	OUT	Data Raw: 1f 8b 08 00 d7 d2 d5 64 00 ff b5 55 4b 4f dc 3c 14 fd 2b 23 af 93 2a 89 f3 72 b6 94 3e 54 d4 22 f5 c1 02 8d 46 fe 9c db 8c 21 b1 23 db 41 9d 22 fe 3b d7 f1 40 51 0b 5f 19 94 ae 46 b9 af 73 7c 7c 7c e7 fc 9a 6c dc 6e 04 d2 10 b8 02 e5 48 b4 ff 6d c8 39 a8 6e bd b2 5a 5c 82 8b 85 56 0a 84 8b b9 73 30 8c be 6c 34 7a 04 e3 24 58 d2 5c 13 35 0d 5f 2d 18 fb 49 9d f2 96 34 59 e4 23 47 a1 09 da 87 a9 24 22 d2 1e f5 7a 6a 5f 6b 41 1a 67 26 88 88 81 3d 80 54 dd e7 19 f1 3d 96 92 b2 48 4a c6 28 cd 58 55 14 55 46 d3 a2 aa 8b b2 a4 08 1f 78 7d 09 d4 8f dd 16 cc c8 db 33 f8 2f 74 63 81 e0 0e 3a 6d 76 fe 64 aa 0b 84 db 49 dc b5 9c 72 64 8f 51 c5 af 64 c7 9d d4 ca 6e ac 54 02 36 16 ac c5 cf cd c8 3b d8 f4 7a cf d9 c9 01 db d2 92 a5 15 cd ab 9c be 2a 58 85 33 79 3b 13 fd Data Ascii: dUKO<+#r>T"F!#A";@Q_Fs\|\|\|lnHm9nZ\Vs0l4z$X\5_-I4Y#G$"zj_kAg&=T=HJ(XUUFx}3/tc:mvdIrdQdnT6;zX3y;
2023-08-10 21:19:07 UTC	4466	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:07 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:07 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: f6bbd3d2-3215-4234-97b5-67e4afb60d79 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 8926bb82664b46b1ad4f9409bbb2df06 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.3	49751	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	722	OUT	GET /static/fonts/AtlasGrotesk-Semi-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:55 UTC	722	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 80256 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:35:04 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:18:55 GMT Cache-Control: max-age=43200 ETag: "9be183d893fc4e9776e2ac5c30d05ca5" Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 9f25aa45df27e50f380232059fde4c1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: dRITgiunH2FAEn8rqSxszUGllXTs-yuFEFr1cWG_NiwIROnuFxD1GA== Age: 39121
2023-08-10 21:18:55 UTC	723	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 39 80 00 10 00 00 00 04 ba f4 00 01 39 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 9f 26 1c cd 6a 06 60 00 8b 76 08 48 09 82 73 11 08 0a 87 b9 44 86 d9 02 0b 94 2c 00 01 36 02 24 03 a8 54 04 20 05 8e 49 07 ea 42 0c 85 66 5b 69 7f b4 03 0a 45 ee 4f 3f 6f 61 9d ad ac 86 80 a0 a7 80 49 72 56 b0 31 f6 ff f8 3b a8 8c 61 62 07 ca 3c 7a 6d 1d 9e 7a 5f 1a 0b 6c f8 15 74 db 76 94 34 22 3d b7 25 da d6 21 5e 25 d9 ff ff ff ff ff ff ff ff ff ce 64 11 6b ba 3b 07 b3 f7 80 20 28 28 58 d1 a8 01 f3 34 8d f6 13 12 98 37 1d 94 49 4c c0 a4 40 86 4b 3a af 20 2b 61 8d d6 8d a1 a6 6e bd f8 4d b2 18 a3 78 15 c2 56 3a 95 62 08 a9 d0 7d 08 e2 f5 da a3 5d 01 59 c8 9e ca 86 71 23 87 1f 72 8c 71 3a 96 aa 0c 62 76 5a Data Ascii: wOF299&j`vHsD,6$T IBf[iEO?oaIrV1;ab<zmz_ltv4"=%!^%dk; ((X47IL@K: +anMxV:b}]Yq#rq:bvZ
2023-08-10 21:18:55 UTC	739	IN	Data Raw: af 16 4a e8 b5 a8 e7 db e4 3e cf c0 cc 9c 04 99 4d 82 8d e4 14 4b 42 cb 26 9e e3 cd d7 c8 91 a8 59 ea de 12 26 0a 52 64 22 71 64 84 10 93 f3 14 09 17 4e 72 ab 87 46 d9 ba f3 e1 d7 c4 35 0e 01 31 72 51 ed 01 d7 02 2f b5 87 1c bc 6b 56 03 6a 75 f0 6e 59 01 0c f5 fd 2b 9c ef 36 c0 27 d5 16 bf 67 35 d9 42 c0 0b ae 4b 76 b0 97 1c e0 0e 5d c0 49 08 8a f0 02 41 6e 96 54 c2 0d 1c 42 dd 1b 01 7d e0 ed 59 01 ff d9 34 58 0a c8 53 7d 69 c4 58 47 9f da 57 6c 63 c2 3f 03 52 47 09 52 1e 2c ff b9 dd e3 fd ff cb c6 92 0d 70 19 55 97 b3 79 b0 cb 87 c7 fe d4 39 ce 9d 27 9f 74 3c a3 d6 ba 43 45 c7 07 b5 f2 b2 28 31 8f db cc bb 18 07 23 55 c6 84 cb 43 44 0a 89 68 69 46 b1 16 7c 5d fe 2b 9e 2c df 88 47 54 b0 55 01 5c 33 c2 16 15 fe dd 4a b0 93 2a 3e 6c 06 2b 39 02 57 71 e8 3d Data Ascii: J>MKB&Y&Rd"qdNrF51rQ/kVjunY+6'g5BKv]IAnTB}Y4XS}iXGWlc?RGR,pUy9't<CE(1#UCDhiF\|]+,GTU\3J*>l+9Wq=
2023-08-10 21:18:55 UTC	755	IN	Data Raw: ff 90 45 37 5b d8 ee b1 96 36 47 5b d0 5c ac 0f a7 8a 5b 7d 8d 33 58 bf 09 dd 01 31 7f be 66 50 ee e9 02 17 8a c4 3f 9b 6a 50 9e e8 20 ad d0 3a 4c 87 c8 12 1b 20 cc ae 30 e9 23 52 84 aa de 56 64 3a 5f 21 9a f5 6c 2a 32 fc d6 78 b5 d0 93 f1 b8 be c1 c8 0e 38 41 1f 3a c5 d2 39 dd 40 64 72 4f 84 4e 3e 09 cb f1 ef 7e c5 51 4e b3 12 6d 84 50 44 23 1e c9 48 41 a4 3b 4d 88 b2 eb 96 21 74 06 44 9a ac ca 52 9d 65 37 ca 99 d9 eb db 2a e3 3d 04 ba 46 85 ac c5 a4 0b 3a c5 b1 50 76 4e de e1 f2 bd 60 37 87 89 45 f4 28 21 8b 72 f6 32 e5 17 89 0f f1 2b 58 dd 1c 76 97 ad d8 ec 60 6e 41 4f ca af fa 6f 7f 50 96 fd 67 a3 7e 77 00 ca f5 6b fe 99 07 65 d9 1f 3d 6d 3d aa d3 c0 09 8f ff 7f 9d fe 99 3a a2 9f b9 97 b0 3e 0e d0 f8 22 5e c1 1d fe a7 ec ed e3 7f 18 91 8f 72 d4 b0 81 Data Ascii: E7[6G[\[}3X1fP?jP :L 0#RVd:_!l2x8A:9@drON>~QNmPD#HA;M!tDRe7=F:PvN`7E(!r2+Xv`nAOoPg~wke=m=:>"^r
2023-08-10 21:18:55 UTC	772	IN	Data Raw: 3e a1 b4 b8 53 4c 2a 40 14 d1 92 ea 18 c8 f6 4f 16 df 39 68 ac 05 11 dc e0 44 9c 4f ae f6 53 5b a7 07 a6 57 19 6c 3f 3f 32 19 b0 a8 45 68 5e bc 9e b2 dc f1 a8 29 7f b8 63 24 52 9c 58 97 a7 93 d4 94 1c 24 4a ed 25 c8 8b d2 29 ae d8 b6 fb cf a0 b5 f7 0a d5 3a ba 9f 77 78 55 be 7a 24 e3 e6 4c d4 68 93 fe c9 c4 44 62 56 ed 1e 36 8e ff ba 95 ff fe c0 bc e7 d0 b1 6a b1 05 29 fe f8 d9 48 4d 86 c2 d1 8a a4 ae b8 9f 27 c5 29 ae a8 af 57 cd 68 cd e8 0b d5 4a 8b b6 74 1d ba 89 6d 3f 4a 1e fe 4f fe a2 5e 0a 3e ca 1e 3a 38 fb 19 f6 9b b0 c0 dc 4c af c5 3b c7 bb 73 f4 8d 5d 1d 19 91 b6 f0 82 ac dd 9e fb ac 3a 5e a5 f5 ec c1 43 2d 9d e2 5c 5b 0e e1 81 be be 5d fa d2 44 db 91 08 0f 81 67 13 f2 26 f2 52 27 93 f0 c1 75 14 2c d5 17 1a 5a b6 69 f2 d4 a6 74 5f 3a 69 99 fc 32 Data Ascii: >SL*@O9hDOS[Wl??2Eh^)c$RX$J%):wxUz$LhDbV6j)HM')WhJtm?JO^>:8L;s]:^C-\[]Dg&R'u,Zit_:i2
2023-08-10 21:18:55 UTC	788	IN	Data Raw: bf b9 ce f5 df 65 bf 55 a7 1f 10 fe a0 d2 1d dc 1f 6f f8 d7 64 07 f3 7a 80 57 bc 9e 4c 11 77 be 37 9c ff 7c 10 b1 7f 6d 7f 79 e3 bb fd b7 fc 7e 02 b0 37 a0 ba 6c df df 3c 01 48 79 f6 2c cc 96 0f 3e 78 4f 7d 61 c3 35 50 02 48 0e 9c 7f 2c c3 b0 18 cc fb a8 7c 71 65 63 72 76 a3 d3 a3 a9 de 1a 94 4f 6b ff 32 02 4c 17 71 54 7f 4f c8 c0 22 30 58 fb f8 55 c8 94 ef 09 fb 14 1a 61 1c 05 10 69 f8 cc 48 8a 60 81 60 6d 87 e3 17 7d 19 8b 98 82 e1 61 91 21 c6 96 8c 62 5f 31 09 de 22 31 b7 d9 25 ed da 57 0c 36 34 4a c0 f8 ab 23 28 0f 95 71 69 eb e9 ea f6 a9 6a 7b 5c ec 8c 1e c7 70 1c 93 35 3e bf 4e e8 32 9f 9b 9c 0c 9a dc 04 55 d9 18 ae 03 8b 33 a9 13 97 3d 91 ce b7 9a 29 41 75 16 c3 e5 79 b2 27 17 ce 13 11 89 ac 2b 9f 33 02 78 79 4c 57 b0 9a 6a 85 9c 55 2a 99 51 d4 3c Data Ascii: eUodzWLw7\|my~7l<Hy,>xO}a5PH,\|qecrvOk2LqTO"0XUaiH``m}a!b_1"1%W64J#(qij{\p5>N2U3=)Auy'+3xyLWjU*Q<

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
110	192.168.2.3	49924	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4459	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 332 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:07 UTC	4461	OUT	Data Raw: 1f 8b 08 00 d8 d2 d5 64 00 ff bd 91 4f 6b c2 40 10 c5 bf 8a cc 39 88 89 a1 6a ae b1 ff a8 a5 1e 6a 3d 48 08 eb ee 10 b7 26 bb 61 67 23 58 f1 bb 3b 8b 55 7a b4 50 7a 0a 6f e6 cd e4 b7 6f 56 07 28 fd be 45 c8 00 77 68 3c 44 df df 0c 56 68 aa a2 b7 6a 45 85 65 6d 85 2a 7a 68 d4 9c d5 8c 45 2e ea 7a 2d e4 96 78 a0 75 b6 45 e7 35 12 64 07 30 5d b3 20 74 f4 66 e6 42 41 96 44 a1 92 5b 63 50 7a 54 3f 5b 83 08 34 e5 b5 ed d4 d4 4a c8 bc eb 30 02 29 3c 56 d6 ed 03 90 a9 ce db 55 27 fd fb 19 72 2e f8 57 5c 35 62 a7 2b e1 b5 35 54 92 36 12 4b 42 22 96 e5 95 17 b2 38 02 af 1b 1e 8b ef 26 f1 68 98 8e d2 61 7f 3c 60 a2 56 a8 67 ee c3 d7 a7 4d 5e b6 7e 39 93 1f 8f 0f 76 db c4 7b b4 f7 97 08 82 63 c8 8c 24 1d a2 59 6a e5 37 bc 29 19 5f 4b 4f a8 ab 0d 27 15 0f 92 f4 78 8c Data Ascii: dOk@9jj=H&ag#X;UzPzooV(Ewh<DVhjEem*zhE.z-xuE5d0] tfBAD[cPzT?[4J0)<VU'r.W\5b+5T6KB"8&ha<`VgM^~9v{c$Yj7)_KO'x
2023-08-10 21:19:07 UTC	4468	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:07 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:07 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: cbc69b4a-3e82-4dfe-adc6-718c774d3380 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 905e8ba46d804f63a6858ff21d514298 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
111	192.168.2.3	49927	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4462	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 888 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:07 UTC	4464	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 65 6b 36 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 72 65 63 65 69 76 65 64 5f 6d 65 73 73 61 67 65 5f 63 6c 69 65 6e 74 5f 72 65 61 64 79 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 39 6f 74 4e 47 38 5f 64 53 62 44 72 5f 57 4e 4b 6a 61 64 69 75 50 35 39 41 37 77 74 45 52 47 79 58 6e 43 56 30 43 34 4d 75 43 61 73 53 55 4a 38 61 36 55 37 34 72 51 44 6e 49 57 56 4a 59 52 4f 6d 6f 48 69 5f 68 33 64 44 44 6f 4f 62 5f 4e 67 73 75 77 67 61 33 50 2d 6d 63 38 76 6d 4b 39 4b 4a 6d 53 68 4e 75 37 76 67 30 6e 6b 4a 33 79 39 48 34 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"DBzT6sb01xsOk7nt0qek6","event_name":{".tag":"received_message_client_ready"},"auth_token":"cd.AD9otNG8_dSbDr_WNKjadiuP59A7wtERGyXnCV0C4MuCasSUJ8a6U74rQDnIWVJYROmoHi_h3dDDoOb_Ngsuwga3P-mc8vmK9KJmShNu7vg0nkJ3y9H4
2023-08-10 21:19:07 UTC	4468	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 39 X-Webkit-Csp: sandbox Content-Length: 21 Date: Thu, 10 Aug 2023 21:19:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 04bf2e6066f54eeb941afc28a1c168d2 Connection: close
2023-08-10 21:19:07 UTC	4468	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
112	192.168.2.3	49928	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4465	OUT	GET /paper/comet/channel?v=2&r=278436657903872528145584&id=257359365407097851736353&channel=shortpolling&seq=0&create=yes&new=yes&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:07 UTC	4465	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:07 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 85a5728d-bd42-4a2a-b5d7-4d42c0ee9212 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 8 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: d5db1297fb184eb883cb85491fc3fc11 Connection: close
2023-08-10 21:19:07 UTC	4466	IN	Data Raw: 36 3a 6f 6f 62 3a 6f 6b Data Ascii: 6:oob:ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
113	192.168.2.3	49930	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4470	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 842 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:07 UTC	4472	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 65 6b 36 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 73 65 6e 74 5f 6d 65 73 73 61 67 65 5f 68 6f 73 74 5f 72 65 61 64 79 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 39 6f 74 4e 47 38 5f 64 53 62 44 72 5f 57 4e 4b 6a 61 64 69 75 50 35 39 41 37 77 74 45 52 47 79 58 6e 43 56 30 43 34 4d 75 43 61 73 53 55 4a 38 61 36 55 37 34 72 51 44 6e 49 57 56 4a 59 52 4f 6d 6f 48 69 5f 68 33 64 44 44 6f 4f 62 5f 4e 67 73 75 77 67 61 33 50 2d 6d 63 38 76 6d 4b 39 4b 4a 6d 53 68 4e 75 37 76 67 30 6e 6b 4a 33 79 39 48 34 56 65 58 4c 7a 47 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"DBzT6sb01xsOk7nt0qek6","event_name":{".tag":"sent_message_host_ready"},"auth_token":"cd.AD9otNG8_dSbDr_WNKjadiuP59A7wtERGyXnCV0C4MuCasSUJ8a6U74rQDnIWVJYROmoHi_h3dDDoOb_Ngsuwga3P-mc8vmK9KJmShNu7vg0nkJ3y9H4VeXLzG
2023-08-10 21:19:08 UTC	4476	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 24 X-Webkit-Csp: sandbox Content-Length: 21 Date: Thu, 10 Aug 2023 21:19:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 75406db66cdf432bb1b9939de00f028e Connection: close
2023-08-10 21:19:08 UTC	4476	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
114	192.168.2.3	49932	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4472	OUT	GET /paper/ep/stateless/calendars/calendar-events?padId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:08 UTC	4477	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:08 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:08 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/ep/stateless/calendars/calendar-events X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 1dadd7ce-0d4b-43b5-b78a-0b02ae86cb2a X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: e757fbb49bf545f79d6fd80ecd9745e9 Connection: close
2023-08-10 21:19:08 UTC	4479	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"success":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
115	192.168.2.3	49929	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:07 UTC	4473	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 872 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:07 UTC	4474	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 65 6b 36 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 6c 6f 61 64 5f 69 66 72 61 6d 65 5f 73 75 63 63 65 73 73 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 39 6f 74 4e 47 38 5f 64 53 62 44 72 5f 57 4e 4b 6a 61 64 69 75 50 35 39 41 37 77 74 45 52 47 79 58 6e 43 56 30 43 34 4d 75 43 61 73 53 55 4a 38 61 36 55 37 34 72 51 44 6e 49 57 56 4a 59 52 4f 6d 6f 48 69 5f 68 33 64 44 44 6f 4f 62 5f 4e 67 73 75 77 67 61 33 50 2d 6d 63 38 76 6d 4b 39 4b 4a 6d 53 68 4e 75 37 76 67 30 6e 6b 4a 33 79 39 48 34 56 65 58 4c 7a 47 6d 77 39 73 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"DBzT6sb01xsOk7nt0qek6","event_name":{".tag":"load_iframe_success"},"auth_token":"cd.AD9otNG8_dSbDr_WNKjadiuP59A7wtERGyXnCV0C4MuCasSUJ8a6U74rQDnIWVJYROmoHi_h3dDDoOb_Ngsuwga3P-mc8vmK9KJmShNu7vg0nkJ3y9H4VeXLzGmw9s
2023-08-10 21:19:08 UTC	4476	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 22 X-Webkit-Csp: sandbox Content-Length: 21 Date: Thu, 10 Aug 2023 21:19:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5c34d5523ca84f9088b3c614a507f54a Connection: close
2023-08-10 21:19:08 UTC	4477	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
116	192.168.2.3	49939	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:08 UTC	4479	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 720 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:08 UTC	4480	OUT	Data Raw: 1f 8b 08 00 d8 d2 d5 64 00 ff 75 54 5d 8f e2 36 14 fd 2b 95 9f ba 12 41 f9 20 10 78 ab 28 d3 8e 8a a6 ab 76 ba fb b0 5a 21 e3 dc 80 3b 89 9d da 0e 15 bb da ff be c7 49 08 61 76 c8 0b f8 dc e3 e3 fb 71 ec 4f 5f d9 ce 9d 6b 62 2b 46 27 52 8e 4d fa df 15 fb 44 ea f0 f9 a7 9a 4c 01 b0 36 1a ff 9c 24 cb 56 5f 99 6a aa 7f 2c 19 fb a7 7a cf 73 b6 8a 27 1e 59 6b a5 48 38 ca c7 a1 70 c2 a4 5d 97 ba c9 7f d5 82 ad 9c 69 68 c2 44 c7 dc 28 10 92 68 3e 00 7f 3b 6e 70 72 0b e5 ba e2 52 6d b5 7e 69 ea 2b 71 8c be 62 af 75 55 97 e4 50 09 ce 6c d7 ca a1 90 ad e6 39 e5 1b 5f 53 2b 13 e1 cb ee 10 7a c5 2b e5 11 0c c3 85 93 27 c8 5e 61 bf 45 aa 03 a0 70 81 c3 0a 72 e2 38 ce a6 44 fc 7a 22 18 03 d0 b3 00 19 ca a5 b9 34 61 b4 1e 33 fe 6b c8 0e 4d 59 a0 cb 86 6c ad 95 a5 ae 92 Data Ascii: duT]6+A x(vZ!;IavqO_kb+F'RMDL6$V_j,zs'YkH8p]ihD(h>;nprRm~i+qbuUPl9_S+z+'^aEpr8Dz"4a3kMYl
2023-08-10 21:19:08 UTC	4490	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:08 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:08 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 0d5e0403-49a1-4143-8355-5200a9ced6c9 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 0a66b273532540288d1b27e5529be8b4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
117	192.168.2.3	49943	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:08 UTC	4481	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:08 UTC	4489	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Thu, 10 Aug 2023 21:19:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: eb6f587a1ffb44cf835024fc4b42c7eb Connection: close
2023-08-10 21:19:08 UTC	4490	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
118	192.168.2.3	49940	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:08 UTC	4481	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 849 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:08 UTC	4483	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 65 6b 36 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 72 65 63 65 69 76 65 64 5f 6d 65 73 73 61 67 65 5f 74 69 74 6c 65 5f 63 68 61 6e 67 65 64 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 39 6f 74 4e 47 38 5f 64 53 62 44 72 5f 57 4e 4b 6a 61 64 69 75 50 35 39 41 37 77 74 45 52 47 79 58 6e 43 56 30 43 34 4d 75 43 61 73 53 55 4a 38 61 36 55 37 34 72 51 44 6e 49 57 56 4a 59 52 4f 6d 6f 48 69 5f 68 33 64 44 44 6f 4f 62 5f 4e 67 73 75 77 67 61 33 50 2d 6d 63 38 76 6d 4b 39 4b 4a 6d 53 68 4e 75 37 76 67 30 6e 6b 4a 33 79 39 48 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"DBzT6sb01xsOk7nt0qek6","event_name":{".tag":"received_message_title_changed"},"auth_token":"cd.AD9otNG8_dSbDr_WNKjadiuP59A7wtERGyXnCV0C4MuCasSUJ8a6U74rQDnIWVJYROmoHi_h3dDDoOb_Ngsuwga3P-mc8vmK9KJmShNu7vg0nkJ3y9H
2023-08-10 21:19:08 UTC	4491	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 31 X-Webkit-Csp: sandbox Content-Length: 21 Date: Thu, 10 Aug 2023 21:19:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 91d563376a3d48619ecc49aee1583f9a Connection: close
2023-08-10 21:19:08 UTC	4492	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
119	192.168.2.3	49941	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:08 UTC	4483	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 310 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:08 UTC	4485	OUT	Data Raw: 1f 8b 08 00 d9 d2 d5 64 00 ff 4d 90 cd 6e ea 30 10 85 5f a5 9a 75 72 95 3f 41 c9 b2 70 fb a3 5e 09 16 b4 2c 10 8a 8c 3d 4d dc 10 3b f5 38 88 80 78 77 26 e5 22 b1 8a f2 f9 cc cc 39 67 7d 82 c2 f7 2d 42 0e b8 47 e3 21 f8 ff cd 61 8d a6 dc 3c c8 9d ed 54 a8 ac a4 b0 12 46 ed 30 54 ce b6 5b 7b 08 bf 9c 68 30 6c 90 48 94 c8 73 2d 73 74 5e 23 41 7e 02 d3 35 1f 84 8e e6 66 21 14 e4 49 30 90 a9 35 06 a5 47 75 ff 14 05 a0 69 3a 9c 99 59 09 b9 77 1d 06 50 59 62 d9 8d be b1 0c 66 4f c7 e5 88 b6 51 7c a0 79 3d 36 3e fa c1 7a c4 77 85 f4 da 1a 16 dc 5b e5 f1 d0 a1 50 3d 0b a4 f0 58 5a d7 0f 19 4d 79 75 aa 3a e9 97 d7 dc 0b c1 b6 99 1a b1 d7 a5 18 76 51 41 da 48 2c 88 b3 f1 6f d1 72 c0 62 67 07 b3 71 00 5e 37 3c 16 8f 26 f1 38 cd c6 59 f6 67 92 32 6d 85 fa 75 79 fc b6 Data Ascii: dMn0_ur?Ap^,=M;8xw&"9g}-BG!a<TF0T[{h0lHs-st^#A~5f!I05Gui:YwPYbfOQ\|y=6>zw[P=XZMyu:vQAH,orbgq^7<&8Yg2muy
2023-08-10 21:19:08 UTC	4493	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:08 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:08 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 5f571d32-029d-4f8c-8e62-2e2dfb51a086 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 70edaa9c54064f38832d75f047968fc4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.3	49745	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	771	OUT	GET /static/webpack/production/paper_admin~paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~pap~98bcc4eb.fe9af606aefd018129cf886d5e3f19606dbbddff.Xbp3O2-COYExGtN144UKWgSeatOvuip7TNL0U7IyRwM.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:56 UTC	1133	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 1395 Connection: close Date: Thu, 10 Aug 2023 21:18:57 GMT Last-Modified: Thu, 10 Aug 2023 03:28:08 GMT ETag: "ba7064ca78204c5d214ee0d67af5e7dd" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 abd012b9637ad93b7c9aa82d2cfb262c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 7s9zRAgIPY2qmv33Y-sui63wgJZRTpIkXcNtpG5IUwH0BbXwGxqzOw==
2023-08-10 21:18:56 UTC	1134	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 57 5b af db 36 0c 7e ef af 30 5a 14 88 bb e3 d4 ce 3d 36 06 0c ed cb 0a 74 d8 d0 6d cf 86 2c c9 8e 1a 59 f2 24 39 97 1a a7 bf 7d 94 6d e5 38 39 ce 4e 87 bc 44 12 49 51 e4 c7 8f f4 34 3d 2a 54 55 54 a5 d1 7a 2f 56 69 d4 1c 19 31 bb 38 0a c3 b7 8f d3 b4 94 04 f1 0f 92 9c fb e3 65 53 21 42 98 28 02 23 ab 18 23 8e 27 07 a4 26 41 a0 2b 84 61 3b 4d 33 a4 69 5a 0b 66 fc 77 73 1f 2c 10 86 b8 2c 3e 28 8a 08 56 75 99 f5 86 b6 4d 26 15 a1 2a c8 a4 31 b2 8c 3b 2b bb 2a e8 b6 fd 04 4b 2e d5 d3 76 bb 0c 0c 3d 99 40 53 2c 05 41 ea ec 27 b9 14 b0 36 67 4e 63 66 10 67 38 29 91 2a 98 70 56 a3 55 75 4a 9c c7 fd de 62 b0 c5 69 6e e2 08 76 c0 51 26 aa da b8 28 6c 1a b0 56 88 80 19 5a ea 18 53 61 a8 4a 08 d3 15 47 e7 38 e7 f4 94 ec 28 2b 76 26 Data Ascii: W[6~0Z=6tm,Y$9}m89NDIQ4=TUTz/Vi18eS!B(##'&A+a;M3iZfws,,>(VuM&1;+K.v=@S,A'6gNcfg8)pVUuJbinvQ&(lVZSaJG8(+v&

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
120	192.168.2.3	49945	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:08 UTC	4485	OUT	POST /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 525 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:08 UTC	4486	OUT	Data Raw: 7b 22 64 6f 63 5f 69 64 22 3a 22 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 65 6b 36 22 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 39 6f 74 4e 47 38 5f 64 53 62 44 72 5f 57 4e 4b 6a 61 64 69 75 50 35 39 41 37 77 74 45 52 47 79 58 6e 43 56 30 43 34 4d 75 43 61 73 53 55 4a 38 61 36 55 37 34 72 51 44 6e 49 57 56 4a 59 52 4f 6d 6f 48 69 5f 68 33 64 44 44 6f 4f 62 5f 4e 67 73 75 77 67 61 33 50 2d 6d 63 38 76 6d 4b 39 4b 4a 6d 53 68 4e 75 37 76 67 30 6e 6b 4a 33 79 39 48 34 56 65 58 4c 7a 47 6d 77 39 73 6e 69 46 4b 71 37 35 54 69 67 4b 6d 39 65 38 6b 52 76 6e 59 51 6c 50 62 75 50 32 5f 78 6e 76 39 41 68 79 43 39 52 44 66 7a 53 76 37 5a 4d 44 64 5a 69 61 48 52 2d 6c 7a 49 42 56 50 51 6e 4d 4a 6b 45 58 5f 39 4a 6d 35 6c 42 30 6c 73 43 Data Ascii: {"doc_id":"DBzT6sb01xsOk7nt0qek6","auth_token":"cd.AD9otNG8_dSbDr_WNKjadiuP59A7wtERGyXnCV0C4MuCasSUJ8a6U74rQDnIWVJYROmoHi_h3dDDoOb_Ngsuwga3P-mc8vmK9KJmShNu7vg0nkJ3y9H4VeXLzGmw9sniFKq75TigKm9e8kRvnYQlPbuP2_xnv9AhyC9RDfzSv7ZMDdZiaHR-lzIBVPQnMJkEX_9Jm5lB0lsC
2023-08-10 21:19:08 UTC	4494	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 28 X-Webkit-Csp: sandbox Content-Length: 276 Date: Thu, 10 Aug 2023 21:19:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d8df2d9ee8744545a00bdccaf5bf17f5 Connection: close
2023-08-10 21:19:08 UTC	4495	IN	Data Raw: 7b 22 66 69 6c 65 6e 61 6d 65 22 3a 22 50 41 43 49 46 49 43 41 20 43 4f 4d 50 41 4e 49 45 53 20 73 68 61 72 65 64 20 56 69 74 61 6c 20 44 6f 63 75 6d 65 6e 74 73 20 77 69 74 68 20 79 6f 75 e2 86 93 2e 70 61 70 65 72 22 2c 22 6d 61 78 5f 61 63 63 65 73 73 5f 75 72 6c 22 3a 22 22 2c 22 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 22 3a 7b 22 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 5f 74 61 67 22 3a 7b 22 2e 74 61 67 22 3a 22 61 63 74 69 76 65 22 2c 22 63 6f 6d 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 64 6f 77 6e 6c 6f 61 64 22 3a 74 72 75 65 2c 22 65 64 69 74 22 3a 66 61 6c 73 65 2c 22 66 69 6c 65 5f 6c 6f 63 6b 5f 73 74 61 74 65 22 3a 7b 22 2e 74 61 67 22 3a 22 75 6e 6c 6f 63 6b 65 64 22 7d 2c 22 71 75 6f 74 61 22 3a 30 2c 22 72 65 6e 61 6d Data Ascii: {"filename":"PACIFICA COMPANIES shared Vital Documents with you.paper","max_access_url":"","state_and_actions":{"state_and_actions_tag":{".tag":"active","comment":false,"download":true,"edit":false,"file_lock_state":{".tag":"unlocked"},"quota":0,"renam

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
121	192.168.2.3	49944	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:08 UTC	4487	OUT	POST /paper/cloud-docs/get-dbx-folder-data-by-pad-id?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 59 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:08 UTC	4488	OUT	Data Raw: 6c 6f 63 61 6c 50 61 64 49 64 3d 7a 6a 6f 32 4b 6b 74 57 4c 63 56 47 46 6f 6b 6d 31 79 65 6f 45 26 74 3d 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 Data Ascii: localPadId=zjo2KktWLcVGFokm1yeoE&t=50aS4zgW2W1XP95GWz4lmdjP
2023-08-10 21:19:08 UTC	4499	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:08 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:08 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 2026cb25-4434-4467-8ef3-075a3e05c693 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 6b868e1c60d745f79603430c18895c99 Connection: close
2023-08-10 21:19:08 UTC	4501	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
122	192.168.2.3	49946	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:08 UTC	4488	OUT	POST /paper/cloud-docs/get-dbx-folder-data-by-pad-id?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 59 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:08 UTC	4489	OUT	Data Raw: 6c 6f 63 61 6c 50 61 64 49 64 3d 7a 6a 6f 32 4b 6b 74 57 4c 63 56 47 46 6f 6b 6d 31 79 65 6f 45 26 74 3d 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 Data Ascii: localPadId=zjo2KktWLcVGFokm1yeoE&t=50aS4zgW2W1XP95GWz4lmdjP
2023-08-10 21:19:08 UTC	4497	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:08 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:08 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 89849872-5ce2-45db-9cc4-412a59d317b3 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 4250d4fe30684318b6e4b4450a5ba0a1 Connection: close
2023-08-10 21:19:08 UTC	4499	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
123	192.168.2.3	49950	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:08 UTC	4492	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:08 UTC	4501	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Thu, 10 Aug 2023 21:19:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3dd78c145f674738b05eb8a16e126584 Connection: close
2023-08-10 21:19:08 UTC	4501	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
124	192.168.2.3	49951	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:08 UTC	4495	OUT	GET /paper/emoji/list?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:09 UTC	4515	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:09 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:09 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/list X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: f641eb50-6951-4981-ad7f-798f1c4ccbc3 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 575663 Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: e66b6fcb0dd44349b7b9aa5960af7494 Connection: close
2023-08-10 21:19:09 UTC	4517	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 6d 6f 6a 69 73 22 3a 5b 7b 22 63 68 22 3a 22 f0 9f 98 80 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 30 30 22 2c 22 6e 61 6d 65 22 3a 22 67 72 69 6e 6e 69 6e 67 20 66 61 63 65 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 67 72 69 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 98 83 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 30 33 22 2c 22 6e 61 6d 65 22 3a 22 67 72 69 6e 6e 69 6e 67 20 66 61 63 65 20 77 69 74 68 20 62 69 67 20 65 79 65 73 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 6d 6f 75 74 68 20 6f 70 65 6e 20 73 6d 69 6c 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 Data Ascii: {"success":true,"emojis":[{"ch":"","code":"1f600","name":"grinning face","tags":"face grin","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f603","name":"grinning face with big eyes","tags":"face mouth open smile","fitzpatrick":"n/a","se
2023-08-10 21:19:09 UTC	4521	IN	Data Raw: 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 98 8e 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 30 65 22 2c 22 6e 61 6d 65 22 3a 22 73 6d 69 6c 69 6e 67 20 66 61 63 65 20 77 69 74 68 20 73 75 6e 67 6c 61 73 73 65 73 22 2c 22 74 61 67 73 22 3a 22 62 72 69 67 68 74 20 63 6f 6f 6c 20 65 79 65 20 65 79 65 77 65 61 72 20 66 61 63 65 20 67 6c 61 73 73 65 73 20 73 6d 69 6c 65 20 73 75 6e 20 73 75 6e 67 6c 61 73 73 65 73 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a5 b8 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 37 38 22 2c 22 6e 61 6d 65 22 3a 22 64 69 73 67 75 69 73 65 64 20 66 61 63 65 22 2c 22 74 61 67 73 Data Ascii: n/a","section":"people"},{"ch":"","code":"1f60e","name":"smiling face with sunglasses","tags":"bright cool eye eyewear face glasses smile sun sunglasses","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f978","name":"disguised face","tags
2023-08-10 21:19:09 UTC	4527	IN	Data Raw: 70 20 7a 7a 7a 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a4 a4 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 32 34 22 2c 22 6e 61 6d 65 22 3a 22 64 72 6f 6f 6c 69 6e 67 20 66 61 63 65 22 2c 22 74 61 67 73 22 3a 22 64 72 6f 6f 6c 69 6e 67 20 66 61 63 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 98 aa 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 32 61 22 2c 22 6e 61 6d 65 22 3a 22 73 6c 65 65 70 79 20 66 61 63 65 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 73 6c 65 65 70 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 Data Ascii: p zzz","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f924","name":"drooling face","tags":"drooling face","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f62a","name":"sleepy face","tags":"face sleep","fitzpatrick":"n/a","sect
2023-08-10 21:19:09 UTC	4543	IN	Data Raw: 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 63 6c 65 6e 63 68 65 64 20 66 69 73 74 20 68 61 6e 64 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 70 75 6e 63 68 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 8a f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 34 61 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 6f 6e 63 6f 6d 69 6e 67 20 66 69 73 74 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 63 6c 65 6e 63 68 65 64 20 66 69 73 74 20 68 61 6e 64 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 70 75 6e 63 68 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f Data Ascii: in tone","tags":"clenched fist hand medium-light skin tone punch","fitzpatrick":"","section":"people"},{"ch":"","code":"1f44a-1f3fd","name":"oncoming fist: medium skin tone","tags":"clenched fist hand medium skin tone punch","fitzpatrick":"
2023-08-10 21:19:09 UTC	4553	IN	Data Raw: 22 3a 22 73 69 67 6e 20 6f 66 20 74 68 65 20 68 6f 72 6e 73 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 66 69 6e 67 65 72 20 68 61 6e 64 20 68 6f 72 6e 73 20 72 6f 63 6b 2d 6f 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 8c 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 34 63 22 2c 22 6e 61 6d 65 22 3a 22 4f 4b 20 68 61 6e 64 22 2c 22 74 61 67 73 22 3a 22 4f 4b 20 68 61 6e 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 8c f0 9f 8f bb 22 2c 22 63 6f 64 65 22 Data Ascii: ":"sign of the horns: dark skin tone","tags":"dark skin tone finger hand horns rock-on","fitzpatrick":"","section":"people"},{"ch":"","code":"1f44c","name":"OK hand","tags":"OK hand","fitzpatrick":"base","section":"people"},{"ch":"","code"
2023-08-10 21:19:09 UTC	4563	IN	Data Raw: f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 87 f0 9f 8f be 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 34 37 2d 31 66 33 66 65 22 2c 22 6e 61 6d 65 22 3a 22 62 61 63 6b 68 61 6e 64 20 69 6e 64 65 78 20 70 6f 69 6e 74 69 6e 67 20 64 6f 77 6e 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 61 63 6b 68 61 6e 64 20 64 6f 77 6e 20 66 69 6e 67 65 72 20 68 61 6e 64 20 69 6e 64 65 78 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 70 6f 69 6e 74 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 87 f0 9f 8f bf 22 2c 22 63 6f Data Ascii: ","section":"people"},{"ch":"","code":"1f447-1f3fe","name":"backhand index pointing down: medium-dark skin tone","tags":"backhand down finger hand index medium-dark skin tone point","fitzpatrick":"","section":"people"},{"ch":"","co
2023-08-10 21:19:09 UTC	4571	IN	Data Raw: 63 6f 64 65 22 3a 22 31 66 61 66 31 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 72 69 67 68 74 77 61 72 64 73 20 68 61 6e 64 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f ab b1 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 61 66 31 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 72 69 67 68 74 77 61 72 64 73 20 68 61 6e 64 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 Data Ascii: code":"1faf1-1f3fc","name":"rightwards hand: medium-light skin tone","tags":"","fitzpatrick":"","section":"people"},{"ch":"","code":"1faf1-1f3fd","name":"rightwards hand: medium skin tone","tags":"","fitzpatrick":"","section":"people"},{"c
2023-08-10 21:19:09 UTC	4579	IN	Data Raw: 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 82 f0 9f 8f bf 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 34 32 2d 31 66 33 66 66 22 2c 22 6e 61 6d 65 22 3a 22 65 61 72 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 6f 64 79 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a6 bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 62 62 22 2c 22 6e 61 6d 65 22 3a 22 65 61 72 20 77 69 74 68 20 68 65 61 72 69 6e 67 20 61 69 64 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e Data Ascii: ,"section":"people"},{"ch":"","code":"1f442-1f3ff","name":"ear: dark skin tone","tags":"body dark skin tone","fitzpatrick":"","section":"people"},{"ch":"","code":"1f9bb","name":"ear with hearing aid","tags":"","fitzpatrick":"base","section
2023-08-10 21:19:09 UTC	4595	IN	Data Raw: 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 6c 6f 6e 64 65 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b1 f0 9f 8f be e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 37 31 2d 31 66 33 66 65 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 62 6c 6f 6e 64 2d 68 61 69 72 65 64 20 77 6f 6d 61 6e 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 6c 6f 6e 64 65 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d Data Ascii: medium skin tone","tags":"blonde medium skin tone woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f471-1f3fe-2640","name":"blond-haired woman: medium-dark skin tone","tags":"blonde medium-dark skin tone wom
2023-08-10 21:19:09 UTC	4603	IN	Data Raw: 6d 65 22 3a 22 77 6f 6d 61 6e 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 20 62 65 61 72 64 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 94 f0 9f 8f bc e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 34 2d 31 66 33 66 63 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 20 62 65 61 72 64 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 Data Ascii: me":"woman: light skin tone beard","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d4-1f3fc-2640","name":"woman: medium-light skin tone beard","tags":"","isAlt":true,"fitzpatrick":"","section":"pe
2023-08-10 21:19:10 UTC	4619	IN	Data Raw: 66 34 38 32 22 2c 22 6e 61 6d 65 22 3a 22 67 75 61 72 64 22 2c 22 74 61 67 73 22 3a 22 67 75 61 72 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 82 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 38 32 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 67 75 61 72 64 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 67 75 61 72 64 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 82 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 38 32 2d 31 66 33 66 63 Data Ascii: f482","name":"guard","tags":"guard","fitzpatrick":"base","section":"people"},{"ch":"","code":"1f482-1f3fb","name":"guard: light skin tone","tags":"guard light skin tone","fitzpatrick":"","section":"people"},{"ch":"","code":"1f482-1f3fc
2023-08-10 21:19:10 UTC	4627	IN	Data Raw: 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bf e2 80 8d e2 9a 95 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 66 2d 32 36 39 35 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 68 65 61 6c 74 68 20 77 6f 72 6b 65 72 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 64 6f 63 74 6f 72 20 68 65 61 6c 74 68 63 61 72 65 20 6e 75 72 73 65 20 74 68 65 72 61 70 69 73 74 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 e2 80 8d e2 9a Data Ascii: ","section":"people"},{"ch":"","code":"1f469-1f3ff-2695","name":"woman health worker: dark skin tone","tags":"dark skin tone doctor healthcare nurse therapist woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"
2023-08-10 21:19:10 UTC	4635	IN	Data Raw: 75 64 65 6e 74 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 f0 9f 8f be e2 80 8d f0 9f 8e 93 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 65 2d 31 66 33 39 33 22 2c 22 6e 61 6d 65 22 3a 22 73 74 75 64 65 6e 74 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 Data Ascii: udent: medium skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d1-1f3fe-1f393","name":"student: medium-dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"
2023-08-10 21:19:10 UTC	4643	IN	Data Raw: 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bb e2 80 8d f0 9f 8f ab 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 62 2d 31 66 33 65 62 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 74 65 61 63 68 65 72 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 69 6e 73 74 72 75 63 74 6f 72 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 61 6e 20 70 72 6f 66 65 73 73 6f 72 20 74 65 61 63 68 65 72 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f Data Ascii: rue,"fitzpatrick":"base","section":"people"},{"ch":"","code":"1f468-1f3fb-1f3eb","name":"man teacher: light skin tone","tags":"instructor light skin tone man professor teacher","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"
2023-08-10 21:19:10 UTC	4659	IN	Data Raw: 65 22 2c 22 74 61 67 73 22 3a 22 62 69 6f 6c 6f 67 69 73 74 20 63 68 65 6d 69 73 74 20 65 6e 67 69 6e 65 65 72 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 61 74 68 65 6d 61 74 69 63 69 61 6e 20 70 68 79 73 69 63 69 73 74 20 73 63 69 65 6e 74 69 73 74 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bc e2 80 8d f0 9f 94 ac 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 63 2d 31 66 35 32 63 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 73 63 69 65 6e 74 69 73 74 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 Data Ascii: e","tags":"biologist chemist engineer light skin tone mathematician physicist scientist woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3fc-1f52c","name":"woman scientist: medium-light skin tone","tags"
2023-08-10 21:19:10 UTC	4667	IN	Data Raw: 66 69 72 65 74 72 75 63 6b 20 6d 61 6e 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bd e2 80 8d f0 9f 9a 92 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 64 2d 31 66 36 39 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 66 69 72 65 66 69 67 68 74 65 72 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 66 69 72 65 66 69 67 68 74 65 72 20 66 69 72 65 74 72 75 63 6b 20 6d 61 6e 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 Data Ascii: firetruck man medium-light skin tone","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f468-1f3fd-1f692","name":"man firefighter: medium skin tone","tags":"firefighter firetruck man medium skin tone","isAlt":true,"fit
2023-08-10 21:19:10 UTC	4683	IN	Data Raw: 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b8 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 37 38 22 2c 22 6e 61 6d 65 22 3a 22 70 72 69 6e 63 65 73 73 22 2c 22 74 61 67 73 22 3a 22 66 61 69 72 79 20 74 61 6c 65 20 66 61 6e 74 61 73 79 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b8 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 37 38 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 70 72 69 6e 63 65 73 73 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 Data Ascii: skin tone","tags":"","fitzpatrick":"","section":"people"},{"ch":"","code":"1f478","name":"princess","tags":"fairy tale fantasy","fitzpatrick":"base","section":"people"},{"ch":"","code":"1f478-1f3fb","name":"princess: light skin tone","tags
2023-08-10 21:19:10 UTC	4699	IN	Data Raw: 6d 61 6e 20 65 6c 66 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 61 67 69 63 61 6c 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 9d f0 9f 8f be e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 64 2d 31 66 33 66 65 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 65 6c 66 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 61 67 69 63 61 6c 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 69 73 41 6c 74 22 3a 74 Data Ascii: man elf: medium skin tone","tags":"magical medium skin tone","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9dd-1f3fe-2642","name":"man elf: medium-dark skin tone","tags":"magical medium-dark skin tone","isAlt":t
2023-08-10 21:19:10 UTC	4707	IN	Data Raw: 50 75 63 6b 20 54 69 74 61 6e 69 61 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 9a e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 61 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 66 61 69 72 79 22 2c 22 74 61 67 73 22 3a 22 54 69 74 61 6e 69 61 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 9a f0 9f 8f bb e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 61 2d 31 66 33 66 62 2d 32 36 34 30 22 Data Ascii: Puck Titania dark skin tone","fitzpatrick":"","section":"people"},{"ch":"","code":"1f9da-2640","name":"woman fairy","tags":"Titania","isAlt":true,"fitzpatrick":"base","section":"people"},{"ch":"","code":"1f9da-1f3fb-2640"
2023-08-10 21:19:10 UTC	4716	IN	Data Raw: 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f be e2 80 8d f0 9f 8d bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 65 2d 31 66 33 37 63 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 66 65 65 64 69 6e 67 20 62 61 62 79 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bf e2 80 8d f0 9f 8d bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 66 2d 31 66 33 37 63 22 2c 22 6e 61 6d Data Ascii: trick":"","section":"people"},{"ch":"","code":"1f469-1f3fe-1f37c","name":"woman feeding baby: medium-dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3ff-1f37c","nam
2023-08-10 21:19:10 UTC	4732	IN	Data Raw: 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 99 8b f0 9f 8f bb e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 34 62 2d 31 66 33 66 62 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 72 61 69 73 69 6e 67 20 68 61 6e 64 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 67 65 73 74 75 72 65 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 72 61 69 73 69 6e 67 20 68 61 6e 64 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 99 8b f0 9f 8f bc e2 80 8d Data Ascii: trick":"base","section":"people"},{"ch":"","code":"1f64b-1f3fb-2640","name":"woman raising hand: light skin tone","tags":"gesture light skin tone raising hand woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"
2023-08-10 21:19:10 UTC	4752	IN	Data Raw: 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 99 8d f0 9f 8f bc e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 34 64 2d 31 66 33 66 63 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 66 72 6f 77 6e 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 66 72 6f 77 6e 69 6e 67 20 67 65 73 74 75 72 65 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 Data Ascii: tone woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f64d-1f3fc-2640","name":"woman frowning: medium-light skin tone","tags":"frowning gesture medium-light skin tone woman","isAlt":true,"fitzpatrick":""
2023-08-10 21:19:10 UTC	4768	IN	Data Raw: 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 69 6e 20 73 75 69 74 20 6c 65 76 69 74 61 74 69 6e 67 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 75 73 69 6e 65 73 73 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 61 6e 20 73 75 69 74 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 95 b4 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 37 34 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 69 6e 20 73 75 69 74 20 6c 65 76 69 74 61 74 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 75 73 69 6e 65 73 73 20 6d 61 6e Data Ascii: -1f3fb","name":"man in suit levitating: light skin tone","tags":"business light skin tone man suit","fitzpatrick":"","section":"people"},{"ch":"","code":"1f574-1f3fc","name":"man in suit levitating: medium-light skin tone","tags":"business man
2023-08-10 21:19:10 UTC	4784	IN	Data Raw: 65 72 73 6f 6e 20 72 75 6e 6e 69 6e 67 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 61 72 61 74 68 6f 6e 20 72 75 6e 6e 69 6e 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 83 e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 33 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 72 75 6e 6e 69 6e 67 22 2c 22 74 61 67 73 22 3a 22 6d 61 72 61 74 68 6f 6e 20 72 61 63 69 6e 67 20 72 75 6e 6e 69 6e 67 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 Data Ascii: erson running: dark skin tone","tags":"dark skin tone marathon running","fitzpatrick":"","section":"people"},{"ch":"","code":"1f3c3-2640","name":"woman running","tags":"marathon racing running woman","isAlt":true,"fitzpatrick":"base","sec
2023-08-10 21:19:10 UTC	4800	IN	Data Raw: 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 62 2d 31 66 39 31 64 2d 31 66 34 36 39 2d 31 66 33 66 66 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 65 6e 20 68 6f 6c 64 69 6e 67 20 68 61 6e 64 73 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bc e2 80 8d f0 9f a4 9d e2 80 8d f0 9f 91 a9 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 63 2d 31 66 39 31 64 2d 31 66 34 36 39 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 65 6e 20 68 6f Data Ascii: "code":"1f469-1f3fb-1f91d-1f469-1f3ff","name":"women holding hands: light skin tone dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3fc-1f91d-1f469-1f3fb","name":"women ho
2023-08-10 21:19:10 UTC	4808	IN	Data Raw: 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bf e2 80 8d f0 9f a4 9d e2 80 8d f0 9f 91 a8 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 66 2d 31 66 39 31 64 2d 31 66 34 36 38 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 6d 65 6e 20 68 6f 6c 64 69 6e 67 20 68 61 6e 64 73 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bf e2 80 8d f0 9f a4 9d e2 80 8d f0 9f 91 a8 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d Data Ascii: ,{"ch":"","code":"1f468-1f3ff-1f91d-1f468-1f3fc","name":"men holding hands: dark skin tone medium-light skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f468-
2023-08-10 21:19:10 UTC	4824	IN	Data Raw: 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bf e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 91 a9 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 66 2d 32 37 36 34 2d 31 66 34 36 39 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 63 6f 75 70 6c 65 20 77 69 74 68 20 68 65 61 72 74 3a 20 77 6f 6d 61 6e 20 20 77 6f 6d 61 6e 20 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bf e2 80 8d e2 9d a4 ef b8 8f Data Ascii: ction":"people"},{"ch":"","code":"1f469-1f3ff-2764-1f469-1f3fd","name":"couple with heart: woman woman dark skin tone medium skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"
2023-08-10 21:19:10 UTC	4840	IN	Data Raw: 34 36 39 2d 31 66 33 66 66 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 34 36 38 2d 31 66 33 66 65 22 2c 22 6e 61 6d 65 22 3a 22 6b 69 73 73 3a 20 77 6f 6d 61 6e 20 20 6d 61 6e 20 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bf e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 92 8b e2 80 8d f0 9f 91 a8 f0 9f 8f bf 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 66 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 34 36 38 2d 31 66 33 66 66 22 2c 22 6e 61 6d Data Ascii: 469-1f3ff-2764-1f48b-1f468-1f3fe","name":"kiss: woman man dark skin tone medium-dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3ff-2764-1f48b-1f468-1f3ff","nam
2023-08-10 21:19:10 UTC	4856	IN	Data Raw: 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 9a 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 35 61 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e e2 80 99 73 20 63 6c 6f 74 68 65 73 22 2c 22 74 61 67 73 22 3a 22 63 6c 6f 74 68 69 6e 67 20 77 6f 6d 61 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 95 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 35 35 22 2c 22 6e 61 6d 65 22 3a 22 74 2d 73 68 69 72 74 22 2c 22 74 61 67 73 22 3a 22 63 6c 6f 74 68 69 6e 67 20 73 68 69 72 74 20 74 73 68 69 72 74 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e Data Ascii: rick":"n/a","section":"people"},{"ch":"","code":"1f45a","name":"womans clothes","tags":"clothing woman","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f455","name":"t-shirt","tags":"clothing shirt tshirt","fitzpatrick":"n/a","section
2023-08-10 21:19:10 UTC	4872	IN	Data Raw: 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f aa b6 22 2c 22 63 6f 64 65 22 3a 22 31 66 61 62 36 22 2c 22 6e 61 6d 65 22 3a 22 66 65 61 74 68 65 72 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 90 93 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 31 33 22 2c 22 6e 61 6d 65 22 3a 22 72 6f 6f 73 74 65 72 22 2c 22 74 61 67 73 22 3a 22 62 69 72 64 20 72 6f 6f 73 74 65 72 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a6 83 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 38 33 22 2c 22 6e Data Ascii: a","section":"nature"},{"ch":"","code":"1fab6","name":"feather","tags":"","fitzpatrick":"n/a","section":"nature"},{"ch":"","code":"1f413","name":"rooster","tags":"bird rooster","fitzpatrick":"n/a","section":"nature"},{"ch":"","code":"1f983","n
2023-08-10 21:19:10 UTC	4889	IN	Data Raw: 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6f 6f 64 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a5 a6 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 36 36 22 2c 22 6e 61 6d 65 22 3a 22 62 72 6f 63 63 6f 6c 69 22 2c 22 74 61 67 73 22 3a 22 77 69 6c 64 20 63 61 62 62 61 67 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6f 6f 64 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a5 ac 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 36 63 22 2c 22 6e 61 6d 65 22 3a 22 6c 65 61 66 79 20 67 72 65 65 6e 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6f 6f 64 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f ab 91 22 2c 22 63 6f 64 65 22 3a 22 31 66 61 64 31 22 2c 22 6e Data Ascii: /a","section":"food"},{"ch":"","code":"1f966","name":"broccoli","tags":"wild cabbage","fitzpatrick":"n/a","section":"food"},{"ch":"","code":"1f96c","name":"leafy green","tags":"","fitzpatrick":"n/a","section":"food"},{"ch":"","code":"1fad1","n
2023-08-10 21:19:10 UTC	4908	IN	Data Raw: 2c 7b 22 63 68 22 3a 22 f0 9f 8f 82 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 32 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 73 6e 6f 77 62 6f 61 72 64 65 72 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 73 6b 69 20 73 6e 6f 77 20 73 6e 6f 77 62 6f 61 72 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 82 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 32 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 73 6e 6f 77 62 6f 61 72 64 65 72 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c Data Ascii: ,{"ch":"","code":"1f3c2-1f3fc","name":"snowboarder: medium-light skin tone","tags":"medium-light skin tone ski snow snowboard","fitzpatrick":"","section":"activity"},{"ch":"","code":"1f3c2-1f3fd","name":"snowboarder: medium skin tone",
2023-08-10 21:19:10 UTC	4924	IN	Data Raw: 64 65 22 3a 22 31 66 33 63 63 2d 31 66 33 66 66 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 67 6f 6c 66 69 6e 67 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 67 6f 6c 66 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 8c ef b8 8f e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 63 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 67 6f 6c 66 69 6e 67 22 2c 22 74 61 67 73 22 3a 22 67 6f 6c 66 20 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a Data Ascii: de":"1f3cc-1f3ff-2640","name":"woman golfing: dark skin tone","tags":"dark skin tone golf woman","isAlt":true,"fitzpatrick":"","section":"activity"},{"ch":"","code":"1f3cc-2642","name":"man golfing","tags":"golf man","isAlt":true,"fitz
2023-08-10 21:19:10 UTC	4941	IN	Data Raw: 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a a3 f0 9f 8f bc e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 61 33 2d 31 66 33 66 63 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 72 6f 77 69 6e 67 20 62 6f 61 74 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 6f 61 74 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 72 6f 77 62 6f 61 74 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c Data Ascii: e,"fitzpatrick":"","section":"activity"},{"ch":"","code":"1f6a3-1f3fc-2640","name":"woman rowing boat: medium-light skin tone","tags":"boat medium-light skin tone rowboat woman","isAlt":true,"fitzpatrick":"","section":"activity"},
2023-08-10 21:19:10 UTC	4949	IN	Data Raw: 6d 65 22 3a 22 6d 61 6e 20 6d 6f 75 6e 74 61 69 6e 20 62 69 6b 69 6e 67 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 69 63 79 63 6c 65 20 62 69 6b 65 20 63 79 63 6c 69 73 74 20 6d 61 6e 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 6f 75 6e 74 61 69 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a b5 f0 9f 8f be e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 62 35 2d 31 66 33 66 65 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 6d 6f 75 6e 74 61 69 6e 20 62 69 6b 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b Data Ascii: me":"man mountain biking: medium skin tone","tags":"bicycle bike cyclist man medium skin tone mountain","isAlt":true,"fitzpatrick":"","section":"activity"},{"ch":"","code":"1f6b5-1f3fe-2642","name":"man mountain biking: medium-dark sk
2023-08-10 21:19:10 UTC	4965	IN	Data Raw: 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a 85 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 38 35 22 2c 22 6e 61 6d 65 22 3a 22 62 75 6c 6c 65 74 20 74 72 61 69 6e 22 2c 22 74 61 67 73 22 3a 22 62 75 6c 6c 65 74 20 72 61 69 6c 77 61 79 20 73 68 69 6e 6b 61 6e 73 65 6e 20 73 70 65 65 64 20 74 72 61 69 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a 88 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 38 38 22 2c 22 6e 61 6d 65 22 3a 22 6c 69 67 68 74 20 72 61 69 6c 22 2c 22 74 61 67 73 22 3a 22 72 61 69 6c 77 61 79 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c Data Ascii: tion":"travel"},{"ch":"","code":"1f685","name":"bullet train","tags":"bullet railway shinkansen speed train","fitzpatrick":"n/a","section":"travel"},{"ch":"","code":"1f688","name":"light rail","tags":"railway","fitzpatrick":"n/a","section":"travel
2023-08-10 21:19:10 UTC	4981	IN	Data Raw: 74 65 72 20 64 69 73 6b 20 66 6c 6f 70 70 79 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 bf 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 62 66 22 2c 22 6e 61 6d 65 22 3a 22 6f 70 74 69 63 61 6c 20 64 69 73 6b 22 2c 22 74 61 67 73 22 3a 22 63 64 20 63 6f 6d 70 75 74 65 72 20 64 69 73 6b 20 6f 70 74 69 63 61 6c 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 93 80 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 63 30 22 2c 22 6e 61 6d 65 22 3a 22 64 76 64 22 2c 22 74 61 67 73 22 3a 22 62 6c 75 2d 72 61 79 20 63 6f 6d 70 75 74 65 72 20 64 69 73 6b 20 64 Data Ascii: ter disk floppy","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f4bf","name":"optical disk","tags":"cd computer disk optical","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f4c0","name":"dvd","tags":"blu-ray computer disk d
2023-08-10 21:19:10 UTC	4997	IN	Data Raw: 22 6e 61 6d 65 22 3a 22 62 75 63 6b 65 74 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 b4 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 66 34 22 2c 22 6e 61 6d 65 22 3a 22 6c 6f 74 69 6f 6e 20 62 6f 74 74 6c 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9b 8e 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 63 65 22 2c 22 6e 61 6d 65 22 3a 22 62 65 6c 6c 68 6f 70 20 62 65 6c 6c 22 2c 22 74 61 67 73 22 3a 22 62 65 6c 6c 20 62 65 6c 6c 68 6f 70 20 68 6f 74 65 6c 22 2c 22 68 61 73 41 6c 74 22 Data Ascii: "name":"bucket","tags":"","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f9f4","name":"lotion bottle","tags":"","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f6ce","name":"bellhop bell","tags":"bell bellhop hotel","hasAlt"
2023-08-10 21:19:10 UTC	5007	IN	Data Raw: 64 65 63 72 65 61 73 69 6e 67 22 2c 22 74 61 67 73 22 3a 22 63 68 61 72 74 20 64 6f 77 6e 20 67 72 61 70 68 20 74 72 65 6e 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 97 92 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 64 32 22 2c 22 6e 61 6d 65 22 3a 22 73 70 69 72 61 6c 20 6e 6f 74 65 70 61 64 22 2c 22 74 61 67 73 22 3a 22 6e 6f 74 65 20 70 61 64 20 73 70 69 72 61 6c 22 2c 22 68 61 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 97 92 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 64 32 22 2c 22 6e 61 6d 65 22 3a Data Ascii: decreasing","tags":"chart down graph trend","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f5d2","name":"spiral notepad","tags":"note pad spiral","hasAlt":true,"fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f5d2","name":
2023-08-10 21:19:10 UTC	5023	IN	Data Raw: 22 63 68 22 3a 22 f0 9f 88 ba 22 2c 22 63 6f 64 65 22 3a 22 31 66 32 33 61 22 2c 22 6e 61 6d 65 22 3a 22 4a 61 70 61 6e 65 73 65 20 e2 80 9c 6f 70 65 6e 20 66 6f 72 20 62 75 73 69 6e 65 73 73 e2 80 9d 20 62 75 74 74 6f 6e 22 2c 22 74 61 67 73 22 3a 22 4a 61 70 61 6e 65 73 65 20 69 64 65 6f 67 72 61 70 68 20 e2 80 9c 6f 70 65 6e 20 66 6f 72 20 62 75 73 69 6e 65 73 73 e2 80 9d 20 e5 96 b6 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 88 b7 22 2c 22 63 6f 64 65 22 3a 22 31 66 32 33 37 22 2c 22 6e 61 6d 65 22 3a 22 4a 61 70 61 6e 65 73 65 20 e2 80 9c 6d 6f 6e 74 68 6c 79 20 61 6d 6f 75 6e 74 e2 80 9d 20 62 75 74 74 6f 6e 22 2c 22 74 61 67 73 22 3a 22 Data Ascii: "ch":"","code":"1f23a","name":"Japanese open for business button","tags":"Japanese ideograph open for business ","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f237","name":"Japanese monthly amount button","tags":"
2023-08-10 21:19:10 UTC	5039	IN	Data Raw: 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 37 e2 83 a3 22 2c 22 63 6f 64 65 22 3a 22 30 30 33 37 2d 32 30 65 33 22 2c 22 6e 61 6d 65 22 3a 22 6b 65 79 63 61 70 3a 20 37 22 2c 22 74 61 67 73 22 3a 22 6b 65 79 63 61 70 22 2c 22 68 61 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 37 ef b8 8f e2 83 a3 22 2c 22 63 6f 64 65 22 3a 22 30 30 33 37 2d 32 30 65 33 22 2c 22 6e 61 6d 65 22 3a 22 6b 65 79 63 61 70 3a 20 37 22 2c 22 74 61 67 73 22 3a 22 6b 65 79 63 61 70 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 Data Ascii: e,"fitzpatrick":"n/a","section":"symbols"},{"ch":"7","code":"0037-20e3","name":"keycap: 7","tags":"keycap","hasAlt":true,"fitzpatrick":"n/a","section":"symbols"},{"ch":"7","code":"0037-20e3","name":"keycap: 7","tags":"keycap","isAlt":true,"fitzpa
2023-08-10 21:19:10 UTC	5055	IN	Data Raw: 22 3a 22 31 66 37 65 39 22 2c 22 6e 61 6d 65 22 3a 22 67 72 65 65 6e 20 73 71 75 61 72 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9f a8 22 2c 22 63 6f 64 65 22 3a 22 31 66 37 65 38 22 2c 22 6e 61 6d 65 22 3a 22 79 65 6c 6c 6f 77 20 73 71 75 61 72 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 94 88 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 30 38 22 2c 22 6e 61 6d 65 22 3a 22 73 70 65 61 6b 65 72 20 6c 6f 77 20 76 6f 6c 75 6d 65 22 2c 22 74 61 67 73 22 3a 22 73 6f 66 74 22 2c Data Ascii: ":"1f7e9","name":"green square","tags":"","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f7e8","name":"yellow square","tags":"","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f508","name":"speaker low volume","tags":"soft",
2023-08-10 21:19:10 UTC	5071	IN	Data Raw: 22 31 66 31 65 61 2d 31 66 31 65 38 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 45 63 75 61 64 6f 72 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 aa f0 9f 87 ac 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 65 61 2d 31 66 31 65 63 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 45 67 79 70 74 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 b8 f0 9f 87 bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 66 38 2d 31 66 31 66 62 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 45 Data Ascii: "1f1ea-1f1e8","name":"flag: Ecuador","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1ea-1f1ec","name":"flag: Egypt","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1f8-1f1fb","name":"flag: E
2023-08-10 21:19:10 UTC	5087	IN	Data Raw: 6f 64 65 22 3a 22 31 66 31 66 38 2d 31 66 31 65 64 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 53 74 2e 20 48 65 6c 65 6e 61 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 b0 f0 9f 87 b3 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 66 30 2d 31 66 31 66 33 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 53 74 2e 20 4b 69 74 74 73 20 26 61 6d 70 3b 20 4e 65 76 69 73 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 b1 f0 9f 87 a8 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 66 Data Ascii: ode":"1f1f8-1f1ed","name":"flag: St. Helena","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1f0-1f1f3","name":"flag: St. Kitts & Nevis","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1f

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
125	192.168.2.3	49952	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:08 UTC	4496	OUT	GET /paper/team/emoji-list?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:09 UTC	4506	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:08 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:08 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: e9010739-93bd-4c6b-bf5a-b6f8229dfe57 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 81f5b1c9721e40bea1c489b81b7b9fb8 Connection: close
2023-08-10 21:19:09 UTC	4507	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
126	192.168.2.3	49954	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:09 UTC	4501	OUT	POST /paper/comet/post?r=288161857590172754853666&v=2&id=257359365407097851736353&seq=0&tag=zjo2KktWLcVGFokm1yeoE&xsrf=50aS4zgW2W1XP95GWz4lmdjP&postSeq=1&remark=&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 22 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEc Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOu Notes-App-Time: 1691634844000 Notes-Pad-Id: zjo2KktWLcVGFokm1yeoE sec-ch-ua-mobile: ?0 Notes-Socket-Id: 257359365407097851736353 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/octet-stream sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:09 UTC	4502	OUT	Data Raw: 0a 14 0a 12 1a 10 08 01 12 0c 73 68 6f 72 74 70 6f 6c 6c 69 6e 67 Data Ascii: shortpolling
2023-08-10 21:19:09 UTC	4510	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:09 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: d708b82a-e7f4-495f-a67a-8b1391a305e1 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 2 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 4fdedaf870634c2b8f19c7d7f71c71a2 Connection: close
2023-08-10 21:19:09 UTC	4511	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
127	192.168.2.3	49955	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:09 UTC	4502	OUT	GET /paper/comet/channel?v=2&r=830395895254979411890363&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEc Notes-Pad-Id: zjo2KktWLcVGFokm1yeoE Notes-App-Time: 1691634844000 Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 Notes-Socket-Id: 257359365407097851736353 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:09 UTC	4511	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:09 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: a601c32b-148e-4e77-a050-9a40f78bf468 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 0 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 4857a77e10a440e58d2180ceddd8be08 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
128	192.168.2.3	49953	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:09 UTC	4504	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 736 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:09 UTC	4505	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 65 6b 36 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 6d 61 78 5f 61 63 63 65 73 73 5f 75 72 6c 5f 63 68 61 6e 67 65 64 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 39 6f 74 4e 47 38 5f 64 53 62 44 72 5f 57 4e 4b 6a 61 64 69 75 50 35 39 41 37 77 74 45 52 47 79 58 6e 43 56 30 43 34 4d 75 43 61 73 53 55 4a 38 61 36 55 37 34 72 51 44 6e 49 57 56 4a 59 52 4f 6d 6f 48 69 5f 68 33 64 44 44 6f 4f 62 5f 4e 67 73 75 77 67 61 33 50 2d 6d 63 38 76 6d 4b 39 4b 4a 6d 53 68 4e 75 37 76 67 30 6e 6b 4a 33 79 39 48 34 56 65 58 4c 7a 47 6d Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"DBzT6sb01xsOk7nt0qek6","event_name":{".tag":"max_access_url_changed"},"auth_token":"cd.AD9otNG8_dSbDr_WNKjadiuP59A7wtERGyXnCV0C4MuCasSUJ8a6U74rQDnIWVJYROmoHi_h3dDDoOb_Ngsuwga3P-mc8vmK9KJmShNu7vg0nkJ3y9H4VeXLzGm
2023-08-10 21:19:09 UTC	4509	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 2 X-Webkit-Csp: sandbox Content-Length: 21 Date: Thu, 10 Aug 2023 21:19:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4b24819962b3425c8531aaa22f5a7694 Connection: close
2023-08-10 21:19:09 UTC	4510	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
129	192.168.2.3	49959	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:09 UTC	4507	OUT	POST /paper/cloud-docs/get-permissions?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 54 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-app-time: 1691634844000 notes-pad-id: zjo2KktWLcVGFokm1yeoE notes-tab-id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:09 UTC	4509	OUT	Data Raw: 64 6f 63 49 64 3d 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 65 6b 36 26 74 3d 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 Data Ascii: docId=DBzT6sb01xsOk7nt0qek6&t=50aS4zgW2W1XP95GWz4lmdjP
2023-08-10 21:19:09 UTC	4512	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:09 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:09 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 339437cd-d9a6-4237-8cc3-82f99771b402 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: c51cf2809d6e420a98f2578b2a3a1a24 Connection: close
2023-08-10 21:19:09 UTC	4513	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.3	49743	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	802	OUT	GET /static/webpack/production/paper_admin~paper_binder~paper_bundle~paper_cloud_docs~paper_dashboard~paper_graphql~paper_influence~887f98f3.fe9af606aefd018129cf886d5e3f19606dbbddff.ARD-Tc17w0zlkOYPGuyNud-Z4Sv7Bt5ccfkX-Fz_qFQ.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:56 UTC	1174	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 344 Connection: close Date: Thu, 10 Aug 2023 21:18:57 GMT Last-Modified: Thu, 10 Aug 2023 03:28:10 GMT ETag: "5e25f7ab365b6bd1bdbf8817b379f25b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9c0ce977a13f3d9bbc6eed6540faf728.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: QYvvUGdRoxs7mvkCZj0_wIOSrNV_HkZForP9lQ3mDMH2aMq_YucOLA==
2023-08-10 21:18:56 UTC	1174	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 65 50 c1 4e c3 30 0c bd ef 2b 40 5c 60 5a bb 76 d3 ba b6 13 17 6e 48 70 41 e2 1c b9 b1 d3 46 a4 49 48 d3 ad a2 da be 9d 76 2b 30 89 53 fc 5e 6c 3f bf 17 b2 a2 f5 de 68 16 2b ee 2d 8b 7b 6b 1a e9 a5 d1 b9 90 1d e1 ce c9 b2 f2 f9 c6 76 3b 6f 6c be 1e de af 40 6a a4 2e cf 8e 21 6b 48 11 f7 84 d3 74 da 17 c0 3f 4a 67 5a 8d 01 37 ca b8 7c 0f ee 3e b8 d4 8c 71 e3 88 31 e0 9c b4 7f 38 ce 42 76 70 60 2d 39 16 ef 31 ca ae c5 a1 68 8c 6a 3d fd aa 1e 24 fa 2a 5f 6d 22 db 0d ba 52 db d6 4f 53 db de 02 a2 d4 65 1e dd ca da 1a e7 41 fb a1 87 2b 02 f7 34 99 bb ec 5f 2d 26 fa 99 ff 91 eb c5 e8 03 1c af ae d9 b8 af e8 6c 3d 4e ce 8a ff c7 fa 1a 5c 29 75 30 5e 18 8c 4d b3 d9 72 7e 77 d3 98 d6 71 7a 1d 7c 0d 27 bd bf bd 3c 5a 18 1d 02 d6 52 9f Data Ascii: ePN0+@\`ZvnHpAFIHv+0S^l?h+-{kv;ol@j.!kHt?JgZ7\|>q18Bvp`-91hj=$*_m"ROSeA+4_-&l=N\)u0^Mr~wqz\|'<ZR

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
130	192.168.2.3	49960	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:09 UTC	4509	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:09 UTC	4511	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Thu, 10 Aug 2023 21:19:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: df8f5c506b154a5984bed8bc8997948d Connection: close
2023-08-10 21:19:09 UTC	4512	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
131	192.168.2.3	49961	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:09 UTC	4513	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 323 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:09 UTC	4515	OUT	Data Raw: 1f 8b 08 00 db d2 d5 64 00 ff 8d 91 cd 6e ea 30 10 85 5f a5 9a 75 72 95 84 88 94 2c 0b fd 53 2b c1 82 96 05 42 91 b1 e7 26 be 21 76 b0 27 88 1f f1 ee 4c 2e 45 62 d9 95 e5 e3 6f 66 7c ce 2c 4f 50 d0 a1 45 c8 01 77 68 08 82 9f 33 87 25 9a 72 f5 20 37 b6 53 a1 b2 d2 87 95 30 6a 83 a1 72 b6 5d db 7d f8 d7 89 06 c3 06 bd 17 25 72 5d cb 3a 3a d2 e8 21 3f 81 e9 9a 2f 8f ce 4f cd 4c 28 c8 93 a0 57 c6 d6 18 94 84 ea fe 29 0a 40 fb 71 3f 66 62 25 e4 e4 3a 0c a0 b2 9e b1 9b fa ce 18 4c 9e 8e f3 a1 5f 47 f1 de 4f eb cc 50 b4 c5 7a c8 73 1d 6e 3b fc 35 2d 24 69 6b 18 b8 33 d6 20 09 25 48 84 92 2d 96 a8 18 93 82 b0 b4 ee d0 e7 62 ca ab 3b d5 49 9a 5f b3 9a 09 b6 ca aa 11 3b 5d 8a be a3 2f bc 36 12 0b cf 79 f0 b5 68 39 94 62 63 7b 83 71 00 a4 1b 2e 8b 87 a3 38 1b a4 59 Data Ascii: dn0_ur,S+B&!v'L.Ebof\|,OPEwh3%r 7S0jr]}%r]::!?/OL(W)@q?fb%:L_GOPzsn;5-$ik3 %H-b;I_;]/6yh9bc{q.8Y
2023-08-10 21:19:09 UTC	4551	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:09 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:09 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: bfc6fb9f-5477-4d1a-8c73-9ee8686e1058 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: e7635199a0ff4f939a431cc4bfb3a2cc Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
132	192.168.2.3	49970	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:09 UTC	4561	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 360 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:09 UTC	4562	OUT	Data Raw: 1f 8b 08 00 dc d2 d5 64 00 ff c5 51 4b 6b e3 30 10 fe 2b cb 9c ed e2 d7 23 f6 35 4d b7 4b 0b 1b d8 b6 39 84 60 54 79 ea a8 71 24 23 c9 01 37 e4 bf 67 1c c5 b0 97 42 0f 85 9e 24 7f 1e cd f7 5a 1f a1 b2 43 87 50 02 1e 50 5a f0 ae 67 09 6b 94 cd e6 97 51 7c 87 d6 e7 4a 4a e4 d6 37 3d e7 68 cc 5b df d2 64 a7 55 87 da 0a 34 50 1e 41 f6 fb 67 83 da fc 95 4b 56 43 19 79 23 32 77 ef b0 fe ff 57 e0 81 30 f3 56 f5 f5 ad e2 50 5a dd a3 07 1a af 1c 42 36 ff 2e a4 7f 68 14 b2 34 c8 8a 22 8e a3 22 4f d3 3c 8a c3 34 9f a5 59 16 13 bd 93 f6 e4 d4 2f ec 16 75 c7 ea 15 be ba d7 34 60 c5 1e 7d ab 26 f1 50 26 59 90 7a c0 99 c5 46 e9 61 f4 2c 1b e7 a3 ee f9 b4 69 c9 c8 14 a1 92 1d 44 c3 ac 50 d2 54 46 48 8e 95 21 e7 f4 59 75 ac c1 aa 55 a3 95 d0 b1 d0 25 2b c2 3c 4e f2 64 76 Data Ascii: dQKk0+#5MK9`Tyq$#7gB$ZCPPZgkQ\|JJ7=h[dU4PAgKVCy#2wW0VPZB6.h4""O<4Y/u4`}&P&YzFa,iDPTFH!YuU%+<Ndv
2023-08-10 21:19:10 UTC	4715	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:09 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:09 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 6e695011-41c1-496d-9732-ed1e79495fcc X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 53025dc6471c40eaa894d51989cf770e Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
133	192.168.2.3	49974	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	4748	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 252 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	4749	OUT	Data Raw: 1f 8b 08 00 dc d2 d5 64 00 ff 4d 90 4f 4f c3 30 0c 47 bf 8b cf 2d 5a ba b2 8e 5c c7 5f 81 c4 0e c0 0e 08 55 51 62 75 61 ad 53 c5 ee a4 32 ed bb 2f dd 40 e2 14 e7 67 eb 3d 27 9f 07 a8 65 ec 11 34 e0 1e 49 20 fb 3d 35 d8 d6 a7 22 8f 68 dc 98 33 92 cb 5b 23 48 76 4c 33 7d 0c 3d 46 f1 c8 a0 0f 40 43 f7 ce 18 f9 95 d6 c6 81 2e b2 29 59 05 22 b4 82 ee 7f 6b 96 81 e7 55 1b 06 77 1b 2c 68 89 03 66 20 be c3 5c c2 d9 01 5a 5d 9f f1 6e b0 f2 76 59 6c 6d 92 2b 49 c9 ec 7d 63 c4 07 e2 9a 3d 59 ac 19 99 d3 b5 ee 4d 83 75 1b 26 83 ba f0 52 b1 b8 51 d5 bc ac ca e5 55 a1 16 89 69 dc 53 ea c3 cf 77 28 9e 77 b2 79 b1 1f 0f f7 61 d7 a9 11 c3 dd df b3 a7 89 79 95 01 db 88 48 1b ef 64 9b 48 c5 32 ed 7d 89 1e d1 37 db f4 3b 6a 56 94 c7 e3 d7 09 74 50 46 d9 3f 01 00 00 Data Ascii: dMOO0G-Z\_UQbuaS2/@g='e4I =5"h3[#HvL3}=F@C.)Y"kUw,hf \Z]nvYlm+I}c=YMu&RQUiSw(wyayHdH2}7;jVtPF?
2023-08-10 21:19:10 UTC	5097	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:10 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:10 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: dfc3fd5f-5a99-4eea-a4c1-c6ba99709212 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: f3baffdb1c814cb5bcb153aa5542040c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
134	192.168.2.3	49975	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	4750	OUT	GET /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5095	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 142 Date: Thu, 10 Aug 2023 21:19:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 6f689295312a4bc1ad670e5a4aa145fd Connection: close
2023-08-10 21:19:10 UTC	5095	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 67 65 74 5f 64 6f 63 5f 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 5f 6c 6f 67 67 65 64 5f 6f 75 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/get_doc_state_and_actions_logged_out": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
135	192.168.2.3	49969	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	4750	OUT	POST /paper/comet/post?r=152644900197624502433053&v=2&id=257359365407097851736353&seq=0&tag=zjo2KktWLcVGFokm1yeoE&xsrf=50aS4zgW2W1XP95GWz4lmdjP&postSeq=2&remark=CLIENT_READY&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 55 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEc Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOu Notes-App-Time: 1691634844000 Notes-Pad-Id: zjo2KktWLcVGFokm1yeoE sec-ch-ua-mobile: ?0 Notes-Socket-Id: 257359365407097851736353 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/octet-stream sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	4824	OUT	Data Raw: 0a 35 1a 33 0a 15 7a 6a 6f 32 4b 6b 74 57 4c 63 56 47 46 6f 6b 6d 31 79 65 6f 45 1a 12 67 2e 32 35 31 63 35 36 32 39 33 61 39 36 66 37 65 33 20 02 30 09 48 0a 50 0b Data Ascii: 53zjo2KktWLcVGFokm1yeoEg.251c56293a96f7e3 0HP
2023-08-10 21:19:10 UTC	5099	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:10 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 9e025227-2520-436c-b3f6-b16735c495ab X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 2 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 2563529e2d2a4b34b9d3637e141088b0 Connection: close
2023-08-10 21:19:10 UTC	5100	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
136	192.168.2.3	49972	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	4824	OUT	OPTIONS /paper/comet/channel?v=2&r=101021215062045305236252&id=257359365407097851736353&channel=streaming&seq=0&create=no&new=yes&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1 Host: 70.comet.dropbox.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: notes-app-time,notes-app-version,notes-pad-id,notes-pad-team-id,notes-socket-id,notes-tab-id Origin: https://www.dropbox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:10 UTC	5118	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Notes-App-Time, Notes-App-Version, Notes-Pad-Id, Notes-Pad-Team-Id, Notes-Socket-Id, Notes-Tab-Id, Notes-Team-Id, Pad-Sharding-Experiment, Create-New-Pad Access-Control-Allow-Origin: https://www.dropbox.com Allow: GET, HEAD, POST, TRACE, OPTIONS Content-Length: 0 Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:10 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Set-Cookie: t=mqNd-tMIlopqhvhmDVhESYfA; Path=/; Domain=dropbox.com; Expires=Sun, 09 Aug 2026 21:19:10 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-ss=V4UeIJQ8as; Path=/; Expires=Sun, 09 Aug 2026 21:19:10 GMT; HttpOnly; Secure; SameSite=Strict Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 34552461-be7d-4f3b-8add-f914bd0eb644 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: b5bee01af6c74ac98814ed814068e50a Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
137	192.168.2.3	49977	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	4888	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5095	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Thu, 10 Aug 2023 21:19:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 37803bee79cd44cd826292df0e72a0eb Connection: close
2023-08-10 21:19:10 UTC	5096	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
138	192.168.2.3	49971	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	4905	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 261 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	4908	OUT	Data Raw: 1f 8b 08 00 dc d2 d5 64 00 ff 4d 90 cb 6a c3 30 10 45 7f a5 cc 5a 2e f1 83 c6 f1 36 7d d2 42 b3 68 9b 45 08 46 48 53 45 8d 3d 32 d2 38 e0 86 fc 7b a4 a6 85 ae 04 67 34 f7 1e 66 73 84 96 a7 01 a1 01 3c 20 31 88 df b7 81 0d 92 d9 5e a9 ce 8d 3a d3 4e 65 06 39 1b d0 f7 36 04 eb 28 64 9f d2 76 a8 e3 c2 e0 5d e4 6c 31 40 73 04 1a fb f7 80 3e bc d2 4a 6a 68 0a 91 c8 d2 11 a1 62 d4 ff 47 33 01 36 2c 53 fe ad 53 d0 b0 1f 51 80 92 8c c6 f9 29 09 91 b9 a4 eb 51 f1 db 45 72 25 63 55 a4 24 0f d6 48 4e 22 6d b0 a4 b0 0d f8 e3 d5 0e d2 60 db b9 54 90 0b 60 db c7 b5 fc 66 91 cf cb 6a 5e d5 d7 e5 a2 8c 99 52 3f c5 39 7c 7f b9 e2 79 cf eb 17 f5 f1 70 ef f6 7d 3e a1 bb fb 3b 41 fa 51 d6 02 82 f2 88 b4 b6 9a 77 31 a9 a8 a3 f6 05 3d a2 35 bb 78 a9 7c 56 54 a7 d3 f6 0c 0b 6d Data Ascii: dMj0EZ.6}BhEFHSE=28{g4fs< 1^:Ne96(dv]l1@s>JjhbG36,SSQ)QEr%cU$HN"m`T`fj^R?9\|yp}>;AQw1=5x\|VTm
2023-08-10 21:19:10 UTC	5158	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:10 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:10 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 5620b222-082e-471f-8208-faff7d13c61a X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: c9f03f044d8f49eba89dfcff5678a1fd Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
139	192.168.2.3	49968	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	4906	OUT	GET /paper/comet/post?r=288161857590172754853666&v=2&id=257359365407097851736353&seq=0&tag=zjo2KktWLcVGFokm1yeoE&xsrf=50aS4zgW2W1XP95GWz4lmdjP&postSeq=1&remark=&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5100	IN	HTTP/1.1 404 Not Found Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:10 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 04cf9dff-85a2-499c-82e3-0314917219ed X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 43 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: dd84a293e288437b8828f1f1ae9196a0 Connection: close
2023-08-10 21:19:10 UTC	5100	IN	Data Raw: 4e 6f 20 73 75 63 68 20 73 6f 63 6b 65 74 2c 20 61 6e 64 2f 6f 72 20 75 6e 6b 6e 6f 77 6e 20 63 68 61 6e 6e 65 6c 20 74 79 70 65 Data Ascii: No such socket, and/or unknown channel type

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.3	49750	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	803	OUT	GET /static/fonts/AtlasGrotesk-SemiItalic-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:56 UTC	1175	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 85632 Connection: close Date: Thu, 10 Aug 2023 21:18:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:35:06 GMT ETag: "d0768f14362ac267f79f96ebb4d3e6c1" Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 49039a44484a184312d8f608c205b640.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: vjT3DA8y0pEiFQ1dZ38tyH9xtFQ46K7jcY7jBGCRa-lXDaSlS2i28A==
2023-08-10 21:18:56 UTC	1175	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 4e 80 00 10 00 00 00 04 e3 e8 00 01 4e 1e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 d8 1c 1c cd 6a 06 60 00 8b 76 08 48 09 82 73 11 08 0a 87 d2 08 86 ee 68 0b 94 2c 00 01 36 02 24 03 a8 54 04 20 05 8f 08 07 ea 42 0c 85 66 5b 04 a7 b4 04 4a 65 ec be 14 ad 0b 8e 3a c0 44 26 1a 55 3b 47 db 16 25 e8 d0 ff 7f 76 09 90 76 f8 91 b6 30 e6 e8 1c 62 0e 2d c2 94 a1 ea 72 fc 06 d3 4d c7 78 11 cf 6d 83 89 3d 40 67 db 3b b3 ff ff ff ff ff ff ff ff ff b7 26 8b d8 4f 7f 77 0e 76 f7 f6 e0 40 11 15 bf 18 3f 24 4d 34 b1 69 5f 5f 4b 82 54 d5 22 d7 48 ee 49 c8 a8 72 66 64 64 66 12 35 8a a4 58 6b 8e 15 79 a2 dc 78 eb f5 8c 84 2a a3 f9 0c 74 d6 2c 80 f5 58 e0 b2 78 f5 bc 12 16 d5 8c d6 a2 64 09 3b 4c 0a 25 60 e0 Data Ascii: wOF2NNj`vHsh,6$T Bf[Je:D&U;G%vv0b-rMxm=@g;&Owv@?$M4i__KT"HIrfddf5Xkyx*t,Xxd;L%`
2023-08-10 21:18:56 UTC	1191	IN	Data Raw: 2f 99 71 97 62 63 c2 be 61 55 ff 67 57 bc 7e 6e 8b 11 7a e9 5c 6e 9a a9 f2 e8 99 9b c8 99 b2 c8 7e 5c 98 ed 35 15 94 79 82 b4 59 9a 5b 66 84 da 07 fb c8 74 c0 f2 fe 9c 72 71 66 0b 86 d9 b3 2e cc b0 c6 f6 d0 14 97 a3 d8 5c da 88 13 67 74 26 27 97 d7 70 74 ab af 79 36 ed 24 78 33 66 92 64 04 b2 d4 2d 01 31 1b 4e f9 09 e6 2c 4b c7 d8 9f e2 5d 8a aa d0 9a c0 6a ee 10 77 1f 2c 90 1d bc db e4 f7 be 3a 93 4d 84 d1 5f 19 8d 79 04 31 03 2a 50 99 fc 9e d3 d1 8e 78 c2 5d ea a7 0b e1 35 e2 f6 45 c0 99 bf 3d e4 35 96 a7 87 9f e9 3d 81 4c 95 8c e0 8b e3 81 cb 17 bb b7 90 0e 37 d5 19 ac 8a 9b 72 0d 41 c7 06 dc e2 d6 bd a6 4c 55 a8 cc 8e 6c f5 19 6f 2a d3 4e a0 3f d3 ad 06 93 69 f1 f5 71 e7 a8 ba e9 09 4c 50 9e b7 b2 22 3e 4d f5 d5 87 a8 32 02 2f 08 de 66 75 02 9d de be Data Ascii: /qbcaUgW~nz\n~\5yY[ftrqf.\gt&'pty6$x3fd-1N,K]jw,:M_y1Px]5E=5=L7rALUloN?iqLP">M2/fu
2023-08-10 21:18:56 UTC	1286	IN	Data Raw: 9a 66 2f 76 77 fc a8 ba c4 8e b1 81 7a ce 52 79 44 8d 15 6d b1 88 f1 ab 86 7e 36 18 d7 cd 61 5d c6 a8 b9 8b bb c8 9b 1f ba dd 52 bf 49 30 65 f6 5c 59 7a f3 93 ce 68 eb 33 3f a9 5d 73 98 eb 19 11 58 af 9a 9e 7a fc ae d6 45 47 c1 cc f4 97 d5 a9 e2 db 3d 62 8c e2 2f d7 30 21 dd 04 3e 8d f6 ec 9d 26 d6 61 71 a1 99 21 a1 de 7a 42 13 42 10 9b 9f 97 da 67 b6 9b 7e d5 0d 45 04 e7 7c a6 8e 77 ef 4b 71 ca e1 3e e2 29 e6 9a f0 62 b6 a4 0a 52 07 3a 12 87 78 d7 48 45 ab f5 97 87 9c 79 96 1a 78 d0 73 d3 4f bd b5 a3 14 4b 8d f2 e5 98 00 dd 82 27 34 71 d6 75 cf 14 86 20 09 21 58 57 d6 4e 3b 06 f8 69 08 76 b1 0c a5 cd 5b 1c 4b 9b d9 d5 a9 1e e5 81 03 ef d2 2f e8 cf ab a5 cf d3 59 54 21 d4 23 0b 6c 6a 4d 94 ae ad da f3 01 61 7b 26 f7 08 10 93 96 b4 bb 59 e2 ae 77 b2 5a a1 Data Ascii: f/vwzRyDm~6a]RI0e\Yzh3?]sXzEG=b/0!>&aq!zBBg~E\|wKq>)bR:xHEyxsOK'4qu !XWN;iv[K/YT!#ljMa{&YwZ
2023-08-10 21:18:56 UTC	1294	IN	Data Raw: f3 3f 53 89 2b 05 e8 49 a8 f7 41 f0 8b 8e 2e 59 4b 08 8f 05 a3 34 8c d9 df 48 3f aa 28 0f 78 9b 0d 09 f4 38 f0 23 3b 5a 2a 26 da ce aa 90 79 07 33 06 4f c9 2d 40 dd c4 d2 70 33 9c 3e ff e3 da 63 e2 81 3b d9 0b 52 92 91 81 a2 ad 5a a1 6a 1a 37 d7 51 41 00 c8 c8 b4 db 08 49 95 87 5c b5 ba 4f e8 17 9d bd 58 19 09 0d ba 92 79 ee e4 85 cc bd eb b8 c0 ce ab d4 15 9a d9 ed 35 13 80 27 66 c4 22 da 80 b3 ec 0d 1b 6a 5b 07 66 cc a0 3b 1f d4 14 2e 27 dc 30 36 53 e5 fc 81 b5 3c 97 f1 17 f4 80 c6 68 6d b4 d6 6f 77 04 b1 1e 27 88 60 b4 b8 98 09 38 8c bd f3 b9 8c 53 15 4f 27 ee d1 5a 59 c4 cc f3 cd be ba 95 de 11 ec be 6b 6c 32 72 66 23 0f 99 43 da 60 ea 84 cd 75 81 3b e7 70 de c5 ad 3b 26 02 f4 cc 91 3e f7 a0 0e 00 c3 f1 38 68 86 4a 94 71 d4 9b ee 95 a0 d9 47 27 13 be Data Ascii: ?S+IA.YK4H?(x8#;Z*&y3O-@p3>c;RZj7QAI\OXy5'f"j[f;.'06S<hmow'`8SO'ZYkl2rf#C`u;p;&>8hJqG'
2023-08-10 21:18:56 UTC	1310	IN	Data Raw: 5d 97 ca 9d 39 55 91 60 ba c2 92 99 97 ec 0f 2d 43 4e 21 81 01 2e 76 b7 de c9 1d 9b 5a b4 d3 90 b2 ed f9 96 33 7e 0b 04 59 88 ba 01 34 3c 18 de 65 4f e6 5b 19 22 5b 2e 72 c6 69 2b 0f 4b 9e 1c 7b 56 ae a3 50 8c cd 75 3e 9c b3 dc d2 0c 32 42 6d d1 08 00 a7 e0 e1 b0 c2 1b d2 9e f1 a5 7d 65 a8 fa 50 13 42 74 0a 0f 94 d2 3c ca 28 37 6d 66 2a 74 8f 6c 94 d1 66 7e fd 28 af 1d 22 80 ee 56 63 04 ad 01 3e 51 b8 67 60 d8 bd 79 e3 fd a7 16 db 4c a3 7b 4d d8 5a 6a 57 79 ec 2f 32 d1 a8 f0 01 67 35 d5 6a d7 0e da d2 9c ca 5e 43 9b c7 a4 d9 55 90 be 50 01 f2 f9 26 72 66 44 b6 bc 6d 93 70 4e e1 d6 2f 58 4e c6 69 47 eb 0d 5d 75 ac fc 62 59 92 c0 6b 11 52 31 0e f6 30 c5 2e e1 80 15 92 ab a4 6e e4 23 0e 69 26 93 43 bd c3 ec 23 0a ba 1b 6c e4 86 6b 4c 0b 4a e6 6f 96 dc a2 33 Data Ascii: ]9U`-CN!.vZ3~Y4<eO["[.ri+K{VPu>2Bm}ePBt<(7mf*tlf~("Vc>Qg`yL{MZjWy/2g5j^CUP&rfDmpN/XNiG]ubYkR10.n#i&C#lkLJo3
2023-08-10 21:18:56 UTC	1311	IN	Data Raw: 23 0f 69 d8 73 01 8a 62 1e 61 8a d6 9b 96 91 21 c7 52 d2 d6 fa a1 9d a6 b6 3c 5a fa 87 06 19 87 fd 6a 1b af b3 d6 1c a4 d0 5f 7c ea 35 77 a8 68 78 d8 5c 7a 1a fa 68 9f ec 4b 09 66 18 33 1f 6d d4 47 82 82 f8 1c 66 e4 9c dd a3 00 41 46 ce 0f a4 5f 9f f9 78 66 c4 4e 28 d5 df 8c a9 13 5e f6 48 fe ce 1d 40 fd 0e e2 7d a2 d1 28 01 16 a0 81 86 0b eb 1a 4c c1 f6 9c c5 77 5b 2c b2 f3 76 c1 0d 6f 5e e3 bd 87 ca 4d 7d 51 0e 2b d8 9c 10 89 46 ad 57 6a 13 65 27 ce a5 f7 8e c6 39 21 8e ad ea 3a 9f a5 0d 22 29 5b 24 35 37 c2 11 c6 ac 30 94 11 61 9d 67 02 34 16 7b 28 05 8b 25 0e 70 e5 05 33 dc 7b 94 49 03 4e 79 23 b4 94 11 c0 f8 76 1b 1a 7c a9 03 08 7c 46 e8 93 32 01 db 3c 14 54 a2 4d 1e 99 90 03 7e 39 1b 18 61 e5 43 40 07 77 76 bd 96 1f 29 20 24 68 df 01 91 0b 00 30 af Data Ascii: #isba!R<Zj_\|5whx\zhKf3mGfAF_xfN(^H@}(Lw[,vo^M}Q+FWje'9!:")[$570ag4{(%p3{INy#v\|\|F2<TM~9aC@wv) $h0
2023-08-10 21:18:56 UTC	1327	IN	Data Raw: 43 62 09 40 28 77 4a 21 ea 57 b3 fa d6 dc 06 7a 32 23 bd 9d 02 50 f5 49 da dc cc fe b6 05 60 9b 16 ec ea 55 d3 5f 80 5a 4b ea c4 ad 8d 12 d4 a7 a6 fe 18 c8 91 b2 7a 3b 76 f7 1e 44 8d 96 1d 1b 72 62 db d4 47 fc 93 d8 d6 9e cc d8 59 20 fb da c7 ff de 1b ea 6c 39 7b f6 d1 0f 7c e6 6d 41 c1 bb 0f fb 31 e1 91 a6 c6 ea d6 a8 23 af 45 04 32 49 c0 a6 b7 ff 76 6d ab f6 09 ca 72 40 66 09 c8 bc 98 26 cd d5 14 2a 1c 1a e1 10 a9 6a 7d eb 96 5f 32 02 a0 58 6f bb 00 54 7b 92 b6 61 e3 9e 8e 54 b0 5d 0b f1 2c 79 12 03 b1 95 d4 89 e8 ba a6 76 35 4b 63 49 ad 5f 9d e3 7e 1e a4 6b 10 55 5a 7e 74 cc 9f d5 ae 7d 37 3c 85 6d 9f ca 8c 4d ac ff 11 64 22 81 4c 8f 52 3f 2a bd 3d 54 72 fb 23 44 1d b1 92 e6 07 49 96 69 c4 a5 fa 0a 64 dd 0f bc 22 73 a2 96 29 88 71 88 75 bb 96 4e 1d 13 Data Ascii: Cb@(wJ!Wz2#PI`U_ZKz;vDrbGY l9{\|mA1#E2Ivmr@f&j}_2XoT{aT],yv5KcI_~kUZ~t}7<mMd"LR?=Tr#DIid"s)quN
2023-08-10 21:18:56 UTC	1365	IN	Data Raw: c0 2d 09 97 3a 88 f6 93 c7 82 a7 c0 46 85 83 55 b6 02 56 5e 1a e2 01 4f f9 81 94 78 99 f1 fe f2 0f 37 22 41 49 c6 c2 8c 3e c4 fc 97 6f 01 ad 3d f9 88 ec 92 35 69 10 fa e4 52 0f d2 a3 80 94 cf 8d ae 93 0d 6c cb a9 14 e4 7f 2f 45 01 d8 43 61 51 ef a1 b1 b1 ac e4 8c 29 b9 35 91 c7 e0 9b 8a 83 6c 87 54 31 21 69 40 5b 61 49 cc 15 8b 98 af 48 c8 09 3e f1 2e e1 cb 96 14 53 c9 a4 92 f3 c4 7c 9a d2 95 f0 5f 2c 8f 7e c8 3d 18 31 27 6c 49 c9 85 a3 a4 1d 4f 8d 81 93 9f 4c 92 62 cc a7 c0 70 f0 55 92 1a 7c 0e 36 a7 81 f7 4b 5e 34 0e 3c 8a 20 32 a5 b4 c7 1b f8 6e c5 6a 2d e0 68 69 f6 6e e5 e4 59 47 11 44 4a 92 4d 13 76 b2 70 71 da ee 52 a1 08 20 88 28 5f 7b 51 21 9c 88 65 6d 68 e5 9a f1 93 c6 12 ba bd 92 cc 3a e9 b2 8d 67 b0 92 cc 47 84 1d ca 7f c8 13 d6 fd cc 03 95 a8 Data Ascii: -:FUV^Ox7"AI>o=5iRl/ECaQ)5lT1!i@[aIH>.S\|_,~=1'lIOLbpU\|6K^4< 2nj-hinYGDJMvpqR (_{Q!emh:gG
2023-08-10 21:18:56 UTC	1381	IN	Data Raw: 03 6f b9 cf fe 6e 39 47 a8 60 fd d1 be 51 a3 9e d4 1c a6 86 7a 6a 59 dc 23 b0 96 dd 24 57 ec 80 39 f1 e6 b0 50 75 8a 62 26 ed 1b 53 22 02 b4 2d 4b 9d d9 da 86 92 a2 4c 74 ed 5c 97 31 52 e6 96 a3 9d 39 b5 31 2f 92 b9 8b 63 3f dd f3 83 47 13 98 ad a9 b8 91 07 a2 15 9c 5d 1b 3e 34 03 fc 92 ab 4e 88 63 8f 3e 8f d3 60 bf 99 47 af 97 97 7a 56 f7 66 ca d9 36 be 9c b5 20 44 5b a7 de bf 7b 06 34 74 5a 93 17 ba 30 38 cb 8f ef 23 e5 20 04 2b 73 64 7a ac 49 c5 fa 4d 9e c8 9a 47 42 46 41 c3 98 cc 39 74 ec 1d be cc 51 a9 ce 0c ed 1f 29 cb 3d 33 87 29 e3 80 e1 e8 d0 4d 53 75 dc 7c 2d 20 16 84 65 6f cf c0 54 a4 7e d5 91 1b ae c7 ac ab 60 7c 20 57 02 51 71 8a 4b 76 35 3a 81 ab 44 77 76 f7 a4 24 80 89 2e e0 b8 61 83 0c d1 af 3f 64 54 67 6e a3 43 f9 e5 99 ce 63 ef 80 06 fd Data Ascii: on9G`QzjY#$W9Pub&S"-KLt\1R91/c?G]>4Nc>`GzVf6 D[{4tZ08# +sdzIMGBFA9tQ)=3)MSu\|- eoT~`\| WQqKv5:Dwv$.a?dTgnCc

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
140	192.168.2.3	49973	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	4907	OUT	GET /paper/comet/channel?v=2&r=830395895254979411890363&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5096	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:10 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 3c726094-643c-4345-8e4a-e3985956534a X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 0 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 4cd6de1d01e5488595fd928be0944ab9 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
141	192.168.2.3	49976	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	4940	OUT	GET /paper/comet/channel?v=2&r=930323713435764188027865&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEc Notes-Pad-Id: zjo2KktWLcVGFokm1yeoE Notes-App-Time: 1691634844000 Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 Notes-Socket-Id: 257359365407097851736353 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5097	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:10 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: bc258dbf-ba9d-4c75-a769-683477e875b1 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 0 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 57326a7c5a0647a9a5e7450fe39b5d3e Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
142	192.168.2.3	49978	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5005	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 967 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryDjQQdq1D1bBgVAQV Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5006	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 44 6a 51 51 64 71 31 44 31 62 42 67 56 41 51 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 44 6a 51 51 64 71 31 44 31 62 42 67 56 41 51 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 44 6a 51 51 64 71 31 44 31 62 42 67 56 41 51 56 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryDjQQdq1D1bBgVAQVContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryDjQQdq1D1bBgVAQVContent-Disposition: form-data; name="t"50aS4zgW2W1XP95GWz4lmdjP------WebKitFormBoundaryDjQQdq1D1bBgVAQVCont
2023-08-10 21:19:10 UTC	5102	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 12 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1d0b0b9780b14c89a93741c9bf300f04 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
143	192.168.2.3	49980	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5100	OUT	POST /web/notifications/retrieve_user HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 67 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" content-type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5102	OUT	Data Raw: 69 73 5f 78 68 72 3d 74 72 75 65 26 74 3d 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 26 63 6f 75 6e 74 3d 31 30 30 26 74 65 6d 70 6c 61 74 65 5f 76 65 72 73 69 6f 6e 3d 35 Data Ascii: is_xhr=true&t=50aS4zgW2W1XP95GWz4lmdjP&count=100&template_version=5
2023-08-10 21:19:10 UTC	5117	IN	HTTP/1.1 403 Forbidden Content-Security-Policy: sandbox allow-forms allow-scripts Content-Type: text/html Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 925 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1b8d5ca72d704b07bc96b317edb5780b Connection: close
2023-08-10 21:19:10 UTC	5117	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 33 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 403</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
144	192.168.2.3	49981	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5102	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5116	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Thu, 10 Aug 2023 21:19:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b3e834e545a04706b56ebad7be82dfaf Connection: close
2023-08-10 21:19:10 UTC	5117	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
145	192.168.2.3	49983	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5105	OUT	POST /alternate_wtl_browser_performance_info HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 690 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5107	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 72 65 66 65 72 72 65 72 3d 26 6e 61 76 69 67 61 74 69 6f 6e 5f 73 74 61 72 74 3d 31 36 39 31 37 33 34 37 33 31 30 32 39 26 75 6e 6c 6f 61 64 5f 65 76 65 6e 74 5f 73 74 61 72 74 3d 30 26 75 6e 6c 6f 61 64 5f 65 76 65 6e 74 5f 65 6e 64 3d 30 26 72 65 64 69 72 65 63 74 5f 73 74 61 72 74 3d 30 26 72 65 64 69 72 65 63 74 5f 65 6e 64 3d 30 26 66 65 74 63 68 5f 73 74 61 72 74 3d 31 36 39 31 37 33 34 37 33 31 30 33 33 26 64 6f 6d 61 69 6e 5f 6c 6f 6f 6b 75 70 5f 73 74 61 72 74 3d 31 36 39 31 37 33 34 37 33 31 30 38 33 26 64 6f 6d 61 69 6e 5f 6c 6f 6f 6b 75 70 5f 65 6e 64 3d 31 36 39 31 37 33 34 37 33 31 30 39 37 26 63 6f 6e 6e 65 63 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&referrer=&navigation_start=1691734731029&unload_event_start=0&unload_event_end=0&redirect_start=0&redirect_end=0&fetch_start=1691734731033&domain_lookup_start=1691734731083&domain_lookup_end=1691734731097&connec
2023-08-10 21:19:10 UTC	5161	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 9 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5c70f55bbcc3422cbf6bae628887b16b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
146	192.168.2.3	49984	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5107	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 634 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5109	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:11 UTC	5175	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 34 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8041f48824c24364b54e6f4fa4e24b8c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
147	192.168.2.3	49985	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5109	OUT	GET /static/img/favicon/favicon-32.png HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:11 UTC	5200	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 497 Connection: close Last-Modified: Fri, 05 Apr 2019 00:05:35 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:19:12 GMT Cache-Control: max-age=60 ETag: "ec2e6e18a914b2bae990f7cc9f8cd4dd" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 179ba4c3ce59451c080c2ed7517bcb96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: GJ_XJIT_yejPwhwHhv_uTw3l2JLbKXXw-z4cgEpJ-PGxgd3h-1QVvw==
2023-08-10 21:19:11 UTC	5201	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 01 b8 49 44 41 54 78 01 ed 94 81 47 43 51 14 c6 df 32 5a 85 42 50 81 08 01 4a 48 90 82 e9 bd 5a 28 11 42 ed ad 2d 40 49 4b c0 42 14 d9 ae 06 26 20 00 fa 17 1a 40 b6 b7 11 64 19 00 41 08 94 25 76 3a df 63 30 9b 6b d7 7d bb d0 e1 c7 b1 77 ce f7 dd bb 7b ef b1 fe 43 39 92 34 61 1d d0 a3 0f f2 be 46 9c 5c 36 fe 64 08 f8 b9 4b 09 8b 28 14 ac b1 4b 33 6c fe 04 d3 2e 14 fd 1a ed 91 a1 30 8b a7 99 6f 18 49 40 4d 1a 3d ba 76 3d cf bb ae 42 bc 27 d0 83 5e e5 38 a1 21 16 b9 66 7e 21 a8 04 7a 5d ba 81 56 af 97 6c 95 a9 43 44 0b d0 82 a6 34 8e 69 8c 1b ee 99 26 1a 35 d3 f4 b5 e1 d1 31 12 b4 c5 ab 7c 47 71 90 c0 03 5e c6 17 60 f6 08 a4 91 a0 15 33 97 b0 ed 19 e2 09 Data Ascii: PNGIHDR szzIDATxGCQ2ZBPJHZ(B-@IKB& @dA%v:c0k}w{C94aF\6dK(K3l.0oI@M=v=B'^8!f~!z]VlCD4i&51\|Gq^`3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
148	192.168.2.3	49982	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5110	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 5379 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5111	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:10 UTC	5163	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 22 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e2a9b260f32f4ce7ab487c5d4049bad8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
149	192.168.2.3	49988	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5120	OUT	GET /paper/emoji/list?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5178	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:10 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:10 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/list X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 59371ef7-9697-4136-bbc9-dcd539533326 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 575663 Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 417ece347996475cac4b25ded0712371 Connection: close
2023-08-10 21:19:11 UTC	5179	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 65 6d 6f 6a 69 73 22 3a 5b 7b 22 63 68 22 3a 22 f0 9f 98 80 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 30 30 22 2c 22 6e 61 6d 65 22 3a 22 67 72 69 6e 6e 69 6e 67 20 66 61 63 65 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 67 72 69 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 98 83 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 30 33 22 2c 22 6e 61 6d 65 22 3a 22 67 72 69 6e 6e 69 6e 67 20 66 61 63 65 20 77 69 74 68 20 62 69 67 20 65 79 65 73 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 6d 6f 75 74 68 20 6f 70 65 6e 20 73 6d 69 6c 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 Data Ascii: {"success":true,"emojis":[{"ch":"","code":"1f600","name":"grinning face","tags":"face grin","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f603","name":"grinning face with big eyes","tags":"face mouth open smile","fitzpatrick":"n/a","se
2023-08-10 21:19:11 UTC	5493	IN	Data Raw: 66 61 63 65 22 2c 22 74 61 67 73 22 3a 22 64 72 6f 6f 6c 69 6e 67 20 66 61 63 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 98 aa 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 32 61 22 2c 22 6e 61 6d 65 22 3a 22 73 6c 65 65 70 79 20 66 61 63 65 22 2c 22 74 61 67 73 22 3a 22 66 61 63 65 20 73 6c 65 65 70 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 98 ae f0 9f 92 a8 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 32 65 2d 31 66 34 61 38 22 2c 22 6e 61 6d 65 22 3a 22 66 61 63 65 20 65 78 68 61 6c 69 6e 67 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 68 61 73 41 6c Data Ascii: face","tags":"drooling face","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f62a","name":"sleepy face","tags":"face sleep","fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f62e-1f4a8","name":"face exhaling","tags":"","hasAl
2023-08-10 21:19:11 UTC	5527	IN	Data Raw: 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 8a f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 34 61 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 6f 6e 63 6f 6d 69 6e 67 20 66 69 73 74 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 63 6c 65 6e 63 68 65 64 20 66 69 73 74 20 68 61 6e 64 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 70 75 6e 63 68 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 8a f0 9f 8f be 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 34 61 2d 31 66 33 66 65 22 2c 22 6e 61 6d 65 22 3a 22 6f 6e 63 6f 6d 69 6e 67 20 66 69 73 74 3a 20 6d 65 64 69 75 6d 2d 64 Data Ascii: ion":"people"},{"ch":"","code":"1f44a-1f3fd","name":"oncoming fist: medium skin tone","tags":"clenched fist hand medium skin tone punch","fitzpatrick":"","section":"people"},{"ch":"","code":"1f44a-1f3fe","name":"oncoming fist: medium-d
2023-08-10 21:19:11 UTC	5590	IN	Data Raw: 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 8c 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 34 63 22 2c 22 6e 61 6d 65 22 3a 22 4f 4b 20 68 61 6e 64 22 2c 22 74 61 67 73 22 3a 22 4f 4b 20 68 61 6e 64 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 8c f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 34 63 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 4f 4b 20 68 61 6e 64 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 4f 4b 20 68 61 6e 64 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 66 69 74 7a 70 61 74 72 69 Data Ascii: zpatrick":"","section":"people"},{"ch":"","code":"1f44c","name":"OK hand","tags":"OK hand","fitzpatrick":"base","section":"people"},{"ch":"","code":"1f44c-1f3fb","name":"OK hand: light skin tone","tags":"OK hand light skin tone","fitzpatri
2023-08-10 21:19:11 UTC	5606	IN	Data Raw: 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f ab b1 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 61 66 31 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 72 69 67 68 74 77 61 72 64 73 20 68 61 6e 64 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f ab b1 f0 9f 8f be 22 2c 22 63 6f 64 65 22 3a 22 31 66 61 66 31 2d 31 66 33 66 65 22 2c 22 6e 61 6d 65 22 3a 22 72 69 67 68 74 77 61 72 64 73 20 68 61 6e 64 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 Data Ascii: :"","section":"people"},{"ch":"","code":"1faf1-1f3fd","name":"rightwards hand: medium skin tone","tags":"","fitzpatrick":"","section":"people"},{"ch":"","code":"1faf1-1f3fe","name":"rightwards hand: medium-dark skin tone","tags":""
2023-08-10 21:19:11 UTC	5622	IN	Data Raw: 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 66 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 22 2c 22 74 61 67 73 22 3a 22 6d 61 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 62 22 Data Ascii: "code":"1f469-1f3ff","name":"woman: dark skin tone","tags":"dark skin tone woman","fitzpatrick":"","section":"people"},{"ch":"","code":"1f468","name":"man","tags":"man","fitzpatrick":"base","section":"people"},{"ch":"","code":"1f468-1f3fb"
2023-08-10 21:19:11 UTC	5638	IN	Data Raw: 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 94 f0 9f 8f bc e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 34 2d 31 66 33 66 63 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 20 62 65 61 72 64 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 94 f0 9f 8f bd e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 34 2d 31 66 33 66 64 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 20 Data Ascii: eople"},{"ch":"","code":"1f9d4-1f3fc-2640","name":"woman: medium-light skin tone beard","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d4-1f3fd-2640","name":"woman: medium skin tone
2023-08-10 21:19:11 UTC	5653	IN	Data Raw: 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b3 f0 9f 8f bf e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 37 33 2d 31 66 33 66 66 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 77 65 61 72 69 6e 67 20 74 75 72 62 61 6e 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 61 6e 20 74 75 72 62 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 95 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 35 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 77 69 74 68 20 68 65 Data Ascii: ,"section":"people"},{"ch":"","code":"1f473-1f3ff-2642","name":"man wearing turban: dark skin tone","tags":"dark skin tone man turban","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d5","name":"woman with he
2023-08-10 21:19:11 UTC	5659	IN	Data Raw: 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b7 f0 9f 8f bb e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 37 37 2d 31 66 33 66 62 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 63 6f 6e 73 74 72 75 63 74 69 6f 6e 20 77 6f 72 6b 65 72 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 63 6f 6e 73 74 72 75 63 74 69 6f 6e 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 20 77 6f 72 6b 65 72 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 b7 f0 9f 8f bc e2 80 8d e2 Data Ascii: "base","section":"people"},{"ch":"","code":"1f477-1f3fb-2640","name":"woman construction worker: light skin tone","tags":"construction light skin tone woman worker","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"
2023-08-10 21:19:11 UTC	5675	IN	Data Raw: 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bc e2 80 8d f0 9f 8d b3 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 63 2d 31 66 33 37 33 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 63 6f 6f 6b 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 63 68 65 66 20 63 6f 6f 6b 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bd e2 80 8d f0 9f 8d b3 22 2c 22 63 6f 64 Data Ascii: k":"","section":"people"},{"ch":"","code":"1f469-1f3fc-1f373","name":"woman cook: medium-light skin tone","tags":"chef cook medium-light skin tone woman","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","cod
2023-08-10 21:19:11 UTC	5691	IN	Data Raw: 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bc e2 80 8d f0 9f 92 bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 63 2d 31 66 34 62 62 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 74 65 63 68 6e 6f 6c 6f 67 69 73 74 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 63 6f 64 65 72 20 64 65 76 65 6c 6f 70 65 72 20 69 6e 76 65 6e 74 6f 72 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 73 6f 66 74 77 61 72 65 20 74 65 63 68 6e 6f 6c 6f 67 69 73 74 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 Data Ascii: "section":"people"},{"ch":"","code":"1f469-1f3fc-1f4bb","name":"woman technologist: medium-light skin tone","tags":"coder developer inventor medium-light skin tone software technologist woman","isAlt":true,"fitzpatrick":"","section":"pe
2023-08-10 21:19:11 UTC	5707	IN	Data Raw: 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 f0 9f 8f bc e2 80 8d f0 9f 9a 92 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 63 2d 31 66 36 39 32 22 2c 22 6e 61 6d 65 22 3a 22 66 69 72 65 66 69 67 68 74 65 72 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 91 f0 9f 8f bd e2 80 8d f0 9f 9a 92 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 31 2d 31 66 33 66 64 2d 31 66 36 39 32 22 2c 22 6e 61 6d Data Ascii: fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d1-1f3fc-1f692","name":"firefighter: medium-light skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9d1-1f3fd-1f692","nam
2023-08-10 21:19:11 UTC	5725	IN	Data Raw: 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a4 b5 f0 9f 8f bc e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 33 35 2d 31 66 33 66 63 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 69 6e 20 74 75 78 65 64 6f 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a4 b5 f0 9f 8f bd e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 33 35 2d 31 66 33 66 64 2d Data Ascii: ue,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f935-1f3fc-2640","name":"woman in tuxedo: medium-light skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f935-1f3fd-
2023-08-10 21:19:11 UTC	5741	IN	Data Raw: 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 9d f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 64 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 65 6c 66 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 61 67 69 63 61 6c 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 9d f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 64 64 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 65 6c 66 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 61 67 69 63 61 6c 20 6d 65 64 69 75 6d 2d 6c Data Ascii: on":"people"},{"ch":"","code":"1f9dd-1f3fb","name":"elf: light skin tone","tags":"light skin tone magical","fitzpatrick":"","section":"people"},{"ch":"","code":"1f9dd-1f3fc","name":"elf: medium-light skin tone","tags":"magical medium-l
2023-08-10 21:19:11 UTC	5757	IN	Data Raw: 69 6e 67 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 61 62 79 20 62 72 65 61 73 74 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 6e 75 72 73 69 6e 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a4 b1 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 33 31 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 62 72 65 61 73 74 2d 66 65 65 64 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 61 62 79 20 62 72 65 61 73 74 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 6e 75 72 73 69 6e 67 22 2c 22 66 69 74 7a 70 61 74 72 Data Ascii: ing: light skin tone","tags":"baby breast light skin tone nursing","fitzpatrick":"","section":"people"},{"ch":"","code":"1f931-1f3fc","name":"breast-feeding: medium-light skin tone","tags":"baby breast medium-light skin tone nursing","fitzpatr
2023-08-10 21:19:11 UTC	5778	IN	Data Raw: 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 81 e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 38 31 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 74 69 70 70 69 6e 67 20 68 61 6e 64 22 2c 22 74 61 67 73 22 3a 22 73 61 73 73 79 20 74 69 70 70 69 6e 67 20 68 61 6e 64 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 81 f0 9f 8f bb e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 38 31 2d 31 66 33 66 62 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 74 69 70 70 69 6e 67 20 68 61 6e 64 3a 20 6c 69 67 68 74 20 73 Data Ascii: "people"},{"ch":"","code":"1f481-2640","name":"woman tipping hand","tags":"sassy tipping hand woman","isAlt":true,"fitzpatrick":"base","section":"people"},{"ch":"","code":"1f481-1f3fb-2640","name":"woman tipping hand: light s
2023-08-10 21:19:11 UTC	5786	IN	Data Raw: 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 99 86 e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 34 36 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 67 65 73 74 75 72 69 6e 67 20 4f 4b 22 2c 22 74 61 67 73 22 3a 22 4f 4b 20 67 65 73 74 75 72 65 20 68 61 6e 64 20 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 99 86 f0 9f 8f bb e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 34 36 2d 31 66 33 66 62 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 67 65 73 74 75 72 69 6e 67 20 4f 4b 3a 20 6c 69 67 68 74 Data Ascii: ,"section":"people"},{"ch":"","code":"1f646-2642","name":"man gesturing OK","tags":"OK gesture hand man","isAlt":true,"fitzpatrick":"base","section":"people"},{"ch":"","code":"1f646-1f3fb-2642","name":"man gesturing OK: light
2023-08-10 21:19:11 UTC	5802	IN	Data Raw: f0 9f 99 8e e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 34 65 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 70 6f 75 74 69 6e 67 22 2c 22 74 61 67 73 22 3a 22 67 65 73 74 75 72 65 20 6d 61 6e 20 70 6f 75 74 69 6e 67 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 99 8e f0 9f 8f bb e2 80 8d e2 99 82 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 34 65 2d 31 66 33 66 62 2d 32 36 34 32 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 70 6f 75 74 69 6e 67 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 67 65 73 74 75 72 65 20 6c 69 67 68 74 20 73 6b 69 6e Data Ascii: ","code":"1f64e-2642","name":"man pouting","tags":"gesture man pouting","isAlt":true,"fitzpatrick":"base","section":"people"},{"ch":"","code":"1f64e-1f3fb-2642","name":"man pouting: light skin tone","tags":"gesture light skin
2023-08-10 21:19:11 UTC	5818	IN	Data Raw: 22 63 6f 64 65 22 3a 22 31 66 34 38 33 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 64 61 6e 63 69 6e 67 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 6e 63 69 6e 67 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 83 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 38 33 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 64 61 6e 63 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 64 61 6e 63 69 6e 67 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 Data Ascii: "code":"1f483-1f3fb","name":"woman dancing: light skin tone","tags":"dancing light skin tone woman","fitzpatrick":"","section":"people"},{"ch":"","code":"1f483-1f3fc","name":"woman dancing: medium-light skin tone","tags":"dancing medium-light
2023-08-10 21:19:11 UTC	5826	IN	Data Raw: 63 68 22 3a 22 f0 9f 91 a8 e2 80 8d f0 9f a6 bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 39 62 63 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 69 6e 20 6d 6f 74 6f 72 69 7a 65 64 20 77 68 65 65 6c 63 68 61 69 72 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bb e2 80 8d f0 9f a6 bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 62 2d 31 66 39 62 63 22 2c 22 6e 61 6d 65 22 3a 22 6d 61 6e 20 69 6e 20 6d 6f 74 6f 72 69 7a 65 64 20 77 68 65 65 6c 63 68 61 69 72 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c Data Ascii: ch":"","code":"1f468-1f9bc","name":"man in motorized wheelchair","tags":"","isAlt":true,"fitzpatrick":"base","section":"people"},{"ch":"","code":"1f468-1f3fb-1f9bc","name":"man in motorized wheelchair: light skin tone","tags":"",
2023-08-10 21:19:11 UTC	5834	IN	Data Raw: 6b 6e 65 65 6c 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a7 8e f0 9f 8f bd e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 63 65 2d 31 66 33 66 64 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 6b 6e 65 65 6c 69 6e 67 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d Data Ascii: kneeling: medium-light skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f9ce-1f3fd-2640","name":"woman kneeling: medium skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"}
2023-08-10 21:19:11 UTC	5850	IN	Data Raw: 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bd 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 ab f0 9f 8f be 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 62 2d 31 66 33 66 65 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 61 6e 64 20 6d 61 6e 20 68 6f 6c 64 69 6e 67 20 68 61 6e 64 73 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f be e2 80 8d f0 9f a4 9d e2 80 8d f0 9f 91 a8 f0 9f 8f bf 22 2c 22 63 6f 64 65 22 Data Ascii: ,"tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f46b-1f3fe","name":"woman and man holding hands: medium-dark skin tone","tags":"","fitzpatrick":"","section":"people"},{"ch":"","code"
2023-08-10 21:19:11 UTC	5858	IN	Data Raw: 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bc e2 80 8d f0 9f a4 9d e2 80 8d f0 9f 91 a8 f0 9f 8f bf 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 63 2d 31 66 39 31 64 2d 31 66 34 36 38 2d 31 66 33 66 66 22 2c 22 6e 61 6d 65 22 3a 22 6d 65 6e 20 68 6f 6c 64 69 6e 67 20 68 61 6e 64 73 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bd e2 80 8d f0 9f a4 9d e2 80 8d f0 9f 91 a8 f0 9f Data Ascii: section":"people"},{"ch":"","code":"1f468-1f3fc-1f91d-1f468-1f3ff","name":"men holding hands: medium-light skin tone dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"
2023-08-10 21:19:11 UTC	5874	IN	Data Raw: 9f 91 a9 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 64 2d 32 37 36 34 2d 31 66 34 36 39 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 63 6f 75 70 6c 65 20 77 69 74 68 20 68 65 61 72 74 3a 20 77 6f 6d 61 6e 20 20 77 6f 6d 61 6e 20 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 20 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 f0 9f 8f bd e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 91 a9 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 33 66 64 2d 32 37 36 34 Data Ascii: ","code":"1f469-1f3fd-2764-1f469-1f3fc","name":"couple with heart: woman woman medium skin tone medium-light skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f469-1f3fd-2764
2023-08-10 21:19:11 UTC	5882	IN	Data Raw: 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bf e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 91 a8 f0 9f 8f bf 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 31 66 33 66 66 2d 32 37 36 34 2d 31 66 34 36 38 2d 31 66 33 66 66 22 2c 22 6e 61 6d 65 22 3a 22 63 6f 75 70 6c 65 20 77 69 74 68 20 68 65 61 72 74 3a 20 6d 61 6e 20 20 6d 61 6e 20 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 8f 22 2c 22 63 Data Ascii: ":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f468-1f3ff-2764-1f468-1f3ff","name":"couple with heart: man man dark skin tone","tags":"","isAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","c
2023-08-10 21:19:11 UTC	5898	IN	Data Raw: 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bf 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 92 8b e2 80 8d f0 9f 91 a8 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 38 2d 32 37 36 34 2d 31 66 34 38 62 2d 31 66 34 36 38 22 2c 22 6e 61 6d 65 22 3a 22 6b 69 73 73 3a 20 6d 61 6e 20 20 6d 61 6e 22 2c 22 74 61 67 73 22 3a 22 63 6f 75 70 6c 65 20 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a8 f0 9f 8f bb e2 80 8d e2 9d a4 ef b8 8f e2 80 8d f0 9f 92 8b e2 80 8d f0 9f 91 Data Ascii: sAlt":true,"fitzpatrick":"","section":"people"},{"ch":"","code":"1f468-2764-1f48b-1f468","name":"kiss: man man","tags":"couple man","isAlt":true,"fitzpatrick":"base","section":"people"},{"ch":"
2023-08-10 21:19:11 UTC	5906	IN	Data Raw: 79 3a 20 6d 61 6e 20 20 6d 61 6e 20 20 67 69 72 6c 20 20 67 69 72 6c 22 2c 22 74 61 67 73 22 3a 22 66 61 6d 69 6c 79 20 67 69 72 6c 20 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 91 a9 e2 80 8d f0 9f 91 a6 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 36 39 2d 31 66 34 36 36 22 2c 22 6e 61 6d 65 22 3a 22 66 61 6d 69 6c 79 3a 20 77 6f 6d 61 6e 20 20 62 6f 79 22 2c 22 74 61 67 73 22 3a 22 62 6f 79 20 66 61 6d 69 6c 79 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 70 65 6f 70 6c 65 22 7d 2c 7b 22 63 68 Data Ascii: y: man man girl girl","tags":"family girl man","isAlt":true,"fitzpatrick":"n/a","section":"people"},{"ch":"","code":"1f469-1f466","name":"family: woman boy","tags":"boy family woman","isAlt":true,"fitzpatrick":"n/a","section":"people"},{"ch
2023-08-10 21:19:11 UTC	5922	IN	Data Raw: 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 90 aa 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 32 61 22 2c 22 6e 61 6d 65 22 3a 22 63 61 6d 65 6c 22 2c 22 74 61 67 73 22 3a 22 64 72 6f 6d 65 64 61 72 79 20 68 75 6d 70 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 90 ab 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 32 62 22 2c 22 6e 61 6d 65 22 3a 22 74 77 6f 2d 68 75 6d 70 20 63 61 6d 65 6c 22 2c 22 74 61 67 73 22 3a 22 62 61 63 74 72 69 61 6e 20 63 61 6d 65 6c 20 68 75 6d 70 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f Data Ascii: ection":"nature"},{"ch":"","code":"1f42a","name":"camel","tags":"dromedary hump","fitzpatrick":"n/a","section":"nature"},{"ch":"","code":"1f42b","name":"two-hump camel","tags":"bactrian camel hump","fitzpatrick":"n/a","section":"nature"},{"ch":"
2023-08-10 21:19:11 UTC	5933	IN	Data Raw: 61 6d 65 22 3a 22 63 68 65 72 72 79 20 62 6c 6f 73 73 6f 6d 22 2c 22 74 61 67 73 22 3a 22 62 6c 6f 73 73 6f 6d 20 63 68 65 72 72 79 20 66 6c 6f 77 65 72 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8c bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 33 63 22 2c 22 6e 61 6d 65 22 3a 22 62 6c 6f 73 73 6f 6d 22 2c 22 74 61 67 73 22 3a 22 66 6c 6f 77 65 72 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6e 61 74 75 72 65 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8c bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 33 62 22 2c 22 6e 61 6d 65 22 3a 22 73 75 6e 66 6c 6f 77 65 72 22 2c 22 74 61 67 73 22 3a 22 66 6c 6f 77 65 72 Data Ascii: ame":"cherry blossom","tags":"blossom cherry flower","fitzpatrick":"n/a","section":"nature"},{"ch":"","code":"1f33c","name":"blossom","tags":"flower","fitzpatrick":"n/a","section":"nature"},{"ch":"","code":"1f33b","name":"sunflower","tags":"flower
2023-08-10 21:19:11 UTC	5949	IN	Data Raw: 2c 22 6e 61 6d 65 22 3a 22 63 6f 6f 6b 65 64 20 72 69 63 65 22 2c 22 74 61 67 73 22 3a 22 63 6f 6f 6b 65 64 20 72 69 63 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6f 6f 64 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8d 98 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 35 38 22 2c 22 6e 61 6d 65 22 3a 22 72 69 63 65 20 63 72 61 63 6b 65 72 22 2c 22 74 61 67 73 22 3a 22 63 72 61 63 6b 65 72 20 72 69 63 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6f 6f 64 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8d a5 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 36 35 22 2c 22 6e 61 6d 65 22 3a 22 66 69 73 68 20 63 61 6b 65 20 77 69 74 68 20 73 77 69 72 6c 22 2c 22 74 61 67 73 22 Data Ascii: ,"name":"cooked rice","tags":"cooked rice","fitzpatrick":"n/a","section":"food"},{"ch":"","code":"1f358","name":"rice cracker","tags":"cracker rice","fitzpatrick":"n/a","section":"food"},{"ch":"","code":"1f365","name":"fish cake with swirl","tags"
2023-08-10 21:19:11 UTC	5965	IN	Data Raw: 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bb 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a4 b8 f0 9f 8f bc e2 80 8d e2 99 80 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 33 38 2d 31 66 33 66 63 2d 32 36 34 30 22 2c 22 6e 61 6d 65 22 3a 22 77 6f 6d 61 6e 20 63 61 72 74 77 68 65 65 6c 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 63 61 72 74 77 68 65 65 6c 20 67 79 6d 6e 61 73 74 69 63 73 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 77 6f 6d 61 6e 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 Data Ascii: kin tone woman","isAlt":true,"fitzpatrick":"","section":"activity"},{"ch":"","code":"1f938-1f3fc-2640","name":"woman cartwheeling: medium-light skin tone","tags":"cartwheel gymnastics medium-light skin tone woman","isAlt":true,"fitzpa
2023-08-10 21:19:11 UTC	5981	IN	Data Raw: 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 84 f0 9f 8f bc 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 34 2d 31 66 33 66 63 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 73 6f 6e 20 73 75 72 66 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 6d 65 64 69 75 6d 2d 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 73 75 72 66 69 6e 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f bc 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 8f 84 f0 9f 8f bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 33 63 34 2d 31 66 33 66 64 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 73 6f 6e 20 73 75 72 66 69 6e 67 3a 20 6d 65 64 69 75 6d 20 73 6b 69 6e 20 74 6f 6e 65 Data Ascii: ivity"},{"ch":"","code":"1f3c4-1f3fc","name":"person surfing: medium-light skin tone","tags":"medium-light skin tone surfing","fitzpatrick":"","section":"activity"},{"ch":"","code":"1f3c4-1f3fd","name":"person surfing: medium skin tone
2023-08-10 21:19:11 UTC	5997	IN	Data Raw: 69 6e 20 62 69 6b 69 6e 67 3a 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 69 63 79 63 6c 65 20 62 69 63 79 63 6c 69 73 74 20 62 69 6b 65 20 63 79 63 6c 69 73 74 20 6d 65 64 69 75 6d 2d 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 6f 75 6e 74 61 69 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 f0 9f 8f be 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a b5 f0 9f 8f bf 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 62 35 2d 31 66 33 66 66 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 73 6f 6e 20 6d 6f 75 6e 74 61 69 6e 20 62 69 6b 69 6e 67 3a 20 64 61 72 6b 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 69 63 79 63 6c 65 20 62 69 63 79 63 Data Ascii: in biking: medium-dark skin tone","tags":"bicycle bicyclist bike cyclist medium-dark skin tone mountain","fitzpatrick":"","section":"activity"},{"ch":"","code":"1f6b5-1f3ff","name":"person mountain biking: dark skin tone","tags":"bicycle bicyc
2023-08-10 21:19:11 UTC	6008	IN	Data Raw: 39 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 73 6f 6e 20 6a 75 67 67 6c 69 6e 67 22 2c 22 74 61 67 73 22 3a 22 62 61 6c 61 6e 63 65 20 6a 75 67 67 6c 65 20 6d 75 6c 74 69 74 61 73 6b 20 73 6b 69 6c 6c 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 61 63 74 69 76 69 74 79 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f a4 b9 f0 9f 8f bb 22 2c 22 63 6f 64 65 22 3a 22 31 66 39 33 39 2d 31 66 33 66 62 22 2c 22 6e 61 6d 65 22 3a 22 70 65 72 73 6f 6e 20 6a 75 67 67 6c 69 6e 67 3a 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 22 2c 22 74 61 67 73 22 3a 22 62 61 6c 61 6e 63 65 20 6a 75 67 67 6c 65 20 6c 69 67 68 74 20 73 6b 69 6e 20 74 6f 6e 65 20 6d 75 6c 74 69 74 61 73 6b 20 73 6b 69 6c 6c 22 2c 22 66 69 74 7a 70 61 74 Data Ascii: 9","name":"person juggling","tags":"balance juggle multitask skill","fitzpatrick":"base","section":"activity"},{"ch":"","code":"1f939-1f3fb","name":"person juggling: light skin tone","tags":"balance juggle light skin tone multitask skill","fitzpat
2023-08-10 21:19:11 UTC	6016	IN	Data Raw: 6e 61 6d 65 22 3a 22 6b 69 63 6b 20 73 63 6f 6f 74 65 72 22 2c 22 74 61 67 73 22 3a 22 6b 69 63 6b 20 73 63 6f 6f 74 65 72 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9a b2 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 62 32 22 2c 22 6e 61 6d 65 22 3a 22 62 69 63 79 63 6c 65 22 2c 22 74 61 67 73 22 3a 22 62 69 6b 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 9b b5 22 2c 22 63 6f 64 65 22 3a 22 31 66 36 66 35 22 2c 22 6e 61 6d 65 22 3a 22 6d 6f 74 6f 72 20 73 63 6f 6f 74 65 72 22 2c 22 74 61 67 73 22 3a 22 6d 6f 74 6f 72 20 73 63 6f 6f 74 65 72 22 Data Ascii: name":"kick scooter","tags":"kick scooter","fitzpatrick":"n/a","section":"travel"},{"ch":"","code":"1f6b2","name":"bicycle","tags":"bike","fitzpatrick":"n/a","section":"travel"},{"ch":"","code":"1f6f5","name":"motor scooter","tags":"motor scooter"
2023-08-10 21:19:11 UTC	6024	IN	Data Raw: 65 22 3a 22 32 36 66 31 22 2c 22 6e 61 6d 65 22 3a 22 75 6d 62 72 65 6c 6c 61 20 6f 6e 20 67 72 6f 75 6e 64 22 2c 22 74 61 67 73 22 3a 22 72 61 69 6e 20 73 75 6e 20 75 6d 62 72 65 6c 6c 61 22 2c 22 68 61 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c 22 7d 2c 7b 22 63 68 22 3a 22 e2 9b b1 ef b8 8f 22 2c 22 63 6f 64 65 22 3a 22 32 36 66 31 22 2c 22 6e 61 6d 65 22 3a 22 75 6d 62 72 65 6c 6c 61 20 6f 6e 20 67 72 6f 75 6e 64 22 2c 22 74 61 67 73 22 3a 22 72 61 69 6e 20 73 75 6e 20 75 6d 62 72 65 6c 6c 61 22 2c 22 69 73 41 6c 74 22 3a 74 72 75 65 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 74 72 61 76 65 6c 22 7d Data Ascii: e":"26f1","name":"umbrella on ground","tags":"rain sun umbrella","hasAlt":true,"fitzpatrick":"n/a","section":"travel"},{"ch":"","code":"26f1","name":"umbrella on ground","tags":"rain sun umbrella","isAlt":true,"fitzpatrick":"n/a","section":"travel"}
2023-08-10 21:19:11 UTC	6040	IN	Data Raw: 72 72 65 6e 63 79 20 64 6f 6c 6c 61 72 20 6d 6f 6e 65 79 20 6e 6f 74 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 b4 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 62 34 22 2c 22 6e 61 6d 65 22 3a 22 79 65 6e 20 62 61 6e 6b 6e 6f 74 65 22 2c 22 74 61 67 73 22 3a 22 62 61 6e 6b 20 62 61 6e 6b 6e 6f 74 65 20 62 69 6c 6c 20 63 75 72 72 65 6e 63 79 20 6d 6f 6e 65 79 20 6e 6f 74 65 20 79 65 6e 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 92 b6 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 62 36 22 2c 22 6e 61 6d 65 22 3a 22 65 75 72 6f 20 62 61 6e 6b Data Ascii: rrency dollar money note","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f4b4","name":"yen banknote","tags":"bank banknote bill currency money note yen","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f4b6","name":"euro bank
2023-08-10 21:19:11 UTC	6056	IN	Data Raw: 22 69 6e 62 6f 78 20 74 72 61 79 22 2c 22 74 61 67 73 22 3a 22 62 6f 78 20 69 6e 62 6f 78 20 6c 65 74 74 65 72 20 6d 61 69 6c 20 72 65 63 65 69 76 65 20 74 72 61 79 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 93 a4 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 65 34 22 2c 22 6e 61 6d 65 22 3a 22 6f 75 74 62 6f 78 20 74 72 61 79 22 2c 22 74 61 67 73 22 3a 22 62 6f 78 20 6c 65 74 74 65 72 20 6d 61 69 6c 20 6f 75 74 62 6f 78 20 73 65 6e 74 20 74 72 61 79 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 6f 62 6a 65 63 74 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 93 a6 22 2c 22 63 6f 64 65 22 3a 22 31 66 34 65 Data Ascii: "inbox tray","tags":"box inbox letter mail receive tray","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f4e4","name":"outbox tray","tags":"box letter mail outbox sent tray","fitzpatrick":"n/a","section":"objects"},{"ch":"","code":"1f4e
2023-08-10 21:19:11 UTC	6072	IN	Data Raw: 63 6f 72 70 69 6f 22 2c 22 74 61 67 73 22 3a 22 73 63 6f 72 70 69 6f 20 73 63 6f 72 70 69 6f 6e 20 7a 6f 64 69 61 63 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 e2 99 90 22 2c 22 63 6f 64 65 22 3a 22 32 36 35 30 22 2c 22 6e 61 6d 65 22 3a 22 53 61 67 69 74 74 61 72 69 75 73 22 2c 22 74 61 67 73 22 3a 22 61 72 63 68 65 72 20 7a 6f 64 69 61 63 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 e2 99 91 22 2c 22 63 6f 64 65 22 3a 22 32 36 35 31 22 2c 22 6e 61 6d 65 22 3a 22 43 61 70 72 69 63 6f 72 6e 22 2c 22 74 61 67 73 22 3a 22 67 6f 61 74 20 7a 6f 64 69 Data Ascii: corpio","tags":"scorpio scorpion zodiac","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"2650","name":"Sagittarius","tags":"archer zodiac","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"2651","name":"Capricorn","tags":"goat zodi
2023-08-10 21:19:11 UTC	6088	IN	Data Raw: 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 86 96 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 39 36 22 2c 22 6e 61 6d 65 22 3a 22 4e 47 20 62 75 74 74 6f 6e 22 2c 22 74 61 67 73 22 3a 22 6e 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 86 97 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 39 37 22 2c 22 6e 61 6d 65 22 3a 22 4f 4b 20 62 75 74 74 6f 6e 22 2c 22 74 61 67 73 22 3a 22 4f 4b 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 86 99 22 2c 22 63 6f 64 Data Ascii: tzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f196","name":"NG button","tags":"ng","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f197","name":"OK button","tags":"OK","fitzpatrick":"n/a","section":"symbols"},{"ch":"","cod
2023-08-10 21:19:11 UTC	6104	IN	Data Raw: 75 74 74 6f 6e 22 2c 22 74 61 67 73 22 3a 22 62 75 74 74 6f 6e 20 67 65 6f 6d 65 74 72 69 63 20 6f 75 74 6c 69 6e 65 64 20 73 71 75 61 72 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 94 b2 22 2c 22 63 6f 64 65 22 3a 22 31 66 35 33 32 22 2c 22 6e 61 6d 65 22 3a 22 62 6c 61 63 6b 20 73 71 75 61 72 65 20 62 75 74 74 6f 6e 22 2c 22 74 61 67 73 22 3a 22 62 75 74 74 6f 6e 20 67 65 6f 6d 65 74 72 69 63 20 73 71 75 61 72 65 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 73 79 6d 62 6f 6c 73 22 7d 2c 7b 22 63 68 22 3a 22 e2 96 aa 22 2c 22 63 6f 64 65 22 3a 22 32 35 61 61 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: utton","tags":"button geometric outlined square","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"1f532","name":"black square button","tags":"button geometric square","fitzpatrick":"n/a","section":"symbols"},{"ch":"","code":"25aa","name":"
2023-08-10 21:19:11 UTC	6120	IN	Data Raw: 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 43 68 69 6c 65 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 a8 f0 9f 87 b3 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 65 38 2d 31 66 31 66 33 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 43 68 69 6e 61 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 a8 f0 9f 87 bd 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 65 38 2d 31 66 31 66 64 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 43 68 72 69 73 74 6d 61 73 20 49 73 6c 61 6e 64 22 2c Data Ascii: name":"flag: Chile","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1e8-1f1f3","name":"flag: China","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1e8-1f1fd","name":"flag: Christmas Island",
2023-08-10 21:19:11 UTC	6136	IN	Data Raw: 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 b8 f0 9f 87 b9 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 66 38 2d 31 66 31 66 39 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 53 c3 a3 6f 20 54 6f 6d c3 a9 20 26 61 6d 70 3b 20 50 72 c3 ad 6e 63 69 70 65 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 22 2c 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 6e 2f 61 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 66 6c 61 67 73 22 7d 2c 7b 22 63 68 22 3a 22 f0 9f 87 b8 f0 9f 87 a6 22 2c 22 63 6f 64 65 22 3a 22 31 66 31 66 38 2d 31 66 31 65 36 22 2c 22 6e 61 6d 65 22 3a 22 66 6c 61 67 3a 20 53 61 75 64 69 20 41 72 61 62 69 61 22 2c 22 74 61 67 73 22 3a 22 66 6c 61 67 Data Ascii: lag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1f8-1f1f9","name":"flag: So Tom & Prncipe","tags":"flag","fitzpatrick":"n/a","section":"flags"},{"ch":"","code":"1f1f8-1f1e6","name":"flag: Saudi Arabia","tags":"flag

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.3	49740	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	803	OUT	GET /static/webpack/production/paper_admin_off_view_only~paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_jasmine_~1ca7a66a.fe9af606aefd018129cf886d5e3f19606dbbddff.r_7xXGcgUUikEzI1NnDXnlonV8WXcPki_QOxR4zMw88.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:56 UTC	1172	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 1215 Connection: close Date: Thu, 10 Aug 2023 21:18:57 GMT Last-Modified: Thu, 10 Aug 2023 03:28:02 GMT ETag: "82d7de85dd6b810a879d57dd51be2e6f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ff571229df9f46b01b0e434bcb36f9e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: X7ptCS9Hde4z1GC5NRF0Lz3ebHSYdta_f1M68JXTtyynTv1Wbwp4aQ==
2023-08-10 21:18:56 UTC	1172	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 db 6e e3 36 10 7d cf 57 18 28 0a 24 8b 95 56 92 6d 45 91 51 a0 97 d7 2d 0a 2c b6 2d fa 24 50 22 65 33 a1 48 95 a4 7c 89 90 fd f6 0e 45 ca 96 1c 05 8d 6b f4 c5 b0 c8 99 33 b7 33 1c d2 cf 36 94 eb 2c 44 7c d3 64 61 8b a9 aa 19 3a a4 25 23 fb 95 f9 f1 d6 52 ec d2 f0 c5 cf a8 26 95 93 8b db 5c 48 4c 64 1a d6 fb 99 12 8c e2 d9 16 c9 5b cf 2b 04 13 32 cb 0a 21 49 96 a1 a2 20 5c df 75 30 69 b8 da 10 ba de e8 34 78 b9 f1 b3 9d 44 75 4d 64 16 92 60 bf 04 b3 15 92 6b ca 3d 46 4a 9d 7a 8b a0 de af 6a a1 a8 a6 82 a7 28 07 03 8d 26 e0 c1 26 74 0a f1 47 f8 88 dc c7 7d af ad 45 0d ca f5 7e 64 e0 09 87 10 5d 5b 34 52 09 99 d6 02 82 25 72 35 b2 17 19 7b 67 18 d3 f6 11 c7 8c 38 cc a4 d5 12 71 55 0a 59 a5 52 68 a4 c9 ed 43 80 c9 fa 0e 04 Data Ascii: Wn6}W($VmEQ-,-$P"e3H\|Ek336,D\|da:%#R&\HLd[+2!I \u0i4xDuMd`k=FJzj(&&tG}E~d][4R%r5{g8qUYRhC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
150	192.168.2.3	49986	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5120	OUT	GET /paper/comet/channel?v=2&r=930323713435764188027865&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5174	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:10 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: a691bc8e-757c-468b-9569-056059ef471f X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 86 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 5b7dd0a49ec144b4bd8ded9f7f9bf8e2 Connection: close
2023-08-10 21:19:11 UTC	5175	IN	Data Raw: 37 33 3a 31 3a 30 3a 7b 22 74 79 70 65 22 3a 22 43 4f 4c 4c 41 42 52 4f 4f 4d 22 2c 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 44 49 53 43 4f 4e 4e 45 43 54 5f 52 45 41 53 4f 4e 22 2c 22 72 65 61 73 6f 6e 22 3a 31 31 7d 7d 38 3a 32 3a 31 3a 6b 69 6c 6c Data Ascii: 73:1:0:{"type":"COLLABROOM","data":{"type":"DISCONNECT_REASON","reason":11}}8:2:1:kill

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
151	192.168.2.3	49987	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5121	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 36450 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5122	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:10 UTC	5138	OUT	Data Raw: 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 64 77 73 2d 70 72 6f 63 65 73 73 43 68 75 6e 6b 2d 65 6d 62 65 64 64 65 64 2d 61 70 70 2d 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 35 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 64 77 73 2d 70 72 6f 63 65 73 73 43 68 75 6e 6b 2d 65 6d 62 65 64 64 65 64 2d 61 70 70 2d 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 35 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 32 34 36 36 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 Data Ascii: ent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22dws-processChunk-embedded-app-const_module-15%22%3A%7B%22name%22%3A%22dws-processChunk-embedded-app-const_module-15%22%2C%22start_time%22%3A2466%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7
2023-08-10 21:19:10 UTC	5154	OUT	Data Raw: 69 64 6c 65 54 69 6d 65 25 32 32 25 33 41 25 32 32 35 36 33 39 2e 30 30 39 39 39 39 39 39 39 38 38 35 25 32 32 25 32 43 25 32 32 62 75 73 79 54 69 6d 65 25 32 32 25 33 41 25 32 32 35 36 36 35 2e 33 39 30 30 30 30 30 30 30 31 33 39 35 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 64 77 73 5f 70 61 67 65 6c 65 74 5f 63 73 73 5f 6c 6f 61 64 65 64 5f 75 73 65 72 2d 63 68 61 74 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 64 77 73 5f 70 61 67 65 6c 65 74 5f 63 73 73 5f 6c 6f 61 64 65 64 5f 75 73 65 72 2d 63 68 61 74 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 Data Ascii: idleTime%22%3A%225639.009999999885%22%2C%22busyTime%22%3A%225665.3900000001395%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22dws_pagelet_css_loaded_user-chat%22%3A%7B%22name%22%3A%22dws_pagelet_css_loaded_user-chat%22%2C%22start_time%22%3A0%2C%22
2023-08-10 21:19:11 UTC	5426	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 33 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 288614b5ca234c4bad191318a22a6988 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
152	192.168.2.3	49990	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5160	OUT	GET /paper/comet/channel?v=2&r=101021215062045305236252&id=257359365407097851736353&channel=streaming&seq=0&create=no&new=yes&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1 Host: 70.comet.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEc Notes-Pad-Id: zjo2KktWLcVGFokm1yeoE Notes-App-Time: 1691634844000 Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 Notes-Socket-Id: 257359365407097851736353 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=50aS4zgW2W1XP95GWz4lmdjP; locale=en
2023-08-10 21:19:11 UTC	5649	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Authorization, Notes-App-Time, Notes-App-Version, Notes-Pad-Id, Notes-Pad-Team-Id, Notes-Socket-Id, Notes-Tab-Id, Notes-Team-Id, Pad-Sharding-Experiment, Create-New-Pad Access-Control-Allow-Origin: https://www.dropbox.com Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/messages; charset=utf-8 Date: Thu, 10 Aug 2023 21:19:11 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:11 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 984d6e69-4ce5-4b46-a6d1-4897f6b16886 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: a0586dee70e84cdda750d97874e3b4e0 Connection: close Transfer-Encoding: chunked
2023-08-10 21:19:11 UTC	5650	IN	Data Raw: 35 65 0d 0a 36 3a 6f 6f 62 3a 6f 6b 37 33 3a 31 3a 30 3a 7b 22 74 79 70 65 22 3a 22 43 4f 4c 4c 41 42 52 4f 4f 4d 22 2c 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 44 49 53 43 4f 4e 4e 45 43 54 5f 52 45 41 53 4f 4e 22 2c 22 72 65 61 73 6f 6e 22 3a 31 31 7d 7d 38 3a 32 3a 31 3a 6b 69 6c 6c 0d 0a Data Ascii: 5e6:oob:ok73:1:0:{"type":"COLLABROOM","data":{"type":"DISCONNECT_REASON","reason":11}}8:2:1:kill

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
153	192.168.2.3	49989	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5166	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 2377 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5167	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:11 UTC	5525	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5779e44f75764e8298c8f1b4772f67d6 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
154	192.168.2.3	49991	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:10 UTC	5169	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 3745 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:10 UTC	5171	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:11 UTC	5535	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 42 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b0f68d50000c4bc0a6ec81d306d2f090 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
155	192.168.2.3	49992	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5190	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 6533 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5191	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:11 UTC	5586	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 18 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 45a55752a0a24e338878c8f4e7261d62 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
156	192.168.2.3	49993	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5198	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 882 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5199	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:11 UTC	5538	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 16 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d36a5026819944deb64662e7186ecab4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
157	192.168.2.3	49994	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5201	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 310980 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5202	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:11 UTC	5218	OUT	Data Raw: 73 25 32 46 25 34 30 64 72 6f 70 62 6f 78 25 32 46 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 25 32 46 62 75 74 74 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 25 34 30 64 72 6f 70 62 6f 78 25 32 46 64 69 67 2d 63 6f 6d 70 6f 6e 65 6e 74 73 25 32 46 62 75 74 74 6f 6e 73 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 32 38 37 32 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 31 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 Data Ascii: s%2F%40dropbox%2Fdig-components%2Fbuttons%22%3A%7B%22name%22%3A%22overhead.metaserver%2Fstatic%2Fprod_assets_web_modules%2F%40dropbox%2Fdig-components%2Fbuttons%22%2C%22start_time%22%3A2872%2C%22total_time%22%3A1%2C%22num_calls%22%3A1%2C%22annotations%22%
2023-08-10 21:19:11 UTC	5234	OUT	Data Raw: 6c 65 73 25 32 46 65 78 65 6e 76 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 33 38 30 32 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 31 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 63 6c 61 73 Data Ascii: les%2Fexenv%22%2C%22start_time%22%3A3802%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22100000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.metaserver%2Fstatic%2Fprod_assets_web_modules%2Fclas
2023-08-10 21:19:11 UTC	5250	OUT	Data Raw: 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 66 69 6c 65 5f 76 69 65 77 65 72 25 32 46 63 6f 6e 73 74 61 6e 74 73 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 34 34 38 39 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 Data Ascii: %7B%22name%22%3A%22overhead.metaserver%2Fstatic%2Fjs%2Ffile_viewer%2Fconstants%22%2C%22start_time%22%3A4489%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C
2023-08-10 21:19:11 UTC	5266	OUT	Data Raw: 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 31 36 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6c 65 61 6e 25 32 46 77 69 6e 64 6f 77 5f 75 74 69 6c 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6c 65 61 6e 25 32 46 77 69 6e 64 6f 77 5f 75 74 69 6c 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 35 34 33 36 25 32 43 25 32 32 74 6f 74 61 6c 5f Data Ascii: lTimeNs%22%3A%221600000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.metaserver%2Fstatic%2Fjs%2Fclean%2Fwindow_util%22%3A%7B%22name%22%3A%22overhead.metaserver%2Fstatic%2Fjs%2Fclean%2Fwindow_util%22%2C%22start_time%22%3A5436%2C%22total_
2023-08-10 21:19:11 UTC	5282	OUT	Data Raw: 74 61 78 6f 6e 6f 6d 79 5f 70 62 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 35 34 36 30 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 31 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 68 71 6c 25 32 46 69 6e 64 65 78 25 32 32 25 33 41 25 37 42 25 32 32 Data Ascii: taxonomy_pb%22%2C%22start_time%22%3A5460%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22100000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.metaserver%2Fstatic%2Fjs%2Fhql%2Findex%22%3A%7B%22
2023-08-10 21:19:11 UTC	5298	OUT	Data Raw: 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6f 72 65 25 32 46 6e 6f 74 69 66 79 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6f 72 65 25 32 46 6e 6f 74 69 66 79 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 35 34 37 30 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 Data Ascii: %2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.metaserver%2Fstatic%2Fjs%2Fcore%2Fnotify%22%3A%7B%22name%22%3A%22execCb.metaserver%2Fstatic%2Fjs%2Fcore%2Fnotify%22%2C%22start_time%22%3A5470%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annota
2023-08-10 21:19:11 UTC	5314	OUT	Data Raw: 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6c 6f 75 64 5f 64 6f 63 73 25 32 46 65 72 72 6f 72 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6c 6f 75 64 5f 64 6f 63 73 25 32 46 65 72 72 6f 72 73 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 35 35 37 37 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 Data Ascii: er%2Fstatic%2Fjs%2Fcloud_docs%2Ferrors%22%3A%7B%22name%22%3A%22overhead.metaserver%2Fstatic%2Fjs%2Fcloud_docs%2Ferrors%22%2C%22start_time%22%3A5577%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22p
2023-08-10 21:19:11 UTC	5330	OUT	Data Raw: 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 33 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6f 6e 74 61 63 74 73 25 32 46 63 6f 6e 74 61 63 74 5f 74 6f 6b 65 6e 5f 73 74 61 74 65 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 63 6f 6e 74 61 63 74 73 25 32 46 63 6f 6e 74 61 63 74 5f 74 6f 6b 65 6e 5f 73 74 Data Ascii: annotations%22%3A%7B%22totalTimeNs%22%3A%22300000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.metaserver%2Fstatic%2Fjs%2Fcontacts%2Fcontact_token_state%22%3A%7B%22name%22%3A%22execCb.metaserver%2Fstatic%2Fjs%2Fcontacts%2Fcontact_token_st
2023-08-10 21:19:11 UTC	5346	OUT	Data Raw: 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 6c 6f 67 67 69 6e 67 25 32 46 68 69 76 65 25 32 46 73 63 68 65 6d 61 73 25 32 46 77 65 62 2d 75 73 65 72 2d 61 63 74 69 6f 6e 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 6c 6f 67 67 69 6e 67 25 32 46 68 69 76 65 25 32 46 73 63 68 65 6d 61 73 25 32 46 77 65 62 2d 75 73 65 72 2d 61 63 74 69 6f 6e 25 32 32 25 32 43 25 32 32 73 Data Ascii: 2%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.metaserver%2Fstatic%2Fjs%2Flogging%2Fhive%2Fschemas%2Fweb-user-action%22%3A%7B%22name%22%3A%22overhead.metaserver%2Fstatic%2Fjs%2Flogging%2Fhive%2Fschemas%2Fweb-user-action%22%2C%22s
2023-08-10 21:19:11 UTC	5362	OUT	Data Raw: 36 30 37 39 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 31 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 75 73 65 72 5f 73 75 72 76 65 79 25 32 46 75 73 65 72 5f 73 75 72 76 65 79 2e 6d 6f 64 75 6c 65 2e 63 73 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 Data Ascii: 6079%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22100000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.metaserver%2Fstatic%2Fjs%2Fuser_survey%2Fuser_survey.module.css%22%3A%7B%22name%22%3A%22
2023-08-10 21:19:11 UTC	5378	OUT	Data Raw: 63 43 62 2e 74 79 70 65 73 63 72 69 70 74 25 32 46 6c 69 62 72 61 72 69 65 73 25 32 46 73 68 61 72 65 64 25 32 46 61 70 65 78 2d 6d 65 74 72 69 63 73 25 32 46 73 72 63 25 32 46 69 6e 64 65 78 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 78 65 63 43 62 2e 74 79 70 65 73 63 72 69 70 74 25 32 46 6c 69 62 72 61 72 69 65 73 25 32 46 73 68 61 72 65 64 25 32 46 61 70 65 78 2d 6d 65 74 72 69 63 73 25 32 46 73 72 63 25 32 46 69 6e 64 65 78 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 36 30 39 32 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 Data Ascii: cCb.typescript%2Flibraries%2Fshared%2Fapex-metrics%2Fsrc%2Findex%22%3A%7B%22name%22%3A%22execCb.typescript%2Flibraries%2Fshared%2Fapex-metrics%2Fsrc%2Findex%22%2C%22start_time%22%3A6092%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7
2023-08-10 21:19:11 UTC	5394	OUT	Data Raw: 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 63 6f 6d 6d 6f 6e 25 32 46 69 6e 64 65 78 2e 65 73 6d 32 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 Data Ascii: %3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.metaserver%2Fstatic%2Fprod_assets_web_modules%2Fcommon%2Findex.esm2%22%3A%7B%22name%22%3A%22overhead.metaserver%2F
2023-08-10 21:19:11 UTC	5410	OUT	Data Raw: 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 74 79 70 65 73 63 72 69 70 74 25 32 46 63 6f 6d 70 6f 6e 65 6e 74 5f 6c 69 62 72 61 72 69 65 73 25 32 46 64 69 67 2d 65 78 70 65 72 69 6d 65 6e 74 61 6c 25 32 46 73 72 63 25 32 46 72 69 63 68 5f 73 6e 61 63 6b 62 61 72 25 32 46 69 6e 64 65 78 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 65 78 65 63 43 62 2e 74 79 70 65 Data Ascii: 3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.typescript%2Fcomponent_libraries%2Fdig-experimental%2Fsrc%2Frich_snackbar%2Findex%22%3A%7B%22name%22%3A%22execCb.type
2023-08-10 21:19:11 UTC	5429	OUT	Data Raw: 32 6f 76 65 72 68 65 61 64 2e 73 70 65 63 74 72 75 6d 25 32 46 69 63 6f 6e 5f 73 74 61 74 75 73 25 32 46 62 75 6e 64 6c 65 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 73 70 65 63 74 72 75 6d 25 32 46 69 63 6f 6e 5f 73 74 61 74 75 73 25 32 46 62 75 6e 64 6c 65 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 36 37 39 34 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 Data Ascii: 2overhead.spectrum%2Ficon_status%2Fbundle%22%3A%7B%22name%22%3A%22overhead.spectrum%2Ficon_status%2Fbundle%22%2C%22start_time%22%3A6794%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%
2023-08-10 21:19:11 UTC	5445	OUT	Data Raw: 32 32 25 33 41 25 32 32 31 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 61 6e 6f 6e 2d 31 34 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 61 6e 6f 6e 2d 31 34 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 31 32 34 33 38 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 Data Ascii: 22%3A%22100000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.anon-14%22%3A%7B%22name%22%3A%22overhead.anon-14%22%2C%22start_time%22%3A12438%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22
2023-08-10 21:19:11 UTC	5461	OUT	Data Raw: 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 31 30 30 30 30 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 75 78 5f 61 6e 61 6c 79 74 69 63 73 25 32 46 65 6c 65 6d 65 6e 74 5f 6f 62 73 65 72 76 65 72 73 25 32 46 6f 62 73 65 72 76 65 72 5f 63 6f 6e 73 74 61 6e 74 73 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 Data Ascii: A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%22100000%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22overhead.metaserver%2Fstatic%2Fjs%2Fux_analytics%2Felement_observers%2Fobserver_constants%22%3A%7B%22name%22%3A%22overhe
2023-08-10 21:19:11 UTC	5477	OUT	Data Raw: 5f 74 68 75 6d 62 5f 6c 6f 61 64 65 72 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6f 76 65 72 68 65 61 64 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 25 32 46 6c 65 67 61 63 79 5f 74 68 75 6d 62 5f 6c 6f 61 64 65 72 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 31 35 35 35 32 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 Data Ascii: _thumb_loader%22%3A%7B%22name%22%3A%22overhead.metaserver%2Fstatic%2Fjs%2Fuser_notifications%2Flegacy_thumb_loader%22%2C%22start_time%22%3A15552%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22pare
2023-08-10 21:19:11 UTC	5509	OUT	Data Raw: 33 41 31 35 38 33 38 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 30 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e 6e 6f 74 61 74 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 6f 74 61 6c 54 69 6d 65 4e 73 25 32 32 25 33 41 25 32 32 30 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 31 25 37 44 25 32 43 25 32 32 65 78 65 63 43 62 2e 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 25 32 46 25 34 30 6a 75 67 67 6c 65 25 32 46 72 65 73 69 7a 65 2d 6f 62 73 65 72 76 65 72 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d Data Ascii: 3A15838%2C%22total_time%22%3A0%2C%22num_calls%22%3A1%2C%22annotations%22%3A%7B%22totalTimeNs%22%3A%220%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A1%7D%2C%22execCb.metaserver%2Fstatic%2Fprod_assets_web_modules%2F%40juggle%2Fresize-observer%22%3A%7B%22nam
2023-08-10 21:19:12 UTC	6173	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 176 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4da08c9c0d1245c9aa622ca7334e5586 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
158	192.168.2.3	49995	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5540	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 42148 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5542	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:11 UTC	5558	OUT	Data Raw: 79 70 65 25 32 32 25 33 41 32 25 37 44 25 32 43 25 32 32 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 70 61 63 6b 61 67 65 64 25 32 46 70 6b 67 2d 63 6f 72 65 75 69 2d 61 64 64 69 74 69 6f 6e 61 6c 2e 6d 69 6e 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 70 61 63 6b 61 67 65 64 25 32 46 70 6b 67 2d 63 6f 72 65 75 69 2d 61 64 64 69 74 69 6f 6e 61 6c 2e 6d 69 6e 25 32 32 25 32 43 25 32 32 73 74 61 72 74 5f 74 69 6d 65 25 32 32 25 33 41 32 33 34 33 25 32 43 25 32 32 74 6f 74 61 6c 5f 74 69 6d 65 25 32 32 25 33 41 33 30 32 31 25 32 43 25 32 32 6e 75 6d 5f 63 61 6c 6c 73 25 32 32 25 33 41 31 25 32 43 25 32 32 61 6e Data Ascii: ype%22%3A2%7D%2C%22metaserver%2Fstatic%2Fjs%2Fpackaged%2Fpkg-coreui-additional.min%22%3A%7B%22name%22%3A%22metaserver%2Fstatic%2Fjs%2Fpackaged%2Fpkg-coreui-additional.min%22%2C%22start_time%22%3A2343%2C%22total_time%22%3A3021%2C%22num_calls%22%3A1%2C%22an
2023-08-10 21:19:11 UTC	5574	OUT	Data Raw: 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 73 63 72 69 70 74 25 32 32 25 32 43 25 32 32 63 61 63 68 65 64 25 32 32 25 33 41 25 32 32 66 61 6c 73 65 25 32 32 25 37 44 25 32 43 25 32 32 70 61 72 65 6e 74 25 32 32 25 33 41 25 32 32 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 32 25 37 44 25 32 43 25 32 32 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 75 78 5f 61 6e 61 6c 79 74 69 63 73 25 32 46 65 6c 65 6d 65 6e 74 5f 6f 62 73 65 72 76 65 72 73 25 32 46 6d 75 74 61 74 69 6f 6e 5f 6f 62 73 65 72 76 65 72 2e 6d 69 6e 25 32 32 25 33 41 25 37 42 25 32 32 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6d 65 74 61 73 65 72 76 65 72 25 32 46 73 74 61 74 69 63 25 32 46 6a 73 25 32 46 75 78 5f 61 6e 61 6c Data Ascii: %3A%7B%22type%22%3A%22script%22%2C%22cached%22%3A%22false%22%7D%2C%22parent%22%3A%22%22%2C%22type%22%3A2%7D%2C%22metaserver%2Fstatic%2Fjs%2Fux_analytics%2Felement_observers%2Fmutation_observer.min%22%3A%7B%22name%22%3A%22metaserver%2Fstatic%2Fjs%2Fux_anal
2023-08-10 21:19:11 UTC	5931	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 22 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8ec2323993574eb7a775eb4c14c89f86 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
159	192.168.2.3	49996	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5583	OUT	POST /alternate_wtl HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 2154 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5584	OUT	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 5f 74 79 70 65 3d 6e 61 76 69 67 61 74 65 26 73 65 72 76 65 72 5f 72 65 71 75 65 73 74 5f 73 74 61 72 74 5f 74 69 6d 65 3d 31 36 39 31 37 30 32 33 33 32 39 31 36 26 65 78 74 72 61 5f 63 6f 6c 75 6d 6e 73 3d 25 37 42 25 32 32 6c 6f 67 5f 73 6f 75 72 63 65 25 32 32 25 33 41 25 32 32 6c 6f 61 64 5f 65 6e 64 25 32 32 25 32 43 25 32 32 73 75 62 74 79 70 65 73 25 32 32 25 33 41 25 32 32 25 37 42 25 35 43 25 32 32 64 6f 63 5f 74 79 70 65 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 70 61 70 65 72 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 70 6c 61 74 66 6f 72 6d 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 74 74 69 5f 66 6c 6f 77 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 63 Data Ascii: navigation_type=navigate&server_request_start_time=1691702332916&extra_columns=%7B%22log_source%22%3A%22load_end%22%2C%22subtypes%22%3A%22%7B%5C%22doc_type%5C%22%3A%5C%22paper%5C%22%2C%5C%22platform%5C%22%3A%5C%22web%5C%22%2C%5C%22tti_flow%5C%22%3A%5C%22c
2023-08-10 21:19:11 UTC	5723	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5846cb78d72f49daab28150beb5488d4 Connection: close
2023-08-10 21:19:11 UTC	5725	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.3	49742	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	804	OUT	GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_influencer~paper_native_desktop~paper_pifs~paper_te~b48e404f.fe9af606aefd018129cf886d5e3f19606dbbddff.U3P7jv3GEaRkYi8e_Tzgd_iua_HB6JPDDd6wz0Flp6g.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:56 UTC	1171	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 181 Connection: close Date: Thu, 10 Aug 2023 21:18:57 GMT Last-Modified: Thu, 10 Aug 2023 03:28:13 GMT ETag: "6bf47adc17b49450f9b48de8b1159c36" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fa2f998214db1c6c6bdb96ceff3ce5d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: RXPuGIRiMVqBhLIHlyE60j83p6l7RmlDiWsU15N92fXRjItIyNBhcQ==
2023-08-10 21:18:56 UTC	1172	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 3d 8b bd 0a c2 30 14 46 77 9f 42 70 eb d0 36 5a 4b 2b b8 38 eb a2 38 87 24 f7 5e 89 b6 49 c8 8f 28 62 9f 5d 87 e8 78 ce 77 be 92 1b 7b d2 80 52 f8 5d 8a d1 1a 3e 3e af 0f e4 ec 35 20 c5 4d fd 9e cd aa 62 31 0f 36 79 85 07 e1 9c 36 97 f3 71 bf 75 c2 a1 e7 52 1b 40 3f 65 48 06 06 cc a0 06 9b 80 83 55 21 0b 6d 68 48 68 d4 3f 37 22 ea 3b 72 c0 70 8b d6 65 e9 34 fd 0e 11 27 d9 74 d8 d4 0d 95 84 bd a0 b6 6e 05 12 d4 ac 63 cb 5e 51 d7 b5 b0 c6 15 b1 fe 3b 80 94 00 44 a5 0a a1 1c 85 2b aa 0f 3a 13 07 c5 d8 00 00 00 Data Ascii: =0FwBp6ZK+88$^I(b]xw{R]>>5 Mb16y6quR@?eHU!mhHh?7";rpe4'tnc^Q;D+:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
160	192.168.2.3	49997	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5589	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 329 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5590	OUT	Data Raw: 1f 8b 08 00 dd d2 d5 64 00 ff 8d 91 4f 6f e2 40 0c c5 bf 4a 35 e7 a4 4a 02 0a 90 63 a1 bb 5d 6d 25 38 d0 72 40 28 1a 66 4c 32 1b 62 87 99 09 e2 8f f8 ee 38 50 24 8e 7b 1a e5 e7 67 3b ef 79 79 16 b9 3f 36 20 32 01 7b 40 2f 82 9f 37 13 4b c0 62 f5 a2 b6 d4 ea 50 93 72 61 29 51 6f 21 d4 96 9a 35 1d c2 8d 95 35 84 35 38 27 0b e0 be 86 39 58 6f c0 89 ec 2c b0 ad bf 1c 58 37 c5 99 d4 22 4b 82 8e 8c 09 11 94 07 fd 5c 8a 02 61 dc b8 5b 33 21 25 32 6f 5b 08 44 49 8e 65 0f fa 87 65 62 f2 76 9a a7 6e 1d c5 07 37 ad 06 e8 a3 1d 54 29 ef b5 b0 6b e1 bf d5 52 79 43 c8 82 27 63 48 de 6c 8c 92 5d 25 54 d4 a2 0f 15 9b 2d 40 73 03 63 28 c8 1e bb 84 b0 b8 fb d4 ad f2 f3 7b 6a 33 c9 a6 99 a2 dc 9b e2 36 c1 e5 ce a0 82 dc 71 32 fc 99 37 1c 4f be a5 ce 6a 1c 08 6f 6a 6e 8b d3 Data Ascii: dOo@J5Jc]m%8r@(fL2b8P${g;yy?6 2{@/7KbPra)Qo!5558'9Xo,X7"K\a[3!%2o[DIeebvn7T)kRyC'cHl]%T-@sc({j36q27Ojojn
2023-08-10 21:19:11 UTC	5767	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:11 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:11 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: b64c71c2-9d5f-41b2-a74a-f4e03e6508cb X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 2d65e2efabcf490fb87d4ce380604769 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
161	192.168.2.3	49998	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5646	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1446 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5647	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:11 UTC	5768	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 9 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2332352ff1e24c72b19668561a4c2463 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
162	192.168.2.3	50000	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5650	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 849 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5652	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:11 UTC	5775	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 12 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c5b76c68525c49cd9e16249d4c1334c5 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
163	192.168.2.3	49999	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5651	OUT	GET /paper/comet/post?r=152644900197624502433053&v=2&id=257359365407097851736353&seq=0&tag=zjo2KktWLcVGFokm1yeoE&xsrf=50aS4zgW2W1XP95GWz4lmdjP&postSeq=2&remark=CLIENT_READY&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5771	IN	HTTP/1.1 404 Not Found Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:11 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 094faa0f-17f1-4c23-b866-786f61bb5ec6 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 43 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 20c5a9ed59b74c408481c7bc087b8e5a Connection: close
2023-08-10 21:19:11 UTC	5772	IN	Data Raw: 4e 6f 20 73 75 63 68 20 73 6f 63 6b 65 74 2c 20 61 6e 64 2f 6f 72 20 75 6e 6b 6e 6f 77 6e 20 63 68 61 6e 6e 65 6c 20 74 79 70 65 Data Ascii: No such socket, and/or unknown channel type

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
164	192.168.2.3	50003	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5765	OUT	GET /static/img/favicon/favicon-32.png HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:11 UTC	5766	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 497 Connection: close Last-Modified: Fri, 05 Apr 2019 00:05:35 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:19:12 GMT Cache-Control: max-age=60 ETag: "ec2e6e18a914b2bae990f7cc9f8cd4dd" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2aefdd231d9806ea2eced3399f411f80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: tCxC5XVjp48D_-QWMD9uh9wGYzMBfmJay8MZFfpz8pST62AAcmyxjw==
2023-08-10 21:19:11 UTC	5766	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 01 b8 49 44 41 54 78 01 ed 94 81 47 43 51 14 c6 df 32 5a 85 42 50 81 08 01 4a 48 90 82 e9 bd 5a 28 11 42 ed ad 2d 40 49 4b c0 42 14 d9 ae 06 26 20 00 fa 17 1a 40 b6 b7 11 64 19 00 41 08 94 25 76 3a df 63 30 9b 6b d7 7d bb d0 e1 c7 b1 77 ce f7 dd bb 7b ef b1 fe 43 39 92 34 61 1d d0 a3 0f f2 be 46 9c 5c 36 fe 64 08 f8 b9 4b 09 8b 28 14 ac b1 4b 33 6c fe 04 d3 2e 14 fd 1a ed 91 a1 30 8b a7 99 6f 18 49 40 4d 1a 3d ba 76 3d cf bb ae 42 bc 27 d0 83 5e e5 38 a1 21 16 b9 66 7e 21 a8 04 7a 5d ba 81 56 af 97 6c 95 a9 43 44 0b d0 82 a6 34 8e 69 8c 1b ee 99 26 1a 35 d3 f4 b5 e1 d1 31 12 b4 c5 ab 7c 47 71 90 c0 03 5e c6 17 60 f6 08 a4 91 a0 15 33 97 b0 ed 19 e2 09 Data Ascii: PNGIHDR szzIDATxGCQ2ZBPJHZ(B-@IKB& @dA%v:c0k}w{C94aF\6dK(K3l.0oI@M=v=B'^8!f~!z]VlCD4i&51\|Gq^`3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
165	192.168.2.3	50004	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5772	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1903 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	5773	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:19:11 UTC	6152	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 27 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: e231ac5093004fc09972ce7578cd19e5 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
166	192.168.2.3	50001	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5775	OUT	GET /alternate_wtl_browser_performance_info HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	6149	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d26eac70066448ed87dd15be9dea6d79 Connection: close
2023-08-10 21:19:11 UTC	6149	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
167	192.168.2.3	50002	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	5930	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	6150	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c994b16691b6482eb2bc332ff3d0ff2c Connection: close
2023-08-10 21:19:11 UTC	6151	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
168	192.168.2.3	50005	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	6005	OUT	GET /alternate_wtl HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6154	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f9b80c2ba3714b29be595d3ce96bcde1 Connection: close
2023-08-10 21:19:12 UTC	6155	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
169	192.168.2.3	50006	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	6006	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 326 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	6007	OUT	Data Raw: 1f 8b 08 00 de d2 d5 64 00 ff 8d 91 4f 6f e2 40 0c c5 bf 4a 35 e7 a4 4a 52 96 b4 39 16 da 6d d5 4a 70 a0 e5 80 50 34 cc 98 64 36 c4 0e 33 13 c4 1f f1 dd 71 a0 ac 38 f6 34 ca cf cf 76 de f3 ec 20 72 bf 6b 40 64 02 36 80 5e 04 3f 6f 26 66 80 c5 fc 4e ad a8 d5 a1 26 e5 c2 52 a2 5e 41 a8 2d 35 0b da 86 4b 2b 6b 08 6b 70 4e 16 c0 7d 0d 73 b0 de 80 13 d9 41 60 5b 7f 39 b0 6e 84 63 a9 45 96 04 1d 19 10 22 28 0f fa b6 14 05 c2 b8 41 b7 66 48 4a 64 de b6 10 88 92 1c cb ae f4 9d 65 62 f8 bc 9f f4 dd 22 8a b7 6e 54 a5 e8 a3 35 54 7d de 6b 61 dd c2 af d5 52 79 43 c8 82 1b 63 48 de 2c 8d 92 5d 25 54 d4 a2 0f 15 9b 2d 40 73 03 63 28 c8 ee ba 84 b0 b8 f8 d4 ad f2 93 4b 6a 63 c9 a6 99 a2 dc 98 e2 3c c1 e5 ce a0 82 dc 71 32 fc 99 37 1c 4f be a2 ce 6a 1c 08 6f 6a 6e 8b fb Data Ascii: dOo@J5JR9mJpP4d63q84v rk@d6^?o&fN&R^A-5K+kkpN}sA`[9ncE"(AfHJdeb"nT5T}kaRyCcH,]%T-@sc(Kjc<q27Ojojn
2023-08-10 21:19:12 UTC	6161	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:12 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:12 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 051d7cfd-92dc-4128-aa1a-d2311c76203e X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: a18bb542bb4a4229a447ef5234234fe7 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.3	49756	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	805	OUT	GET /static/fonts/AtlasGrotesk-Bold-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:55 UTC	806	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 78992 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:19 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:15:23 GMT Cache-Control: max-age=43200 ETag: "cbda27012ef85af41a43b5f63f8f01de" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 df9ce120cad525bdb160f75cd7b807c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: ogZD6oSXRG9shLWXGNDfs_DJRgvQm2ftKdw-WhbhGCb-dcrGxqD1hA== Age: 213
2023-08-10 21:18:55 UTC	807	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 34 90 00 10 00 00 00 04 95 5c 00 01 34 30 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 9d 74 1c d3 66 06 60 00 95 7c 08 3e 09 82 73 11 0c 0a 86 de 40 86 81 48 0b 94 34 00 01 36 02 24 03 a8 64 04 20 05 90 30 07 eb 00 0c 84 54 5b 9c 5b 94 0f ff 36 c6 de 6f 6d a0 86 a0 a8 5a 55 77 7d 8a 98 ec 2d 14 28 f6 3f f0 19 72 8d fd 1a c0 25 6a d9 35 3c 82 5f ab a6 68 f2 2b e8 e9 0a 8b c8 5d 6f 56 ea b8 2c c3 df d6 ec ff ff ff ff ff ff ff 7f 5d 32 11 73 9e e4 e6 24 39 71 1e 92 a6 5f 80 42 7f d6 8d 8d 81 46 e9 41 99 51 bb 9e 9b 92 5a a7 17 6a b9 ed 44 cf 1e 6e 70 90 18 3c 5e 32 3c 88 cc 10 14 66 d9 07 8a 9a e0 d8 38 6a 9b 4a 38 d6 32 07 a3 9d bb 0d 32 02 db 1d 6a ec a7 56 1d 67 f4 69 87 45 35 ea c4 eb 06 14 Data Ascii: wOF24\40tf`\|>s@H46$d 0T[[6omZUw}-(?r%j5<_h+]oV,]2s$9q_BFAQZjDnp<^2<f8jJ822jVgiE5
2023-08-10 21:18:55 UTC	822	IN	Data Raw: de a5 58 d7 15 6e 7d 97 aa a9 cb b6 b7 cb b1 bf 2b 58 5b 97 ab bd cb d3 d1 e5 af b3 cb d3 d5 e5 af bb cb d5 d3 15 ec 60 17 bb f2 8a 42 b6 68 44 7a 18 4a d9 0e 5d 62 46 f6 96 d1 73 ad 31 73 9d d1 73 bd 31 b3 de c8 ec 37 4e 1e b1 aa fc 68 0e dd 37 c7 1e 98 43 ff 9b e3 e5 18 ab 0c 37 3e 08 5d 51 d4 77 0a 04 57 dd 29 cb 64 59 3a 7d 40 cf d9 c1 94 2e ad ce f2 c9 32 9d 43 6f 9a 70 31 96 d1 7e db 03 92 a4 2c e5 e9 51 92 55 a1 aa fc 61 3e f4 7a cc f4 01 c0 61 3c aa 63 1e 40 72 4c b7 f8 d2 fa e0 5b f7 80 7e f3 a1 75 c7 8f 8c b5 83 21 18 f3 77 15 e0 5e 0b c8 81 51 38 c3 c1 c6 21 70 a2 9f 6d ba 99 cf 64 0c 4c ec 00 1e 73 bf 6e aa ef 01 1e 0c a0 ce bc e4 da 66 ae f1 d1 38 5c 60 a9 79 56 14 fc 00 f0 1d a1 fb 4d 00 7e f0 27 6b 30 04 8e 3d f2 7a b6 ec 8d 78 0c 38 f8 62 Data Ascii: Xn}+X[`BhDzJ]bFs1ss17Nh7C7>]QwW)dY:}@.2Cop1~,QUa>za<c@rL[~u!w^Q8!pmdLsnf8\`yVM~'k0=zx8b
2023-08-10 21:18:55 UTC	838	IN	Data Raw: f2 f9 e0 60 75 fe f1 c6 b2 c9 87 c2 27 63 6f 39 2f c7 a8 b8 15 36 53 29 a7 64 dc d5 4c f0 6d 10 32 17 9c 14 c0 93 e0 b4 04 3e 58 9c 9d d0 05 ca 0b d6 c3 ad 4b da a5 a1 9d 07 bc f0 7a fa bd ee 3c 5b 9d bf 6e 8f d6 0b f7 3f 9e 8e 1d 8e 0c 79 1a 00 80 ac 01 40 8e e4 00 b2 1b e2 38 00 00 42 14 88 a7 14 6a 91 da b6 12 b5 c7 88 f0 d5 00 2b d5 c2 72 61 05 8a a4 9f 22 ff cc 1c ed 8c 2c 59 b1 e5 c4 99 0f 3f a1 84 62 c4 8a 13 2f 41 86 7c 05 2a 4c e0 40 36 1a b6 55 87 6e bd 4f e8 75 3e 60 d0 b0 f1 89 9d b4 64 d7 81 73 7c 02 93 84 44 a4 56 76 99 cd 1b 1e 7c 15 92 07 8b c3 13 c9 72 0d aa d5 d9 9e 21 7c 2c 91 ca 34 64 5b da 5f da a1 46 43 9b 33 f4 0e 95 46 67 58 9d 01 7f f9 4e 69 ec ce 00 5d 58 88 e0 a5 2a 1c 22 0a 53 8a c1 0f 25 0d 2d 1d 3d 03 17 37 0f 2f 9f f9 19 a2 Data Ascii: `u'co9/6S)dLm2>XKz<[n?y@8Bj+ra",Y?b/A\|L@6UnOu>`ds\|DVv\|r!\|,4d[_FC3FgXNi]X"S%-=7/
2023-08-10 21:18:55 UTC	854	IN	Data Raw: ab cd 73 84 f2 d4 ff cf cd a4 7e 1c f8 5d 94 9a 63 ec 8c 3a 73 0d 45 a1 af a6 96 a4 30 b8 68 f8 5c d0 f8 27 a6 96 c3 99 06 58 41 de ce aa 55 98 97 51 d5 d2 5e e7 67 58 2f 37 7a 8b 78 d4 bf 9d 41 a0 32 dd 29 e7 91 30 71 3e 54 cc 75 63 aa 70 af 66 59 b6 e9 0b 6d 86 d2 f3 65 14 72 a7 c1 1c 21 48 2f fb b0 2b bc e4 93 43 7c 7d f4 86 f2 79 33 37 ab 6a 57 94 60 56 ff 59 36 e2 7a dd 70 1d f0 bd 30 5c 37 2c ed 72 18 3c 9b 03 58 c0 20 e3 d5 15 1a 72 5c 52 d2 a8 84 08 03 e8 6c 0d 0d 53 f2 76 6e e2 a8 da 61 6e 55 c1 a0 b7 91 3a 14 a5 a5 36 ef 81 69 cc 75 b9 74 a9 f3 3a 64 a5 4d a7 c5 06 2f 63 11 ec 62 75 41 0f 06 d6 05 a7 14 a2 5c 8b 30 c8 d9 9b 01 1d 0e d0 2d bb 46 04 8d 4a cf 05 60 eb 34 0f 1e af 70 4b 39 06 a2 62 f1 42 96 1d 73 02 55 2a 15 61 2a d5 40 84 a2 33 56 Data Ascii: s~]c:sE0h\'XAUQ^gX/7zxA2)0q>TucpfYmer!H/+C\|}y37jW`VY6zp0\7,r<X r\RlSvnanU:6iut:dM/cbuA\0-FJ`4pK9bBsUa@3V
2023-08-10 21:18:55 UTC	870	IN	Data Raw: af 87 be 13 50 87 4e c2 1f ba 70 bf 19 01 21 a6 b1 e6 a1 d2 24 58 52 ee 35 c5 ac 1c 38 84 13 49 eb d0 69 eb cf a5 aa b6 99 6c 3c d0 4f a1 3c ed c9 4f ca 0f be 36 50 b9 a8 81 ec 5a fa 9f 2d 89 ff 76 e0 6b 4e db 4b 18 93 89 18 9b b7 1d 18 b5 08 81 f5 ed de e0 be 37 2f 5b 2c 56 bc 27 7c 72 fa 09 91 88 e9 3f 8d d6 aa 5e f7 fc ea bd ab 78 8f f7 8e 76 d9 dd fc 62 0b b3 59 ec e8 ff 9a 9f 1c 5f e8 ff 1f fa c3 aa 5f 78 27 37 1a 2e 53 fe 9e 73 b0 e6 e0 74 b1 f5 7e 51 4c d4 a9 83 26 1d 36 37 9e 09 d1 89 19 2d 70 cb 24 bf 2d c3 cf da 98 62 79 a2 8e dd d1 0e c5 c2 c2 c2 c2 9a 58 13 0b 3b b1 58 da 76 16 dd b4 3c 52 c0 72 05 89 41 b5 66 96 c2 7c 96 cf dd ac 0b a6 02 88 e1 aa 46 ca d6 5e 4d 79 09 aa 44 c2 05 ec a2 f8 50 a5 12 1f 0f 3e 76 cc 78 59 94 8e 5a 3f 4c 42 a0 69 Data Ascii: PNp!$XR58Iil<O<O6PZ-vkNK7/[,V'\|r?^xvbY__x'7.Sst~QL&67-p$-byX;Xv<RrAf\|F^MyDP>vxYZ?LBi

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
170	192.168.2.3	50008	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	6007	OUT	GET /paper/comet/channel?v=2&r=463197031499690454895468&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEc Notes-Pad-Id: zjo2KktWLcVGFokm1yeoE Notes-App-Time: 1691634844000 Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 Notes-Socket-Id: 257359365407097851736353 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6159	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:12 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 593dfd32-c66a-451e-afcd-51d66050458e X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 86 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 3995522087844b7584f49163923f48bf Connection: close
2023-08-10 21:19:12 UTC	6159	IN	Data Raw: 37 33 3a 31 3a 30 3a 7b 22 74 79 70 65 22 3a 22 43 4f 4c 4c 41 42 52 4f 4f 4d 22 2c 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 44 49 53 43 4f 4e 4e 45 43 54 5f 52 45 41 53 4f 4e 22 2c 22 72 65 61 73 6f 6e 22 3a 31 31 7d 7d 38 3a 32 3a 31 3a 6b 69 6c 6c Data Ascii: 73:1:0:{"type":"COLLABROOM","data":{"type":"DISCONNECT_REASON","reason":11}}8:2:1:kill

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
171	192.168.2.3	50009	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	6146	OUT	GET /paper/emoji/count?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6160	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:12 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:12 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/count X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 3305a1f5-3134-4c88-b740-37bdc08f15ac X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 29 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 80f5e2508be94e17bac074f1af35fd3e Connection: close
2023-08-10 21:19:12 UTC	6161	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 22 3a 33 38 33 38 7d Data Ascii: {"success":true,"count":3838}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
172	192.168.2.3	50007	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:11 UTC	6147	OUT	POST /paper/comet/post?r=635386945670126860957074&v=2&id=257359365407097851736353&seq=0&tag=zjo2KktWLcVGFokm1yeoE&xsrf=50aS4zgW2W1XP95GWz4lmdjP&postSeq=3&remark=&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 19 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Notes-Pad-Team-Id: 1gg9jEhA3WwHGxRnHM5NyM6eGT5pnkAQtmcvErvviQJK67nhJXEc Notes-Tab-Id: 1CKSXqh3ruYB6f22RkOu Notes-App-Time: 1691634844000 Notes-Pad-Id: zjo2KktWLcVGFokm1yeoE sec-ch-ua-mobile: ?0 Notes-Socket-Id: 257359365407097851736353 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/octet-stream sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:11 UTC	6149	OUT	Data Raw: 0a 11 0a 0f 1a 0d 08 02 12 09 73 74 72 65 61 6d 69 6e 67 Data Ascii: streaming
2023-08-10 21:19:12 UTC	6163	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:12 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 6f6f5143-6d3b-4936-9e44-2828ecdc8cfb X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 2 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 49a8cf2948cd4287b20fec7e2783ad8e Connection: close
2023-08-10 21:19:12 UTC	6164	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
173	192.168.2.3	50010	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:12 UTC	6156	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6176	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 4e7c424b163040ac899ca16a7aff9a1b Connection: close
2023-08-10 21:19:12 UTC	6177	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
174	192.168.2.3	50011	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:12 UTC	6157	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 956 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryBSqsHztjY236r1fL Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6158	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 53 71 73 48 7a 74 6a 59 32 33 36 72 31 66 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 53 71 73 48 7a 74 6a 59 32 33 36 72 31 66 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 53 71 73 48 7a 74 6a 59 32 33 36 72 31 66 4c 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryBSqsHztjY236r1fLContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryBSqsHztjY236r1fLContent-Disposition: form-data; name="t"50aS4zgW2W1XP95GWz4lmdjP------WebKitFormBoundaryBSqsHztjY236r1fLCont
2023-08-10 21:19:12 UTC	6178	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 687949aa941c4ab2bdebdb51256a353d Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
175	192.168.2.3	50012	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:12 UTC	6164	OUT	POST /paper/log/connection-diagnostic-info?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 8475 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-app-time: 1691634844000 notes-pad-id: zjo2KktWLcVGFokm1yeoE notes-tab-id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6165	OUT	Data Raw: 70 61 64 49 64 3d 7a 6a 6f 32 4b 6b 74 57 4c 63 56 47 46 6f 6b 6d 31 79 65 6f 45 26 64 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 3d 25 37 42 25 32 32 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 65 73 73 61 67 65 25 32 32 25 33 41 25 32 32 42 6f 6f 74 43 6f 6e 6e 65 63 74 69 6f 6e 52 65 61 73 6f 6e 2e 49 6e 76 61 6c 69 64 58 73 72 66 54 6f 6b 65 6e 25 32 32 25 32 43 25 32 32 70 61 64 49 6e 69 74 54 69 6d 65 25 32 32 25 33 41 31 36 39 31 37 33 34 37 34 32 35 31 36 25 32 43 25 32 32 63 6f 6c 6c 61 62 44 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 25 32 32 25 33 41 25 37 42 25 32 32 74 69 6d 65 25 32 32 25 33 41 31 36 39 31 37 33 34 37 35 31 30 38 35 25 32 43 25 32 32 65 72 72 6f 72 73 25 32 32 25 33 41 25 37 42 25 32 32 6c 65 6e 67 74 68 25 32 32 25 33 41 30 25 37 44 25 Data Ascii: padId=zjo2KktWLcVGFokm1yeoE&diagnosticInfo=%7B%22disconnectedMessage%22%3A%22BootConnectionReason.InvalidXsrfToken%22%2C%22padInitTime%22%3A1691734742516%2C%22collabDiagnosticInfo%22%3A%7B%22time%22%3A1691734751085%2C%22errors%22%3A%7B%22length%22%3A0%7D%
2023-08-10 21:19:12 UTC	6188	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:12 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:12 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/log/connection-diagnostic-info X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 82cf3477-a903-4e0f-ac3f-c89153f0842f X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 2 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 8085a489ecf647718448828500eb8932 Connection: close
2023-08-10 21:19:12 UTC	6189	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
176	192.168.2.3	50013	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:12 UTC	6176	OUT	GET /paper/comet/channel?v=2&r=463197031499690454895468&id=257359365407097851736353&channel=shortpolling&seq=0&tag=zjo2KktWLcVGFokm1yeoE&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6187	IN	HTTP/1.1 200 OK Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:12 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 833c3f7b-dab8-4731-95c5-0b60a29e76fa X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 86 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: fbee171a4a3e41a887e6fce8f93df16b Connection: close
2023-08-10 21:19:12 UTC	6188	IN	Data Raw: 37 33 3a 31 3a 30 3a 7b 22 74 79 70 65 22 3a 22 43 4f 4c 4c 41 42 52 4f 4f 4d 22 2c 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 44 49 53 43 4f 4e 4e 45 43 54 5f 52 45 41 53 4f 4e 22 2c 22 72 65 61 73 6f 6e 22 3a 31 31 7d 7d 38 3a 32 3a 31 3a 6b 69 6c 6c Data Ascii: 73:1:0:{"type":"COLLABROOM","data":{"type":"DISCONNECT_REASON","reason":11}}8:2:1:kill

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
177	192.168.2.3	50015	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:12 UTC	6181	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 604 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6182	OUT	Data Raw: 1f 8b 08 00 df d2 d5 64 00 ff b5 53 5d 4f 1b 31 10 fc 2b c8 cf a1 22 81 f2 91 37 1a a0 8d 0a 04 41 28 95 10 8a cc 79 73 b7 8d cf be fa e3 d2 14 f1 df 19 27 17 12 09 2a 15 95 3e dd 69 77 3d 3b 3b b3 7b fb 20 46 61 56 91 e8 0a aa c9 04 d1 6a be 5d 51 49 35 ca ac 31 94 05 b6 66 e4 83 0c d1 23 5f 39 5b 91 0b 4c 5e 74 1f 84 89 e5 b5 27 e7 07 e6 42 2a d1 ed b4 52 a4 b7 78 46 6a 3d b5 d5 12 ec 7b da 46 75 64 33 d1 0d 2e 52 4b 34 bd a3 91 31 14 e8 cb 99 c4 b3 45 17 15 b3 30 5c e4 2f 24 5a 22 6a 64 cd b9 4c 7c fc c8 b3 c9 68 e4 c9 fb 44 af 92 39 8d b4 4d 8d da 80 e5 12 cf da bb 07 ed bd ed 9d bd 8f ed 0f 5b fb bb c0 94 aa 8f bc f8 fd c3 76 be 4e c2 cd 69 f6 ed f3 89 9d 94 ed 19 d9 e3 e5 e4 a9 62 07 10 3e 73 44 e6 86 55 28 80 d4 d9 07 fd 45 e8 0b 71 5e 40 a0 f6 56 Data Ascii: dS]O1+"7A(ys'>iw=;;{ FaVj]QI51f#_9[L^t'BRxFj={Fud3.RK41E0\/$Z"jdL\|hD9M[vNib>sDU(Eq^@V
2023-08-10 21:19:12 UTC	6196	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:12 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:12 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: fcdce60b-48c2-4d13-9c86-1a25eb12bc3d X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 43cdc3b7d9f44178aaadd402bac943d1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
178	192.168.2.3	50014	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:12 UTC	6183	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 956 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryRQNNrgZW8b1VR3oY Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6184	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 52 51 4e 4e 72 67 5a 57 38 62 31 56 52 33 6f 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 52 51 4e 4e 72 67 5a 57 38 62 31 56 52 33 6f 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 52 51 4e 4e 72 67 5a 57 38 62 31 56 52 33 6f 59 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryRQNNrgZW8b1VR3oYContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryRQNNrgZW8b1VR3oYContent-Disposition: form-data; name="t"50aS4zgW2W1XP95GWz4lmdjP------WebKitFormBoundaryRQNNrgZW8b1VR3oYCont
2023-08-10 21:19:12 UTC	6189	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 11 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c576da3aca384548b12d6d460c12bd87 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
179	192.168.2.3	50017	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:12 UTC	6185	OUT	GET /paper/emoji/count?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6192	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:12 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:12 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/count X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: b3f76cb6-ea2e-4adf-9420-5ea75702afe7 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 29 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 3a87638900c3422d9c65a451d22b3dc6 Connection: close
2023-08-10 21:19:12 UTC	6194	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 22 3a 33 38 33 38 7d Data Ascii: {"success":true,"count":3838}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.3	49755	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	806	OUT	GET /static/fonts/AtlasGrotesk-BoldItalic-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:56 UTC	1192	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 87400 Connection: close Date: Thu, 10 Aug 2023 21:18:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:23 GMT ETag: "ee4a8e042003216a751b343365276deb" Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 2177a1d449a3e8dc7269040f15d81cb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: Teoo1vwzIQM0ldP2EPxo0rNg_IT-UaNJjPETwSEDkDcYMWrtzUPkBg==
2023-08-10 21:18:56 UTC	1192	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 55 68 00 10 00 00 00 04 c2 ac 00 01 55 07 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 dc 40 1c ce 64 06 60 00 8c 02 08 3e 09 82 73 11 0c 0a 87 89 00 86 a8 60 0b 94 34 00 01 36 02 24 03 a8 64 04 20 05 90 6f 07 eb 00 0c 84 54 5b 43 87 94 0c 5f 8d e7 f6 6d 35 ee 53 57 e6 83 69 a0 73 88 49 a2 93 2a b0 0a b0 ff 5a 77 68 36 c4 47 3c db 38 92 d5 8e 11 ae 1c 90 aa 95 c7 cf a0 3a d6 72 f6 00 46 54 e7 d8 66 74 90 ec 75 44 f2 ec ff ff ff ff ff ff ff 95 c9 44 6c 7a 3a 13 c9 72 e2 3c 10 be 24 85 bf d0 c2 36 ba 75 1b 94 58 8c d1 35 99 c5 b2 ca 24 1a ea c6 2b a8 43 49 6b b4 aa ac 93 f3 45 9f 96 ab 52 34 6b 52 6d 10 ab 2a a1 de 22 19 55 1d 98 f1 1c a0 c1 e3 b4 22 6f c9 c4 80 11 71 8e dd 7e 8d ce 89 0d 30 31 Data Ascii: wOF2UhU@d`>s`46$d oT[C_m5SWisIZwh6G<8:rFTftuDDlz:r<$6uX5$+CIkER4kRm"U"oq~01
2023-08-10 21:18:56 UTC	1208	IN	Data Raw: 4f 25 9b 5e 80 80 b3 3e 9e 69 55 b6 87 e2 f0 d1 83 e9 6b 8f 3d f6 2c 89 a6 4f e1 6c b0 fb fa 83 40 ad 48 86 62 76 2e e6 29 9b a7 47 bd 70 8b f3 7a f2 86 8f 72 94 9a 9d 07 4c 18 1f d8 47 e5 7a 11 d7 a0 5a d7 59 9c df 22 1c d3 13 30 34 61 74 83 03 dd 37 10 34 4a dc f4 94 b7 aa d0 46 af 56 1d 4c 09 a0 f2 8e 0f 28 df a1 d7 8d 11 97 2d 23 7b c2 24 a6 02 10 d1 44 85 b7 b9 34 83 0a 57 9c b1 07 84 a8 9e 56 54 a9 1e 54 6b 6f df b1 cf 3a 35 9a 40 15 f8 77 dd aa c3 8d 92 2c 52 04 71 a2 70 bc a5 73 72 39 11 10 2b 7d 2b c4 ca dc 03 5f 06 62 4a af 80 c4 ac ee e1 ab 44 e8 ae fd 13 67 88 77 95 ff f4 19 81 4a 11 90 2f b9 4b b4 73 72 b1 29 61 73 a5 99 a3 c2 7c c1 3e 01 9e c4 e5 d2 5e ca a5 0c 8e 40 44 be 3e 43 2c f1 36 bd 4e 04 e2 4a 67 80 40 ce 02 f1 c1 8b 1c 89 aa 0f 21 Data Ascii: O%^>iUk=,Ol@Hbv.)GpzrLGzZY"04at74JFVL(-#{$D4WVTTko:5@w,Rqpsr9+}+_bJDgwJ/Ksr)as\|>^@D>C,6NJg@!
2023-08-10 21:18:56 UTC	1331	IN	Data Raw: bc 53 82 8b da b0 2f b5 6c 60 e0 da b4 ef c9 af c2 55 b9 a0 c8 8c 41 ad be 6f 4b e4 6c 44 c3 9f ee a2 fc 4f 77 2a 07 be 46 4b 6f 67 a0 bd 2c bc fb ff 4e d4 00 aa ee 4e 6f 50 43 19 a5 d7 7d 66 cb 7e 83 a8 ca cb 95 eb 17 5a 08 8e 99 82 6b b1 4d 5c 7d 2e f8 a6 d2 02 67 48 af bd 9a dc b8 fc de 84 fe 96 ea 8e c2 c1 d7 f4 28 65 8f be ae 37 bc 4f 4a eb 9b c6 3d a1 5f 80 36 86 c4 ec 32 b7 ca 61 dc 6e 34 ab 3c 3f 9b 4d 5e fd 8f d5 74 cd 4e 0a c4 a5 31 d7 1f b7 d6 a8 e4 58 68 27 de 34 f7 88 52 23 b5 5c 85 12 7f 7c a9 7b e9 4c a6 1c 92 9a 9a 6b c3 0e ab 08 91 54 5e 05 cc 0d d2 41 e8 61 ca cd 94 26 b0 a7 6a e0 1b f4 3b 84 2f 35 f7 c9 d3 0f 16 19 0f e3 99 c3 ac f4 dc ac ee ec 0d ca 53 82 7a 28 6c ac 1e 07 88 7c 31 96 2c b3 3d d3 13 64 de b9 29 e2 54 6f 72 f5 92 bd 9a Data Ascii: S/l`UAoKlDOw*FKog,NNoPC}f~ZkM\}.gH(e7OJ=_62an4<?M^tN1Xh'4R#\\|{LkT^Aa&j;/5Sz(l\|1,=d)Tor
2023-08-10 21:18:56 UTC	1343	IN	Data Raw: 8d 29 50 b8 29 25 50 9b 51 ae 7c 7f 60 d4 6d 41 83 c6 2d 6b d6 b2 35 ed da b7 e1 27 e2 36 91 90 b6 a3 df e0 76 8d 18 d9 81 31 93 3b 34 63 71 27 96 2c 8f cc b1 fe 40 e4 96 c3 47 41 7e 75 f6 ae 53 18 72 26 25 94 60 4b 52 a1 1c e5 b1 4c 6d 10 15 52 07 74 70 74 ac 10 b8 b8 a1 f1 f1 c3 10 12 87 25 25 8d 40 41 15 91 86 26 2a 1d 43 34 65 cc 31 d9 d8 e2 70 70 c4 e5 e2 89 c7 cb 9f 50 50 28 89 88 8a a4 92 52 a9 55 ab ab 54 5a 7b 06 43 86 72 18 33 96 d3 52 81 29 db 26 39 15 fb 15 a6 ea 88 92 34 1c 53 96 a6 c7 55 a6 e5 39 2d 69 7b 51 7b 3a 2e ea 4d cf 15 a3 e9 bb 6a 3c 03 9f 98 ca d0 67 66 32 f2 85 b9 c0 be b6 94 b1 6f ac 66 e2 27 bb 99 fa dd 71 9f 3c 70 55 89 7d 03 4f 32 6f c0 27 53 f3 46 6a 32 23 6f e6 c3 8d 62 21 c2 28 11 23 8d 52 29 68 94 1d 48 9f bf a8 b5 2b d7 Data Ascii: )P)%PQ\|`mA-k5'6v1;4cq',@GA~uSr&%`KRLmRtpt%%@A&*C4e1ppPP(RUTZ{Cr3R)&94SU9-i{Q{:.Mj<gf2of'q<pU}O2o'SFj2#ob!(#R)hH+
2023-08-10 21:18:56 UTC	1354	IN	Data Raw: dd d4 e1 76 e5 6d 4c e2 4d 01 86 dc 96 4b 9d 0a 45 57 3f 9c 2a 33 03 42 73 4e fe b0 6f 9b e9 62 08 3d 7b 6c 47 16 f6 f1 50 a2 88 79 1d 76 3f ec d1 49 44 27 9c 84 44 00 d6 bb bb 1a 23 59 3e e7 50 59 f2 3c 51 a9 be 99 09 7b bb 85 9b 30 7f ae d4 1a 3b 3f ac 6f a8 d2 5b fd c2 d8 e3 69 c5 55 2b 09 f7 91 6d 3b 56 e9 d6 36 a0 b5 74 74 db c1 8c 27 4a 85 cd 68 ac 92 fd a2 3f 31 6a 63 49 63 65 8c 2f 62 9a f8 fd c0 ae 60 b5 a1 c7 0e ef 0c d2 e0 a8 32 f6 4a 22 2e 13 0f 97 b5 e7 86 42 ec f8 e8 ef 97 6f df ee 6c 9e 99 9f aa 65 9e 5f e9 b1 82 16 fc 69 ac 1f 3b e7 47 75 4c 38 b4 77 c4 8f 39 70 ac 27 05 d9 39 11 6a 1c 83 fd 7b ab 90 1f 23 6d 4e 0b 81 86 0d 35 f4 3c 43 36 8c b0 e4 2a 14 b4 af f4 23 89 6d 98 6b 1a b4 ba 7d ee 0c 1b 0f 0b 5f 00 b7 b7 71 40 bb 69 61 e5 4c 00 Data Ascii: vmLMKEW?3BsNob={lGPyv?ID'D#Y>PY<Q{0;?o[iU+m;V6tt'Jh?1jcIce/b`2J".Bole_i;GuL8w9p'9j{#mN5<C6#mk}_q@iaL
2023-08-10 21:18:56 UTC	1388	IN	Data Raw: 01 d2 1a 41 21 28 20 2c 2d 2b ce 2b f5 90 1d d4 bd f9 0a ae 99 9d 75 f6 4a 01 b3 4e 31 43 30 8f 7d 79 0a 20 66 97 d4 c3 20 f3 aa ba 03 4d 91 20 ca c9 f6 01 6e d1 7b f2 d9 eb 40 16 32 e1 d7 57 56 85 5b 42 a7 c7 33 be b4 04 33 97 49 3c b8 39 45 ff e4 89 28 e8 8f 9e 4c e9 31 4d f7 68 5c b6 bd 9b 13 f0 09 fb bc b4 29 df ff 25 34 fa 4f 98 49 9e 3b e2 85 9b 0f 9d f5 aa 8d 59 fb 58 4e 57 2f 27 e8 17 0c 17 64 b2 fe a5 b4 71 b9 cf bf be e3 38 1a 6b 59 30 26 fd ed 22 35 ad 1f 4a fb f9 f7 0b 36 27 7e 07 57 32 97 dd 67 53 ae 1a 89 20 7e a3 55 1d 13 32 7f 61 e1 d6 2c 56 e5 0a cd 06 3b 7f c4 57 d1 ad 70 28 cb 49 df 70 22 1a 33 67 d4 3f bc 0b b0 ca d7 a7 50 85 3f ce 3b 15 af c4 1c e9 13 f5 ec f3 c2 a6 3a 18 8b 9e fb 48 e1 23 a6 82 8a bb ed 00 90 9d b3 4a c0 5b 15 9e 46 Data Ascii: A!( ,-++uJN1C0}y f M n{@2WV[B33I<9E(L1Mh\)%4OI;YXNW/'dq8kY0&"5J6'~W2gS ~U2a,V;Wp(Ip"3g?P?;:H#J[F
2023-08-10 21:18:56 UTC	1400	IN	Data Raw: 2b 2e 21 9d 1d 32 bd 7c f3 ab ec 31 27 a3 37 82 bc 25 8c 11 0b 5f fd b1 02 80 5b 7a a4 00 80 3f dc 67 08 dd f7 e8 e8 a8 99 c8 5c 36 e9 fc 03 14 8f f6 50 4e cf f7 34 42 b2 4f 95 35 04 dc 60 bc 0d bb 71 63 6a 96 5e 46 f0 bd 7c 74 67 d3 2b f1 7e dc 75 a7 e4 84 21 57 e5 3a a6 c6 20 32 3e 14 25 1f 89 aa 47 72 00 57 ac 1c 4a 18 bf 02 c0 a3 be 62 81 91 30 fc f9 97 f8 34 4d 1e 1e 35 a9 7d 86 d3 f3 dd d7 4a d0 be 7d 93 cf 36 0f dc 95 67 2d 0f a3 fc 7c 94 e3 44 68 67 39 a4 84 6f c4 e6 da ed 81 9c 9e ef 5d 74 b4 bb 7a 7f 7d 57 9d b0 ec da e4 f5 1b f7 4d 0d 53 1f d2 53 14 bc 0f 12 de 0f cc b2 b8 78 04 45 7d 51 f2 dd b9 b8 bc 2d d7 97 1f 66 89 0a 51 2c 0c b2 0e e7 19 9a e5 85 b9 41 32 2d ba b6 a6 79 69 98 d3 a9 7e 5f ee c5 dc 87 86 29 60 73 88 0b 68 10 9a 32 36 eb 20 Data Ascii: +.!2\|1'7%_[z?g\6PN4BO5`qcj^F\|tg+~u!W: 2>%GrWJb04M5}J}6g-\|Dhg9o]tz}WMSSxE}Q-fQ,A2-yi~_)`sh26
2023-08-10 21:18:56 UTC	1405	IN	Data Raw: 2a 61 5b 12 9a 39 15 61 b3 d1 f8 ad 07 f1 90 c3 1c cf 78 14 33 b3 00 2a 49 d9 5c c5 39 cb b8 63 b3 fd cb e2 b7 36 5a 80 b3 d7 9b 3d 97 45 72 a1 a4 dc e6 58 6b 2e 9e d9 73 33 64 18 1d c1 ba af 05 40 72 13 ed d5 4c 7c 19 6a e4 5b 7b e6 69 35 7a a5 17 c2 a1 b6 07 f3 63 d6 90 43 13 26 7f 50 4d 51 be db dd a4 b8 5e d0 69 11 88 78 ee 2d 6c a4 fd b8 89 85 0c 98 23 74 96 c2 50 5f 23 82 d1 c0 d2 b9 6d 01 8c 34 97 c8 37 5a d2 0d b5 1e 9f f9 98 f2 59 25 a1 47 47 ab 27 25 03 3e c2 82 f6 ad 37 8a 69 b3 70 43 6e e8 62 c3 01 48 af 11 67 5d a1 e1 12 46 cc 02 88 e1 ea 2c 95 59 a7 37 aa 92 fe 2b 28 30 c2 7f 66 75 34 87 f4 75 70 26 d4 6b 02 66 8a a4 61 1b 75 23 0f e4 94 0f 53 77 d0 a2 fb 8a 7a 60 8a d5 7b 06 d0 41 10 22 37 3c 81 1c cf 80 18 40 89 65 54 a8 8e 22 36 dd d0 99 Data Ascii: a[9ax3I\9c6Z=ErXk.s3d@rL\|j[{i5zcC&PMQ^ix-l#tP_#m47ZY%GG'%>7ipCnbHg]F,Y7+(0fu4up&kfau#Swz`{A"7<@eT"6
2023-08-10 21:18:56 UTC	1421	IN	Data Raw: 61 32 02 8c f0 08 d1 07 af c7 13 03 00 41 98 82 f0 00 00 30 14 61 32 02 8c f0 d4 62 ae 36 b1 c9 de 97 1f 4f 97 13 9f 4c ff f5 62 fc 22 7d d9 db 61 ac 5f dd 6f ec 57 86 a3 07 c9 5e 92 f1 1f ed ff c3 f5 f1 b8 b6 8b f9 8b 28 94 6c 7f f5 de fc 18 cc a3 56 1c 79 c2 fb e2 fb bf 2a 6b f1 f2 e6 41 f4 6c b5 7b c5 01 7d f9 7c f1 ff 53 23 c8 e7 63 9b d2 bc ed ad a6 fa 62 f7 8d 64 cb f5 02 9d 56 fa 21 84 d2 13 e2 25 69 df ee 32 07 8d 95 07 eb ba 0b a6 2f 01 ef d1 af 79 ad 07 c8 e5 81 71 1d 0d 28 91 96 db c3 2f 2b 1c 04 e8 c0 b2 da ce 2e f8 19 00 eb f9 5a 73 e4 f0 b2 8b 8d dc 53 38 ec 2b d7 fe 80 5a bf 50 05 e2 48 dc ac 51 38 2f 7b ae 7d cd f1 0c b7 d8 72 36 d3 f5 0c e6 38 84 9f f8 10 90 b8 41 48 77 36 89 c7 67 71 b8 86 d5 6d 86 ee a0 6a e8 6f b3 2d 43 33 48 92 02 24 Data Ascii: a2A0a2b6OLb"}a_oW^(lVy*kAl{}\|S#cbdV!%i2/yq(/+.ZsS8+ZPHQ8/{}r68AHw6gqmjo-C3H$

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
180	192.168.2.3	50016	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:12 UTC	6185	OUT	GET /paper/comet/post?r=635386945670126860957074&v=2&id=257359365407097851736353&seq=0&tag=zjo2KktWLcVGFokm1yeoE&xsrf=50aS4zgW2W1XP95GWz4lmdjP&postSeq=3&remark=&padIsNew=false HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6194	IN	HTTP/1.1 404 Not Found Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/plain;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:12 GMT Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-comet X-Paper-Request-Id: 0de0fee2-3cff-4b63-9d63-9715e82ffd4f X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 43 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 64e572a35bc44c1ea35bc6bb4bc088ea Connection: close
2023-08-10 21:19:12 UTC	6194	IN	Data Raw: 4e 6f 20 73 75 63 68 20 73 6f 63 6b 65 74 2c 20 61 6e 64 2f 6f 72 20 75 6e 6b 6e 6f 77 6e 20 63 68 61 6e 6e 65 6c 20 74 79 70 65 Data Ascii: No such socket, and/or unknown channel type

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
181	192.168.2.3	50018	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:12 UTC	6186	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6194	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cea524f882ed4550a2169d57ba38b2c2 Connection: close
2023-08-10 21:19:12 UTC	6195	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
182	192.168.2.3	50021	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:12 UTC	6198	OUT	GET /paper/log/connection-diagnostic-info?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6201	IN	HTTP/1.1 403 Forbidden Content-Security-Policy: sandbox; frame-ancestors 'self'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:12 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:12 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 762515e4-fd0b-47a5-a832-7edf03184bb9 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 9 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 1394eaaad5e14fa387a31fdce92bad38 Connection: close
2023-08-10 21:19:12 UTC	6202	IN	Data Raw: 46 6f 72 62 69 64 64 65 6e Data Ascii: Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
183	192.168.2.3	50022	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:12 UTC	6198	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:12 UTC	6199	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: d9a2695e63b14f3a9e183e636c95705d Connection: close
2023-08-10 21:19:12 UTC	6200	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
184	192.168.2.3	50023	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:13 UTC	6202	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:13 UTC	6202	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 0da830a5cd774092a1abd72ab546dd68 Connection: close
2023-08-10 21:19:13 UTC	6203	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
185	192.168.2.3	50024	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:13 UTC	6204	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:13 UTC	6204	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:12 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8078cea5352a477597a2a5d7bbc7c35b Connection: close
2023-08-10 21:19:13 UTC	6205	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
186	192.168.2.3	50025	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:13 UTC	6206	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:13 UTC	6207	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:13 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b39cd9de4f404b1baa67dcc3248cbca9 Connection: close
2023-08-10 21:19:13 UTC	6207	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
187	192.168.2.3	50026	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:13 UTC	6208	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:14 UTC	6209	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:13 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 54ffc5eae2954627aeebef5fb7e22b41 Connection: close
2023-08-10 21:19:14 UTC	6209	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
188	192.168.2.3	50028	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:14 UTC	6211	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 308 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:14 UTC	6212	OUT	Data Raw: 1f 8b 08 00 e1 d2 d5 64 00 ff 4d 90 4f 6f f2 30 0c 87 bf ca e4 73 85 da 52 60 f4 b6 b1 bf da ab 8d 03 83 c3 34 55 51 62 b5 19 10 a3 c4 05 f5 45 7c 77 9c c2 81 53 65 c7 f5 ef 79 fc 73 84 8a bb 1d 42 09 b8 47 c7 90 5c bf 25 2c 2d 1e ee e6 aa 46 e9 ed 3c ed d0 b3 c5 00 e5 11 5c bb fd 0e e8 c3 97 9b 2b 03 65 9e c4 ce 8c 9c 43 cd 68 6e 9f d2 04 6c 98 6d a8 35 4f a4 a1 64 df a2 2c 93 9d 9f 6a db 67 1a cb e4 25 c0 b4 5e b1 25 07 65 96 0e d2 74 12 a7 cc bb 6c 80 ff 7f 94 7f ac 79 f5 4f 2f 5f 5f 68 bd cd 3a a4 67 f9 43 37 ca 2b c9 f3 33 6a 23 6f 36 1e 25 70 20 6f ae 75 7e 5b 3e 76 8b c6 86 48 d6 33 09 ee 43 cb 0d 79 d1 19 ca 2a c5 58 93 ef 24 cd 3a 16 fb 08 d2 4b 9b 56 f3 e2 72 9e b9 92 0b 48 d7 a9 bd ad 7b d6 50 05 eb 34 56 01 43 90 b2 8a 5e d5 86 a2 77 96 00 db Data Ascii: dMOo0sR`4UQbE\|wSeysBG\%,-F<\+eChnlm5Od,jg%^%etlyO/__h:gC7+3j#o6%p ou~[>vH3Cy*X$:KVrH{P4VC^w
2023-08-10 21:19:15 UTC	6213	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:15 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:15 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 4729d519-464c-4bf7-91e2-8491402146d0 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 45946f0b46464836beb9611762ac82c6 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
189	192.168.2.3	50027	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:15 UTC	6212	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:15 UTC	6214	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:15 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 68bfd04d008a45ea864068c96ae769aa Connection: close
2023-08-10 21:19:15 UTC	6215	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.3	49762	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:56 UTC	1209	OUT	GET /static/fonts/SourceCodePro-Regular-2038.otf.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:56 UTC	1210	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 76848 Connection: close Date: Thu, 10 Aug 2023 21:15:33 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 02 Feb 2023 02:19:59 GMT ETag: "7b64ae005dcd81a935c942003bc42592" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 3a4b7ff21260552f6982d2003fec9c84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: KbGGQUyWrMCwWSO5ePZmaG1KfbCg5OyBQeqxJxq6Y-Ev0FO9MxCKhw== Age: 203
2023-08-10 21:18:56 UTC	1211	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 01 2c 30 00 0d 00 00 00 02 06 6c 00 01 2b de 00 02 09 ba 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 85 fe 53 1a 85 6a 1b a8 5c 1c ba 4a 06 60 00 e6 66 01 36 02 24 03 98 42 04 06 05 a1 4e 07 20 5b 7e 05 92 0c a1 32 da dd 97 f1 2e fb 60 ba ac 41 44 54 3d a2 e4 03 6d cd dc 6f 66 e8 08 3a c6 36 5e 48 5a a9 1b 73 f9 d9 7c 7b e0 03 8a 14 1d a8 dd 0e 22 01 a5 1e cc fe ff ff ff ff ff ff df 98 2c c2 36 67 37 64 df bb cb 07 18 51 44 ff 8a b5 7e 6d 89 40 c5 20 70 2e b2 54 c6 10 1d 73 03 8d 0f 3a 08 33 4e 3e bb d4 d9 48 91 c5 dd 50 04 5b d8 6e 7f d1 1a 5a ae 97 f3 21 51 32 ae 6c 4b ae 5d 8e 90 42 6e d8 41 8e ab 55 4c 88 de ad b3 48 88 21 bc 94 74 a4 1e fb b7 ef 90 e9 09 ef e3 05 7b ba 2d a5 14 dc e1 be 7f 0f 8f dc Data Ascii: wOF2OTTO,0l+FSj\J`f6$BN [~2.`ADT=mof:6^HZs\|{",6g7dQD~m@ p.Ts:3N>HP[nZ!Q2lK]BnAULH!t{-
2023-08-10 21:18:56 UTC	1227	IN	Data Raw: ea 14 68 0e 6c 3c 3c 01 af 85 4f 85 ef 47 8e 44 4e 20 2f a1 3b a0 23 68 1b ed a0 0f 61 bb 60 8b b1 13 b0 3e be 13 7e 0d ef e0 73 22 81 c8 88 24 31 4b dc 9f de 37 2d a5 c3 f4 7b 99 ff cd 2c ca 3c 96 09 b2 7b 64 3b 59 2f 5b cc be 40 3a c8 f5 e4 a5 a4 40 aa 64 85 5c 22 39 72 3d e7 93 73 73 ad 5c 27 77 5a 6e 90 33 a8 2d e0 b1 d4 1a aa 47 c5 a9 d3 14 4b a9 54 4c ab 4e 61 74 9d a6 e8 0e 7d 16 f3 1e 66 1f 73 3f d3 66 96 98 55 a6 c1 b4 18 8e 11 c5 b1 57 f6 0b 3b 60 1f d8 3c 2b b0 93 fa 0d 1a b6 cd de d9 07 77 e3 46 dc 8a 33 b9 87 38 e5 4f 9a ca c3 f9 b3 76 57 fe 13 5e c8 16 de 06 ce 1f ce bf c5 13 fc 1b 02 6e d3 42 4e b8 bb 78 ad bb e2 5e ab f8 6c b1 23 9e 2e 3e 16 9f 2d 1d 59 12 4b 4a e9 70 e9 8d 12 2c 1f 54 fe aa 82 54 60 e5 65 85 a8 70 15 b5 92 af 9c c2 37 ab Data Ascii: hl<<OGDN /;#ha`>~s"$1K7-{,<{d;Y/[@:@d\"9r=ss\'wZn3-GKTLNat}fs?fUW;`<+wF38OvW^nBNx^l#.>-YKJp,TT`ep7
2023-08-10 21:18:56 UTC	1243	IN	Data Raw: d3 31 ed ba a5 21 4e 47 71 29 1d b6 5e e3 18 a2 82 62 6a 07 9a 52 da 41 71 88 3c 2c ce 4b 35 e9 8a 64 77 be 5c 97 aa 74 0d a5 06 47 c0 e7 9d df d2 4b a0 30 66 c3 ea 01 b2 fd 00 84 37 c6 ac 2e 74 56 37 50 aa 07 a8 b0 59 36 f6 61 a5 1f 04 45 15 e8 29 48 a6 1c 3c c4 8a 73 33 61 bc 01 0b 2c 54 bf aa f6 a8 e1 1e 8e 44 29 f5 e2 71 d6 32 d0 34 00 07 72 ee 05 e8 85 4a ed 86 84 ef 3e 58 80 50 bb d0 ee 86 19 82 c8 50 bc e0 a0 ff b1 42 6c d7 dd 6a 50 c6 24 e3 52 1b f6 e1 3a 54 eb b8 da c6 d5 36 11 6e c3 d5 58 c9 3a 6e 18 88 26 16 29 dc 8b 1a 69 00 b1 c0 02 30 d4 0b f9 f9 b2 fd 2d db 14 9e 87 2e 26 88 cd be 5c ba f0 f9 7b 40 42 f4 a9 84 cf 45 2b a5 50 e4 a0 b9 f5 96 7d 6e f2 42 6d b6 c2 2e 4b 75 85 d5 e6 b0 da 6c a8 cd d6 44 1d e6 7d d6 39 40 50 bb d9 2f 24 02 62 af Data Ascii: 1!NGq)^bjRAq<,K5dw\tGK0f7.tV7PY6aE)H<s3a,TD)q24rJ>XPPBljP$R:T6nX:n&)i0-.&\{@BE+P}nBm.KulD}9@P/$b
2023-08-10 21:18:56 UTC	1253	IN	Data Raw: af 05 59 33 d8 cd 11 f4 9a 04 3d de 87 15 31 97 1c e1 2b c2 f4 49 5d 0b 46 aa e6 ad f3 04 1e 33 a8 e0 be da d0 43 f7 e3 16 d4 92 99 1c 00 15 e1 3f 61 96 de 34 ae 9d 43 fe 35 c3 a1 d6 d2 59 de e0 66 72 91 6a c2 e6 14 bf 92 97 24 f4 96 6e c2 b7 ee f0 b6 30 ac 95 5e b7 7f ab 24 77 b0 a2 95 63 37 90 c6 d9 fc 74 7c 7a 7d 80 90 c5 9e 98 5b 06 8b 27 c1 fa 55 fa 90 02 8e b7 9e ba fc d2 36 75 a3 1f f3 ad f1 82 28 4e e5 f0 07 08 4b ef 5f 3a 0b 10 93 2d 67 d9 31 a4 6a 78 8f 6d 2e 74 00 70 63 0a ef 37 6b b4 44 34 1b 96 35 76 cf a3 9f ab 8e 5f ac 36 10 64 8c e7 37 db 58 0f 35 3f 26 09 11 d9 ed d8 59 f3 d8 d8 7d af 1f 35 9e 6d 82 46 71 9b cb b6 a1 31 88 da 7d bf 86 c1 f2 f7 7a da 31 b5 5b 9b ab 77 87 d9 58 c1 d5 31 87 3c 5f 23 db d1 a7 9f f2 7e 32 6a b9 78 a4 71 a8 3e Data Ascii: Y3=1+I]F3C?a4C5Yfrj$n0^$wc7t\|z}['U6u(NK_:-g1jxm.tpc7kD45v_6d7X5?&Y}5mFq1}z1[wX1<_#~2jxq>
2023-08-10 21:18:56 UTC	1269	IN	Data Raw: 0e e9 46 80 1a ca 30 e5 2e e5 1e e5 41 e5 43 bc bc 87 8c 4d d7 3d 04 e6 22 b5 eb 1e cd 3b fd 96 66 aa c9 6e 51 4d aa 36 4a 0f 9a d3 5a 12 55 07 3a a4 2f 33 38 65 3c 8a 65 c5 30 ac 9d 49 a6 0c c0 72 a5 64 b7 b1 34 e5 4a 9e 98 74 fe 83 0e 3d 52 a0 a7 95 e9 4f 8c b9 1b d5 0a ac 64 67 57 5e 92 07 03 15 21 4d b3 ad 9c 34 37 60 a6 ea 75 a4 bd 3d 5c 36 bc 72 4c b8 ac 56 3c e0 e4 41 48 ac 0a 4b aa 79 c2 88 83 04 3a 6d ce 7d 05 e8 f4 ef 88 dc 0a 3a 03 69 5a 0e 74 2b 6f 47 5d f2 ab 57 f7 25 97 7f 6a 21 f9 51 f1 15 3c 6e 31 c6 91 c8 2a 29 7c ab 7b 3f 0b fb 2e 97 bc a2 1d 6d ef 7d 18 cc a8 95 31 9f d5 10 44 ed 62 53 c6 4b ae d1 d2 a3 21 e5 01 01 1b f6 6a 17 69 77 2f 4d 60 b5 7e 91 e9 92 db 1b 1e 8d 68 3a f3 21 0e 74 01 25 b6 bf d5 a4 eb e6 5b 2a ef 79 0a fa 48 bf 4c Data Ascii: F0.ACM=";fnQM6JZU:/38e<e0Ird4Jt=ROdgW^!M47`u=\6rLV<AHKy:m}:iZt+oG]W%j!Q<n1)\|{?.m}1DbSK!jiw/M`~h:!t%[yHL
2023-08-10 21:18:56 UTC	1285	IN	Data Raw: a4 61 c9 bf 7f 06 af 27 f7 99 fc 75 9f 2f 57 b7 17 c4 28 93 8c 93 b8 ca c5 17 29 a4 9e 1d 79 b5 c8 31 77 f7 46 ab 65 5a 5d 30 b4 3f b2 8f 52 32 ac bd 5d ae 11 36 50 f9 74 fb 20 5e 93 2d 9e 15 c1 11 75 c8 32 46 2e 56 52 fe f4 67 99 a1 f8 3b bd 94 cf fd 26 91 3f 32 db f9 b7 e4 98 8b b9 5d fd 80 91 c0 0f 94 21 ce 65 66 1c 14 b8 73 c4 cb eb c2 7d d0 20 6f a5 0c 64 bc bf e6 d3 55 b9 42 2d 01 81 57 cf c6 27 90 cc 27 16 99 9a d0 9a 5c 36 a2 46 52 40 62 8d 38 05 bc a0 29 2c 1f b7 82 e8 ea a9 aa 2b b0 4c 5a 2d 96 c2 cf 5e 6d 18 e6 27 c3 20 81 03 ea 71 bd 54 96 8f d1 d9 22 4b 99 52 cb 92 48 bc ea 63 21 99 43 b4 f4 42 24 17 93 d8 64 64 2d 25 4e 95 65 33 04 a9 24 df 4c 40 b7 26 d9 e0 9d 5c 70 ea 86 96 f1 56 64 4a f3 6a 88 95 9e 43 d5 e6 f2 91 65 8e 84 d3 83 89 49 f0 Data Ascii: a'u/W()y1wFeZ]0?R2]6Pt ^-u2F.VRg;&?2]!efs} odUB-W''\6FR@b8),+LZ-^m' qT"KRHc!CB$dd-%Ne3$L@&\pVdJjCeI

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
190	192.168.2.3	50029	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:15 UTC	6216	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:15 UTC	6219	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:15 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9c3693d0cb8549729254a7abf1d7c950 Connection: close
2023-08-10 21:19:15 UTC	6219	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
191	192.168.2.3	50030	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:15 UTC	6217	OUT	POST /log/telemetry HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 827 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:15 UTC	6218	OUT	Data Raw: 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 31 26 62 61 74 63 68 65 73 3d 25 37 42 25 32 32 68 69 76 65 25 33 41 77 65 62 2d 74 69 6d 65 5f 74 6f 5f 66 69 72 73 74 5f 62 79 74 65 25 32 32 25 33 41 25 32 32 25 35 42 25 37 42 25 35 43 25 32 32 63 61 74 65 67 6f 72 79 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 2d 74 69 6d 65 5f 74 6f 5f 66 69 72 73 74 5f 62 79 74 65 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 73 65 72 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 63 6f 75 6e 74 72 79 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 72 65 66 65 72 72 65 72 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 Data Ascii: data-version=1&batches=%7B%22hive%3Aweb-time_to_first_byte%22%3A%22%5B%7B%5C%22category%5C%22%3A%5C%22web-time_to_first_byte%5C%22%2C%5C%22user_id%5C%22%3Anull%2C%5C%22country%5C%22%3Anull%2C%5C%22referrer%5C%22%3Anull%2C%5C%22session_id%5C%22%3Anull%2C%5
2023-08-10 21:19:15 UTC	6221	IN	HTTP/1.1 204 No Content Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:15 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 1271392531394455bb382a25f31a4d41 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
192	192.168.2.3	50031	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:15 UTC	6223	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:16 UTC	6224	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:15 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 658bb562110c4a019158cd5e3016071a Connection: close
2023-08-10 21:19:16 UTC	6224	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
193	192.168.2.3	50032	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:16 UTC	6225	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:16 UTC	6226	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:19:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 25b446ce2d7a47e19a8d22060f5e22ef Connection: close
2023-08-10 21:19:16 UTC	6226	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
194	192.168.2.3	50033	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:16 UTC	6228	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 957 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryjXJtvyUBlojkmK7Q Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:16 UTC	6229	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6a 58 4a 74 76 79 55 42 6c 6f 6a 6b 6d 4b 37 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6a 58 4a 74 76 79 55 42 6c 6f 6a 6b 6d 4b 37 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6a 58 4a 74 76 79 55 42 6c 6f 6a 6b 6d 4b 37 51 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryjXJtvyUBlojkmK7QContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryjXJtvyUBlojkmK7QContent-Disposition: form-data; name="t"50aS4zgW2W1XP95GWz4lmdjP------WebKitFormBoundaryjXJtvyUBlojkmK7QCont
2023-08-10 21:19:17 UTC	6230	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 13 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:16 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: cbf29750ac354dca8f2d16fc6565fdb4 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
195	192.168.2.3	50034	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:17 UTC	6232	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 331 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:17 UTC	6234	OUT	Data Raw: 1f 8b 08 00 e4 d2 d5 64 00 ff 65 51 5d 0b da 40 10 fc 2b e5 9e 83 98 d4 8f 9a c7 5a db 4a 5b 94 a2 b5 20 12 ae 77 9b 64 9b b8 1b 6e 2f 29 2a fe 77 2f d5 40 a1 4f c7 cd ec ce ee cc 1e 6f 2a f3 97 06 54 aa a0 03 f2 2a 7a bd a9 3a 02 15 a7 37 16 c5 30 11 18 0f 36 90 8d e3 06 9c 47 10 95 de 14 b5 e7 bd 80 93 0d 6d b5 55 69 12 f5 c8 72 28 ff 97 1a 47 0a 65 59 73 6b 3f b0 51 a9 77 2d 44 aa d4 b2 27 d1 1d d8 65 a9 a9 e8 35 73 5d 4b 60 38 cf 6b 24 58 91 fe 55 87 b9 03 8c 84 1e 75 8d 57 b0 07 f4 e5 37 14 f9 bf 97 c0 ff 61 57 6d a8 57 18 46 39 d0 c2 14 5c bd 67 f6 af 0d 91 e9 fb 5f 78 b4 a6 2e a8 da 9f e2 f2 1d 57 40 c1 a8 d1 1e 0a 76 97 3e 18 2a 9e ce 6d 6b fc ee 19 d6 56 87 18 02 4a ba c3 42 f7 52 92 09 92 81 4c 40 24 7c b3 46 17 90 d5 dc 9b 8f 23 e5 f1 1c da e2 Data Ascii: deQ]@+ZJ[ wdn/)w/@OoTz:706GmUir(GeYsk?Qw-D'e5s]K`8k$XUuW7aWmWF9\g_x.W@v>mkVJBRL@$\|F#
2023-08-10 21:19:17 UTC	6234	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:17 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:17 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 7d486f25-fbf0-43fb-8f41-9f9a94852884 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 2f5cc01615a042d9b5c87af98c981eda Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
196	192.168.2.3	50035	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:20 UTC	6236	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 340 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:20 UTC	6237	OUT	Data Raw: 1f 8b 08 00 e7 d2 d5 64 00 ff cd 91 cb 6f e2 40 0c c6 ff 15 34 e7 04 48 1a 60 c9 65 0f 6c 1f ab 22 15 a9 0f 0e 08 45 c3 8c 15 66 09 e3 74 c6 41 a5 88 ff 1d 4f a1 8f 23 bd ac 7a 4a ec cf f9 f2 f3 e7 d9 4e 14 b4 ad 41 e4 02 36 60 49 44 a7 67 2e 66 60 cb 79 4b 55 d8 e8 58 a3 f2 b1 95 1b 53 4a 32 68 79 aa 76 58 83 23 03 5e e4 3b 61 9b f5 a3 07 e7 ef ec 44 6a 91 a7 51 e8 8c d0 5a 50 04 fa ab d4 8d 84 f1 a3 60 fa 07 95 c8 c9 35 10 09 4f 92 1a 36 0a 2f 2e 30 34 ae e2 6a 49 54 fb bc d3 a9 a4 7b fb ad 6b 13 d6 9d df 8b 72 51 2f 68 f3 cc 73 4a 12 94 e8 b6 01 df 96 47 2c dd 28 7a 38 ae 34 91 cc c8 dd 4f 72 5f 78 63 15 14 1e bc e7 b2 a8 65 09 45 85 81 2c 89 04 99 35 7f 96 f4 87 c9 e0 22 1b f4 86 ed 34 cd d8 53 ea bf ac 8b d7 7f 98 de ae 68 3a 56 4f d7 57 b8 5a 27 5b Data Ascii: do@4H`el"EftAO#zJNA6`IDg.f`yKUXSJ2hyvX#^;aDjQZP`5O6/.04jIT{krQ/hsJG,(z84Or_xceE,5"4Sh:VOWZ'[
2023-08-10 21:19:20 UTC	6237	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:20 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:20 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: ecdcc78f-83aa-4ee9-aa37-4c74188e3068 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 57972cafc4df4afbb20a9557ed085d47 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
197	192.168.2.3	50037	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:20 UTC	6239	OUT	GET /?bgbpbtvq HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:21 UTC	6239	IN	HTTP/1.1 302 Found Set-Cookie: qPdM=xYHFKpmg9Mdh; path=/; samesite=none; secure; httponly Set-Cookie: qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; path=/; samesite=none; secure; httponly location: /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 Date: Thu, 10 Aug 2023 21:19:21 GMT Connection: close Transfer-Encoding: chunked
2023-08-10 21:19:21 UTC	6240	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
198	192.168.2.3	50036	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:21 UTC	6240	OUT	GET /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 HTTP/1.1 Host: larationr.top Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak
2023-08-10 21:19:21 UTC	6244	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 9e25b2ac-62f2-47ca-a9db-3a0e567c0700 x-ms-ests-server: 2.1.16042.2 - WUS2 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+chi"}]} x-ms-clitelem: 1,50168,0,, nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: fpc=AmtiFc-BLE5KrbEEZ3hXsak; expires=Sat, 09-Sep-2023 21:19:21 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Date: Thu, 10 Aug 2023 21:19:20 GMT Connection: close content-length: 20548 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:21 UTC	6246	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html><head> <title>Redirecting</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" conten
2023-08-10 21:19:21 UTC	6260	IN	Data Raw: 79 2e 73 62 75 6e 64 6c 65 2c 65 2e 41 64 64 49 66 28 21 76 2e 24 41 70 69 2c 79 2e 66 62 75 6e 64 6c 65 2c 22 57 65 62 57 61 74 73 6f 6e 5f 44 65 6d 61 6e 64 46 72 61 6d 65 77 6f 72 6b 22 29 2c 0a 79 2e 66 62 75 6e 64 6c 65 3d 6e 75 6c 6c 2c 64 65 6c 65 74 65 20 79 2e 66 62 75 6e 64 6c 65 2c 65 2e 41 64 64 28 79 2e 62 75 6e 64 6c 65 2c 22 57 65 62 57 61 74 73 6f 6e 5f 44 65 6d 61 6e 64 4c 6f 61 64 65 64 22 29 2c 65 2e 4c 6f 61 64 28 72 2c 74 29 2c 24 3d 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 69 66 28 76 2e 24 57 65 62 57 61 74 73 6f 6e 29 7b 69 66 28 76 2e 24 57 65 62 57 61 74 73 6f 6e 2e 69 73 50 72 6f 78 79 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 74 28 29 7d 6d 2e 77 68 65 6e 28 22 24 57 65 62 57 61 74 73 6f 6e 2e 66 75 6c 6c 22 2c 66 75 Data Ascii: y.sbundle,e.AddIf(!v.$Api,y.fbundle,"WebWatson_DemandFramework"),y.fbundle=null,delete y.fbundle,e.Add(y.bundle,"WebWatson_DemandLoaded"),e.Load(r,t),$=!0}}function r(){if(v.$WebWatson){if(v.$WebWatson.isProxy){return void t()}m.when("$WebWatson.full",fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
199	192.168.2.3	50043	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:21 UTC	6242	OUT	POST /log/telemetry HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 1127 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:21 UTC	6243	OUT	Data Raw: 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 31 26 62 61 74 63 68 65 73 3d 25 37 42 25 32 32 68 69 76 65 25 33 41 77 65 62 2d 76 69 73 75 61 6c 6c 79 5f 63 6f 6d 70 6c 65 74 65 25 32 32 25 33 41 25 32 32 25 35 42 25 37 42 25 35 43 25 32 32 63 61 74 65 67 6f 72 79 25 35 43 25 32 32 25 33 41 25 35 43 25 32 32 77 65 62 2d 76 69 73 75 61 6c 6c 79 5f 63 6f 6d 70 6c 65 74 65 25 35 43 25 32 32 25 32 43 25 35 43 25 32 32 75 73 65 72 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 63 6f 75 6e 74 72 79 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 72 65 66 65 72 72 65 72 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 35 43 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 35 43 25 Data Ascii: data-version=1&batches=%7B%22hive%3Aweb-visually_complete%22%3A%22%5B%7B%5C%22category%5C%22%3A%5C%22web-visually_complete%5C%22%2C%5C%22user_id%5C%22%3Anull%2C%5C%22country%5C%22%3Anull%2C%5C%22referrer%5C%22%3Anull%2C%5C%22session_id%5C%22%3Anull%2C%5C%
2023-08-10 21:19:21 UTC	6266	IN	HTTP/1.1 204 No Content Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:21 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 36de3f3572d84e21bfdbdfd4a4e17686 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.3	49711	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:52 UTC	4	OUT	GET /scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:53 UTC	5	IN	HTTP/1.1 200 OK Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; font-src https:// data: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-ancestors 'self' ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; expires=Tue, 08 Aug 2028 21:18:52 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: t=50aS4zgW2W1XP95GWz4lmdjP; Domain=dropbox.com; expires=Sun, 09 Aug 2026 21:18:52 GMT; HttpOnly; Path=/; SameSite=None; Secure Set-Cookie: __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; expires=Sun, 09 Aug 2026 21:18:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: __Host-ss=a8WIpcEMas; expires=Sun, 09 Aug 2026 21:18:52 GMT; HttpOnly; Path=/; SameSite=Strict; Secure Set-Cookie: locale=en; Domain=dropbox.com; expires=Tue, 08 Aug 2028 21:18:52 GMT; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:18:52 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 2bf587026cc84e6fb25f2770a9e877b7 Connection: close Transfer-Encoding: chunked
2023-08-10 21:18:53 UTC	9	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 61 65 73 74 72 6f 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 22 3e 0a 77 69 6e 64 6f 77 2e 5f 67 6f 63 68 5f 20 3d 20 7b 7d 3b 0a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 20 20 20 20 Data Ascii: 4000<!DOCTYPE html><html class="maestro global-header" lang="en" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml"><head><script nonce="xQYSkz9IZ9nizVNxZ0fU">window._goch_ = {};window.addEventListener('click', function(event) { 'use strict';
2023-08-10 21:18:53 UTC	21	IN	Data Raw: 65 72 72 6f 72 73 2e 70 75 73 68 28 65 29 2c 74 68 69 73 2e 6c 6f 61 64 65 64 52 65 73 6f 75 72 63 65 73 3d 3d 3d 74 68 69 73 2e 74 6f 74 61 6c 52 65 73 6f 75 72 63 65 73 26 26 74 68 69 73 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 73 28 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 3b 69 66 28 65 26 26 61 70 70 65 6e 64 4c 69 6e 6b 54 61 67 73 28 64 6f 63 75 6d 65 6e 74 2c 65 2c 73 29 2c 74 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 3b 61 70 70 65 6e 64 53 63 72 69 70 74 54 61 67 73 28 65 2c 74 2c 73 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 7d 72 75 6e 43 61 6c 6c 62 61 63 6b 73 28 29 7b 6c 65 74 20 65 3b 69 66 28 30 21 3d 3d 74 68 Data Ascii: errors.push(e),this.loadedResources===this.totalResources&&this.runCallbacks()}.bind(this);if(e&&appendLinkTags(document,e,s),t){const e=document.createDocumentFragment();appendScriptTags(e,t,s),document.body.appendChild(e)}}runCallbacks(){let e;if(0!==th
2023-08-10 21:18:53 UTC	25	IN	Data Raw: 34 30 30 30 0d 0a 72 61 79 22 29 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 5f 76 61 6c 69 64 61 74 65 55 73 65 72 28 65 5b 74 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 76 61 6c 69 64 61 74 65 55 73 65 72 28 65 29 7b 69 66 28 76 61 6c 69 64 61 74 65 4f 62 6a 65 63 74 50 72 6f 70 65 72 74 69 65 73 28 22 55 73 65 72 22 2c 65 2c 7b 75 73 65 72 49 64 3a 22 6e 75 6d 62 65 72 22 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 22 73 74 72 69 6e 67 22 2c 70 65 72 73 6f 6e 61 6c 4e 61 6d 65 3a 7b 6b 69 6e 64 3a 22 73 74 72 69 6e 67 22 2c 6e 75 6c 6c 61 62 6c 65 3a 21 30 7d 2c 69 73 41 63 74 69 76 65 3a 22 62 6f 6f 6c 65 61 6e 22 2c 69 73 54 65 61 6d 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 65 61 6d 4e 61 6d 65 3a 7b 6b 69 6e 64 3a 22 Data Ascii: 4000ray");for(let t=0;t<e.length;t++){_validateUser(e[t])}}function _validateUser(e){if(validateObjectProperties("User",e,{userId:"number",displayName:"string",personalName:{kind:"string",nullable:!0},isActive:"boolean",isTeam:"boolean",teamName:{kind:"
2023-08-10 21:18:53 UTC	41	IN	Data Raw: 2f 73 68 61 72 65 0d 0a Data Ascii: /share
2023-08-10 21:18:53 UTC	41	IN	Data Raw: 34 30 30 30 0d 0a 64 2f 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 73 72 63 2f 73 69 6e 6b 2f 73 65 72 69 61 6c 69 7a 61 74 69 6f 6e 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 73 68 61 72 65 64 2f 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 73 72 63 2f 74 79 70 65 73 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 73 68 61 72 65 64 2f 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 73 72 63 2f 76 61 6c 69 64 61 74 65 22 5d 2c 20 22 70 6b 67 2d 74 69 6d 69 6e 67 2d 68 65 6c 70 65 72 73 22 3a 20 5b 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 5f 6d 65 74 72 69 63 73 2f 63 6f 6d 70 6f 6e 65 6e 74 5f 76 69 73 75 61 6c 6c 79 5f 63 6f 6d 70 6c 65 74 Data Ascii: 4000d/apex-metrics/src/sink/serialization", "typescript/libraries/shared/apex-metrics/src/types", "typescript/libraries/shared/apex-metrics/src/validate"], "pkg-timing-helpers": ["metaserver/static/js/user_centric_perf_metrics/component_visually_complet
2023-08-10 21:18:53 UTC	57	IN	Data Raw: 6d 6f 64 75 6c 65 0d 0a 31 64 39 64 0d 0a 73 2f 72 65 61 63 74 2d 6e 65 78 74 22 2c 20 22 72 65 61 63 74 2d 72 65 64 75 78 22 3a 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 72 65 61 63 74 2d 72 65 64 75 78 22 2c 20 22 72 65 61 63 74 2d 72 65 66 72 65 73 68 22 3a 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 72 65 61 63 74 2d 72 65 66 72 65 73 68 22 2c 20 22 72 65 61 63 74 2d 72 65 66 72 65 73 68 2f 72 75 6e 74 69 6d 65 22 3a 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 72 65 61 63 74 2d 72 65 66 72 Data Ascii: module1d9ds/react-next", "react-redux": "metaserver/static/prod_assets_web_modules/react-redux", "react-refresh": "metaserver/static/prod_assets_web_modules/react-refresh", "react-refresh/runtime": "metaserver/static/prod_assets_web_modules/react-refr
2023-08-10 21:18:53 UTC	64	IN	Data Raw: 32 31 31 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 65 6e 73 65 6d 62 6c 65 5f 61 70 70 73 68 65 6c 6c 2e 6a 73 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 75 78 2d 61 6e 61 6c 79 74 69 63 73 2d 70 61 67 65 6c 65 74 22 2c 20 22 73 74 61 72 74 2d 31 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 73 65 74 75 70 50 6c 61 63 65 68 6f 6c 64 65 72 28 22 70 61 67 65 6c 65 74 2d 32 22 2c 20 Data Ascii: 211<script type="text/javascript" nonce="xQYSkz9IZ9nizVNxZ0fU"> /* global: ensemble is from ensemble_appshell.js */ ensemble.processChunk("ux-analytics-pagelet", "start-1", function() { ensemble.setupPlaceholder("pagelet-2",
2023-08-10 21:18:53 UTC	65	IN	Data Raw: 34 30 36 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 65 6e 73 65 6d 62 6c 65 5f 61 70 70 73 68 65 6c 6c 2e 6a 73 20 2a 2f 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 20 63 6f 6d 65 73 20 66 72 6f 6d 20 74 68 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 61 6b 65 5f 72 65 71 75 69 72 65 5f 73 6e 69 70 70 65 74 20 28 75 69 2f 70 61 67 65 2f 73 63 72 69 70 74 5f 74 61 67 73 2e 70 79 29 20 2a 2f 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c Data Ascii: 406<script type="text/javascript" nonce="xQYSkz9IZ9nizVNxZ0fU"> /* global: ensemble is from ensemble_appshell.js / / global: configureRequire comes from the fake_require_snippet (ui/page/script_tags.py) / / global
2023-08-10 21:18:53 UTC	66	IN	Data Raw: 34 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 69 6e 73 65 72 74 41 66 74 65 72 54 54 49 28 22 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 20 6e 6f 6e 63 65 3d 5c 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 5c 22 5c 75 30 30 33 65 5c 6e 20 20 20 20 20 20 20 20 2f Data Ascii: 4000<script type="text/javascript" nonce="xQYSkz9IZ9nizVNxZ0fU"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.insertAfterTTI("\u003cscript type=\"text/javascript\" nonce=\"xQYSkz9IZ9nizVNxZ0fU\"\u003e\n /
2023-08-10 21:18:53 UTC	82	IN	Data Raw: 61 74 69 63 2f 70 0d 0a Data Ascii: atic/p
2023-08-10 21:18:53 UTC	82	IN	Data Raw: 34 30 30 30 0d 0a 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 69 6d 6d 75 74 61 62 6c 65 5c 22 2c 20 5c 22 6a 6f 74 61 69 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 6a 6f 74 61 69 5c 22 2c 20 5c 22 6a 6f 74 61 69 2f 75 74 69 6c 73 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 6a 6f 74 61 69 2f 75 74 69 6c 73 5c 22 2c 20 5c 22 6a 71 75 65 72 79 5c 22 3a 20 5c 22 6c 69 62 72 61 72 79 5f 6c 6f 61 64 65 72 21 65 78 74 65 72 6e 61 6c 73 3a 6a 71 75 65 72 79 5c 22 2c 20 5c 22 6a 71 75 65 72 79 2d 73 63 72 6f 6c 6c 4e 61 76 5c 22 3a 20 5c 22 Data Ascii: 4000rod_assets_web_modules/immutable\", \"jotai\": \"metaserver/static/prod_assets_web_modules/jotai\", \"jotai/utils\": \"metaserver/static/prod_assets_web_modules/jotai/utils\", \"jquery\": \"library_loader!externals:jquery\", \"jquery-scrollNav\": \"
2023-08-10 21:18:53 UTC	98	IN	Data Raw: 61 73 65 72 76 65 0d 0a 61 39 65 0d 0a 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 5f 6d 65 74 72 69 63 73 2f 63 6f 6d 70 6f 6e 65 6e 74 5f 76 69 73 75 61 6c 6c 79 5f 63 6f 6d 70 6c 65 74 65 2f 6e 65 74 77 6f 72 6b 5f 69 64 6c 65 5f 6f 62 73 65 72 76 61 62 6c 65 5c 22 2c 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 75 69 64 2f 69 6e 73 65 63 75 72 65 5f 75 75 69 64 5c 22 2c 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 78 5f 61 6e 61 6c 79 74 69 63 73 2f 61 6e 61 6c 79 74 69 63 73 5f 69 64 5c 22 2c 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 78 5f 61 6e 61 6c 79 74 69 63 73 2f 64 69 73 70 61 74 63 68 5f 63 75 73 74 6f 6d 5f Data Ascii: aservea9er/static/js/user_centric_perf_metrics/component_visually_complete/network_idle_observable\", \"metaserver/static/js/uuid/insecure_uuid\", \"metaserver/static/js/ux_analytics/analytics_id\", \"metaserver/static/js/ux_analytics/dispatch_custom_
2023-08-10 21:18:53 UTC	102	IN	Data Raw: 35 30 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 69 6e 73 65 72 74 41 66 74 65 72 54 54 49 28 22 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 20 6e 6f 6e 63 65 3d 5c 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 5c 22 5c 75 30 30 33 65 5c 6e 20 20 20 20 20 20 20 20 2f 2a Data Ascii: 500<script type="text/javascript" nonce="xQYSkz9IZ9nizVNxZ0fU"> /* global: ensemble is from dws-ensemble-appshell. / ensemble.insertAfterTTI("\u003cscript type=\"text/javascript\" nonce=\"xQYSkz9IZ9nizVNxZ0fU\"\u003e\n /
2023-08-10 21:18:53 UTC	104	IN	Data Raw: 34 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 69 6e 73 65 72 74 41 66 74 65 72 54 54 49 28 22 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 20 6e 6f 6e 63 65 3d 5c 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 5c 22 5c 75 30 30 33 65 5c 6e 20 20 20 20 20 20 20 20 2f Data Ascii: 4000<script type="text/javascript" nonce="xQYSkz9IZ9nizVNxZ0fU"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.insertAfterTTI("\u003cscript type=\"text/javascript\" nonce=\"xQYSkz9IZ9nizVNxZ0fU\"\u003e\n /
2023-08-10 21:18:53 UTC	120	IN	Data Raw: 6e 63 65 2d 62 6f 0d 0a 33 35 66 30 0d 0a 6f 6b 6d 61 72 6b 6c 65 74 5c 22 2c 20 5c 22 70 68 6f 6e 65 5f 68 65 6c 70 65 72 73 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 70 68 6f 6e 65 5f 68 65 6c 70 65 72 73 5c 22 2c 20 5c 22 70 6c 75 70 6c 6f 61 64 5f 64 65 76 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 70 6c 75 70 6c 6f 61 64 5f 64 65 76 5c 22 2c 20 5c 22 70 72 65 61 63 74 5c 22 3a 20 5c 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 70 72 65 61 63 74 5c 22 2c 20 5c 22 70 72 Data Ascii: nce-bo35f0okmarklet\", \"phone_helpers\": \"metaserver/static/prod_assets_web_modules/phone_helpers\", \"plupload_dev\": \"metaserver/static/prod_assets_web_modules/plupload_dev\", \"preact\": \"metaserver/static/prod_assets_web_modules/preact\", \"pr
2023-08-10 21:18:53 UTC	136	IN	Data Raw: 31 30 36 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 69 6e 73 65 72 74 41 66 74 65 72 54 54 49 28 22 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 20 6e 6f 6e 63 65 3d 5c 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 5c 22 5c 75 30 30 33 65 5c 6e 20 20 20 20 20 20 20 20 2f Data Ascii: 106f<script type="text/javascript" nonce="xQYSkz9IZ9nizVNxZ0fU"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.insertAfterTTI("\u003cscript type=\"text/javascript\" nonce=\"xQYSkz9IZ9nizVNxZ0fU\"\u003e\n /
2023-08-10 21:18:53 UTC	146	IN	Data Raw: 33 30 35 62 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 69 6e 73 65 72 74 41 66 74 65 72 54 54 49 28 22 5c 75 30 30 33 63 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 20 6e 6f 6e 63 65 3d 5c 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 5c 22 5c 75 30 30 33 65 5c 6e 20 20 20 20 20 20 20 20 2f Data Ascii: 305b<script type="text/javascript" nonce="xQYSkz9IZ9nizVNxZ0fU"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.insertAfterTTI("\u003cscript type=\"text/javascript\" nonce=\"xQYSkz9IZ9nizVNxZ0fU\"\u003e\n /
2023-08-10 21:18:53 UTC	162	IN	Data Raw: 55 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 73 73 5f 66 69 6c 65 73 2d 31 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 6c 6f 61 64 43 53 53 28 5b 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 63 73 73 2f 73 70 65 63 74 72 75 6d 2f 69 6e 64 65 78 2e 77 65 62 2d 76 66 6c 6b 41 74 37 79 6e 2e 63 73 73 22 2c 20 22 68 74 74 Data Ascii: U"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "css_files-1", function(){ensemble.loadCSS(["https://cfl.dropboxstatic.com/static/metaserver/static/css/spectrum/index.web-vflkAt7yn.css", "htt
2023-08-10 21:18:53 UTC	163	IN	Data Raw: 34 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 20 63 6f 6d 65 73 20 66 72 6f 6d 20 74 68 65 0a 20 20 20 20 20 20 20 20 20 20 20 66 61 6b 65 5f 72 65 71 75 69 72 65 5f 73 6e 69 70 70 65 74 20 28 75 69 2f 70 61 67 65 2f 73 63 72 69 70 74 5f 74 61 67 73 2e 70 79 29 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c Data Ascii: 4000<script type="text/javascript" nonce="xQYSkz9IZ9nizVNxZ0fU"> /* global: ensemble is from dws-ensemble-appshell. / / global: configureRequire comes from the fake_require_snippet (ui/page/script_tags.py) */ ensembl
2023-08-10 21:18:53 UTC	179	IN	Data Raw: 65 63 74 5f 72 65 0d 0a Data Ascii: ect_re
2023-08-10 21:18:53 UTC	179	IN	Data Raw: 34 30 30 30 0d 0a 71 75 65 73 74 5f 61 70 70 72 6f 76 61 6c 5f 61 70 70 72 6f 76 65 72 2e 6d 69 6e 2d 76 66 6c 55 48 67 57 33 74 22 2c 20 22 6a 73 2f 70 61 70 2d 65 76 65 6e 74 73 2f 77 6f 72 6b 66 6c 6f 77 5f 61 75 74 6f 6d 61 74 69 6f 6e 5f 61 70 70 72 6f 76 61 6c 73 2f 73 65 6c 65 63 74 5f 72 65 71 75 65 73 74 5f 61 70 70 72 6f 76 61 6c 5f 61 70 70 72 6f 76 65 72 5f 69 6e 70 75 74 22 3a 20 22 73 74 61 74 69 63 2f 6a 73 2f 70 61 70 2d 65 76 65 6e 74 73 2f 77 6f 72 6b 66 6c 6f 77 5f 61 75 74 6f 6d 61 74 69 6f 6e 5f 61 70 70 72 6f 76 61 6c 73 2f 73 65 6c 65 63 74 5f 72 65 71 75 65 73 74 5f 61 70 70 72 6f 76 61 6c 5f 61 70 70 72 6f 76 65 72 5f 69 6e 70 75 74 2e 6d 69 6e 2d 76 66 6c 6d 33 4e 54 66 74 22 2c 20 22 6a 73 2f 70 61 70 2d 65 76 65 6e 74 73 2f 77 Data Ascii: 4000quest_approval_approver.min-vflUHgW3t", "js/pap-events/workflow_automation_approvals/select_request_approval_approver_input": "static/js/pap-events/workflow_automation_approvals/select_request_approval_approver_input.min-vflm3NTft", "js/pap-events/w
2023-08-10 21:18:53 UTC	195	IN	Data Raw: 2f 73 75 72 76 65 0d 0a Data Ascii: /surve
2023-08-10 21:18:53 UTC	195	IN	Data Raw: 34 30 30 30 0d 0a 79 22 3a 20 22 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 66 69 6c 65 5f 69 6d 70 6f 72 74 73 2f 75 69 2f 73 75 72 76 65 79 2e 6d 69 6e 2d 76 66 6c 45 62 66 61 38 4b 22 2c 20 22 70 6b 67 2d 66 69 6c 65 2d 73 74 6f 72 65 22 3a 20 22 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 63 6b 61 67 65 64 2f 70 6b 67 2d 66 69 6c 65 2d 73 74 6f 72 65 2e 6d 69 6e 2d 76 66 6c 6f 46 76 65 31 49 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 66 69 6c 65 73 5f 76 69 65 77 2f 6b 65 79 62 6f 61 72 64 5f 73 68 6f 72 74 63 75 74 73 5f 6d 6f 64 61 6c 22 3a 20 22 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 66 Data Ascii: 4000y": "static/metaserver/static/js/file_imports/ui/survey.min-vflEbfa8K", "pkg-file-store": "static/metaserver/static/js/packaged/pkg-file-store.min-vfloFve1I", "metaserver/static/js/files_view/keyboard_shortcuts_modal": "static/metaserver/static/js/f
2023-08-10 21:18:53 UTC	211	IN	Data Raw: 76 65 72 2f 73 74 0d 0a Data Ascii: ver/st
2023-08-10 21:18:53 UTC	211	IN	Data Raw: 34 30 30 30 0d 0a 61 74 69 63 2f 6a 73 2f 70 61 63 6b 61 67 65 64 2f 70 6b 67 2d 64 69 67 2d 63 6f 6e 74 72 6f 6c 73 2e 6d 69 6e 2d 76 66 6c 35 4b 70 6e 47 30 22 2c 20 22 70 6b 67 2d 64 69 67 2d 74 65 78 74 2d 66 69 65 6c 64 73 22 3a 20 22 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 63 6b 61 67 65 64 2f 70 6b 67 2d 64 69 67 2d 74 65 78 74 2d 66 69 65 6c 64 73 2e 6d 69 6e 2d 76 66 6c 47 34 61 66 58 75 22 2c 20 22 70 6b 67 2d 64 69 67 2d 63 68 69 70 73 22 3a 20 22 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 61 63 6b 61 67 65 64 2f 70 6b 67 2d 64 69 67 2d 63 68 69 70 73 2e 6d 69 6e 2d 76 66 6c 4f 32 6a 79 39 46 22 2c 20 22 70 6b 67 2d 64 69 67 2d 66 22 3a 20 22 73 74 61 Data Ascii: 4000atic/js/packaged/pkg-dig-controls.min-vfl5KpnG0", "pkg-dig-text-fields": "static/metaserver/static/js/packaged/pkg-dig-text-fields.min-vflG4afXu", "pkg-dig-chips": "static/metaserver/static/js/packaged/pkg-dig-chips.min-vflO2jy9F", "pkg-dig-f": "sta
2023-08-10 21:18:53 UTC	227	IN	Data Raw: 6f 70 65 6e 74 65 0d 0a Data Ascii: opente
2023-08-10 21:18:53 UTC	227	IN	Data Raw: 34 30 30 30 0d 0a 6c 65 6d 65 74 72 79 2f 65 78 70 6f 72 74 65 72 2d 74 72 61 63 65 2d 6f 74 6c 70 2d 68 74 74 70 22 2c 20 22 40 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 2f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 22 3a 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 40 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 2f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 22 2c 20 22 40 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 2f 6f 74 6c 70 2d 65 78 70 6f 72 74 65 72 2d 62 61 73 65 22 3a 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 70 72 6f 64 5f 61 73 73 65 74 73 5f 77 65 62 5f 6d 6f 64 75 6c 65 73 2f 40 6f 70 65 6e 74 65 6c 65 6d 65 74 72 79 2f 6f 74 6c 70 2d 65 78 70 6f Data Ascii: 4000lemetry/exporter-trace-otlp-http", "@opentelemetry/instrumentation": "metaserver/static/prod_assets_web_modules/@opentelemetry/instrumentation", "@opentelemetry/otlp-exporter-base": "metaserver/static/prod_assets_web_modules/@opentelemetry/otlp-expo
2023-08-10 21:18:53 UTC	243	IN	Data Raw: 63 6c 65 61 6e 2f 0d 0a Data Ascii: clean/
2023-08-10 21:18:53 UTC	243	IN	Data Raw: 34 30 30 30 0d 0a 77 69 6e 64 6f 77 5f 75 74 69 6c 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 74 72 61 6e 73 70 6f 72 74 2f 71 75 65 72 79 5f 73 74 72 69 6e 67 5f 68 65 6c 70 65 72 73 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6c 6f 67 67 69 6e 67 2f 68 69 76 65 2f 73 63 68 65 6d 61 73 2f 77 65 62 2d 76 69 73 75 61 6c 6c 79 5f 63 6f 6d 70 6c 65 74 65 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 65 72 66 5f 74 6f 6f 6c 73 2f 62 72 6f 77 73 65 72 5f 70 65 72 66 5f 75 74 69 6c 73 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 70 65 72 66 5f 74 6f 6f 6c 73 2f 63 70 75 5f 75 74 69 6c 73 22 2c 20 22 6d 65 74 61 73 65 72 76 Data Ascii: 4000window_util", "metaserver/static/js/core/transport/query_string_helpers", "metaserver/static/js/logging/hive/schemas/web-visually_complete", "metaserver/static/js/perf_tools/browser_perf_utils", "metaserver/static/js/perf_tools/cpu_utils", "metaserv
2023-08-10 21:18:53 UTC	259	IN	Data Raw: 6f 6c 75 74 69 6f 0d 0a Data Ascii: olutio
2023-08-10 21:18:53 UTC	259	IN	Data Raw: 34 30 30 30 0d 0a 6e 2f 73 68 61 72 65 2f 6d 61 69 6e 5f 73 65 63 74 69 6f 6e 2f 6d 61 69 6e 5f 73 65 63 74 69 6f 6e 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 73 68 61 72 69 6e 67 2f 76 69 65 77 73 2f 73 68 61 72 65 5f 6d 6f 64 61 6c 5f 65 76 6f 6c 75 74 69 6f 6e 2f 73 68 61 72 65 2f 6d 61 69 6e 5f 73 65 63 74 69 6f 6e 2f 6e 6f 5f 70 65 72 6d 69 73 73 69 6f 6e 73 5f 62 61 6e 6e 65 72 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 73 68 61 72 69 6e 67 2f 76 69 65 77 73 2f 73 68 61 72 65 5f 6d 6f 64 61 6c 5f 65 76 6f 6c 75 74 69 6f 6e 2f 73 68 61 72 65 2f 6d 61 69 6e 5f 73 65 63 74 69 6f 6e 2f 73 68 61 72 65 5f 6c 69 6e 6b 5f 73 65 63 74 69 6f 6e 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 Data Ascii: 4000n/share/main_section/main_section", "metaserver/static/js/sharing/views/share_modal_evolution/share/main_section/no_permissions_banner", "metaserver/static/js/sharing/views/share_modal_evolution/share/main_section/share_link_section", "metaserver/st
2023-08-10 21:18:53 UTC	275	IN	Data Raw: 65 76 6f 6c 75 74 0d 0a Data Ascii: evolut
2023-08-10 21:18:54 UTC	275	IN	Data Raw: 34 30 30 30 0d 0a 69 6f 6e 2f 75 74 69 6c 73 2f 6c 69 6e 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 63 6f 6d 70 6f 6e 65 6e 74 5f 6c 69 62 72 61 72 69 65 73 2f 73 70 65 63 74 72 75 6d 2d 73 68 61 72 69 6e 67 2f 73 72 63 2f 75 74 69 6c 73 2f 61 73 79 6e 63 2f 70 6f 6c 6c 69 6e 67 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 63 6f 6d 70 6f 6e 65 6e 74 5f 6c 69 62 72 61 72 69 65 73 2f 73 70 65 63 74 72 75 6d 2d 73 68 61 72 69 6e 67 2f 73 72 63 2f 75 74 69 6c 73 2f 62 72 6f 77 73 65 72 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 63 6f 6d 70 6f 6e 65 6e 74 5f 6c 69 62 72 61 72 69 65 73 2f 73 70 65 63 74 72 75 6d 2d 73 68 61 72 69 6e 67 2f 73 72 63 2f 75 74 69 6c 73 2f 63 6c 69 70 62 6f 61 72 64 22 2c 20 22 74 79 70 65 Data Ascii: 4000ion/utils/link_description", "typescript/component_libraries/spectrum-sharing/src/utils/async/polling", "typescript/component_libraries/spectrum-sharing/src/utils/browser", "typescript/component_libraries/spectrum-sharing/src/utils/clipboard", "type
2023-08-10 21:18:54 UTC	291	IN	Data Raw: 72 76 65 72 2f 73 0d 0a Data Ascii: rver/s
2023-08-10 21:18:54 UTC	291	IN	Data Raw: 34 30 30 30 0d 0a 74 61 74 69 63 2f 6a 73 2f 66 69 6c 65 73 5f 76 69 65 77 2f 6b 65 79 62 6f 61 72 64 5f 73 68 6f 72 74 63 75 74 73 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 68 6f 6d 65 2f 73 74 6f 72 65 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 68 6f 6d 65 2f 75 74 69 6c 2f 6c 6f 67 67 69 6e 67 2f 61 76 61 69 6c 61 62 69 6c 69 74 79 5f 6c 6f 67 67 65 72 5f 63 6f 6d 6d 6f 6e 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 69 6e 74 65 67 72 61 74 69 6f 6e 73 2f 75 72 6c 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 73 79 6e 63 5f 65 76 65 72 79 74 68 69 6e 67 2f 75 74 69 6c 73 2f 64 65 65 70 5f 6c 69 6e 6b 5f 75 74 69 6c 73 22 2c 20 22 Data Ascii: 4000tatic/js/files_view/keyboard_shortcuts", "metaserver/static/js/home/store", "metaserver/static/js/home/util/logging/availability_logger_common", "metaserver/static/js/integrations/url", "metaserver/static/js/sync_everything/utils/deep_link_utils", "
2023-08-10 21:18:54 UTC	307	IN	Data Raw: 70 6f 6e 65 6e 74 0d 0a Data Ascii: ponent
2023-08-10 21:18:54 UTC	307	IN	Data Raw: 34 30 30 30 0d 0a 5f 6c 69 62 72 61 72 69 65 73 2f 64 6f 63 73 65 6e 64 2f 73 72 63 2f 75 74 69 6c 73 22 5d 2c 20 22 70 6b 67 2d 64 72 6f 70 69 6e 73 5f 73 64 6b 22 3a 20 5b 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 64 72 6f 70 69 6e 73 5f 73 64 6b 5f 72 65 66 61 63 74 6f 72 2f 73 72 63 2f 62 61 73 65 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 64 72 6f 70 69 6e 73 5f 73 64 6b 5f 72 65 66 61 63 74 6f 72 2f 73 72 63 2f 62 72 6f 77 73 65 72 5f 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 64 72 6f 70 69 6e 73 5f 73 64 6b 5f 72 65 66 61 63 74 6f 72 2f 73 72 63 2f 63 68 6f 6f 73 65 72 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 Data Ascii: 4000_libraries/docsend/src/utils"], "pkg-dropins_sdk": ["metaserver/static/js/dropins_sdk_refactor/src/base", "metaserver/static/js/dropins_sdk_refactor/src/browser_environment", "metaserver/static/js/dropins_sdk_refactor/src/chooser", "metaserver/stati
2023-08-10 21:18:54 UTC	323	IN	Data Raw: 78 2d 6d 65 74 72 0d 0a Data Ascii: x-metr
2023-08-10 21:18:54 UTC	325	IN	Data Raw: 34 30 30 30 0d 0a 69 63 73 2f 73 72 63 2f 69 6e 73 74 61 6e 74 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 73 68 61 72 65 64 2f 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 73 72 63 2f 69 6e 74 65 72 6e 61 6c 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 73 68 61 72 65 64 2f 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 73 72 63 2f 6d 65 74 72 69 63 73 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 73 68 61 72 65 64 2f 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 73 72 63 2f 6d 65 74 72 69 63 73 5f 72 65 70 6f 72 74 65 72 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 6c 69 62 72 61 72 69 65 73 2f 73 68 61 72 65 64 2f 61 70 65 78 2d 6d 65 74 72 69 63 73 2f 73 72 63 2f 6d 75 72 6d 75 72 22 Data Ascii: 4000ics/src/instant", "typescript/libraries/shared/apex-metrics/src/internal", "typescript/libraries/shared/apex-metrics/src/metrics", "typescript/libraries/shared/apex-metrics/src/metrics_reporter", "typescript/libraries/shared/apex-metrics/src/murmur"
2023-08-10 21:18:54 UTC	341	IN	Data Raw: 61 6c 2f 73 72 63 0d 0a Data Ascii: al/src
2023-08-10 21:18:54 UTC	341	IN	Data Raw: 34 30 30 30 0d 0a 2f 6d 61 6e 61 67 65 64 5f 74 61 62 6c 65 2f 74 61 62 6c 65 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 63 6f 6d 70 6f 6e 65 6e 74 5f 6c 69 62 72 61 72 69 65 73 2f 64 69 67 2d 65 78 70 65 72 69 6d 65 6e 74 61 6c 2f 73 72 63 2f 6d 61 6e 61 67 65 64 5f 74 61 62 6c 65 2f 74 79 70 65 73 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 63 6f 6d 70 6f 6e 65 6e 74 5f 6c 69 62 72 61 72 69 65 73 2f 64 69 67 2d 65 78 70 65 72 69 6d 65 6e 74 61 6c 2f 73 72 63 2f 6d 61 6e 61 67 65 64 5f 74 61 62 6c 65 2f 75 73 65 5f 6d 61 6e 61 67 65 64 5f 74 61 62 6c 65 22 2c 20 22 74 79 70 65 73 63 72 69 70 74 2f 63 6f 6d 70 6f 6e 65 6e 74 5f 6c 69 62 72 61 72 69 65 73 2f 64 69 67 2d 65 78 70 65 72 69 6d 65 6e 74 61 6c 2f 73 72 63 2f 6d 61 6e 61 67 65 64 5f 74 61 62 Data Ascii: 4000/managed_table/table", "typescript/component_libraries/dig-experimental/src/managed_table/types", "typescript/component_libraries/dig-experimental/src/managed_table/use_managed_table", "typescript/component_libraries/dig-experimental/src/managed_tab
2023-08-10 21:18:54 UTC	357	IN	Data Raw: 73 65 72 76 65 72 0d 0a Data Ascii: server
2023-08-10 21:18:54 UTC	357	IN	Data Raw: 31 61 65 62 0d 0a 2f 73 74 61 74 69 63 2f 6a 73 2f 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 5f 6d 65 74 72 69 63 73 2f 6d 61 70 5f 70 61 74 68 5f 74 6f 5f 70 72 6f 64 75 63 74 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 5f 6d 65 74 72 69 63 73 2f 6d 65 74 72 69 63 73 5f 63 6f 6c 6c 65 63 74 6f 72 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 5f 6d 65 74 72 69 63 73 2f 6d 65 74 72 69 63 73 5f 6c 6f 67 67 65 72 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 5f 6d 65 74 72 69 63 73 2f 74 69 6d 65 5f 74 6f 5f 66 Data Ascii: 1aeb/static/js/user_centric_perf_metrics/map_path_to_product", "metaserver/static/js/user_centric_perf_metrics/metrics_collector", "metaserver/static/js/user_centric_perf_metrics/metrics_logger", "metaserver/static/js/user_centric_perf_metrics/time_to_f
2023-08-10 21:18:54 UTC	373	IN	Data Raw: 78 31 22 2c 20 22 32 30 34 38 78 31 22 2c 20 22 31 32 30 30 78 31 32 30 30 22 2c 20 22 31 32 30 30 78 36 30 30 22 5d 2c 20 22 46 49 4c 45 5f 52 45 51 55 45 53 54 5f 4e 4f 5f 44 45 41 44 4c 49 4e 45 22 3a 20 2d 31 2c 20 22 52 45 56 49 53 49 4f 4e 5f 52 45 41 53 4f 4e 22 3a 20 7b 22 41 44 44 22 3a 20 30 2c 20 22 4d 4f 56 45 22 3a 20 31 2c 20 22 45 44 49 54 22 3a 20 32 2c 20 22 52 45 4e 41 4d 45 22 3a 20 33 2c 20 22 52 45 53 54 4f 52 45 22 3a 20 34 2c 20 22 4d 4f 55 4e 54 22 3a 20 35 2c 20 22 55 4e 4d 4f 55 4e 54 22 3a 20 36 2c 20 22 53 48 41 52 45 22 3a 20 37 2c 20 22 55 4e 53 48 41 52 45 22 3a 20 38 2c 20 22 44 45 4c 45 54 45 22 3a 20 39 2c 20 22 50 52 45 56 5f 50 55 52 47 45 44 22 3a 20 31 30 7d 2c 20 22 41 43 43 4f 55 4e 54 5f 43 41 50 54 55 52 45 22 3a Data Ascii: x1", "2048x1", "1200x1200", "1200x600"], "FILE_REQUEST_NO_DEADLINE": -1, "REVISION_REASON": {"ADD": 0, "MOVE": 1, "EDIT": 2, "RENAME": 3, "RESTORE": 4, "MOUNT": 5, "UNMOUNT": 6, "SHARE": 7, "UNSHARE": 8, "DELETE": 9, "PREV_PURGED": 10}, "ACCOUNT_CAPTURE":
2023-08-10 21:18:54 UTC	377	IN	Data Raw: 31 30 34 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 64 77 73 2d 65 6e 73 65 6d 62 6c 65 2d 61 70 70 73 68 65 6c 6c 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 65 6e 73 65 6d 62 6c 65 2e 70 72 6f 63 65 73 73 43 68 75 6e 6b 28 22 65 6d 62 65 64 64 65 64 2d 61 70 70 22 2c 20 22 63 6f 6e 73 74 5f 6d 6f 64 75 6c 65 2d 31 30 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 65 6d 62 6c 65 2e 64 65 66 69 6e 65 43 6f 6e 73 74 4d 6f 64 75 6c 65 28 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 6d Data Ascii: 104f<script type="text/javascript" nonce="xQYSkz9IZ9nizVNxZ0fU"> /* global: ensemble is from dws-ensemble-appshell. */ ensemble.processChunk("embedded-app", "const_module-10", function(){ensemble.defineConstModule("metaserver/static/js/m
2023-08-10 21:18:54 UTC	390	IN	Data Raw: 34 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 51 59 53 6b 7a 39 49 5a 39 6e 69 7a 56 4e 78 5a 30 66 55 22 3e 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 65 6e 73 65 6d 62 6c 65 20 69 73 20 66 72 6f 6d 20 65 6e 73 65 6d 62 6c 65 5f 61 70 70 73 68 65 6c 6c 2e 6a 73 20 2a 2f 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 6c 3a 20 63 6f 6e 66 69 67 75 72 65 52 65 71 75 69 72 65 20 63 6f 6d 65 73 20 66 72 6f 6d 20 74 68 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 61 6b 65 5f 72 65 71 75 69 72 65 5f 73 6e 69 70 70 65 74 20 28 75 69 2f 70 61 67 65 2f 73 63 72 69 70 74 5f 74 61 67 73 2e 70 79 29 20 2a 2f 0a 20 20 20 20 20 20 20 20 2f 2a 20 67 6c 6f 62 61 Data Ascii: 4000<script type="text/javascript" nonce="xQYSkz9IZ9nizVNxZ0fU"> /* global: ensemble is from ensemble_appshell.js / / global: configureRequire comes from the fake_require_snippet (ui/page/script_tags.py) / / globa
2023-08-10 21:18:54 UTC	406	IN	Data Raw: 73 69 62 6c 65 5f 0d 0a Data Ascii: sible_
2023-08-10 21:18:54 UTC	406	IN	Data Raw: 31 36 34 33 0d 0a 61 6e 6e 6f 75 6e 63 65 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 61 73 73 65 72 74 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 61 74 74 72 69 62 75 74 69 6f 6e 5f 68 65 61 64 65 72 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 62 72 6f 77 73 65 72 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 62 72 6f 77 73 65 72 5f 64 65 74 65 63 74 69 6f 6e 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 65 78 63 65 70 74 69 6f 6e 22 2c 20 22 6d 65 74 61 73 65 72 76 65 72 2f 73 74 61 74 69 63 2f 6a 73 2f 63 6f 72 65 2f 65 78 63 65 Data Ascii: 1643announce", "metaserver/static/js/core/assert", "metaserver/static/js/core/attribution_header", "metaserver/static/js/core/browser", "metaserver/static/js/core/browser_detection", "metaserver/static/js/core/exception", "metaserver/static/js/core/exce

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.3	49760	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:56 UTC	1209	OUT	GET /static/fonts/SourceCodePro-It-1058.otf.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:56 UTC	1425	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 64312 Connection: close Date: Thu, 10 Aug 2023 21:18:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 02 Feb 2023 02:19:58 GMT ETag: "39746fa9261b312cccbdc84fa3868586" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 f6d3d027dc70c7291c2f685efb187ab2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 6558RofJYm5QbQqmswbTt0ylp9Jd6dt3W-0qTN7bGSOioxSntUir_w==
2023-08-10 21:18:56 UTC	1426	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 fb 38 00 0d 00 00 00 01 a6 5c 00 00 fa e5 00 01 0e d9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 84 ea 71 1a 84 06 1b a5 7e 1c ad 3e 06 60 00 d9 0e 01 36 02 24 03 93 70 04 06 05 99 16 07 20 5b 6c a5 91 09 99 43 76 7d 81 a1 2c 4d e0 dd 98 51 e7 10 93 8f 21 c5 aa 28 b8 ff bc 11 cd b1 7b 52 22 9b 76 c6 86 3b 7c ff 89 da 32 67 23 63 8f 03 48 ea 72 b3 ff ff ff ff ff ff 5f 97 2c 62 6c ed 2c b0 b7 b3 c7 a9 20 42 a2 9a e9 67 a6 e5 d7 bf 6e 86 c9 93 38 25 85 e5 d4 b2 04 92 94 05 b6 ee cb 95 94 88 2e 2f 60 25 ec 69 6b 19 36 01 a3 36 c9 8b b6 06 57 cc 53 53 b6 9d 74 38 27 58 6e e6 5d df f6 b2 da 1f e0 85 1b 70 d9 92 b0 a7 90 52 8e fd 1c 12 2d 4c 38 ba 64 29 d5 8e af 7e 1a df ce 92 73 9e 33 f2 4d 35 53 cd 54 33 Data Ascii: wOF2OTTO8\Fq~>`6$p [lCv},MQ!({R"v;\|2g#cHr_,bl, Bgn8%./`%ik66WSSt8'Xn]pR-L8d)~s3M5ST3
2023-08-10 21:18:56 UTC	1452	IN	Data Raw: 7a 68 df cd ab 2b 7d 5a e6 76 e9 73 a3 e0 e8 a1 70 f9 a6 4d d2 b7 25 b2 e2 e2 31 fa 28 e4 3d b2 1c 50 98 96 59 a1 ae ac 71 1b 6c 8b 61 8b f7 f3 a3 58 fa d4 9f f7 7e ef b7 18 08 4d 59 4a 32 d5 5d 23 8f e4 b5 98 ce b2 fc 89 9e f2 61 2f 71 db ff b2 90 75 41 c4 af e6 aa f0 28 e2 8c 8c 11 7f 6e 7b c3 8a 6d cb 77 ee 3f ff b0 17 55 b1 05 46 cc ae ee 9c e4 e8 c7 fd f4 e3 a9 e0 a8 63 a1 b2 ea cd 8e 8e 5e b6 9c fe f9 9a d8 05 6c bf 8f 85 db c8 dc e2 0c c2 35 d5 ed a7 b8 15 eb 15 57 51 05 0d c0 5e 42 62 1f 93 9d 2e 1a 30 78 a1 2f 74 f1 60 36 dd c0 0a 77 e4 58 a2 a7 c5 d9 40 18 93 6b 96 b0 a9 39 7e 64 3b cb 89 72 ef 05 df c9 8d d3 49 16 c5 ff e6 4d ff 01 36 c1 85 46 e5 c2 c9 ad 9d f1 dd c6 3c 92 7d cf 75 e9 9a 9b dd fb d8 6a 0c 40 76 c0 8d ed 35 9a 68 c7 75 f0 33 a0 Data Ascii: zh+}ZvspM%1(=PYqlaX~MYJ2]#a/quA(n{mw?UFc^l5WQ^Bb.0x/t`6wX@k9~d;rIM6F<}uj@v5hu3
2023-08-10 21:18:56 UTC	1460	IN	Data Raw: 10 71 ed e8 6f 73 b9 9b 1e cd 4b 55 0f 3a 1f 0d 6b 32 a8 63 eb d0 e9 d3 d1 df a6 f1 ad 61 f7 49 61 81 65 b3 cc 26 25 75 05 7a 08 3e f0 7b 81 fd 74 71 91 6c 93 03 3f 31 d9 0d e1 c5 20 e0 6c fb db fb bd 66 94 ab 9d c5 99 ee 09 dd 96 b0 6e 52 02 7b 8d b6 08 43 81 99 fc f0 cb 55 8f 90 47 0b 50 4d 1f 17 33 ee 63 cf 82 e7 2b 18 97 53 5d 1e b5 3a d4 fc db 9a e2 f0 a1 d1 02 fa 94 88 67 d9 24 db 6a 2d 1c 96 c4 9b c2 a1 52 81 64 8b ac e9 b7 00 5a bd 3a 0c a7 a8 b3 ba db 3b 96 66 08 30 47 cd d9 03 a4 5a 5c 5d 27 a1 fb af 14 35 2c a6 12 8d 6b 02 d9 89 e3 fe 55 fe 24 42 8c 08 95 fa c1 28 af 8f c1 d3 e8 b0 d7 6b 97 e6 f4 b1 61 a4 0b e0 1f f9 7b b5 9a 2e e5 35 a5 4b 78 ef 71 cd a2 13 4e 8c d3 1e 8b e0 92 1b cf 0d 17 6c 4a 80 69 5e 58 46 72 82 4d 5e 23 d9 b0 f1 8a 53 88 Data Ascii: qosKU:k2caIae&%uz>{tql?1 lfnR{CUGPM3c+S]:g$j-RdZ:;f0GZ\]'5,kU$B(ka{.5KxqNlJi^XFrM^#S
2023-08-10 21:18:56 UTC	1476	IN	Data Raw: cf 8d e0 6a b7 b4 be 33 ae 56 f4 33 11 2a 6d 8d 7c a1 c1 e2 26 c5 b2 57 cd 11 df d3 15 f2 49 4c 5a 7e ba f7 a9 41 e8 18 0a f8 86 ba a8 4a 82 82 ae 0a 59 b5 db e6 c4 52 4d 2f 30 4f 05 c6 cd 7c 4b f2 33 4f d9 63 72 18 47 d3 f6 8d 43 f4 c0 17 c6 a4 8a d8 c3 d2 ec c5 42 70 c4 7f de 8d 09 40 4b 38 c2 d9 f7 63 70 68 aa 3c 9e 00 b8 31 b4 19 8d 09 16 df 9f fa 18 a2 b7 4e 47 ef 43 7a 9d c1 48 42 58 0d 87 21 e9 09 9c c4 61 13 51 98 60 bb 6c 31 df cf 18 9c f6 e9 b0 05 28 e1 0c 17 38 b3 4b 6e fe 91 0a 5a ac 89 19 35 d8 a7 b0 21 5c 66 84 23 15 6b f9 8f 09 62 6f 2f 7d ac 39 77 09 c0 da cb 30 58 54 8a 32 e4 a9 4a 26 95 98 0a d8 46 dd 5e ab b9 cd 17 87 e4 11 fd e8 75 ed 14 21 73 16 d7 16 b6 77 f9 16 8c 6b 17 62 fb 59 09 35 50 bd e7 75 40 39 25 68 a0 57 8b da 9f 51 95 c6 Data Ascii: j3V3*m\|&WILZ~AJYRM/0O\|K3OcrGCBp@K8cph<1NGCzHBX!aQ`l1(8KnZ5!\f#kbo/}9w0XT2J&F^u!swkbY5Pu@9%hWQ
2023-08-10 21:18:57 UTC	1539	IN	Data Raw: bc 02 5f 54 be 94 83 c5 0c fc 3b 0b 85 c7 78 f4 6a c2 7d cc 76 d7 07 99 d5 68 f7 e7 20 fd 1e 7d 1c e6 aa a4 c9 60 1a e9 0d 20 d4 61 e2 d9 02 f8 84 63 1c 4c 23 a3 3d 95 72 83 23 55 e9 ad 6b 96 fc 89 4d 43 8e e0 dc 63 aa 22 4b aa bc 3a a6 68 9d ab 05 18 f1 7e 38 d8 e9 df fc ed b4 79 25 59 b2 b2 29 83 45 95 b5 27 de f3 6b 4b 04 a7 33 6d 1f ea 8d 1f ec 9f df 24 1d e9 b4 df c8 07 19 9c 6c 86 87 70 b6 91 1c df b5 e2 57 44 56 91 1a 56 f6 25 77 c8 d2 3a b1 b7 5b a9 6e a3 02 7f 71 5c 48 8e 72 cd 7f 23 0d 42 42 65 23 f4 e3 bd f6 6b db 57 e7 cf 76 6e 55 c6 8a d3 34 5f 75 cc 57 39 ab 69 47 cc 54 c1 44 ad 3d 28 05 34 23 d9 2a 86 d2 61 c8 51 f9 b9 25 cb 66 a3 62 fe af dc 2b 33 3d fb c3 b5 a7 1a 8a cc a5 23 55 43 1e 79 f7 ac c7 a6 d6 48 39 b7 ff 4c ce 36 db b7 9b d5 32 Data Ascii: _T;xj}vh }` acL#=r#UkMCc"K:h~8y%Y)E'kK3m$lpWDVV%w:[nq\Hr#BBe#kWvnU4_uW9iGTD=(4#*aQ%fb+3=#UCyH9L62

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
200	192.168.2.3	50044	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:22 UTC	6269	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_nun_Nob0yT2WjCUfgBCTog2.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; fpc=AmtiFc-BLE5KrbEEZ3hXsak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2023-08-10 21:19:22 UTC	6270	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:22 GMT Content-Type: application/x-javascript content-length: 138728 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Jul 2023 10:42:33 GMT ETag: 0x8DB82C4B32A50A1 x-ms-request-id: 47f6b00e-301e-0060-2b4e-c57551000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211922Z-x5gzr4myd17yt8qs06ygr7qr300000000dm00000000064n6 X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:22 UTC	6271	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 7b 5f e3 38 d2 30 fa ff f3 29 82 77 0f 63 4f 4c c8 05 68 70 70 e7 4d 03 dd cd 0c b7 21 61 7a 66 69 96 9f 93 08 70 77 62 67 6d 07 9a 09 79 3f fb a9 8b 64 cb 8e 43 f7 ec 73 7e 67 2e c1 96 4a b2 54 aa 2a 55 95 4a d2 e6 cf 6b ff 53 f9 b9 b2 f1 e3 ff 54 7a fd ee 65 bf 72 fe be d2 ff 78 7c 79 58 b9 80 b7 3f 2b 67 e7 fd e3 83 a3 1f af 07 3f 8a ff f7 1f fc b8 72 e7 8f 45 05 fe 0e bc 58 8c 2a 61 50 09 a3 8a 1f 0c c3 68 1a 46 5e 22 e2 ca 04 7e 23 df 1b 57 ee a2 70 52 49 1e 44 65 1a 85 5f c4 30 89 2b 63 3f 4e a0 d0 40 8c c3 a7 8a 09 d5 45 a3 ca 85 17 25 cf 95 e3 0b ab 06 f5 0b a8 cd bf f7 03 28 3d 0c a7 cf f0 fc 90 54 82 30 f1 87 a2 e2 05 23 aa 6d 0c 2f 41 2c 2a b3 60 24 a2 ca d3 83 3f 7c a8 9c fa c3 28 8c c3 bb a4 12 89 a1 f0 1f Data Ascii: {_80)wcOLhppM!azfipwbgmy?dCs~g.JTUJkSTzerx\|yX?+g?rEXaPhF^"~#WpRIDe_0+c?N@E%(=T0#m/A,*`$?\|(
2023-08-10 21:19:22 UTC	6286	IN	Data Raw: 8d d8 f6 cc dc 91 1a 43 bc 1f b7 93 d4 04 9d 2a 85 98 2e 9c 4f 44 54 b9 4d a7 88 1f 4b 32 32 f1 58 c0 f6 18 a8 68 ec 46 80 77 d3 5a d4 06 30 95 d3 85 50 78 a6 56 46 90 49 2d 14 96 83 10 48 1c 71 0d 66 2a ed 68 93 d2 cb c5 85 ba 83 24 3b 3b 56 9d 8a 96 1e 34 26 3a 26 5e ef 0a ea 84 8d 37 b3 0a 3c 57 e4 9c 98 24 a6 9b 66 f1 bc 78 91 5e 56 11 77 02 3e 85 59 66 80 a2 82 67 27 75 02 ac c0 4d 9c 00 2f f9 71 e4 41 4c d1 fa 7a c4 15 1e 8f d6 d7 a9 c5 7c 65 cb 9c 12 49 d9 34 d0 1f c1 bd 30 6c 09 eb a4 a5 38 85 06 5c 25 f2 e8 d3 23 69 c0 81 ad 37 d9 89 80 7a 13 44 0f 9e 86 2b 77 c4 00 cd 70 76 01 49 ea 96 78 3c 82 7c be b0 0a e7 9c 99 46 92 12 01 25 b0 43 dd c0 6b 95 82 5a 69 9e bb 06 9c 10 68 ed 74 f5 97 97 97 48 3b 5d a6 86 9a 83 3d 7f 04 a9 8d 67 67 8c 1d 61 cb Data Ascii: C.ODTMK22XhFwZ0PxVFI-Hqfh$;;V4&:&^7<W$fx^Vw>Yfg'uM/qALz\|eI40l8\%#i7zD+wpvIx<\|F%CkZihtH;]=gga
2023-08-10 21:19:22 UTC	6287	IN	Data Raw: e0 65 ac ed 5e 6d 50 90 c1 ea 36 1b b4 68 b5 5b a3 22 b7 07 b2 b5 de f6 f7 93 f4 5e 9b b6 5f ad 5a 91 1b 5d 27 d7 fe 0d 74 16 fe 66 99 37 d0 83 85 dd ab 9d 2c 4d 63 78 8a 36 4a 92 5e ed 51 9e d9 68 90 54 30 20 65 60 1a 8f 2a 70 25 cd b7 e0 51 ce 53 ee 7c 84 eb 57 57 d3 11 2d be e2 9d 5d 31 f9 35 79 2d 97 24 38 25 e3 b0 c3 e4 83 0a 79 7c 08 0a 66 14 3e 8b 11 64 e0 67 3d 5d 7e a6 e3 28 0a fd 47 86 10 96 af 8e d8 c6 e3 b2 03 33 b1 05 1e c3 9d 8d be c4 1a de 6b 6c e5 8a 06 aa 68 c0 c7 7c 63 39 37 d0 cf f0 16 8b 72 e6 ac 88 da ed 2d 1d 1d 7e 7b eb c2 40 17 98 51 bf 86 10 51 29 4f 51 1e 58 38 d5 b7 91 4d 0e 81 b6 54 62 fe 30 6f cc 3d f3 c0 60 00 ea e1 ab 2b 71 2c 7c 79 20 7d 45 aa a7 fe f2 d5 04 79 0b 18 d5 cc b4 89 ce f5 cd 42 73 e9 d1 fd 06 f6 5d 89 2c ab f0 Data Ascii: e^mP6h["^_Z]'tf7,Mcx6J^QhT0 e`*p%QS\|WW-]15y-$8%y\|f>dg=]~(G3klh\|c97r-~{@QQ)OQX8MTb0o=`+q,\|y }EyBs],
2023-08-10 21:19:22 UTC	6295	IN	Data Raw: 6f 73 ef de df b6 91 a4 8d fe 7f 3e 05 89 f5 cf 06 42 88 96 9c 64 32 01 8d f0 67 cb f2 c4 19 df d6 b2 93 cc c8 1a 2d 48 80 12 2c 0a e0 00 a0 64 8d c4 ef 7e ea a9 ea 6e 34 2e 94 9d d9 39 e7 7d 67 37 16 01 34 1a 7d ad ae eb 53 3b 8f a8 c7 a6 b6 dc 8f ea b3 3a c6 20 2d f0 cf 2a 7c 44 9d 5c 4e 46 a3 cc 1f 8d 56 5e f6 98 1a bd 50 d1 b6 8d b6 67 ec dd e8 d3 88 70 cc a6 2a 60 46 65 c5 8f 59 fe fa eb dc 5d f8 b1 ee a7 72 37 0c 64 52 37 eb 30 dd 68 14 eb 27 b5 4c 5e ca 5e a3 f7 e1 89 78 ef ae 45 22 5c 62 47 20 df e6 c8 95 f6 46 81 b2 fd 76 10 29 5b 63 95 d3 cf f3 7c ac 35 0f 74 54 2d 93 b2 e4 c0 4e 10 02 a2 2f 54 e0 01 bf f4 60 20 02 f6 78 f0 62 c1 05 ae 52 3a f5 a8 06 58 86 d9 7e 39 97 fc 23 52 b7 af 82 47 c5 67 2c 83 f3 98 ce 78 61 31 f3 0a f8 d8 cd c7 d9 cc 0e Data Ascii: os>Bd2g-H,d~n4.9}g74}S;: -\|D\NFV^Pgp`FeY]r7dR70h'L^^xE"\bG Fv)[c\|5tT-N/T` xbR:X~9#RGg,xa1
2023-08-10 21:19:22 UTC	6303	IN	Data Raw: 00 07 b0 4f ed 22 9c 93 b4 09 30 a1 92 01 56 33 16 67 b1 86 d6 59 fa cf 75 82 0d c5 2e 7c 6e 33 d5 b0 95 d0 87 8f c6 c2 e6 c5 79 fe 9e 22 9b 2b 5c 0f cf 1d bf e8 3f 3f 6d 0a 41 2c 07 56 d8 7c ea 9a 45 17 1a ac 04 f0 5e d4 d4 02 23 a7 1f 22 7f 03 4f f7 70 58 05 29 87 ca 57 4d 27 34 5a b4 91 90 3b 44 85 9b 17 19 b6 cf ec 11 9e ba 2d 54 4c a3 e0 58 b2 00 ef af 23 45 22 8f bf 48 fd 9e cd dc fa 65 49 c0 70 00 b3 ad c6 31 9a 97 25 37 00 cb bc 73 93 e9 bc 7a a1 92 05 2b 2d 2f cb af 24 bb 13 65 88 a8 7a 54 7b d5 f4 8b f4 b8 fe 7c a6 ac 2e 76 e7 95 37 a7 3a 86 b8 65 92 d8 fd 6b 1b 57 81 6e 13 63 c7 c9 e0 7b 28 a5 a3 9f 39 44 71 01 f4 a0 af 19 0a 56 5f 84 f5 c0 a8 5b 5b be 5f 37 b0 6e 79 cf 92 b6 26 db d0 53 f6 57 68 73 ad 1d 2f 90 cc b5 cf 39 db 23 36 ef d1 d6 aa Data Ascii: O"0V3gYu.\|n3y"+\??mA,V\|E^#"OpX)WM'4Z;D-TLX#E"HeIp1%7sz+-/$ezT{\|.v7:ekWnc{(9DqV_[[_7ny&SWhs/9#6

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
201	192.168.2.3	50046	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:23 UTC	6319	OUT	GET /__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; fpc=AmtiFc-BLE5KrbEEZ3hXsak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2023-08-10 21:19:24 UTC	6329	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 96d2e774-17fb-400d-a838-b07fb2690900 x-ms-ests-server: 2.1.16042.2 - WUS2 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} x-ms-clitelem: 1,0,0,, nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; expires=Sat, 09-Sep-2023 21:19:23 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; domain=larationr.top; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA; expires=Sat, 09-Sep-2023 21:19:23 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Thu, 10 Aug 2023 21:19:23 GMT Connection: close content-length: 44017 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:24 UTC	6331	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2023-08-10 21:19:24 UTC	6345	IN	Data Raw: 2e 31 2e 30 5c 75 30 30 32 36 75 61 69 64 3d 31 32 34 36 32 65 31 37 30 30 63 39 34 33 36 35 62 64 37 64 66 35 61 61 39 63 39 39 37 61 31 30 5c 75 30 30 32 36 6d 73 70 72 6f 78 79 3d 31 5c 75 30 30 32 36 69 73 73 75 65 72 3d 6d 73 6f 5c 75 30 30 32 36 74 65 6e 61 6e 74 3d 63 6f 6d 6d 6f 6e 5c 75 30 30 32 36 75 69 5f 6c 6f 63 61 6c 65 73 3d 65 6e 2d 55 53 5c 75 30 30 32 36 65 70 63 74 3d 50 41 51 41 42 41 41 45 41 41 41 41 74 79 6f 6c 44 4f 62 70 51 51 35 56 74 6c 49 34 75 47 6a 45 50 32 6d 53 46 30 47 34 51 32 46 61 36 56 61 6f 43 63 55 44 30 36 65 33 4c 52 63 4e 36 6b 72 4f 45 57 64 2d 52 74 44 61 48 44 74 77 76 55 4d 7a 59 46 74 64 52 4a 36 57 2d 76 5a 4f 67 69 43 70 31 51 57 74 36 47 4b 58 37 43 32 67 31 4f 6f 6c 79 77 46 62 6d 6b 5a 61 45 64 6b 62 42 Data Ascii: .1.0\u0026uaid=12462e1700c94365bd7df5aa9c997a10\u0026msproxy=1\u0026issuer=mso\u0026tenant=common\u0026ui_locales=en-US\u0026epct=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP2mSF0G4Q2Fa6VaoCcUD06e3LRcN6krOEWd-RtDaHDtwvUMzYFtdRJ6W-vZOgiCp1QWt6GKX7C2g1OolywFbmkZaEdkbB
2023-08-10 21:19:24 UTC	6361	IN	Data Raw: 62 6d 69 74 46 72 6f 6d 45 78 63 65 70 74 69 6f 6e 28 65 29 29 7d 7d 76 61 72 20 73 3d 6f 2e 72 26 26 6f 2e 72 5b 65 5d 3b 72 65 74 75 72 6e 20 72 3d 72 7c 7c 74 68 69 73 2c 73 26 26 28 73 2e 73 6b 69 70 54 69 6d 65 6f 75 74 3f 61 28 29 3a 6e 2e 73 65 74 54 69 6d 65 6f 75 74 28 61 2c 30 29 29 2c 73 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 2c 72 3f 31 3a 30 29 7d 76 61 72 20 6e 3d 77 69 6e 64 6f 77 3b 6e 2e 24 44 6f 7c 7c 28 6e 2e 24 44 6f 3d 7b 22 71 22 3a 5b 5d 2c 22 72 22 3a 5b 5d 2c 22 72 65 6d 6f 76 65 49 74 65 6d 73 22 3a 5b 5d 2c 22 6c 6f 63 6b 22 3a 30 2c 22 6f 22 3a 5b 5d 7d 29 3b 76 61 72 20 6f 3d 6e 2e 24 44 6f 3b 6f 2e 77 68 65 6e Data Ascii: bmitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
202	192.168.2.3	50047	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:23 UTC	6321	OUT	GET /favicon.ico HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; fpc=AmtiFc-BLE5KrbEEZ3hXsak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2023-08-10 21:19:23 UTC	6327	IN	HTTP/1.1 404 Not Found Cache-Control: private Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Strict-Transport-Security: max-age=31536000; includeSubDomains P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 3f031166-96e1-498e-ab78-17067bb80700 x-ms-ests-server: 2.1.16042.2 - WUS2 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Date: Thu, 10 Aug 2023 21:19:22 GMT Connection: close Content-Length: 0 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
203	192.168.2.3	50049	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:23 UTC	6323	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 957 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryVt8INBr5YctQCdlr Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:23 UTC	6324	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 74 38 49 4e 42 72 35 59 63 74 51 43 64 6c 72 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 74 38 49 4e 42 72 35 59 63 74 51 43 64 6c 72 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 74 38 49 4e 42 72 35 59 63 74 51 43 64 6c 72 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryVt8INBr5YctQCdlrContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryVt8INBr5YctQCdlrContent-Disposition: form-data; name="t"50aS4zgW2W1XP95GWz4lmdjP------WebKitFormBoundaryVt8INBr5YctQCdlrCont
2023-08-10 21:19:23 UTC	6325	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 10 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:23 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ac09abee8083462490b076a1c829c5a8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
204	192.168.2.3	50054	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:24 UTC	6374	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_xs4q-enqjizb-pd0ha63sw2.css HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA
2023-08-10 21:19:24 UTC	6413	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 20105 Content-Type: text/css Content-Encoding: gzip Content-MD5: 51nXYTkRfeACFNqVw7bA7Q== Last-Modified: Wed, 17 May 2023 19:54:03 GMT ETag: 0x8DB5710770A6D5D X-Cache: TCP_HIT x-ms-request-id: fe2de643-d01e-006e-48c1-cad74c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0JELVZAAAAADYXh+PF2H2SZMGwnQKwLsWRE0yQUExMDkxMjA4MDIzADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0XFTVZAAAAABJIqYe0eh6TJyJWhB578E4Q0gxQUEyMDIwNjA5MDUxADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Thu, 10 Aug 2023 21:19:24 GMT Connection: close
2023-08-10 21:19:24 UTC	6414	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2023-08-10 21:19:24 UTC	6429	IN	Data Raw: 1f 79 d1 1f 8d 39 f3 8f 3c 63 d1 2a 2c d3 2a 25 65 f0 2a c7 21 c8 58 c0 2f 2d e3 97 63 b7 a4 93 c1 67 70 06 f6 16 07 bf b7 9b 5f 39 2f ee 6d d5 57 b8 f2 d6 23 56 5b e6 64 62 b3 89 48 c7 44 40 ac 8b 12 82 6c 7a 5c c7 f4 9f 96 fe 0c cf 79 63 c5 45 b2 fa 4e 59 d1 58 57 59 54 63 11 b5 97 8d 45 92 a5 45 63 85 a6 3c b4 b1 ce cb 2b 6a f7 4b 2d 63 8c 4b 17 b9 2a b1 1e ee 68 d2 73 79 df d3 b9 a3 aa c8 97 1f 8b 22 c0 04 59 14 41 74 15 c2 3b 5a 66 75 4b a4 d5 66 a0 4a b0 d8 50 2b 04 d0 d6 ad 06 75 6b 41 43 ba e8 55 c3 c1 60 bc 4c 26 6e 9f b4 c6 19 64 a0 f6 21 80 d6 3e f9 b5 b2 05 0d eb 93 4f 5b 79 9f 1e a6 8c 7d 1e cf dc 03 77 34 cb c1 26 7e a1 a3 0d 81 a9 e1 86 c0 e4 78 03 95 19 dc f7 94 9b 0d c2 20 ad 02 68 68 68 1b 1e 26 02 71 8b b5 e1 a4 a0 a7 c9 e6 8d ae 15 59 Data Ascii: y9<c,%e!X/-cgp_9/mW#V[dbHD@lz\ycENYXWYTcEEc<+jK-cKhsy"YAt;ZfuKfJP+ukACU`L&nd!>O[y}w4&~x hhh&qY

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
205	192.168.2.3	50053	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:24 UTC	6376	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_sb6jQxfN8f3sA8faKcsD7Q2.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA
2023-08-10 21:19:24 UTC	6381	IN	HTTP/1.1 200 OK Content-Length: 689016 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:24 GMT Connection: close
2023-08-10 21:19:24 UTC	6382	IN	Data Raw: 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.protot
2023-08-10 21:19:24 UTC	6397	IN	Data Raw: 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 30 Data Ascii: cked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 110
2023-08-10 21:19:25 UTC	6448	IN	Data Raw: 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2023-08-10 21:19:25 UTC	6464	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 75 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromCu
2023-08-10 21:19:25 UTC	6480	IN	Data Raw: 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: /g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", }, r
2023-08-10 21:19:25 UTC	6496	IN	Data Raw: 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 73 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(s
2023-08-10 21:19:25 UTC	6512	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2023-08-10 21:19:25 UTC	6528	IN	Data Raw: 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2023-08-10 21:19:25 UTC	6544	IN	Data Raw: 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2023-08-10 21:19:25 UTC	6560	IN	Data Raw: 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 69 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onRegi
2023-08-10 21:19:25 UTC	6576	IN	Data Raw: 74 65 6e 73 69 6f 6e 73 3a 20 21 30 2c 0a 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 73 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 70 69 63 6b 65 72 5f 61 63 63 6f 75 6e 74 5f 6d 73 61 5f 34 65 33 36 31 39 61 34 39 39 66 64 37 34 63 30 63 36 36 64 35 32 31 35 35 31 34 62 35 36 36 61 2e 70 6e 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 Data Ascii: tensions: !0, }), (e.exports = s); }, function (e, n, t) { e.exports = t.p + "content/images/picker_account_msa_4e3619a499fd74c0c66d5215514b566a.png"; }, function (e, n, t) { e.exports = t.p + "content/ima
2023-08-10 21:19:25 UTC	6592	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 20 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 47 69 74 48 75 62 46 65 64 3a 20 65 2e 69 73 47 69 74 48 75 62 46 65 64 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 Data Ascii: , isWindowsSso: e.isWindowsSso \|\| !1, isMeControlSession: !0, isGitHubFed: e.isGitHubFed \|\| !1, } ); }); }, parseBssoSessions: function (e) { ret
2023-08-10 21:19:25 UTC	6608	IN	Data Raw: 6f 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 4d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 65 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 43 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 55 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 53 68 61 72 65 64 44 61 74 61 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: o.setDefaultFocus = function () { var e = M(); e && e.setDefaultFocus && e.setDefaultFocus(); }), (o.getCurrentViewId = function () { return U(); }), (o.getSharedData = function () {
2023-08-10 21:19:25 UTC	6624	IN	Data Raw: 6e 20 6e 29 20 61 2e 63 61 6c 6c 28 6e 2c 20 74 29 20 26 26 20 28 65 5b 74 5d 20 3d 20 6e 5b 74 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 20 3d 20 6e 29 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 20 6e 2c 20 74 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 65 5b 6e 5d 2e 6d 61 74 63 68 28 68 29 20 7c 7c 20 5b 5d 3b Data Ascii: n n) a.call(n, t) && (e[t] = n[t]); return e; } function t(e, n) { return (e.__proto__ = n), e; } function i(e, n, t, i) { var a = e[n].match(h) \|\| [];
2023-08-10 21:19:25 UTC	6640	IN	Data Raw: 20 20 61 5b 64 5b 6c 5d 2e 6e 61 6d 65 5d 20 3d 20 64 5b 6c 5d 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 20 3d 20 53 2e 61 2e 66 28 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 20 69 6e 20 28 28 75 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 61 63 74 69 6f 6e 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 6d 65 74 68 6f 64 20 Data Ascii: a[d[l].name] = d[l].value; } t = S.a.f(t); var u = c.createElement("form"); for (var p in ((u.style.display = "none"), (u.action = r), (u.method
2023-08-10 21:19:25 UTC	6656	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 28 69 20 3d 20 21 30 29 2c 20 65 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 72 2c 20 22 64 69 72 74 79 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 21 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f Data Ascii: (i = !0), e.notifySubscribers(r, "dirty"); } finally { i = !1; } } }; })); }, no
2023-08-10 21:19:25 UTC	6672	IN	Data Raw: 20 20 20 20 20 20 20 20 63 20 3d 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 54 20 3d 20 53 2e 61 2e 44 61 28 22 5f 73 74 61 74 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 53 2e 6f 20 3d 20 53 2e 24 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: c = a; } }); } }); var T = S.a.Da("_state"); S.o = S.$ = function (e, n, t) { function i() { if (0 < arguments.length) {
2023-08-10 21:19:25 UTC	6688	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 64 2c 20 6c 20 3d 20 30 3b 20 28 64 20 3d 20 72 5b 6c 5d 29 3b 20 2b 2b 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 64 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 34 34 20 3d 3d 3d 20 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3e 3d 20 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 70 75 73 68 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 26 26 20 73 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: for (var d, l = 0; (d = r[l]); ++l) { var u = d.charCodeAt(0); if (44 === u) { if (0 >= c) { t.push( n && s.length
2023-08-10 21:19:25 UTC	6704	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 67 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 20 26 26 20 69 28 62 28 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 68 61 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 20 69 6e 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return a[e]; }; (g.get = function (e) { return a[e] && i(b(e)); }), (g.has = function (e) { return e in a;
2023-08-10 21:19:25 UTC	6720	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 6f 6d 70 6f 6e 65 6e 74 20 27 22 20 2b 20 65 20 2b 20 22 27 3a 20 22 20 2b 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 53 2e 6a 2e 72 65 67 69 73 74 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 Data Ascii: } function o(e) { return function (n) { throw Error("Component '" + e + "': " + n); }; } var r = {}; (S.j.register = function (e, n) {
2023-08-10 21:19:25 UTC	6736	IN	Data Raw: 20 20 20 20 20 20 20 20 6f 20 3d 20 61 2e 62 6f 64 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 6f 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 61 20 3d 20 6e 28 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 61 2c 20 74 2c 20 22 68 61 73 66 6f 63 75 73 22 2c 20 69 2c 20 21 30 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b 6f 5f 68 61 73 66 6f 63 75 73 4c 61 73 74 56 61 6c 75 65 20 3d 20 69 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b Data Ascii: o = a.body; } i = o === e; } (a = n()), S.m.eb(a, t, "hasfocus", i, !0), (e.__ko_hasfocusLastValue = i), (e.__k
2023-08-10 21:19:25 UTC	6752	IN	Data Raw: 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 69 2c 20 74 2c 20 22 76 61 6c 75 65 22 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 53 2e 61 2e 57 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 61 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 65 78 74 22 20 21 3d 20 65 2e 74 79 70 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 66 66 22 20 3d 3d 20 65 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 66 6f 72 6d 20 26 26 20 22 6f 66 66 22 20 3d 3d 20 65 2e 66 6f 72 6d 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 Data Ascii: S.m.eb(i, t, "value", a); }; !S.a.W \|\| !a \|\| "text" != e.type \|\| "off" == e.autocomplete \|\| (e.form && "off" == e.form.autocomplete
2023-08-10 21:19:25 UTC	6768	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 3d 3d 20 72 20 7c 7c 20 6e 75 6c 6c 20 3d 3d 3d 20 65 20 7c 7c 20 21 53 2e 61 2e 66 28 65 2e 5f 64 65 73 74 72 6f 79 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 28 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return ( e === r \|\| null === e \|\| !S.a.f(e._destroy) ); })), d(e); }, null,
2023-08-10 21:19:25 UTC	6784	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 29 28 69 2c 20 74 2e 65 6c 65 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 6f 2c 20 72 2c 20 73 2c 20 63 Data Ascii: })(i, t.element), i ); })), i(n); }); }, }), (n = e.bindingHandlers.component.init), (e.bindingHandlers.component.init = function (t, o, r, s, c
2023-08-10 21:19:25 UTC	6800	IN	Data Raw: 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 33 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 69 2e 53 74 72 69 6e 67 3b 0a 20 20 20 20 6e 2e 61 70 70 6c 79 45 78 74 65 6e 73 69 6f 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 3b 0a 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 0a 20 20 20 Data Ascii: n, t) { var i = t(3), a = t(1), o = i.String; n.applyExtensions = function (e) { var n; (n = e.bindingProvider.instance.preprocessNode), (e.bindingProvider.instance.preprocessNode = function (t) { if (
2023-08-10 21:19:25 UTC	6816	IN	Data Raw: 20 3a 20 66 65 20 26 26 20 6e 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 26 26 20 28 73 20 3d 20 44 2e 55 73 65 72 6e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 65 20 7c 7c 20 6f 20 7c 7c 20 62 65 20 7c 7c 20 67 65 29 20 26 26 20 28 72 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6e 20 26 26 20 28 72 20 3d 20 73 20 3d 20 44 2e 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 4c 6f 63 61 74 69 6f 6e 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 69 6e 69 74 69 61 6c 56 69 65 77 49 64 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 63 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 28 74 2c Data Ascii: : fe && n.getServerError() && (s = D.Username); (ue \|\| o \|\| be \|\| ge) && (r = s); } sn && (r = s = D.RemoteConnectLocation), (n.initialViewId = r), (n.currentViewId = s); })(t,
2023-08-10 21:19:25 UTC	6832	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6e 28 65 2c 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 49 6e 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 61 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 Data Ascii: , (n.fetchSessions_onUpdateUserTiles = function (e, n) { setTimeout(function () { hn(e, n); }); }), (n.fetchSessions_onIncrementAsyncTileRequestCount = function () { n.asyncTileRequestCount
2023-08-10 21:19:25 UTC	6848	IN	Data Raw: 20 20 20 28 6e 2e 76 69 65 77 5f 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 69 73 52 65 71 75 65 73 74 50 65 6e 64 69 6e 67 28 65 29 2c 20 6e 2e 73 68 6f 77 4c 69 67 68 74 62 6f 78 50 72 6f 67 72 65 73 73 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 6f 6f 74 65 72 5f 61 67 72 65 65 6d 65 6e 74 43 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6e 2e 61 67 72 65 65 6d 65 6e 74 54 79 70 65 20 3d 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 76 69 65 77 5f 6f 6e 53 77 69 74 Data Ascii: (n.view_onSetPendingRequest = function (e) { n.isRequestPending(e), n.showLightboxProgress(e); }), (n.footer_agreementClick = function (e) { (n.agreementType = e), n.paginationControlMethods().view_onSwit
2023-08-10 21:19:25 UTC	6864	IN	Data Raw: 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 31 5f 63 66 65 39 63 62 36 32 65 62 62 36 36 30 35 65 30 33 66 62 38 64 32 38 35 63 36 31 31 62 34 38 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 33 2d 73 6d 61 6c 6c 5f 61 31 39 65 37 62 63 61 34 34 36 36 30 35 39 65 61 64 64 33 34 34 61 62 31 31 65 36 39 30 34 66 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 Data Ascii: p + "content/images/appbackgrounds/11_cfe9cb62ebb6605e03fb8d285c611b48.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/13-small_a19e7bca4466059eadd344ab11e6904f.jpg"; }, function (e, n, t) {
2023-08-10 21:19:25 UTC	6880	IN	Data Raw: 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 2d 73 6d 61 6c 6c 5f 34 66 36 33 63 34 33 37 61 32 30 39 61 37 61 64 30 62 63 66 37 63 35 33 32 61 34 62 35 63 32 62 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 5f 37 34 39 36 32 64 39 36 65 64 34 34 39 38 61 35 33 62 32 37 33 64 37 63 37 66 39 37 63 64 39 35 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 Data Ascii: e.exports = t.p + "content/images/appbackgrounds/67-small_4f63c437a209a7ad0bcf7c532a4b5c2b.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/67_74962d96ed4498a53b273d7c7f97cd95.jpg"; },
2023-08-10 21:19:25 UTC	6896	IN	Data Raw: 20 20 20 20 20 28 6e 20 3d 20 5f 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 29 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 75 2e 45 72 72 6f 72 28 22 4e 6f 45 78 74 65 6e 73 69 6f 6e 22 2c 20 22 45 78 74 65 6e 73 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 2e 22 2c 20 6e 75 6c 6c 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 44 61 74 61 50 6f 69 6e 74 28 22 65 78 74 65 6e 73 69 6f 6e 2e 69 64 22 2c 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 4d 65 73 73 61 67 65 28 22 55 73 69 6e 67 20 43 68 72 6f 6d 65 20 65 78 74 65 6e 73 69 6f 6e 20 77 69 74 68 20 69 64 20 22 20 2b 20 65 29 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: (n = _.firstChild); if (!e) throw new u.Error("NoExtension", "Extension is not installed.", null); return ( p.logDataPoint("extension.id", e), p.logMessage("Using Chrome extension with id " + e),
2023-08-10 21:19:25 UTC	6912	IN	Data Raw: 20 20 20 43 68 65 63 6b 62 6f 78 3a 20 22 63 68 65 63 6b 62 6f 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 42 75 74 74 6f 6e 3a 20 22 62 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 44 61 74 61 3a 20 22 45 78 63 65 70 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 3a 20 22 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 45 78 63 65 70 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 55 73 65 72 41 63 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: Checkbox: "checkbox", Button: "button", ExceptionData: "ExceptionData", PageActionData: "PageActionData", ExceptionsTablesuffix: "Exceptions", PageActtionsTablesuffix: "UserActions",
2023-08-10 21:19:25 UTC	6928	IN	Data Raw: 6f 76 69 64 65 72 20 3d 20 69 2e 45 6d 70 74 79 45 76 65 6e 74 50 72 6f 76 69 64 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 3b 0a 20 20 20 20 20 20 20 20 20 20 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 69 2e 45 76 65 6e 74 41 70 69 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 69 Data Ascii: ovider = i.EmptyEventProvider); }, , , , , function (e, n, t) { var i; !(function (e) { var n = t(1), i = t(2), a = i.EventApi, o = i
2023-08-10 21:19:25 UTC	6944	IN	Data Raw: 61 6c 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 3a 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 3a 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 45 72 72 6f 72 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 63 65 6c 3a 20 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 5f 6f 6e 43 61 6e 63 65 6c 2c 5c 6e 20 20 20 20 20 Data Ascii: alViewId,\n currentViewId: currentViewId,\n initialSharedData: initialSharedData,\n initialError: $loginPage.getServerError() },\n event: {\n cancel: paginationControl_onCancel,\n
2023-08-10 21:19:25 UTC	6960	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 76 69 65 77 5f 6f 6e 52 65 64 69 72 65 63 74 20 7d 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 76 69 65 77 69 64 3d 22 27 20 2b 0a 20 20 20 20 20 20 74 28 30 29 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2e 49 64 70 52 65 64 69 72 65 63 74 53 70 65 65 64 62 75 6d 70 20 2b 0a 20 20 20 20 20 20 27 22 20 64 61 74 61 2d 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 3d 22 74 72 75 65 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 70 61 67 65 56 69 65 77 43 6f 6d 70 6f 6e 65 6e 74 3a 20 7b 20 6e 61 6d 65 3a 20 5c 27 6c 6f 67 69 6e 2d 69 Data Ascii: redirect: $loginPage.view_onRedirect } }">\n </div>\n\n <div data-viewid="' + t(0).PaginatedState.IdpRedirectSpeedbump + '" data-showIdentityBanner="true" data-bind="pageViewComponent: { name: \'login-i
2023-08-10 21:19:25 UTC	6976	IN	Data Raw: 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 4e 65 77 55 73 65 72 22 20 76 61 6c 75 65 3d 22 31 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 46 6f 75 6e 64 4d 53 41 73 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 73 46 6f 75 6e 64 4d 53 41 73 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 73 70 6f 73 74 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 66 50 4f 53 54 5f 46 6f 72 63 65 53 69 67 6e 69 6e 20 3f 20 31 20 3a 20 30 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 Data Ascii: \n <input type="hidden" name="NewUser" value="1" />\n <input type="hidden" name="FoundMSAs" data-bind="value: svr.sFoundMSAs" />\n <input type="hidden" name="fspost" data-bind="value: svr.fPOST_ForceSignin ? 1 : 0" />\n <input
2023-08-10 21:19:25 UTC	6992	IN	Data Raw: 69 20 3d 20 7b 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 70 6e 67 22 3a 20 33 34 33 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 73 76 67 22 3a 20 33 34 34 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 70 6e 67 22 3a 20 33 34 35 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 73 76 67 22 3a 20 33 34 36 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 70 6e 67 22 3a 20 33 34 37 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 73 76 67 22 3a 20 33 34 38 2c 0a 20 20 20 20 20 20 22 2e 2f Data Ascii: i = { "./AppCentipede_Beam.png": 343, "./AppCentipede_Beam.svg": 344, "./AppCentipede_Beam_white.png": 345, "./AppCentipede_Beam_white.svg": 346, "./AppCentipede_Bing.png": 347, "./AppCentipede_Bing.svg": 348, "./
2023-08-10 21:19:25 UTC	7008	IN	Data Raw: 6e 74 61 69 6e 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 68 65 61 64 65 72 5c 27 3a 20 74 72 75 65 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 68 65 61 64 65 72 4c 6f 67 6f 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 74 74 72 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 68 65 61 64 65 72 4c 6f 67 6f 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3a 20 73 74 72 5b 5c 27 Data Ascii: ntainer">\n <div id="header" data-bind="externalCss: { \'header\': true }">\n <img id="headerLogo" role="img" data-bind="\n attr: {\n src: headerLogo,\n alt: str[\'
2023-08-10 21:19:25 UTC	7024	IN	Data Raw: 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 66 53 68 6f 77 43 6f 70 79 44 65 62 75 67 44 65 74 61 69 6c 73 4c 69 6e 6b 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 64 65 62 75 67 44 65 74 61 69 6c 73 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 62 6f 6c 64 20 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 69 6e 67 2d 74 65 78 74 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 Data Ascii: <div class="table-cell">\n \x3c!-- ko if: svr.fShowCopyDebugDetailsLink --\x3e\n <div class="debug-details-header">\n <div id="debugDetailsHeader" class="bold debug-details-heading-text" role="heading" aria-leve
2023-08-10 21:19:25 UTC	7040	IN	Data Raw: 69 64 65 49 6e 4e 65 78 74 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 6f 75 74 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 4f 75 74 42 61 63 6b 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 69 6e 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 49 6e 42 61 63 6b 28 29 20 7d 5c 22 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 66 6f 72 65 61 63 68 3a 20 76 69 65 77 73 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 24 70 61 72 65 6e 74 2e 63 75 72 72 65 6e 74 56 69 65 77 49 6e 64 65 78 28 29 20 3d 3d 3d 20 24 69 6e 64 65 78 28 29 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ideInNext(),\n 'slide-out-back': animate.isSlideOutBack(),\n 'slide-in-back': animate.isSlideInBack() }\">\n\n \x3c!-- ko foreach: views --\x3e\n \x3c!-- ko if: $parent.currentViewIndex() === $index() --\x3e\n
2023-08-10 21:19:25 UTC	7056	IN	Data Raw: 76 69 63 65 43 6f 64 65 20 3d 20 74 20 3f 20 74 2e 64 65 76 69 63 65 43 6f 64 65 20 3a 20 6e 75 6c 6c 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 3d 20 22 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 75 73 65 45 76 69 63 74 65 64 43 72 65 64 65 6e 74 69 61 6c 73 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 73 68 6f 77 43 72 65 64 56 69 65 77 42 72 61 6e 64 69 6e 67 44 65 73 63 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 69 73 53 69 67 6e 75 70 50 6f 73 74 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 4e 65 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 28 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 20 3d Data Ascii: viceCode = t ? t.deviceCode : null), (e.proofConfirmation = ""), (e.useEvictedCredentials = !1), (e.showCredViewBrandingDesc = !1), (e.isSignupPost = !1), Ne && ((e.availableCreds =
2023-08-10 21:19:25 UTC	7072	IN	Data Raw: 20 73 74 72 5b 5c 27 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 75 70 5f 4c 69 6e 6b 5c 27 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3a 20 73 76 72 2e 75 72 6c 53 69 67 6e 55 70 20 7c 7c 20 5c 27 23 5c 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 3a 20 73 69 67 6e 75 70 5f 6f 6e 43 6c 69 63 6b 22 3e 3c 2f 61 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 6e 6f 74 3a 20 73 76 72 2e 66 49 73 53 65 6c 66 53 65 72 76 69 63 65 Data Ascii: str[\'STR_SSSU_Signup_Link\'],\n href: svr.urlSignUp \|\| \'#\',\n click: signup_onClick"></a>\n </div>\n \x3c!-- /ko --\x3e\n\n \x3c!-- ko ifnot: svr.fIsSelfService
2023-08-10 21:19:25 UTC	7088	IN	Data Raw: 3d 20 64 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 22 5c 78 33 63 21 2d 2d 20 22 20 2b 0a 20 20 20 20 20 20 28 74 28 31 33 29 2c 0a 20 20 20 20 20 20 27 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 69 64 3d 22 6d 6f 72 65 49 6e 66 6f 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 72 6f 77 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 74 65 78 74 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 2c 20 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 74 Data Ascii: = d); }, function (e, n, t) { e.exports = "\x3c!-- " + (t(13), ' --\x3e\n\n\x3c!-- ko if: moreInfoTitle --\x3e\n<div id="moreInfoHeader" class="row" role="heading" aria-level="1" data-bind="text: moreInfoTitle, externalCss: { \'t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
206	192.168.2.3	50052	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:24 UTC	6378	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vts8ra1it9l0lgwizaxzhg2.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA
2023-08-10 21:19:24 UTC	6380	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:24 GMT Content-Type: application/x-javascript content-length: 49972 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 13 Jul 2023 00:28:45 GMT ETag: 0x8DB83381EAF7708 x-ms-request-id: ae0d30f7-001e-0057-4144-c5854e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211924Z-5rgdwh68wx2qf3muefkxsu4sxs00000000tg00000001manf X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:24 UTC	6381	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-08-10 21:19:24 UTC	6434	IN	Data Raw: dd 7d cb 76 23 47 b2 d8 de 5f 51 83 f1 51 37 af aa 21 3c f8 44 0b 6a 83 00 d8 c4 6d 10 80 00 b0 29 1d 49 c6 29 a2 92 64 4d 03 55 b8 55 85 66 73 a8 f6 99 9d 17 77 e1 ad bd f3 c2 2b 2f bd f1 de 9f 32 e7 5c 7f 87 e3 91 99 95 f5 00 40 4a 1a cd bd 9e 33 a7 45 e4 23 32 32 32 32 32 22 32 32 ea 0f 37 6b 7f 1e 7b 81 ff 52 ec 3d aa bf ad e0 a5 bf f7 e8 dd bc f4 7e f0 7f da 0b 45 bc 0e 7d 0b ff 2e 8b 4f ab 20 8c a3 d7 1f 9d d0 8a 9b 58 d4 7c 94 65 8d c7 cf b6 e7 36 7c 7b 11 38 ae 70 1b 7f a8 7e 7e 2d bb 0a ec 3a 77 16 8b 97 b1 82 60 c7 76 f2 77 b0 07 3f b8 5b f3 0f 95 a4 e2 33 0e e3 35 1f 35 a0 a0 bc 6c 0a 3b 28 cf 9b 1e fc bb 6a 96 4a 76 f0 b2 b2 f7 f9 e5 0f c9 34 ec c0 f6 00 f9 97 b5 3d c2 d2 6f 7a 2f ab 00 1f fe 73 b0 67 87 f0 9f c3 3d db 69 86 e5 49 1c 7a fe 6d Data Ascii: }v#G_QQ7!<Djm)I)dMUUfsw+/2\@J3E#22222"227k{R=~E}.O X\|e6\|{8p~~-:w`vw?[355l;(jJv4=oz/sg=iIzm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
207	192.168.2.3	50056	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:25 UTC	7089	OUT	GET /?bgbpbtvq HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA; brcap=0
2023-08-10 21:19:26 UTC	7096	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 7a488910-3f3e-4cc3-a22a-72ed915f2800 x-ms-ests-server: 2.1.15984.6 - EUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; expires=Sat, 09-Sep-2023 21:19:26 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; domain=larationr.top; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA; expires=Sat, 09-Sep-2023 21:19:26 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Thu, 10 Aug 2023 21:19:25 GMT Connection: close content-length: 36644 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:26 UTC	7098	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2023-08-10 21:19:26 UTC	7112	IN	Data Raw: 59 37 77 77 46 4f 78 67 30 38 6a 41 64 34 47 58 37 77 72 58 6e 62 64 5f 62 37 6e 6d 64 76 50 56 37 78 36 36 51 6e 65 35 51 36 35 65 58 35 6d 6d 61 6d 6c 4f 58 34 5a 69 52 35 5a 4a 71 5a 6c 35 70 37 52 47 72 37 75 56 51 5a 6c 50 74 6b 42 37 74 6c 2d 42 69 37 56 71 52 37 42 36 62 62 41 67 41 31 5c 75 30 30 32 36 66 6c 6f 77 3d 66 69 64 6f 5c 75 30 30 32 36 65 73 74 73 66 65 64 3d 31 5c 75 30 30 32 36 75 61 69 64 3d 37 35 30 36 35 37 39 33 39 35 64 39 34 65 30 66 38 66 33 38 39 38 65 34 34 35 36 37 65 37 35 63 5c 75 30 30 32 36 66 63 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 70 6f 72 74 61 6c 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 2e 6f 72 67 69 64 2e 63 6f 6d 22 2c 22 75 72 6c 52 65 66 72 65 73 68 22 3a 22 68 74 74 70 73 3a 2f 2f Data Ascii: Y7wwFOxg08jAd4GX7wrXnbd_b7nmdvPV7x66Qne5Q65eX5mmamlOX4ZiR5ZJqZl5p7RGr7uVQZlPtkB7tl-Bi7VqR7B6bbAgA1\u0026flow=fido\u0026estsfed=1\u0026uaid=7506579395d94e0f8f3898e44567e75c\u0026fci=https%3a%2f%2fportal.microsoftonline.com.orgid.com","urlRefresh":"https://
2023-08-10 21:19:26 UTC	7128	IN	Data Raw: 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 63 61 6e 61 72 79 22 2c 70 2e 61 70 69 43 61 6e 61 72 79 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 63 6c 69 65 6e 74 2d 72 65 71 75 65 73 74 2d 69 64 22 2c 70 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 68 70 67 69 64 22 2c 70 2e 68 70 67 69 64 7c 7c 30 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 68 70 67 61 63 74 22 2c 70 2e 68 70 67 61 63 74 7c 7c 30 29 3b 66 6f 72 28 76 61 72 20 72 3d 2d 31 2c 74 3d 30 3b 74 3c 62 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 69 Data Ascii: nt-Type","application/json; charset=UTF-8"),e.setRequestHeader("canary",p.apiCanary),e.setRequestHeader("client-request-id",p.correlationId),e.setRequestHeader("hpgid",p.hpgid\|\|0),e.setRequestHeader("hpgact",p.hpgact\|\|0);for(var r=-1,t=0;t<b.length;t++){i

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
208	192.168.2.3	50057	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:25 UTC	7091	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA; brcap=0
2023-08-10 21:19:26 UTC	7134	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:26 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 2f80afcd-401e-002b-2237-c58357000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211926Z-gysw6uasgd5dm6ez0bq3hhaggg0000000cx000000000b1fn X-Cache: TCP_HIT Accept-Ranges: bytes
2023-08-10 21:19:26 UTC	7135	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2023-08-10 21:19:26 UTC	7150	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
209	192.168.2.3	50058	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:25 UTC	7093	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPgdWA186UXI6y3i5JpLkrJ6TQeAJ01JuYhw-Lbcbyaaa-efP7phv6sx6t4jPUw0iDGYOkJzzcGhAJ-gwLpb2V4xBeEEmHCOqVUJ-c0n1axU4gAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPD6ScgyVeAJdC0NTt4jiIDQd-Ug3tlr7d4SqEKM9hpvM7KZvgpgIQCMBzvNRGdqEi6dyK9gB9s0pd8L4YezjLObZcgwg2dS4_jNS6PaS3PUvcWuklgYq9e5r3UYJ7J2gL0agkD18wW1BG46kj7a-ne1FwJxbJPsz1PwGcmKAqV8LFjzpJEec-hGQ66QhOP7jaYZSvLNVNtO8T45TGeVPnomqr3arHTBBF5WiQ7w5Wvc8gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAA
2023-08-10 21:19:26 UTC	7151	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 content-length: 109863 Content-Type: application/x-javascript Content-Encoding: gzip Content-MD5: todPgSbCBNAfnMYQ5LVdvw== Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 X-Cache: TCP_MISS x-ms-request-id: 55266752-901e-0046-49d0-cb1e6e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0XlTVZAAAAACLfnx5iXoOQ7xzYRDxOdpARE0yQUExMDkxMjA3MDM1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0XlTVZAAAAAASYm55xvrSS5wK2axYcmMtQ0gxQUEyMDIwNjA4MDIxADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Thu, 10 Aug 2023 21:19:25 GMT Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:26 UTC	7153	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E]$\|zmk3h-SznuJ2V.tx~%Y
2023-08-10 21:19:26 UTC	7167	IN	Data Raw: 8e a4 f7 2d 8f 77 77 7c 72 38 78 ec df a1 2f d7 a1 7f de 1d 60 1a 1b ee a5 76 f8 38 18 3c 06 e6 f4 ec b1 3f c6 58 5c 71 5a 51 98 91 82 1c 1d f3 87 7f 83 e1 64 cd 06 60 1c e8 47 73 5f 03 81 f5 5d ca dd 73 3a 5e d6 25 77 9c c9 64 d0 5f a7 5d de 12 f7 a7 44 cf c4 dd 43 42 df 2b 0e bb 14 5d ad 38 c0 30 7d 13 7a b1 89 68 d2 fc b3 d4 37 1c 96 87 fd 23 5d 77 d8 ac 7b 7e 7e b2 46 5f 8d 93 c3 fd 74 8d ed 1a df d2 a8 d5 c7 87 ae 8f 07 c3 f5 10 98 1f 6c 66 ff e4 10 1b a8 b5 c4 83 45 a5 d2 a7 c9 61 9f 24 3d 2b 31 6b 72 6b 95 a9 2b 79 ec f3 c8 d9 e7 d9 7a 78 d4 0f a8 77 d9 a9 7b 00 ca 16 4d 63 eb 5f 0c 4c cf 01 a3 b5 83 5d cd d6 d3 73 7a 32 c0 26 c8 e3 9b 29 ff e3 f9 e4 9e 2b 72 16 fc f5 7d d1 59 c3 7f 7f e0 69 0b 36 68 6a 2f 5f fe 44 99 1d ea 3e c1 22 b6 c1 58 6e 0e Data Ascii: -ww\|r8x/`v8<?X\qZQd`Gs_]s:^%wd_]DCB+]80}zh7#]w{~~F_tlfEa$=+1krk+yzxw{Mc_L]sz2&)+r}Yi6hj/_D>"Xn
2023-08-10 21:19:26 UTC	7169	IN	Data Raw: 23 30 22 75 c1 a1 5b a0 67 5c a3 58 32 27 9a 62 c7 a1 cd 04 4a 6f 34 45 70 03 b3 9f b8 bb 44 67 b9 38 b0 3b 37 09 72 77 d0 9d 93 c7 5d ad 74 cb 27 62 b8 95 4f e1 cc ec 52 35 5a 41 ba 85 ae 58 30 9c 7a a4 44 c9 ad f6 53 1e c9 0b d9 b1 eb 4e c8 a4 8e e4 ba 86 5b 12 3a 6f 2d f6 c5 6d f2 c4 30 68 7d 23 11 e4 9e 9b 3f 92 16 d1 30 7e c9 4a 72 85 b5 29 df 30 5f 1a eb d9 6c 18 53 82 a5 60 c4 f4 88 e1 a4 79 f5 39 95 31 36 4c f7 9f da 08 80 a3 9a ba 59 be 74 46 4c b3 9b cc 37 3d 92 b8 1f ee 9d 10 a3 05 97 29 9e c4 3e 2e 6c de d3 d8 56 b4 50 23 73 d1 f4 3b b9 0b e5 c7 f5 6d ee f9 9b b1 01 46 c9 8c 23 77 85 a0 24 36 cb 28 53 7c 77 93 65 37 c5 fa c6 fb 2d 3c b6 f1 99 42 0b 5e d1 8d 33 ba 76 60 76 87 62 70 1d c2 5b b3 43 d5 28 26 75 c7 17 04 33 de 04 4e c5 54 84 4a a3 Data Ascii: #0"u[g\X2'bJo4EpDg8;7rw]t'bOR5ZAX0zDSN[:o-m0h}#?0~Jr)0_lS`y916LYtFL7=)>.lVP#s;mF#w$6(S\|we7-<B^3v`vbp[C(&u3NTJ
2023-08-10 21:19:26 UTC	7178	IN	Data Raw: cd 3d fb 73 db 36 d2 bf 7f 7f 85 cd 7a 1c 22 82 9f 79 34 21 c3 ea 1c 57 ed b4 13 c7 19 ab b9 cc 8d ac 78 68 99 b2 d9 c8 62 4a 52 76 12 4b f7 b7 df 3e 00 10 20 29 c5 c9 f5 66 be 1f 6c 52 20 9e 8b c5 02 fb c0 2e 05 2d d7 3f 0a ce 04 a9 97 98 f7 e2 02 bd 76 20 51 a7 df 80 eb 09 bf 8c c7 f4 64 d7 ed 4e 1e 4e 3a 98 4c 74 6a 41 c9 c9 75 5a d2 8b 62 c3 9c 32 2a ed 18 aa 77 d2 27 a6 8a a6 1a 75 30 c4 8e aa d8 64 91 cb 00 d7 48 ac 0a 8a a2 33 6b 9d a4 b9 b1 4f 56 31 db a3 db 8b a6 08 cb 43 4f cb f0 ed ea 22 cd ef d7 08 65 5d d2 c4 ec 3a 2e 3e b4 c8 c9 76 49 58 f9 55 a7 91 2b 02 7d d4 d7 fb 20 19 aa f5 1a e2 3b e6 6f f3 9f 87 2a a6 6c 02 67 2d f5 02 db 6e 3e 75 7f 99 e8 27 39 ee 85 4b e3 9d 3c 7f fc 37 45 45 82 dd 97 82 df 3c 7d fe e4 6b e1 3c ed 9d b9 4d 0b de a6 Data Ascii: =s6z"y4!WxhbJRvK> )flR .-?v QdNN:LtjAuZb2w'u0dH3kOV1CO"e]:.>vIXU+} ;olg-n>u'9K<7EE<}k<M

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.3	49765	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:56 UTC	1210	OUT	GET /static/fonts/SourceCodePro-Bold-2038.otf.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:56 UTC	1441	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 77628 Connection: close Date: Thu, 10 Aug 2023 21:18:57 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 02 Feb 2023 02:19:54 GMT ETag: "748fd04df3aee82492ec3b5615213218" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 cb0d3a2bdc5300e2d139e111e94efe5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: EIt880TxblQvhTCqLSZcFTMLhM2YZlmyNBdPo5R3qVW3GeiKdxbZ8Q==
2023-08-10 21:18:56 UTC	1442	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 01 2f 3c 00 0d 00 00 00 02 0e 54 00 01 2e ea 00 02 09 ba 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 86 8e 1f 1a 85 6a 1b a8 62 1c ba 4a 06 60 00 e6 66 01 36 02 24 03 98 42 04 06 05 a1 64 07 20 5b 66 0d 92 0c 91 63 e8 5d 7d 8c a2 d2 0f 2e b0 d5 66 76 8e b6 5f c9 09 05 1f ed 0a b2 8e b6 0a c2 df eb 1c 1b c8 19 a0 2f c5 95 ad 60 ba cd 47 e0 3c 10 ea 0c cf cf ca fe ff ff ff ff ff ff df 9d 7c 3f 96 da 97 78 48 33 d2 00 06 0c 36 e0 f8 8a 8f da 39 9a b4 6e 8e dd 6c ba 44 a0 81 04 44 98 10 f5 94 98 80 42 b9 92 ab 10 33 27 7e 56 a1 6e da 79 53 98 77 f3 62 0e 2f aa 9a f4 88 d1 e6 e8 48 8c 58 30 aa 19 3a 6e 39 d0 11 d3 6a c6 2d 04 aa da cb 9d cc d6 ad 6d e2 76 a9 de d2 80 10 88 52 55 26 86 10 76 34 ee bb 02 2e 21 Data Ascii: wOF2OTTO/<T.FjbJ`f6$Bd [fc]}.fv_/`G<\|?xH369nlDDB3'~VnySwb/HX0:n9j-mvRU&v4.!
2023-08-10 21:18:56 UTC	1448	IN	Data Raw: c2 bc 84 6a df e1 63 b1 76 6d 5e 36 bc 83 2d 19 fd 9d 40 9b 2a 52 31 2a ad d4 36 fd ac d0 67 50 1c ca 28 f9 f6 e7 0d 69 c6 00 13 0b 65 5a 9e 70 a7 c4 80 a6 d6 d7 40 20 31 d3 b5 46 5a 43 e3 40 f5 ea d4 c9 26 87 95 6c 29 13 bd 59 71 94 82 ad 1d 0b 36 41 32 02 cd 28 2c 31 a9 60 45 54 53 e7 83 60 17 37 04 9b 10 4b 31 41 10 ec ee 52 90 30 33 13 2b bb fc d9 b1 ea ba 0a 8e 1e 18 61 02 4d e9 ec 66 c5 b0 4a d2 97 70 08 69 5a b6 8a 4e 04 98 d0 a6 6d 9c c3 09 b9 2d 13 1a a6 36 89 92 2c 15 9d 18 20 11 d2 b4 62 cf 08 4d 2d 4a a1 95 f6 c4 b0 d1 76 14 54 27 d8 6b 6d b6 77 b3 d2 87 d4 b0 97 31 08 b8 2f 1a f6 dd 5f 2a db 1a f5 51 83 00 26 40 10 13 22 e0 80 cd fa a8 41 00 13 20 88 09 d1 67 0d a7 1e 58 60 81 4c 10 5b 7d 57 5d 9c 17 fb f7 2a 80 53 6c 1c 60 00 eb 5c 80 37 06 Data Ascii: jcvm^6-@R16gP(ieZp@ 1FZC@&l)Yq6A2(,1`ETS`7K1AR03+aMfJpiZNm-6, bM-JvT'kmw1/_Q&@"A gX`L[}W]Sl`\7
2023-08-10 21:18:56 UTC	1488	IN	Data Raw: a0 85 c6 db da a6 7f 1e 23 f0 42 5e cc 55 4b cb 17 af c0 8b 2d 35 07 b6 d1 ff 1e 43 bf f8 b5 0c ae 62 55 a5 d9 79 a8 d1 e1 dd 82 cf be e4 42 9f 2b ca 57 00 6d ed 11 c4 63 20 a5 8f a6 8f 2a d0 8f 2f 2d 67 c2 bd 66 86 ab ab e5 33 6b d7 c0 a9 75 c4 d4 ff 4f bd 5f 01 fc ff ab 88 11 9a e3 ed 9f 79 be 06 f8 f2 2d 9b 65 6c 37 bd b4 42 6d 48 84 29 78 64 27 b6 f9 b1 a5 04 6f 6d b0 be d4 bd 84 e0 bd 0f f3 d1 9e a7 cd 63 5a 20 e8 69 67 88 4b 4d 3b 4f a3 30 07 ee d1 00 33 7e 6f 0d 94 39 db aa 98 45 ad d2 0b e6 dd 00 7d d4 1e 66 d5 e0 be 11 27 e1 ee 52 63 37 07 eb 28 b5 95 c7 df b6 2a 9a 44 89 63 fd de 1c 42 be 07 82 af d2 90 09 52 4f 85 be 82 fe 48 8d 7d bd c9 09 3b ec c6 90 97 83 59 1f 40 48 e7 50 a9 87 d6 8f 78 de 6a 9b f7 15 7a c2 24 e4 fa 59 46 40 2f 63 c0 f6 fc Data Ascii: #B^UK-5CbUyB+Wmc /-gf3kuO_y-el7BmH)xd'omcZ igKM;O03~o9E}f'Rc7(DcBROH};Y@HPxjz$YF@/c
2023-08-10 21:18:56 UTC	1504	IN	Data Raw: a1 6e cc cc 9e b5 90 32 fe 6e e2 9c dd 42 ae 6c 2d 4a 91 64 e5 e6 ba 1f f5 12 b6 a3 f7 9b 2f 24 dc b4 bc 63 e7 4d 80 7f 4a ac ea 3a 9a 50 64 41 8a 13 fb e1 4f 2f 83 3d 0a 85 af 1f cd 74 0a 9b 4a 19 eb a2 19 23 5a dd f7 6a 5f f0 ae 1c 47 88 df de ab 87 f4 00 71 f7 81 7b 72 46 cc dc f0 23 ec b0 f7 b9 31 2f 51 e7 ae 03 a4 3b 8b 4e 89 fb 70 0e a8 84 49 ee 97 74 e3 cd e2 d9 c7 8d 15 f6 e2 e2 cb 51 c5 9c f4 67 e0 d4 6c 2e d8 06 7c 0b 59 dd bd ee 62 0b ad 5c 26 6a 88 88 7c 22 c6 0b 59 f4 43 21 2d e5 bb a1 27 a3 6f f7 cb 2d 5a 23 e7 7b 6b 14 a9 f4 e6 03 2f ba 3f 74 1c e4 fe b9 21 2b 68 10 c2 24 3d 76 c7 ad c0 f7 48 b8 de 9b da cb 49 8e 88 6a b0 ce 35 2e fc 99 03 32 bd 1f 9b 99 ac e7 fe 84 2d 4a f8 cc 94 56 20 a5 64 9d db 2e 02 8d f1 cd b1 a2 2d 4b 07 e5 ba 12 e9 Data Ascii: n2nBl-Jd/$cMJ:PdAO/=tJ#Zj_Gq{rF#1/Q;NpItQgl.\|Yb\&j\|"YC!-'o-Z#{k/?t!+h$=vHIj5.2-JV d.-K
2023-08-10 21:18:56 UTC	1520	IN	Data Raw: ca 60 ad 59 17 0a f2 91 f6 60 74 d5 86 2a 72 85 57 dd 06 fd bb 02 7f 8b e1 1d df 3c dd 11 d2 7c 83 64 14 f9 0c 45 72 2b 7c bb 94 c3 ed 6e 7e 02 6e f7 b0 f0 6c 01 16 8a b2 01 5d e1 81 28 54 72 8d 18 64 93 c6 4f e0 06 9b ee 02 d2 ad a4 9c 6c c8 6b 7a e0 03 3c 49 60 d6 4a ae 60 07 88 3d 90 c4 e9 c7 d8 a2 2c f5 5c 3a 09 4d 19 a6 11 f2 4a f0 a1 c9 4e 95 92 49 48 4c 0e 84 58 84 a4 c2 1e 29 90 b7 5e 9c 6a 77 83 f6 ab 36 0a 9c e9 d2 9a 45 9c 3e ad 6b ec 49 fa fa 9d 6d 38 b1 7c a7 00 d7 e6 f3 9d f8 71 e8 34 2c 12 26 41 02 f8 ac a3 38 1c 37 8a cb 35 a3 1f 71 d7 cc 62 23 af 6c a0 d4 01 5d 3a 09 12 a4 c1 62 b8 6e ec 02 8a 35 c0 82 86 f6 79 b6 73 7c e9 67 8c 5b c7 2f c2 36 47 33 60 55 84 35 92 45 be 23 48 b1 ee 6d 13 86 c2 25 50 ff da 4f 45 5d 36 ae c7 a5 b8 fe f7 41 Data Ascii: `Y`t*rW<\|dEr+\|n~nl](TrdOlkz<I`J`=,\:MJNIHLX)^jw6E>kIm8\|q4,&A875qb#l]:bn5ys\|g[/6G3`U5E#Hm%POE]6A
2023-08-10 21:18:56 UTC	1536	IN	Data Raw: d0 f3 d3 12 ca 68 cc b7 8e 4d 61 78 e3 f9 1c 6f a8 c9 72 1e 9b 2c 90 f4 53 2a 5e ed 24 9c 1c 6e 60 ba 38 03 c5 6f e5 a7 3e 9b 9a bd 32 79 c9 19 7b 0b 8a ca a6 6c dd e8 c1 36 f4 62 d0 be db 5f f3 e8 3d c7 7a 6f a0 24 e6 2a 28 13 6d eb 7b 34 6c e4 70 33 5c 65 d4 6a a5 af dc 7a 63 64 dc 8b 70 6f 59 52 28 48 a1 a8 62 5b 6d c9 33 b7 9f ea b6 c3 a5 5e 8e 8f ac 72 df 85 c2 0a 71 3a 21 32 d1 0a 7b 8f 4e 65 c0 86 70 95 2b f7 68 3b f7 b3 4f bf 51 e9 21 ee 4d 09 09 3b 6c 73 d1 45 04 43 02 1d 8e d0 28 34 20 9c b4 64 0a 64 af a8 45 bf 6a 7c bc 53 e7 63 dd c4 95 a8 e9 31 84 38 dd c0 91 a2 8b f3 84 bc 70 02 38 49 66 42 0f 94 9d 06 e9 d3 9a f1 9f 86 8f b8 1c 0e e6 29 04 54 9a 44 ac 8f f8 17 23 38 e6 5e 3f d1 6a 5c ff dc f8 bb f2 54 c4 72 7a ac b3 3e ce 7d 6c 44 57 3c 82 Data Ascii: hMaxor,S^$n`8o>2y{l6b_=zo$(m{4lp3\ejzcdpoYR(Hb[m3^rq:!2{Nep+h;OQ!M;lsEC(4 ddEj\|Sc18p8IfB)TD#8^?j\Trz>}lDW<
2023-08-10 21:18:57 UTC	1550	IN	Data Raw: 97 8d 71 00 8a f0 98 c0 ba 1f ac 11 3d f3 c8 9c 57 3a 78 da 66 f8 d6 4d 5b f1 07 ad ea 7f 2f 38 b6 44 ec e7 86 3e f7 e4 0f ef 11 1f 80 ef 04 45 0f 9c 62 e9 1e 76 01 16 c4 c3 aa 73 9c 1e 60 2e b7 ec c7 87 0a e3 bb 8e e8 01 62 68 0e 5a 35 57 5b 0d 61 56 93 0e e8 1d 40 7c de 51 1e b6 b4 54 a5 b2 53 4f cb 6f ad 56 34 06 62 4c 87 04 e2 72 d1 13 48 be 84 04 38 24 ea 43 bb 9b c3 fc ba 69 b4 2e 10 94 48 f8 d2 e4 c1 ff ff 88 29 81 82 06 61 8a f1 13 95 fa ab 01 1d 66 a8 44 a5 94 a8 2d c6 47 a2 c2 6f 46 ad a4 de 39 ec ac d2 b7 ac 90 be 96 2d 19 e6 36 4a a6 9c 92 6f 73 34 b1 4d 12 5f 3a 3c 6c 2f 87 ef 12 e8 59 18 61 3b 93 2d 49 dc 28 0f b9 28 2e fc 12 37 ca c9 98 ee b0 79 bf b4 bb c3 63 2c bb 9f cc db 5b 73 93 61 4b 98 b5 c2 7d a9 97 93 ef 8c f2 96 ec 74 97 3c 91 6a Data Ascii: q=W:xfM[/8D>Ebvs`.bhZ5W[aV@\|QTSOoV4bLrH8$Ci.H)afD-GoF9-6Jos4M_:<l/Ya;-I((.7yc,[saK}t<j
2023-08-10 21:18:57 UTC	1566	IN	Data Raw: 49 80 a8 65 ad 7c 10 b7 dc a2 00 b8 97 9f 48 c6 bf e2 1f 5b 61 88 8a e2 59 91 43 19 a7 30 be cc 5e 77 a2 d9 65 3a ab 93 c9 49 36 0e 66 25 9a 92 ae 83 0e 41 02 27 72 3a c9 92 5c 6a 2d f9 cc 42 1d e4 fd fc 3d 59 47 47 e5 19 92 cc cc 63 53 ef 33 c1 ab 16 12 70 ed 35 29 8f 69 fe de 42 5f 36 df 14 b2 b8 81 21 b6 74 ed d4 b8 6b 7b 89 8a f2 41 96 e2 5b 0e ee 6e 1b 87 d1 75 4e c7 c0 cd ad b6 90 b8 91 2f 5b 6f 8d d7 b3 c0 55 5f 60 61 97 0d d1 59 f9 4a dc 33 a8 d5 ad a8 90 25 94 d1 b3 59 c0 b6 13 1b 26 6d a9 03 fe a5 ac f9 af be 7a 95 c7 1e c1 af 65 fe a2 15 90 c1 1e b4 e9 85 77 6b be 60 27 b9 19 4b 88 89 19 b9 29 12 2a ff e3 b9 86 5a b2 1d 10 a4 6c b2 f9 e6 4e ce e7 fb a1 7c b2 b5 08 93 93 68 f9 6f 7a e3 ce 11 56 9b b1 ca 4c 6c 4c 8c 30 1a 05 ec b9 76 62 39 26 5f Data Ascii: Ie\|H[aYC0^we:I6f%A'r:\j-B=YGGcS3p5)iB_6!tk{A[nuN/[oU_`aYJ3%Y&mzewk`'K)*ZlN\|hozVLlL0vb9&_

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
210	192.168.2.3	50059	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:26 UTC	7095	OUT	GET /paper/cloud-docs/get-seen-users?localPadId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:26 UTC	7184	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:26 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:26 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 46d2bef3-0763-4b39-b256-460864b9f1d2 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: c56f756706be4d559bf7691d35d95191 Connection: close
2023-08-10 21:19:26 UTC	7186	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
211	192.168.2.3	50061	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:26 UTC	7186	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vts8ra1it9l0lgwizaxzhg2.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:26 UTC	7195	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:26 GMT Content-Type: application/x-javascript content-length: 49972 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 13 Jul 2023 00:28:45 GMT ETag: 0x8DB83381EAF7708 x-ms-request-id: ae0d30f7-001e-0057-4144-c5854e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211926Z-7nh8ms0kax5mv1m94f2y64gvtw0000000dcg00000001967d X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:26 UTC	7197	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-08-10 21:19:27 UTC	7204	IN	Data Raw: dd 7d cb 76 23 47 b2 d8 de 5f 51 83 f1 51 37 af aa 21 3c f8 44 0b 6a 83 00 d8 c4 6d 10 80 00 b0 29 1d 49 c6 29 a2 92 64 4d 03 55 b8 55 85 66 73 a8 f6 99 9d 17 77 e1 ad bd f3 c2 2b 2f bd f1 de 9f 32 e7 5c 7f 87 e3 91 99 95 f5 00 40 4a 1a cd bd 9e 33 a7 45 e4 23 32 32 32 32 32 22 32 32 ea 0f 37 6b 7f 1e 7b 81 ff 52 ec 3d aa bf ad e0 a5 bf f7 e8 dd bc f4 7e f0 7f da 0b 45 bc 0e 7d 0b ff 2e 8b 4f ab 20 8c a3 d7 1f 9d d0 8a 9b 58 d4 7c 94 65 8d c7 cf b6 e7 36 7c 7b 11 38 ae 70 1b 7f a8 7e 7e 2d bb 0a ec 3a 77 16 8b 97 b1 82 60 c7 76 f2 77 b0 07 3f b8 5b f3 0f 95 a4 e2 33 0e e3 35 1f 35 a0 a0 bc 6c 0a 3b 28 cf 9b 1e fc bb 6a 96 4a 76 f0 b2 b2 f7 f9 e5 0f c9 34 ec c0 f6 00 f9 97 b5 3d c2 d2 6f 7a 2f ab 00 1f fe 73 b0 67 87 f0 9f c3 3d db 69 86 e5 49 1c 7a fe 6d Data Ascii: }v#G_QQ7!<Djm)I)dMUUfsw+/2\@J3E#22222"227k{R=~E}.O X\|e6\|{8p~~-:w`vw?[355l;(jJv4=oz/sg=iIzm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
212	192.168.2.3	50062	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:26 UTC	7187	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_sb6jQxfN8f3sA8faKcsD7Q2.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:27 UTC	7218	IN	HTTP/1.1 200 OK Content-Length: 689016 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:26 GMT Connection: close
2023-08-10 21:19:27 UTC	7219	IN	Data Raw: 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.protot
2023-08-10 21:19:27 UTC	7234	IN	Data Raw: 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 30 Data Ascii: cked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 110
2023-08-10 21:19:27 UTC	7257	IN	Data Raw: 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2023-08-10 21:19:27 UTC	7273	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 75 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromCu
2023-08-10 21:19:27 UTC	7289	IN	Data Raw: 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: /g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", }, r
2023-08-10 21:19:27 UTC	7306	IN	Data Raw: 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 73 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(s
2023-08-10 21:19:27 UTC	7322	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2023-08-10 21:19:27 UTC	7338	IN	Data Raw: 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2023-08-10 21:19:27 UTC	7354	IN	Data Raw: 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2023-08-10 21:19:27 UTC	7370	IN	Data Raw: 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 69 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onRegi
2023-08-10 21:19:27 UTC	7386	IN	Data Raw: 74 65 6e 73 69 6f 6e 73 3a 20 21 30 2c 0a 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 73 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 70 69 63 6b 65 72 5f 61 63 63 6f 75 6e 74 5f 6d 73 61 5f 34 65 33 36 31 39 61 34 39 39 66 64 37 34 63 30 63 36 36 64 35 32 31 35 35 31 34 62 35 36 36 61 2e 70 6e 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 Data Ascii: tensions: !0, }), (e.exports = s); }, function (e, n, t) { e.exports = t.p + "content/images/picker_account_msa_4e3619a499fd74c0c66d5215514b566a.png"; }, function (e, n, t) { e.exports = t.p + "content/ima
2023-08-10 21:19:27 UTC	7405	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 20 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 47 69 74 48 75 62 46 65 64 3a 20 65 2e 69 73 47 69 74 48 75 62 46 65 64 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 Data Ascii: , isWindowsSso: e.isWindowsSso \|\| !1, isMeControlSession: !0, isGitHubFed: e.isGitHubFed \|\| !1, } ); }); }, parseBssoSessions: function (e) { ret
2023-08-10 21:19:27 UTC	7421	IN	Data Raw: 6f 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 4d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 65 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 43 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 55 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 53 68 61 72 65 64 44 61 74 61 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: o.setDefaultFocus = function () { var e = M(); e && e.setDefaultFocus && e.setDefaultFocus(); }), (o.getCurrentViewId = function () { return U(); }), (o.getSharedData = function () {
2023-08-10 21:19:27 UTC	7437	IN	Data Raw: 6e 20 6e 29 20 61 2e 63 61 6c 6c 28 6e 2c 20 74 29 20 26 26 20 28 65 5b 74 5d 20 3d 20 6e 5b 74 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 20 3d 20 6e 29 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 20 6e 2c 20 74 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 65 5b 6e 5d 2e 6d 61 74 63 68 28 68 29 20 7c 7c 20 5b 5d 3b Data Ascii: n n) a.call(n, t) && (e[t] = n[t]); return e; } function t(e, n) { return (e.__proto__ = n), e; } function i(e, n, t, i) { var a = e[n].match(h) \|\| [];
2023-08-10 21:19:27 UTC	7453	IN	Data Raw: 20 20 61 5b 64 5b 6c 5d 2e 6e 61 6d 65 5d 20 3d 20 64 5b 6c 5d 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 20 3d 20 53 2e 61 2e 66 28 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 20 69 6e 20 28 28 75 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 61 63 74 69 6f 6e 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 6d 65 74 68 6f 64 20 Data Ascii: a[d[l].name] = d[l].value; } t = S.a.f(t); var u = c.createElement("form"); for (var p in ((u.style.display = "none"), (u.action = r), (u.method
2023-08-10 21:19:27 UTC	7469	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 28 69 20 3d 20 21 30 29 2c 20 65 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 72 2c 20 22 64 69 72 74 79 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 21 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f Data Ascii: (i = !0), e.notifySubscribers(r, "dirty"); } finally { i = !1; } } }; })); }, no
2023-08-10 21:19:27 UTC	7485	IN	Data Raw: 20 20 20 20 20 20 20 20 63 20 3d 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 54 20 3d 20 53 2e 61 2e 44 61 28 22 5f 73 74 61 74 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 53 2e 6f 20 3d 20 53 2e 24 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: c = a; } }); } }); var T = S.a.Da("_state"); S.o = S.$ = function (e, n, t) { function i() { if (0 < arguments.length) {
2023-08-10 21:19:27 UTC	7501	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 64 2c 20 6c 20 3d 20 30 3b 20 28 64 20 3d 20 72 5b 6c 5d 29 3b 20 2b 2b 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 64 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 34 34 20 3d 3d 3d 20 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3e 3d 20 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 70 75 73 68 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 26 26 20 73 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: for (var d, l = 0; (d = r[l]); ++l) { var u = d.charCodeAt(0); if (44 === u) { if (0 >= c) { t.push( n && s.length
2023-08-10 21:19:27 UTC	7517	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 67 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 20 26 26 20 69 28 62 28 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 68 61 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 20 69 6e 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return a[e]; }; (g.get = function (e) { return a[e] && i(b(e)); }), (g.has = function (e) { return e in a;
2023-08-10 21:19:27 UTC	7533	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 6f 6d 70 6f 6e 65 6e 74 20 27 22 20 2b 20 65 20 2b 20 22 27 3a 20 22 20 2b 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 53 2e 6a 2e 72 65 67 69 73 74 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 Data Ascii: } function o(e) { return function (n) { throw Error("Component '" + e + "': " + n); }; } var r = {}; (S.j.register = function (e, n) {
2023-08-10 21:19:27 UTC	7549	IN	Data Raw: 20 20 20 20 20 20 20 20 6f 20 3d 20 61 2e 62 6f 64 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 6f 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 61 20 3d 20 6e 28 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 61 2c 20 74 2c 20 22 68 61 73 66 6f 63 75 73 22 2c 20 69 2c 20 21 30 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b 6f 5f 68 61 73 66 6f 63 75 73 4c 61 73 74 56 61 6c 75 65 20 3d 20 69 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b Data Ascii: o = a.body; } i = o === e; } (a = n()), S.m.eb(a, t, "hasfocus", i, !0), (e.__ko_hasfocusLastValue = i), (e.__k
2023-08-10 21:19:27 UTC	7565	IN	Data Raw: 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 69 2c 20 74 2c 20 22 76 61 6c 75 65 22 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 53 2e 61 2e 57 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 61 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 65 78 74 22 20 21 3d 20 65 2e 74 79 70 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 66 66 22 20 3d 3d 20 65 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 66 6f 72 6d 20 26 26 20 22 6f 66 66 22 20 3d 3d 20 65 2e 66 6f 72 6d 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 Data Ascii: S.m.eb(i, t, "value", a); }; !S.a.W \|\| !a \|\| "text" != e.type \|\| "off" == e.autocomplete \|\| (e.form && "off" == e.form.autocomplete
2023-08-10 21:19:27 UTC	7581	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 3d 3d 20 72 20 7c 7c 20 6e 75 6c 6c 20 3d 3d 3d 20 65 20 7c 7c 20 21 53 2e 61 2e 66 28 65 2e 5f 64 65 73 74 72 6f 79 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 28 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return ( e === r \|\| null === e \|\| !S.a.f(e._destroy) ); })), d(e); }, null,
2023-08-10 21:19:27 UTC	7597	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 29 28 69 2c 20 74 2e 65 6c 65 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 6f 2c 20 72 2c 20 73 2c 20 63 Data Ascii: })(i, t.element), i ); })), i(n); }); }, }), (n = e.bindingHandlers.component.init), (e.bindingHandlers.component.init = function (t, o, r, s, c
2023-08-10 21:19:27 UTC	7613	IN	Data Raw: 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 33 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 69 2e 53 74 72 69 6e 67 3b 0a 20 20 20 20 6e 2e 61 70 70 6c 79 45 78 74 65 6e 73 69 6f 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 3b 0a 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 0a 20 20 20 Data Ascii: n, t) { var i = t(3), a = t(1), o = i.String; n.applyExtensions = function (e) { var n; (n = e.bindingProvider.instance.preprocessNode), (e.bindingProvider.instance.preprocessNode = function (t) { if (
2023-08-10 21:19:27 UTC	7629	IN	Data Raw: 20 3a 20 66 65 20 26 26 20 6e 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 26 26 20 28 73 20 3d 20 44 2e 55 73 65 72 6e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 65 20 7c 7c 20 6f 20 7c 7c 20 62 65 20 7c 7c 20 67 65 29 20 26 26 20 28 72 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6e 20 26 26 20 28 72 20 3d 20 73 20 3d 20 44 2e 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 4c 6f 63 61 74 69 6f 6e 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 69 6e 69 74 69 61 6c 56 69 65 77 49 64 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 63 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 28 74 2c Data Ascii: : fe && n.getServerError() && (s = D.Username); (ue \|\| o \|\| be \|\| ge) && (r = s); } sn && (r = s = D.RemoteConnectLocation), (n.initialViewId = r), (n.currentViewId = s); })(t,
2023-08-10 21:19:27 UTC	7645	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6e 28 65 2c 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 49 6e 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 61 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 Data Ascii: , (n.fetchSessions_onUpdateUserTiles = function (e, n) { setTimeout(function () { hn(e, n); }); }), (n.fetchSessions_onIncrementAsyncTileRequestCount = function () { n.asyncTileRequestCount
2023-08-10 21:19:27 UTC	7661	IN	Data Raw: 20 20 20 28 6e 2e 76 69 65 77 5f 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 69 73 52 65 71 75 65 73 74 50 65 6e 64 69 6e 67 28 65 29 2c 20 6e 2e 73 68 6f 77 4c 69 67 68 74 62 6f 78 50 72 6f 67 72 65 73 73 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 6f 6f 74 65 72 5f 61 67 72 65 65 6d 65 6e 74 43 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6e 2e 61 67 72 65 65 6d 65 6e 74 54 79 70 65 20 3d 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 76 69 65 77 5f 6f 6e 53 77 69 74 Data Ascii: (n.view_onSetPendingRequest = function (e) { n.isRequestPending(e), n.showLightboxProgress(e); }), (n.footer_agreementClick = function (e) { (n.agreementType = e), n.paginationControlMethods().view_onSwit
2023-08-10 21:19:27 UTC	7677	IN	Data Raw: 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 31 5f 63 66 65 39 63 62 36 32 65 62 62 36 36 30 35 65 30 33 66 62 38 64 32 38 35 63 36 31 31 62 34 38 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 33 2d 73 6d 61 6c 6c 5f 61 31 39 65 37 62 63 61 34 34 36 36 30 35 39 65 61 64 64 33 34 34 61 62 31 31 65 36 39 30 34 66 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 Data Ascii: p + "content/images/appbackgrounds/11_cfe9cb62ebb6605e03fb8d285c611b48.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/13-small_a19e7bca4466059eadd344ab11e6904f.jpg"; }, function (e, n, t) {
2023-08-10 21:19:27 UTC	7693	IN	Data Raw: 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 2d 73 6d 61 6c 6c 5f 34 66 36 33 63 34 33 37 61 32 30 39 61 37 61 64 30 62 63 66 37 63 35 33 32 61 34 62 35 63 32 62 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 5f 37 34 39 36 32 64 39 36 65 64 34 34 39 38 61 35 33 62 32 37 33 64 37 63 37 66 39 37 63 64 39 35 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 Data Ascii: e.exports = t.p + "content/images/appbackgrounds/67-small_4f63c437a209a7ad0bcf7c532a4b5c2b.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/67_74962d96ed4498a53b273d7c7f97cd95.jpg"; },
2023-08-10 21:19:27 UTC	7709	IN	Data Raw: 20 20 20 20 20 28 6e 20 3d 20 5f 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 29 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 75 2e 45 72 72 6f 72 28 22 4e 6f 45 78 74 65 6e 73 69 6f 6e 22 2c 20 22 45 78 74 65 6e 73 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 2e 22 2c 20 6e 75 6c 6c 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 44 61 74 61 50 6f 69 6e 74 28 22 65 78 74 65 6e 73 69 6f 6e 2e 69 64 22 2c 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 4d 65 73 73 61 67 65 28 22 55 73 69 6e 67 20 43 68 72 6f 6d 65 20 65 78 74 65 6e 73 69 6f 6e 20 77 69 74 68 20 69 64 20 22 20 2b 20 65 29 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: (n = _.firstChild); if (!e) throw new u.Error("NoExtension", "Extension is not installed.", null); return ( p.logDataPoint("extension.id", e), p.logMessage("Using Chrome extension with id " + e),
2023-08-10 21:19:27 UTC	7725	IN	Data Raw: 20 20 20 43 68 65 63 6b 62 6f 78 3a 20 22 63 68 65 63 6b 62 6f 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 42 75 74 74 6f 6e 3a 20 22 62 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 44 61 74 61 3a 20 22 45 78 63 65 70 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 3a 20 22 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 45 78 63 65 70 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 55 73 65 72 41 63 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: Checkbox: "checkbox", Button: "button", ExceptionData: "ExceptionData", PageActionData: "PageActionData", ExceptionsTablesuffix: "Exceptions", PageActtionsTablesuffix: "UserActions",
2023-08-10 21:19:27 UTC	7741	IN	Data Raw: 6f 76 69 64 65 72 20 3d 20 69 2e 45 6d 70 74 79 45 76 65 6e 74 50 72 6f 76 69 64 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 3b 0a 20 20 20 20 20 20 20 20 20 20 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 69 2e 45 76 65 6e 74 41 70 69 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 69 Data Ascii: ovider = i.EmptyEventProvider); }, , , , , function (e, n, t) { var i; !(function (e) { var n = t(1), i = t(2), a = i.EventApi, o = i
2023-08-10 21:19:27 UTC	7757	IN	Data Raw: 61 6c 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 3a 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 3a 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 45 72 72 6f 72 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 63 65 6c 3a 20 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 5f 6f 6e 43 61 6e 63 65 6c 2c 5c 6e 20 20 20 20 20 Data Ascii: alViewId,\n currentViewId: currentViewId,\n initialSharedData: initialSharedData,\n initialError: $loginPage.getServerError() },\n event: {\n cancel: paginationControl_onCancel,\n
2023-08-10 21:19:27 UTC	7773	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 76 69 65 77 5f 6f 6e 52 65 64 69 72 65 63 74 20 7d 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 76 69 65 77 69 64 3d 22 27 20 2b 0a 20 20 20 20 20 20 74 28 30 29 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2e 49 64 70 52 65 64 69 72 65 63 74 53 70 65 65 64 62 75 6d 70 20 2b 0a 20 20 20 20 20 20 27 22 20 64 61 74 61 2d 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 3d 22 74 72 75 65 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 70 61 67 65 56 69 65 77 43 6f 6d 70 6f 6e 65 6e 74 3a 20 7b 20 6e 61 6d 65 3a 20 5c 27 6c 6f 67 69 6e 2d 69 Data Ascii: redirect: $loginPage.view_onRedirect } }">\n </div>\n\n <div data-viewid="' + t(0).PaginatedState.IdpRedirectSpeedbump + '" data-showIdentityBanner="true" data-bind="pageViewComponent: { name: \'login-i
2023-08-10 21:19:27 UTC	7789	IN	Data Raw: 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 4e 65 77 55 73 65 72 22 20 76 61 6c 75 65 3d 22 31 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 46 6f 75 6e 64 4d 53 41 73 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 73 46 6f 75 6e 64 4d 53 41 73 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 73 70 6f 73 74 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 66 50 4f 53 54 5f 46 6f 72 63 65 53 69 67 6e 69 6e 20 3f 20 31 20 3a 20 30 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 Data Ascii: \n <input type="hidden" name="NewUser" value="1" />\n <input type="hidden" name="FoundMSAs" data-bind="value: svr.sFoundMSAs" />\n <input type="hidden" name="fspost" data-bind="value: svr.fPOST_ForceSignin ? 1 : 0" />\n <input
2023-08-10 21:19:27 UTC	7805	IN	Data Raw: 69 20 3d 20 7b 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 70 6e 67 22 3a 20 33 34 33 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 73 76 67 22 3a 20 33 34 34 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 70 6e 67 22 3a 20 33 34 35 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 73 76 67 22 3a 20 33 34 36 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 70 6e 67 22 3a 20 33 34 37 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 73 76 67 22 3a 20 33 34 38 2c 0a 20 20 20 20 20 20 22 2e 2f Data Ascii: i = { "./AppCentipede_Beam.png": 343, "./AppCentipede_Beam.svg": 344, "./AppCentipede_Beam_white.png": 345, "./AppCentipede_Beam_white.svg": 346, "./AppCentipede_Bing.png": 347, "./AppCentipede_Bing.svg": 348, "./
2023-08-10 21:19:27 UTC	7821	IN	Data Raw: 6e 74 61 69 6e 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 68 65 61 64 65 72 5c 27 3a 20 74 72 75 65 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 68 65 61 64 65 72 4c 6f 67 6f 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 74 74 72 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 68 65 61 64 65 72 4c 6f 67 6f 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3a 20 73 74 72 5b 5c 27 Data Ascii: ntainer">\n <div id="header" data-bind="externalCss: { \'header\': true }">\n <img id="headerLogo" role="img" data-bind="\n attr: {\n src: headerLogo,\n alt: str[\'
2023-08-10 21:19:27 UTC	7837	IN	Data Raw: 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 66 53 68 6f 77 43 6f 70 79 44 65 62 75 67 44 65 74 61 69 6c 73 4c 69 6e 6b 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 64 65 62 75 67 44 65 74 61 69 6c 73 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 62 6f 6c 64 20 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 69 6e 67 2d 74 65 78 74 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 Data Ascii: <div class="table-cell">\n \x3c!-- ko if: svr.fShowCopyDebugDetailsLink --\x3e\n <div class="debug-details-header">\n <div id="debugDetailsHeader" class="bold debug-details-heading-text" role="heading" aria-leve
2023-08-10 21:19:27 UTC	7853	IN	Data Raw: 69 64 65 49 6e 4e 65 78 74 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 6f 75 74 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 4f 75 74 42 61 63 6b 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 69 6e 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 49 6e 42 61 63 6b 28 29 20 7d 5c 22 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 66 6f 72 65 61 63 68 3a 20 76 69 65 77 73 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 24 70 61 72 65 6e 74 2e 63 75 72 72 65 6e 74 56 69 65 77 49 6e 64 65 78 28 29 20 3d 3d 3d 20 24 69 6e 64 65 78 28 29 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ideInNext(),\n 'slide-out-back': animate.isSlideOutBack(),\n 'slide-in-back': animate.isSlideInBack() }\">\n\n \x3c!-- ko foreach: views --\x3e\n \x3c!-- ko if: $parent.currentViewIndex() === $index() --\x3e\n
2023-08-10 21:19:27 UTC	7869	IN	Data Raw: 76 69 63 65 43 6f 64 65 20 3d 20 74 20 3f 20 74 2e 64 65 76 69 63 65 43 6f 64 65 20 3a 20 6e 75 6c 6c 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 3d 20 22 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 75 73 65 45 76 69 63 74 65 64 43 72 65 64 65 6e 74 69 61 6c 73 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 73 68 6f 77 43 72 65 64 56 69 65 77 42 72 61 6e 64 69 6e 67 44 65 73 63 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 69 73 53 69 67 6e 75 70 50 6f 73 74 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 4e 65 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 28 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 20 3d Data Ascii: viceCode = t ? t.deviceCode : null), (e.proofConfirmation = ""), (e.useEvictedCredentials = !1), (e.showCredViewBrandingDesc = !1), (e.isSignupPost = !1), Ne && ((e.availableCreds =
2023-08-10 21:19:27 UTC	7885	IN	Data Raw: 20 73 74 72 5b 5c 27 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 75 70 5f 4c 69 6e 6b 5c 27 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3a 20 73 76 72 2e 75 72 6c 53 69 67 6e 55 70 20 7c 7c 20 5c 27 23 5c 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 3a 20 73 69 67 6e 75 70 5f 6f 6e 43 6c 69 63 6b 22 3e 3c 2f 61 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 6e 6f 74 3a 20 73 76 72 2e 66 49 73 53 65 6c 66 53 65 72 76 69 63 65 Data Ascii: str[\'STR_SSSU_Signup_Link\'],\n href: svr.urlSignUp \|\| \'#\',\n click: signup_onClick"></a>\n </div>\n \x3c!-- /ko --\x3e\n\n \x3c!-- ko ifnot: svr.fIsSelfService
2023-08-10 21:19:27 UTC	7901	IN	Data Raw: 3d 20 64 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 22 5c 78 33 63 21 2d 2d 20 22 20 2b 0a 20 20 20 20 20 20 28 74 28 31 33 29 2c 0a 20 20 20 20 20 20 27 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 69 64 3d 22 6d 6f 72 65 49 6e 66 6f 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 72 6f 77 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 74 65 78 74 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 2c 20 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 74 Data Ascii: = d); }, function (e, n, t) { e.exports = "\x3c!-- " + (t(13), ' --\x3e\n\n\x3c!-- ko if: moreInfoTitle --\x3e\n<div id="moreInfoHeader" class="row" role="heading" aria-level="1" data-bind="text: moreInfoTitle, externalCss: { \'t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
213	192.168.2.3	50060	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:26 UTC	7189	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:27 UTC	7250	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:27 GMT Content-Type: application/x-javascript content-length: 15748 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:55 GMT ETag: 0x8DAFF34DE08B462 x-ms-request-id: ea3ae8eb-201e-0011-26d0-cbac53000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211926Z-x5gzr4myd17yt8qs06ygr7qr300000000dng000000002udr X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:27 UTC	7252	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-08-10 21:19:27 UTC	7252	IN	Data Raw: ad 5b 7d 77 da c6 d2 ff ff 7e 0a a1 db 43 a4 9b b5 6c da a4 ed c5 55 7d 1c 5e 12 5a 3b 76 0d ee 5b 92 c3 11 68 01 c5 42 52 b5 c2 98 1a be fb f3 9b 5d 09 09 10 d8 e9 73 73 1c 83 76 67 67 67 67 e7 7d e4 e3 ff 54 fe a5 fd 47 3b 7a fe 3f ad db 3b bf e9 69 57 6d ad f7 ae 73 d3 d4 ae f1 f4 87 f6 fe aa d7 69 b4 9e 8f 87 36 a5 ff bd 89 27 b4 91 e7 73 0d 9f 03 47 70 57 0b 03 2d 8c 35 2f 18 86 71 14 c6 4e c2 85 36 c5 ef d8 73 7c 6d 14 87 53 2d 99 70 2d 8a c3 cf 7c 98 08 cd f7 44 82 45 03 ee 87 73 cd 00 ba d8 d5 ae 9d 38 59 68 9d 6b d3 02 7e 0e 6c de d8 0b b0 7a 18 46 0b 7c 9f 24 5a 10 26 de 90 6b 4e e0 4a 6c 3e 1e 02 c1 b5 59 e0 f2 58 9b 4f bc e1 44 bb f4 86 71 28 c2 51 a2 c5 7c c8 bd 7b 6c 22 66 18 df dc 82 69 4e cc 35 c1 13 6d 14 c6 c9 44 d1 61 69 5d 82 4c b1 0a Data Ascii: [}w~ClU}^Z;v[hBR]ssvgggg}TG;z?;iWmsi6'sGpW-5/qN6s\|mS-p-\|DEs8Yhk~lzF\|$Z&kNJl>YXODq(Q\|{l"fiN5mDai]L

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
214	192.168.2.3	50063	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:26 UTC	7191	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:27 UTC	7197	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 Content-Length: 2672 Content-Type: image/gif Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Last-Modified: Fri, 17 Jan 2020 19:28:37 GMT ETag: 0x8D79B83739984DD X-Cache: TCP_HIT x-ms-request-id: c58d1326-101e-0062-2b96-cb2355000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0jfPUZAAAAADh1ubtu+hdRqSMqihx1Q3QRE0yQUExMDkxMjA4MDA5ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0XlTVZAAAAAAdEw83gH77QKQwdj6GrCCiQ0gxQUEyMDIwNjA4MDQ1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Thu, 10 Aug 2023 21:19:26 GMT Connection: close
2023-08-10 21:19:27 UTC	7197	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
215	192.168.2.3	50064	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:26 UTC	7193	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:27 UTC	7200	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:26 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373B17F89 x-ms-request-id: 771e7212-c01e-0023-6496-cbdb46000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211926Z-mprrqhtrs921pd2rh7rm2sf6ew0000000dkg0000000067cr X-Cache: TCP_HIT Accept-Ranges: bytes
2023-08-10 21:19:27 UTC	7201	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
216	192.168.2.3	50065	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:27 UTC	7305	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: larationr.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:27 UTC	7906	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:27 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 2f80afcd-401e-002b-2237-c58357000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211927Z-e460ynd7q12dxfpma679x57z3c0000000e2000000001t38e X-Cache: TCP_HIT Accept-Ranges: bytes
2023-08-10 21:19:27 UTC	7907	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2023-08-10 21:19:27 UTC	7922	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
217	192.168.2.3	50067	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:27 UTC	7402	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1 Host: larationr.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:27 UTC	7923	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:27 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:37 GMT ETag: 0x8D79B83739984DD x-ms-request-id: e76f7276-301e-0018-65d0-cbdf40000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211927Z-mprrqhtrs921pd2rh7rm2sf6ew0000000dn0000000003t3n X-Cache: TCP_MISS Accept-Ranges: bytes
2023-08-10 21:19:27 UTC	7924	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
218	192.168.2.3	50066	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:27 UTC	7404	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1 Host: larationr.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:27 UTC	7902	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:27 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373B17F89 x-ms-request-id: 771e7212-c01e-0023-6496-cbdb46000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211927Z-5057b1dgmp1x5dx9xd4qkgxph0000000009g0000000166k7 X-Cache: TCP_HIT Accept-Ranges: bytes
2023-08-10 21:19:27 UTC	7902	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
219	192.168.2.3	50068	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:28 UTC	7927	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:28 UTC	7932	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:28 GMT Content-Type: application/x-javascript content-length: 190151 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 27 Oct 2022 14:24:13 GMT ETag: 0x8DAB826EBE74413 x-ms-request-id: d3a43160-d01e-0052-21d0-cb0244000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211928Z-cmvxnmsy856eb4hger50x7fnv80000000e40000000012z4k X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:28 UTC	7934	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2023-08-10 21:19:28 UTC	7948	IN	Data Raw: 0b ab ad e8 df 24 ba fd 5b b7 2f b7 77 88 4f c2 67 46 4d 1f 0b 75 02 77 fb 58 84 c3 d5 d5 a1 d5 c7 aa bc 89 52 ee 73 55 63 12 54 51 9e 19 a5 98 4c 6c 9b aa 29 7f 81 0e 15 8b c8 b4 6e 6d b8 35 23 fc 77 92 1f 7d c2 7d 60 e9 5a 4e 05 80 55 57 16 ca 64 24 83 8f 7e c9 a2 18 6f be 60 b5 e3 f7 6b ee db cb 3a 66 b6 43 02 28 82 2d f7 ac 41 3e 33 02 d7 52 93 5d 5b 34 e4 fa 89 04 cc b0 a4 8b 56 fe 62 07 43 75 54 db 27 52 61 9c c6 98 e4 50 a6 06 44 5d 6a 06 b3 6a 82 95 ba 93 06 36 1c 95 4e f9 bb 66 f8 2c 4d 84 8f 0d 47 8a 26 24 6d ba 5f e8 23 82 5e ae 0b 25 99 5f 59 dc 77 52 b5 ef 64 61 dc 24 de 4f 1c 01 23 91 79 96 8d 51 e7 a8 6c 4b 13 34 8f 0f b6 c9 ce 5a 39 e8 80 15 a4 7c 3d 89 b6 fd 8f b7 16 09 77 61 85 e5 30 04 cd 0f 55 aa ed 37 04 d3 e1 9c 74 a7 8a eb a4 e4 10 Data Ascii: $[/wOgFMuwXRsUcTQLl)nm5#w}}`ZNUWd$~o`k:fC(-A>3R][4VbCuT'RaPD]jj6Nf,MG&$m_#^%_YwRda$O#yQlK4Z9\|=wa0U7t
2023-08-10 21:19:28 UTC	7950	IN	Data Raw: 95 a1 50 20 13 dc 09 ae 34 e2 7c 9d 30 c3 e4 c1 b6 9c ec e3 12 20 93 46 e3 3e 5b 03 ed 8f 67 c0 df fb 78 dd a8 ae 19 4d 00 1b f1 d1 0b 4a 7e 13 a6 94 dc 94 fe 24 50 2d cd 47 c7 3d 85 da e1 a9 62 8c 17 47 aa d5 45 78 07 f5 10 07 b4 78 d7 96 12 fa cd e1 40 53 82 00 82 12 ad ae 46 4d f9 c1 a7 c0 2f 64 02 06 d0 26 7a 72 65 91 74 91 31 d8 a2 52 17 e0 ac 82 55 04 66 ae 27 73 c2 f1 f4 4e 01 40 75 31 14 5d 18 6a c4 18 b2 35 15 0a d7 1f b2 c6 32 9c 55 a1 f8 e4 d6 c7 75 7d aa 14 55 21 35 ef fd 38 ba cc eb 7b 49 9f 4d 47 4b d0 e5 be d2 67 31 94 26 37 0c 28 1e c0 a4 59 3c 4b b5 71 c3 5c 85 c2 bd 2b ec d1 92 4d 17 61 b4 95 83 6f ef 6c 96 7c 4d d2 9b e4 cc 13 1e 9b 94 25 3b 59 f4 98 d7 35 b4 ba 8c f2 2b e1 55 59 58 bd d2 fc fe e1 bb b2 80 60 9e 8b 78 bc 40 3a 5d 23 d7 Data Ascii: P 4\|0 F>[gxMJ~$P-G=bGExx@SFM/d&zret1RUf'sN@u1]j52Uu}U!58{IMGKg1&7(Y<Kq\+Maol\|M%;Y5+UYX`x@:]#
2023-08-10 21:19:28 UTC	7969	IN	Data Raw: cc 68 6f b7 b7 64 ca dd ae 4a d9 e6 94 0f 04 97 4e a7 c2 f3 c0 0e a7 9c 5c a7 49 24 dd 09 ec 72 ca af 8c 88 09 2d 8c 1f 39 e5 34 9e a8 6a 9e 8b 84 db 42 a7 bc 10 4d 31 6e 5a 3c b6 5b a2 db 88 43 dd 12 3d 7d fb d7 30 69 b7 16 fa f8 3e ba 0a 07 54 7e cb df 9f e6 45 7a 1b a9 00 e4 6a 68 f2 b5 bd b5 69 c2 3f 35 45 44 aa 8f 69 2a f6 d3 1c ee fe 11 06 7b 48 f3 40 04 2d 47 ba a3 09 38 bc bd 8d 86 31 dc 16 6c 9b e0 50 7c 7f 9e e4 93 68 00 ab b6 21 cd b3 1c 6c 0b 77 e6 d6 26 55 73 2e 1e b6 90 b0 bb 4d 73 77 2e 1e 76 fc 37 e9 14 ca 0c bb 3e a8 0f 9a 1e 76 57 f0 dc 87 3a 00 b7 fb c2 84 90 d5 be 66 71 11 13 14 69 6f 9a 50 4f 16 3a 3e 3a a0 9e 1c 7c fc 78 fc 91 8a 7e de fb 78 74 78 f4 13 75 e5 f0 e8 ed f1 c7 0f 7b 67 87 c7 47 ed 2d 13 cc 11 ca 6d 0b 35 2b 02 4e 38 96 Data Ascii: hodJN\I$r-94jBM1nZ<[C=}0i>T~Ezjhi?5EDi*{H@-G81lP\|h!lw&Us.Msw.v7>vW:fqioPO:>:\|x~xtxu{gG-m5+N8
2023-08-10 21:19:28 UTC	7985	IN	Data Raw: e8 02 ed b7 1b 30 09 aa 8b f1 66 7d dd 87 be a5 89 29 6d ad 56 10 1e 45 fe f0 c5 b9 27 2d 54 f4 8d b9 67 48 81 d4 bd 69 12 41 b4 ab f6 4a a9 88 ba 2e f7 14 bf d4 b7 af c8 76 f5 ce 84 88 a4 94 5f fe db 53 02 7c b1 3a 29 cc e0 d4 b9 d5 53 c2 5a f1 1f e1 60 c9 b8 fe d9 5f a6 f1 1e 54 72 f7 2c d6 a6 25 92 b2 05 54 5c b4 7c f5 7c 28 37 70 f8 65 05 40 cc 2d 6c 6a bc cc 66 37 ee 9e 80 f9 cc fa e3 37 ef 09 3a dc 42 5c 16 d1 31 a2 c7 eb d1 b0 76 6c d1 e2 73 a3 67 88 37 5c 6a b0 71 e8 99 52 9f ad a4 04 19 38 94 39 82 75 69 60 e7 f4 5c 2a b4 a1 16 43 bd ad 52 4b 99 83 5a 36 cd 5a 4a ba 22 d3 d4 48 d1 25 4a 49 0a 37 39 2a 67 69 94 18 95 d1 95 a2 45 59 7e 67 31 04 91 52 b1 e0 10 44 c8 86 46 78 19 dd 79 81 ef 00 67 8c 2f 7c 47 71 b0 b5 45 aa 18 02 b8 0d 91 67 44 1e 8a Data Ascii: 0f})mVE'-TgHiAJ.v_S\|:)SZ`_Tr,%T\\|\|(7pe@-ljf77:B\1vlsg7\jqR89ui`\CRKZ6ZJ"H%JI79giEY~g1RDFxyg/\|GqEgD

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.3	49766	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:56 UTC	1365	OUT	GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_native_desktop~paper_pifs~paper_view_only.fe9af606aefd018129cf886d5e3f19606dbbddff.KpDs5k5SZCk7D2mDdczRh5YHqhnZ3SjEXRfr_OfKMJg.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:56 UTC	1449	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 1838 Connection: close Date: Thu, 10 Aug 2023 21:18:57 GMT Last-Modified: Thu, 10 Aug 2023 03:28:16 GMT ETag: "7e41bd7b5a609db26ffb8a072800d138" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2aefdd231d9806ea2eced3399f411f80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: _73yqF9AQ4RWsVufAAlCk7nLZunDStX8LFy20qcDPCGI9I4YTMRmsw==
2023-08-10 21:18:56 UTC	1450	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 58 59 8f db 36 10 7e cf af 70 11 14 88 83 d5 56 92 6f 19 2d 90 b3 0d 90 14 41 9b a2 e8 93 40 4b 94 c5 2c 4d aa 24 15 db 11 b6 bf bd c3 43 d6 61 79 d7 0d d0 04 08 62 69 66 38 c7 37 df 0c 75 1b 67 84 2a 2c 5e 71 a6 10 61 58 c4 fb 94 ac 50 1c 54 88 92 2d f3 88 c2 3b 19 25 98 81 cc 3a 25 b2 a0 e8 18 65 14 1f d6 39 26 db 5c 45 93 b0 38 ac 0b 2e 89 22 9c 45 68 23 39 2d 15 5e 0b f3 d2 5f 2b 5e c0 bf 5f 3d c2 52 7c 88 02 df fe b9 bf 8d b3 92 d2 3f 49 aa f2 fa c0 a0 da a0 e4 6e 2b 78 c9 52 2f e1 94 8b e8 0b 12 cf 3c fb ff 38 96 0a b1 14 89 34 8e 1b b9 f1 7a af 4d 44 09 a2 c9 33 30 fe fd c8 1b 05 7e 71 18 eb 03 4c 5c 2f 4b a5 38 ab cf 98 55 da 75 4f e6 82 b0 3b f0 6b 87 c4 96 30 cf 3a ab 15 4f 7a ef 58 51 aa 5a 6d 55 6d b8 48 b1 18 Data Ascii: XY6~pVo-A@K,M$Caybif87ug*,^qaXPT-;%:%e9&\E8."Eh#9-^_+^_=R\|?In+xR/<84zMD30~qL\/K8UuO;k0:OzXQZmUmH

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
220	192.168.2.3	50070	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:28 UTC	7928	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:28 UTC	7966	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:28 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: 8a4b2d50-d01e-0052-3796-cb0244000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211928Z-5057b1dgmp1x5dx9xd4qkgxph0000000009g0000000166us X-Cache: TCP_HIT Accept-Ranges: bytes
2023-08-10 21:19:28 UTC	7966	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
221	192.168.2.3	50069	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:28 UTC	7930	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:28 UTC	7967	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:28 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: 28fde309-701e-0020-2796-cba640000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211928Z-x5gzr4myd17yt8qs06ygr7qr300000000dmg00000000502c X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2023-08-10 21:19:28 UTC	7968	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
222	192.168.2.3	50073	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:29 UTC	7997	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: larationr.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:29 UTC	8001	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:29 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: 8a4b2d50-d01e-0052-3796-cb0244000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211929Z-7nh8ms0kax5mv1m94f2y64gvtw0000000dd0000000010918 X-Cache: TCP_HIT Accept-Ranges: bytes
2023-08-10 21:19:29 UTC	8001	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
223	192.168.2.3	50074	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:29 UTC	7998	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: larationr.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:29 UTC	8002	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:29 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: 28fde309-701e-0020-2796-cba640000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211929Z-5057b1dgmp1x5dx9xd4qkgxph0000000009g0000000166z8 X-Cache: TCP_HIT Accept-Ranges: bytes
2023-08-10 21:19:29 UTC	8003	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
224	192.168.2.3	50075	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:29 UTC	7999	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:29 UTC	8004	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:29 GMT Content-Type: application/x-javascript content-length: 109863 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 x-ms-request-id: cc29de99-c01e-0033-20d0-cb6b64000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211929Z-e460ynd7q12dxfpma679x57z3c0000000e1g00000001zysf X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:29 UTC	8005	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E]$\|zmk3h-SznuJ2V.tx~%Y
2023-08-10 21:19:29 UTC	8020	IN	Data Raw: a3 b5 83 5d cd d6 d3 73 7a 32 c0 26 c8 e3 9b 29 ff e3 f9 e4 9e 2b 72 16 fc f5 7d d1 59 c3 7f 7f e0 69 0b 36 68 6a 2f 5f fe 44 99 1d ea 3e c1 22 b6 c1 58 6e 0e 32 31 06 09 af 13 b6 c3 b6 19 8a c7 74 f8 fb bb 3e 7d 8c 8b 6d 20 fc 48 83 3d 38 ff ce 43 1d e0 26 33 1c dc e9 ac 2c e9 84 24 af 02 6d 4b b1 f1 8d e4 b3 a9 07 6b ee 63 10 b7 c3 46 10 b7 b2 c7 13 2c fe 12 ad fe c4 83 02 66 3c ae fe 91 ef 78 13 18 d5 9f 66 69 81 a1 ab 29 9e da 99 df 7c a1 2a bf c4 ac a2 18 77 7b e0 1b 25 38 9e a3 2d a9 8c 71 00 c7 3c 68 db 71 5f 04 6d 3b 3e 39 f1 7b b4 ae 6f 59 09 84 06 bb 3d f5 7b d0 e1 0a 08 d8 8b b8 28 6b 61 bc 39 29 c7 a0 ce 44 e6 3f 50 4a dd 0c d3 fd 3e c9 31 50 46 1b 0b da 94 4d 41 56 e1 dc d4 1b cc 40 68 56 d4 c5 b5 ea 1f e3 d5 9f 11 d3 23 ec d5 fe c4 7a d5 e6 Data Ascii: ]sz2&)+r}Yi6hj/_D>"Xn21t>}m H=8C&3,$mKkcF,f<xfi)\|*w{%8-q<hq_m;>9{oY={(ka9)D?PJ>1PFMAV@hV#z
2023-08-10 21:19:29 UTC	8021	IN	Data Raw: 23 30 22 75 c1 a1 5b a0 67 5c a3 58 32 27 9a 62 c7 a1 cd 04 4a 6f 34 45 70 03 b3 9f b8 bb 44 67 b9 38 b0 3b 37 09 72 77 d0 9d 93 c7 5d ad 74 cb 27 62 b8 95 4f e1 cc ec 52 35 5a 41 ba 85 ae 58 30 9c 7a a4 44 c9 ad f6 53 1e c9 0b d9 b1 eb 4e c8 a4 8e e4 ba 86 5b 12 3a 6f 2d f6 c5 6d f2 c4 30 68 7d 23 11 e4 9e 9b 3f 92 16 d1 30 7e c9 4a 72 85 b5 29 df 30 5f 1a eb d9 6c 18 53 82 a5 60 c4 f4 88 e1 a4 79 f5 39 95 31 36 4c f7 9f da 08 80 a3 9a ba 59 be 74 46 4c b3 9b cc 37 3d 92 b8 1f ee 9d 10 a3 05 97 29 9e c4 3e 2e 6c de d3 d8 56 b4 50 23 73 d1 f4 3b b9 0b e5 c7 f5 6d ee f9 9b b1 01 46 c9 8c 23 77 85 a0 24 36 cb 28 53 7c 77 93 65 37 c5 fa c6 fb 2d 3c b6 f1 99 42 0b 5e d1 8d 33 ba 76 60 76 87 62 70 1d c2 5b b3 43 d5 28 26 75 c7 17 04 33 de 04 4e c5 54 84 4a a3 Data Ascii: #0"u[g\X2'bJo4EpDg8;7rw]t'bOR5ZAX0zDSN[:o-m0h}#?0~Jr)0_lS`y916LYtFL7=)>.lVP#s;mF#w$6(S\|we7-<B^3v`vbp[C(&u3NTJ
2023-08-10 21:19:29 UTC	8031	IN	Data Raw: cd 3d fb 73 db 36 d2 bf 7f 7f 85 cd 7a 1c 22 82 9f 79 34 21 c3 ea 1c 57 ed b4 13 c7 19 ab b9 cc 8d ac 78 68 99 b2 d9 c8 62 4a 52 76 12 4b f7 b7 df 3e 00 10 20 29 c5 c9 f5 66 be 1f 6c 52 20 9e 8b c5 02 fb c0 2e 05 2d d7 3f 0a ce 04 a9 97 98 f7 e2 02 bd 76 20 51 a7 df 80 eb 09 bf 8c c7 f4 64 d7 ed 4e 1e 4e 3a 98 4c 74 6a 41 c9 c9 75 5a d2 8b 62 c3 9c 32 2a ed 18 aa 77 d2 27 a6 8a a6 1a 75 30 c4 8e aa d8 64 91 cb 00 d7 48 ac 0a 8a a2 33 6b 9d a4 b9 b1 4f 56 31 db a3 db 8b a6 08 cb 43 4f cb f0 ed ea 22 cd ef d7 08 65 5d d2 c4 ec 3a 2e 3e b4 c8 c9 76 49 58 f9 55 a7 91 2b 02 7d d4 d7 fb 20 19 aa f5 1a e2 3b e6 6f f3 9f 87 2a a6 6c 02 67 2d f5 02 db 6e 3e 75 7f 99 e8 27 39 ee 85 4b e3 9d 3c 7f fc 37 45 45 82 dd 97 82 df 3c 7d fe e4 6b e1 3c ed 9d b9 4d 0b de a6 Data Ascii: =s6z"y4!WxhbJRvK> )flR .-?v QdNN:LtjAuZb2w'u0dH3kOV1CO"e]:.>vIXU+} ;olg-n>u'9K<7EE<}k<M

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
225	192.168.2.3	50080	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:30 UTC	8037	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/embeddedfonts.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:30 UTC	8072	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166119 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Thu, 10 Aug 2023 21:19:30 GMT Last-Modified: Tue, 08 Aug 2023 04:19:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=158167882954076741644526169646910728897"}],"include_subdomains ":true} Server: ECAcc (muc/3352) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 5fa99bf2-801e-001f-414d-ca79c5000000 Content-Length: 3002 Connection: close
2023-08-10 21:19:30 UTC	8073	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 55 49 2d 52 65 67 75 6c 61 72 2d 66 69 6e 61 6c 27 3b 73 72 63 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d 63 6f 6e 74 65 6e 74 2f 65 6e 2f 63 73 73 2f 77 65 62 66 6f 6e 74 73 2f 73 65 67 6f 65 75 69 2d 72 65 67 75 6c 61 72 2d 66 69 6e 61 6c 2e 65 6f 74 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 3b 73 72 63 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d Data Ascii: @font-face{font-family:'SegoeUI-Regular-final';src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-regular-final.eot') format('embedded-opentype');src:url('https://res-h3.public.cdn.office.net/admincenter/admin-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
226	192.168.2.3	50082	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:30 UTC	8038	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/admin/css/admin.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:30 UTC	8039	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 165957 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Thu, 10 Aug 2023 21:19:30 GMT Last-Modified: Tue, 08 Aug 2023 04:13:54 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1695352608047827633510976883084764798115"}],"include_subdomains ":true} Server: ECAcc (muc/332D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 56b2f2b1-901e-0061-774d-cae982000000 Content-Length: 1314761 Connection: close
2023-08-10 21:19:30 UTC	8040	IN	Data Raw: 2e 66 61 6b 65 7b 63 6f 6c 6f 72 3a 72 65 64 7d 2e 6b 2d 72 65 73 65 74 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 6b 2d 66 6c 6f 61 74 77 72 61 70 3a 61 66 74 65 72 2c 2e 6b 2d 73 6c 69 64 65 72 2d 69 74 65 6d 73 3a 61 66 74 65 72 2c 2e 6b 2d 67 72 69 64 2d 74 6f 6f 6c 62 61 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 Data Ascii: .fake{color:red}.k-reset{margin:0;padding:0;border:0;outline:0;text-decoration:none;font-size:100%;list-style:none}.k-floatwrap:after,.k-slider-items:after,.k-grid-toolbar:after{content:"";display:block;clear:both;visibility:hidden;height:0;overflow:hidde
2023-08-10 21:19:30 UTC	8056	IN	Data Raw: 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6b 2d 64 65 6c 65 74 65 2c 2e 6b 2d 6c 69 6e 6b 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6b 2d 67 72 6f 75 70 2d 64 65 6c 65 74 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 69 2d 63 6c 6f 73 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 64 65 6c 65 74 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 67 72 6f 75 70 2d 64 65 6c 65 74 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 69 2d 63 6c 6f 73 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 64 65 6c 65 74 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 67 72 6f 75 70 2d 64 65 6c 65 74 65 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e Data Ascii: led):hover>.k-delete,.k-link:not(.k-state-disabled):hover>.k-group-delete,.k-state-hover>.k-i-close,.k-state-hover>.k-delete,.k-state-hover>.k-group-delete,.k-state-hover>>.k-i-close,.k-state-hover>>.k-delete,.k-state-hover>*>.k-group-delete,.k-button:n
2023-08-10 21:19:30 UTC	8084	IN	Data Raw: 3a 68 6f 76 65 72 3e 2e 6b 2d 69 2d 73 68 61 70 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 69 2d 73 68 61 70 65 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 69 2d 73 68 61 70 65 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 2d 69 2d 73 68 61 70 65 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 2d 69 2d 73 68 61 70 65 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 2e 6b 2d 69 2d 73 68 61 70 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 30 70 78 20 2d 31 37 36 70 78 7d 2e 6b 2d 69 2d 63 6f 6e 6e 65 63 74 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 36 34 70 78 20 2d 31 39 Data Ascii: :hover>.k-i-shape,.k-state-hover>.k-i-shape,.k-state-hover>*>.k-i-shape,.k-button:not(.k-state-disabled):hover .k-i-shape,.k-textbox:hover .k-i-shape,.k-button:active .k-i-shape{background-position:-80px -176px}.k-i-connector{background-position:-64px -19
2023-08-10 21:19:30 UTC	8100	IN	Data Raw: 31 3b 70 Data Ascii: 1;p
2023-08-10 21:19:30 UTC	8100	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6b 2d 74 61 62 73 74 72 69 70 2d 62 6f 74 74 6f 6d 3e 2e 6b 2d 74 61 62 73 74 72 69 70 2d 69 74 65 6d 73 20 2e 6b 2d 69 74 65 6d 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 31 70 78 20 31 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 34 70 78 20 34 70 78 7d 2e 6b 2d 74 61 62 73 74 72 69 70 2d 62 6f 74 74 6f 6d 3e 2e 6b 2d 74 61 62 73 74 72 69 70 2d 69 74 65 6d 73 20 2e 6b 2d 73 74 61 74 65 2d 61 63 74 69 76 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6b 2d 74 61 62 73 74 72 69 70 2d 62 6f 74 74 6f 6d 3e 2e 6b 2d 63 6f 6e 74 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 70 78 7d 2e 6b 2d 74 61 62 73 74 72 69 70 Data Ascii: osition:relative}.k-tabstrip-bottom>.k-tabstrip-items .k-item{border-width:0 1px 1px;border-radius:0 0 4px 4px}.k-tabstrip-bottom>.k-tabstrip-items .k-state-active{margin-bottom:0;padding-bottom:0}.k-tabstrip-bottom>.k-content{min-height:100px}.k-tabstrip
2023-08-10 21:19:30 UTC	8116	IN	Data Raw: 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 2e 6b 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 20 2e 6b 2d 6c 69 6e 6b 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 2e 6b 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 20 2e 6b 2d 6c 69 6e 6b 7b 77 69 64 74 68 3a 33 2e 32 65 6d 3b 70 61 64 64 69 6e 67 3a 30 20 2e 34 32 39 65 6d 20 30 20 2e 37 31 34 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 2e 30 38 33 33 65 6d 7d 2e 6b 2d 77 65 62 6b 69 74 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2b 2e 6b 2d 6c 69 6e 6b 2c 2e 6b 2d 66 66 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2b 2e 6b 2d 6c 69 6e 6b 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2b 2e 6b 2d 6c 69 6e 6b 7b 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: ager-numbers .k-current-page .k-link,.k-ie11 .k-pager-numbers .k-current-page .k-link{width:3.2em;padding:0 .429em 0 .714em;border-radius:1.0833em}.k-webkit .k-pager-numbers+.k-link,.k-ff .k-pager-numbers+.k-link,.k-ie11 .k-pager-numbers+.k-link{margin-le
2023-08-10 21:19:30 UTC	8132	IN	Data Raw: 6f 6c 62 61 72 20 2e 6b 2d 73 70 6c 69 74 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 6b 2d 64 61 74 65 74 69 6d 65 70 69 63 6b 65 72 7b 77 69 64 74 68 3a 31 35 65 6d 7d 2e 6b 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2c 2e 6b 2d 70 69 63 6b 65 72 2d 77 72 61 70 2c 2e 6b 2d 6e 75 6d 65 72 69 63 2d 77 72 61 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 6b 2d 64 72 6f 70 64 6f 77 6e 2d 77 72 61 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6b 2d 64 72 6f 70 64 6f 77 6e 2d 77 72 61 70 2c 2e 6b 2d 70 69 63 6b 65 72 2d 77 72 61 70 2c 2e 6b 2d 6e 75 6d 65 72 69 63 2d 77 72 61 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6b 2d 62 6c 6f 63 6b 2c 2e 6b 2d 77 69 64 67 Data Ascii: olbar .k-split-button{width:auto}.k-datetimepicker{width:15em}.k-autocomplete,.k-picker-wrap,.k-numeric-wrap{position:relative;cursor:default}.k-dropdown-wrap{position:relative}.k-dropdown-wrap,.k-picker-wrap,.k-numeric-wrap{display:block}.k-block,.k-widg
2023-08-10 21:19:30 UTC	8148	IN	Data Raw: 6f 72 2d 74 6f 6f 6c 62 61 72 20 6c 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 6b 2d 77 65 62 6b 69 74 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 2c 2e 6b 2d 66 66 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 2c 2e 6b 2d 69 65 39 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 6b 2d 77 65 62 6b 69 74 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 20 6c 69 2c 2e 6b 2d 73 61 66 61 72 69 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 20 6c 69 2c 2e 6b 2d 66 66 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 20 6c 69 2c 2e 6b 2d 69 65 39 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c 62 61 72 20 6c 69 2c 2e 6b 2d 69 65 31 30 20 2e 6b 2d 65 64 69 74 6f 72 2d 74 6f 6f 6c Data Ascii: or-toolbar li{display:inline}.k-webkit .k-editor-toolbar,.k-ff .k-editor-toolbar,.k-ie9 .k-editor-toolbar{padding:0}.k-webkit .k-editor-toolbar li,.k-safari .k-editor-toolbar li,.k-ff .k-editor-toolbar li,.k-ie9 .k-editor-toolbar li,.k-ie10 .k-editor-tool
2023-08-10 21:19:30 UTC	8164	IN	Data Raw: 6f 75 6e 64 Data Ascii: ound
2023-08-10 21:19:30 UTC	8164	IN	Data Raw: 2d 70 6f 73 69 74 69 6f 6e 3a 2d 36 32 70 78 20 63 65 6e 74 65 72 7d 2e 6b 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 66 69 72 73 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 39 32 70 78 7d 2e 6b 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 74 69 63 6b 2d 6c 61 72 67 65 2e 6b 2d 66 69 72 73 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 32 70 78 7d 2e 6b 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 73 6c 69 64 65 72 2d 74 6f 70 6c 65 66 74 20 2e 6b 2d 66 69 72 73 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 32 32 70 78 7d 2e 6b 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 73 6c 69 Data Ascii: -position:-62px center}.k-slider-horizontal .k-first{background-position:0 -92px}.k-slider-horizontal .k-tick-large.k-first{background-position:0 -2px}.k-slider-horizontal .k-slider-topleft .k-first{background-position:0 -122px}.k-slider-horizontal .k-sli
2023-08-10 21:19:30 UTC	8180	IN	Data Raw: 6c 65 72 2d 76 69 65 77 73 3e 6c 69 2e 6b 2d 63 75 72 72 65 6e 74 2d 76 69 65 77 3e 2e 6b 2d 6c 69 6e 6b 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 74 6f 6f 6c 62 61 72 3e 75 6c 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 76 69 65 77 73 3e 6c 69 2e 6b 2d 63 75 72 72 65 6e 74 2d 76 69 65 77 3e 2e 6b 2d 6c 69 6e 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 2e 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 6b 2d 77 65 62 6b 69 74 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 74 6f 6f 6c 62 61 72 3e 75 6c 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 76 69 65 77 73 3e 6c 69 2e 6b 2d 63 75 72 72 65 6e 74 2d 76 69 Data Ascii: ler-views>li.k-current-view>.k-link,.k-ie11 .k-scheduler-toolbar>ul.k-scheduler-views>li.k-current-view>.k-link{display:block;position:relative;padding-right:2.5em;padding-left:1em}.k-webkit .k-rtl .k-scheduler-toolbar>ul.k-scheduler-views>li.k-current-vi
2023-08-10 21:19:30 UTC	8196	IN	Data Raw: 74 68 3a 31 34 25 7d 2e 6b 2d 66 69 6c 65 62 72 6f 77 73 65 72 20 2e 6b 2d 66 6f 72 6d 2d 74 65 78 74 2d 72 6f 77 20 69 6e 70 75 74 7b 77 69 64 74 68 3a 38 30 25 7d 2e 6b 2d 74 69 6c 65 2d 65 6d 70 74 79 7b 6d 61 72 67 69 6e 3a 31 36 30 70 78 20 30 20 30 7d 2e 6b 2d 74 69 6c 65 2d 65 6d 70 74 79 20 2e 6b 2d 64 69 61 6c 6f 67 2d 75 70 6c 6f 61 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 30 25 7d 2e 6b 2d 74 69 6c 65 2d 65 6d 70 74 79 20 73 74 72 6f 6e 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 20 30 20 2e 32 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 6b 2d 74 69 6c 65 2d 65 6d 70 74 79 2c 2e 6b 2d 74 69 6c 65 2d Data Ascii: th:14%}.k-filebrowser .k-form-text-row input{width:80%}.k-tile-empty{margin:160px 0 0}.k-tile-empty .k-dialog-upload{font-weight:bold;font-size:120%}.k-tile-empty strong{display:block;margin:0 0 .2em;font-size:3em;font-weight:normal}.k-tile-empty,.k-tile-
2023-08-10 21:19:30 UTC	8212	IN	Data Raw: 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 6e 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 6e 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 65 6d 20 30 7d 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 65 6d 7d 2e 6b 2d 6c 69 6e 6b 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d Data Ascii: (.k-state-disabled):hover .km-pane-wrapper .k-i-arrow-n,.k-textbox:hover .km-pane-wrapper .k-i-arrow-n,.k-button:active .km-pane-wrapper .k-i-arrow-n{background-position:-1em 0}.km-pane-wrapper .k-i-arrow-e{background-position:0 -1em}.k-link:not(.k-state-
2023-08-10 21:19:30 UTC	8228	IN	Data Raw: 6b 2d 73 74 Data Ascii: k-st
2023-08-10 21:19:30 UTC	8228	IN	Data Raw: 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 6d 6f 62 69 6c 65 2d 6c 69 73 74 20 2e 6b 2d 65 64 69 74 2d 66 69 65 6c 64 20 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 6d 6f 62 69 6c 65 2d 6c 69 73 74 20 2e 6b 2d 65 64 69 74 2d 66 69 65 6c 64 20 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 2e 6b Data Ascii: ate-disabled):hover .km-pane-wrapper .k-check:checked,.k-button:not(.k-state-disabled):hover .km-pane-wrapper .k-mobile-list .k-edit-field [type=checkbox],.k-button:not(.k-state-disabled):hover .km-pane-wrapper .k-mobile-list .k-edit-field [type=radio],.k
2023-08-10 21:19:30 UTC	8244	IN	Data Raw: 65 76 65 72 73 65 2e 6b 2d 66 78 2d 65 6e 64 20 2e 6b 2d 66 78 2d 6e 65 78 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6b 2d 66 78 2d 7a 6f 6f 6d 2e 6b 2d 66 78 2d 72 65 76 65 72 73 65 2e 6b 2d 66 78 2d 73 74 61 72 74 20 2e 6b 2d 66 78 2d 63 75 72 72 65 6e 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 Data Ascii: everse.k-fx-end .k-fx-next{-webkit-transform:scale(1)!important;-moz-transform:scale(1)!important;-ms-transform:scale(1)!important;-o-transform:scale(1)!important;transform:scale(1)!important}.k-fx-zoom.k-fx-reverse.k-fx-start .k-fx-current{-webkit-transf
2023-08-10 21:19:30 UTC	8260	IN	Data Raw: 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 7d 2e 6b 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 74 65 78 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 6b 2d 74 6f 6f 6c 62 61 72 20 2e 6b 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 74 65 78 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 38 65 6d 7d 2e 6b 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 74 65 78 74 20 2e 6b 2d 69 63 6f 6e 2c 2e 6b 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 74 65 78 74 20 2e 6b 2d 69 6d 61 67 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 33 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 33 72 65 6d 7d 2e 6b 2d 62 75 74 74 6f 6e 2e 6b 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 74 65 Data Ascii: padding-right:5px}.k-button-icontext{overflow:visible}.k-toolbar .k-button-icontext{padding-right:.8em}.k-button-icontext .k-icon,.k-button-icontext .k-image{margin-right:3px;margin-right:.3rem;margin-left:-3px;margin-left:-.3rem}.k-button.k-button-iconte
2023-08-10 21:19:30 UTC	8276	IN	Data Raw: 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 2d 69 6e 73 65 72 74 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 2d 75 70 64 61 74 65 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 2d 69 2d 74 69 63 6b 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 2d 69 6e 73 65 72 74 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 2d 75 70 64 61 74 65 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 2e 6b 2d 69 2d 74 69 63 6b 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 2e 6b 2d 69 6e 73 65 72 74 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 2e 6b 2d 75 Data Ascii: ,.k-button:not(.k-state-disabled):hover .k-insert,.k-button:not(.k-state-disabled):hover .k-update,.k-textbox:hover .k-i-tick,.k-textbox:hover .k-insert,.k-textbox:hover .k-update,.k-button:active .k-i-tick,.k-button:active .k-insert,.k-button:active .k-u
2023-08-10 21:19:30 UTC	8292	IN	Data Raw: 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6b 2d 69 2d 66 6f 6c 64 65 72 2d 61 64 64 2c 2e 6b 2d 6c 69 6e 6b 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6b 2d 61 64 64 66 6f 6c 64 65 72 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 69 2d 66 6f 6c 64 65 72 2d 61 64 64 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 2d 61 64 64 66 6f 6c 64 65 72 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 69 2d 66 6f 6c 64 65 72 2d 61 64 64 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 2d 61 64 64 66 6f 6c 64 65 72 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 20 2e 6b 2d 69 2d 66 6f 6c 64 65 72 Data Ascii: -disabled):hover>.k-i-folder-add,.k-link:not(.k-state-disabled):hover>.k-addfolder,.k-state-hover>.k-i-folder-add,.k-state-hover>.k-addfolder,.k-state-hover>>.k-i-folder-add,.k-state-hover>>.k-addfolder,.k-button:not(.k-state-disabled):hover .k-i-folder
2023-08-10 21:19:30 UTC	8308	IN	Data Raw: 68 65 69 67 68 Data Ascii: heigh
2023-08-10 21:19:30 UTC	8308	IN	Data Raw: 74 3a 32 2e 32 7d 2e 6b 2d 70 61 6e 65 6c 20 2e 6b 2d 70 61 6e 65 6c 3e 2e 6b 2d 69 74 65 6d 3e 2e 6b 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 65 6d 7d 2e 6b 2d 70 61 6e 65 6c 62 61 72 20 2e 6b 2d 69 2d 73 65 65 6b 2d 65 20 2e 6b 2d 6c 69 6e 6b 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6b 2d 70 61 6e 65 6c 20 2e 6b 2d 70 61 6e 65 6c 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6b 2d 6d 65 6e 75 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 6b 2d 6d 65 6e 75 2c 2e 6b 2d 6d 65 6e 75 20 2e 6b 2d 6d 65 6e 75 2d 67 72 6f 75 70 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 7a 6f 6f 6d 3a 31 7d 2e 6b 2d 6d 65 6e 75 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 Data Ascii: t:2.2}.k-panel .k-panel>.k-item>.k-link{padding-left:2em}.k-panelbar .k-i-seek-e .k-link{border-bottom:0}.k-panel .k-panel{border-bottom:0}.k-menu{cursor:default}.k-menu,.k-menu .k-menu-group{list-style:none;margin:0;padding:0;zoom:1}.k-menu:after{content
2023-08-10 21:19:30 UTC	8324	IN	Data Raw: 72 73 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2c 2e 6b 2d 73 61 66 61 72 69 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2c 2e 6b 2d 77 65 62 6b 69 74 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 67 72 69 64 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2c 2e 6b 2d 66 66 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 67 72 69 64 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 67 72 69 64 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 2c 2e 6b 2d 73 61 66 61 72 69 20 2e 6b 2d 72 74 6c 20 2e 6b 2d 67 72 69 64 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 34 2e 38 65 6d 3b 77 69 Data Ascii: rs,.k-ie11 .k-rtl .k-pager-numbers,.k-safari .k-rtl .k-pager-numbers,.k-webkit .k-rtl .k-grid .k-pager-numbers,.k-ff .k-rtl .k-grid .k-pager-numbers,.k-ie11 .k-rtl .k-grid .k-pager-numbers,.k-safari .k-rtl .k-grid .k-pager-numbers{left:auto;right:4.8em;wi
2023-08-10 21:19:30 UTC	8340	IN	Data Raw: 65 6e 64 61 72 20 2e 6b 2d 66 6f 6f 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 6b 2d 63 61 6c 65 6e 64 61 72 20 2e 6b 2d 66 6f 6f 74 65 72 20 2e 6b 2d 6e 61 76 2d 74 6f 64 61 79 2c 2e 6b 2d 63 61 6c 65 6e 64 61 72 20 2e 6b 2d 66 6f 6f 74 65 72 3e 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 2e 35 65 6d 20 30 7d 2e 6b 2d 63 61 6c 65 6e 64 61 72 20 2e 6b 2d 6e 61 76 2d 74 6f 64 61 79 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 64 69 76 2e 6b 2d 74 72 65 65 76 69 65 77 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 Data Ascii: endar .k-footer{clear:both}.k-calendar .k-footer .k-nav-today,.k-calendar .k-footer>.k-state-disabled{display:block;height:100%;padding:.5em 0}.k-calendar .k-nav-today:hover{text-decoration:underline}div.k-treeview{border-width:0;background:0;overflow:aut
2023-08-10 21:19:30 UTC	8356	IN	Data Raw: 4a 68 64 47 56 6b 4b 53 49 67 4c 7a 34 4b 50 43 39 7a 64 6d 63 2b 29 7d 2e 6b 2d 69 65 39 20 2e 6b 2d 66 6c 61 74 63 6f 6c 6f 72 70 69 63 6b 65 72 20 2e 6b 2d 68 73 76 2d 67 72 61 64 69 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 44 39 34 62 57 77 67 64 6d 56 79 63 32 6c 76 62 6a 30 69 4d 53 34 77 49 69 41 2f 50 67 6f 38 63 33 5a 6e 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 67 64 32 6c 6b 64 47 67 39 49 6a 45 77 4d 43 55 69 49 47 68 6c 61 57 64 6f 64 44 30 69 4d 54 41 77 4a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 45 67 4d 53 49 67 63 48 4a 6c Data Ascii: JhdGVkKSIgLz4KPC9zdmc+)}.k-ie9 .k-flatcolorpicker .k-hsv-gradient{background:url(data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiA/Pgo8c3ZnIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgd2lkdGg9IjEwMCUiIGhlaWdodD0iMTAwJSIgdmlld0JveD0iMCAwIDEgMSIgcHJl
2023-08-10 21:19:30 UTC	8372	IN	Data Raw: 72 65 73 73 Data Ascii: ress
2023-08-10 21:19:30 UTC	8372	IN	Data Raw: 62 61 72 2d 72 65 76 65 72 73 65 20 2e 6b 2d 69 74 65 6d 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 20 31 70 78 20 31 70 78 20 30 7d 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 72 65 76 65 72 73 65 20 2e 6b 2d 69 74 65 6d 2c 2e 6b 2d 72 74 6c 20 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 69 74 65 6d 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 20 30 20 31 70 78 20 31 70 78 7d 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 66 69 72 73 74 2c 2e 6b 2d 72 74 6c 20 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 6c 61 73 74 2c 2e 6b 2d 72 74 6c 20 2e Data Ascii: bar-reverse .k-item{border-width:1px 1px 1px 0}.k-progressbar-horizontal.k-progressbar-reverse .k-item,.k-rtl .k-progressbar-horizontal .k-item{border-width:1px 0 1px 1px}.k-progressbar-horizontal .k-first,.k-rtl .k-progressbar-horizontal .k-last,.k-rtl .
2023-08-10 21:19:30 UTC	8388	IN	Data Raw: 73 3a 61 66 74 65 72 7b 74 6f 70 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 6b 2d 65 76 65 6e 74 3e 2e 6b 2d 72 65 73 69 7a 65 2d 65 3a 61 66 74 65 72 2c 2e 6b 2d 65 76 65 6e 74 3e 2e 6b 2d 72 65 73 69 7a 65 2d 77 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 70 78 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 2e 37 65 6d 3b 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 77 69 64 74 68 3a 31 70 78 7d 2e 6b 2d 65 76 65 6e 74 3e 2e 6b 2d 72 65 73 69 7a 65 2d 65 3a 61 66 74 65 72 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 31 70 78 7d 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 6d 6f 62 69 6c 65 20 2e 6b 2d 65 76 65 6e 74 3e 2e 6b 2d 72 65 73 69 7a 65 2d 6e 2c 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 6d 6f 62 69 6c 65 20 2e 6b 2d 65 76 65 6e 74 Data Ascii: s:after{top:auto;bottom:1px}.k-event>.k-resize-e:after,.k-event>.k-resize-w:after{left:1px;top:50%;margin-top:-.7em;height:1.4em;width:1px}.k-event>.k-resize-e:after{left:auto;right:1px}.k-scheduler-mobile .k-event>.k-resize-n,.k-scheduler-mobile .k-event
2023-08-10 21:19:30 UTC	8404	IN	Data Raw: 68 61 6e 64 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 38 70 78 20 2d 33 30 39 70 78 7d 2e 6b 2d 73 70 6c 69 74 62 61 72 2d 76 65 72 74 69 63 61 6c 2d 68 6f 76 65 72 3e 2e 6b 2d 72 65 73 69 7a 65 2d 68 61 6e 64 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 37 30 70 78 20 2d 33 30 39 70 78 7d 2e 6b 2d 73 70 6c 69 74 62 61 72 2d 76 65 72 74 69 63 61 6c 20 2e 6b 2d 63 6f 6c 6c 61 70 73 65 2d 70 72 65 76 2c 2e 6b 2d 73 70 6c 69 74 62 61 72 2d 76 65 72 74 69 63 61 6c 20 2e 6b 2d 65 78 70 61 6e 64 2d 6e 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 32 70 78 20 2d 31 33 34 70 78 7d 2e 6b 2d 73 70 6c 69 74 62 61 72 2d 76 65 72 74 69 63 61 6c 2d 68 6f 76 65 72 3e 2e 6b 2d 63 6f 6c Data Ascii: handle{background-position:-38px -309px}.k-splitbar-vertical-hover>.k-resize-handle{background-position:-70px -309px}.k-splitbar-vertical .k-collapse-prev,.k-splitbar-vertical .k-expand-next{background-position:2px -134px}.k-splitbar-vertical-hover>.k-col
2023-08-10 21:19:30 UTC	8420	IN	Data Raw: 6b 2d 65 76 65 6e 74 3a 68 6f 76 65 72 20 2e 6b 2d 65 76 65 6e 74 2d 64 65 6c 65 74 65 2c 2e 6b 2d 69 65 37 20 74 72 3a 68 6f 76 65 72 3e 74 64 3e 2e 6b 2d 74 61 73 6b 20 2e 6b 2d 65 76 65 6e 74 2d 64 65 6c 65 74 65 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 6b 2d 69 74 65 6d 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 70 72 6f 67 72 65 73 73 2d 73 74 61 74 75 73 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 67 72 69 64 2d 68 65 61 64 65 72 2d 6c 6f 63 6b 65 64 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 67 72 69 64 2d 63 6f 6e 74 65 6e 74 2d 6c 6f 63 6b 65 64 2c 2e 6b 2d 69 65 37 20 2e 6b 2d 67 72 69 64 2d 68 65 61 64 65 72 2d 6c 6f 63 6b 65 64 2b 2e 6b 2d 67 72 Data Ascii: k-event:hover .k-event-delete,.k-ie7 tr:hover>td>.k-task .k-event-delete,.k-ie7 .k-progressbar,.k-ie7 .k-progressbar-horizontal .k-item,.k-ie7 .k-progress-status,.k-ie7 .k-grid-header-locked,.k-ie7 .k-grid-content-locked,.k-ie7 .k-grid-header-locked+.k-gr
2023-08-10 21:19:30 UTC	8436	IN	Data Raw: 69 76 65 20 Data Ascii: ive
2023-08-10 21:19:30 UTC	8436	IN	Data Raw: 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 32 65 6d 7d 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 33 65 6d 7d 2e 6b 2d 6c 69 6e 6b 3a 6e 6f 74 28 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 77 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 77 2c 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 3e 2a 3e 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 Data Ascii: .km-pane-wrapper .k-i-arrow-s{background-position:0 -2em}.km-pane-wrapper .k-i-arrow-w{background-position:0 -3em}.k-link:not(.k-state-disabled):hover>.km-pane-wrapper .k-i-arrow-w,.k-state-hover>.km-pane-wrapper .k-i-arrow-w,.k-state-hover>*>.km-pane-wra
2023-08-10 21:19:30 UTC	8452	IN	Data Raw: 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 6d 6f 62 69 6c 65 2d 6c 69 73 74 20 2e 6b 2d 65 64 69 74 2d 66 69 65 6c 64 20 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 6b 2d 74 65 78 74 62 6f 78 3a 68 6f 76 65 72 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 6d 6f 62 69 6c 65 2d 6c 69 73 74 20 2e 6b 2d 65 64 69 74 2d 66 69 65 6c 64 20 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 2e 6b 6d 2d 70 61 6e 65 2d 77 72 61 70 70 65 72 20 2e 6b 2d 63 68 65 63 6b 3a 63 68 65 63 6b 65 64 2c 2e 6b 2d 62 75 74 74 6f 6e 3a 61 Data Ascii: ver .km-pane-wrapper .k-check:checked,.k-textbox:hover .km-pane-wrapper .k-mobile-list .k-edit-field [type=checkbox],.k-textbox:hover .km-pane-wrapper .k-mobile-list .k-edit-field [type=radio],.k-button:active .km-pane-wrapper .k-check:checked,.k-button:a
2023-08-10 21:19:30 UTC	8468	IN	Data Raw: 20 23 63 35 63 35 63 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 32 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 29 7d 2e 6b 2d 72 74 6c 20 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 74 6f 6f 6c 62 61 72 3e 75 6c 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 76 69 65 77 73 2e 6b 2d 73 74 61 74 65 2d 65 78 70 61 6e 64 65 64 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 7d 2e 6b 2d 66 78 2d 65 6e 64 20 2e 6b 2d 66 78 2d 6e 65 78 74 2c 2e 6b 2d 66 78 2d 65 6e 64 20 2e 6b 2d 66 78 2d 63 75 72 72 65 6e 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 35 30 6d 73 20 65 61 73 65 2d 6f 75 Data Ascii: #c5c5c5;background-color:#fff;background-image:none;box-shadow:0 2px 2px 0 rgba(0,0,0,.3)}.k-rtl .k-scheduler-toolbar>ul.k-scheduler-views.k-state-expanded{text-align:left}}.k-fx-end .k-fx-next,.k-fx-end .k-fx-current{-webkit-transition:all 350ms ease-ou
2023-08-10 21:19:30 UTC	8484	IN	Data Raw: 74 2e 6b 2d 74 65 78 74 62 6f 78 7b 68 65 69 67 68 74 3a 32 2e 31 34 33 65 6d 7d 2e 6b 2d 6d 75 6c 74 69 73 65 6c 65 63 74 2d 77 72 61 70 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 65 6d 7d 2e 6b 2d 6d 75 6c 74 69 73 65 6c 65 63 74 2d 77 72 61 70 3e 75 6c 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 70 78 7d 2e 6b 2d 6d 75 6c 74 69 73 65 6c 65 63 74 2d 77 72 61 70 20 6c 69 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 35 37 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 33 33 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 31 36 37 65 6d 20 31 2e 38 65 6d 20 2e 31 36 37 65 6d 20 2e 35 65 6d 3b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 32 70 78 20 32 70 78 7d 2e 6b 2d 70 6f 70 75 70 2e 6b 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6b 2d 70 6f 70 75 70 2e 6b 2d 63 61 6c Data Ascii: t.k-textbox{height:2.143em}.k-multiselect-wrap{min-height:2em}.k-multiselect-wrap>ul{padding-top:1px}.k-multiselect-wrap li{font-size:.857em;line-height:1.333em;padding:.167em 1.8em .167em .5em;margin:2px 0 2px 2px}.k-popup.k-list-container,.k-popup.k-cal
2023-08-10 21:19:30 UTC	8500	IN	Data Raw: 63 6b 67 72 Data Ascii: ckgr
2023-08-10 21:19:30 UTC	8500	IN	Data Raw: 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 38 70 78 20 2d 31 36 70 78 7d 2e 6b 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 2c 2e 6b 2d 72 61 64 69 6f 2d 6c 61 62 65 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 65 6d 7d 2e 6b 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 2e 6b 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 3a 61 66 74 65 72 2c 2e 6b 2d 63 68 65 63 6b 62 6f 78 3a 63 68 65 63 6b 65 64 2b 2e 6b 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 3a 61 66 74 65 72 7b 77 69 64 74 68 3a 31 2e 33 35 37 65 6d 3b 68 65 69 67 68 74 3a 31 2e 33 35 37 65 6d 7d 2e 6b 2d 72 61 64 69 6f 2d 6c 61 62 65 6c 3a 62 65 66 6f 72 65 7b 77 69 64 74 68 3a 31 39 70 78 3b 68 65 69 67 68 Data Ascii: ound-position:-48px -16px}.k-checkbox-label,.k-radio-label{line-height:normal;padding-left:2em}.k-checkbox-label:before,.k-checkbox-label:after,.k-checkbox:checked+.k-checkbox-label:after{width:1.357em;height:1.357em}.k-radio-label:before{width:19px;heigh
2023-08-10 21:19:30 UTC	8516	IN	Data Raw: 2d 76 61 6c 69 64 61 74 69 6f 6e 20 2e 6b 2d 63 61 6c 6c 6f 75 74 2d 77 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 31 39 64 7d 2e 6b 2d 74 6f 6f 6c 74 69 70 2d 76 61 6c 69 64 61 74 69 6f 6e 20 2e 6b 2d 63 61 6c 6c 6f 75 74 2d 73 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 66 66 31 39 64 7d 2e 6b 2d 74 6f 6f 6c 74 69 70 2d 76 61 6c 69 64 61 74 69 6f 6e 20 2e 6b 2d 63 61 6c 6c 6f 75 74 2d 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 31 39 64 7d 2e 6b 2d 73 70 6c 69 74 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 66 34 66 34 7d 2e 6b 2d 72 65 73 74 72 69 63 74 65 64 2d 73 69 7a 65 2d 76 65 72 74 69 63 61 6c 2c 2e 6b 2d 72 65 73 74 72 69 63 74 65 64 2d 73 69 7a Data Ascii: -validation .k-callout-w{border-right-color:#fff19d}.k-tooltip-validation .k-callout-s{border-top-color:#fff19d}.k-tooltip-validation .k-callout-e{border-left-color:#fff19d}.k-splitbar{background-color:#f4f4f4}.k-restricted-size-vertical,.k-restricted-siz
2023-08-10 21:19:30 UTC	8532	IN	Data Raw: 6f 76 65 72 2c 2e 6b 2d 70 72 69 6d 61 72 79 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 20 2e 6b 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 2e 6b 2d 70 72 69 6d 61 72 79 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 37 64 37 64 37 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 35 65 35 65 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 35 65 35 65 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 2e 6b 2d 6c 69 6e Data Ascii: over,.k-primary.k-state-disabled:hover,.k-state-disabled .k-primary:active,.k-primary.k-state-disabled:active{color:#7d7d7d;border-color:#e5e5e5;background-color:#e5e5e5;background-image:none;-webkit-box-shadow:none;box-shadow:none}.k-pager-numbers .k-lin
2023-08-10 21:19:30 UTC	8548	IN	Data Raw: 6c 69 73 74 20 74 72 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 66 34 66 34 7d 2e 6b 2d 67 61 6e 74 74 20 2e 6b 2d 74 72 65 65 6c 69 73 74 20 2e 6b 2d 61 6c 74 2c 2e 6b 2d 67 61 6e 74 74 20 2e 6b 2d 68 65 61 64 65 72 2e 6b 2d 6e 6f 6e 77 6f 72 6b 2d 68 6f 75 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6b 2d 67 72 69 64 20 74 64 2e 6b 2d 73 74 61 74 65 2d 66 6f 63 75 73 65 64 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 23 30 30 37 32 63 36 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 23 30 30 37 32 63 36 7d 2e 6b 2d 67 72 69 64 20 74 64 2c 2e 6b 2d 67 72 69 64 20 2e 6b 2d 67 72 6f 75 70 Data Ascii: list tr:hover{background-color:#f4f4f4}.k-gantt .k-treelist .k-alt,.k-gantt .k-header.k-nonwork-hour{background-color:#fff}.k-grid td.k-state-focused{-webkit-box-shadow:inset 0 0 0 1px #0072c6;box-shadow:inset 0 0 0 1px #0072c6}.k-grid td,.k-grid .k-group
2023-08-10 21:19:30 UTC	8564	IN	Data Raw: 63 75 72 72 65 6e 74 2d 70 61 67 65 29 20 2e 6b 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 6b 2d 66 66 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 6c 69 3a 6e 6f 74 28 2e 6b 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 29 20 2e 6b 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 6b 2d 69 65 31 31 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 6c 69 3a 6e 6f 74 28 2e 6b 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 29 20 2e 6b 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 6b 2d 73 61 66 61 72 69 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 20 2e 6b 2d 70 61 67 65 72 2d 6e 75 6d 62 65 72 73 20 6c 69 3a 6e 6f 74 28 2e 6b 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 29 20 2e 6b 2d 6c 69 6e 6b 3a 68 6f Data Ascii: current-page) .k-link:hover,.k-ff .k-pager-wrap .k-pager-numbers li:not(.k-current-page) .k-link:hover,.k-ie11 .k-pager-wrap .k-pager-numbers li:not(.k-current-page) .k-link:hover,.k-safari .k-pager-wrap .k-pager-numbers li:not(.k-current-page) .k-link:ho
2023-08-10 21:19:30 UTC	8580	IN	Data Raw: 6f 63 6b 3b 77 69 64 74 68 3a 31 38 70 78 3b 68 65 69 67 68 74 3a 31 38 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 5b 64 69 72 3d 22 6c 74 72 22 5d 20 2e 77 69 7a 61 72 64 2d 64 69 61 6c 6f 67 5f 5f 73 74 65 70 2d 74 65 78 74 5f 5f 73 75 62 74 69 74 6c 65 5f 5f 6f 72 64 69 6e 61 6c 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 77 69 7a 61 72 64 2d 64 69 61 6c 6f 67 5f 5f 73 74 65 70 2d 74 65 78 74 5f 5f 73 75 62 74 69 74 6c 65 5f 5f 6f 72 64 69 6e 61 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 2e 77 69 7a 61 72 64 2d 64 69 61 6c 6f 67 5f 5f 73 74 65 70 2d 74 65 78 74 5f 5f 62 6f 64 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e Data Ascii: ock;width:18px;height:18px;border-radius:50%;text-align:center}[dir="ltr"] .wizard-dialog__step-text__subtitle__ordinal{margin-right:5px}[dir="rtl"] .wizard-dialog__step-text__subtitle__ordinal{margin-left:5px}.wizard-dialog__step-text__body{font-weight:n
2023-08-10 21:19:30 UTC	8596	IN	Data Raw: 69 6e 53 63 6f 70 65 64 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 85 b4 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 85 b5 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 85 b6 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 85 b7 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 Data Ascii: inScoped .glyphicon-floppy-remove:before{content:""}.adminScoped .glyphicon-floppy-save:before{content:""}.adminScoped .glyphicon-floppy-open:before{content:""}.adminScoped .glyphicon-credit-card:before{content:""}.adminScoped .glyphicon-trans
2023-08-10 21:19:30 UTC	8612	IN	Data Raw: 35 30 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 35 7b 72 69 67 68 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 34 7b 72 69 67 68 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 33 7b 72 69 67 68 74 3a 32 35 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d Data Ascii: 50%}.adminScoped .col-xs-pull-5{right:41.66666667%}.adminScoped .col-xs-pull-4{right:33.33333333%}.adminScoped .col-xs-pull-3{right:25%}.adminScoped .col-xs-pull-2{right:16.66666667%}.adminScoped .col-xs-pull-1{right:8.33333333%}.adminScoped .col-xs-pull-
2023-08-10 21:19:30 UTC	8628	IN	Data Raw: 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 68 65 61 64 3e 74 72 3e 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 64 6d 69 6e Data Ascii: .table-bordered>tbody>tr>th:last-child,.adminScoped .table-responsive>.table-bordered>tfoot>tr>th:last-child,.adminScoped .table-responsive>.table-bordered>thead>tr>td:last-child,.adminScoped .table-responsive>.table-bordered>tbody>tr>td:last-child,.admin
2023-08-10 21:19:30 UTC	8644	IN	Data Raw: 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e Data Ascii: mary.disabled,.adminScoped .btn-primary[disabled],.adminScoped fieldset[disabled] .btn-primary,.adminScoped .btn-primary.disabled:hover,.adminScoped .btn-primary[disabled]:hover,.adminScoped fieldset[disabled] .btn-primary:hover,.adminScoped .btn-primary.
2023-08-10 21:19:30 UTC	8660	IN	Data Raw: 6f 70 65 64 20 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3e 2e 62 74 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 62 Data Ascii: oped .btn-group-vertical>.btn:last-child:not(:first-child){border-top-left-radius:0;border-top-right-radius:0;border-bottom-left-radius:4px}.adminScoped .btn-group-vertical>.btn-group:not(:first-child):not(:last-child)>.btn{border-radius:0}.adminScoped .b
2023-08-10 21:19:30 UTC	8676	IN	Data Raw: 6e 61 76 3e 2e 61 63 74 69 76 65 3e 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 61 63 74 69 76 65 3e 61 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 61 63 74 69 76 65 3e 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 37 65 37 65 37 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 64 69 73 61 62 6c 65 64 3e 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e Data Ascii: nav>.active>a,.adminScoped .navbar-default .navbar-nav>.active>a:hover,.adminScoped .navbar-default .navbar-nav>.active>a:focus{color:#555;background-color:#e7e7e7}.adminScoped .navbar-default .navbar-nav>.disabled>a,.adminScoped .navbar-default .navbar-n
2023-08-10 21:19:30 UTC	8692	IN	Data Raw: 74 72 61 6e 73 70 61 72 65 6e 74 20 32 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 35 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 35 29 20 35 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 35 29 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 65 64 69 61 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 65 64 69 61 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 65 64 69 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 65 64 69 61 2d 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b Data Ascii: transparent 25%,transparent 50%,rgba(255,255,255,.15) 50%,rgba(255,255,255,.15) 75%,transparent 75%,transparent)}.adminScoped .media{margin-top:15px}.adminScoped .media:first-child{margin-top:0}.adminScoped .media,.adminScoped .media-body{overflow:hidden;
2023-08-10 21:19:30 UTC	8708	IN	Data Raw: 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 68 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 66 6f 6f 74 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d Data Ascii: r:first-child>th{border-bottom:0}.adminScoped .panel>.table-bordered>tbody>tr:last-child>td,.adminScoped .panel>.table-responsive>.table-bordered>tbody>tr:last-child>td,.adminScoped .panel>.table-bordered>tfoot>tr:last-child>td,.adminScoped .panel>.table-
2023-08-10 21:19:30 UTC	8724	IN	Data Raw: 6c 2d 63 61 70 74 69 6f 6e 7b 72 69 67 68 74 3a 32 30 25 3b 6c 65 66 74 3a 32 30 25 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 64 69 63 61 74 6f 72 73 7b 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 64 64 3a 62 65 66 6f 72 65 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 64 64 3a 61 66 74 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 6f 6e 74 61 69 6e 65 72 3a 62 Data Ascii: l-caption{right:20%;left:20%;padding-bottom:30px}.adminScoped .carousel-indicators{bottom:20px}}.adminScoped .clearfix:before,.adminScoped .clearfix:after,.adminScoped .dl-horizontal dd:before,.adminScoped .dl-horizontal dd:after,.adminScoped .container:b
2023-08-10 21:19:30 UTC	8740	IN	Data Raw: 3e 2e 6d 65 6e 75 54 65 78 74 4c 65 6e 67 74 68 2d 72 74 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 69 64 65 62 61 72 2d 73 75 62 6e 61 76 3e 6c 69 2e 61 63 74 69 76 65 3e 2e 6e 61 76 2d 69 74 65 6d 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 69 64 65 62 61 72 2d 73 75 62 6e 61 76 3e 6c 69 2e 61 63 74 69 76 65 3e 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 69 64 65 62 61 72 2d 73 75 62 6e 61 76 3e 6c 69 3e 2e 6e 61 76 2d 69 74 65 6d 3a 66 6f 63 75 73 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 69 64 65 62 61 72 2d 73 75 62 6e 61 76 3e 6c 69 3e 2e 6e 61 76 2d 69 74 65 6d 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 61 Data Ascii: >.menuTextLength-rtl{margin-left:50px;margin-right:50px}.adminScoped .sidebar-subnav>li.active>.nav-item,.adminScoped .sidebar-subnav>li.active>a,.adminScoped .sidebar-subnav>li>.nav-item:focus,.adminScoped .sidebar-subnav>li>.nav-item:hover{color:#fff}.a
2023-08-10 21:19:30 UTC	8756	IN	Data Raw: 6c 79 6f 75 74 7b 7a 2d 69 6e 64 65 78 3a 31 39 Data Ascii: lyout{z-index:19
2023-08-10 21:19:30 UTC	8756	IN	Data Raw: 30 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 38 36 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 38 63 38 63 38 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 33 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 6f 70 61 63 69 74 79 3a 31 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 6e 65 6c 66 6c 79 6f 75 74 2d 78 73 6d 61 6c 6c 7b 6d 61 78 2d 77 69 64 Data Ascii: 00;position:absolute;height:100%;top:0;bottom:0;right:0;width:860px;border-style:solid;border:1px solid #c8c8c8;background-color:#fff;box-shadow:0 0 30px 0 rgba(0,0,0,.2);opacity:1;overflow-y:auto;overflow-x:hidden}.adminScoped .panelflyout-xsmall{max-wid
2023-08-10 21:19:30 UTC	8772	IN	Data Raw: 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 44 69 61 6c 6f 67 2d 6d 61 69 6e 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 76 69 72 74 75 61 6c 2d 74 6f 75 72 2d 62 61 6e 6e 65 72 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 44 69 61 6c 6f 67 2d 69 6e 6e 65 72 7b 77 69 64 74 68 3a 31 33 36 36 70 78 3b 68 65 69 67 68 74 3a 33 37 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 29 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 76 69 72 74 75 61 6c 2d 74 6f 75 72 2d 62 61 6e 6e 65 72 20 2e 68 65 61 64 65 72 7b 68 65 69 67 68 74 3a 38 30 70 78 7d 2e 61 64 6d Data Ascii: fabric0103-ms-Dialog-main{height:100%}.adminScoped .virtual-tour-banner .fabric0103-ms-Dialog-inner{width:1366px;height:370px;background-color:#0078d7;padding:0;box-shadow:0 0 5px 0 rgba(0,0,0,.4)}.adminScoped .virtual-tour-banner .header{height:80px}.adm
2023-08-10 21:19:30 UTC	8788	IN	Data Raw: 69 67 68 74 2d 31 30 30 70 78 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 67 2d 6d 61 72 67 69 6e 2d 74 6f 70 2d 31 32 30 70 78 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 23 73 65 61 72 63 68 54 65 78 74 7b 68 65 69 67 68 74 3a 33 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 61 67 65 54 69 74 6c 65 43 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6c 69 73 74 49 74 65 6d 4f 70 74 69 6f 6e 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 61 74 61 4c 69 73 74 46 69 65 6c 64 7b 6d 61 72 67 69 6e 3a Data Ascii: ight-100px{min-height:100px}.adminScoped .g-margin-top-120px{margin-top:120px}.adminScoped #searchText{height:35px;margin-left:5px}.adminScoped .pageTitleContainer{height:10%}.adminScoped .listItemOptions{font-size:25px}.adminScoped .dataListField{margin:
2023-08-10 21:19:30 UTC	8804	IN	Data Raw: 6f 61 74 3a 72 69 67 68 74 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 63 68 65 76 72 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 31 32 70 78 20 30 20 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 63 68 65 76 72 6f 6e 2d 75 73 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 30 20 30 20 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 63 68 65 76 72 6f 6e 2d 72 74 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 30 20 30 20 31 32 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 70 61 64 2d 62 74 6d 2d 31 30 70 78 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 21 69 6d 70 6f 72 74 61 Data Ascii: oat:right}.adminScoped .f-chevron{font-size:14px;padding:15px 12px 0 0}.adminScoped .f-chevron-user{font-size:14px;padding:15px 0 0 0}.adminScoped .f-chevron-rtl{font-size:14px;padding:15px 0 0 12px}.adminScoped .f-pad-btm-10px{padding-bottom:10px!importa
2023-08-10 21:19:30 UTC	8820	IN	Data Raw: 63 6c 2d 62 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 32 70 78 20 31 32 70 78 20 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 61 6c 65 72 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 31 70 78 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 32 70 78 20 31 32 70 78 20 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 3b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 2d 61 6c 65 72 74 2d 62 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 20 31 32 70 78 20 31 32 70 78 20 31 32 Data Ascii: cl-bl{font-size:30px;padding:20px 12px 12px 12px;color:#0078d7}.adminScoped .f-alert{font-size:21px;padding:20px 12px 12px 12px;color:#0078d7;color:#000!important;padding-top:20px!important}.adminScoped .f-alert-bl{font-size:30px;padding:20px 12px 12px 12
2023-08-10 21:19:30 UTC	8836	IN	Data Raw: 30 30 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 65 65 66 62 33 3b 70 61 64 64 69 6e 67 3a 35 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 73 2d 69 63 6f 6e 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 73 2d 73 6d 61 6c 6c 2d 69 63 6f 6e 2d 73 69 7a 65 7b 77 69 64 74 68 3a 34 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 73 2d 69 63 6f 6e 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 73 2d 6d 61 69 6c 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 3a Data Ascii: 00000;background-color:#feefb3;padding:5px}.adminScoped .ss-icon-size{font-size:28px;text-align:center}.adminScoped .ss-small-icon-size{width:40px;font-size:28px;text-align:center}.adminScoped .ss-icon-color{color:#0078d7}.adminScoped .ss-mail-icon{color:
2023-08-10 21:19:30 UTC	8852	IN	Data Raw: 3a 31 36 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 66 30 3b 63 6f 6e 74 65 6e 74 3a 27 27 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 35 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 35 73 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 54 6f 67 67 6c 65 2d 69 6e 70 75 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 70 61 63 69 74 79 3a 30 3b 74 6f 70 3a 30 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 54 6f 67 67 6c 65 2d 69 6e 70 75 74 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 3a 63 68 65 63 6b Data Ascii: :16px;border-radius:100%;background-color:#0f0;content:'';-webkit-transition:.25s;transition:.25s}.adminScoped .fabric0103-ms-Toggle-input{position:absolute!important;opacity:0;top:0}.adminScoped .fabric0103-ms-Toggle-input:focus:not(:disabled):not(:check
2023-08-10 21:19:30 UTC	8868	IN	Data Raw: 32 70 78 3b 77 69 64 74 68 3a 33 32 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 6b 72 2d 61 63 74 2d 64 69 76 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 6b 72 2d 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 63 6f 6c 6f 72 3a 23 32 31 32 31 32 31 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 6b 72 2d 72 73 6c 74 2d 62 6c 6b 7b 77 69 64 74 68 3a 34 38 30 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 70 6b 72 2d 72 73 6c 74 2d 6c 73 74 7b 6c 69 73 74 2d Data Ascii: 2px;width:32px}.adminScoped .pkr-act-div:hover{cursor:pointer}.adminScoped .pkr-act{font-size:15px;color:#212121;vertical-align:middle;padding-bottom:2px}.adminScoped .pkr-rslt-blk{width:480px;display:block;overflow:hidden}.adminScoped .pkr-rslt-lst{list-
2023-08-10 21:19:30 UTC	8884	IN	Data Raw: 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 68 64 20 2e 6d 65 73 73 61 67 65 2d 68 69 73 74 6f 72 79 20 2e 64 65 74 61 69 6c 73 20 2e 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 20 30 20 31 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 68 64 20 2e 6d 65 73 73 61 67 65 2d 62 6f 64 79 20 2e 64 65 74 61 69 6c 73 20 2e 63 6f 6e 74 65 6e 74 20 2e 73 68 6f 77 2d 6d 6f 72 65 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 68 64 20 2e 6d 65 73 73 61 67 65 2d 68 69 73 74 6f 72 79 20 2e 64 65 74 61 69 6c 73 20 2e 63 6f 6e 74 65 6e 74 20 2e 73 68 6f 77 2d 6d 6f 72 65 7b 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 30 70 78 20 30 20 31 30 70 78 7d 2e 61 Data Ascii: adminScoped .shd .message-history .details .content{padding:0 10px 0 10px}.adminScoped .shd .message-body .details .content .show-more,.adminScoped .shd .message-history .details .content .show-more{color:#0078d7;cursor:pointer;padding:10px 10px 0 10px}.a
2023-08-10 21:19:30 UTC	8900	IN	Data Raw: 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 61 72 63 68 42 6f 78 49 6e 70 75 74 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 61 72 63 68 42 6f 78 42 75 74 74 6f 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 33 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 61 72 63 68 42 6f 78 49 63 6f 6e 7b 72 69 67 68 74 3a 31 70 78 3b 74 6f 70 3a 31 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 61 72 63 68 42 6f 78 49 63 6f 6e 2d 72 74 6c 7b 74 6f 70 3a 31 70 78 3b 72 69 67 68 74 3a 39 39 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 61 72 63 68 42 6f 78 49 63 6f 6e 2d 72 74 6c 2d Data Ascii: minScoped .searchBoxInput::-ms-clear{display:none}.adminScoped .searchBoxButton{min-width:30px!important;display:inline-block}.adminScoped .searchBoxIcon{right:1px;top:1px}.adminScoped .searchBoxIcon-rtl{top:1px;right:99px}.adminScoped .searchBoxIcon-rtl-
2023-08-10 21:19:30 UTC	8916	IN	Data Raw: 68 74 3a 32 38 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 77 2d 6b 70 69 2d 69 63 6f 6e 73 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 38 70 78 3b 77 69 64 74 68 3a 39 39 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 77 2d 6b 70 69 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 39 39 25 3b 68 65 69 67 68 74 3a 33 35 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 77 2d 6b 70 69 2d 64 61 74 61 2d 62 61 73 65 7b 77 69 64 74 68 3a 39 39 25 3b 68 65 69 67 68 74 3a 35 33 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 77 2d 6b 70 69 2d 64 61 74 61 7b 77 69 64 74 68 3a 39 39 25 3b 68 65 69 67 68 74 3a 35 33 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 30 70 78 7d 2e 61 64 6d 69 6e 53 Data Ascii: ht:28px}.adminScoped .rw-kpi-icons{padding-top:28px;width:99%}.adminScoped .rw-kpi-title{width:99%;height:35%;display:inline-block}.adminScoped .rw-kpi-data-base{width:99%;height:53%}.adminScoped .rw-kpi-data{width:99%;height:53%;padding-left:40px}.adminS
2023-08-10 21:19:30 UTC	8932	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 65 33 66 35 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 65 70 6f 72 74 2d 6d 65 6e 75 2d 72 74 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 65 33 66 35 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 65 70 6f 72 74 2d 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 65 70 6f 72 74 2d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 72 65 70 6f 72 74 6c 69 73 74 41 63 74 69 6f 6e 73 7b 77 69 64 74 68 3a 32 36 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 Data Ascii: ckground-color:#cce3f5}.adminScoped .report-menu-rtl{background-color:#cce3f5}.adminScoped .report-a{color:#fff!important;text-decoration:none}.adminScoped .report-a:hover{color:#fff!important}.adminScoped .reportlistActions{width:260px;background-color:#
2023-08-10 21:19:30 UTC	8948	IN	Data Raw: 2e 65 6d 61 69 6c 4d 69 67 72 61 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 2e 68 65 61 64 65 72 20 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 65 6d 61 69 6c 4d 69 67 72 61 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 2e 68 65 61 64 65 72 20 68 35 42 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 65 6d 61 69 6c 4d 69 67 72 61 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 2e 68 65 61 64 65 72 20 68 35 49 6e 6c 69 6e 65 7b 66 6f 6e 74 2d 77 65 69 Data Ascii: .emailMigrationContainer .header h4{font-weight:normal;font-size:18px;padding-top:32px;padding-bottom:20px}.adminScoped .emailMigrationContainer .header h5Bold{font-weight:bold;font-size:15px}.adminScoped .emailMigrationContainer .header h5Inline{font-wei
2023-08-10 21:19:30 UTC	8964	IN	Data Raw: 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 63 2d 66 62 2d 70 64 67 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 74 74 6f 6d 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 39 66 39 66 39 3b 77 69 64 74 68 3a 38 34 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 30 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 63 2d 66 62 2d 62 74 6e 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 Data Ascii: minScoped .mc-fb-pdg{position:fixed!important;bottom:0;background-color:#f9f9f9;width:840px;min-height:60px;cursor:pointer;padding-left:20px;padding-right:40px}.adminScoped .mc-fb-btn{min-height:32px;padding-left:20px;padding-right:12px;background-color:#
2023-08-10 21:19:30 UTC	8980	IN	Data Raw: 2e 69 63 6f 6e 7b 77 69 64 74 68 3a 32 39 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 6d 61 72 67 69 6e 3a 32 30 70 78 20 30 20 32 30 70 78 20 33 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 65 76 69 63 65 73 73 65 74 75 70 20 2e 69 74 65 6d 66 6f 6e 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 65 76 69 63 65 73 73 65 74 75 70 20 2e 72 61 64 69 6f 6c 61 79 6f 75 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 64 65 76 69 63 65 73 73 65 74 75 70 20 2e 72 65 73 74 6f 72 65 73 65 74 74 69 6e 67 73 62 74 6e 7b 6d 61 78 2d 68 65 69 67 Data Ascii: .icon{width:29px;height:30px;margin:20px 0 20px 30px}.adminScoped .devicessetup .itemfont{font-weight:400;font-size:14px;line-height:20px}.adminScoped .devicessetup .radiolayout{float:left;clear:none}.adminScoped .devicessetup .restoresettingsbtn{max-heig
2023-08-10 21:19:30 UTC	8996	IN	Data Raw: 73 2d 62 75 74 74 6f 6e 64 69 76 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 69 6e 64 75 73 2d 66 6f 72 6d 2d 77 64 68 7b 77 69 64 74 68 3a 36 32 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 69 6e 64 75 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 65 6c 6c 2d 6c 61 62 65 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 70 61 64 64 Data Ascii: s-buttondiv{background-color:#fff;display:inline-block;margin-top:40px}.adminScoped .findus-form-wdh{width:620px}.adminScoped .findus-container .row-container .cell-label-container{display:inline-block;width:180px;padding-top:16px;padding-bottom:12px;padd
2023-08-10 21:19:30 UTC	9012	IN	Data Raw: 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 Data Ascii: ;text-align:cent
2023-08-10 21:19:30 UTC	9012	IN	Data Raw: 65 72 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 6f 74 61 31 31 79 2d 69 6e 66 6f 2d 74 61 62 2d 61 6e 63 68 6f 72 2d 74 65 78 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 6f 74 61 31 31 79 2d 69 6e 66 6f 2d 74 61 62 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 6f 74 61 31 31 79 2d 69 6e 66 6f 2d 74 61 62 2e 61 63 74 69 76 65 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 6f 74 61 31 31 79 2d 69 6e 66 6f 2d 74 61 62 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 74 6f 74 61 31 31 79 2d 69 6e 66 6f Data Ascii: er}.adminScoped .tota11y-info-tab-anchor-text{line-height:30px}.adminScoped .tota11y-info-tab:hover{background-color:#555}.adminScoped .tota11y-info-tab.active,.adminScoped .tota11y-info-tab.active:hover{background-color:#f2f2f2}.adminScoped .tota11y-info
2023-08-10 21:19:30 UTC	9028	IN	Data Raw: 64 6d 69 6e 53 63 6f 70 65 64 20 62 6f 64 79 3e 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2e 6f 70 65 6e 7b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 75 69 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 61 69 6e 65 72 5b 74 68 65 6d 65 3d 22 73 65 6c 65 63 74 32 22 5d 2e 64 69 72 65 63 74 69 6f 6e 2d 75 70 20 2e 75 69 2d 73 65 6c 65 63 74 2d 6d 61 74 63 68 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 75 69 2d 73 65 6c 65 63 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 73 65 6c 65 63 74 32 2e 64 69 72 65 63 74 69 6f 6e 2d 75 70 20 2e 75 69 2d 73 65 6c 65 63 74 2d 6d 61 74 63 68 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 Data Ascii: dminScoped body>.select2-container.open{z-index:9999}.adminScoped .ui-select-container[theme="select2"].direction-up .ui-select-match,.adminScoped .ui-select-container.select2.direction-up .ui-select-match{border-radius:4px;border-top-left-radius:0;border
2023-08-10 21:19:30 UTC	9044	IN	Data Raw: 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 44 61 72 6b 2d 2d 68 6f 76 65 72 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 31 32 31 32 31 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 50 72 69 6d 61 72 79 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 50 72 69 6d 61 72 79 2d 68 6f 76 65 72 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 2d 6e 65 75 74 72 61 6c 50 Data Ascii: minScoped .fabric0103-ms-borderColor-neutralDark--hover:hover{border-color:#212121}.adminScoped .fabric0103-ms-border-color-neutralPrimary,.adminScoped .fabric0103-ms-border-color-neutralPrimary-hover:hover,.adminScoped .fabric0103-ms-borderColor-neutralP
2023-08-10 21:19:30 UTC	9060	IN	Data Raw: 6e 74 61 44 61 72 6b 2d 2d 68 6f 76 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 35 63 30 30 35 63 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 63 6f 6c 6f 72 2d 6d 61 67 65 6e 74 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 63 6f 6c 6f 72 2d 6d 61 67 65 6e 74 61 2d 68 6f 76 65 72 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 43 6f 6c 6f 72 2d 6d 61 67 65 6e 74 61 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 43 6f 6c 6f 72 2d 6d 61 67 65 6e 74 61 2d 2d 68 6f 76 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 62 34 Data Ascii: ntaDark--hover:hover{color:#5c005c}.adminScoped .fabric0103-ms-font-color-magenta,.adminScoped .fabric0103-ms-font-color-magenta-hover:hover,.adminScoped .fabric0103-ms-fontColor-magenta,.adminScoped .fabric0103-ms-fontColor-magenta--hover:hover{color:#b4
2023-08-10 21:19:30 UTC	9076	IN	Data Raw: 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 53 65 67 6f 65 55 49 2d 57 65 73 74 45 75 72 6f 70 65 61 6e 2f 53 65 67 6f 65 55 49 2d 53 65 6d 69 6c 69 67 68 74 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 53 65 67 6f 65 55 49 2d 57 65 73 74 45 75 72 6f 70 65 61 6e 2f 53 65 67 6f 65 55 49 2d 53 65 6d 69 6c 69 67 68 74 2e 73 76 67 23 53 65 67 6f 65 55 49 2d 53 65 6d 69 6c 69 67 68 74 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 6a 61 2d 4a 50 22 5d 20 2e 66 Data Ascii: ') format('woff'),url('../fonts/SegoeUI-WestEuropean/SegoeUI-Semilight.ttf') format('truetype'),url('../fonts/SegoeUI-WestEuropean/SegoeUI-Semilight.svg#SegoeUI-Semilight') format('svg');font-weight:normal;font-style:normal}.adminScoped *[lang="ja-JP"] .f
2023-08-10 21:19:30 UTC	9092	IN	Data Raw: 68 74 27 2c 27 53 65 67 6f 65 20 55 49 27 2c 27 53 65 67 6f 65 20 57 50 27 2c 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 68 72 2d 48 52 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 6c 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 68 72 2d 48 52 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 73 75 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 68 72 2d 48 52 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 73 65 6d 69 6c 69 67 68 74 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 68 72 2d 48 52 22 5d 20 2e 66 61 62 72 69 63 Data Ascii: ht','Segoe UI','Segoe WP',Tahoma,Arial,sans-serif}.adminScoped [lang="hr-HR"] .fabric0103-ms-font-l,.adminScoped [lang="hr-HR"] .fabric0103-ms-font-su,.adminScoped [lang="hr-HR"] .fabric0103-ms-font-weight-semilight,.adminScoped [lang="hr-HR"] .fabric
2023-08-10 21:19:30 UTC	9108	IN	Data Raw: 65 67 6f 65 20 57 50 27 2c 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 76 69 2d 56 4e 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 6d 69 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 76 69 2d 56 4e 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 73 65 6d 69 62 6f 6c 64 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 5b 6c 61 6e 67 3d 22 76 69 2d 56 4e 22 5d 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 66 6f 6e 74 2d 77 65 69 67 68 74 2d 73 65 6d 69 62 6f 6c 64 2d 68 6f 76 65 72 3a 68 6f 76 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 20 55 49 20 53 65 6d 69 62 6f Data Ascii: egoe WP',Tahoma,Arial,sans-serif}.adminScoped [lang="vi-VN"] .fabric0103-ms-font-mi,.adminScoped [lang="vi-VN"] .fabric0103-ms-font-weight-semibold,.adminScoped *[lang="vi-VN"] .fabric0103-ms-font-weight-semibold-hover:hover{font-family:'Segoe UI Semibo
2023-08-10 21:19:30 UTC	9124	IN	Data Raw: 2e 66 61 64 65 4f 75 74 32 30 30 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 64 65 4f 75 74 34 30 30 2c 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 64 65 4f 75 74 35 30 30 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 36 37 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 4f 75 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 36 37 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 33 36 37 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 4f 75 74 3b 61 6e 69 6d 61 74 69 Data Ascii: .fadeOut200,.adminScoped .fadeOut400,.adminScoped .fadeOut500{-webkit-animation-duration:.367s;-webkit-animation-name:fadeOut;-webkit-animation-fill-mode:both;-webkit-animation-duration:.367s;animation-duration:.367s;-webkit-animation-name:fadeOut;animati
2023-08-10 21:19:30 UTC	9140	IN	Data Raw: 78 78 6c 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 32 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 75 2d 78 78 78 6c 50 75 6c 6c 31 32 7b 72 69 67 68 74 3a 31 30 30 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 75 2d 78 78 78 6c 50 75 6c 6c 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 75 2d 78 78 78 6c 50 75 6c 6c 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 34 25 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 66 61 62 72 69 63 30 31 30 33 2d 6d 73 2d 75 2d 78 78 78 6c 50 75 6c 6c 39 7b 72 Data Ascii: xxl1{width:8.333333333333332%}.adminScoped .fabric0103-ms-u-xxxlPull12{right:100%}.adminScoped .fabric0103-ms-u-xxxlPull11{right:91.66666666666666%}.adminScoped .fabric0103-ms-u-xxxlPull10{right:83.33333333333334%}.adminScoped .fabric0103-ms-u-xxxlPull9{r
2023-08-10 21:19:30 UTC	9156	IN	Data Raw: 73 2d 49 63 6f 6e 2d 2d 73 74 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 80 83 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 80 84 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 80 85 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 71 75 65 73 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 80 86 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 80 87 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 Data Ascii: s-Icon--star:before{content:''}.adminScoped .ms-Icon--plus:before{content:''}.adminScoped .ms-Icon--minus:before{content:''}.adminScoped .ms-Icon--question:before{content:''}.adminScoped .ms-Icon--exclamation:before{content:''}.adminScoped
2023-08-10 21:19:30 UTC	9172	IN	Data Raw: 6d 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 88 ba 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 61 6c 65 72 74 4f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 88 bb 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 64 6f 63 75 6d 65 6e 74 4c 61 6e 64 73 63 61 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 88 bc 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 64 6f 63 75 6d 65 6e 74 41 64 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 88 bd 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 2d 74 6f 67 67 6c 65 4d 69 64 64 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 88 be 27 Data Ascii: my:before{content:''}.adminScoped .ms-Icon--alertOutline:before{content:''}.adminScoped .ms-Icon--documentLandscape:before{content:''}.adminScoped .ms-Icon--documentAdd:before{content:''}.adminScoped .ms-Icon--toggleMiddle:before{content:''
2023-08-10 21:19:30 UTC	9188	IN	Data Raw: 84 90 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 46 6f 72 77 61 72 64 4c 65 67 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 91 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 42 61 63 6b 4c 65 67 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 92 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 46 61 76 6f 72 69 74 65 4c 65 67 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 84 93 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 43 61 6d 65 72 61 4c 65 67 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: "}.adminScoped .segoe-mdl2-icon--ForwardLegacy:before{content:""}.adminScoped .segoe-mdl2-icon--BackLegacy:before{content:""}.adminScoped .segoe-mdl2-icon--FavoriteLegacy:before{content:""}.adminScoped .segoe-mdl2-icon--CameraLegacy:before{cont
2023-08-10 21:19:30 UTC	9205	IN	Data Raw: 22 ee 9c 86 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 4d 61 70 50 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 9c 87 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 51 75 69 65 74 48 6f 75 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 9c 88 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 41 69 72 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 9c 89 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 54 61 62 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 9c 8a 22 7d 2e 61 64 6d 69 6e 53 Data Ascii: ""}.adminScoped .segoe-mdl2-icon--MapPin:before{content:""}.adminScoped .segoe-mdl2-icon--QuietHours:before{content:""}.adminScoped .segoe-mdl2-icon--Airplane:before{content:""}.adminScoped .segoe-mdl2-icon--Tablet:before{content:""}.adminS
2023-08-10 21:19:30 UTC	9221	IN	Data Raw: 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 52 65 76 65 61 6c 50 61 73 73 77 6f 72 64 4c 65 67 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 81 92 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 55 53 42 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a2 8e 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 56 69 65 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a2 90 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 50 72 65 76 69 6f 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a2 92 22 7d 2e 61 64 6d 69 6e 53 63 Data Ascii: .adminScoped .segoe-mdl2-icon--RevealPasswordLegacy:before{content:""}.adminScoped .segoe-mdl2-icon--USB:before{content:""}.adminScoped .segoe-mdl2-icon--View:before{content:""}.adminScoped .segoe-mdl2-icon--Previous:before{content:""}.adminSc
2023-08-10 21:19:30 UTC	9237	IN	Data Raw: 74 3a 22 ee a1 81 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 50 69 6e 6e 65 64 46 69 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a1 82 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 42 61 74 74 65 72 79 55 6e 6b 6e 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 96 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 57 69 66 69 41 74 74 65 6e 74 69 6f 6e 4f 76 65 72 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 98 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 50 61 73 73 77 6f 72 64 4b 65 79 53 68 Data Ascii: t:""}.adminScoped .segoe-mdl2-icon--PinnedFill:before{content:""}.adminScoped .segoe-mdl2-icon--BatteryUnknown:before{content:""}.adminScoped .segoe-mdl2-icon--WifiAttentionOverlay:before{content:""}.adminScoped .segoe-mdl2-icon--PasswordKeySh
2023-08-10 21:19:30 UTC	9253	IN	Data Raw: 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee b0 8b 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 54 6f 67 67 6c 65 46 69 6c 6c 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee b0 91 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 54 6f 67 67 6c 65 42 6f 72 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee b0 92 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 53 6c 69 64 65 72 54 68 75 6d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee b0 93 22 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 73 65 67 6f 65 2d 6d 64 6c 32 2d 69 63 6f 6e 2d 2d 54 6f 67 67 6c 65 54 Data Ascii: y:before{content:""}.adminScoped .segoe-mdl2-icon--ToggleFilled:before{content:""}.adminScoped .segoe-mdl2-icon--ToggleBorder:before{content:""}.adminScoped .segoe-mdl2-icon--SliderThumb:before{content:""}.adminScoped .segoe-mdl2-icon--ToggleT
2023-08-10 21:19:30 UTC	9269	IN	Data Raw: 77 72 61 70 70 65 72 20 69 6e 70 75 74 3a 63 68 Data Ascii: wrapper input:ch
2023-08-10 21:19:30 UTC	9269	IN	Data Raw: 65 63 6b 65 64 7e 2e 63 68 65 63 6b 62 6f 78 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 38 64 37 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 68 6b 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 68 65 63 6b 62 6f 78 6d 61 72 6b 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 63 68 6b 2d 77 72 61 70 70 65 72 20 2e 63 68 65 63 6b 62 6f 78 6d 61 72 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 31 37 70 78 3b 77 69 64 74 68 3a 31 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 62 6f 72 64 65 72 3a 31 Data Ascii: ecked~.checkboxmark{background-color:#0078d7;border:none}.adminScoped .chk-wrapper input:checked~.checkboxmark:after{display:block}.adminScoped .chk-wrapper .checkboxmark{position:absolute;top:0;left:0;height:17px;width:17px;background-color:#eee;border:1
2023-08-10 21:19:30 UTC	9285	IN	Data Raw: 74 65 70 73 2d 34 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 2f 34 29 7d 2e 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2e 73 74 65 70 73 2d 35 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 2f 35 29 7d 2e 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2e 73 74 65 70 73 2d 36 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 2f 36 29 7d 2e 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2e 73 74 65 70 73 2d 37 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 2f 37 29 7d 2e 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2e 73 74 65 70 73 2d 38 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 2f 38 29 7d 2e 73 74 65 70 73 2d 69 6e 64 69 63 61 74 6f 72 2e 73 74 65 70 73 2d 39 20 6c 69 7b 77 69 64 74 68 3a 63 61 6c 63 Data Ascii: teps-4 li{width:calc(100%/4)}.steps-indicator.steps-5 li{width:calc(100%/5)}.steps-indicator.steps-6 li{width:calc(100%/6)}.steps-indicator.steps-7 li{width:calc(100%/7)}.steps-indicator.steps-8 li{width:calc(100%/8)}.steps-indicator.steps-9 li{width:calc
2023-08-10 21:19:30 UTC	9301	IN	Data Raw: 37 70 78 7d 2e 63 6f 6c 6f 72 70 69 63 6b 65 72 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 3a 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 3a 37 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 6f 70 3a 2d 36 70 78 3b 6c 65 66 74 3a 36 70 78 7d 2e 63 6f 6c 6f 72 70 69 63 6b 65 72 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 32 39 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 63 6f 6c 6f 72 70 69 63 6b 65 72 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 3a 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 36 70 78 20 73 6f 6c 69 64 20 23 Data Ascii: 7px}.colorpicker .dropdown-menu::before{border:7px solid transparent;top:-6px;left:6px}.colorpicker .dropdown-menu{position:static;top:0;left:0;min-width:129px;padding:4px;margin-top:0}.colorpicker-position-top .dropdown-menu::after{border-top:6px solid #
2023-08-10 21:19:30 UTC	9318	IN	Data Raw: 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 46 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 9f 81 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 53 77 69 74 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a2 ab 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 55 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a2 98 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 53 74 61 74 75 73 45 72 72 6f 72 46 75 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee ae 90 27 7d 2e 61 64 6d 69 6e 53 Data Ascii: coped .ms-Icon-FabricMDL2--Flag:before{content:''}.adminScoped .ms-Icon-FabricMDL2--Switch:before{content:''}.adminScoped .ms-Icon-FabricMDL2--Upload:before{content:''}.adminScoped .ms-Icon-FabricMDL2--StatusErrorFull:before{content:''}.adminS
2023-08-10 21:19:30 UTC	9334	IN	Data Raw: 2d 2d 50 65 72 6d 69 73 73 69 6f 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a3 97 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 50 72 6f 74 65 63 74 65 64 44 6f 63 75 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a2 a6 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 54 6f 44 6f 4c 6f 67 6f 4f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ef 9d 9b 27 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2e 6d 73 2d 49 63 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 4f 75 74 6c 6f 6f 6b 4c 6f 67 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ef 87 a9 27 7d 2e 61 64 6d 69 6e 53 63 6f Data Ascii: --Permissions:before{content:''}.adminScoped .ms-Icon-FabricMDL2--ProtectedDocument:before{content:''}.adminScoped .ms-Icon-FabricMDL2--ToDoLogoOutline:before{content:''}.adminScoped .ms-Icon-FabricMDL2--OutlookLogo:before{content:''}.adminSco

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
227	192.168.2.3	50079	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:30 UTC	8038	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/o365themedefault.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:30 UTC	8076	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 138767 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Thu, 10 Aug 2023 21:19:30 GMT Last-Modified: Tue, 08 Aug 2023 04:22:01 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=746963701863813216117250906228848715954"}],"include_subdomains ":true} Server: ECAcc (muc/331A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f3223327-601e-0065-5f8d-ca6485000000 Content-Length: 7600 Connection: close
2023-08-10 21:19:30 UTC	8077	IN	Data Raw: 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 69 6e 70 75 74 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 74 65 78 74 61 72 65 61 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 73 65 6c 65 63 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 36 36 7d 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 68 31 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 68 33 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 68 34 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 68 35 2c 2e 6f 33 36 35 2d 74 68 65 6d 65 2d 62 61 73 65 20 68 36 7b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 6f 33 Data Ascii: .o365-theme-base,.o365-theme-base input,.o365-theme-base textarea,.o365-theme-base select{background-color:#fff;color:#333;border-color:#666}.o365-theme-base h1,.o365-theme-base h3,.o365-theme-base h4,.o365-theme-base h5,.o365-theme-base h6{color:#333}.o3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
228	192.168.2.3	50078	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:30 UTC	9204	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/masterstyles15.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:30 UTC	9355	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166118 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Thu, 10 Aug 2023 21:19:30 GMT Last-Modified: Tue, 08 Aug 2023 04:19:22 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=964955780773194817311579122095670861111"}],"include_subdomains ":true} Server: ECAcc (muc/331F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 7d23da22-f01e-003a-1f4d-cad0b9000000 Content-Length: 94157 Connection: close
2023-08-10 21:19:30 UTC	9356	IN	Data Raw: 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 2a 7b 6c 69 6e 65 2d 62 72 65 61 6b 3a 73 74 72 69 63 74 7d 2e 6f 31 35 74 61 62 6c 65 2c 2e 6f 31 35 74 61 62 6c 65 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 73 65 70 61 72 61 74 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 31 70 78 7d 2e 6f 31 35 74 61 62 6c 65 20 74 68 2c 2e 6f 31 35 74 61 62 6c 65 32 20 74 68 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 77 69 64 74 68 3a 32 35 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 7d 2e 6f 31 35 74 61 62 6c 65 20 74 68 2c 2e 6f 31 35 74 61 62 6c 65 20 74 64 7b 70 61 64 64 69 6e 67 3a 35 70 78 Data Ascii: .adminScoped *{line-break:strict}.o15table,.o15table2{width:100%;margin-bottom:30px;border-collapse:separate;border-spacing:1px}.o15table th,.o15table2 th{font-weight:normal;white-space:nowrap;width:25%;font-size:11px}.o15table th,.o15table td{padding:5px
2023-08-10 21:19:30 UTC	9372	IN	Data Raw: 73 Data Ascii: s
2023-08-10 21:19:30 UTC	9372	IN	Data Raw: 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 50 72 6f 70 65 72 74 79 53 68 65 65 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 50 72 6f 70 65 72 74 79 53 68 65 65 74 20 61 2e 48 65 61 64 65 72 2c 2e 50 72 6f 70 65 72 74 79 53 68 65 65 74 20 61 2e 48 65 61 64 65 72 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 50 72 6f 70 65 72 74 79 53 68 65 65 74 20 73 70 61 6e 2e 41 72 72 6f 77 2c 2e 50 72 6f 70 65 72 74 79 53 68 65 65 74 20 61 2e 41 72 72 6f 77 3a 68 6f 76 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 50 72 Data Ascii: play:inline-block}.PropertySheet{display:inline-block}.PropertySheet a.Header,.PropertySheet a.Header:hover{text-decoration:none;cursor:pointer}.PropertySheet span.Arrow,.PropertySheet a.Arrow:hover{margin-left:10px;text-decoration:none;cursor:pointer}.Pr
2023-08-10 21:19:30 UTC	9388	IN	Data Raw: 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d 63 6f 6e 74 65 6e 74 2f 73 68 65 6c 6c 2f 69 6d 61 67 65 73 2f 68 65 61 64 65 72 5f 62 61 72 5f 6f 72 61 6e 67 65 5f 31 30 5f 33 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 7d 2e 53 68 65 6c 6c 2d 53 69 67 6e 75 70 43 75 73 74 6f 6d 20 2e 53 68 65 6c 6c 2d 48 65 61 64 65 72 7b 68 65 69 67 68 74 3a 37 32 70 78 7d 2e 53 68 65 6c 6c 2d 53 69 67 6e 75 70 4d 4f 53 20 2e 53 68 65 6c 6c 2d 48 65 61 64 65 72 7b 68 65 Data Ascii: x;background-color:#fff;background-image:url(https://res-h3.public.cdn.office.net/admincenter/admin-content/shell/images/header_bar_orange_10_3.gif);background-repeat:repeat-x}.Shell-SignupCustom .Shell-Header{height:72px}.Shell-SignupMOS .Shell-Header{he
2023-08-10 21:19:30 UTC	9404	IN	Data Raw: 48 32 7a 77 70 57 61 52 73 62 70 74 5a 74 44 56 76 42 79 51 68 49 4c 53 43 2b 35 56 56 5a 4c 68 45 6f 79 6c 74 57 78 33 30 59 34 72 71 59 6f 49 6c 69 6a 31 6d 56 77 67 56 50 65 4c 55 4b 5a 4b 58 67 77 56 47 34 6d 4e 50 6e 41 51 2b 61 44 4b 56 4c 67 45 6d 4e 55 71 2b 72 49 75 73 63 35 6f 50 56 33 58 6b 78 44 75 50 68 58 30 69 56 6c 64 34 38 44 70 36 6d 38 49 64 45 42 52 66 41 47 56 37 52 78 67 69 48 43 78 39 47 47 46 69 42 4d 78 4a 47 47 2b 72 32 39 54 42 51 45 63 34 2b 35 4d 50 33 4f 48 70 6e 59 47 56 52 55 49 63 6b 55 6c 56 35 59 77 51 42 6c 37 33 67 61 59 41 50 57 6f 31 6c 57 31 41 62 61 34 51 75 43 2b 34 71 66 62 4c 77 66 57 59 38 49 6b 76 5a 4f 4e 42 76 75 46 4d 78 4d 4c 31 55 4d 58 73 4a 6d 52 76 55 57 7a 63 45 6b 2f 6c 2b 4f 36 44 61 5a 45 52 55 56 Data Ascii: H2zwpWaRsbptZtDVvByQhILSC+5VVZLhEoyltWx30Y4rqYoIlij1mVwgVPeLUKZKXgwVG4mNPnAQ+aDKVLgEmNUq+rIusc5oPV3XkxDuPhX0iVld48Dp6m8IdEBRfAGV7RxgiHCx9GGFiBMxJGG+r29TBQEc4+5MP3OHpnYGVRUIckUlV5YwQBl73gaYAPWo1lW1Aba4QuC+4qfbLwfWY8IkvZONBvuFMxML1UMXsJmRvUWzcEk/l+O6DaZERUV
2023-08-10 21:19:30 UTC	9420	IN	Data Raw: 65 6d 3b 68 65 69 67 68 74 3a 31 2e 32 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 37 65 6d 3b 62 6f 72 64 65 72 3a 2e 31 32 65 6d 20 73 6f 6c 69 64 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 65 6d 7d 2e 73 6f 6c 69 64 43 69 72 63 6c 65 49 63 6f 6e 7b 62 6f 72 64 65 72 3a 2e 31 32 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 62 61 63 6b 49 63 6f 6e 42 75 74 74 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 62 6f 78 45 72 72 6f 72 43 72 6f 73 73 53 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 2e 62 6f 78 45 72 72 6f Data Ascii: em;height:1.2em;border-radius:.7em;border:.12em solid;text-align:center;box-sizing:border-box;line-height:1.1em}.solidCircleIcon{border:.12em solid transparent}.backIconButton{font-size:18px;text-decoration:none}.boxErrorCrossSmall{font-size:16px}.boxErro
2023-08-10 21:19:30 UTC	9436	IN	Data Raw: 3b 6c 65 74 Data Ascii: ;let
2023-08-10 21:19:30 UTC	9436	IN	Data Raw: 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 31 70 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 30 20 31 33 70 78 20 30 20 31 33 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 69 76 2e 4e 61 76 44 61 74 61 3e 75 6c 3e 6c 69 2e 54 6f 70 4e 61 76 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 65 67 6f 65 55 49 2d 4c 69 67 68 74 2d 66 69 6e 61 6c 2c 22 53 65 67 6f 65 20 55 49 20 4c 69 67 68 74 22 2c 22 53 65 67 6f 65 20 55 49 22 2c 53 65 67 6f 65 2c 54 61 68 6f 6d 61 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 53 61 6e 73 2d 53 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6c 65 74 74 65 72 2d 73 70 Data Ascii: ter-spacing:.02em;line-height:11pt;display:block;padding:0 13px 0 13px;margin-bottom:0}div.NavData>ul>li.TopNav{font-family:SegoeUI-Light-final,"Segoe UI Light","Segoe UI",Segoe,Tahoma,Helvetica,Arial,Sans-Serif;font-size:15px;line-height:normal;letter-sp

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
229	192.168.2.3	50083	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:30 UTC	9317	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/masterstyles15mvc.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:30 UTC	9338	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166117 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Thu, 10 Aug 2023 21:19:30 GMT Last-Modified: Tue, 08 Aug 2023 04:19:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=148142456177439976841393457054386594052"}],"include_subdomains ":true} Server: ECAcc (muc/3324) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 9b525339-d01e-0002-294d-ca7479000000 Content-Length: 15820 Connection: close
2023-08-10 21:19:30 UTC	9339	IN	Data Raw: 2e 70 6c 2d 73 68 65 6c 6c 2d 66 6f 6f 74 65 72 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 6c 2d 70 61 64 64 69 6e 67 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 76 63 2d 76 61 6c 69 64 61 74 6f 72 3e 2e 66 69 65 6c 64 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 65 64 7d 2e 61 64 6d 69 6e 53 63 6f 70 65 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d Data Ascii: .pl-shell-footer-hide{display:none}.pl-padding-hide{display:none}.mvc-validator>.field-validation-error{border:1px solid red}.adminScoped input[type=submit]{min-width:100px;display:inline-block;margin-right:10px;margin-left:0;margin-top:5px;text-transform

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.3	49767	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:56 UTC	1423	OUT	GET /static/webpack/production/paper_binder~paper_bundle~paper_cloud_docs~paper_pifs~paper_view_only.fe9af606aefd018129cf886d5e3f19606dbbddff.mvKRac08CsxdXTXpXg6mjQCKhxzd2p4syHrGl6RwLsM.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:57 UTC	1567	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 237 Connection: close Date: Thu, 10 Aug 2023 21:18:58 GMT Last-Modified: Thu, 10 Aug 2023 03:28:19 GMT ETag: "d33183f5951a184661a5749dac3c4417" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8f2341b304c32ec6530aa5361edb2fe4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: gXbF5vXyIM621wHCtXzukJFv1Ky1a8l67iUpCpywextzUVw0TiJbJg==
2023-08-10 21:18:57 UTC	1568	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 3d 8e 4d 4e c3 30 10 85 f7 3d 05 12 bb 4a 4d ed 22 a2 34 11 37 28 1b 24 d6 d6 c4 33 13 ac 26 1e cb 76 a0 50 95 b3 63 68 ca 6a de fb e6 e7 4d 65 1c 47 98 c8 68 d8 e1 60 f4 b9 07 7b 1c a2 cc 1e 37 56 46 89 6d 8e e0 53 80 48 3e 77 bd 44 a4 d8 7a f1 54 74 ce 32 b5 aa 0b 92 5c 76 e2 5b 76 27 c2 2e ba e1 2d 17 fc b5 71 1e e9 d4 6a a5 d4 a5 32 d7 f1 03 71 be 45 a9 f3 ff 89 b1 e0 52 ae ab 30 67 e9 b2 84 3f 71 59 ad b6 eb fb bb 24 73 b4 f4 0c 21 38 3f bc be 1c 9e 02 04 8a a6 ff 8d 88 df 8b 29 3f 8f b4 18 3b ca 8c 06 c5 a6 05 04 c7 37 f9 ee e8 c3 88 1f 3f 2b a6 3d 70 ad 6a 20 46 a5 1b bd db 5b 6e 9a 1a 1f e9 81 f5 be 34 b0 ef 11 99 2b 9b 52 35 41 58 6f 7f 00 92 e3 4f 96 30 01 00 00 Data Ascii: =MN0=JM"47($3&vPchjMeGh`{7VFmSH>wDzTt2\v[v'.-qj2qER0g?qY$s!8?)?;7?+=pj F[n4+R5AXoO0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
230	192.168.2.3	50081	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:30 UTC	9318	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/website.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:31 UTC	9448	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:30 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=138116419291377780755790176499825486432"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 8e32570f-a01e-006a-03d0-cb12e9000000 Content-Length: 215 Connection: close
2023-08-10 21:19:31 UTC	9449	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 38 65 33 32 35 37 30 66 2d 61 30 31 65 2d 30 30 36 61 2d 30 33 64 30 2d 63 62 31 32 65 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 31 2e 30 39 33 38 36 33 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:8e32570f-a01e-006a-03d0-cb12e9000000Time:2023-08-10T21:19:31.0938632Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
231	192.168.2.3	50085	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:31 UTC	9449	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/home.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:32 UTC	9475	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=8844846637645853124651678743110479962"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: fabeadc5-001e-0001-36d0-cb951d000000 Content-Length: 215 Connection: close
2023-08-10 21:19:32 UTC	9476	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 66 61 62 65 61 64 63 35 2d 30 30 31 65 2d 30 30 30 31 2d 33 36 64 30 2d 63 62 39 35 31 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 31 2e 39 38 31 38 36 38 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:fabeadc5-001e-0001-36d0-cb951d000000Time:2023-08-10T21:19:31.9818686Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
232	192.168.2.3	50084	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:31 UTC	9450	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/home15.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:32 UTC	9476	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1073183190595414187016115303608883815928"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 7146e09d-201e-0074-4fd0-cbfe31000000 Content-Length: 215 Connection: close
2023-08-10 21:19:32 UTC	9477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 31 34 36 65 30 39 64 2d 32 30 31 65 2d 30 30 37 34 2d 34 66 64 30 2d 63 62 66 65 33 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 32 2e 30 30 34 30 38 39 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:7146e09d-201e-0074-4fd0-cbfe31000000Time:2023-08-10T21:19:32.0040895Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
233	192.168.2.3	50089	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:31 UTC	9450	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/conciergehelper.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:32 UTC	9479	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=521132516687843653110246739009024993459"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 0f8453d6-001e-0073-6cd0-cb9252000000 Content-Length: 215 Connection: close
2023-08-10 21:19:32 UTC	9480	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 66 38 34 35 33 64 36 2d 30 30 31 65 2d 30 30 37 33 2d 36 63 64 30 2d 63 62 39 32 35 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 32 2e 30 37 38 30 33 35 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:0f8453d6-001e-0073-6cd0-cb9252000000Time:2023-08-10T21:19:32.0780357Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
234	192.168.2.3	50088	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:31 UTC	9451	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/assistancepanel.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:32 UTC	9477	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=64637422381778474233796629864711260288"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: fdb1b657-601e-0038-13d0-cb6e01000000 Content-Length: 215 Connection: close
2023-08-10 21:19:32 UTC	9478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 66 64 62 31 62 36 35 37 2d 36 30 31 65 2d 30 30 33 38 2d 31 33 64 30 2d 63 62 36 65 30 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 32 2e 30 35 39 38 30 34 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:fdb1b657-601e-0038-13d0-cb6e01000000Time:2023-08-10T21:19:32.0598044Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
235	192.168.2.3	50087	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:31 UTC	9451	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/content/css/signup16.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:31 UTC	9453	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 138493 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: text/css Date: Thu, 10 Aug 2023 21:19:31 GMT Last-Modified: Tue, 08 Aug 2023 04:24:56 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1583987915518510476577708587162095936"}],"include_subdomains ":true} Server: ECAcc (muc/3352) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 35bea591-c01e-0031-688d-ca2bd2000000 Content-Length: 21168 Connection: close
2023-08-10 21:19:31 UTC	9454	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 55 49 2d 53 65 6d 69 4c 69 67 68 74 2d 66 69 6e 61 6c 27 3b 73 72 63 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d 63 6f 6e 74 65 6e 74 2f 65 6e 2f 63 73 73 2f 77 65 62 66 6f 6e 74 73 2f 73 65 67 6f 65 75 69 2d 73 65 6d 69 6c 69 67 68 74 2d 66 69 6e 61 6c 2e 65 6f 74 27 29 3b 73 72 63 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d 63 6f 6e 74 65 6e 74 2f 65 6e 2f 63 73 73 2f 77 65 62 66 6f 6e 74 73 2f Data Ascii: @font-face{font-family:'SegoeUI-SemiLight-final';src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/segoeui-semilight-final.eot');src:url('https://res-h3.public.cdn.office.net/admincenter/admin-content/en/css/webfonts/
2023-08-10 21:19:31 UTC	9470	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 30 30 34 35 37 38 7d 75 6c 2c 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 7d 75 6c 2e 73 69 67 6e 75 70 69 6e 66 6f 6c 69 73 74 2c 2e 73 69 67 6e 75 70 69 6e 66 6f 6c 69 73 74 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 69 73 63 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 30 7d 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 Data Ascii: {color:#004578}ul,li{list-style-type:none;padding:0;margin:0}ul.signupinfolist,.signupinfolist li{list-style-type:disc;line-height:25px;margin-left:10px}p{margin:10px 0;padding:0}p:first-child{margin-top:0}p:last-child{margin-bottom:0}strong{font-family:'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
236	192.168.2.3	50086	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:31 UTC	9452	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/adoption.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:32 UTC	9480	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=96821445715436114053845050106091671734"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 92c02c44-001e-005c-11d0-cb9f99000000 Content-Length: 215 Connection: close
2023-08-10 21:19:32 UTC	9481	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 39 32 63 30 32 63 34 34 2d 30 30 31 65 2d 30 30 35 63 2d 31 31 64 30 2d 63 62 39 66 39 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 32 2e 30 37 34 31 32 30 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:92c02c44-001e-005c-11d0-cb9f99000000Time:2023-08-10T21:19:32.0741204Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
237	192.168.2.3	50090	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:31 UTC	9474	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/commonhealthdashboard.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:32 UTC	9481	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:31 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1268360308801597853012956371199160614890"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: fdb1b6d9-601e-0038-08d0-cb6e01000000 Content-Length: 215 Connection: close
2023-08-10 21:19:32 UTC	9482	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 66 64 62 31 62 36 64 39 2d 36 30 31 65 2d 30 30 33 38 2d 30 38 64 30 2d 63 62 36 65 30 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 32 2e 32 34 33 37 30 31 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:fdb1b6d9-601e-0038-08d0-cb6e01000000Time:2023-08-10T21:19:32.2437010Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
238	192.168.2.3	50093	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	9482	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/microsoftajaxcombined.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	9483	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166119 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:19:07 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1417540890541724617217018064756096418490"}],"include_subdomains ":true} Server: ECAcc (muc/330C) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 5458febe-a01e-0008-524d-cad0ce000000 Content-Length: 228581 Connection: close
2023-08-10 21:19:35 UTC	9484	IN	Data Raw: 76 61 72 20 24 67 65 74 2c 24 63 72 65 61 74 65 2c 24 61 64 64 48 61 6e 64 6c 65 72 2c 24 61 64 64 48 61 6e 64 6c 65 72 73 2c 24 63 6c 65 61 72 48 61 6e 64 6c 65 72 73 2c 24 63 6f 6d 6d 6f 6e 2c 43 6f 6d 6d 6f 6e 54 6f 6f 6c 6b 69 74 53 63 72 69 70 74 73 2c 24 41 41 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 76 74 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 75 28 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 66 21 3d 3d 68 29 74 68 72 6f 77 20 45 72 72 6f 72 2e 61 72 67 75 6d 65 6e 74 28 22 76 61 6c 75 65 22 2c 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 74 2e 52 65 73 2e 65 6e 75 6d 49 6e 76 61 6c 69 64 56 61 6c 75 65 2c 6e 2c 74 68 69 73 2e 5f 5f 74 79 70 65 4e 61 6d 65 29 29 3b 7d 76 61 Data Ascii: var $get,$create,$addHandler,$addHandlers,$clearHandlers,$common,CommonToolkitScripts,$AA;(function(n,t){function vt(){function ru(n,i){function l(n){if(typeof f!==h)throw Error.argument("value",String.format(t.Res.enumInvalidValue,n,this.__typeName));}va
2023-08-10 21:19:35 UTC	9500	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 5f 63 61 6e 63 65 6c 3d 6e 7d 7d 2c 64 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 22 53 79 73 2e 43 61 6e 63 65 6c 45 76 65 6e 74 41 72 67 73 22 2c 74 2e 45 76 65 6e 74 41 72 67 73 29 2c 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 2c 64 3d 74 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 66 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 2c 6e 2e 63 6f 6e 73 6f 6c 65 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 29 2c 6e 2e 6f 70 Data Ascii: unction(n){this._cancel=n}},d.registerClass("Sys.CancelEventArgs",t.EventArgs),Type.registerNamespace("Sys.UI"),d=t._Debug=function(){},d.prototype={_appendConsole:function(t){typeof Debug!==f&&Debug.writeln,n.console&&n.console.log&&n.console.log(t),n.op
2023-08-10 21:19:35 UTC	9516	IN	Data Raw: 75 6d Data Ascii: um
2023-08-10 21:19:35 UTC	9516	IN	Data Raw: 62 65 72 46 6f 72 6d 61 74 2c 61 3d 4e 75 6d 62 65 72 2e 5f 70 61 72 73 65 4e 75 6d 62 65 72 4e 65 67 61 74 69 76 65 50 61 74 74 65 72 6e 28 6e 2c 72 2c 72 2e 4e 75 6d 62 65 72 4e 65 67 61 74 69 76 65 50 61 74 74 65 72 6e 29 2c 68 3d 61 5b 30 5d 2c 6f 3d 61 5b 31 5d 3b 72 65 74 75 72 6e 20 68 3d 3d 3d 67 26 26 72 2e 4e 75 6d 62 65 72 4e 65 67 61 74 69 76 65 50 61 74 74 65 72 6e 21 3d 3d 31 26 26 28 61 3d 4e 75 6d 62 65 72 2e 5f 70 61 72 73 65 4e 75 6d 62 65 72 4e 65 67 61 74 69 76 65 50 61 74 74 65 72 6e 28 6e 2c 72 2c 31 29 2c 68 3d 61 5b 30 5d 2c 6f 3d 61 5b 31 5d 29 2c 68 3d 3d 3d 67 26 26 28 68 3d 77 74 29 2c 65 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 65 22 29 2c 65 3c 30 26 26 28 65 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 45 22 29 29 2c 65 3c 30 3f 28 66 3d Data Ascii: berFormat,a=Number._parseNumberNegativePattern(n,r,r.NumberNegativePattern),h=a[0],o=a[1];return h===g&&r.NumberNegativePattern!==1&&(a=Number._parseNumberNegativePattern(n,r,1),h=a[0],o=a[1]),h===g&&(h=wt),e=o.indexOf("e"),e<0&&(e=o.indexOf("E")),e<0?(f=
2023-08-10 21:19:35 UTC	9532	IN	Data Raw: 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 3a 30 29 29 3b 69 66 28 63 74 28 66 72 29 29 7b 74 72 79 7b 75 3d 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 7c 7c 69 2c 75 26 26 28 75 3d 75 2e 66 72 61 6d 65 42 6f 72 64 65 72 2c 63 3d 75 3d 3d 3d 22 30 22 7c 7c 75 3d 3d 3d 22 6e 6f 22 3f 32 3a 30 2c 65 2b 3d 63 2c 6f 2b 3d 63 29 7d 63 61 74 63 68 28 76 29 7b 7d 69 66 28 74 2e 42 72 6f 77 73 65 72 2e 76 65 72 73 69 6f 6e 3d 3d 3d 37 26 26 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 29 7b 76 61 72 20 6c 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 61 3d 6c 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 72 3d 28 61 2e 72 69 67 68 74 2d Data Ascii: body.scrollTop:0));if(ct(fr)){try{u=n.ownerDocument.parentWindow.frameElement\|\|i,u&&(u=u.frameBorder,c=u==="0"\|\|u==="no"?2:0,e+=c,o+=c)}catch(v){}if(t.Browser.version===7&&!document.documentMode){var l=document.body,a=l.getBoundingClientRect(),r=(a.right-
2023-08-10 21:19:35 UTC	9548	IN	Data Raw: 69 3d 6e 5b 74 5d 2c 74 3d 3d 3d 22 5f 5f 73 22 3f 72 3d 69 3a 75 2e 70 75 73 68 28 74 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 69 29 29 3b 72 65 74 75 72 6e 20 75 2e 6a 6f 69 6e 28 22 26 22 29 2b 28 72 3f 22 26 26 22 2b 72 3a 67 29 7d 2c 69 74 2e 5f 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 73 3d 74 68 69 73 2c 68 2c 6c 2c 63 2c 61 3b 73 2e 5f 65 6e 61 62 6c 65 48 69 73 74 6f 72 79 26 26 28 65 3d 65 7c 7c 67 2c 65 21 3d 3d 73 2e 5f 63 75 72 72 65 6e 74 45 6e 74 72 79 26 26 28 6e 2e 74 68 65 46 6f 72 6d 26 26 28 68 3d 6e 2e 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 2c 6c 3d 68 2e 69 6e 64 65 78 4f 66 28 79 29 2c 6e 2e 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 3d 28 6c 21 3d 3d 72 74 3f Data Ascii: i=n[t],t==="__s"?r=i:u.push(t+"="+encodeURIComponent(i));return u.join("&")+(r?"&&"+r:g)},it._setState=function(e,o){var s=this,h,l,c,a;s._enableHistory&&(e=e\|\|g,e!==s._currentEntry&&(n.theForm&&(h=n.theForm.action,l=h.indexOf(y),n.theForm.action=(l!==rt?
2023-08-10 21:19:35 UTC	9564	IN	Data Raw: 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 28 65 3d 70 74 28 22 64 69 76 22 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 65 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 22 29 7d 63 61 74 63 68 28 74 29 7b 6f 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 2c 30 29 3b 72 65 74 75 72 6e 7d 65 3d 69 2c 75 28 29 7d 2c 66 28 29 29 3a 65 74 28 64 6f 63 75 6d 65 6e 74 2c 69 2c 66 74 2c 75 2c 72 29 3a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 65 74 28 64 6f 63 75 6d 65 6e 74 2c 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 69 2c 75 29 29 7d 2c 5f 67 65 74 42 79 49 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 75 2c 66 2c 65 29 7b 69 66 28 66 29 75 26 26 66 2e 69 64 3d 3d 3d 74 3f 6e 2e 70 75 73 Data Ascii: lement.doScroll?(e=pt("div"),f=function(){try{e.doScroll("left")}catch(t){o=n.setTimeout(f,0);return}e=i,u()},f()):et(document,i,ft,u,r):document.addEventListener&&et(document,"DOMContentLoaded",i,u))},_getById:function(n,t,i,u,f,e){if(f)u&&f.id===t?n.pus
2023-08-10 21:19:35 UTC	9580	IN	Data Raw: 6e 65 6e 74 Data Ascii: nent
2023-08-10 21:19:35 UTC	9580	IN	Data Raw: 28 74 68 69 73 2e 5f 73 63 72 69 70 74 4d 61 6e 61 67 65 72 49 44 29 2b 65 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2b 22 26 22 7d 2c 5f 63 72 65 61 74 65 50 6f 73 74 42 61 63 6b 53 65 74 74 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 29 7b 72 65 74 75 72 6e 7b 61 73 79 6e 63 3a 6e 2c 61 73 79 6e 63 54 61 72 67 65 74 3a 69 2c 70 61 6e 65 6c 73 54 6f 55 70 64 61 74 65 3a 74 2c 73 6f 75 72 63 65 45 6c 65 6d 65 6e 74 3a 72 7d 7d 2c 5f 63 6f 6e 76 65 72 74 54 6f 43 6c 69 65 6e 74 49 44 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 29 7b 76 61 72 20 75 2c 6f 2c 65 2c 73 3b 69 66 28 6e 29 66 6f 72 28 75 3d 30 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 75 3c 6f 3b 75 2b 3d 72 3f 32 3a 31 29 65 3d 6e 5b 75 5d 2c 73 3d Data Ascii: (this._scriptManagerID)+e+encodeURIComponent(u)+"&"},_createPostBackSettings:function(n,t,i,r){return{async:n,asyncTarget:i,panelsToUpdate:t,sourceElement:r}},_convertToClientIDs:function(n,t,i,r){var u,o,e,s;if(n)for(u=0,o=n.length;u<o;u+=r?2:1)e=n[u],s=
2023-08-10 21:19:35 UTC	9596	IN	Data Raw: 6c 6f 63 6b 28 74 5b 75 5d 2e 63 6f 6e 74 65 6e 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 53 63 72 69 70 74 43 6f 6e 74 65 6e 74 57 69 74 68 54 61 67 73 22 3a 69 66 28 66 3d 77 69 6e 64 6f 77 2e 65 76 61 6c 28 22 28 22 2b 74 5b 75 5d 2e 63 6f 6e 74 65 6e 74 2b 22 29 22 29 2c 66 2e 73 72 63 29 7b 69 66 28 21 69 7c 7c 53 79 73 2e 5f 53 63 72 69 70 74 4c 6f 61 64 65 72 2e 69 73 53 63 72 69 70 74 4c 6f 61 64 65 64 28 66 2e 73 72 63 29 29 63 6f 6e 74 69 6e 75 65 7d 65 6c 73 65 20 69 66 28 21 72 29 63 6f 6e 74 69 6e 75 65 3b 6e 2e 71 75 65 75 65 43 75 73 74 6f 6d 53 63 72 69 70 74 54 61 67 28 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 53 63 72 69 70 74 50 61 74 68 22 3a 69 66 28 21 69 7c 7c 53 79 73 2e 5f 53 63 72 69 70 74 4c 6f 61 64 65 72 2e 69 73 53 63 72 69 Data Ascii: lock(t[u].content);break;case"ScriptContentWithTags":if(f=window.eval("("+t[u].content+")"),f.src){if(!i\|\|Sys._ScriptLoader.isScriptLoaded(f.src))continue}else if(!r)continue;n.queueCustomScriptTag(f);break;case"ScriptPath":if(!i\|\|Sys._ScriptLoader.isScri
2023-08-10 21:19:35 UTC	9612	IN	Data Raw: 6f 63 75 73 6f 75 74 22 2c 74 2c 6e 2c 77 69 6e 64 6f 77 2c 31 29 7d 7d 2c 61 63 74 69 76 61 74 65 3a 7b 65 76 65 6e 74 47 72 6f 75 70 3a 63 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 69 6e 69 74 55 49 45 76 65 6e 74 28 22 61 63 74 69 76 61 74 65 22 2c 74 2c 74 2c 77 69 6e 64 6f 77 2c 31 29 7d 7d 2c 66 6f 63 75 73 3a 7b 65 76 65 6e 74 47 72 6f 75 70 3a 63 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 69 6e 69 74 55 49 45 76 65 6e 74 28 22 66 6f 63 75 73 22 2c 6e 2c 6e 2c 77 69 6e 64 6f 77 2c 31 29 7d 7d 2c 62 6c 75 72 3a 7b 65 76 65 6e 74 47 72 6f 75 70 3a 63 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 69 6e 69 74 55 49 45 76 65 6e 74 28 22 62 6c 75 72 22 2c 6e 2c 6e 2c 77 69 6e 64 6f 77 2c 31 29 7d 7d 2c 63 Data Ascii: ocusout",t,n,window,1)}},activate:{eventGroup:c,init:function(n){n.initUIEvent("activate",t,t,window,1)}},focus:{eventGroup:c,init:function(t){t.initUIEvent("focus",n,n,window,1)}},blur:{eventGroup:c,init:function(t){t.initUIEvent("blur",n,n,window,1)}},c
2023-08-10 21:19:35 UTC	9629	IN	Data Raw: 42 61 63 6b 3d 53 79 73 2e 45 78 74 65 6e 64 65 64 2e 55 49 2e 43 6f 6e 74 72 6f 6c 42 61 73 65 2e 5f 5f 64 6f 50 6f 73 74 42 61 63 6b 2c 53 79 73 2e 45 78 74 65 6e 64 65 64 2e 55 49 2e 43 6f 6e 74 72 6f 6c 42 61 73 65 2e 6f 6e 73 75 62 6d 69 74 43 6f 6c 6c 65 63 74 69 6f 6e 3d 5b 5d 29 2c 41 72 72 61 79 2e 61 64 64 28 53 79 73 2e 45 78 74 65 6e 64 65 64 2e 55 49 2e 43 6f 6e 74 72 6f 6c 42 61 73 65 2e 6f 6e 73 75 62 6d 69 74 43 6f 6c 6c 65 63 74 69 6f 6e 2c 74 2e 5f 6f 6e 73 75 62 6d 69 74 24 64 65 6c 65 67 61 74 65 29 29 3a 24 61 64 64 48 61 6e 64 6c 65 72 28 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 2c 22 73 75 62 6d 69 74 22 2c 74 2e 5f 6f 6e 73 75 62 6d 69 74 24 64 65 6c 65 67 61 74 65 29 7d 2c 64 69 73 70 6f 73 65 3a 66 75 6e 63 74 69 6f 6e Data Ascii: Back=Sys.Extended.UI.ControlBase.__doPostBack,Sys.Extended.UI.ControlBase.onsubmitCollection=[]),Array.add(Sys.Extended.UI.ControlBase.onsubmitCollection,t._onsubmit$delegate)):$addHandler(document.forms[0],"submit",t._onsubmit$delegate)},dispose:function
2023-08-10 21:19:35 UTC	9645	IN	Data Raw: 6f 73 65 28 29 2c 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 2c 6e 29 2c 74 2e 72 61 69 73 65 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 64 28 63 29 29 7d 2c 63 6c 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 69 3b 69 66 28 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 29 7b 66 6f 72 28 69 3d 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 3e 3d 30 3b 69 2d 2d 29 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 5b 69 5d 2e 64 69 73 70 6f 73 65 28 29 2c 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 5b 69 5d 3d 6e 3b 41 72 72 61 79 2e 63 6c 65 61 72 28 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 29 2c 74 2e 5f 61 6e 69 6d 61 74 69 6f 6e 73 3d 5b 5d 2c 74 2e 72 61 69 73 65 50 72 6f 70 65 72 Data Ascii: ose(),Array.removeAt(t._animations,n),t.raisePropertyChanged(c))},clear:function(){var t=this,i;if(t._animations){for(i=t._animations.length-1;i>=0;i--)t._animations[i].dispose(),t._animations[i]=n;Array.clear(t._animations),t._animations=[],t.raiseProper
2023-08-10 21:19:35 UTC	9661	IN	Data Raw: 65 72 43 6c 61 73 73 28 22 53 79 73 2e 45 78 74 65 6e 64 65 64 2e 55 49 2e 41 6e 69 6d 61 74 69 6f 6e 2e 4d 6f 76 65 41 6e 69 6d 61 74 69 6f 6e 22 2c 24 41 41 2e 50 61 72 61 6c 6c 65 6c 41 6e 69 6d 61 74 69 6f 6e 29 2c 24 41 41 2e 72 65 67 69 73 74 65 72 41 6e 69 6d 61 74 69 6f 6e 28 22 6d 6f 76 65 22 2c 24 41 41 2e 4d 6f 76 65 41 6e 69 6d 61 74 69 6f 6e 29 2c 24 41 41 2e 52 65 73 69 7a 65 41 6e 69 6d 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 2c 75 2c 66 2c 6f 29 7b 76 61 72 20 73 3d 74 68 69 73 3b 24 41 41 2e 52 65 73 69 7a 65 41 6e 69 6d 61 74 69 6f 6e 2e 69 6e 69 74 69 61 6c 69 7a 65 42 61 73 65 28 73 2c 5b 74 2c 69 2c 72 2c 6e 5d 29 2c 73 2e 5f 77 69 64 74 68 3d 75 2c 73 2e 5f 68 65 69 67 68 74 3d 66 2c 73 2e 5f 68 6f 72 69 7a 6f 6e Data Ascii: erClass("Sys.Extended.UI.Animation.MoveAnimation",$AA.ParallelAnimation),$AA.registerAnimation("move",$AA.MoveAnimation),$AA.ResizeAnimation=function(t,i,r,u,f,o){var s=this;$AA.ResizeAnimation.initializeBase(s,[t,i,r,n]),s._width=u,s._height=f,s._horizon
2023-08-10 21:19:35 UTC	9677	IN	Data Raw: 65 74 75 72 6e 7b 78 3a 6e 2e 5f 67 65 74 57 69 6e 64 6f 77 53 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 79 3a 6e 2e 5f 67 65 74 57 69 6e 64 6f 77 53 63 72 6f 6c 6c 54 6f 70 28 29 2c 77 69 64 74 68 3a 6e 2e 5f 67 65 74 57 69 6e 64 6f 77 57 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 6e 2e 5f 67 65 74 57 69 6e 64 6f 77 48 65 69 67 68 74 28 29 7d 7d 2c 5f 67 65 74 57 69 6e 64 6f 77 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 30 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3f 6e 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 Data Ascii: eturn{x:n._getWindowScrollLeft(),y:n._getWindowScrollTop(),width:n._getWindowWidth(),height:n._getWindowHeight()}},_getWindowHeight:function(){var n=0;return document.documentElement&&document.documentElement.clientHeight?n=document.documentElement.client
2023-08-10 21:19:35 UTC	9693	IN	Data Raw: 2e 5f 63 6c 6f 73 65 Data Ascii: ._close
2023-08-10 21:19:35 UTC	9693	IN	Data Raw: 43 65 6c 6c 49 6e 6e 65 72 44 69 76 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 65 3d 6e 2e 5f 70 6f 70 75 70 54 61 62 6c 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 61 62 6c 65 22 29 2c 72 3d 6e 2e 5f 63 61 6c 6c 6f 75 74 41 72 72 6f 77 43 65 6c 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 29 2c 6b 3d 6e 2e 5f 77 61 72 6e 69 6e 67 49 63 6f 6e 49 6d 61 67 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 2c 6e 74 3d 6e 2e 5f 63 6c 6f 73 65 49 6d 61 67 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 2c 68 3d 6e 2e 5f 65 72 72 6f 72 4d 65 73 73 61 67 65 43 65 6c 6c Data Ascii: CellInnerDiv=document.createElement(s),e=n._popupTable=document.createElement("table"),r=n._calloutArrowCell=document.createElement(p),k=n._warningIconImage=document.createElement("img"),nt=n._closeImage=document.createElement("img"),h=n._errorMessageCell

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
239	192.168.2.3	50094	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	9628	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/jquery/jquery-1_10_2_min.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	9708	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166124 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:18:52 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=146674026993761309412227792543439288753"}],"include_subdomains ":true} Server: ECAcc (muc/3363) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 38f0f056-301e-0047-224d-caa19a000000 Content-Length: 93146 Connection: close
2023-08-10 21:19:35 UTC	9709	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 30 2e 32 20 77 69 74 68 20 61 20 66 69 78 20 69 6e 74 65 67 72 61 74 65 64 20 66 72 6f 6d 20 76 31 2e 31 32 2e 32 2c 20 33 2e 34 2e 30 2c 20 61 6e 64 20 33 2e 35 2e 30 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 63 69 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 6c 65 6e 67 74 68 2c 72 3d 69 2e 74 79 70 65 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 69 73 57 69 6e 64 6f 77 28 6e 29 3f 21 31 3a 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 74 3f 21 30 3a 22 61 72 72 61 79 22 3d 3d 3d 72 7c 7c 22 66 75 Data Ascii: /! jQuery v1.10.2 with a fix integrated from v1.12.2, 3.4.0, and 3.5.0 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license /(function(n,t){function ci(n){var t=n.length,r=i.type(n);return i.isWindow(n)?!1:1===n.nodeType&&t?!0:"array"===r\|\|"fu
2023-08-10 21:19:35 UTC	9725	IN	Data Raw: 22 Data Ascii: "
2023-08-10 21:19:35 UTC	9725	IN	Data Raw: 29 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 22 29 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6e 26 26 28 63 69 28 4f 62 6a 65 63 74 28 6e 29 29 3f 69 2e 6d 65 72 67 65 28 72 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 5b 6e 5d 3a 6e 29 3a 69 69 2e 63 61 6c 6c 28 72 2c 6e 29 29 2c 72 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3b 69 66 28 74 29 7b 69 66 28 6e 66 29 72 65 74 75 72 6e 20 6e 66 2e 63 61 6c 6c 28 74 2c 6e 2c 69 29 3b 66 6f 72 28 72 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 69 3f 30 3e 69 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 72 2b 69 29 3a 69 3a 30 3b 72 3e 69 3b 69 2b 2b 29 69 66 Data Ascii: ).replace(ve,"")},makeArray:function(n,t){var r=t\|\|[];return null!=n&&(ci(Object(n))?i.merge(r,"string"==typeof n?[n]:n):ii.call(r,n)),r},inArray:function(n,t,i){var r;if(t){if(nf)return nf.call(t,n,i);for(r=t.length,i=i?0>i?Math.max(0,r+i):i:0;r>i;i++)if
2023-08-10 21:19:35 UTC	9741	IN	Data Raw: 6f 5d 3d 7b 7d 29 29 5b 6e 5d 3d 5b 79 2c 6c 5d 29 2c 63 3d 3d 3d 74 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 6c 2d 3d 75 2c 6c 3d 3d 3d 72 7c 7c 30 3d 3d 6c 25 72 26 26 6c 2f 72 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 66 2c 69 3d 72 2e 70 73 65 75 64 6f 73 5b 6e 5d 7c 7c 72 2e 73 65 74 46 69 6c 74 65 72 73 5b 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 75 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 6e 29 3b 72 65 74 75 72 6e 20 69 5b 6f 5d 3f 69 28 74 29 3a 69 2e 6c 65 6e 67 74 68 3e 31 3f 28 66 3d 5b 6e 2c 6e 2c 22 22 2c 74 5d 2c 72 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 2e 74 6f 4c 6f 77 65 72 Data Ascii: o]={}))[n]=[y,l]),c===t))break;return l-=u,l===r\|\|0==l%r&&l/r>=0}}},PSEUDO:function(n,t){var f,i=r.pseudos[n]\|\|r.setFilters[n.toLowerCase()]\|\|u.error("unsupported pseudo: "+n);return i[o]?i(t):i.length>1?(f=[n,n,"",t],r.setFilters.hasOwnProperty(n.toLower
2023-08-10 21:19:35 UTC	9757	IN	Data Raw: 76 61 6c 75 65 3d 72 29 2c 74 7d 7d 7d 7d 2c 70 72 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 63 6c 61 73 73 4e 61 6d 65 22 7d 2c 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 75 29 7b 76 61 72 20 65 2c 66 2c 73 2c 6f 3d 6e 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 6e 26 26 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 20 73 3d 31 21 3d 3d 6f 7c 7c 21 69 2e 69 73 58 4d 4c 44 6f 63 28 6e 29 2c 73 26 26 28 72 3d 69 2e 70 72 6f 70 46 69 78 5b 72 5d 7c 7c 72 2c 66 3d 69 2e 70 72 6f 70 48 6f 6f 6b 73 5b 72 5d 29 2c 75 21 3d 3d 74 3f 66 26 26 22 73 65 74 22 69 6e 20 66 26 26 28 65 3d 66 2e 73 65 74 28 6e 2c 75 2c 72 29 29 21 3d 3d 74 3f 65 3a 6e 5b 72 5d 3d 75 3a 66 26 26 Data Ascii: value=r),t}}}},propFix:{"for":"htmlFor","class":"className"},prop:function(n,r,u){var e,f,s,o=n.nodeType;if(n&&3!==o&&8!==o&&2!==o)return s=1!==o\|\|!i.isXMLDoc(n),s&&(r=i.propFix[r]\|\|r,f=i.propHooks[r]),u!==t?f&&"set"in f&&(e=f.set(n,u,r))!==t?e:n[r]=u:f&&
2023-08-10 21:19:35 UTC	9773	IN	Data Raw: 54 41 5c 5b 7c 2d 2d 29 7c 28 3f 3a 5c 5d 5c 5d 7c 2d 2d 29 3e 5c 73 2a 24 2f 67 2c 65 3d 7b 6f 70 74 69 6f 6e 3a 5b 31 2c 22 3c 73 65 6c 65 63 74 20 6d 75 6c 74 69 70 6c 65 3d 27 6d 75 6c 74 69 70 6c 65 27 3e 22 2c 22 3c 2f 73 65 6c 65 63 74 3e 22 5d 2c 6c 65 67 65 6e 64 3a 5b 31 2c 22 3c 66 69 65 6c 64 73 65 74 3e 22 2c 22 3c 2f 66 69 65 6c 64 73 65 74 3e 22 5d 2c 61 72 65 61 3a 5b 31 2c 22 3c 6d 61 70 3e 22 2c 22 3c 2f 6d 61 70 3e 22 5d 2c 70 61 72 61 6d 3a 5b 31 2c 22 3c 6f 62 6a 65 63 74 3e 22 2c 22 3c 2f 6f 62 6a 65 63 74 3e 22 5d 2c 74 68 65 61 64 3a 5b 31 2c 22 3c 74 61 62 6c 65 3e 22 2c 22 3c 2f 74 61 62 6c 65 3e 22 5d 2c 74 72 3a 5b 32 2c 22 3c 74 61 62 6c 65 3e 3c 74 62 6f 64 79 3e 22 2c 22 3c 2f 74 62 6f 64 79 3e 3c 2f 74 61 62 6c 65 3e 22 5d Data Ascii: TA\[\|--)\|(?:\]\]\|--)>\s*$/g,e={option:[1,"<select multiple='multiple'>","</select>"],legend:[1,"<fieldset>","</fieldset>"],area:[1,"<map>","</map>"],param:[1,"<object>","</object>"],thead:[1,"<table>","</table>"],tr:[2,"<table><tbody>","</tbody></table>"]
2023-08-10 21:19:35 UTC	9789	IN	Data Raw: 3a 65 2b 28 Data Ascii: :e+(
2023-08-10 21:19:35 UTC	9789	IN	Data Raw: 73 69 2e 74 65 73 74 28 65 29 3f 22 26 22 3a 22 3f 22 29 2b 22 5f 3d 22 2b 6f 69 2b 2b 29 29 2c 75 2e 69 66 4d 6f 64 69 66 69 65 64 26 26 28 69 2e 6c 61 73 74 4d 6f 64 69 66 69 65 64 5b 65 5d 26 26 66 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 49 66 2d 4d 6f 64 69 66 69 65 64 2d 53 69 6e 63 65 22 2c 69 2e 6c 61 73 74 4d 6f 64 69 66 69 65 64 5b 65 5d 29 2c 69 2e 65 74 61 67 5b 65 5d 26 26 66 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 49 66 2d 4e 6f 6e 65 2d 4d 61 74 63 68 22 2c 69 2e 65 74 61 67 5b 65 5d 29 29 2c 28 75 2e 64 61 74 61 26 26 75 2e 68 61 73 43 6f 6e 74 65 6e 74 26 26 75 2e 63 6f 6e 74 65 6e 74 54 79 70 65 21 3d 3d 21 31 7c 7c 72 2e 63 6f 6e 74 65 6e 74 54 79 70 65 29 26 26 66 2e 73 65 74 52 65 71 75 65 73 74 48 65 Data Ascii: si.test(e)?"&":"?")+"_="+oi++)),u.ifModified&&(i.lastModified[e]&&f.setRequestHeader("If-Modified-Since",i.lastModified[e]),i.etag[e]&&f.setRequestHeader("If-None-Match",i.etag[e])),(u.data&&u.hasContent&&u.contentType!==!1\|\|r.contentType)&&f.setRequestHe

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.3	49769	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:56 UTC	1424	OUT	GET /static/fonts/SourceCodePro-BoldIt-1058.otf.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:57 UTC	1599	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 64584 Connection: close Date: Thu, 10 Aug 2023 21:18:58 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 02 Feb 2023 02:19:56 GMT ETag: "197f00be92b49f2ccba2e43105af9f7d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 20e88007b6f5218ef5942bc3581c73b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: xTi3MyRv6DHwDIZftVUejvXFoxMBTn9mZEunRzZTnIbKdvI76WT84g==
2023-08-10 21:18:57 UTC	1600	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 00 fc 48 00 0d 00 00 00 01 b0 20 00 00 fb f5 00 01 0e d9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 84 fe 49 1a 84 06 1b a5 48 1c ad 3e 06 60 00 d9 0e 01 36 02 24 03 93 70 04 06 05 99 3a 07 20 5b 32 af 91 08 e1 46 ec 6e ce 02 41 e6 a7 fc 57 76 8e b6 7d 7a 27 45 d0 09 27 14 1d eb 20 28 de 6f 9b 01 ff db 35 a1 80 1b e3 34 6c 1c 00 6f 43 6d 66 ff ff ff ff ff ff ef 4d 16 a1 5b b3 1b d8 76 77 69 40 28 01 69 af 22 58 ff f5 3b 2f c2 aa b9 21 24 e5 12 8e ba 69 03 d1 79 2f 11 6d 9a 95 79 8e 24 0d a7 bd 93 46 e0 0b 29 c3 92 ae d6 b1 49 0d 46 8f 6d 74 74 e7 77 9c 40 38 ad b0 67 85 5f 97 0a 6d 69 17 70 64 1c 8e b4 b5 35 a7 4a 0f 64 a3 a4 9e 93 de b8 fd a8 a7 35 4e 5a 57 d1 f3 b2 5d 7e 0b 12 11 e1 f4 9e 15 61 45 58 Data Ascii: wOF2OTTOH FIH>`6$p: [2FnAWv}z'E' (o54loCmfM[vwi@(i"X;/!$iy/my$F)IFmttw@8g_mipd5Jd5NZW]~aEX
2023-08-10 21:18:57 UTC	1608	IN	Data Raw: bf 07 ce 61 0f da ea 0e 0e 14 05 f5 4a ea d8 78 b5 76 6d 86 92 50 4a ac c9 b5 45 88 f0 06 6c 4a b8 1e f1 52 25 e9 f7 55 ff da 7d 80 42 25 7e 78 a5 31 ae 82 fe 36 56 46 cc e7 14 4a 55 70 2f c7 0a f5 a2 31 78 cf 19 4c 98 b6 5c 01 7b 29 0d 1f c5 a3 9c b9 60 d3 ef 3d 19 fb cf 23 ce 61 ce a1 6c fd 58 7a 88 ee ba 18 d7 d2 eb ad 2f 3e 47 7a 18 f1 b2 87 c8 a6 88 4c 60 5c 0e 75 a3 3a 1b 39 c3 df c6 f6 74 34 88 39 0d 73 a6 46 5b 42 30 d2 dd 3b d6 aa f4 5e 18 43 98 f1 47 8c e3 18 86 e3 1c 8c 2d 12 8b d9 28 38 83 e9 89 67 67 c9 9d fe a6 04 0a cf bc 6b 06 92 18 b4 4b bf b6 d6 6e 8f c7 0f cf c9 64 7a bd 8c 82 93 cf 10 22 d8 ad a1 42 14 44 58 aa 56 72 d4 16 f7 d2 92 84 4c 97 72 2b 2b af b2 5a a0 ad 11 35 8f bc 60 aa bf 22 9c 8d d2 80 6f 64 d5 e3 14 6c f0 47 0f 8b ed 75 Data Ascii: aJxvmPJElJR%U}B%~x16VFJUp/1xL\{)`=#alXz/>GzL`\u:9t49sF[B0;^CG-(8ggkKndz"BDXVrLr++Z5`"odlGu
2023-08-10 21:18:57 UTC	1624	IN	Data Raw: 2d 1d 79 77 3b 78 f4 f4 dc d5 2d fd d6 e4 85 f5 25 28 7d 84 a2 2f e8 b0 2d 74 39 cb a4 e9 42 74 4d 39 44 cc e7 8b 30 08 97 d4 d5 6c 9c 20 bd fc e4 91 cf e7 ab ce 3a 24 ad 16 40 35 3d bc 12 02 3e b4 57 ef 12 68 06 41 eb 75 91 5f c4 78 2d 35 97 cc cf b1 1d bf 01 c7 e5 82 b0 0c 2e 52 0d cd 2a 7d f1 1c eb 64 f1 2f 41 74 4c 64 6b bc e3 63 8d 76 f9 70 ae ce db bc 8e 1e bd 85 4b 2b b2 93 07 fa 91 48 d1 7b fe da 91 32 dc dd c1 8e 6a 35 a2 cb f2 62 85 e4 04 31 ba 73 13 52 d2 78 e0 77 32 24 85 cc c3 18 3a 28 dd 8b 02 35 6b 5c 40 06 f4 68 93 c9 6d bd 7c a0 ab 7e 11 b8 77 3d 79 74 4c d3 36 ac 68 c0 dc dc a8 ec 50 ff 82 91 4a 7a 45 86 5f 07 dd ca df 65 d2 19 7d 55 68 38 db 3f 4e 11 5d 2f b9 66 fd 4e 83 41 6d 2f 29 92 0e cc dc 82 66 7d a0 6c be 5b ef db 2a e7 92 de 0e Data Ascii: -yw;x-%(}/-t9BtM9D0l :$@5=>WhAu_x-5.R}d/AtLdkcvpK+H{2j5b1sRxw2$:(5k\@hm\|~w=ytL6hPJzE_e}Uh8?N]/fNAm/)f}l[
2023-08-10 21:18:57 UTC	1634	IN	Data Raw: 07 1d cf ca e5 a6 aa 3e e9 f3 98 25 7d 41 bc 8b 27 aa e4 d1 33 a1 13 3a 26 16 27 b0 37 5d e7 56 f8 90 8e 05 39 84 44 8d 56 e6 8d be cd 0c ef 2f 32 84 6d 1e e6 70 e4 29 17 0f 5d dd ff 78 97 93 f1 24 dc 4e cd aa b5 49 ab 7a 47 77 b6 f5 90 f7 d4 d8 3f c5 01 35 ca 83 6a ff f8 4d d8 fe 19 b8 ee 32 84 6a e0 9f 13 9b 60 c6 2a 68 a1 03 b7 36 6d 49 6e b8 35 d8 e8 46 94 ff cc 8e e5 98 1a 59 70 55 7d 2f 27 31 a4 d7 c2 75 4c 94 1f bd 05 d4 71 35 ce 90 2e 39 9e 95 31 20 93 1f 71 b1 e6 69 82 c6 ea 48 9a 78 4a 13 c0 ec 0a 63 9a 11 0f 65 2f 13 1f df e9 36 55 f6 72 95 e7 2b ca 3e 67 6b d8 06 b9 fb d3 e7 6d a3 9a f0 5b b5 98 f1 f6 fe 4b 72 c2 19 fb a7 e8 7f 8a d7 60 0c 88 3d c4 76 7f 01 6e db c4 be 3c 38 6e d1 53 14 61 12 3c 01 82 7d 72 dd ea fd be 88 b2 9f dc ba 0a 23 91 Data Ascii: >%}A'3:&'7]V9DV/2mp)]x$NIzGw?5jM2j`*h6mIn5FYpU}/'1uLq5.91 qiHxJce/6Ur+>gkm[Kr`=vn<8nSa<}r#
2023-08-10 21:18:57 UTC	1650	IN	Data Raw: 0d 52 f7 94 92 d3 93 b2 ac aa 6b e8 ca 94 15 bb aa 7a 92 6a ba b6 4c 5d 6e 7d 2e e7 9a 75 8f 9e bd e9 b3 d6 5c bc ce fa 33 37 5b 6b fd cd 6f 9d 48 2d b2 39 e6 d4 73 2e 73 d8 55 4e 3e fd 1a 37 ba c5 85 af 78 f5 a3 4e b8 fe cd ce bc c5 b7 56 1c fb d5 3f fd 5b 7d b1 cf fd 7a df ec 6d f7 12 0f be 31 af f3 8e 3c fe a9 cf 7c bb df 1b d8 27 f2 61 28 90 48 0e a3 ce e4 eb 99 09 49 ab 20 b1 00 c4 55 47 91 18 6d de 9f d6 d3 9c 8c ec 92 0d de 53 5b 93 77 43 06 a2 f2 96 bb 58 52 76 98 17 bc ec 34 a5 9e d4 c6 c5 65 f4 60 66 0f ae f2 7d f5 fd 1e fd ae cb 3f 72 ef 6d 39 6c 04 0c ab f6 21 12 6f e0 8c 0d 6e 61 0b 47 70 0e af d2 cc 24 99 d4 22 c5 c8 e1 38 49 2f 9a 10 55 d5 35 24 6a a0 50 33 95 24 48 d3 a6 9e e9 2d eb 58 c3 39 1e e2 0d 28 0c 5c e6 e4 69 23 a2 31 82 04 31 d8 Data Ascii: RkzjL]n}.u\37[koH-9s.sUN>7xNV?[}zm1<\|'a(HI UGmS[wCXRv4e`f}?rm9l!onaGp$"8I/U5$jP3$H-X9(\i#11
2023-08-10 21:18:57 UTC	1651	IN	Data Raw: 7c ab f6 e1 40 94 6f db b1 9b c1 97 20 84 6f d8 12 03 0d 90 4f 69 bb 16 f2 6a 97 4a 94 fd e4 2d 3b 79 61 f0 aa 59 4f 03 50 f3 5e d0 1f f4 f4 df 25 29 f9 77 2d f8 5a ab 73 00 4e 6a 38 b3 b6 88 10 18 2c 73 60 a7 0e bf 92 0f 8e 82 13 4b e2 ea ba ef eb 5a 44 88 7b 4e 7e 71 91 80 26 14 1d 3c 34 c0 1f 5d ef e0 0d e4 91 77 09 b0 1e 10 25 a4 3b 09 8b 5c 00 95 83 28 ee 03 44 0b cd f1 57 07 c8 bd 0f d2 ec 10 7e 31 2f d7 97 38 73 ec 3c 77 34 dd 30 bc 38 45 44 46 99 29 a2 bf 9a 61 6f 84 6b 81 ab b2 8c ec 90 d7 6c ea 90 57 74 64 c3 a2 c8 a1 ec 4d b5 74 cb e2 7d b8 96 c7 b5 52 6a e0 7c 71 66 15 dc 46 ad ba 41 e4 2c da 51 0d 7b fb 47 46 82 d0 2c 0a ba cc 9f fd f7 df e4 0f a8 75 4e ef cb 6d 21 cd a3 91 81 f9 ec 5a bc 8c 72 5e b6 74 df 6e 2d 34 35 76 6e 7d 9f fd 39 ce e7 Data Ascii: \|@o oOijJ-;yaYOP^%)w-ZsNj8,s`KZD{N~q&<4]w%;\(DW~1/8s<w408EDF)aoklWtdMt}Rj\|qfFA,Q{GF,uNm!Zr^tn-45vn}9
2023-08-10 21:18:57 UTC	1652	IN	Data Raw: b6 4d d2 f5 4b a1 00 a5 fc c5 5a ed 64 bb 3b cc 9a e8 b3 23 58 ab e1 a1 e1 36 ee 2a c3 12 bf d5 8f ef 02 c5 86 12 93 fb 9e 5b b6 85 6a 0c 78 b4 75 d8 fb ff e2 ea 30 83 81 27 18 ed 71 8d af 7c 20 69 e0 e0 57 00 e7 c3 a5 b4 9f 8f a0 56 bd 60 c0 64 ad 5d 0c fb b3 b0 26 cd ac ea 73 86 97 a0 ce 4c 90 73 65 f1 ad 74 f7 d1 f6 d5 d9 e9 6d 50 a9 78 d3 d1 89 ce 00 d1 1c 08 35 32 cd 6a 72 7f 8c 47 3c f7 18 cb 71 1c 83 ca 40 53 f3 9e b4 b2 09 51 8d a8 cd f5 72 84 d7 f9 eb 6f 79 a8 78 d6 d5 7c b0 64 b9 d6 58 51 ed 7c bf 26 f6 67 33 6f b4 7f 68 f1 e8 cc 93 bb b1 f1 65 75 89 ad a0 04 59 1c 3d 4b b9 ba b3 e5 27 64 62 b4 6f 30 28 2e 81 dd 1d 04 0a 03 7f cd 2a d9 9d 04 3b b3 3d b1 97 95 42 fa c2 3e 98 50 21 a3 e0 e5 34 90 69 0b de 7b 8e b2 4d aa a7 6e 0a 05 15 08 fa d6 b4 Data Ascii: MKZd;#X6[jxu0'q\| iWV`d]&sLsetmPx52jrG<q@SQroyx\|dXQ\|&g3oheuY=K'dbo0(.;=B>P!4i{Mn

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
240	192.168.2.3	50095	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	9800	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/headbundle.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	9801	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166122 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:13:19 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=141219241689261087241637035117919945306"}],"include_subdomains ":true} Server: ECAcc (muc/3307) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 27ebc9e7-a01e-0018-244d-ca15a6000000 Content-Length: 80766 Connection: close
2023-08-10 21:19:35 UTC	9802	IN	Data Raw: 76 61 72 20 4e 61 6d 65 73 70 61 63 65 3d 7b 52 65 67 69 73 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 21 31 2c 74 3d 22 22 2c 75 3d 6e 2e 73 70 6c 69 74 28 22 2e 22 29 2c 69 3d 30 3b 69 3c 75 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 74 21 3d 22 22 26 26 28 74 2b 3d 22 2e 22 29 2c 74 2b 3d 75 5b 69 5d 2c 72 3d 74 68 69 73 2e 45 78 69 73 74 73 28 74 29 2c 72 7c 7c 74 68 69 73 2e 43 72 65 61 74 65 28 74 29 7d 2c 43 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 69 3d 6e 2e 73 70 6c 69 74 28 27 2e 27 29 2c 72 3d 77 69 6e 64 6f 77 2c 74 3d 30 3b 74 3c 69 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 72 5b 69 5b 74 5d 5d 7c 7c 6e 75 6c 6c 3d 3d 3d Data Ascii: var Namespace={Register:function(n){for(var r=!1,t="",u=n.split("."),i=0;i<u.length;i++)t!=""&&(t+="."),t+=u[i],r=this.Exists(t),r\|\|this.Create(t)},Create:function(n){for(var i=n.split('.'),r=window,t=0;t<i.length;t++)("undefined"==typeof r[i[t]]\|\|null===
2023-08-10 21:19:35 UTC	9818	IN	Data Raw: 65 Data Ascii: e
2023-08-10 21:19:35 UTC	9818	IN	Data Raw: 41 70 70 28 29 29 3a 4f 33 36 35 2e 4c 6f 67 2e 57 72 69 74 65 4c 6f 67 28 35 30 37 39 31 34 2c 4f 33 36 35 2e 4c 6f 67 4c 65 76 65 6c 2e 45 72 72 6f 72 2c 22 41 70 70 20 49 63 6f 6e 20 45 72 72 6f 72 22 29 7d 2c 4f 33 36 35 53 68 65 6c 6c 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 21 3d 3d 6e 75 6c 6c 26 26 4f 33 36 35 53 68 65 6c 6c 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 4f 33 36 35 53 68 65 6c 6c 2e 45 78 74 65 6e 73 69 62 69 6c 69 74 79 2e 41 64 64 4f 72 55 70 64 61 74 65 43 75 73 74 6f 6d 48 65 61 64 65 72 42 75 74 74 6f 6e 28 6b 29 29 2c 62 26 26 28 6b 3d 7b 69 64 3a 22 43 6f 70 69 6c 6f 74 49 63 6f 6e 22 2c 61 72 69 61 4c 61 62 65 6c 3a 22 43 6f 70 69 6c 6f 74 22 2c 69 73 53 74 61 74 65 6c 65 73 73 3a 21 Data Ascii: App()):O365.Log.WriteLog(507914,O365.LogLevel.Error,"App Icon Error")},O365Shell.Extensibility!==null&&O365Shell.Extensibility!==undefined&&O365Shell.Extensibility.AddOrUpdateCustomHeaderButton(k)),b&&(k={id:"CopilotIcon",ariaLabel:"Copilot",isStateless:!
2023-08-10 21:19:35 UTC	9834	IN	Data Raw: 74 69 6f 6e 20 68 28 29 7b 6e 28 6f 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3d 3d 31 3f 74 28 29 3a 73 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 29 7d 29 7d 76 61 72 20 6f 3d 30 3b 68 28 29 7d 2c 67 65 74 55 73 65 72 54 6f 6b 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 74 68 69 73 2e 44 4f 4e 45 26 26 28 74 68 69 73 2e 73 74 61 74 75 73 3d 3d 3d 32 30 30 3f 74 28 74 68 69 73 2e 72 65 73 70 6f 6e 73 65 29 3a 69 28 6e 65 77 20 45 72 72 6f 72 28 27 41 50 49 20 60 27 2b 75 2b 27 60 20 66 61 69 6c 65 64 20 77 69 74 68 20 73 74 61 74 75 73 3a 20 5b 27 2b 74 68 Data Ascii: tion h(){n(o,function(n){n==1?t():s()},function(){s()})}var o=0;h()},getUserToken=function(n){return new Promise(function(t,i){function f(){this.readyState===this.DONE&&(this.status===200?t(this.response):i(new Error('API `'+u+'` failed with status: ['+th
2023-08-10 21:19:35 UTC	9850	IN	Data Raw: 6f 6b 65 6e 3d 6e 75 6c 6c 27 2c 27 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 53 69 67 6e 75 70 2e 55 49 2e 48 49 50 53 65 72 76 65 72 43 61 6c 6c 73 27 2c 27 4c 6f 61 64 43 68 61 6c 6c 65 6e 67 65 27 2c 5b 6e 2c 74 2c 69 2c 72 2c 75 2c 66 2c 65 2c 6f 2c 73 2c 68 5d 2c 63 2c 6c 29 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 53 69 67 6e 75 70 2e 55 49 2e 48 49 50 53 65 72 76 65 72 43 61 6c 6c 73 2e 4c 6f 67 55 73 65 72 43 6c 69 63 6b 65 64 53 75 70 70 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 41 6a 61 78 53 65 72 76 69 63 65 2e 4d 61 6b 65 52 65 71 75 65 73 74 28 27 42 4f 58 2e 41 64 6d 69 6e 2e 55 49 2c 20 56 65 72 73 69 6f 6e 3d 30 2e 30 2e 30 2e 30 2c 20 43 75 6c 74 75 72 65 Data Ascii: oken=null','Microsoft.Online.BOX.Signup.UI.HIPServerCalls','LoadChallenge',[n,t,i,r,u,f,e,o,s,h],c,l)},Microsoft.Online.BOX.Signup.UI.HIPServerCalls.LogUserClickedSupport=function(n,t){return AjaxService.MakeRequest('BOX.Admin.UI, Version=0.0.0.0, Culture
2023-08-10 21:19:35 UTC	9866	IN	Data Raw: 72 63 65 2e 43 6f 6d 6d 65 72 63 65 41 6a 61 78 2e 42 75 69 6c 64 41 64 64 72 65 73 73 44 69 73 70 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 41 6a 61 78 53 65 72 76 69 63 65 2e 4d 61 6b 65 52 65 71 75 65 73 74 28 27 42 4f 58 2e 41 64 6d 69 6e 2e 55 49 2c 20 56 65 72 73 69 6f 6e 3d 30 2e 30 2e 30 2e 30 2c 20 43 75 6c 74 75 72 65 3d 6e 65 75 74 72 61 6c 2c 20 50 75 62 6c 69 63 4b 65 79 54 6f 6b 65 6e 3d 6e 75 6c 6c 27 2c 27 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 41 64 6d 69 6e 2e 55 49 2e 43 6f 6d 6d 65 72 63 65 2e 43 6f 6d 6d 65 72 63 65 41 6a 61 78 27 2c 27 42 75 69 6c 64 41 64 64 72 65 73 73 44 69 73 70 6c 61 79 27 2c 5b 6e 5d 2c 74 2c 69 29 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e Data Ascii: rce.CommerceAjax.BuildAddressDisplay=function(n,t,i){return AjaxService.MakeRequest('BOX.Admin.UI, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null','Microsoft.Online.BOX.Admin.UI.Commerce.CommerceAjax','BuildAddressDisplay',[n],t,i)},Microsoft.Onlin

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
241	192.168.2.3	50091	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	9881	OUT	GET /?bgbpbtvq HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:35 UTC	12507	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 83c54553-ef5f-4260-8e99-0bf95480ed00 x-ms-ests-server: 2.1.15984.6 - SCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+san"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; expires=Sat, 09-Sep-2023 21:19:35 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; domain=larationr.top; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA; expires=Sat, 09-Sep-2023 21:19:35 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Thu, 10 Aug 2023 21:19:34 GMT Connection: close content-length: 36651 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:35 UTC	12509	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2023-08-10 21:19:35 UTC	12523	IN	Data Raw: 47 35 6c 70 6d 75 5a 71 57 42 41 52 34 2d 4a 65 56 68 37 74 34 42 77 55 6d 68 52 69 5a 5a 45 66 35 4f 31 65 36 4f 59 58 61 47 6c 67 5a 54 6d 41 54 6d 73 44 47 64 49 71 4e 34 51 4d 62 59 77 63 37 77 79 78 32 68 67 4f 63 6a 42 74 34 47 41 5f 77 4d 76 7a 67 2d 37 64 6d 34 75 5f 76 65 35 36 39 39 58 6a 46 72 78 4d 65 58 70 6b 5a 70 47 31 68 58 4f 6a 70 6d 65 32 5a 34 32 6d 52 62 4a 5a 69 57 6d 4a 71 62 68 47 63 46 5a 52 64 56 6c 61 56 6b 6d 32 52 36 5a 4b 63 55 57 61 59 45 68 4a 70 43 77 41 31 5c 75 30 30 32 36 66 6c 6f 77 3d 66 69 64 6f 5c 75 30 30 32 36 65 73 74 73 66 65 64 3d 31 5c 75 30 30 32 36 75 61 69 64 3d 63 34 32 31 66 37 37 31 31 35 35 66 34 63 65 33 39 31 34 37 36 64 34 38 34 34 62 31 64 65 36 66 5c 75 30 30 32 36 66 63 69 3d 68 74 74 70 73 25 33 Data Ascii: G5lpmuZqWBAR4-JeVh7t4BwUmhRiZZEf5O1e6OYXaGlgZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzg-7dm4u_ve5699XjFrxMeXpkZpG1hXOjpme2Z42mRbJZiWmJqbhGcFZRdVlaVkm2R6ZKcUWaYEhJpCwA1\u0026flow=fido\u0026estsfed=1\u0026uaid=c421f771155f4ce391476d4844b1de6f\u0026fci=https%3
2023-08-10 21:19:35 UTC	12539	IN	Data Raw: 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 41 63 63 65 70 74 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 29 2c 0a 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 63 61 6e 61 72 79 22 2c 70 2e 61 70 69 43 61 6e 61 72 79 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 63 6c 69 65 6e 74 2d 72 65 71 75 65 73 74 2d 69 64 22 2c 70 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 68 70 67 69 64 22 2c 70 2e 68 70 67 69 64 7c 7c 30 29 2c 65 2e 73 Data Ascii: setRequestHeader("Accept","application/json"),e.setRequestHeader("Content-Type","application/json; charset=UTF-8"),e.setRequestHeader("canary",p.apiCanary),e.setRequestHeader("client-request-id",p.correlationId),e.setRequestHeader("hpgid",p.hpgid\|\|0),e.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
242	192.168.2.3	50092	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	9882	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:35 UTC	11814	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:35 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: ca69932b-a01e-0035-65d0-cb9168000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211935Z-gysw6uasgd5dm6ez0bq3hhaggg0000000cy0000000004ytz X-Cache: TCP_MISS Accept-Ranges: bytes
2023-08-10 21:19:35 UTC	11815	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
243	192.168.2.3	50098	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	9883	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/controlbundle.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	9886	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166121 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:13:20 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=172160838657107515818381460724846302761"}],"include_subdomains ":true} Server: ECAcc (muc/3315) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f3b59db1-701e-000b-124d-ca31aa000000 Content-Length: 89590 Connection: close
2023-08-10 21:19:35 UTC	9887	IN	Data Raw: 76 61 72 20 54 65 78 74 42 6f 78 3d 77 69 6e 64 6f 77 2e 54 65 78 74 42 6f 78 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 75 3d 74 28 69 29 2c 72 3d 6e 28 69 29 2c 66 3d 69 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 72 26 26 66 2e 6c 65 6e 67 74 68 2d 75 2e 6c 65 6e 67 74 68 3e 3d 72 3f 21 31 3a 21 30 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 69 3f 21 31 3a 21 30 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 75 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6c 69 70 62 6f 61 72 64 44 61 74 61 26 26 28 75 3d 6e 28 72 29 2c 75 29 29 7b 76 61 72 20 66 3d 72 2e 76 61 6c 75 65 2c 65 3d 74 28 72 29 2c 6f 3d 75 2d 66 2e 6c 65 6e 67 74 68 2b Data Ascii: var TextBox=window.TextBox\|\|function(){var r=function(i){var u=t(i),r=n(i),f=i.value;return r&&f.length-u.length>=r?!1:!0},u=function(t){var i=n(t);return i?!1:!0},f=function(r){var u;if(window.clipboardData&&(u=n(r),u)){var f=r.value,e=t(r),o=u-f.length+
2023-08-10 21:19:35 UTC	9903	IN	Data Raw: 63 Data Ascii: c
2023-08-10 21:19:35 UTC	9903	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2b 27 5f 42 6f 64 79 27 29 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2b 27 5f 43 6f 6c 6c 61 70 73 65 64 27 29 2c 66 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2b 27 5f 41 72 72 6f 77 43 6f 6c 6c 61 70 73 65 64 27 29 2c 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2b 27 5f 41 72 72 6f 77 45 78 70 61 6e 64 65 64 27 29 2c 75 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2b 27 5f 41 72 72 6f 77 49 6d 61 67 65 27 29 2c 6f 3d 21 31 2c 68 2c 63 3b 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 3d 27 6e Data Ascii: tion(t){var r=document.getElementById(t+'_Body'),s=document.getElementById(t+'_Collapsed'),f=document.getElementById(t+'_ArrowCollapsed'),e=document.getElementById(t+'_ArrowExpanded'),u=document.getElementById(t+'_ArrowImage'),o=!1,h,c;r.style.display=='n
2023-08-10 21:19:35 UTC	9985	IN	Data Raw: 65 74 5f 64 69 61 6c 6f 67 53 68 69 65 6c 64 49 44 28 29 29 29 2c 74 68 69 73 2e 5f 73 68 69 65 6c 64 45 6c 65 6d 65 6e 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 5f 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 6e 2e 4a 53 2e 44 69 61 6c 6f 67 49 6e 73 74 61 6e 63 65 2e 5f 66 69 6e 64 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 67 65 74 5f 65 6c 65 6d 65 6e 74 28 29 2c 74 68 69 73 2e 67 65 74 5f 70 61 72 65 6e 74 28 29 2e 67 65 74 5f 64 69 61 6c 6f 67 46 72 61 6d 65 49 44 28 29 29 29 2c 74 68 69 73 2e 5f 66 72 61 6d 65 45 6c 65 6d 65 6e 74 7d 2c 74 2e 70 72 6f 74 6f Data Ascii: et_dialogShieldID())),this._shieldElement},t.prototype.get_frameElement=function(){return this._frameElement==null&&(this._frameElement=n.JS.DialogInstance._findElement(this.get_element(),this.get_parent().get_dialogFrameID())),this._frameElement},t.proto
2023-08-10 21:19:35 UTC	10001	IN	Data Raw: 72 6f Data Ascii: ro
2023-08-10 21:19:35 UTC	10001	IN	Data Raw: 74 6f 74 79 70 65 2e 5f 6f 6e 44 72 61 67 4d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 69 2c 75 2c 6e 3b 74 68 69 73 2e 5f 69 73 44 72 61 67 67 69 6e 67 26 26 28 69 3d 74 2e 63 6c 69 65 6e 74 58 2c 75 3d 74 2e 63 6c 69 65 6e 74 59 2c 74 68 69 73 2e 67 65 74 5f 65 6c 65 6d 65 6e 74 28 29 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 72 28 69 2d 74 68 69 73 2e 5f 64 72 61 67 53 74 61 72 74 58 29 2c 74 68 69 73 2e 67 65 74 5f 65 6c 65 6d 65 6e 74 28 29 2e 73 74 79 6c 65 2e 74 6f 70 3d 72 28 75 2d 74 68 69 73 2e 5f 64 72 61 67 53 74 61 72 74 59 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 3f 64 6f 63 75 6d 65 6e 74 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 28 29 2e 65 6d 70 74 79 28 Data Ascii: totype._onDragMove=function(){var t=window.event,i,u,n;this._isDragging&&(i=t.clientX,u=t.clientY,this.get_element().style.left=r(i-this._dragStartX),this.get_element().style.top=r(u-this._dragStartY),document.getSelection()?document.getSelection().empty(
2023-08-10 21:19:35 UTC	10017	IN	Data Raw: 6c 6c 2c 6e 75 6c 6c 29 2c 66 2e 72 65 70 6f 73 69 74 69 6f 6e 41 6e 64 52 65 73 69 7a 65 44 69 61 6c 6f 67 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 48 74 6d 6c 46 72 6f 6d 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 75 29 7b 69 66 28 21 31 3d 3d 74 68 69 73 2e 67 65 74 5f 69 73 44 69 61 6c 6f 67 53 68 6f 77 6e 28 29 29 7b 76 61 72 20 66 3d 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 43 61 63 68 65 5b 6e 5d 2c 65 3d 74 68 69 73 2e 5f 67 65 74 44 69 61 6c 6f 67 53 65 74 74 69 6e 67 73 28 75 29 3b 28 66 3d 3d 6e 75 6c 6c 7c 7c 65 2e 67 65 74 5f 72 65 6c 6f 61 64 45 6c 65 6d 65 6e 74 28 29 29 26 26 28 66 3d 74 68 69 73 2e 63 61 6c 63 43 61 63 68 65 64 45 6c 65 6d 65 6e 74 28 6e 29 29 2c 74 68 69 73 2e 5f 73 68 6f 77 48 Data Ascii: ll,null),f.repositionAndResizeDialog()},t.prototype.showHtmlFromElement=function(n,t,r,u){if(!1==this.get_isDialogShown()){var f=this._contentCache[n],e=this._getDialogSettings(u);(f==null\|\|e.get_reloadElement())&&(f=this.calcCachedElement(n)),this._showH
2023-08-10 21:19:35 UTC	10033	IN	Data Raw: 61 79 6f 75 74 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 50 61 6e 65 6c 73 5b 74 68 69 73 2e 41 63 74 69 76 65 50 61 6e 65 6c 49 6e 64 65 78 5d 2e 4e 65 78 74 43 6c 69 65 6e 74 43 6c 69 63 6b 28 29 3f 6e 26 26 74 68 69 73 2e 41 63 74 69 76 65 50 61 6e 65 6c 49 6e 64 65 78 3c 74 68 69 73 2e 50 61 6e 65 6c 73 2e 6c 65 6e 67 74 68 2d 31 3f 28 74 68 69 73 2e 56 61 6c 69 64 61 74 65 50 61 6e 65 6c 28 29 26 26 74 68 69 73 2e 53 68 6f 77 50 61 6e 65 6c 28 74 68 69 73 2e 41 63 74 69 76 65 50 61 6e 65 6c 49 6e 64 65 78 2b 31 29 2c 21 31 29 3a 28 74 79 70 65 6f 66 20 50 61 67 65 4d 6f 64 69 66 69 65 64 57 61 72 6e 69 6e 67 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 28 50 61 67 65 4d 6f Data Ascii: ayout.prototype.Next=function(n){return this.Panels[this.ActivePanelIndex].NextClientClick()?n&&this.ActivePanelIndex<this.Panels.length-1?(this.ValidatePanel()&&this.ShowPanel(this.ActivePanelIndex+1),!1):(typeof PageModifiedWarning!='undefined'&&(PageMo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
244	192.168.2.3	50096	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	9884	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/angularlib.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	9952	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 165962 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:13:29 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=157801479487775621784198404835005692292"}],"include_subdomains ":true} Server: ECAcc (muc/3330) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 44fe62ee-301e-0057-7f4d-ca64f2000000 Content-Length: 159373 Connection: close
2023-08-10 21:19:35 UTC	9953	IN	Data Raw: 2f 2a 21 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 33 2e 31 35 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 3b 66 75 6e 63 74 69 6f 6e 20 76 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 75 2c 74 2c 72 3d 22 5b 22 2b 28 6e 3f 6e 2b 22 3a 22 3a 22 22 29 2b 69 2b 22 5d 20 68 74 74 70 3a 2f 2f 65 72 72 6f 72 73 2e 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 2f 31 2e 33 2e 31 35 2f 22 2b 28 6e 3f 6e 2b 22 2f 22 3a 22 22 29 2b 69 2c Data Ascii: /! AngularJS v1.3.15 (c) 2010-2014 Google, Inc. http://angularjs.org License: MIT/(function(n,t,i){'use strict';;function v(n){return function(){for(var i=arguments[0],u,t,r="["+(n?n+":":"")+i+"] http://errors.angularjs.org/1.3.15/"+(n?n+"/":"")+i,
2023-08-10 21:19:35 UTC	9969	IN	Data Raw: 6e Data Ascii: n
2023-08-10 21:19:35 UTC	9969	IN	Data Raw: 7d 29 7d 7d 7d 7d 2c 75 3d 79 2e 24 69 6e 6a 65 63 74 6f 72 3d 67 28 79 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6e 74 2e 69 73 53 74 72 69 6e 67 28 74 29 26 26 76 2e 70 75 73 68 28 74 29 3b 74 68 72 6f 77 20 75 69 28 22 75 6e 70 72 22 2c 76 2e 6a 6f 69 6e 28 22 20 3c 2d 20 22 29 29 3b 7d 29 2c 62 3d 7b 7d 2c 66 3d 62 2e 24 69 6e 6a 65 63 74 6f 72 3d 67 28 62 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 75 2e 67 65 74 28 6e 2b 22 50 72 6f 76 69 64 65 72 22 2c 74 29 3b 72 65 74 75 72 6e 20 66 2e 69 6e 76 6f 6b 65 28 72 2e 24 67 65 74 2c 72 2c 69 2c 6e 29 7d 29 3b 72 65 74 75 72 6e 20 72 28 64 28 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 2e 69 6e 76 6f 6b 65 28 6e 7c 7c 68 29 7d 29 2c 66 7d 66 75 6e 63 74 69 6f 6e 20 68 76 28 29 Data Ascii: })}}}},u=y.$injector=g(y,function(n,t){nt.isString(t)&&v.push(t);throw ui("unpr",v.join(" <- "));}),b={},f=b.$injector=g(b,function(n,t){var r=u.get(n+"Provider",t);return f.invoke(r.$get,r,i,n)});return r(d(n),function(n){f.invoke(n\|\|h)}),f}function hv()
2023-08-10 21:19:35 UTC	10089	IN	Data Raw: 6e 74 65 78 74 3d 3d 3d 75 26 26 28 6e 2e 63 6f 6e 74 65 78 74 3d 72 29 3b 62 72 65 61 6b 7d 66 6f 72 28 73 26 26 73 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 72 2c 75 29 2c 6e 3d 74 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 29 2c 66 28 72 29 2e 64 61 74 61 28 66 28 75 29 2e 64 61 74 61 28 29 29 2c 63 74 3f 28 68 66 3d 21 30 2c 63 74 2e 63 6c 65 61 6e 44 61 74 61 28 5b 75 5d 29 29 3a 64 65 6c 65 74 65 20 66 2e 63 61 63 68 65 5b 75 5b 66 2e 65 78 70 61 6e 64 6f 5d 5d 2c 75 3d 31 2c 68 3d 69 2e 6c 65 6e 67 74 68 3b 75 3c 68 3b 75 2b 2b 29 73 3d 69 5b 75 5d 2c 66 28 73 29 2e 72 65 6d 6f 76 65 28 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 2c 64 65 6c 65 74 65 20 69 5b Data Ascii: ntext===u&&(n.context=r);break}for(s&&s.replaceChild(r,u),n=t.createDocumentFragment(),n.appendChild(u),f(r).data(f(u).data()),ct?(hf=!0,ct.cleanData([u])):delete f.cache[u[f.expando]],u=1,h=i.length;u<h;u++)s=i[u],f(s).remove(),n.appendChild(s),delete i[
2023-08-10 21:19:35 UTC	10105	IN	Data Raw: 6f 6e 20 74 61 28 29 7b 76 61 72 20 6e 3d 21 30 2c 74 3d 74 68 69 73 3b 74 68 69 73 2e 64 65 62 75 67 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 75 28 74 29 3f 28 6e 3d 74 2c 74 68 69 73 29 3a 6e 7d 2c 74 68 69 73 2e 24 67 65 74 3d 5b 22 24 77 69 6e 64 6f 77 22 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 6e 29 7b 72 65 74 75 72 6e 20 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 26 26 28 6e 2e 73 74 61 63 6b 3f 6e 3d 6e 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 3d 6e 2e 73 74 61 63 6b 2e 69 6e 64 65 78 4f 66 28 6e 2e 6d 65 73 73 61 67 65 29 3f 22 45 72 72 6f 72 3a 20 22 2b 6e 2e 6d 65 73 73 61 67 65 2b 22 5c 6e 22 2b 6e 2e 73 74 61 63 6b 3a 6e 2e 73 74 61 63 6b 3a 6e 2e 73 6f 75 72 Data Ascii: on ta(){var n=!0,t=this;this.debugEnabled=function(t){return u(t)?(n=t,this):n},this.$get=["$window",function(i){function f(n){return n instanceof Error&&(n.stack?n=n.message&&-1===n.stack.indexOf(n.message)?"Error: "+n.message+"\n"+n.stack:n.stack:n.sour
2023-08-10 21:19:35 UTC	10121	IN	Data Raw: 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 75 2e 67 65 74 54 72 75 73 74 65 64 28 6e 2c 74 29 7d 29 7d 3b 76 61 72 20 66 3d 75 2e 70 61 72 73 65 41 73 2c 65 3d 75 2e 67 65 74 54 72 75 73 74 65 64 2c 6f 3d 75 2e 74 72 75 73 74 41 73 3b 72 65 74 75 72 6e 20 72 28 65 74 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 69 3d 79 28 74 29 3b 75 5b 63 72 28 22 70 61 72 73 65 5f 61 73 5f 22 2b 69 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 28 6e 2c 74 29 7d 2c 75 5b 63 72 28 22 67 65 74 5f 74 72 75 73 74 65 64 5f 22 2b 69 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 6e 2c 74 29 7d 2c 75 5b 63 72 28 22 74 72 75 73 74 5f 61 73 5f 22 2b 69 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: tion(t){return u.getTrusted(n,t)})};var f=u.parseAs,e=u.getTrusted,o=u.trustAs;return r(et,function(n,t){var i=y(t);u[cr("parse_as_"+i)]=function(t){return f(n,t)},u[cr("get_trusted_"+i)]=function(t){return e(n,t)},u[cr("trust_as_"+i)]=function(t){return
2023-08-10 21:19:35 UTC	10282	IN	Data Raw: 75 72 6e 20 61 75 28 6e 2c 22 24 69 6e 6a 65 63 74 6f 72 22 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 74 29 7d 2c 68 61 73 43 6c 61 73 73 3a 68 75 2c 63 73 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 69 66 28 74 3d 63 72 28 74 29 2c 75 28 69 29 29 6e 2e 73 74 79 6c 65 5b 74 5d 3d 69 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 2e 73 74 79 6c 65 5b 74 5d 7d 2c 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 66 3d 79 28 74 29 3b 69 66 28 72 72 5b 66 5d 29 69 66 28 75 28 72 29 29 72 3f 28 6e 5b 74 5d 3d 21 30 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 66 29 29 3a 28 6e 5b 74 5d 3d 21 31 2c 6e 2e 72 65 6d 6f 76 65 41 74 Data Ascii: urn au(n,"$injector")},removeAttr:function(n,t){n.removeAttribute(t)},hasClass:hu,css:function(n,t,i){if(t=cr(t),u(i))n.style[t]=i;else return n.style[t]},attr:function(n,t,r){var f=y(t);if(rr[f])if(u(r))r?(n[t]=!0,n.setAttribute(t,f)):(n[t]=!1,n.removeAt
2023-08-10 21:19:35 UTC	10298	IN	Data Raw: 5d 2c 74 29 3a Data Ascii: ],t):
2023-08-10 21:19:35 UTC	10330	IN	Data Raw: 69 7d 2c 7b 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 75 2c 66 29 7b 76 61 72 20 6f 3d 76 74 28 72 28 69 2c 66 29 2c 74 29 2c 65 3d 75 74 28 6e 28 69 2c 66 29 2c 74 29 3b 72 65 74 75 72 6e 20 65 7c 7c 6e 2e 61 73 73 69 67 6e 28 69 2c 65 3d 7b 7d 2c 66 29 2c 65 5b 6f 5d 3d 75 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 43 61 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 65 3d 5b 5d 2c 66 2c 72 3b 69 66 28 22 29 22 21 3d 3d 74 68 69 73 2e 70 65 65 6b 54 6f 6b 65 6e 28 29 2e 74 65 78 74 29 64 6f 20 65 2e 70 75 73 68 28 74 68 69 73 2e 65 78 70 72 65 73 73 69 6f 6e 28 29 29 3b 77 68 69 6c 65 28 74 68 69 73 2e 65 78 70 65 63 74 28 22 2c 22 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 73 75 6d 65 28 22 29 22 29 2c 66 3d 74 68 69 Data Ascii: i},{assign:function(i,u,f){var o=vt(r(i,f),t),e=ut(n(i,f),t);return e\|\|n.assign(i,e={},f),e[o]=u}})},functionCall:function(n,t){var e=[],f,r;if(")"!==this.peekToken().text)do e.push(this.expression());while(this.expect(","));return this.consume(")"),f=thi
2023-08-10 21:19:35 UTC	10346	IN	Data Raw: 75 3d 2f 5e 77 68 65 6e 28 4d 69 6e 75 73 29 3f 28 2e 2b 29 24 2f 3b 72 65 74 75 72 6e 7b 72 65 73 74 72 69 63 74 3a 22 45 41 22 2c 6c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 65 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 77 28 6e 29 7b 65 2e 74 65 78 74 28 6e 7c 7c 22 22 29 7d 76 61 72 20 63 3d 6f 2e 63 6f 75 6e 74 2c 6c 3d 6f 2e 24 61 74 74 72 2e 77 68 65 6e 26 26 65 2e 61 74 74 72 28 6f 2e 24 61 74 74 72 2e 77 68 65 6e 29 2c 61 3d 6f 2e 6f 66 66 73 65 74 7c 7c 30 2c 73 3d 66 2e 24 65 76 61 6c 28 6c 29 7c 7c 7b 7d 2c 76 3d 7b 7d 2c 6c 3d 74 2e 73 74 61 72 74 53 79 6d 62 6f 6c 28 29 2c 62 3d 74 2e 65 6e 64 53 79 6d 62 6f 6c 28 29 2c 6b 3d 6c 2b 63 2b 22 2d 22 2b 61 2b 62 2c 70 3d 6e 74 2e 6e 6f 6f 70 2c 68 3b 72 28 6f 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c Data Ascii: u=/^when(Minus)?(.+)$/;return{restrict:"EA",link:function(f,e,o){function w(n){e.text(n\|\|"")}var c=o.count,l=o.$attr.when&&e.attr(o.$attr.when),a=o.offset\|\|0,s=f.$eval(l)\|\|{},v={},l=t.startSymbol(),b=t.endSymbol(),k=l+c+"-"+a+b,p=nt.noop,h;r(o,function(n,
2023-08-10 21:19:35 UTC	10362	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 72 65 73 6f 6c 76 65 28 29 7d 29 7d 29 2c 72 2e 70 72 6f 6d 69 73 65 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 6e 29 7b 69 66 28 79 28 6e 29 29 72 65 74 75 72 6e 20 6e 2e 74 65 6d 70 43 6c 61 73 73 65 73 26 26 76 28 6e 2e 74 65 6d 70 43 6c 61 73 73 65 73 29 26 26 28 6e 2e 74 65 6d 70 43 6c 61 73 73 65 73 3d 6e 2e 74 65 6d 70 43 6c 61 73 73 65 73 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 6e 2c 74 2c 69 29 7b 76 61 72 20 65 2c 6f 2c 72 2c 75 3b 72 65 74 75 72 6e 20 69 3d 69 7c 7c 7b 7d 2c 65 3d 7b 7d 2c 66 28 69 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 28 74 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 5b 74 5d 3d 6e 7d 29 7d 29 2c 6f 3d 4f 62 Data Ascii: unction(){r.resolve()})}),r.promise}function ut(n){if(y(n))return n.tempClasses&&v(n.tempClasses)&&(n.tempClasses=n.tempClasses.split(/\s+/)),n}function st(n,t,i){var e,o,r,u;return i=i\|\|{},e={},f(i,function(n,t){f(t.split(" "),function(t){e[t]=n})}),o=Ob
2023-08-10 21:19:35 UTC	10378	IN	Data Raw: 65 72 79 3a 7b 6d 65 74 68 6f 64 3a 22 47 45 54 22 2c 69 73 41 72 72 61 79 3a 21 30 7d 2c 72 65 6d 6f 76 65 3a 7b 6d 65 74 68 6f 64 3a 22 44 45 4c 45 54 45 22 7d 2c 22 64 65 6c 65 74 65 22 3a 7b 6d 65 74 68 6f 64 3a 22 44 45 4c 45 54 45 22 7d 7d 7d 2c 74 68 69 73 2e 24 67 65 74 3d 5b 22 24 68 74 74 70 22 2c 22 24 71 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 69 29 7b 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 3d 74 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 73 3d 68 28 7b 7d 2c 6e 2e 64 65 66 61 75 6c 74 73 2c 69 29 2c 74 68 69 73 2e 75 72 6c 50 61 72 61 6d 73 3d 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 70 2c 77 2c 62 2c 6b 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6e 2c 74 29 7b 76 61 72 20 75 3d 7b 7d 3b 72 65 74 75 72 Data Ascii: ery:{method:"GET",isArray:!0},remove:{method:"DELETE"},"delete":{method:"DELETE"}}},this.$get=["$http","$q",function(e,o){function l(t,i){this.template=t,this.defaults=h({},n.defaults,i),this.urlParams={}}function a(p,w,b,k){function g(n,t){var u={};retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
245	192.168.2.3	50097	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	9885	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/angularextensions.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	9919	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 165961 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:13:34 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=5946733376191066419764662729321614651"}],"include_subdomains ":true} Server: ECAcc (muc/3361) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: d5a5c385-201e-005b-494d-caf3fa000000 Content-Length: 1066514 Connection: close
2023-08-10 21:19:35 UTC	9920	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 3b 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 61 6e 67 75 6c 61 72 2d 74 6f 75 72 22 2c 5b 22 61 6e 67 75 6c 61 72 2d 74 6f 75 72 2e 74 6f 75 72 22 5d 29 2c 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 61 6e 67 75 6c 61 72 2d 74 6f 75 72 2e 74 6f 75 72 22 2c 5b 5d 29 2e 63 6f 6e 73 74 61 6e 74 28 22 74 6f 75 72 43 6f 6e 66 69 67 22 2c 7b 70 6c 61 63 65 6d 65 6e 74 3a 22 74 6f 70 22 2c 61 6e 69 6d 61 74 69 6f 6e 3a 21 30 2c 6e 65 78 74 4c 61 62 65 6c 3a 22 4e 65 78 74 22 2c 73 63 72 6f 6c 6c 53 70 65 65 64 3a 35 30 30 2c 6d 61 72 67 69 6e 3a 32 38 2c 62 61 63 6b 44 72 6f 70 3a 21 31 2c 75 73 65 53 6f 75 72 63 65 53 63 6f 70 65 3a 21 31 2c 63 6f 6e 74 61 69 6e Data Ascii: !function(n,t,i){"use strict";;angular.module("angular-tour",["angular-tour.tour"]),angular.module("angular-tour.tour",[]).constant("tourConfig",{placement:"top",animation:!0,nextLabel:"Next",scrollSpeed:500,margin:28,backDrop:!1,useSourceScope:!1,contain
2023-08-10 21:19:35 UTC	9936	IN	Data Raw: 6c 61 74 65 2f 61 63 63 6f 72 64 69 6f 6e 2f 61 63 63 6f 72 64 69 6f 6e 2e 68 74 6d 6c 27 3b 0a 20 20 20 20 7d 0a 20 20 7d 3b 0a 7d 29 0a 0a 2f 2f 20 54 68 65 20 61 63 63 6f 72 64 69 6f 6e 2d 67 72 6f 75 70 20 64 69 72 65 63 74 69 76 65 20 69 6e 64 69 63 61 74 65 73 20 61 20 62 6c 6f 63 6b 20 6f 66 20 68 74 6d 6c 20 74 68 61 74 20 77 69 6c 6c 20 65 78 70 61 6e 64 20 61 6e 64 20 63 6f 6c 6c 61 70 73 65 20 69 6e 20 61 6e 20 61 63 63 6f 72 64 69 6f 6e 0a 2e 64 69 72 65 63 74 69 76 65 28 27 75 69 62 41 63 63 6f 72 64 69 6f 6e 47 72 6f 75 70 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 72 65 71 75 69 72 65 3a 20 27 5e 75 69 62 41 63 63 6f 72 64 69 6f 6e 27 2c 20 20 20 20 20 20 20 20 20 2f 2f 20 57 65 20 6e 65 65 Data Ascii: late/accordion/accordion.html'; } };})// The accordion-group directive indicates a block of html that will expand and collapse in an accordion.directive('uibAccordionGroup', function() { return { require: '^uibAccordion', // We nee
2023-08-10 21:19:35 UTC	10041	IN	Data Raw: 6f 6e 20 66 72 6f 6d 20 6f 63 63 75 72 72 69 6e 67 20 69 66 20 74 68 65 72 65 20 69 73 20 61 6c 72 65 61 64 79 20 6f 6e 65 20 69 6e 20 70 72 6f 67 72 65 73 73 0a 20 20 20 20 69 66 20 28 6e 65 78 74 53 6c 69 64 65 20 26 26 20 6e 65 78 74 53 6c 69 64 65 20 21 3d 3d 20 73 65 6c 66 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 20 26 26 20 21 24 73 63 6f 70 65 2e 24 63 75 72 72 65 6e 74 54 72 61 6e 73 69 74 69 6f 6e 29 20 7b 0a 20 20 20 20 20 20 67 6f 4e 65 78 74 28 6e 65 78 74 53 6c 69 64 65 2c 20 6e 65 78 74 49 6e 64 65 78 2c 20 64 69 72 65 63 74 69 6f 6e 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 6f 4e 65 78 74 28 73 6c 69 64 65 2c 20 69 6e 64 65 78 2c 20 64 69 72 65 63 74 69 6f 6e 29 20 7b 0a 20 20 20 20 2f 2f 20 53 63 6f 70 Data Ascii: on from occurring if there is already one in progress if (nextSlide && nextSlide !== self.currentSlide && !$scope.$currentTransition) { goNext(nextSlide, nextIndex, direction); } }; function goNext(slide, index, direction) { // Scop
2023-08-10 21:19:35 UTC	10057	IN	Data Raw: 63 6f 6e Data Ascii: con
2023-08-10 21:19:35 UTC	10057	IN	Data Raw: 73 75 6d 65 64 20 70 61 72 74 20 6f 66 20 66 6f 72 6d 61 74 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 69 6e 64 65 78 20 2b 20 31 2c 20 6e 20 3d 20 69 6e 64 65 78 20 2b 20 63 6f 64 65 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 67 65 78 5b 69 5d 20 3d 20 27 27 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 61 74 5b 69 5d 20 3d 20 27 24 27 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 6f 72 6d 61 74 20 3d 20 66 6f 72 6d 61 74 2e 6a 6f 69 6e 28 27 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 6d 61 70 2e 70 75 73 68 28 7b 20 69 6e 64 65 78 3a 20 69 6e 64 65 78 2c 20 61 70 70 6c 79 3a 20 64 61 74 61 2e 61 70 70 6c 79 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 Data Ascii: sumed part of format for (var i = index + 1, n = index + code.length; i < n; i++) { regex[i] = ''; format[i] = '$'; } format = format.join(''); map.push({ index: index, apply: data.apply }); }
2023-08-10 21:19:35 UTC	10073	IN	Data Raw: 30 2c 20 64 61 74 65 3b 0a 20 20 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6e 29 20 7b 0a 20 20 20 20 20 20 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 63 75 72 72 65 6e 74 29 3b 0a 20 20 20 20 20 20 64 61 74 65 73 5b 69 2b 2b 5d 20 3d 20 64 61 74 65 3b 0a 20 20 20 20 20 20 63 75 72 72 65 6e 74 2e 73 65 74 44 61 74 65 28 63 75 72 72 65 6e 74 2e 67 65 74 44 61 74 65 28 29 20 2b 20 31 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 64 61 74 65 73 3b 0a 20 20 7d 3b 0a 0a 20 20 74 68 69 73 2e 5f 72 65 66 72 65 73 68 56 69 65 77 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 79 65 61 72 20 3d 20 74 68 69 73 2e 61 63 74 69 76 65 44 61 74 65 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 0a 20 20 20 20 20 20 6d 6f 6e 74 68 20 Data Ascii: 0, date; while (i < n) { date = new Date(current); dates[i++] = date; current.setDate(current.getDate() + 1); } return dates; }; this._refreshView = function() { var year = this.activeDate.getFullYear(), month
2023-08-10 21:19:35 UTC	10170	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 65 29 20 7b 0a 20 20 20 20 69 66 20 28 64 61 74 65 20 3d 3d 3d 20 27 74 6f 64 61 79 27 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 74 6f 64 61 79 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 69 66 20 28 61 6e 67 75 6c 61 72 2e 69 73 44 61 74 65 28 73 63 6f 70 65 2e 64 61 74 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 73 63 6f 70 65 2e 64 61 74 65 29 3b 0a 20 20 20 20 20 20 20 20 64 61 74 65 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 74 6f 64 61 79 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 20 74 6f 64 61 79 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 20 74 6f 64 61 79 2e 67 65 74 44 61 74 65 28 29 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 Data Ascii: function(date) { if (date === 'today') { var today = new Date(); if (angular.isDate(scope.date)) { date = new Date(scope.date); date.setFullYear(today.getFullYear(), today.getMonth(), today.getDate()); } else {
2023-08-10 21:19:35 UTC	10186	IN	Data Raw: 70 61 72 73 65 2c 20 64 72 6f 70 64 6f 77 6e 43 6f 6e 66 69 67 2c 20 75 69 62 44 72 6f 70 64 6f 77 6e 53 65 72 76 69 63 65 2c 20 24 61 6e 69 6d 61 74 65 2c 20 24 70 6f 73 69 74 69 6f 6e 2c 20 24 64 6f 63 75 6d 65 6e 74 2c 20 24 63 6f 6d 70 69 6c 65 2c 20 24 74 65 6d 70 6c 61 74 65 52 65 71 75 65 73 74 29 20 7b 0a 20 20 76 61 72 20 73 65 6c 66 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 73 63 6f 70 65 20 3d 20 24 73 63 6f 70 65 2e 24 6e 65 77 28 29 2c 20 2f 2f 20 63 72 65 61 74 65 20 61 20 63 68 69 6c 64 20 73 63 6f 70 65 20 73 6f 20 77 65 20 61 72 65 20 6e 6f 74 20 70 6f 6c 6c 75 74 69 6e 67 20 6f 72 69 67 69 6e 61 6c 20 6f 6e 65 0a 20 20 20 20 74 65 6d 70 6c 61 74 65 53 63 6f 70 65 2c 0a 20 20 20 20 6f 70 65 6e 43 6c 61 73 73 20 3d 20 64 72 6f 70 64 6f 77 6e Data Ascii: parse, dropdownConfig, uibDropdownService, $animate, $position, $document, $compile, $templateRequest) { var self = this, scope = $scope.$new(), // create a child scope so we are not polluting original one templateScope, openClass = dropdown
2023-08-10 21:19:35 UTC	10202	IN	Data Raw: 64 6f 77 6e 43 74 72 6c 2e 74 6f 67 67 6c 65 45 6c 65 6d 65 6e 74 20 3d 20 65 6c 65 6d 65 6e 74 3b 0a 0a 20 20 20 20 20 20 76 61 72 20 74 6f 67 67 6c 65 44 72 6f 70 64 6f 77 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 27 64 69 73 61 62 6c 65 64 27 29 20 26 26 20 21 61 74 74 72 73 2e 64 69 73 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 63 6f 70 65 2e 24 61 70 70 6c 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 72 6f 70 64 6f 77 6e 43 74 72 6c 2e 74 6f 67 67 6c 65 28 29 3b 0a 20 20 20 20 20 20 20 Data Ascii: downCtrl.toggleElement = element; var toggleDropdown = function(event) { event.preventDefault(); if (!element.hasClass('disabled') && !attrs.disabled) { scope.$apply(function() { dropdownCtrl.toggle();
2023-08-10 21:19:35 UTC	10218	IN	Data Raw: 27 3a 20 6f 70 65 6e 65 64 57 69 6e 64 6f 77 73 2e 6c 65 6e 67 74 68 28 29 20 2d 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 27 61 6e 69 6d 61 74 65 27 3a 20 27 61 6e 69 6d 61 74 65 27 0a 20 20 20 20 20 20 20 20 7d 29 2e 68 74 6d 6c 28 6d 6f 64 61 6c 2e 63 6f 6e 74 65 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 6f 64 61 6c 2e 61 6e 69 6d 61 74 69 6f 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 61 6e 67 75 6c 61 72 44 6f 6d 45 6c 2e 61 74 74 72 28 27 6d 6f 64 61 6c 2d 61 6e 69 6d 61 74 69 6f 6e 27 2c 20 27 74 72 75 65 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 6f 64 61 6c 44 6f 6d 45 6c 20 3d 20 24 63 6f 6d 70 69 6c 65 28 61 6e 67 75 6c 61 72 44 6f 6d 45 6c 29 28 6d 6f 64 61 6c 2e 73 63 6f 70 65 29 3b 0a 20 Data Ascii: ': openedWindows.length() - 1, 'animate': 'animate' }).html(modal.content); if (modal.animation) { angularDomEl.attr('modal-animation', 'true'); } var modalDomEl = $compile(angularDomEl)(modal.scope);
2023-08-10 21:19:35 UTC	10234	IN	Data Raw: 20 20 20 20 27 24 6c 6f 67 27 2c 20 27 24 6d 6f 64 61 6c 53 75 70 70 72 65 73 73 57 61 72 6e 69 6e 67 27 2c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 24 6c 6f 67 2c 20 24 6d 6f 64 61 6c 53 75 70 70 72 65 73 73 57 61 72 6e 69 6e 67 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 6c 69 6e 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 24 73 63 6f 70 65 2c 20 24 65 6c 65 6d 65 6e 74 2c 20 24 61 74 74 72 73 2c 20 63 6f 6e 74 72 6f 6c 6c 65 72 2c 20 24 74 72 61 6e 73 63 6c 75 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 24 6d 6f 64 61 6c 53 75 70 70 72 65 73 73 57 61 72 6e 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 24 6c 6f 67 2e 77 61 72 6e 28 27 6d 6f 64 61 6c 2d 74 72 61 6e 73 63 6c 75 64 65 20 69 73 20 6e 6f 77 20 64 65 70 Data Ascii: '$log', '$modalSuppressWarning', function ($log, $modalSuppressWarning) { return { link: function($scope, $element, $attrs, controller, $transclude) { if (!$modalSuppressWarning) { $log.warn('modal-transclude is now dep
2023-08-10 21:19:35 UTC	10250	IN	Data Raw: 6e 74 45 78 70 3a 20 66 61 6c 73 65 0a 20 20 7d 3b 0a 0a 20 20 2f 2f 20 44 65 66 61 75 6c 74 20 68 69 64 65 20 74 72 69 67 67 65 72 73 20 66 6f 72 20 65 61 63 68 20 73 68 6f 77 20 74 72 69 67 67 65 72 0a 20 20 76 61 72 20 74 72 69 67 67 65 72 4d 61 70 20 3d 20 7b 0a 20 20 20 20 27 6d 6f 75 73 65 65 6e 74 65 72 27 3a 20 27 6d 6f 75 73 65 6c 65 61 76 65 27 2c 0a 20 20 20 20 27 63 6c 69 63 6b 27 3a 20 27 63 6c 69 63 6b 27 2c 0a 20 20 20 20 27 66 6f 63 75 73 27 3a 20 27 62 6c 75 72 27 2c 0a 20 20 20 20 27 6e 6f 6e 65 27 3a 20 27 27 0a 20 20 7d 3b 0a 0a 20 20 2f 2f 20 54 68 65 20 6f 70 74 69 6f 6e 73 20 73 70 65 63 69 66 69 65 64 20 74 6f 20 74 68 65 20 70 72 6f 76 69 64 65 72 20 67 6c 6f 62 61 6c 6c 79 2e 0a 20 20 76 61 72 20 67 6c 6f 62 61 6c 4f 70 74 69 6f Data Ascii: ntExp: false }; // Default hide triggers for each show trigger var triggerMap = { 'mouseenter': 'mouseleave', 'click': 'click', 'focus': 'blur', 'none': '' }; // The options specified to the provider globally. var globalOptio
2023-08-10 21:19:35 UTC	10266	IN	Data Raw: 65 6e 64 54 6f 42 6f 64 Data Ascii: endToBod
2023-08-10 21:19:35 UTC	10266	IN	Data Raw: 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 63 6f 70 65 2e 24 6f 6e 28 27 24 6c 6f 63 61 74 69 6f 6e 43 68 61 6e 67 65 53 75 63 63 65 73 73 27 2c 20 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 73 65 54 6f 6f 6c 74 69 70 4f 6e 4c 6f 63 61 74 69 6f 6e 43 68 61 6e 67 65 53 75 63 63 65 73 73 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 74 53 63 6f 70 65 2e 69 73 4f 70 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 6f 6c 74 69 70 20 69 73 20 Data Ascii: y) { scope.$on('$locationChangeSuccess', function closeTooltipOnLocationChangeSuccess() { if (ttScope.isOpen) { hide(); } }); } // Make sure tooltip is
2023-08-10 21:19:35 UTC	10298	IN	Data Raw: 7b 0a 20 20 20 20 20 20 70 72 6f 67 72 65 73 73 43 74 72 6c 2e 61 64 64 42 61 72 28 73 63 6f 70 65 2c 20 65 6c 65 6d 65 6e 74 2c 20 61 74 74 72 73 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 3b 0a 7d 29 0a 0a 2e 64 69 72 65 63 74 69 76 65 28 27 75 69 62 50 72 6f 67 72 65 73 73 62 61 72 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 72 65 70 6c 61 63 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 74 72 61 6e 73 63 6c 75 64 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 63 6f 6e 74 72 6f 6c 6c 65 72 3a 20 27 55 69 62 50 72 6f 67 72 65 73 73 43 6f 6e 74 72 6f 6c 6c 65 72 27 2c 0a 20 20 20 20 73 63 6f 70 65 3a 20 7b 0a 20 20 20 20 20 20 76 61 6c 75 65 3a 20 27 3d 27 2c 0a 20 20 20 20 20 20 6d 61 78 3a 20 27 3d 3f 27 2c 0a 20 20 20 20 20 Data Ascii: { progressCtrl.addBar(scope, element, attrs); } };}).directive('uibProgressbar', function() { return { replace: true, transclude: true, controller: 'UibProgressController', scope: { value: '=', max: '=?',
2023-08-10 21:19:35 UTC	10314	IN	Data Raw: 4f 3a 20 72 65 6d 6f 76 65 20 61 66 74 65 72 20 64 65 70 72 65 63 61 74 69 6f 6e 20 72 65 6d 6f 76 61 6c 0a 20 20 20 20 20 20 6e 6f 64 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 78 2d 74 61 62 2d 68 65 61 64 69 6e 67 27 29 20 7c 7c 20 2f 2f 20 54 4f 44 4f 3a 20 72 65 6d 6f 76 65 20 61 66 74 65 72 20 64 65 70 72 65 63 61 74 69 6f 6e 20 72 65 6d 6f 76 61 6c 0a 20 20 20 20 20 20 6e 6f 64 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 75 69 62 2d 74 61 62 2d 68 65 61 64 69 6e 67 27 29 20 7c 7c 0a 20 20 20 20 20 20 6e 6f 64 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 69 62 2d 74 61 62 2d 68 65 61 64 69 6e 67 27 29 20 7c 7c 0a 20 20 20 20 20 20 6e 6f 64 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 27 78 2d 75 69 62 2d 74 61 62 2d 68 Data Ascii: O: remove after deprecation removal node.hasAttribute('x-tab-heading') \|\| // TODO: remove after deprecation removal node.hasAttribute('uib-tab-heading') \|\| node.hasAttribute('data-uib-tab-heading') \|\| node.hasAttribute('x-uib-tab-h
2023-08-10 21:19:35 UTC	10437	IN	Data Raw: 2c 0a 20 20 20 20 63 6f 6e 74 72 6f 6c 6c 65 72 3a 20 27 55 69 62 54 69 6d 65 70 69 63 6b 65 72 43 6f 6e 74 72 6f 6c 6c 65 72 27 2c 0a 20 20 20 20 63 6f 6e 74 72 6f 6c 6c 65 72 41 73 3a 20 27 74 69 6d 65 70 69 63 6b 65 72 27 2c 0a 20 20 20 20 72 65 70 6c 61 63 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 73 63 6f 70 65 3a 20 7b 7d 2c 0a 20 20 20 20 74 65 6d 70 6c 61 74 65 55 72 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 61 74 74 72 73 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 74 74 72 73 2e 74 65 6d 70 6c 61 74 65 55 72 6c 20 7c 7c 20 27 74 65 6d 70 6c 61 74 65 2f 74 69 6d 65 70 69 63 6b 65 72 2f 74 69 6d 65 70 69 63 6b 65 72 2e 68 74 6d 6c 27 3b 0a 20 20 20 20 7d 2c 0a 20 20 20 20 6c 69 6e 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 73 Data Ascii: , controller: 'UibTimepickerController', controllerAs: 'timepicker', replace: true, scope: {}, templateUrl: function(element, attrs) { return attrs.templateUrl \|\| 'template/timepicker/timepicker.html'; }, link: function(s
2023-08-10 21:19:35 UTC	10453	IN	Data Raw: 73 6f 6d 65 74 68 69 6e 67 20 70 72 65 76 69 6f 75 73 6c 79 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 65 6c 43 74 72 6c 2e 24 73 65 74 56 61 6c 69 64 69 74 79 28 27 65 64 69 74 61 62 6c 65 27 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 65 6c 43 74 72 6c 2e 24 73 65 74 56 61 6c 69 64 69 74 79 28 27 65 64 69 74 61 62 6c 65 27 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 6d 6f 64 65 6c 43 74 72 6c 2e 24 Data Ascii: something previously. modelCtrl.$setValidity('editable', true); return null; } else { modelCtrl.$setValidity('editable', false); return undefined; } } }); modelCtrl.$
2023-08-10 21:19:35 UTC	10469	IN	Data Raw: 69 73 20 63 6f 6e 73 69 64 65 72 65 64 20 74 6f 20 62 65 20 76 61 6c 69 64 2e 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 69 73 45 64 69 74 61 62 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 64 65 6c 43 74 72 6c 2e 24 73 65 74 56 61 6c 69 64 69 74 79 28 27 65 64 69 74 61 62 6c 65 27 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 6e 70 75 74 46 6f 72 6d 61 74 74 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 63 61 6c 73 2e 24 6d 6f 64 65 6c 20 3d 20 6d 6f 64 65 6c 56 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 6e 70 75 74 46 6f 72 6d 61 74 74 65 72 28 6f 72 69 67 69 6e 61 6c 53 63 6f 70 65 2c 20 6c 6f 63 61 6c 73 29 3b 0a 20 20 Data Ascii: is considered to be valid. if (!isEditable) { modelCtrl.$setValidity('editable', true); } if (inputFormatter) { locals.$model = modelValue; return inputFormatter(originalScope, locals);
2023-08-10 21:19:35 UTC	10485	IN	Data Raw: 69 73 44 69 73 61 Data Ascii: isDisa
2023-08-10 21:19:35 UTC	10485	IN	Data Raw: 62 6c 65 64 28 27 74 6f 64 61 79 27 29 5c 22 3e 7b 7b 20 67 65 74 54 65 78 74 28 27 63 75 72 72 65 6e 74 27 29 20 7d 7d 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 22 20 2b 0a 20 20 20 20 22 09 09 09 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 5c 22 62 75 74 74 6f 6e 5c 22 20 63 6c 61 73 73 3d 5c 22 62 74 6e 20 62 74 6e 2d 73 6d 20 62 74 6e 2d 64 61 6e 67 65 72 5c 22 20 6e 67 2d 63 6c 69 63 6b 3d 5c 22 73 65 6c 65 63 74 28 6e 75 6c 6c 29 5c 22 3e 7b 7b 20 67 65 74 54 65 78 74 28 27 63 6c 65 61 72 27 29 20 7d 7d 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 22 20 2b 0a 20 20 20 20 22 09 09 3c 2f 73 70 61 6e 3e 5c 6e 22 20 2b 0a 20 20 20 20 22 09 09 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 5c 22 62 75 74 74 6f 6e 5c 22 20 63 6c 61 73 73 3d 5c 22 62 74 6e 20 62 74 6e 2d 73 6d 20 62 74 6e Data Ascii: bled('today')\">{{ getText('current') }}</button>\n" + "<button type=\"button\" class=\"btn btn-sm btn-danger\" ng-click=\"select(null)\">{{ getText('clear') }}</button>\n" + "</span>\n" + "<button type=\"button\" class=\"btn btn-sm btn
2023-08-10 21:19:35 UTC	10501	IN	Data Raw: 2b 2b 29 69 66 28 75 3d 69 5b 72 5d 2c 6e 5b 75 5d 21 3d 74 5b 75 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6e 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 66 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 5b 6e 5d 3d 74 5b 6e 5d 7d 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 6e 29 7b 76 61 72 20 74 3d 7b 7d 2c 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 3b 72 65 74 75 72 6e 20 66 28 69 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 20 69 6e 20 6e 26 26 28 74 5b 69 5d 3d 6e 5b Data Ascii: ++)if(u=i[r],n[u]!=t[u])return!1;return!0}function d(n,t){var i={};return f(n,function(n){i[n]=t[n]}),i}function dt(n){var t={},i=Array.prototype.concat.apply(Array.prototype,Array.prototype.slice.call(arguments,1));return f(i,function(i){i in n&&(t[i]=n[
2023-08-10 21:19:35 UTC	10517	IN	Data Raw: 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 73 75 63 68 20 72 65 6c 6f 61 64 20 73 74 61 74 65 20 27 22 2b 28 65 28 66 2e 72 65 6c 6f 61 64 29 3f 66 2e 72 65 6c 6f 61 64 3a 66 2e 72 65 6c 6f 61 64 2e 6e 61 6d 65 29 2b 22 27 22 29 3b 66 6f 72 28 3b 73 26 26 73 3d 3d 3d 65 74 5b 68 5d 26 26 73 21 3d 3d 64 74 3b 29 79 3d 63 74 5b 68 5d 3d 73 2e 6c 6f 63 61 6c 73 2c 68 2b 2b 2c 73 3d 6e 74 5b 68 5d 7d 7d 65 6c 73 65 20 66 6f 72 28 3b 73 26 26 73 3d 3d 3d 65 74 5b 68 5d 26 26 73 2e 6f 77 6e 50 61 72 61 6d 73 2e 24 24 65 71 75 61 6c 73 28 69 2c 62 29 3b 29 79 3d 63 74 5b 68 5d 3d 73 2e 6c 6f 63 61 6c 73 2c 68 2b 2b 2c 73 3d 6e 74 5b 68 5d 3b 69 66 28 61 74 28 74 2c 69 2c 70 2c 62 2c 79 2c 66 29 29 72 65 74 75 72 6e 20 68 74 26 26 28 69 5b 22 23 22 5d 3d Data Ascii: ow new Error("No such reload state '"+(e(f.reload)?f.reload:f.reload.name)+"'");for(;s&&s===et[h]&&s!==dt;)y=ct[h]=s.locals,h++,s=nt[h]}}else for(;s&&s===et[h]&&s.ownParams.$$equals(i,b);)y=ct[h]=s.locals,h++,s=nt[h];if(at(t,i,p,b,y,f))return ht&&(i["#"]=
2023-08-10 21:19:35 UTC	10533	IN	Data Raw: 6e 2e 6d 65 6e 75 49 74 65 6d 73 3d 6e 2e 64 65 66 61 75 6c 74 4d 65 6e 75 49 74 65 6d 73 7d 29 3b 6e 2e 24 6f 6e 28 22 24 64 65 73 74 72 6f 79 22 2c 74 29 7d 2c 73 6f 72 74 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 67 72 69 64 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 53 6f 72 74 69 6e 67 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 2e 63 6f 6c 26 26 6e 2e 63 6f 6c 26 26 6e 2e 63 6f 6c 2e 65 6e 61 62 6c 65 53 6f 72 74 69 6e 67 3f 21 30 3a 21 31 7d 2c 69 73 41 63 74 69 76 65 53 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 2e 63 6f 6c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 2e Data Ascii: n.menuItems=n.defaultMenuItems});n.$on("$destroy",t)},sortable:function(n){return n.grid.options.enableSorting&&"undefined"!=typeof n.col&&n.col&&n.col.enableSorting?!0:!1},isActiveSort:function(n,t){return"undefined"!=typeof n.col&&"undefined"!=typeof n.
2023-08-10 21:19:35 UTC	10549	IN	Data Raw: 3d 7b 69 63 6f 6e 3a 22 75 69 2d 67 72 69 64 2d 69 63 6f 6e 2d 6f 6b 22 2c 61 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 72 2e 74 6f 67 67 6c 65 43 6f 6c 75 6d 6e 56 69 73 69 62 69 6c 69 74 79 28 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 67 72 69 64 43 6f 6c 29 7d 2c 73 68 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 67 72 69 64 43 6f 6c 2e 63 6f 6c 44 65 66 2e 76 69 73 69 62 6c 65 3d 3d 3d 21 30 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2e 67 72 69 64 43 6f 6c 2e 63 6f 6c 44 65 66 2e 76 69 73 69 62 6c 65 7d 2c 63 6f 6e 74 65 78 74 3a 7b 67 72 69 64 43 6f 6c 3a 6e 2e 67 72 69 64 2e 67 65 74 43 6f 6c 75 Data Ascii: ={icon:"ui-grid-icon-ok",action:function(n){n.stopPropagation(),r.toggleColumnVisibility(this.context.gridCol)},shown:function(){return this.context.gridCol.colDef.visible===!0\|\|void 0===this.context.gridCol.colDef.visible},context:{gridCol:n.grid.getColu
2023-08-10 21:19:35 UTC	10565	IN	Data Raw: 65 74 75 72 6e 20 6e 2e 75 69 47 72 69 64 2e 63 6f 6c 75 6d 6e 44 65 66 73 7d 2c 79 29 29 2c 61 2e 70 75 73 68 28 6e 2e 24 70 61 72 65 6e 74 2e 24 77 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 75 69 47 72 69 64 2e 63 6f 6c 75 6d 6e 44 65 66 73 2e 6c 65 6e 67 74 68 7d 2c 79 29 29 29 3a 28 61 6e 67 75 6c 61 72 2e 69 73 53 74 72 69 6e 67 28 6e 2e 75 69 47 72 69 64 2e 64 61 74 61 29 3f 61 2e 70 75 73 68 28 6e 2e 24 70 61 72 65 6e 74 2e 24 77 61 74 63 68 43 6f 6c 6c 65 63 74 69 6f 6e 28 6e 2e 75 69 47 72 69 64 2e 64 61 74 61 2c 76 29 29 3a 61 2e 70 75 73 68 28 6e 2e 24 70 61 72 65 6e 74 2e 24 77 61 74 63 68 43 6f 6c 6c 65 63 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 75 69 47 72 69 64 2e 64 61 74 Data Ascii: eturn n.uiGrid.columnDefs},y)),a.push(n.$parent.$watch(function(){return n.uiGrid.columnDefs.length},y))):(angular.isString(n.uiGrid.data)?a.push(n.$parent.$watchCollection(n.uiGrid.data,v)):a.push(n.$parent.$watchCollection(function(){return n.uiGrid.dat
2023-08-10 21:19:35 UTC	10581	IN	Data Raw: 6e 73 54 6f 52 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 69 3d 74 68 69 73 2e 67 65 74 56 69 65 77 70 6f 72 74 57 69 64 74 68 28 29 2c 6e 3d 30 2c 72 3d 30 3b 72 65 74 75 72 6e 20 74 2e 63 6f 6c 75 6d 6e 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 75 2c 66 29 7b 69 66 28 69 3e 72 29 72 2b 3d 75 2e 64 72 61 77 6e 57 69 64 74 68 2c 6e 2b 2b 3b 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 65 3d 66 3b 65 3e 3d 66 2d 6e 3b 65 2d 2d 29 6f 2b 3d 74 2e 63 6f 6c 75 6d 6e 73 5b 65 5d 2e 64 72 61 77 6e 57 69 64 74 68 3b 69 3e 6f 26 26 6e 2b 2b 7d 7d 29 2c 6e 7d 2c 79 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 42 6f 64 79 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: nsToRender=function(){var t=this,i=this.getViewportWidth(),n=0,r=0;return t.columns.forEach(function(u,f){if(i>r)r+=u.drawnWidth,n++;else{for(var o=0,e=f;e>=f-n;e--)o+=t.columns[e].drawnWidth;i>o&&n++}}),n},y.prototype.getBodyHeight=function(){return this
2023-08-10 21:19:35 UTC	10597	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6e 3f 22 2e 22 2b 69 3a 69 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 69 6e 6e 65 64 4c 65 66 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6c 65 66 74 22 3d 3d 3d 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6e 74 61 69 6e 65 72 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 69 6e 6e 65 64 52 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 72 69 67 68 74 22 3d 3d 3d 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6e 74 61 69 6e 65 72 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6c 43 6c 61 73 73 44 65 66 69 6e 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 20 2e 67 72 69 64 22 2b 74 68 69 73 2e 67 72 69 64 2e 69 64 2b 22 20 22 2b 74 68 69 73 2e 67 65 74 43 6f 6c Data Ascii: ;return n?"."+i:i},r.prototype.isPinnedLeft=function(){return"left"===this.renderContainer},r.prototype.isPinnedRight=function(){return"right"===this.renderContainer},r.prototype.getColClassDefinition=function(){return" .grid"+this.grid.id+" "+this.getCol
2023-08-10 21:19:35 UTC	10613	IN	Data Raw: 67 74 68 29 26 26 6e 3e Data Ascii: gth)&&n>
2023-08-10 21:19:35 UTC	10613	IN	Data Raw: 30 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 4c 65 66 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 26 26 28 30 3d 3d 3d 74 68 69 73 2e 78 2e 70 65 72 63 65 6e 74 61 67 65 7c 7c 74 68 69 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 53 63 72 6f 6c 6c 4c 65 6e 67 74 68 3c 30 29 26 26 30 3d 3d 3d 6e 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 52 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 78 26 26 28 31 3d 3d 3d 74 68 69 73 2e 78 2e 70 65 72 63 65 6e 74 61 67 65 7c 7c 30 3d 3d 3d 74 68 69 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 53 63 72 6f 6c 6c 4c 65 6e 67 74 68 29 26 26 6e 3e 30 7d 2c 74 2e 53 6f 75 72 63 65 73 3d 7b 56 69 65 77 50 6f 72 74 53 63 72 6f 6c 6c 3a 22 56 69 65 77 50 6f Data Ascii: 0},t.prototype.atLeft=function(n){return this.x&&(0===this.x.percentage\|\|this.horizontalScrollLength<0)&&0===n},t.prototype.atRight=function(n){return this.x&&(1===this.x.percentage\|\|0===this.horizontalScrollLength)&&n>0},t.Sources={ViewPortScroll:"ViewPo
2023-08-10 21:19:35 UTC	10629	IN	Data Raw: 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 66 3d 74 68 69 73 2c 72 2c 75 3b 69 66 28 21 61 6e 67 75 6c 61 72 2e 69 73 45 6c 65 6d 65 6e 74 28 6e 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 68 65 20 70 61 72 65 6e 74 20 65 6c 65 6d 65 6e 74 20 69 73 20 6e 6f 74 20 61 6e 20 65 6c 65 6d 65 6e 74 2e 22 29 3b 72 65 74 75 72 6e 28 6e 3d 61 6e 67 75 6c 61 72 2e 65 6c 65 6d 65 6e 74 28 6e 29 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 6e 5b 30 5d 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 3b 72 65 74 75 72 6e 20 66 2e 62 79 45 6c 65 6d 65 6e 74 28 69 29 7d 2c 74 68 69 73 2e 5f 70 75 72 67 65 51 75 65 75 65 28 29 2c 69 29 3f 28 75 3d 79 28 72 29 2c 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 79 28 72 29 29 2c 75 29 3a 72 Data Ascii: on(n,t,i){var f=this,r,u;if(!angular.isElement(n))throw new Error("The parent element is not an element.");return(n=angular.element(n),r=function(){var i=n[0].querySelector(t);return f.byElement(i)},this._purgeQueue(),i)?(u=y(r),this.queue.push(y(r)),u):r
2023-08-10 21:19:35 UTC	10645	IN	Data Raw: d9 86 d8 af db 8c 22 2c 61 67 67 72 65 67 61 74 65 5f 63 6f 75 6e 74 3a 22 41 67 67 3a 20 d8 aa d8 b9 d8 af d8 a7 d8 af 22 2c 61 67 67 72 65 67 61 74 65 5f 73 75 6d 3a 22 41 67 67 3a 20 d8 ac d9 85 d8 b9 22 2c 61 67 67 72 65 67 61 74 65 5f 6d 61 78 3a 22 41 67 67 3a 20 d8 a8 db 8c d8 b4 db 8c d9 86 d9 87 22 2c 61 67 67 72 65 67 61 74 65 5f 6d 69 6e 3a 22 41 67 67 3a 20 da a9 d9 85 db 8c d9 86 d9 87 22 2c 61 67 67 72 65 67 61 74 65 5f 61 76 67 3a 22 41 67 67 3a 20 d9 85 db 8c d8 a7 d9 86 da af db 8c d9 86 22 2c 61 67 67 72 65 67 61 74 65 5f 72 65 6d 6f 76 65 3a 22 41 67 67 3a 20 d8 ad d8 b0 d9 81 22 7d 7d 29 2c 6e 7d 5d 29 7d 5d 29 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 75 69 2e 67 72 69 64 22 29 2e 63 Data Ascii: ",aggregate_count:"Agg: ",aggregate_sum:"Agg: ",aggregate_max:"Agg: ",aggregate_min:"Agg: ",aggregate_avg:"Agg: ",aggregate_remove:"Agg: "}}),n}])}])}(),function(){angular.module("ui.grid").c
2023-08-10 21:19:35 UTC	10661	IN	Data Raw: 65 6d 6f 76 65 3a 22 52 65 6d 6f 76 65 72 20 4f 72 64 65 6e 61 c3 a7 c3 a3 6f 22 7d 2c 63 6f 6c 75 6d 6e 3a 7b 68 69 64 65 3a 22 45 73 63 6f 6e 64 65 72 20 63 6f 6c 75 6e 61 22 7d 2c 61 67 67 72 65 67 61 74 69 6f 6e 3a 7b 63 6f 75 6e 74 3a 22 74 6f 74 61 6c 20 64 65 20 6c 69 6e 68 61 73 3a 20 22 2c 73 75 6d 3a 22 74 6f 74 61 6c 3a 20 22 2c 61 76 67 3a 22 6d 65 64 3a 20 22 2c 6d 69 6e 3a 22 6d 69 6e 3a 20 22 2c 6d 61 78 3a 22 6d 61 78 3a 20 22 7d 2c 70 69 6e 6e 69 6e 67 3a 7b 70 69 6e 4c 65 66 74 3a 22 46 69 78 61 72 20 45 73 71 75 65 72 64 61 22 2c 70 69 6e 52 69 67 68 74 3a 22 46 69 78 61 72 20 44 69 72 65 69 74 61 22 2c 75 6e 70 69 6e 3a 22 44 65 73 70 72 65 6e 64 65 72 22 7d 2c 67 72 69 64 4d 65 6e 75 3a 7b 63 6f 6c 75 6d 6e 73 3a 22 43 6f 6c 75 6e 61 Data Ascii: emove:"Remover Ordenao"},column:{hide:"Esconder coluna"},aggregation:{count:"total de linhas: ",sum:"total: ",avg:"med: ",min:"min: ",max:"max: "},pinning:{pinLeft:"Fixar Esquerda",pinRight:"Fixar Direita",unpin:"Desprender"},gridMenu:{columns:"Coluna
2023-08-10 21:19:35 UTC	10677	IN	Data Raw: a0 e6 b3 95 e5 a4 84 e7 90 86 e6 96 87 e4 bb b6 ef bc 8c e7 a1 ae e5 ae 9a e6 98 af e5 90 88 e6 b3 95 e7 9a 84 43 53 56 e6 96 87 e4 bb b6 ef bc 9f 22 2c 69 6e 76 61 6c 69 64 4a 73 6f 6e 3a 22 e6 97 a0 e6 b3 95 e5 a4 84 e7 90 86 e6 96 87 e4 bb b6 ef bc 8c e7 a1 ae e5 ae 9a e6 98 af e5 90 88 e6 b3 95 e7 9a 84 4a 53 4f 4e e6 96 87 e4 bb b6 ef bc 9f 22 2c 6a 73 6f 6e 4e 6f 74 41 72 72 61 79 3a 22 e5 af bc e5 85 a5 e7 9a 84 e6 96 87 e4 bb b6 e4 b8 8d e6 98 af 4a 53 4f 4e e6 95 b0 e7 bb 84 ef bc 81 22 7d 2c 70 61 67 69 6e 61 74 69 6f 6e 3a 7b 61 72 69 61 3a 7b 70 61 67 65 54 6f 46 69 72 73 74 3a 22 e7 ac ac e4 b8 80 e9 a1 b5 22 2c 70 61 67 65 42 61 63 6b 3a 22 e4 b8 8a e4 b8 80 e9 a1 b5 22 2c 70 61 67 65 53 65 6c 65 63 74 65 64 3a 22 e5 bd 93 e5 89 8d e9 a1 b5 Data Ascii: CSV",invalidJson:"JSON",jsonNotArray:"JSON"},pagination:{aria:{pageToFirst:"",pageBack:"",pageSelected:"
2023-08-10 21:19:35 UTC	10693	IN	Data Raw: 45 64 69 74 4f 6e 46 6f 63 75 73 3d 76 6f 69 64 20 30 3d 3d 3d 74 2e 65 6e 61 62 6c 65 43 65 6c 6c 45 64 69 74 4f 6e 46 6f 63 75 73 3f 75 2e 65 6e 61 62 6c 65 43 65 6c 6c 45 64 69 74 4f 6e 46 6f 63 75 73 3a 74 2e 65 6e 61 62 6c 65 43 65 6c 6c 45 64 69 74 4f 6e 46 6f 63 75 73 2c 6e 2e 61 6c 6c 28 66 29 7d 2c 69 73 53 74 61 72 74 45 64 69 74 4b 65 79 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6d 65 74 61 4b 65 79 7c 7c 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 74 2e 6b 65 79 6d 61 70 2e 45 53 43 7c 7c 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 74 2e 6b 65 79 6d 61 70 2e 53 48 49 46 54 7c 7c 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 74 2e 6b 65 79 6d 61 70 2e 43 54 52 4c 7c 7c 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 74 2e 6b 65 79 6d 61 70 2e 41 4c 54 7c 7c Data Ascii: EditOnFocus=void 0===t.enableCellEditOnFocus?u.enableCellEditOnFocus:t.enableCellEditOnFocus,n.all(f)},isStartEditKey:function(n){return n.metaKey\|\|n.keyCode===t.keymap.ESC\|\|n.keyCode===t.keymap.SHIFT\|\|n.keyCode===t.keymap.CTRL\|\|n.keyCode===t.keymap.ALT\|\|
2023-08-10 21:19:35 UTC	10837	IN	Data Raw: 49 53 49 42 4c 45 2c 74 2e 56 49 53 49 42 4c 45 29 7d 2c 73 68 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 72 69 64 2e 6f 70 74 69 6f 6e 73 2e 65 78 70 6f 72 74 65 72 4d 65 6e 75 43 73 76 7d 2c 6f 72 64 65 72 3a 32 30 31 7d 2c 7b 74 69 74 6c 65 3a 66 2e 67 65 74 53 61 66 65 54 65 78 74 28 22 67 72 69 64 4d 65 6e 75 2e 65 78 70 6f 72 74 65 72 53 65 6c 65 63 74 65 64 41 73 43 73 76 22 29 2c 61 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 72 69 64 2e 61 70 69 2e 65 78 70 6f 72 74 65 72 2e 63 73 76 45 78 70 6f 72 74 28 74 2e 53 45 4c 45 43 54 45 44 2c 74 2e 56 49 53 49 42 4c 45 29 7d 2c 73 68 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 72 69 64 2e 6f 70 74 Data Ascii: ISIBLE,t.VISIBLE)},shown:function(){return this.grid.options.exporterMenuCsv},order:201},{title:f.getSafeText("gridMenu.exporterSelectedAsCsv"),action:function(){this.grid.api.exporter.csvExport(t.SELECTED,t.VISIBLE)},shown:function(){return this.grid.opt
2023-08-10 21:19:35 UTC	10853	IN	Data Raw: 2c 6f 29 2c 69 2b 2b Data Ascii: ,o),i++
2023-08-10 21:19:35 UTC	10853	IN	Data Raw: 29 7d 2c 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 75 3d 6e 5b 69 5d 2c 75 2e 76 69 73 69 62 6c 65 26 26 66 2e 66 6f 72 45 61 63 68 28 65 29 3b 72 65 74 75 72 6e 20 64 65 6c 65 74 65 20 74 2e 67 72 6f 75 70 69 6e 67 2e 6f 6c 64 47 72 6f 75 70 69 6e 67 48 65 61 64 65 72 43 61 63 68 65 2c 6e 7d 2c 69 6e 69 74 69 61 6c 69 73 65 50 72 6f 63 65 73 73 69 6e 67 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 69 3d 68 2e 67 65 74 47 72 6f 75 70 69 6e 67 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 67 72 6f 75 70 69 6e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 70 75 73 68 28 7b 66 69 65 6c 64 4e 61 6d 65 3a 6e 2e 66 69 65 6c 64 2c 63 6f 6c 3a 6e 2e 63 6f 6c 2c 69 6e 69 74 69 61 6c 69 73 65 64 Data Ascii: )},i=0;i<n.length;i++)u=n[i],u.visible&&f.forEach(e);return delete t.grouping.oldGroupingHeaderCache,n},initialiseProcessingState:function(n){var t=[],i=h.getGrouping(n);return i.grouping.forEach(function(n){t.push({fieldName:n.field,col:n.col,initialised
2023-08-10 21:19:35 UTC	10869	IN	Data Raw: 26 26 28 63 2b 3d 72 5b 66 5d 2e 64 72 61 77 6e 57 69 64 74 68 7c 7c 72 5b 66 5d 2e 77 69 64 74 68 7c 7c 72 5b 66 5d 2e 63 6f 6c 44 65 66 2e 77 69 64 74 68 2c 63 3e 68 29 29 7b 69 2e 72 65 64 72 61 77 43 6f 6c 75 6d 6e 41 74 50 6f 73 69 74 69 6f 6e 28 6e 2e 67 72 69 64 2c 65 2c 66 2d 31 29 3b 62 72 65 61 6b 7d 68 3e 63 26 26 69 2e 72 65 64 72 61 77 43 6f 6c 75 6d 6e 41 74 50 6f 73 69 74 69 6f 6e 28 6e 2e 67 72 69 64 2c 65 2c 72 2e 6c 65 6e 67 74 68 2d 31 29 7d 7d 7d 2c 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 6e 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 79 29 2c 61 2e 6f 6e 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 79 29 7d 2c 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 66 66 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 79 29 2c 61 2e 6f 66 66 Data Ascii: &&(c+=r[f].drawnWidth\|\|r[f].width\|\|r[f].colDef.width,c>h)){i.redrawColumnAtPosition(n.grid,e,f-1);break}h>c&&i.redrawColumnAtPosition(n.grid,e,r.length-1)}}},nt=function(){a.on("touchstart",y),a.on("mousedown",y)},it=function(){a.off("touchstart",y),a.off
2023-08-10 21:19:35 UTC	10885	IN	Data Raw: 74 65 20 74 2e 72 6f 77 45 64 69 74 53 61 76 65 50 72 6f 6d 69 73 65 2c 74 2e 69 73 45 72 72 6f 72 3d 21 30 2c 6e 2e 72 6f 77 45 64 69 74 2e 65 72 72 6f 72 52 6f 77 73 7c 7c 28 6e 2e 72 6f 77 45 64 69 74 2e 65 72 72 6f 72 52 6f 77 73 3d 5b 5d 29 2c 66 2e 69 73 52 6f 77 50 72 65 73 65 6e 74 28 6e 2e 72 6f 77 45 64 69 74 2e 65 72 72 6f 72 52 6f 77 73 2c 74 29 7c 7c 6e 2e 72 6f 77 45 64 69 74 2e 65 72 72 6f 72 52 6f 77 73 2e 70 75 73 68 28 74 29 7d 7d 2c 72 65 6d 6f 76 65 52 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 2c 72 29 7b 69 2e 75 69 64 3d 3d 3d 74 2e 75 69 64 26 26 6e 2e 73 70 6c 69 63 Data Ascii: te t.rowEditSavePromise,t.isError=!0,n.rowEdit.errorRows\|\|(n.rowEdit.errorRows=[]),f.isRowPresent(n.rowEdit.errorRows,t)\|\|n.rowEdit.errorRows.push(t)}},removeRow:function(n,t){"undefined"!=typeof n&&null!==n&&n.forEach(function(i,r){i.uid===t.uid&&n.splic
2023-08-10 21:19:35 UTC	10901	IN	Data Raw: 73 63 6f 70 65 3a 21 31 2c 6c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 2c 72 2c 75 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 6e 2e 67 72 69 64 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 52 6f 77 53 65 6c 65 63 74 69 6f 6e 26 26 6e 2e 67 72 69 64 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 46 75 6c 6c 52 6f 77 53 65 6c 65 63 74 69 6f 6e 26 26 28 69 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 67 72 69 64 2d 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 22 29 2c 69 2e 6f 6e 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 61 29 2c 69 2e 6f 6e 28 22 74 6f 75 63 68 65 6e 64 22 2c 73 29 2c 69 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 6f 29 2c 6e 2e 72 65 67 69 73 74 65 72 65 64 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 6e 2e 72 65 67 69 73 74 65 Data Ascii: scope:!1,link:function(n,i,r,u){function c(){n.grid.options.enableRowSelection&&n.grid.options.enableFullRowSelection&&(i.addClass("ui-grid-disable-selection"),i.on("touchstart",a),i.on("touchend",s),i.on("click",o),n.registered=!0)}function y(){n.registe
2023-08-10 21:19:35 UTC	10917	IN	Data Raw: 5c 27 22 20 6e 67 2d 73 68 6f 77 3d 22 63 6f 6c 46 69 6c 74 65 72 2e 74 65 72 6d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 63 6f 6c 46 69 6c 74 65 72 2e 74 65 72 6d 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 63 6f 6c 46 69 6c 74 65 72 2e 74 65 72 6d 20 21 3d 3d 20 5c 27 5c 27 22 3e 3c 69 20 63 6c 61 73 73 3d 22 75 69 2d 67 72 69 64 2d 69 63 6f 6e 2d 63 61 6e 63 65 6c 22 20 75 69 2d 67 72 69 64 2d 6f 6e 65 2d 62 69 6e 64 2d 61 72 69 61 2d 6c 61 62 65 6c 3d 22 61 72 69 61 2e 72 65 6d 6f 76 65 46 69 6c 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 69 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 6e 67 2d 69 66 3d 22 63 6f 6c 46 69 6c 74 65 72 2e 74 79 70 65 20 3d 3d 3d 20 5c 27 73 65 6c 65 63 74 5c 27 22 3e 3c 73 65 6c 65 63 74 20 63 6c 61 73 73 3d Data Ascii: \'" ng-show="colFilter.term !== undefined && colFilter.term !== null && colFilter.term !== \'\'"><i class="ui-grid-icon-cancel" ui-grid-one-bind-aria-label="aria.removeFilter"> </i></div></div><div ng-if="colFilter.type === \'select\'"><select class=
2023-08-10 21:19:35 UTC	10933	IN	Data Raw: 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 67 72 69 64 2d 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 67 72 69 64 2d 63 65 6c 6c 2d 63 6f 6e 74 65 6e 74 73 22 3e 3c 75 69 2d 67 72 69 64 2d 73 65 6c 65 63 74 69 6f 6e 2d 72 6f 77 2d 68 65 61 64 65 72 2d 62 75 74 74 6f 6e 73 3e 3c 2f 75 69 2d 67 72 69 64 2d 73 65 6c 65 63 74 69 6f 6e 2d 72 6f 77 2d 68 65 61 64 65 72 2d 62 75 74 74 6f 6e 73 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 29 2c 6e 2e 70 75 74 28 22 75 69 2d 67 72 69 64 2f 73 65 6c 65 63 74 69 6f 6e 52 6f 77 48 65 61 64 65 72 42 75 74 74 6f 6e 73 22 2c 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 69 2d 67 72 69 64 2d 73 65 6c 65 63 74 69 6f 6e 2d 72 6f 77 2d 68 65 61 64 65 72 2d 62 75 74 74 6f 6e Data Ascii: div class="ui-grid-disable-selection"><div class="ui-grid-cell-contents"><ui-grid-selection-row-header-buttons></ui-grid-selection-row-header-buttons></div></div>'),n.put("ui-grid/selectionRowHeaderButtons",'<div class="ui-grid-selection-row-header-button
2023-08-10 21:19:35 UTC	10949	IN	Data Raw: 2c 72 3d 6e 75 6c 6c 3d 3d 6e 3f 30 3a 6e 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 6e 65 77 20 73 72 3b 2b 2b 74 3c 72 3b 29 74 68 69 73 2e 61 64 64 28 6e 5b 74 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2e 73 65 74 28 6e 2c 6f 6e 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 62 72 28 6e 29 7b 0a 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2e 68 61 73 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 77 72 28 6e 29 7b 74 68 69 73 2e 73 69 7a 65 3d 28 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 6e 65 77 20 69 72 28 6e 29 29 2e 73 69 7a 65 7d 66 75 6e 63 74 69 6f 6e 20 6d 72 28 29 7b 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 6e 65 77 20 69 72 2c Data Ascii: ,r=null==n?0:n.length;for(this.__data__=new sr;++t<r;)this.add(n[t])}function dr(n){return this.__data__.set(n,on),this}function br(n){return this.__data__.has(n)}function wr(n){this.size=(this.__data__=new ir(n)).size}function mr(){this.__data__=new ir,
2023-08-10 21:19:35 UTC	10965	IN	Data Raw: 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 69 28 6e 2c 74 2c 72 2c 65 2c 75 2c 69 2c 6f 2c 66 2c 63 2c 61 29 7b 76 61 72 20 6c 3d 74 26 79 6e 2c 73 3d 6c 3f 6f 3a 58 2c 68 3d 6c 3f 58 3a 6f 2c 70 3d 6c 3f 69 3a 58 2c 5f 3d 6c 3f 58 3a 69 3b 74 7c 3d 6c 3f 62 6e 3a 77 6e 2c 74 26 3d 7e 28 6c 3f 77 6e 3a 62 6e 29 2c 74 26 67 6e 7c 7c 28 74 26 3d 7e 28 5f 6e 7c 76 6e 29 29 3b 76 61 72 20 76 3d 5b 6e 2c 74 2c 75 2c 70 2c 73 2c 5f 2c 68 2c 66 2c 63 2c 61 5d 2c 67 3d 72 2e 61 70 70 6c 79 28 58 2c 76 29 3b 72 65 74 75 72 6e 20 24 69 28 6e 29 26 26 53 73 28 67 2c 76 29 2c 67 2e 70 6c 61 63 65 68 6f 6c 64 65 72 3d 65 2c 0a 59 69 28 67 2c 6e 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 6e 29 7b 76 61 72 20 74 3d 61 6c 5b 6e 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: r)}}function oi(n,t,r,e,u,i,o,f,c,a){var l=t&yn,s=l?o:X,h=l?X:o,p=l?i:X,_=l?X:i;t\|=l?bn:wn,t&=~(l?wn:bn),t&gn\|\|(t&=~(_n\|vn));var v=[n,t,u,p,s,_,h,f,c,a],g=r.apply(X,v);return $i(n)&&Ss(g,v),g.placeholder=e,Yi(g,n,t)}function fi(n){var t=al[n];return func
2023-08-10 21:19:35 UTC	10981	IN	Data Raw: 74 69 6f 6e 20 51 66 28 6e 29 7b 72 65 74 75 72 6e 20 63 63 28 6e 29 26 26 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 21 67 63 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 58 66 28 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 21 30 3b 69 66 28 48 66 28 6e 29 26 26 28 62 68 28 6e 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 73 70 6c 69 63 65 7c 7c 6d 68 28 6e 29 7c 7c 4f 68 28 6e 29 7c 7c 64 68 28 6e 29 29 29 72 65 74 75 72 6e 21 6e 2e 6c 65 6e 67 74 68 3b 76 61 72 20 74 3d 7a 73 28 6e 29 3b 69 66 28 74 3d 3d 47 6e 7c 7c 74 3d 3d 74 74 29 72 65 74 75 72 6e 21 6e 2e 73 69 7a 65 3b 69 66 28 4d 69 28 6e 29 29 72 65 74 75 72 6e 21 4d 65 28 6e 29 2e 6c 65 6e 67 Data Ascii: tion Qf(n){return cc(n)&&1===n.nodeType&&!gc(n)}function Xf(n){if(null==n)return!0;if(Hf(n)&&(bh(n)\|\|"string"==typeof n\|\|"function"==typeof n.splice\|\|mh(n)\|\|Oh(n)\|\|dh(n)))return!n.length;var t=zs(n);if(t==Gn\|\|t==tt)return!n.size;if(Mi(n))return!Me(n).leng
2023-08-10 21:19:35 UTC	10997	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 3c 3d 74 7d 29 2c 7a 68 3d 4e 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 4d 69 28 74 29 7c 7c 48 66 28 74 29 29 72 65 74 75 72 6e 20 24 75 28 74 2c 50 63 28 74 29 2c 6e 29 2c 58 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 62 6c 2e 63 61 6c 6c 28 74 2c 72 29 26 26 53 72 28 6e 2c 72 2c 74 5b 72 5d 29 7d 29 2c 45 68 3d 4e 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 24 75 28 74 2c 71 63 28 74 29 2c 6e 29 7d 29 2c 53 68 3d 4e 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 29 7b 24 75 28 74 2c 71 63 28 74 29 2c 6e 2c 65 29 7d 29 2c 57 68 3d 4e 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 29 7b 24 75 28 74 2c 50 63 28 74 29 2c 6e 2c 65 29 3b 0a 7d 29 2c 4c 68 3d 67 Data Ascii: nction(n,t){return n<=t}),zh=Nu(function(n,t){if(Mi(t)\|\|Hf(t))return $u(t,Pc(t),n),X;for(var r in t)bl.call(t,r)&&Sr(n,r,t[r])}),Eh=Nu(function(n,t){$u(t,qc(t),n)}),Sh=Nu(function(n,t,r,e){$u(t,qc(t),n,e)}),Wh=Nu(function(n,t,r,e){$u(t,Pc(t),n,e);}),Lh=g
2023-08-10 21:19:35 UTC	11013	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 73 65 74 74 69 6e 67 20 73 65 6c 65 63 74 65 64 20 73 74 65 70 20 74 6f 20 61 72 67 75 6d 65 6e 74 20 70 61 73 73 65 64 20 69 6e 74 6f 20 67 6f 54 6f 28 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 65 70 2e 73 65 6c 65 63 74 65 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 50 72 65 76 69 6f 75 73 53 74 65 70 73 43 6f 6d 70 6c 65 74 65 64 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 65 6d 69 74 20 65 76 65 6e 74 20 75 70 77 61 72 64 73 20 77 69 74 68 20 64 61 74 61 20 6f 6e 20 67 6f 54 6f 28 29 20 69 6e 76 6f 6b 74 69 6f 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 Data Ascii: //setting selected step to argument passed into goTo() step.selected = true; setPreviousStepsCompleted(); //emit event upwards with data on goTo() invoktion $
2023-08-10 21:19:35 UTC	11029	IN	Data Raw: 31 2c 6e 2e 62 72 6f 77 73 65 42 75 74 74 6f 6e 3d 27 42 72 6f 77 73 65 27 2c 6e 2e 76 65 72 69 66 79 42 75 74 74 6f 6e 3d 27 56 65 72 69 66 79 27 2c 6e 2e 70 6c 61 63 65 68 6f 6c 64 65 72 54 65 78 74 3d 27 42 72 6f 77 73 65 20 74 6f 20 75 70 6c 6f 61 64 27 2c 6e 2e 73 68 6f 77 56 65 72 69 66 79 42 75 74 74 6f 6e 3d 21 30 2c 74 5b 30 5d 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 73 68 6f 77 76 65 72 69 66 79 62 75 74 74 6f 6e 22 29 26 26 74 5b 30 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 68 6f 77 76 65 72 69 66 79 62 75 74 74 6f 6e 22 29 3d 3d 3d 22 66 61 6c 73 65 22 26 26 28 6e 2e 73 68 6f 77 56 65 72 69 66 79 42 75 74 74 6f 6e 3d 21 31 29 3b 61 6e 67 75 6c 61 72 2e 65 6c 65 6d 65 6e 74 28 74 5b 30 5d 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 Data Ascii: 1,n.browseButton='Browse',n.verifyButton='Verify',n.placeholderText='Browse to upload',n.showVerifyButton=!0,t[0].hasAttribute("showverifybutton")&&t[0].getAttribute("showverifybutton")==="false"&&(n.showVerifyButton=!1);angular.element(t[0].querySelector
2023-08-10 21:19:35 UTC	11045	IN	Data Raw: 6e 50 72 6f 70 65 72 74 79 28 74 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 28 6e 29 7c 7c 75 74 28 6e 29 26 26 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 76 6f 69 64 20 30 29 2c 66 2e 5f 69 73 41 4d 6f 6d 65 6e 74 4f 62 6a 65 63 74 3d 21 30 2c 66 2e 5f 75 73 65 55 54 43 3d 66 2e 5f 69 73 55 54 43 3d 75 2c 66 2e 5f 6c 3d 69 2c 66 2e 5f 69 3d 6e 2c 66 2e 5f 66 3d 74 2c 66 2e 5f 73 74 72 69 63 74 3d 72 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 65 77 20 76 69 28 68 75 28 76 65 28 6e 29 29 29 3b 72 65 74 75 72 6e 20 74 2e 5f 6e 65 78 74 44 61 79 26 26 28 74 2e 61 64 64 28 31 2c 22 64 22 29 2c 74 2e 5f 6e 65 78 74 44 61 79 3d 76 6f 69 64 20 30 29 2c 74 7d 28 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6e 2c 74 2c 69 Data Ascii: nProperty(t))return!1;return!0}(n)\|\|ut(n)&&0===n.length)&&(n=void 0),f._isAMomentObject=!0,f._useUTC=f._isUTC=u,f._l=i,f._i=n,f._f=t,f._strict=r,function(n){var t=new vi(hu(ve(n)));return t._nextDay&&(t.add(1,"d"),t._nextDay=void 0),t}(f)}function c(n,t,i
2023-08-10 21:19:35 UTC	11061	IN	Data Raw: 22 3a 75 3d 74 66 28 74 68 69 73 2c 72 29 2f 31 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 6f 6e 74 68 22 3a 75 3d 74 66 28 74 68 69 73 2c 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 71 75 61 72 74 65 72 22 3a 75 3d 74 66 28 74 68 69 73 2c 72 29 2f 33 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 63 6f 6e 64 22 3a 75 3d 28 74 68 69 73 2d 72 29 2f 31 65 33 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 69 6e 75 74 65 22 3a 75 3d 28 74 68 69 73 2d 72 29 2f 36 65 34 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 6f 75 72 22 3a 75 3d 28 74 68 69 73 2d 72 29 2f 33 36 65 35 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 61 79 22 3a 75 3d 28 74 68 69 73 2d 72 2d 66 29 2f 38 36 34 65 35 3b 62 72 65 61 6b 3b 63 61 73 65 22 77 65 65 6b 22 3a 75 3d 28 74 68 69 73 2d 72 2d 66 29 2f 36 30 34 38 65 Data Ascii: ":u=tf(this,r)/12;break;case"month":u=tf(this,r);break;case"quarter":u=tf(this,r)/3;break;case"second":u=(this-r)/1e3;break;case"minute":u=(this-r)/6e4;break;case"hour":u=(this-r)/36e5;break;case"day":u=(this-r-f)/864e5;break;case"week":u=(this-r-f)/6048e
2023-08-10 21:19:35 UTC	11077	IN	Data Raw: 73 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 3d 6e 73 2c 65 2e 61 73 53 65 63 6f 6e 64 73 3d 72 73 2c 65 2e 61 73 4d 69 6e 75 74 65 73 3d 75 73 2c 65 2e 61 73 48 6f 75 72 73 3d 66 73 2c 65 2e 61 73 44 61 79 73 3d 65 73 2c 65 2e 61 73 57 65 65 6b 73 3d 6f 73 2c 65 2e 61 73 4d 6f 6e 74 68 73 3d 73 73 2c 65 2e 61 73 59 65 61 72 73 3d 76 73 2c 65 2e 76 61 6c 75 65 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 3f 74 68 69 73 2e 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 2b 38 36 34 65 35 2a 74 68 69 73 2e 5f 64 61 79 73 2b 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 25 31 32 2a 32 35 39 32 65 36 2b 33 31 35 33 36 65 36 2a 66 28 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 2f 31 32 29 3a 4e 61 4e 7d 2c 65 2e 5f 62 75 62 62 6c 65 Data Ascii: sMilliseconds=ns,e.asSeconds=rs,e.asMinutes=us,e.asHours=fs,e.asDays=es,e.asWeeks=os,e.asMonths=ss,e.asYears=vs,e.valueOf=function(){return this.isValid()?this._milliseconds+864e5this._days+this._months%122592e6+31536e6*f(this._months/12):NaN},e._bubble
2023-08-10 21:19:35 UTC	11093	IN	Data Raw: 29 2c 70 76 28 66 2c 72 2c 74 29 29 3a 74 2e 5f 73 74 72 69 63 74 26 26 21 72 26 26 75 28 74 29 2e 75 6e 75 73 65 64 54 6f 6b 65 6e 73 2e 70 75 73 68 28 66 29 3b 75 28 74 29 2e 63 68 61 72 73 4c 65 66 74 4f 76 65 72 3d 63 2d 68 2c 69 2e 6c 65 6e 67 74 68 3e 30 26 26 75 28 74 29 2e 75 6e 75 73 65 64 49 6e 70 75 74 2e 70 75 73 68 28 69 29 2c 74 2e 5f 61 5b 76 5d 3c 3d 31 32 26 26 21 30 3d 3d 3d 75 28 74 29 2e 62 69 67 48 6f 75 72 26 26 74 2e 5f 61 5b 76 5d 3e 30 26 26 28 75 28 74 29 2e 62 69 67 48 6f 75 72 3d 76 6f 69 64 20 30 29 2c 75 28 74 29 2e 70 61 72 73 65 64 44 61 74 65 50 61 72 74 73 3d 74 2e 5f 61 2e 73 6c 69 63 65 28 30 29 2c 75 28 74 29 2e 6d 65 72 69 64 69 65 6d 3d 74 2e 5f 6d 65 72 69 64 69 65 6d 2c 74 2e 5f 61 5b 76 5d 3d 66 75 6e 63 74 69 6f Data Ascii: ),pv(f,r,t)):t._strict&&!r&&u(t).unusedTokens.push(f);u(t).charsLeftOver=c-h,i.length>0&&u(t).unusedInput.push(i),t._a[v]<=12&&!0===u(t).bigHour&&t._a[v]>0&&(u(t).bigHour=void 0),u(t).parsedDateParts=t._a.slice(0),u(t).meridiem=t._meridiem,t._a[v]=functio
2023-08-10 21:19:35 UTC	11109	IN	Data Raw: 63 79 22 29 3b 63 61 73 65 22 79 79 22 3a 72 65 Data Ascii: cy");case"yy":re
2023-08-10 21:19:35 UTC	11109	IN	Data Raw: 74 75 72 6e 20 72 2b 28 66 66 28 6e 29 3f 22 6c 61 74 61 22 3a 22 6c 61 74 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 72 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3d 22 20 22 3b 72 65 74 75 72 6e 28 6e 25 31 30 30 3e 3d 32 30 7c 7c 6e 3e 3d 31 30 30 26 26 6e 25 31 30 30 3d 3d 30 29 26 26 28 72 3d 22 20 64 65 20 22 29 2c 6e 2b 72 2b 7b 6d 6d 3a 22 6d 69 6e 75 74 65 22 2c 68 68 3a 22 6f 72 65 22 2c 64 64 3a 22 7a 69 6c 65 22 2c 4d 4d 3a 22 6c 75 6e 69 22 2c 79 79 3a 22 61 6e 69 22 7d 5b 69 5d 7d 66 75 6e 63 74 69 6f 6e 20 68 72 28 6e 2c 74 2c 69 29 7b 72 65 74 75 72 6e 22 6d 22 3d 3d 3d 69 3f 74 3f 22 5c 75 30 34 33 63 5c 75 30 34 33 38 5c 75 30 34 33 64 5c 75 30 34 34 33 5c 75 30 34 34 32 5c 75 30 34 33 30 22 3a 22 5c 75 30 34 33 63 5c 75 30 34 33 38 5c 75 30 Data Ascii: turn r+(ff(n)?"lata":"lat")}}function pr(n,t,i){var r=" ";return(n%100>=20\|\|n>=100&&n%100==0)&&(r=" de "),n+r+{mm:"minute",hh:"ore",dd:"zile",MM:"luni",yy:"ani"}[i]}function hr(n,t,i){return"m"===i?t?"\u043c\u0438\u043d\u0443\u0442\u0430":"\u043c\u0438\u0
2023-08-10 21:19:35 UTC	11125	IN	Data Raw: 65 28 21 74 29 3a 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 69 6e 76 61 6c 69 64 44 61 74 65 28 29 7d 2c 74 2e 66 72 6f 6d 4e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 72 6f 6d 28 63 28 29 2c 6e 29 7d 2c 74 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 26 26 28 63 69 28 6e 29 26 26 6e 2e 69 73 56 61 6c 69 64 28 29 7c 7c 63 28 6e 29 2e 69 73 56 61 6c 69 64 28 29 29 3f 73 74 28 7b 66 72 6f 6d 3a 74 68 69 73 2c 74 6f 3a 6e 7d 29 2e 6c 6f 63 61 6c 65 28 74 68 69 73 2e 6c 6f 63 61 6c 65 28 29 29 2e 68 75 6d 61 6e 69 7a 65 28 21 74 29 3a 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 69 6e 76 61 6c 69 64 44 61 74 65 28 29 7d 2c 74 Data Ascii: e(!t):this.localeData().invalidDate()},t.fromNow=function(n){return this.from(c(),n)},t.to=function(n,t){return this.isValid()&&(ci(n)&&n.isValid()\|\|c(n).isValid())?st({from:this,to:n}).locale(this.locale()).humanize(!t):this.localeData().invalidDate()},t
2023-08-10 21:19:35 UTC	11143	IN	Data Raw: 3d 72 79 2c 65 2e 73 65 63 6f 6e 64 73 3d 69 79 2c 65 2e 6d 69 6e 75 74 65 73 3d 74 79 2c 65 2e 68 6f 75 72 73 3d 6e 79 2c 65 2e 64 61 79 73 3d 67 76 2c 65 2e 77 65 65 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 74 28 74 68 69 73 2e 64 61 79 73 28 29 2f 37 29 7d 2c 65 2e 6d 6f 6e 74 68 73 3d 64 76 2c 65 2e 79 65 61 72 73 3d 6b 76 2c 65 2e 68 75 6d 61 6e 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 74 68 69 73 2e 69 73 56 61 6c 69 64 28 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2e 69 6e 76 61 6c 69 64 44 61 74 65 28 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 6c 6f 63 61 6c 65 44 61 74 61 28 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3d 73 74 28 6e 29 2e 61 Data Ascii: =ry,e.seconds=iy,e.minutes=ty,e.hours=ny,e.days=gv,e.weeks=function(){return nt(this.days()/7)},e.months=dv,e.years=kv,e.humanize=function(n){if(!this.isValid())return this.localeData().invalidDate();var t=this.localeData(),i=function(n,t,i){var r=st(n).a
2023-08-10 21:19:35 UTC	11159	IN	Data Raw: 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 33 5c 75 30 36 33 31 5c 75 30 36 32 38 5c 75 30 36 33 39 5c 75 30 36 32 37 5c 75 30 36 32 31 5f 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 65 5c 75 30 36 34 35 5c 75 30 36 34 61 5c 75 30 36 33 33 5f 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 32 63 5c 75 30 36 34 35 5c 75 30 36 33 39 5c 75 30 36 32 39 5f 5c 75 30 36 32 37 5c 75 30 36 34 34 5c 75 30 36 33 33 5c 75 30 36 32 38 5c 75 30 36 32 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 53 68 6f 72 74 3a 22 5c 75 30 36 32 33 5c 75 30 36 32 64 5c 75 30 36 32 66 5f 5c 75 30 36 32 35 5c 75 30 36 32 62 5c 75 30 36 34 36 5c 75 30 36 34 61 5c 75 30 36 34 36 5f 5c 75 30 36 32 62 5c 75 30 36 34 34 5c 75 30 36 32 37 5c 75 30 36 32 62 Data Ascii: \u0627\u0644\u0623\u0631\u0628\u0639\u0627\u0621_\u0627\u0644\u062e\u0645\u064a\u0633_\u0627\u0644\u062c\u0645\u0639\u0629_\u0627\u0644\u0633\u0628\u062a".split("_"),weekdaysShort:"\u0623\u062d\u062f_\u0625\u062b\u0646\u064a\u0646_\u062b\u0644\u0627\u062b
2023-08-10 21:19:35 UTC	11175	IN	Data Raw: 34 61 5c 75 30 34 33 31 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 4d 69 6e 3a 22 5c 75 30 34 33 64 5c 75 30 34 33 34 5f 5c 75 30 34 33 66 5c 75 30 34 33 64 5f 5c 75 30 34 33 32 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 34 30 5f 5c 75 30 34 34 37 5c 75 30 34 34 32 5f 5c 75 30 34 33 66 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 33 31 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6c 6f 6e 67 44 61 74 65 46 6f 72 6d 61 74 3a 7b 4c 54 3a 22 48 3a 6d 6d 22 2c 4c 54 53 3a 22 48 3a 6d 6d 3a 73 73 22 2c 4c 3a 22 44 2e 4d 4d 2e 59 59 59 59 22 2c 4c 4c 3a 22 44 20 4d 4d 4d 4d 20 59 59 59 59 22 2c 4c 4c 4c 3a 22 44 20 4d 4d 4d 4d 20 59 59 59 59 20 48 3a 6d 6d 22 2c 4c 4c 4c 4c 3a 22 64 64 64 64 2c 20 44 20 4d 4d 4d 4d 20 59 59 59 59 20 Data Ascii: 4a\u0431".split("_"),weekdaysMin:"\u043d\u0434_\u043f\u043d_\u0432\u0442_\u0441\u0440_\u0447\u0442_\u043f\u0442_\u0441\u0431".split("_"),longDateFormat:{LT:"H:mm",LTS:"H:mm:ss",L:"D.MM.YYYY",LL:"D MMMM YYYY",LLL:"D MMMM YYYY H:mm",LLLL:"dddd, D MMMM YYYY
2023-08-10 21:19:35 UTC	11191	IN	Data Raw: 3a 72 65 74 75 72 6e 22 5b 76 5d 20 64 64 64 64 20 5b 76 5d 20 4c 54 22 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 22 5b 76 65 20 73 74 5c 75 30 31 35 39 65 64 75 20 76 5d 20 4c 54 22 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 22 5b 76 65 20 5c 75 30 31 30 64 74 76 72 74 65 6b 20 76 5d 20 4c 54 22 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 22 5b 76 20 70 5c 78 65 31 74 65 6b 20 76 5d 20 4c 54 22 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 22 5b 76 20 73 6f 62 6f 74 75 20 76 5d 20 4c 54 22 7d 7d 2c 6c 61 73 74 44 61 79 3a 22 5b 76 5c 75 30 31 30 64 65 72 61 20 76 5d 20 4c 54 22 2c 6c 61 73 74 57 65 65 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 73 77 69 74 63 68 28 74 68 69 73 2e 64 61 79 28 29 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 22 5b 6d 69 6e 75 6c 6f 75 Data Ascii: :return"[v] dddd [v] LT";case 3:return"[ve st\u0159edu v] LT";case 4:return"[ve \u010dtvrtek v] LT";case 5:return"[v p\xe1tek v] LT";case 6:return"[v sobotu v] LT"}},lastDay:"[v\u010dera v] LT",lastWeek:function(){switch(this.day()){case 0:return"[minulou
2023-08-10 21:19:35 UTC	11207	IN	Data Raw: 3a 22 74 68 22 29 7d 2c 77 65 65 6b 3a 7b 64 6f 77 3a 31 2c 64 6f 79 3a 34 7d 7d 29 2c 6e 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 65 6e 2d 63 61 22 2c 7b 6d 6f 6e 74 68 73 3a 22 4a 61 6e 75 61 72 79 5f 46 65 62 72 75 61 72 79 5f 4d 61 72 63 68 5f 41 70 72 69 6c 5f 4d 61 79 5f 4a 75 6e 65 5f 4a 75 6c 79 5f 41 75 67 75 73 74 5f 53 65 70 74 65 6d 62 65 72 5f 4f 63 74 6f 62 65 72 5f 4e 6f 76 65 6d 62 65 72 5f 44 65 63 65 6d 62 65 72 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 4a 61 6e 5f 46 65 62 5f 4d 61 72 5f 41 70 72 5f 4d 61 79 5f 4a 75 6e 5f 4a 75 6c 5f 41 75 67 5f 53 65 70 5f 4f 63 74 5f 4e 6f 76 5f 44 65 63 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 22 53 75 6e 64 61 79 5f 4d 6f 6e 64 61 79 Data Ascii: :"th")},week:{dow:1,doy:4}}),n.defineLocale("en-ca",{months:"January_February_March_April_May_June_July_August_September_October_November_December".split("_"),monthsShort:"Jan_Feb_Mar_Apr_May_Jun_Jul_Aug_Sep_Oct_Nov_Dec".split("_"),weekdays:"Sunday_Monday
2023-08-10 21:19:35 UTC	11223	IN	Data Raw: 75 75 5f 74 6f 75 6b 6f 6b 75 75 5f 6b 65 73 5c 78 65 34 6b 75 75 5f 68 65 69 6e 5c 78 65 34 6b 75 75 5f 65 6c 6f 6b 75 75 5f 73 79 79 73 6b 75 75 5f 6c 6f 6b 61 6b 75 75 5f 6d 61 72 72 61 73 6b 75 75 5f 6a 6f 75 6c 75 6b 75 75 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 74 61 6d 6d 69 5f 68 65 6c 6d 69 5f 6d 61 61 6c 69 73 5f 68 75 68 74 69 5f 74 6f 75 6b 6f 5f 6b 65 73 5c 78 65 34 5f 68 65 69 6e 5c 78 65 34 5f 65 6c 6f 5f 73 79 79 73 5f 6c 6f 6b 61 5f 6d 61 72 72 61 73 5f 6a 6f 75 6c 75 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 3a 22 73 75 6e 6e 75 6e 74 61 69 5f 6d 61 61 6e 61 6e 74 61 69 5f 74 69 69 73 74 61 69 5f 6b 65 73 6b 69 76 69 69 6b 6b 6f 5f 74 6f 72 73 74 61 69 5f 70 65 72 6a 61 6e 74 61 Data Ascii: uu_toukokuu_kes\xe4kuu_hein\xe4kuu_elokuu_syyskuu_lokakuu_marraskuu_joulukuu".split("_"),monthsShort:"tammi_helmi_maalis_huhti_touko_kes\xe4_hein\xe4_elo_syys_loka_marras_joulu".split("_"),weekdays:"sunnuntai_maanantai_tiistai_keskiviikko_torstai_perjanta
2023-08-10 21:19:35 UTC	11239	IN	Data Raw: 3a 6e 2b 22 20 5c 75 30 35 64 37 5c 75 30 35 64 35 5c 75 30 35 64 33 5c 75 30 35 65 39 5c 75 30 35 64 39 5c 75 30 35 64 64 22 7d 2c 79 3a 22 5c 75 30 35 65 39 5c 75 30 35 65 30 5c 75 30 35 64 34 22 2c 79 79 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 32 3d 3d 3d 6e 3f 22 5c 75 30 35 65 39 5c 75 30 35 65 30 5c 75 30 35 65 61 5c 75 30 35 64 39 5c 75 30 35 64 39 5c 75 30 35 64 64 22 3a 6e 25 31 30 3d 3d 30 26 26 31 30 21 3d 3d 6e 3f 6e 2b 22 20 5c 75 30 35 65 39 5c 75 30 35 65 30 5c 75 30 35 64 34 22 3a 6e 2b 22 20 5c 75 30 35 65 39 5c 75 30 35 65 30 5c 75 30 35 64 39 5c 75 30 35 64 64 22 7d 7d 2c 6d 65 72 69 64 69 65 6d 50 61 72 73 65 3a 2f 5c 75 30 35 64 30 5c 75 30 35 64 37 5c 75 30 35 64 34 22 5c 75 30 35 65 36 7c 5c 75 30 35 64 63 5c 75 Data Ascii: :n+" \u05d7\u05d5\u05d3\u05e9\u05d9\u05dd"},y:"\u05e9\u05e0\u05d4",yy:function(n){return 2===n?"\u05e9\u05e0\u05ea\u05d9\u05d9\u05dd":n%10==0&&10!==n?n+" \u05e9\u05e0\u05d4":n+" \u05e9\u05e0\u05d9\u05dd"}},meridiemParse:/\u05d0\u05d7\u05d4"\u05e6\|\u05dc\u
2023-08-10 21:19:35 UTC	11255	IN	Data Raw: 6b 75 6c 5d 20 4c 54 22 2c 6e 65 78 74 44 61 79 3a 22 5b 4d 62 65 6e 6a 61 6e 67 20 70 75 6b 75 6c 5d 20 4c 54 22 2c 6e 65 78 74 57 65 65 6b 3a 22 64 64 64 64 20 5b 70 75 6b 75 6c 5d 20 4c 54 22 2c 6c 61 73 74 44 61 79 3a 22 5b 4b 61 6c 61 20 77 69 6e 67 69 20 70 75 6b 75 6c 5d 20 4c 54 22 2c 6c 61 73 74 57 65 65 6b 3a 22 64 64 64 64 20 5b 6b 65 70 65 6e 67 6b 65 72 20 70 75 6b 75 6c 5d 20 4c 54 22 2c 73 61 6d 65 45 6c 73 65 3a 22 4c 22 7d 2c 72 65 6c 61 74 69 76 65 54 69 6d 65 3a 7b 66 75 74 75 72 65 3a 22 77 6f 6e 74 65 6e 20 69 6e 67 20 25 73 22 2c 70 61 73 74 3a 22 25 73 20 69 6e 67 6b 61 6e 67 20 6b 65 70 65 6e 67 6b 65 72 22 2c 73 3a 22 73 61 77 65 74 61 77 69 73 20 64 65 74 69 6b 22 2c 6d 3a 22 73 65 74 75 6e 67 67 61 6c 20 6d 65 6e 69 74 22 2c 6d Data Ascii: kul] LT",nextDay:"[Mbenjang pukul] LT",nextWeek:"dddd [pukul] LT",lastDay:"[Kala wingi pukul] LT",lastWeek:"dddd [kepengker pukul] LT",sameElse:"L"},relativeTime:{future:"wonten ing %s",past:"%s ingkang kepengker",s:"sawetawis detik",m:"setunggal menit",m
2023-08-10 21:19:35 UTC	11271	IN	Data Raw: 34 33 62 5c 75 30 34 34 63 5f 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 64 5c 75 30 34 34 32 5c 75 30 34 34 66 5c 75 30 34 33 31 5c 75 30 34 34 30 5c 75 30 34 34 63 5f 5c 75 30 34 33 65 5c 75 30 34 33 61 5c 75 30 34 34 32 5c 75 30 34 34 66 5c 75 30 34 33 31 5c 75 30 34 34 30 5c 75 30 34 34 63 5f 5c 75 30 34 33 64 5c 75 30 34 33 65 5c 75 30 34 34 66 5c 75 30 34 33 31 5c 75 30 34 34 30 5c 75 30 34 34 63 5f 5c 75 30 34 33 34 5c 75 30 34 33 35 5c 75 30 34 33 61 5c 75 30 34 33 30 5c 75 30 34 33 31 5c 75 30 34 34 30 5c 75 30 34 34 63 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 34 34 66 5c 75 30 34 33 Data Ascii: 43b\u044c_\u0430\u0432\u0433\u0443\u0441\u0442_\u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c_\u043e\u043a\u0442\u044f\u0431\u0440\u044c_\u043d\u043e\u044f\u0431\u0440\u044c_\u0434\u0435\u043a\u0430\u0431\u0440\u044c".split("_"),monthsShort:"\u044f\u043
2023-08-10 21:19:35 UTC	11287	IN	Data Raw: 64 33 35 5c 75 30 64 33 30 5c 75 30 64 33 66 5f 5c 75 30 64 32 62 5c 75 30 64 34 36 5c 75 30 64 32 63 5c 75 30 64 34 64 5c 75 30 64 33 30 5c 75 30 64 34 31 5c 75 30 64 33 35 5c 75 30 64 33 30 5c 75 30 64 33 66 5f 5c 75 30 64 32 65 5c 75 30 64 33 65 5c 75 30 64 37 63 5c 75 30 64 31 61 5c 75 30 64 34 64 5c 75 30 64 31 61 5c 75 30 64 34 64 5f 5c 75 30 64 30 66 5c 75 30 64 32 61 5c 75 30 64 34 64 5c 75 30 64 33 30 5c 75 30 64 33 66 5c 75 30 64 37 64 5f 5c 75 30 64 32 65 5c 75 30 64 34 37 5c 75 30 64 32 66 5c 75 30 64 34 64 5f 5c 75 30 64 31 63 5c 75 30 64 34 32 5c 75 30 64 37 61 5f 5c 75 30 64 31 63 5c 75 30 64 34 32 5c 75 30 64 33 32 5c 75 30 64 34 38 5f 5c 75 30 64 31 33 5c 75 30 64 31 37 5c 75 30 64 33 38 5c 75 30 64 34 64 5c 75 30 64 33 31 5c 75 30 64 34 Data Ascii: d35\u0d30\u0d3f_\u0d2b\u0d46\u0d2c\u0d4d\u0d30\u0d41\u0d35\u0d30\u0d3f_\u0d2e\u0d3e\u0d7c\u0d1a\u0d4d\u0d1a\u0d4d_\u0d0f\u0d2a\u0d4d\u0d30\u0d3f\u0d7d_\u0d2e\u0d47\u0d2f\u0d4d_\u0d1c\u0d42\u0d7a_\u0d1c\u0d42\u0d32\u0d48_\u0d13\u0d17\u0d38\u0d4d\u0d31\u0d4
2023-08-10 21:19:35 UTC	11303	IN	Data Raw: 5c 75 30 39 33 65 22 2c 64 3a 22 5c 75 30 39 30 66 5c 75 30 39 31 35 20 5c 75 30 39 32 36 5c 75 30 39 33 66 5c 75 30 39 32 38 22 2c 64 64 3a 22 25 64 20 5c 75 30 39 32 36 5c 75 30 39 33 66 5c 75 30 39 32 38 22 2c 4d 3a 22 5c 75 30 39 30 66 5c 75 30 39 31 35 20 5c 75 30 39 32 65 5c 75 30 39 33 39 5c 75 30 39 33 66 5c 75 30 39 32 38 5c 75 30 39 33 65 22 2c 4d 4d 3a 22 25 64 20 5c 75 30 39 32 65 5c 75 30 39 33 39 5c 75 30 39 33 66 5c 75 30 39 32 38 5c 75 30 39 33 65 22 2c 79 3a 22 5c 75 30 39 30 66 5c 75 30 39 31 35 20 5c 75 30 39 32 63 5c 75 30 39 33 30 5c 75 30 39 34 64 5c 75 30 39 33 37 22 2c 79 79 3a 22 25 64 20 5c 75 30 39 32 63 5c 75 30 39 33 30 5c 75 30 39 34 64 5c 75 30 39 33 37 22 7d 2c 77 65 65 6b 3a 7b 64 6f 77 3a 30 2c 64 6f 79 3a 36 7d 7d 29 3b Data Ascii: \u093e",d:"\u090f\u0915 \u0926\u093f\u0928",dd:"%d \u0926\u093f\u0928",M:"\u090f\u0915 \u092e\u0939\u093f\u0928\u093e",MM:"%d \u092e\u0939\u093f\u0928\u093e",y:"\u090f\u0915 \u092c\u0930\u094d\u0937",yy:"%d \u092c\u0930\u094d\u0937"},week:{dow:0,doy:6}});
2023-08-10 21:19:35 UTC	11319	IN	Data Raw: 30 34 33 39 5c 75 30 34 34 66 5d 7c 5c 75 30 34 33 38 5c 75 30 34 34 65 5c 75 30 34 33 64 5b 5c 75 30 34 34 63 5c 75 30 34 34 66 5d 7c 5c 75 30 34 33 38 5c 75 30 34 34 65 5c 75 30 34 33 64 5c 2e 3f 7c 5c 75 30 34 33 38 5c 75 30 34 34 65 5c 75 30 34 33 62 5b 5c 75 30 34 34 63 5c 75 30 34 34 66 5d 7c 5c 75 30 34 33 38 5c 75 30 34 34 65 5c 75 30 34 33 62 5c 2e 3f 7c 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 75 30 34 34 33 5c 75 30 34 34 31 5c 75 30 34 34 32 5c 75 30 34 33 30 3f 7c 5c 75 30 34 33 30 5c 75 30 34 33 32 5c 75 30 34 33 33 5c 2e 3f 7c 5c 75 30 34 34 31 5c 75 30 34 33 35 5c 75 30 34 33 64 5c 75 30 34 34 32 5c 75 30 34 34 66 5c 75 30 34 33 31 5c 75 30 34 34 30 5b 5c 75 30 34 34 63 5c 75 30 34 34 66 5d 7c 5c 75 30 34 34 31 5c 75 30 34 Data Ascii: 0439\u044f]\|\u0438\u044e\u043d[\u044c\u044f]\|\u0438\u044e\u043d\.?\|\u0438\u044e\u043b[\u044c\u044f]\|\u0438\u044e\u043b\.?\|\u0430\u0432\u0433\u0443\u0441\u0442\u0430?\|\u0430\u0432\u0433\.?\|\u0441\u0435\u043d\u0442\u044f\u0431\u0440[\u044c\u044f]\|\u0441\u04
2023-08-10 21:19:35 UTC	11335	IN	Data Raw: 75 30 34 34 31 5c 75 30 34 34 33 5c 75 30 34 33 31 2e 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 4d 69 6e 3a 22 5c 75 30 34 33 64 5c 75 30 34 33 35 5f 5c 75 30 34 33 66 5c 75 30 34 33 65 5f 5c 75 30 34 34 33 5c 75 30 34 34 32 5f 5c 75 30 34 34 31 5c 75 30 34 34 30 5f 5c 75 30 34 34 37 5c 75 30 34 33 35 5f 5c 75 30 34 33 66 5c 75 30 34 33 35 5f 5c 75 30 34 34 31 5c 75 30 34 34 33 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 77 65 65 6b 64 61 79 73 50 61 72 73 65 45 78 61 63 74 3a 21 30 2c 6c 6f 6e 67 44 61 74 65 46 6f 72 6d 61 74 3a 7b 4c 54 3a 22 48 3a 6d 6d 22 2c 4c 54 53 3a 22 48 3a 6d 6d 3a 73 73 22 2c 4c 3a 22 44 44 2e 4d 4d 2e 59 59 59 59 22 2c 4c 4c 3a 22 44 2e 20 4d 4d 4d 4d 20 59 59 59 59 22 2c 4c 4c 4c 3a 22 44 2e 20 4d 4d 4d 4d 20 Data Ascii: u0441\u0443\u0431.".split("_"),weekdaysMin:"\u043d\u0435_\u043f\u043e_\u0443\u0442_\u0441\u0440_\u0447\u0435_\u043f\u0435_\u0441\u0443".split("_"),weekdaysParseExact:!0,longDateFormat:{LT:"H:mm",LTS:"H:mm:ss",L:"DD.MM.YYYY",LL:"D. MMMM YYYY",LLL:"D. MMMM
2023-08-10 21:19:35 UTC	11591	IN	Data Raw: 75 30 65 32 38 5c 75 30 65 30 38 5c 75 30 65 33 34 5c 75 30 65 30 31 5c 75 30 65 33 32 5c 75 30 65 32 32 5c 75 30 65 31 39 5f 5c 75 30 65 31 38 5c 75 30 65 33 31 5c 75 30 65 31 39 5c 75 30 65 32 37 5c 75 30 65 33 32 5c 75 30 65 30 34 5c 75 30 65 32 31 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 22 5c 75 30 65 32 31 2e 5c 75 30 65 30 34 2e 5f 5c 75 30 65 30 31 2e 5c 75 30 65 31 65 2e 5f 5c 75 30 65 32 31 5c 75 30 65 33 35 2e 5c 75 30 65 30 34 2e 5f 5c 75 30 65 34 30 5c 75 30 65 32 31 2e 5c 75 30 65 32 32 2e 5f 5c 75 30 65 31 65 2e 5c 75 30 65 30 34 2e 5f 5c 75 30 65 32 31 5c 75 30 65 33 34 2e 5c 75 30 65 32 32 2e 5f 5c 75 30 65 30 31 2e 5c 75 30 65 30 34 2e 5f 5c 75 30 65 32 61 2e 5c 75 30 65 30 34 2e 5f 5c 75 30 65 30 31 2e Data Ascii: u0e28\u0e08\u0e34\u0e01\u0e32\u0e22\u0e19_\u0e18\u0e31\u0e19\u0e27\u0e32\u0e04\u0e21".split("_"),monthsShort:"\u0e21.\u0e04._\u0e01.\u0e1e._\u0e21\u0e35.\u0e04._\u0e40\u0e21.\u0e22._\u0e1e.\u0e04._\u0e21\u0e34.\u0e22._\u0e01.\u0e04._\u0e2a.\u0e04._\u0e01.
2023-08-10 21:19:35 UTC	11607	IN	Data Raw: 63 31 5c 75 30 36 34 31 5c 75 30 36 32 61 5c 75 Data Ascii: c1\u0641\u062a\u
2023-08-10 21:19:35 UTC	11623	IN	Data Raw: 30 36 63 31 22 5d 2c 6e 2e 64 65 66 69 6e 65 4c 6f 63 61 6c 65 28 22 75 72 22 2c 7b 6d 6f 6e 74 68 73 3a 75 65 2c 6d 6f 6e 74 68 73 53 68 6f 72 74 3a 75 65 2c 77 65 65 6b 64 61 79 73 3a 79 66 2c 77 65 65 6b 64 61 79 73 53 68 6f 72 74 3a 79 66 2c 77 65 65 6b 64 61 79 73 4d 69 6e 3a 79 66 2c 6c 6f 6e 67 44 61 74 65 46 6f 72 6d 61 74 3a 7b 4c 54 3a 22 48 48 3a 6d 6d 22 2c 4c 54 53 3a 22 48 48 3a 6d 6d 3a 73 73 22 2c 4c 3a 22 44 44 2f 4d 4d 2f 59 59 59 59 22 2c 4c 4c 3a 22 44 20 4d 4d 4d 4d 20 59 59 59 59 22 2c 4c 4c 4c 3a 22 44 20 4d 4d 4d 4d 20 59 59 59 59 20 48 48 3a 6d 6d 22 2c 4c 4c 4c 4c 3a 22 64 64 64 64 5c 75 30 36 30 63 20 44 20 4d 4d 4d 4d 20 59 59 59 59 20 48 48 3a 6d 6d 22 7d 2c 6d 65 72 69 64 69 65 6d 50 61 72 73 65 3a 2f 5c 75 30 36 33 35 5c 75 Data Ascii: 06c1"],n.defineLocale("ur",{months:ue,monthsShort:ue,weekdays:yf,weekdaysShort:yf,weekdaysMin:yf,longDateFormat:{LT:"HH:mm",LTS:"HH:mm:ss",L:"DD/MM/YYYY",LL:"D MMMM YYYY",LLL:"D MMMM YYYY HH:mm",LLLL:"dddd\u060c D MMMM YYYY HH:mm"},meridiemParse:/\u0635\u
2023-08-10 21:19:35 UTC	11639	IN	Data Raw: 29 2e 66 6f 72 6d 61 74 28 69 29 7d 7d 5d 29 2c 74 2e 6d 6f 64 75 6c 65 28 22 67 64 69 32 32 39 30 2e 61 6d 54 69 6d 65 41 67 6f 22 29 2e 64 69 72 65 63 74 69 76 65 28 22 61 6d 54 69 6d 65 41 67 6f 22 2c 5b 22 24 6d 6f 6d 65 6e 74 22 2c 22 24 74 69 6d 65 6f 75 74 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6e 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 6e 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 22 22 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 75 2c 66 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 73 26 26 28 69 2e 63 61 6e 63 65 6c 28 73 29 2c 73 3d 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 76 61 72 20 72 2c 75 3b 66 2e 74 65 78 74 28 74 Data Ascii: ).format(i)}}]),t.module("gdi2290.amTimeAgo").directive("amTimeAgo",["$moment","$timeout",function(n,i){function r(n){return typeof n=="undefined"\|\|n===null\|\|n===""}return function(u,f,e){function c(){s&&(i.cancel(s),s=null)}function l(t){var r,u;f.text(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
246	192.168.2.3	50101	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	9885	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/adminbootstrap.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	10137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 108966 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:13:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=210754150969253162717097179691353365402"}],"include_subdomains ":true} Server: ECAcc (muc/332B) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f7b520f9-501e-0023-03d2-ca5002000000 Content-Length: 539647 Connection: close
2023-08-10 21:19:35 UTC	10138	IN	Data Raw: 76 61 72 20 41 64 6d 69 6e 41 70 70 2c 41 64 6d 69 6e 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 3b 6e 2e 61 70 70 3d 41 64 6d 69 6e 41 70 70 3d 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 41 64 6d 69 6e 53 50 41 22 2c 5b 22 6e 67 52 6f 75 74 65 22 2c 22 6e 67 41 6e 69 6d 61 74 65 22 2c 22 6e 67 43 6f 6f 6b 69 65 73 22 2c 22 75 69 2e 62 6f 6f 74 73 74 72 61 70 22 2c 22 75 69 2e 72 6f 75 74 65 72 22 2c 22 6e 67 53 61 6e 69 74 69 7a 65 22 2c 22 6e 67 52 65 73 6f 75 72 63 65 22 2c 22 61 6e 67 75 6c 61 72 2d 74 6f 75 72 22 2c 22 6b 65 6e 64 6f 2e 64 69 72 65 63 74 69 76 65 73 22 2c 22 6e 67 4d 65 73 73 61 67 65 73 22 2c 22 6d 67 6f 2d 61 6e 67 75 6c 61 72 2d 77 69 7a 61 72 64 22 2c 22 6e 67 41 72 69 61 22 2c 22 6e 67 Data Ascii: var AdminApp,Admin;(function(n){'use strict';;n.app=AdminApp=angular.module("AdminSPA",["ngRoute","ngAnimate","ngCookies","ui.bootstrap","ui.router","ngSanitize","ngResource","angular-tour","kendo.directives","ngMessages","mgo-angular-wizard","ngAria","ng
2023-08-10 21:19:35 UTC	10154	IN	Data Raw: 27 Data Ascii: '
2023-08-10 21:19:35 UTC	10154	IN	Data Raw: 2c 27 43 6f 6e 74 61 63 74 27 2c 27 67 75 65 73 74 75 73 65 72 73 27 2c 27 52 65 73 6f 75 72 63 65 4d 61 69 6c 62 6f 78 27 2c 27 62 69 6c 6c 69 6e 67 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 27 2c 27 69 6e 74 75 6e 65 70 6f 6c 69 63 69 65 73 27 2c 27 74 65 61 6d 73 75 73 65 72 73 65 74 74 69 6e 67 73 27 2c 27 61 76 61 69 6c 61 62 69 6c 69 74 79 27 2c 27 6c 69 63 65 6e 73 65 73 27 2c 27 4c 69 63 65 6e 73 65 4d 61 6e 61 67 65 6d 65 6e 74 55 6e 69 74 73 27 2c 27 45 6d 61 69 6c 4d 69 67 72 61 74 69 6f 6e 27 2c 27 62 69 6c 6c 6f 76 65 72 76 69 65 77 27 2c 27 62 69 6c 6c 69 6e 67 70 72 6f 66 69 6c 65 27 2c 27 70 61 72 74 6e 65 72 73 27 2c 27 4d 65 73 73 61 67 65 43 65 6e 74 65 72 27 2c 27 6d 65 73 73 61 67 65 63 65 6e 74 65 72 27 2c 27 4d 69 63 72 6f 73 6f 66 74 Data Ascii: ,'Contact','guestusers','ResourceMailbox','billingNotifications','intunepolicies','teamsusersettings','availability','licenses','LicenseManagementUnits','EmailMigration','billoverview','billingprofile','partners','MessageCenter','messagecenter','Microsoft
2023-08-10 21:19:35 UTC	10389	IN	Data Raw: 6e 27 2c 72 65 61 63 74 4f 6e 6c 79 3a 21 30 7d 7d 2c 7b 6e 61 6d 65 3a 22 42 75 79 44 6f 6d 61 69 6e 57 69 7a 61 72 64 22 2c 63 6f 6e 66 69 67 3a 7b 75 72 6c 3a 22 2f 44 6f 6d 61 69 6e 73 2f 42 75 79 22 2c 74 69 74 6c 65 3a 27 42 75 79 20 64 6f 6d 61 69 6e 27 2c 72 65 61 63 74 4f 6e 6c 79 3a 21 30 7d 7d 2c 7b 6e 61 6d 65 3a 22 44 6f 6d 61 69 6e 44 65 74 61 69 6c 73 22 2c 63 6f 6e 66 69 67 3a 7b 75 72 6c 3a 22 2f 44 6f 6d 61 69 6e 73 2f 44 65 74 61 69 6c 73 22 2c 74 69 74 6c 65 3a 27 44 6f 6d 61 69 6e 20 64 65 74 61 69 6c 73 27 2c 72 65 61 63 74 4f 6e 6c 79 3a 21 30 7d 7d 2c 7b 6e 61 6d 65 3a 22 53 70 65 63 69 61 6c 4f 66 66 65 72 57 69 7a 61 72 64 22 2c 63 6f 6e 66 69 67 3a 7b 75 72 6c 3a 22 2f 44 6f 6d 61 69 6e 73 2f 53 4f 57 69 7a 61 72 64 22 2c 74 69 Data Ascii: n',reactOnly:!0}},{name:"BuyDomainWizard",config:{url:"/Domains/Buy",title:'Buy domain',reactOnly:!0}},{name:"DomainDetails",config:{url:"/Domains/Details",title:'Domain details',reactOnly:!0}},{name:"SpecialOfferWizard",config:{url:"/Domains/SOWizard",ti
2023-08-10 21:19:35 UTC	10405	IN	Data Raw: 69 72 73 74 56 69 73 69 74 22 2c 74 29 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 53 68 61 72 65 64 2e 53 65 74 48 74 6d 6c 35 53 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 28 22 49 73 46 69 72 73 74 56 69 73 69 74 22 2c 22 31 22 29 29 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 49 6e 73 69 67 68 74 73 2e 4c 6f 67 45 76 65 6e 74 41 6e 64 50 61 72 61 6d 73 28 6e 2c 74 29 7d 7d 63 61 74 63 68 28 72 29 7b 7d 7d 2c 74 68 69 73 2e 4c 6f 67 50 61 67 65 52 65 61 64 79 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 26 26 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 49 6e 73 69 67 68 74 73 2e 4c 6f 67 45 76 65 6e 74 28 6e 29 7d 2c 74 68 69 73 2e 4c 6f 67 50 61 67 65 52 Data Ascii: irstVisit",t),Microsoft.Online.BOX.JS.Shared.SetHtml5SessionStorage("IsFirstVisit","1")),Microsoft.Online.BOX.JS.Insights.LogEventAndParams(n,t)}}catch(r){}},this.LogPageReadyEvent=function(n){n&&Microsoft.Online.BOX.JS.Insights.LogEvent(n)},this.LogPageR
2023-08-10 21:19:35 UTC	10421	IN	Data Raw: 61 70 70 69 6e 67 2e 44 69 72 53 79 6e 63 4f 62 6a 65 63 74 45 72 72 6f 72 73 3d 7b 43 6c 69 63 6b 41 63 74 69 6f 6e 3a 7b 61 63 74 69 6f 6e 3a 22 64 69 72 73 79 6e 63 6f 62 6a 65 63 74 65 72 72 6f 72 73 22 2c 57 69 6e 64 6f 77 54 79 70 65 3a 22 70 61 67 65 22 7d 2c 46 65 61 74 75 72 65 49 64 3a 22 44 69 72 53 79 6e 63 4f 62 6a 65 63 74 45 72 72 6f 72 73 22 2c 53 65 61 72 63 68 52 65 73 75 6c 74 43 61 74 65 67 6f 72 79 3a 22 4e 61 76 69 67 61 74 69 6f 6e 22 2c 74 67 74 3a 22 64 69 72 73 79 6e 63 6f 62 6a 65 63 74 65 72 72 6f 72 73 22 7d 2c 4d 6f 64 65 72 6e 53 65 61 72 63 68 4f 7a 44 61 74 61 4d 61 70 70 69 6e 67 2e 53 75 62 73 63 72 69 70 74 69 6f 6e 73 3d 7b 43 6c 69 63 6b 41 63 74 69 6f 6e 3a 7b 61 63 74 69 6f 6e 3a 22 73 75 62 73 63 72 69 70 74 69 6f Data Ascii: apping.DirSyncObjectErrors={ClickAction:{action:"dirsyncobjecterrors",WindowType:"page"},FeatureId:"DirSyncObjectErrors",SearchResultCategory:"Navigation",tgt:"dirsyncobjecterrors"},ModernSearchOzDataMapping.Subscriptions={ClickAction:{action:"subscriptio
2023-08-10 21:19:35 UTC	10709	IN	Data Raw: 61 4d 61 70 70 69 6e 67 2e 41 44 46 53 44 65 70 6c 6f 79 6d 65 6e 74 41 64 76 69 73 6f 72 3d 7b 43 6c 69 63 6b 41 63 74 69 6f 6e 3a 7b 61 63 74 69 6f 6e 3a 22 41 44 46 53 44 65 70 6c 6f 79 6d 65 6e 74 41 64 76 69 73 6f 72 4c 69 6e 6b 22 2c 57 69 6e 64 6f 77 54 79 70 65 3a 22 55 52 4c 22 7d 2c 46 65 61 74 75 72 65 49 64 3a 22 4d 6f 64 65 72 6e 53 65 61 72 63 68 22 2c 53 65 61 72 63 68 52 65 73 75 6c 74 43 61 74 65 67 6f 72 79 3a 22 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 7d 2c 4d 6f 64 65 72 6e 53 65 61 72 63 68 4f 7a 44 61 74 61 4d 61 70 70 69 6e 67 2e 4d 69 63 72 6f 73 6f 66 74 44 65 66 65 6e 64 65 72 41 64 76 61 6e 63 65 64 54 68 72 65 61 74 50 72 6f 74 65 63 74 69 6f 6e 41 64 76 69 73 6f 72 3d 7b 43 6c 69 63 6b 41 63 74 69 6f 6e 3a 7b 61 63 74 69 6f Data Ascii: aMapping.ADFSDeploymentAdvisor={ClickAction:{action:"ADFSDeploymentAdvisorLink",WindowType:"URL"},FeatureId:"ModernSearch",SearchResultCategory:"Documentation"},ModernSearchOzDataMapping.MicrosoftDefenderAdvancedThreatProtectionAdvisor={ClickAction:{actio
2023-08-10 21:19:35 UTC	10725	IN	Data Raw: 46 6c 61 76 6f 72 24 70 24 30 3d 6e 65 77 20 41 72 72 61 79 28 74 68 69 73 2e 67 65 74 5f 65 6e 75 6d 54 79 70 65 43 6f 75 6e 74 28 29 29 2c 74 68 69 73 2e 5f 6d 5f 65 6e 75 6d 54 79 70 65 4d 65 6d 62 65 72 4e 61 6d 65 73 24 70 24 30 3d 6e 65 77 20 41 72 72 61 79 28 74 68 69 73 2e 67 65 74 5f 65 6e 75 6d 54 79 70 65 43 6f 75 6e 74 28 29 29 2c 65 3d 30 3b 65 3c 74 68 69 73 2e 67 65 74 5f 65 6e 75 6d 54 79 70 65 43 6f 75 6e 74 28 29 3b 2b 2b 65 29 66 6f 72 28 74 68 69 73 2e 5f 6d 5f 65 6e 75 6d 54 79 70 65 4e 61 6d 65 73 24 70 24 30 5b 65 5d 3d 74 2e 67 65 74 53 74 72 69 6e 67 28 6e 2e 67 65 74 5f 69 74 65 6d 28 69 29 29 2c 2b 2b 69 2c 74 68 69 73 2e 5f 6d 5f 65 6e 75 6d 54 79 70 65 46 6c 61 76 6f 72 24 70 24 30 5b 65 5d 3d 6e 2e 67 65 74 5f 69 74 65 6d 28 Data Ascii: Flavor$p$0=new Array(this.get_enumTypeCount()),this._m_enumTypeMemberNames$p$0=new Array(this.get_enumTypeCount()),e=0;e<this.get_enumTypeCount();++e)for(this._m_enumTypeNames$p$0[e]=t.getString(n.get_item(i)),++i,this._m_enumTypeFlavor$p$0[e]=n.get_item(
2023-08-10 21:19:35 UTC	10741	IN	Data Raw: 28 29 7b 72 65 74 Data Ascii: (){ret
2023-08-10 21:19:35 UTC	10741	IN	Data Raw: 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 54 6f 53 74 72 69 6e 67 28 29 7d 2c 5f 6d 5f 61 6e 6e 6f 74 61 74 69 6f 6e 73 24 70 24 30 3a 6e 75 6c 6c 2c 5f 6d 5f 61 74 74 72 56 61 6c 75 65 50 61 69 72 73 24 70 24 30 3a 6e 75 6c 6c 7d 2c 4e 4c 52 54 2e 5f 66 65 61 74 75 72 65 42 75 6e 64 6c 65 2e 5f 61 74 74 72 56 61 6c 75 65 50 61 69 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 74 68 69 73 2e 73 65 74 5f 61 74 74 72 49 64 28 6e 29 2c 74 68 69 73 2e 73 65 74 5f 76 61 6c 75 65 28 74 29 7d 2c 4e 4c 52 54 2e 5f 66 65 61 74 75 72 65 42 75 6e 64 6c 65 2e 5f 61 74 74 72 56 61 6c 75 65 50 61 69 72 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 24 24 70 66 5f 41 74 74 72 49 64 24 70 24 30 3a 30 2c 67 65 74 5f 61 74 74 72 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: urn this.valueToString()},_m_annotations$p$0:null,_m_attrValuePairs$p$0:null},NLRT._featureBundle._attrValuePair=function(n,t){this.set_attrId(n),this.set_value(t)},NLRT._featureBundle._attrValuePair.prototype={_$$pf_AttrId$p$0:0,get_attrId:function(){ret
2023-08-10 21:19:35 UTC	10757	IN	Data Raw: 2e 5f 71 75 65 72 79 53 74 72 69 6e 67 46 69 6c 74 65 72 49 6e 69 74 28 69 2c 74 29 2c 30 29 3b 63 61 73 65 20 4e 4c 52 54 2e 5f 66 69 6c 74 65 72 46 61 63 74 6f 72 79 2e 5f 63 5f 53 74 72 69 6e 67 5f 51 75 65 72 79 5f 43 6f 6e 74 61 69 6e 73 24 70 3a 72 65 74 75 72 6e 20 6e 65 77 20 4e 4c 52 54 2e 5f 71 75 65 72 79 53 74 72 69 6e 67 46 69 6c 74 65 72 28 6e 65 77 20 4e 4c 52 54 2e 5f 71 75 65 72 79 53 74 72 69 6e 67 46 69 6c 74 65 72 49 6e 69 74 28 69 2c 74 29 2c 4e 4c 52 54 2e 5f 71 75 65 72 79 53 74 72 69 6e 67 46 69 6c 74 65 72 43 6f 6d 70 61 72 69 73 6f 6e 54 79 70 65 2e 63 6f 6e 74 61 69 6e 73 29 3b 63 61 73 65 20 4e 4c 52 54 2e 5f 66 69 6c 74 65 72 46 61 63 74 6f 72 79 2e 5f 63 5f 53 74 72 69 6e 67 5f 51 75 65 72 79 5f 53 74 61 72 74 73 57 69 74 68 Data Ascii: ._queryStringFilterInit(i,t),0);case NLRT._filterFactory._c_String_Query_Contains$p:return new NLRT._queryStringFilter(new NLRT._queryStringFilterInit(i,t),NLRT._queryStringFilterComparisonType.contains);case NLRT._filterFactory._c_String_Query_StartsWith
2023-08-10 21:19:35 UTC	10773	IN	Data Raw: 62 6c 65 49 64 5f 53 74 61 72 74 49 6e 64 65 78 28 29 3f 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 72 61 77 42 79 74 65 73 28 29 2e 72 65 61 64 49 6e 74 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 74 72 69 65 49 64 32 53 74 72 69 6e 67 54 61 62 6c 65 49 64 5f 53 74 61 72 74 49 6e 64 65 78 28 29 2b 69 2e 74 72 69 65 49 64 2a 34 2c 34 29 3a 69 2e 74 72 69 65 49 64 7d 2c 5f 67 65 74 53 74 72 69 6e 67 46 72 6f 6d 54 72 69 65 24 70 24 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 74 72 69 65 49 64 32 53 74 72 69 6e 67 54 61 62 6c 65 49 64 5f 53 74 61 72 74 49 6e 64 65 78 28 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 74 68 69 73 2e 5f 6d 5f 69 Data Ascii: bleId_StartIndex()?this._m_init$p$0.get_rawBytes().readInt(this._m_init$p$0.get_trieId2StringTableId_StartIndex()+i.trieId*4,4):i.trieId},_getStringFromTrie$p$0:function(n){if(this._m_init$p$0.get_trieId2StringTableId_StartIndex()){for(var t=0;t<this._m_i
2023-08-10 21:19:35 UTC	10789	IN	Data Raw: 24 24 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 22 5f 72 65 61 64 4f 6e 6c 79 4c 69 73 74 24 31 24 22 2b 6e 2e 67 65 74 4e 61 6d 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 27 5f 27 29 2c 74 2c 65 2c 75 2c 66 2c 72 3b 69 66 28 21 4e 4c 52 54 5b 69 5d 29 7b 74 3d 4e 4c 52 54 5b 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 4e 4c 52 54 2e 5f 72 65 61 64 4f 6e 6c 79 4c 69 73 74 24 31 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 2c 74 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 27 4e 4c 52 54 2e 27 2b 69 2c 6e 75 6c 6c 2c 4e 4c 52 54 2e 5f 69 52 65 61 64 4f 6e 6c 79 Data Ascii: $$=function(n){var i="_readOnlyList$1$"+n.getName().replace(/\./g,'_'),t,e,u,f,r;if(!NLRT[i]){t=NLRT[i]=function(){for(var t=[],n=0;n<arguments.length;++n)t[n]=arguments[n];NLRT._readOnlyList$1.apply(this,t)},t.registerClass('NLRT.'+i,null,NLRT._iReadOnly
2023-08-10 21:19:35 UTC	10805	IN	Data Raw: 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 2e 69 6e 76 61 6c 69 64 4f 70 65 72 61 74 69 6f 6e 28 27 52 56 61 6c 75 65 20 6c 69 73 74 20 6c 65 6e 67 74 68 20 6d 69 73 6d 61 74 63 68 20 69 6e 20 46 69 65 6c 64 20 71 75 65 72 79 20 73 74 65 70 20 73 74 6f 72 65 27 29 3b 66 6f 72 28 66 3d 30 2c 62 3d 65 2e 67 65 74 5f 69 74 65 6d 73 28 29 2e 6c 65 6e 67 74 68 3b 66 3c 62 3b 2b 2b 66 29 75 3d 65 2e 67 65 74 5f 69 74 65 6d 73 28 29 5b 66 5d 2c 75 2e 67 65 74 5f 69 73 52 65 61 64 4f 6e 6c 79 28 29 26 26 28 75 3d 75 2e 63 6c 6f 6e 65 28 29 2c 65 2e 67 65 74 5f 69 74 65 6d 73 28 29 5b 66 5d 3d 75 29 2c 75 2e 73 65 74 46 69 65 6c 64 56 61 6c 75 65 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 31 2e 67 65 74 5f 66 69 65 6c 64 49 6e 64 65 78 28 29 2c 6c 2e Data Ascii: ength)throw Error.invalidOperation('RValue list length mismatch in Field query step store');for(f=0,b=e.get_items().length;f<b;++f)u=e.get_items()[f],u.get_isReadOnly()&&(u=u.clone(),e.get_items()[f]=u),u.setFieldValue(this._m_init$p$1.get_fieldIndex(),l.
2023-08-10 21:19:35 UTC	10821	IN	Data Raw: 72 2c 75 2c 66 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 67 65 74 53 74 61 72 74 49 6e 64 65 78 41 6e 64 4c 65 6e 67 74 68 24 70 24 31 28 6e 2c 74 2c 75 3d 7b 76 61 6c 3a 69 7d 2c 66 3d 7b 76 61 6c 3a 72 7d 29 2c 69 3d 75 2e 76 61 6c 2c 72 3d 66 2e 76 61 6c 2c 6e 2e 73 75 62 73 74 72 69 6e 67 28 69 2c 72 29 7d 2c 5f 67 65 74 53 74 61 72 74 49 6e 64 65 78 41 6e 64 4c 65 6e 67 74 68 24 70 24 31 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 29 7b 69 66 28 69 2e 76 61 6c 3d 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 31 2e 67 65 74 5f 73 74 61 72 74 51 75 65 72 79 28 29 2e 6c 6f 61 64 49 6e 74 65 72 6e 61 6c 28 6e 2c 74 29 2c 69 2e 76 61 6c 3c 30 29 74 68 72 6f 77 20 45 72 72 6f 72 2e 69 6e 76 61 6c 69 64 4f 70 65 72 61 74 69 6f 6e 28 27 49 6e 76 61 6c Data Ascii: r,u,f;return this._getStartIndexAndLength$p$1(n,t,u={val:i},f={val:r}),i=u.val,r=f.val,n.substring(i,r)},_getStartIndexAndLength$p$1:function(n,t,i,r){if(i.val=this._m_init$p$1.get_startQuery().loadInternal(n,t),i.val<0)throw Error.invalidOperation('Inval
2023-08-10 21:19:35 UTC	11351	IN	Data Raw: 5f 69 74 65 6d 73 28 29 2c 65 3d 75 2e 6c 65 6e 67 74 68 2c 69 3d 30 3b 69 3c 65 3b 2b 2b 69 29 66 3d 75 5b 69 5d 2c 66 2e 72 65 6d 6f 76 65 41 6e 6e 6f 74 61 74 69 6f 6e 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 61 74 74 72 69 62 75 74 65 49 44 28 29 29 7d 2c 5f 6d 5f 69 6e 69 74 24 70 24 30 3a 6e 75 6c 6c 7d 2c 4e 4c 52 54 2e 5f 6e 65 77 41 6e 6e 6f 74 61 74 69 6f 6e 53 63 72 69 70 74 43 6f 6d 6d 61 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 4e 4c 52 54 2e 5f 76 61 6c 69 64 61 74 69 6f 6e 55 74 69 6c 73 2e 74 68 72 6f 77 49 66 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 28 6e 2c 27 69 6e 69 74 27 29 2c 4e 4c 52 54 2e 5f 76 61 6c 69 64 61 74 69 6f 6e 55 74 69 6c 73 2e 74 68 72 6f 77 49 66 4e 75 6c 6c 28 6e 2e 67 65 74 5f 61 6e 6e 6f 74 Data Ascii: _items(),e=u.length,i=0;i<e;++i)f=u[i],f.removeAnnotation(this._m_init$p$0.get_attributeID())},_m_init$p$0:null},NLRT._newAnnotationScriptCommand=function(n){NLRT._validationUtils.throwIfArgumentNull(n,'init'),NLRT._validationUtils.throwIfNull(n.get_annot
2023-08-10 21:19:35 UTC	11367	IN	Data Raw: 66 5f 53 72 65 24 70 24 30 7d 2c 73 65 74 5f 73 72 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 24 24 70 66 5f 53 72 65 24 70 24 30 3d 6e 2c 6e 7d 7d 2c 4e 4c 52 54 2e 5f 6e 6f 6e 74 65 72 6d 69 6e 61 6c 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 4e 4c 52 54 2e 5f 6e 6f 6e 74 65 72 6d 69 6e 61 6c 54 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 41 4e 44 3a 30 2c 4f 52 3a 31 2c 4e 4f 54 3a 32 7d 2c 4e 4c 52 54 2e 5f 6e 6f 6e 74 65 72 6d 69 6e 61 6c 54 79 70 65 2e 72 65 67 69 73 74 65 72 45 6e 75 6d 28 27 4e 4c 52 54 2e 5f 6e 6f 6e 74 65 72 6d 69 6e 61 6c 54 79 70 65 27 2c 21 31 29 2c 4e 4c 52 54 2e 5f 71 75 65 72 79 53 74 72 69 6e 67 46 69 6c 74 65 72 43 6f 6d 70 61 72 69 73 6f 6e 54 79 70 65 3d 66 75 6e 63 74 Data Ascii: f_Sre$p$0},set_sre:function(n){return this._$$pf_Sre$p$0=n,n}},NLRT._nonterminalType=function(){},NLRT._nonterminalType.prototype={AND:0,OR:1,NOT:2},NLRT._nonterminalType.registerEnum('NLRT._nonterminalType',!1),NLRT._queryStringFilterComparisonType=funct
2023-08-10 21:19:35 UTC	11383	IN	Data Raw: 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 61 6e 6e 6f 74 61 74 69 6f 6e 73 46 69 6c 74 65 72 28 29 26 26 21 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 61 6e 6e 6f 74 61 74 69 6f 6e 73 46 69 6c 74 65 72 28 29 2e 69 73 4d 61 74 63 68 28 66 2c 74 2c 6e 75 6c 6c 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 74 65 78 74 46 69 6c 74 65 72 28 29 29 69 66 28 73 3d 66 2e 74 72 79 47 65 74 41 6e 6e 6f 74 61 74 69 6f 6e 5f 43 61 73 74 28 53 74 72 69 6e 67 2c 74 68 69 73 2e 5f 6d 5f 69 6e 69 74 24 70 24 30 2e 67 65 74 5f 73 70 61 6e 5f 54 65 78 74 41 74 74 72 49 44 28 29 2c 6f 3d 7b 76 61 6c 3a 65 7d 29 2c 65 3d 6f 2e 76 61 6c 2c 73 29 7b 69 66 28 21 74 68 69 73 2e Data Ascii: (this._m_init$p$0.get_annotationsFilter()&&!this._m_init$p$0.get_annotationsFilter().isMatch(f,t,null))return!1;if(this._m_init$p$0.get_textFilter())if(s=f.tryGetAnnotation_Cast(String,this._m_init$p$0.get_span_TextAttrID(),o={val:e}),e=o.val,s){if(!this.
2023-08-10 21:19:35 UTC	11399	IN	Data Raw: 78 32 53 74 72 69 6e 67 43 Data Ascii: x2StringC
2023-08-10 21:19:35 UTC	11399	IN	Data Raw: 6f 75 6e 74 28 29 5b 72 5d 3d 30 2c 66 3d 30 3b 66 6f 72 28 76 61 72 20 79 3d 61 2c 62 3d 79 2e 6c 65 6e 67 74 68 2c 68 3d 30 3b 68 3c 62 3b 2b 2b 68 29 28 75 3d 79 5b 68 5d 2c 75 2e 67 65 74 5f 6d 61 78 45 78 69 73 74 69 6e 67 53 74 72 69 6e 67 73 28 29 3e 30 26 26 69 2e 76 61 6c 2e 67 65 74 5f 74 6f 6b 65 6e 49 6e 64 65 78 32 53 74 72 69 6e 67 43 6f 75 6e 74 28 29 5b 72 5d 2b 66 3e 3d 75 2e 67 65 74 5f 6d 61 78 45 78 69 73 74 69 6e 67 53 74 72 69 6e 67 73 28 29 29 7c 7c 28 21 75 2e 67 65 74 5f 74 6f 6b 65 6e 46 69 6c 74 65 72 28 29 7c 7c 75 2e 67 65 74 5f 74 6f 6b 65 6e 46 69 6c 74 65 72 28 29 2e 69 73 4d 61 74 63 68 28 6f 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 29 26 26 28 75 2e 61 70 70 6c 79 28 74 68 69 73 2c 6f 2c 72 2c 69 2e 76 61 6c 2c 65 2c 76 3d 7b 76 Data Ascii: ount()[r]=0,f=0;for(var y=a,b=y.length,h=0;h<b;++h)(u=y[h],u.get_maxExistingStrings()>0&&i.val.get_tokenIndex2StringCount()[r]+f>=u.get_maxExistingStrings())\|\|(!u.get_tokenFilter()\|\|u.get_tokenFilter().isMatch(o,null,null))&&(u.apply(this,o,r,i.val,e,v={v
2023-08-10 21:19:35 UTC	11415	IN	Data Raw: 49 64 32 49 6e 76 65 72 73 65 43 6c 61 73 73 46 72 65 71 75 65 6e 63 79 28 29 26 26 6e 2e 67 65 74 5f 69 6e 74 65 72 6e 61 6c 46 65 61 74 75 72 65 49 64 32 49 6e 76 65 72 73 65 43 6c 61 73 73 46 72 65 71 75 65 6e 63 79 28 29 2e 67 65 74 5f 63 6f 75 6e 74 28 29 21 3d 3d 6e 2e 67 65 74 5f 6e 75 6d 4f 66 49 6e 74 65 72 6e 61 6c 46 65 61 74 75 72 65 73 28 29 2c 27 69 6e 69 74 27 2c 27 49 6e 76 65 72 74 65 64 20 63 6c 61 73 73 20 66 72 65 71 75 65 6e 63 79 20 6c 69 73 74 20 6e 6f 74 20 6f 66 20 74 68 65 20 65 78 70 65 63 74 65 64 20 6c 65 6e 67 74 68 27 29 2c 4e 4c 52 54 2e 5f 76 61 6c 69 64 61 74 69 6f 6e 55 74 69 6c 73 2e 74 68 72 6f 77 49 66 54 72 75 65 28 21 6e 2e 67 65 74 5f 69 6e 74 65 72 6e 61 6c 46 65 61 74 75 72 65 49 64 32 46 69 72 73 74 43 6c 61 73 Data Ascii: Id2InverseClassFrequency()&&n.get_internalFeatureId2InverseClassFrequency().get_count()!==n.get_numOfInternalFeatures(),'init','Inverted class frequency list not of the expected length'),NLRT._validationUtils.throwIfTrue(!n.get_internalFeatureId2FirstClas
2023-08-10 21:19:35 UTC	11431	IN	Data Raw: 73 65 20 4e 4c 52 54 2e 5f 73 69 6e 67 6c 65 43 68 61 72 53 75 62 73 74 69 74 75 74 69 6f 6e 73 54 72 61 6e 73 6c 69 74 65 72 61 74 69 6f 6e 53 74 61 67 65 2e 5f 63 5f 66 6c 61 76 6f 72 24 69 3a 72 65 74 75 72 6e 20 6e 65 77 20 4e 4c 52 54 2e 5f 73 69 6e 67 6c 65 43 68 61 72 53 75 62 73 74 69 74 75 74 69 6f 6e 73 54 72 61 6e 73 6c 69 74 65 72 61 74 69 6f 6e 53 74 61 67 65 28 74 2c 69 29 3b 63 61 73 65 20 4e 4c 52 54 2e 5f 6c 61 74 69 6e 46 75 6c 6c 57 69 64 74 68 54 6f 48 61 6c 66 57 69 64 74 68 54 72 61 6e 73 6c 69 74 65 72 61 74 69 6f 6e 53 74 61 67 65 2e 5f 63 5f 66 6c 61 76 6f 72 24 69 3a 72 65 74 75 72 6e 20 6e 65 77 20 4e 4c 52 54 2e 5f 6c 61 74 69 6e 46 75 6c 6c 57 69 64 74 68 54 6f 48 61 6c 66 57 69 64 74 68 54 72 61 6e 73 6c 69 74 65 72 61 74 69 Data Ascii: se NLRT._singleCharSubstitutionsTransliterationStage._c_flavor$i:return new NLRT._singleCharSubstitutionsTransliterationStage(t,i);case NLRT._latinFullWidthToHalfWidthTransliterationStage._c_flavor$i:return new NLRT._latinFullWidthToHalfWidthTransliterati
2023-08-10 21:19:35 UTC	11447	IN	Data Raw: 69 74 24 70 24 31 3a 6e 75 6c 6c 7d 2c 4e 4c 52 54 2e 5f 74 6f 6b 65 6e 53 74 72 69 6e 67 4c 61 74 74 69 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 73 65 74 5f 74 6f 6b 65 6e 49 6e 64 65 78 32 46 69 72 73 74 53 74 72 69 6e 67 49 6e 64 65 78 28 6e 65 77 20 41 72 72 61 79 28 6e 29 29 2c 74 68 69 73 2e 73 65 74 5f 74 6f 6b 65 6e 49 6e 64 65 78 32 53 74 72 69 6e 67 43 6f 75 6e 74 28 6e 65 77 20 41 72 72 61 79 28 6e 29 29 2c 74 68 69 73 2e 73 65 74 5f 73 74 72 69 6e 67 49 44 73 28 6e 65 77 20 41 72 72 61 79 28 30 29 29 2c 74 68 69 73 2e 73 65 74 5f 73 74 72 69 6e 67 53 63 6f 72 65 73 28 6e 65 77 20 41 72 72 61 79 28 30 29 29 7d 2c 4e 4c 52 54 2e 5f 74 6f 6b 65 6e 53 74 72 69 6e 67 4c 61 74 74 69 63 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 24 Data Ascii: it$p$1:null},NLRT._tokenStringLattice=function(n){this.set_tokenIndex2FirstStringIndex(new Array(n)),this.set_tokenIndex2StringCount(new Array(n)),this.set_stringIDs(new Array(0)),this.set_stringScores(new Array(0))},NLRT._tokenStringLattice.prototype={_$
2023-08-10 21:19:35 UTC	11463	IN	Data Raw: 29 2c 4e 4c 52 54 2e 5f 68 61 73 41 6e 6e 6f 74 61 74 69 6f 6e 73 41 6e 6e 6f 74 61 74 69 6f 6e 46 69 6c 74 65 72 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 27 4e 4c 52 54 2e 5f 68 61 73 41 6e 6e 6f 74 61 74 69 6f 6e 73 41 6e 6e 6f 74 61 74 69 6f 6e 46 69 6c 74 65 72 27 2c 6e 75 6c 6c 2c 4e 4c 52 54 2e 5f 69 46 69 6c 74 65 72 29 2c 4e 4c 52 54 2e 5f 61 6e 6e 6f 74 61 74 65 64 57 69 74 68 41 6e 6e 6f 74 61 74 69 6f 6e 46 69 6c 74 65 72 2e 72 65 67 69 73 74 65 72 43 6c 61 73 73 28 27 4e 4c 52 54 2e 5f 61 6e 6e 6f 74 61 74 65 64 57 69 74 68 41 6e 6e 6f 74 61 74 69 6f 6e 46 69 6c 74 65 72 27 2c 6e 75 6c 6c 2c 4e 4c 52 54 2e 5f 69 46 69 6c 74 65 72 29 2c 4e 4c 52 54 2e 5f 61 6e 6e 6f 74 61 74 65 64 57 69 74 68 41 6e 64 56 61 6c 75 65 4d 61 74 63 68 65 73 41 Data Ascii: ),NLRT._hasAnnotationsAnnotationFilter.registerClass('NLRT._hasAnnotationsAnnotationFilter',null,NLRT._iFilter),NLRT._annotatedWithAnnotationFilter.registerClass('NLRT._annotatedWithAnnotationFilter',null,NLRT._iFilter),NLRT._annotatedWithAndValueMatchesA
2023-08-10 21:19:35 UTC	11479	IN	Data Raw: 68 6e 69 63 61 6c 20 73 75 70 70 6f 72 74 20 66 6f 72 20 61 70 70 73 20 28 70 72 65 76 69 65 77 29 20 73 65 74 74 69 6e 67 73 27 2c 4d 6f 64 65 72 6e 53 65 61 72 63 68 4c 6f 63 44 69 63 74 69 6f 6e 61 72 79 2e 4f 66 66 69 63 65 46 6f 72 6d 73 53 65 74 74 69 6e 67 73 3d 27 4d 69 63 72 6f 73 6f 66 74 20 66 6f 72 6d 73 20 73 65 74 74 69 6e 67 73 27 2c 4d 6f 64 65 72 6e 53 65 61 72 63 68 4c 6f 63 44 69 63 74 69 6f 6e 61 72 79 2e 4f 66 66 69 63 65 53 63 72 69 70 74 73 53 65 74 74 69 6e 67 73 3d 27 4f 66 66 69 63 65 20 53 63 72 69 70 74 73 20 73 65 74 74 69 6e 67 73 27 2c 4d 6f 64 65 72 6e 53 65 61 72 63 68 4c 6f 63 44 69 63 74 69 6f 6e 61 72 79 2e 44 69 72 65 63 74 6f 72 79 53 79 6e 63 68 72 6f 6e 69 7a 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 3d 27 44 69 72 65 Data Ascii: hnical support for apps (preview) settings',ModernSearchLocDictionary.OfficeFormsSettings='Microsoft forms settings',ModernSearchLocDictionary.OfficeScriptsSettings='Office Scripts settings',ModernSearchLocDictionary.DirectorySynchronizationSettings='Dire
2023-08-10 21:19:35 UTC	11495	IN	Data Raw: 74 68 69 73 2e 61 70 69 45 6e 64 70 6f 69 6e 74 2b 74 68 69 73 2e 65 72 72 6f 72 4d 65 74 68 6f 64 4e 61 6d 65 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 69 3d 7b 74 61 67 49 64 3a 74 68 69 73 2e 74 61 67 49 64 2c 61 64 68 6f 63 30 3a 74 68 69 73 2e 61 64 68 6f 63 30 26 26 74 68 69 73 2e 61 64 68 6f 63 30 2e 6c 65 6e 67 74 68 3e 35 30 30 3f 74 68 69 73 2e 61 64 68 6f 63 30 2e 73 75 62 73 74 72 28 31 2c 35 30 30 29 3a 74 68 69 73 2e 61 64 68 6f 63 30 2c 61 64 68 6f 63 31 3a 74 68 69 73 2e 61 64 68 6f 63 31 26 26 74 68 69 73 2e 61 64 68 6f 63 31 2e 6c 65 6e 67 74 68 3e 35 30 30 3f 74 68 69 73 2e 61 64 68 6f 63 31 2e 73 75 62 73 74 72 28 31 2c 35 30 30 29 3a 74 68 69 73 Data Ascii: this.apiEndpoint+this.errorMethodName)},n.prototype.write=function(n){var t=this,i={tagId:this.tagId,adhoc0:this.adhoc0&&this.adhoc0.length>500?this.adhoc0.substr(1,500):this.adhoc0,adhoc1:this.adhoc1&&this.adhoc1.length>500?this.adhoc1.substr(1,500):this
2023-08-10 21:19:35 UTC	11511	IN	Data Raw: 56 32 2e 44 69 73 70 6c 61 79 57 69 64 67 65 74 28 29 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 4d 6f 64 61 6c 46 65 65 64 62 61 63 6b 56 32 2e 53 68 6f 77 4d 6f 64 61 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 70 61 67 65 4e 61 6d 65 2c 20 73 75 72 76 65 79 4e 61 6d 65 2c 20 63 61 6c 6c 62 61 63 6b 4f 6e 52 65 74 75 72 6e 29 20 7b 0a 20 20 20 20 2f 2f 66 75 6e 63 74 69 6f 6e 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 70 61 72 74 79 20 74 6f 20 63 61 6c 6c 20 69 6e 20 66 6f 72 20 63 6f 6e 74 65 78 74 20 6d 6f 64 61 6c 20 66 65 65 64 62 61 63 6b 0a 20 20 20 20 69 66 20 28 63 61 6c 6c 62 61 63 6b 4f 6e 52 65 74 75 72 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 4d 6f 64 61 6c 46 65 65 64 62 61 63 6b 56 32 2e 63 61 6c 6c 62 61 63 6b 4f 6e 52 65 74 75 72 6e 20 3d 20 66 75 6e Data Ascii: V2.DisplayWidget(); }}ModalFeedbackV2.ShowModal = function (pageName, surveyName, callbackOnReturn) { //function for external party to call in for context modal feedback if (callbackOnReturn) { ModalFeedbackV2.callbackOnReturn = fun
2023-08-10 21:19:35 UTC	11527	IN	Data Raw: 7b 76 61 72 20 75 2c 72 2c 66 2c 65 2c 68 3b 69 66 28 21 6f 2e 63 61 6e 63 65 6c 28 63 29 29 7b 69 66 28 6c 28 29 2c 21 6e 2e 6c 69 76 65 50 65 72 73 6f 6e 2e 73 69 74 65 7c 7c 21 6e 2e 61 70 70 2e 69 73 43 75 72 72 65 6e 74 55 73 65 72 44 61 74 61 4c 6f 61 64 65 64 7c 7c 21 24 28 22 23 61 64 6d 69 6e 46 65 65 64 62 61 63 6b 57 69 64 67 65 74 22 29 2e 6c 65 6e 67 74 68 29 7b 6f 28 73 2e 62 69 6e 64 28 74 68 69 73 29 2c 35 30 30 29 3b 72 65 74 75 72 6e 7d 75 3d 6e 2e 43 75 72 72 65 6e 74 55 73 65 72 49 6e 66 6f 2e 43 75 6c 74 75 72 65 49 6e 66 6f 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 72 3d 7b 73 69 74 65 3a 6e 2e 6c 69 76 65 50 65 72 73 6f 6e 2e 73 69 74 65 2c 70 72 6f 6d 70 74 3a 6e 2e 6c 69 76 65 50 65 72 73 6f 6e 2e 70 72 6f 6d 70 74 2c 6c 61 6e Data Ascii: {var u,r,f,e,h;if(!o.cancel(c)){if(l(),!n.livePerson.site\|\|!n.app.isCurrentUserDataLoaded\|\|!$("#adminFeedbackWidget").length){o(s.bind(this),500);return}u=n.CurrentUserInfo.CultureInfo.toUpperCase(),r={site:n.livePerson.site,prompt:n.livePerson.prompt,lan
2023-08-10 21:19:35 UTC	11543	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b Data Ascii: ction(e){
2023-08-10 21:19:35 UTC	11543	IN	Data Raw: 72 65 74 75 72 6e 20 65 7d 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6e 29 7b 74 2e 6f 28 65 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 74 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 65 26 26 65 2e 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 74 2e 64 28 69 2c 22 61 22 2c 69 29 2c 69 7d 2c 74 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 Data Ascii: return e},t.d=function(e,i,n){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var i=e&&e.e?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOw
2023-08-10 21:19:35 UTC	11559	IN	Data Raw: 69 63 65 49 6e 66 6f 2e 4d 61 6b 65 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 44 65 76 69 63 65 4d 6f 64 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 4a 26 26 74 68 69 73 2e 24 28 22 44 65 76 69 63 65 49 6e 66 6f 2e 4d 6f 64 65 6c 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 55 73 65 72 49 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 66 28 21 69 73 4e 61 4e 28 69 29 26 26 6e 75 6c 6c 21 3d 3d 69 26 26 69 3e 3d 30 26 26 69 3c 3d 31 32 29 74 68 69 73 2e 24 28 22 55 73 65 72 49 6e 66 6f 2e 49 64 54 79 70 65 22 2c 69 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 76 6f 69 64 20 30 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 72 2e 41 57 54 50 69 69 4b 69 6e 64 2e 53 Data Ascii: iceInfo.Make",e)},e.prototype.setDeviceModel=function(e){this.J&&this.$("DeviceInfo.Model",e)},e.prototype.setUserId=function(e,t,i){if(!isNaN(i)&&null!==i&&i>=0&&i<=12)this.$("UserInfo.IdType",i.toString());else{var n=void 0;switch(t){case r.AWTPiiKind.S
2023-08-10 21:19:35 UTC	11575	IN	Data Raw: 74 75 72 6e 20 6e 2e 70 75 73 68 28 31 32 37 26 74 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 63 2e 42 72 6f 77 73 65 72 43 68 65 63 6b 65 72 2e 5a 65 28 29 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 61 56 69 65 77 28 6e 65 77 20 41 72 72 61 79 42 75 66 66 65 72 28 38 29 29 3b 74 2e 73 65 74 46 6c 6f 61 74 36 34 28 30 2c 65 2c 21 30 29 3b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 38 3b 2b 2b 6e 29 69 2e 70 75 73 68 28 74 2e 67 65 74 55 69 6e 74 38 28 6e 29 29 3b 72 65 74 75 72 6e 20 69 7d 72 65 74 75 72 6e 20 6c 2e 46 6c 6f 61 74 55 74 69 6c 73 2e 4a 65 28 65 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 28 65 3d 5f 2e 4e 75 6d 62 65 72 2e 42 28 65 29 29 3c 3c 31 5e 65 3e 3e 33 31 7d 66 75 Data Ascii: turn n.push(127&t),n}function a(e){if(c.BrowserChecker.Ze()){var t=new DataView(new ArrayBuffer(8));t.setFloat64(0,e,!0);for(var i=[],n=0;n<8;++n)i.push(t.getUint8(n));return i}return l.FloatUtils.Je(e,!0)}function u(e){return(e=_.Number.B(e))<<1^e>>31}fu
2023-08-10 21:19:35 UTC	11607	IN	Data Raw: 22 29 2c 69 74 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 69 2c 72 29 7d 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 74 75 28 6e 29 7b 72 65 74 75 72 6e 28 22 22 2b 6e 29 2e 72 65 70 6c 61 63 65 28 68 72 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 73 72 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 6f 72 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 65 72 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 61 69 2c 22 26 23 33 39 3b 22 29 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 6e 2c 74 29 7b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 22 29 26 26 28 74 3d 74 2e 73 75 62 73 74 72 69 6e 67 28 34 29 2c 74 3d 74 2e 63 68 61 72 41 74 28 Data Ascii: "),it(t,function(t,i){n.toggleClass(i,r)})),n}function tu(n){return(""+n).replace(hr,"&").replace(sr,"<").replace(or,">").replace(er,""").replace(ai,"'")}function dt(n,t){var u;return 0===t.indexOf("data")&&(t=t.substring(4),t=t.charAt(
2023-08-10 21:19:35 UTC	11642	IN	Data Raw: 72 65 70 6c 61 63 65 28 22 24 22 2c 73 29 2e 73 70 6c 69 74 28 22 6e 22 29 2c 6e 2e 69 6e 64 65 78 4f 66 28 66 5b 30 5d 29 3e 2d 31 26 26 6e 2e 69 6e 64 65 78 4f 66 28 66 5b 31 5d 29 3e 2d 31 26 26 28 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 66 5b 30 5d 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 66 5b 31 5d 2c 22 22 29 2c 65 3d 21 30 29 29 3a 6e 2e 69 6e 64 65 78 4f 66 28 61 29 3e 2d 31 26 26 28 68 3d 21 30 2c 75 3d 63 2c 73 3d 61 29 2c 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 22 2d 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 73 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 6f 2c 22 20 22 29 2e 73 70 6c 69 74 28 75 5b 22 2c 22 5d 2e 72 65 70 6c 61 63 65 28 6f 2c 22 20 22 29 29 2e 6a 6f 69 6e 28 22 22 29 2e 72 65 70 6c 61 63 65 28 75 5b 22 2e 22 5d 2c 22 2e 22 29 2c 6e 3d 70 61 Data Ascii: replace("$",s).split("n"),n.indexOf(f[0])>-1&&n.indexOf(f[1])>-1&&(n=n.replace(f[0],"").replace(f[1],""),e=!0)):n.indexOf(a)>-1&&(h=!0,u=c,s=a),n=n.replace("-","").replace(s,"").replace(o," ").split(u[","].replace(o," ")).join("").replace(u["."],"."),n=pa
2023-08-10 21:19:35 UTC	11658	IN	Data Raw: 73 5b 75 5d 2c 72 2e 6d 6f 62 69 6c 65 2e 75 69 2e 72 6f 6c 65 73 5b 75 5d 5d 3b 66 6f 72 28 75 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 3e 3d 30 26 26 28 65 3d 5b 72 2e 67 65 74 74 65 72 28 75 29 28 74 29 5d 29 2c 66 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3e 66 3b 66 2b 2b 29 69 66 28 73 3d 65 5b 66 5d 2c 73 26 26 28 68 3d 6e 2e 64 61 74 61 28 22 6b 65 6e 64 6f 22 2b 73 2e 66 6e 2e 6f 70 74 69 6f 6e 73 2e 70 72 65 66 69 78 2b 73 2e 66 6e 2e 6f 70 74 69 6f 6e 73 2e 6e 61 6d 65 29 29 29 72 65 74 75 72 6e 20 68 7d 7d 2c 72 2e 6f 6e 52 65 73 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 75 2e 6d 6f 62 69 6c 65 4f 53 2e 61 6e 64 72 6f 69 64 26 26 28 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 Data Ascii: s[u],r.mobile.ui.roles[u]];for(u.indexOf(".")>=0&&(e=[r.getter(u)(t)]),f=0,o=e.length;o>f;f++)if(s=e[f],s&&(h=n.data("kendo"+s.fn.options.prefix+s.fn.options.name)))return h}},r.onResize=function(i){var r=i;return u.mobileOS.android&&(r=function(){setTime
2023-08-10 21:19:35 UTC	11674	IN	Data Raw: 2e 77 72 61 70 70 65 72 29 5b 30 5d 2c 61 3d 6e 28 74 2e 65 6c 65 6d 65 6e 74 29 5b 30 5d 2c 79 3d 72 2e 69 6e 6a 65 63 74 6f 72 28 29 2e 67 65 74 28 22 24 63 6f 6d 70 69 6c 65 22 29 2c 74 2e 64 65 73 74 72 6f 79 28 29 2c 65 26 26 65 28 29 2c 74 3d 6e 75 6c 6c 2c 63 26 26 61 26 26 28 63 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 61 2c 63 29 2c 6e 28 72 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 75 29 29 2c 79 28 75 29 28 69 29 29 7d 2c 21 30 29 3b 68 28 69 29 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 74 29 7b 66 2e 64 69 72 65 63 74 69 76 65 28 6e 2c 5b 22 64 69 72 65 63 74 69 76 65 46 61 63 74 6f 72 79 22 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 2e 63 Data Ascii: .wrapper)[0],a=n(t.element)[0],y=r.injector().get("$compile"),t.destroy(),e&&e(),t=null,c&&a&&(c.parentNode.replaceChild(a,c),n(r).replaceWith(u)),y(u)(i))},!0);h(i)}function ut(n,i){function e(n,t){f.directive(n,["directiveFactory",function(i){return i.c
2023-08-10 21:19:35 UTC	11690	IN	Data Raw: 20 72 3d 74 68 69 73 Data Ascii: r=this
2023-08-10 21:19:35 UTC	11690	IN	Data Raw: 2c 69 3d 72 2e 74 6f 75 63 68 65 73 3b 69 66 28 74 68 69 73 2e 5f 69 73 4d 75 6c 74 69 54 6f 75 63 68 28 29 29 7b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 20 68 3a 6e 3d 76 3b 62 72 65 61 6b 3b 63 61 73 65 20 73 3a 6e 3d 61 3b 62 72 65 61 6b 3b 63 61 73 65 20 6f 3a 6e 3d 6c 7d 66 28 74 2c 7b 74 6f 75 63 68 65 73 3a 69 7d 2c 72 74 28 69 5b 30 5d 2c 69 5b 31 5d 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 74 72 69 67 67 65 72 28 6e 2c 66 28 74 2c 7b 74 79 70 65 3a 6e 7d 29 29 7d 2c 70 72 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 74 68 69 73 2e 5f 61 70 69 43 61 6c 6c 28 22 5f 73 74 61 72 74 22 2c 6e 2c 74 2c 69 29 7d 2c 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 74 68 69 73 2e 5f 61 70 69 43 61 6c 6c 28 22 5f 6d 6f 76 65 22 Data Ascii: ,i=r.touches;if(this._isMultiTouch()){switch(n){case h:n=v;break;case s:n=a;break;case o:n=l}f(t,{touches:i},rt(i[0],i[1]))}return this.trigger(n,f(t,{type:n}))},press:function(n,t,i){this._apiCall("_start",n,t,i)},move:function(n,t){this._apiCall("_move"

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
247	192.168.2.3	50100	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	11141	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:36 UTC	12602	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:35 GMT Content-Type: application/x-javascript content-length: 113440 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE8E0647 x-ms-request-id: 3a7a40f9-501e-004a-60d0-cbea77000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211935Z-gysw6uasgd5dm6ez0bq3hhaggg0000000cx000000000b31w X-Cache: TCP_MISS Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:36 UTC	12603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 79 7f db 38 b2 28 fa ff fd 14 b6 a6 c7 11 db b4 2c 6a 97 6d c6 e3 78 e9 64 a6 bb 93 93 a5 e7 cc c8 ea 0c 45 41 12 db 14 29 93 94 97 c4 9e cf fe aa 0a 3b 29 67 39 e7 9e 7b df ef bd cc 34 4d 14 0a 85 42 01 28 14 0a 05 6a ff c7 ed ff b5 f5 e3 d6 de b7 ff db 7a f7 fe e4 ed fb ad d7 17 5b ef 5f be 7a 7b b6 f5 06 52 ff d8 fa f5 f5 fb 57 a7 e7 df 4e 07 2b c5 ff de 2f a2 7c 6b 16 c5 6c 0b fe 4e 82 9c 4d b7 d2 64 2b cd b6 a2 24 4c b3 55 9a 05 05 cb b7 96 f0 cc a2 20 de 9a 65 e9 72 ab 58 b0 ad 55 96 fe c1 c2 22 df 8a a3 bc 80 42 13 16 a7 b7 5b 75 20 97 4d b7 de 04 59 71 bf f5 ea 8d d3 00 fa 0c a8 45 f3 28 81 d2 61 ba ba 87 f7 45 b1 95 a4 45 14 b2 ad 20 99 12 b5 18 12 49 ce b6 d6 c9 94 65 5b b7 8b 28 5c 6c fd 12 85 59 9a a7 b3 62 Data Ascii: y8(,jmxdEA);)g9{4MB(jz[_z{RWN+/\|klNMd+$LU erXU"B[u MYqE(aEE Ie[(\lYb
2023-08-10 21:19:36 UTC	12618	IN	Data Raw: 9b 86 32 af 72 6f 69 a8 da 5c be 9d d4 33 32 c4 ec 08 5a 06 cc 16 9d 6a 6b f5 82 52 a8 0a 6d 38 20 2c e7 49 7b a8 5d ce b0 ee 28 a9 ae d8 70 49 89 be 80 21 32 2b 6c 86 3a af d2 bf 9d 72 9e d4 56 4c 66 54 8a b4 ed 1c bb 0b e5 e7 23 f9 bd 9b 0c 2f b6 97 be 90 47 6a d0 bc 16 42 1d 1c 1b 41 e5 d4 a9 b1 0a 21 27 fd 52 b9 a9 e1 29 a8 05 49 8c 9f 1a a1 b5 c5 bc 46 31 e5 00 7d 8d 82 63 18 d7 28 48 d3 9b 57 01 7a 1c 50 32 06 49 04 86 31 c8 09 9b 97 00 38 65 cb 4b 42 fd 87 bb 32 eb 13 13 43 3a cd cf 78 95 8e 78 55 de 46 ba d2 97 ad ec 93 3c b2 47 cc 50 7d 9a fe d5 4b 7f 34 3c ad 50 7b ea 93 8a 31 4a fa c1 08 b5 e7 e5 d4 ba 45 5a d2 4e 66 3c 70 7e cc 5f f5 22 38 94 80 cc 82 58 21 ec d4 bb d6 5c 21 ae 8c 6f f9 0e 45 5a fb d9 05 40 7d dc 77 20 00 3a fe 68 48 31 54 6f Data Ascii: 2roi\32ZjkRm8 ,I{](pI!2+l:rVLfT#/GjBA!'R)IF1}c(HWzP2I18eKB2C:xxUF<GP}K4<P{1JEZNf<p~_"8X!\!oEZ@}w :hH1To
2023-08-10 21:19:36 UTC	12619	IN	Data Raw: f7 32 26 6a ea 49 d8 8d 0d 89 c2 2b fb b6 e8 40 82 4b 06 7d e5 de 61 77 76 29 3f 4e 5c b9 54 38 e4 44 8c 9f 2e e1 90 2b 1d ca c8 eb a9 d4 f2 f2 f5 db 5f f9 08 61 84 20 7e 13 e9 8e 1c 45 45 f9 f7 ec 4c e5 da 56 00 2b 1c bc 2d a1 95 40 f1 ae cc b1 a2 c4 89 2f f4 8d 28 83 39 e0 dd 45 30 81 45 db 11 e5 41 b9 23 f5 41 49 f5 81 4b 8e 60 7f ce b5 48 99 3c d0 a0 9d 62 91 ae 26 72 3c b5 69 f3 0a 10 e3 5a b7 c7 21 b2 4e ea f8 8a 71 3e e1 48 25 e3 bc 2b a0 2a f0 23 20 6f 60 91 e6 8a 03 ea 11 eb d0 9c c6 60 16 48 59 f0 af f2 bf 7f 7b 72 76 6e 02 0a cb 65 da 25 d7 90 84 69 57 33 ff 3d a8 6a b4 2d ff f2 c1 c6 60 db 49 c7 c8 51 ce ca d0 00 1a 01 b8 dc 47 b5 39 fe 56 b2 a4 26 6b 97 09 2a ac 44 d5 d8 c9 05 e4 9a 7b 9f 45 2b e3 b7 9e c5 2c 47 a0 c6 13 15 e7 6a ff 34 e5 80 Data Ascii: 2&jI+@K}awv)?N\T8D.+_a ~EELV+-@/(9E0EA#AIK`H<b&r<iZ!Nq>H%+# o``HY{rvne%iW3=j-`IQG9V&kD{E+,Gj4
2023-08-10 21:19:36 UTC	12627	IN	Data Raw: a7 bd 6f 6d 6e db 58 16 fc be bf 42 62 6c 19 30 40 f1 a1 87 23 92 20 a3 6b 3b bb ae ca b9 71 25 b9 f7 c3 21 69 1e 90 04 49 44 20 c0 00 a4 1e 16 b8 bf 7d bb 7b de 00 28 c9 3e f7 d4 dd da da 54 2c 02 83 79 f6 f4 f4 f4 f4 f4 43 5d 10 64 db 87 88 3c 72 06 f7 db ba 1f 85 cb b8 53 73 30 db 78 6c 8c f1 c0 cd aa b6 0e dc b5 71 a7 6a f4 42 48 fd b1 1b 28 1e 60 97 6b da 08 65 86 94 32 b8 45 68 a9 0a 08 5c ec a0 06 44 b6 bb c2 ad fd d8 3a 44 57 bb 2b 21 11 c2 b3 33 42 cb dd 78 0f 12 5a bd 0d 41 0c cf ce 30 10 40 fa 15 b2 19 30 c0 c7 f7 86 92 fb 7b ae 90 4c ab 9f 2d 8f 95 5c 1e ea db 13 94 9b e5 c1 8e fc 57 2e 86 15 ee 75 4e 1b ef 3c 34 88 4d 93 f9 83 9c 78 7c 51 68 33 05 c4 71 da 80 90 f6 0b 50 6c e5 ae 14 8a cd 8b b8 a5 50 78 fe af c3 ad 81 86 60 a8 69 7a 10 c7 34 Data Ascii: omnXBbl0@# k;q%!iID }{(>T,yC]d<rSs0xlqjBH(`ke2Eh\D:DW+!3BxZA0@0{L-\W.uN<4Mx\|Qh3qPlPx`iz4
2023-08-10 21:19:36 UTC	12635	IN	Data Raw: 8d c1 54 40 2b 36 a1 05 40 d0 cf 11 6c fc 31 ef 4c ac 8d 3f d4 52 9b df 02 15 48 f1 b8 e9 b7 4c 3b 39 09 fb 15 50 a8 04 a0 18 d6 cb e0 18 da 45 ca 0a a3 37 29 83 d8 cd 0f d1 19 b5 e1 8b a5 5c a6 2c 62 35 96 ae 02 cc 05 a2 33 3f e6 76 3a 1e 3c 9f 45 f2 89 50 39 bb 16 b2 3b 85 b1 d0 4c 96 af f4 bc 26 45 ae ee 96 20 21 11 c7 a0 81 9e 87 4e a2 b9 a2 1d 43 0c 8c 5e e0 6e bd aa 49 d2 cc a7 b6 03 25 ce e9 04 5d 49 ac 30 1a b5 5d ae 2f 06 1c e2 d9 2b ea 75 b7 4e 55 7b 4a 4c c4 70 6e 90 b2 73 97 39 27 78 72 ae de a8 b9 f0 38 cc d8 75 19 9c 47 82 0e 6c 43 28 f4 36 f7 3f e3 0d af 92 66 3e 4e 3e f0 6d e9 d6 aa e0 79 cd 19 0f f0 b0 38 dc d6 5b c4 e4 a6 c1 6d 90 12 db a4 ef 75 76 a7 d0 a4 80 9e 7d 70 eb 6d 9a 15 98 a3 ae 3a 2b 21 27 c9 16 0f a9 44 20 df c5 48 70 a3 81 Data Ascii: T@+6@l1L?RHL;9PE7)\,b53?v:<EP9;L&E !NC^nI%]I0]/+uNU{JLpns9'xr8uGlC(6?f>N>my8[muv}pm:+!'D Hp

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
248	192.168.2.3	50104	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	11639	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/adminapp.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	11815	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 108966 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:13:49 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1093519818531453461317233502541604911340"}],"include_subdomains ":true} Server: ECAcc (muc/336A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 27db58c6-601e-0065-47d2-ca6485000000 Content-Length: 690285 Connection: close
2023-08-10 21:19:35 UTC	11816	IN	Data Raw: 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 27 66 69 6e 64 27 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 2c 75 2c 66 2c 74 2c 72 3b 69 66 28 74 68 69 73 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 22 74 68 69 73 22 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 27 29 3b 69 66 28 69 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 75 3d 69 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 74 79 70 65 6f 66 20 6e 21 3d 27 66 75 6e 63 74 69 6f 6e 27 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 70 72 65 64 69 63 61 74 65 20 6d 75 73 Data Ascii: Array.prototype.find\|\|Object.defineProperty(Array.prototype,'find',{value:function(n){var i,u,f,t,r;if(this==null)throw new TypeError('"this" is null or not defined');if(i=Object(this),u=i.length>>>0,typeof n!='function')throw new TypeError('predicate mus
2023-08-10 21:19:35 UTC	11832	IN	Data Raw: 2c Data Ascii: ,
2023-08-10 21:19:35 UTC	11832	IN	Data Raw: 72 3d 65 2e 66 69 72 73 74 44 61 79 4f 66 4d 6f 6e 74 68 28 6e 29 2c 75 3d 4d 61 74 68 2e 61 62 73 28 74 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2d 72 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 29 3b 72 65 74 75 72 6e 20 75 26 26 74 2e 73 65 74 48 6f 75 72 73 28 72 2e 67 65 74 48 6f 75 72 73 28 29 2b 75 2f 36 30 29 2c 74 7d 2c 63 6f 6d 70 61 72 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 65 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 72 3d 6e 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 75 3d 74 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 66 3d 74 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 3b 72 65 74 75 72 6e 20 65 3d 72 3e 66 3f 31 3a 66 3e 72 3f 2d 31 3a 69 3d 3d 75 3f 30 3a 69 3e 75 3f 31 3a 2d 31 7d 2c Data Ascii: r=e.firstDayOfMonth(n),u=Math.abs(t.getTimezoneOffset()-r.getTimezoneOffset());return u&&t.setHours(r.getHours()+u/60),t},compare:function(n,t){var e,i=n.getMonth(),r=n.getFullYear(),u=t.getMonth(),f=t.getFullYear();return e=r>f?1:f>r?-1:i==u?0:i>u?1:-1},
2023-08-10 21:19:35 UTC	11849	IN	Data Raw: 26 26 61 3f 28 72 2e 76 61 6c 28 69 29 2c 73 28 72 2c 63 2b 75 2e 6c 65 6e 67 74 68 29 2c 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 3a 28 6e 75 6c 6c 21 3d 3d 6f 26 26 6f 3e 3d 30 26 26 22 2d 22 3d 3d 3d 69 2e 63 68 61 72 41 74 28 30 29 7c 7c 21 76 29 26 26 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 5f 6b 65 79 3d 30 29 7d 2c 5f 6e 75 6d 65 72 69 63 52 65 67 65 78 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 6e 5b 66 5d 2c 75 3d 72 2e 6f 70 74 69 6f 6e 73 2e 64 65 63 69 6d 61 6c 73 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 66 26 26 28 74 3d 22 5c 5c 22 2b 74 29 2c 75 3d 3d 3d 69 26 26 28 75 3d 6e 2e 64 65 63 69 6d 61 6c 73 29 2c 30 3d 3d 3d 75 3f 66 74 3a 28 72 2e 5f 73 65 70 61 72 61 74 6f 72 Data Ascii: &&a?(r.val(i),s(r,c+u.length),n.preventDefault()):(null!==o&&o>=0&&"-"===i.charAt(0)\|\|!v)&&n.preventDefault(),t._key=0)},_numericRegex:function(n){var r=this,t=n[f],u=r.options.decimals;return t===f&&(t="\\"+t),u===i&&(u=n.decimals),0===u?ft:(r._separator
2023-08-10 21:19:35 UTC	11865	IN	Data Raw: 65 73 3d 6e 2e 6d 61 70 28 69 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 72 28 6e 29 7d 29 2c 74 29 7d 2c 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 66 6f 63 75 73 28 29 3b 6e 3d 6e 3f 6e 2e 6e 65 78 74 28 29 3a 30 2c 74 68 69 73 2e 66 6f 63 75 73 28 6e 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 66 6f 63 75 73 28 29 3b 6e 3d 6e 3f 6e 2e 70 72 65 76 28 29 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 2d 31 2c 74 68 69 73 2e 66 6f 63 75 73 28 6e 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 6f 63 75 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 63 68 69 6c 64 72 65 6e Data Ascii: es=n.map(i,function(n){return r(n)}),t)},next:function(){var n=this.focus();n=n?n.next():0,this.focus(n)},prev:function(){var n=this.focus();n=n?n.prev():this.element[0].children.length-1,this.focus(n)},first:function(){this.focus(this.element[0].children
2023-08-10 21:19:35 UTC	11881	IN	Data Raw: 72 28 22 76 61 6c 75 65 2d 66 69 65 6c 64 22 29 2c 22 76 61 6c 75 65 22 29 2e 61 74 74 72 28 69 2e 61 74 74 72 28 22 76 61 6c 75 65 2d 70 72 69 6d 69 74 69 76 65 22 29 2c 21 30 29 7d 2c 5f 63 72 65 61 74 65 4f 70 65 72 61 74 6f 72 44 72 6f 70 44 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 75 2c 66 3d 5b 5d 3b 66 6f 72 28 72 20 69 6e 20 74 29 66 2e 70 75 73 68 28 7b 74 65 78 74 3a 74 5b 72 5d 2c 76 61 6c 75 65 3a 72 7d 29 3b 75 3d 6e 28 27 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 6b 2d 64 72 6f 70 64 6f 77 6e 2d 6f 70 65 72 61 74 6f 72 22 20 27 2b 69 2e 61 74 74 72 28 22 62 69 6e 64 22 29 2b 27 3d 22 76 61 6c 75 65 3a 20 6f 70 65 72 61 74 6f 72 22 2f 3e 27 29 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 2e 77 72 61 70 70 65 72 29 2c 74 Data Ascii: r("value-field"),"value").attr(i.attr("value-primitive"),!0)},_createOperatorDropDown:function(t){var r,u,f=[];for(r in t)f.push({text:t[r],value:r});u=n('<input class="k-dropdown-operator" '+i.attr("bind")+'="value: operator"/>').appendTo(this.wrapper),t
2023-08-10 21:19:35 UTC	11897	IN	Data Raw: 74 69 6f 6e Data Ascii: tion
2023-08-10 21:19:35 UTC	11898	IN	Data Raw: 28 6e 2c 69 29 7b 66 6f 72 28 76 61 72 20 75 2c 72 3d 74 68 69 73 2c 66 3d 69 2c 65 3d 72 2e 6c 69 73 74 56 69 65 77 2e 64 61 74 61 28 29 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 68 3d 72 2e 6f 70 74 69 6f 6e 73 2e 69 67 6e 6f 72 65 43 61 73 65 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 75 29 7b 72 65 74 75 72 6e 20 69 2b 3d 22 22 2c 68 26 26 28 69 3d 69 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 30 3d 3d 3d 69 2e 69 6e 64 65 78 4f 66 28 6e 29 3f 28 72 2e 5f 73 65 6c 65 63 74 28 75 29 2c 72 2e 70 6f 70 75 70 2e 76 69 73 69 62 6c 65 28 29 7c 7c 72 2e 5f 63 68 61 6e 67 65 28 29 2c 21 30 29 3a 74 7d 3b 6f 3e 69 3b 69 2b 2b 29 69 66 28 75 3d 72 2e 5f 74 65 78 74 28 65 5b 69 5d 29 2c 75 26 26 73 28 75 2c 69 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 66 3e 30 26 Data Ascii: (n,i){for(var u,r=this,f=i,e=r.listView.data(),o=e.length,h=r.options.ignoreCase,s=function(i,u){return i+="",h&&(i=i.toLowerCase()),0===i.indexOf(n)?(r._select(u),r.popup.visible()\|\|r._change(),!0):t};o>i;i++)if(u=r._text(e[i]),u&&s(u,i))return!0;if(f>0&
2023-08-10 21:19:35 UTC	11914	IN	Data Raw: 63 65 6f 66 20 65 29 7b 69 66 28 74 3d 74 68 69 73 2e 70 61 72 73 65 64 56 61 6c 75 65 28 29 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 29 7b 66 6f 72 28 69 3d 30 3b 6e 2e 6c 65 6e 67 74 68 3e 69 3b 69 2b 2b 29 69 66 28 6e 5b 69 5d 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 26 26 2b 6e 5b 69 5d 3d 3d 2b 74 29 7b 72 3d 69 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 72 3d 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3b 72 3e 2d 31 3f 6e 2e 73 70 6c 69 63 65 28 72 2c 31 29 3a 6e 2e 70 75 73 68 28 74 29 7d 65 6c 73 65 20 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 5b 63 5d 2e 73 65 74 28 74 29 7d 2c 72 65 66 72 65 73 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 2c 74 2c 6e 3d 74 68 69 73 2e 62 69 6e 64 69 6e 67 73 5b 63 5d 2e 67 65 74 28 29 2c 72 3d 6e 2c Data Ascii: ceof e){if(t=this.parsedValue(),t instanceof Date){for(i=0;n.length>i;i++)if(n[i]instanceof Date&&+n[i]==+t){r=i;break}}else r=n.indexOf(t);r>-1?n.splice(r,1):n.push(t)}else this.bindings[c].set(t)},refresh:function(){var f,t,n=this.bindings[c].get(),r=n,
2023-08-10 21:19:35 UTC	11930	IN	Data Raw: 68 3f 30 3a 35 2c 67 72 6f 75 70 3a 22 64 65 66 61 75 6c 74 22 2c 63 75 72 73 6f 72 4f 66 66 73 65 74 3a 6e 75 6c 6c 2c 61 78 69 73 3a 6e 75 6c 6c 2c 63 6f 6e 74 61 69 6e 65 72 3a 6e 75 6c 6c 2c 66 69 6c 74 65 72 3a 6e 75 6c 6c 2c 69 67 6e 6f 72 65 3a 6e 75 6c 6c 2c 68 6f 6c 64 54 6f 44 72 61 67 3a 21 31 2c 64 72 6f 70 70 65 64 3a 21 31 7d 2c 63 61 6e 63 65 6c 48 6f 6c 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 61 63 74 69 76 61 74 65 64 3d 21 31 7d 2c 5f 63 61 70 74 75 72 65 45 73 63 61 70 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 69 2e 6b 65 79 73 2e 45 53 43 26 26 28 74 2e 5f 74 72 69 67 67 65 72 28 6e 74 2c 7b 65 76 65 6e 74 3a 6e 7d 29 2c 74 2e 75 73 65 72 45 76 65 6e Data Ascii: h?0:5,group:"default",cursorOffset:null,axis:null,container:null,filter:null,ignore:null,holdToDrag:!1,dropped:!1},cancelHold:function(){this._activated=!1},_captureEscape:function(n){var t=this;n.keyCode===i.keys.ESC&&(t._trigger(nt,{event:n}),t.userEven
2023-08-10 21:19:35 UTC	11946	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 74 2c 69 2c 72 2c 75 2c 66 2c 65 2c 6f 2c 73 3b 69 66 28 74 68 69 73 2e 69 73 41 72 69 61 49 6e 69 74 69 61 6c 69 7a 65 64 3d 21 31 2c 74 68 69 73 2e 73 65 73 73 69 6f 6e 49 64 3d 22 22 2c 74 68 69 73 2e 74 65 6e 61 6e 74 49 64 3d 22 22 2c 74 68 69 73 2e 63 6c 6f 75 64 4c 6f 63 61 74 69 6f 6e 3d 22 22 2c 74 68 69 73 2e 66 6c 69 67 68 74 3d 22 22 2c 74 68 69 73 2e 63 6c 6f 75 64 45 6e 76 69 72 6f 6e 6d 65 6e 74 3d 22 22 2c 74 68 69 73 2e 70 75 69 64 3d 22 22 2c 6e 2e 6c 6f 67 67 65 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 20 69 6e 73 74 65 61 64 20 75 73 65 20 41 72 69 61 4c 6f 67 67 65 72 Data Ascii: nction(){function n(){var t,i,r,u,f,e,o,s;if(this.isAriaInitialized=!1,this.sessionId="",this.tenantId="",this.cloudLocation="",this.flight="",this.cloudEnvironment="",this.puid="",n.logger)throw new Error("Unexpected initialization instead use AriaLogger
2023-08-10 21:19:35 UTC	11962	IN	Data Raw: 69 6c 6c 69 6e 67 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 55 73 65 72 73 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 68 74 74 70 28 7b 6d 65 74 68 6f 64 3a 27 50 4f 53 54 27 2c 75 72 6c 3a 72 2c 68 65 61 64 65 72 73 3a 7b 41 6a 61 78 53 65 73 73 69 6f 6e 4b 65 79 3a 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 53 68 61 72 65 64 2e 47 65 74 53 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 28 27 41 6a 61 78 53 65 73 73 69 6f 6e 4b 65 79 27 29 7d 2c 64 61 74 61 3a 7b 4c 69 73 74 41 63 74 69 6f 6e 3a 31 2c 4c 69 73 74 43 6f 6e 74 65 78 74 3a 69 2c 53 65 61 72 63 68 54 65 78 74 3a 6e 75 6c 6c 2c 53 65 6c 65 63 74 65 64 56 69 65 77 3a 6e 2c 53 65 6c 65 63 74 65 64 56 69 65 77 54 79 70 65 3a 74 2c 53 65 72 76 65 72 43 6f 6e 74 65 78 74 3a 6e 75 Data Ascii: illingNotificationsUsers";return this.$http({method:'POST',url:r,headers:{AjaxSessionKey:Microsoft.Online.BOX.JS.Shared.GetSessionCookie('AjaxSessionKey')},data:{ListAction:1,ListContext:i,SearchText:null,SelectedView:n,SelectedViewType:t,ServerContext:nu
2023-08-10 21:19:35 UTC	11978	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 29 7b 72 2e 70 75 73 68 28 22 2f 61 64 6d 69 6e 2f 61 70 69 2f 55 73 65 72 73 2f 22 2b 6e 29 7d 29 2c 74 3d 7b 7d 2c 74 68 69 73 2e 48 74 74 70 53 65 72 76 69 63 65 2e 50 75 74 28 75 2c 6e 2c 72 29 2e 73 75 63 63 65 73 73 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 64 61 74 61 3d 6e 2c 69 2e 72 65 73 6f 6c 76 65 28 74 29 7d 29 2e 65 72 72 6f 72 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 64 61 74 61 3d 6e 2c 4f 33 36 35 2e 4c 6f 67 2e 57 72 69 74 65 4c 6f 67 28 34 31 38 33 32 34 2c 4f 33 36 35 2e 4c 6f 67 4c 65 76 65 6c 2e 45 72 72 6f 72 2c 4f 33 36 35 2e 4c 6f 67 41 72 65 61 2e 55 73 65 72 4d 61 6e 61 67 65 6d 65 6e 74 2c 4f 33 36 35 2e 4c 6f 67 50 61 72 61 6d 65 74 65 72 2e 45 6d 70 74 79 2c 22 45 72 72 6f 72 20 69 6e 20 62 75 Data Ascii: nction(n){r.push("/admin/api/Users/"+n)}),t={},this.HttpService.Put(u,n,r).success(function(n){t.data=n,i.resolve(t)}).error(function(n){t.data=n,O365.Log.WriteLog(418324,O365.LogLevel.Error,O365.LogArea.UserManagement,O365.LogParameter.Empty,"Error in bu
2023-08-10 21:19:35 UTC	11994	IN	Data Raw: 6c 74 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 64 64 47 72 6f 75 70 44 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 49 6e 76 61 6c 69 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 74 68 69 73 2e 48 74 74 70 53 65 72 76 69 63 65 2e 49 6e 76 61 6c 69 64 61 74 65 28 74 68 69 73 2e 67 65 74 47 72 6f 75 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 55 72 6c 28 6e 2c 74 2c 69 29 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 49 73 4f 33 36 35 47 72 6f 75 70 73 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 2f 61 64 6d 69 6e 2f 61 70 69 2f 67 72 6f 75 70 73 2f 69 73 4f 33 36 35 47 72 6f 75 70 73 45 6e 61 62 6c 65 64 22 2c 74 3d 5b 5d Data Ascii: ltOptions=function(){return this._addGroupDefaultOptions},n.prototype.Invalidate=function(n,t,i){this.HttpService.Invalidate(this.getGroupInformationUrl(n,t,i))},n.prototype.IsO365GroupsEnabled=function(){var n="/admin/api/groups/isO365GroupsEnabled",t=[]
2023-08-10 21:19:35 UTC	12010	IN	Data Raw: 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 27 3b 62 72 65 61 6b 3b 63 61 73 65 20 6e 2e 50 72 69 76 61 74 65 43 61 74 61 6c 6f 67 52 65 73 75 6c 74 43 6f 64 65 2e 46 61 69 6c 65 64 41 64 64 49 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 3a 69 3d 27 46 61 69 6c 65 64 20 74 6f 20 72 65 67 69 73 74 65 72 20 74 68 65 20 41 64 64 2d 49 6e 2e 27 3b 62 72 65 61 6b 3b 63 61 73 65 20 6e 2e 50 72 69 76 61 74 65 43 61 74 61 6c 6f 67 52 65 73 75 6c 74 43 6f 64 65 2e 41 64 64 49 6e 4e 6f 74 46 6f 75 6e 64 3a 69 3d 27 55 6e 61 62 6c 65 20 74 6f 20 66 69 6e 64 20 74 68 65 20 41 64 64 2d 49 6e 2e 27 3b 62 72 65 61 6b 3b 63 61 73 65 20 6e 2e 50 72 69 76 61 74 65 43 61 74 61 6c 6f 67 52 65 73 75 6c 74 43 6f 64 65 2e 41 64 64 49 6e 45 78 69 73 74 73 3a 69 3d 27 54 68 69 Data Ascii: try again later.';break;case n.PrivateCatalogResultCode.FailedAddInRegistration:i='Failed to register the Add-In.';break;case n.PrivateCatalogResultCode.AddInNotFound:i='Unable to find the Add-In.';break;case n.PrivateCatalogResultCode.AddInExists:i='Thi
2023-08-10 21:19:35 UTC	12035	IN	Data Raw: 6e 75 6c 6c 3a 6e 2e 64 61 74 61 2e 4d 65 74 61 44 61 74 61 2e 4c 69 73 74 43 6f 6e 74 65 78 74 2c 75 2e 4e 6f 72 6d 61 6c 69 7a 65 53 65 61 72 63 68 52 65 73 75 6c 74 73 28 74 2e 45 78 74 65 72 6e 61 6c 55 73 65 72 2c 69 2c 72 2c 66 2c 75 29 7d 29 7d 2c 74 68 69 73 2e 47 65 74 41 70 70 73 50 65 72 6d 69 73 73 69 6f 6e 55 73 65 72 4c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 41 70 70 73 53 65 72 76 69 63 65 2e 47 65 74 41 70 70 50 65 72 6d 69 73 73 69 6f 6e 28 6e 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6e 2e 64 61 74 61 3b 72 65 74 75 72 6e 20 69 2e 4e 6f 72 6d 61 6c 69 7a 65 53 65 61 72 63 68 52 65 73 75 6c 74 73 28 74 2e 55 73 65 72 2c 72 2c 6e Data Ascii: null:n.data.MetaData.ListContext,u.NormalizeSearchResults(t.ExternalUser,i,r,f,u)})},this.GetAppsPermissionUserList=function(n){var i=this;return this.AppsService.GetAppPermission(n).then(function(n){var r=n.data;return i.NormalizeSearchResults(t.User,r,n
2023-08-10 21:19:35 UTC	12051	IN	Data Raw: 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 48 74 74 70 53 65 72 76 69 63 65 2e 47 65 74 28 72 2c 75 2c 21 31 29 2e 73 75 63 63 65 73 73 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 7d 29 2e 65 72 72 6f 72 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 4c 6f 67 41 70 69 43 61 6c 6c 45 72 72 6f 72 28 22 47 65 74 52 65 70 6f 72 74 4f 75 74 61 67 65 41 67 67 72 65 67 61 74 65 64 43 6f 75 6e 74 22 2c 6e 29 7d 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 47 65 74 52 65 70 6f 72 74 65 64 4f 75 74 61 67 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 2f 61 64 6d 69 6e 2f 61 70 69 2f 73 65 72 76 69 63 65 68 65 61 6c 74 68 2f 72 65 70 6f 72 74 6f 75 74 61 67 65 2f 61 6c 6c 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 48 74 74 70 Data Ascii: };return this.HttpService.Get(r,u,!1).success(function(n){return n}).error(function(n){this.LogApiCallError("GetReportOutageAggregatedCount",n)})},n.prototype.GetReportedOutages=function(){var n="/admin/api/servicehealth/reportoutage/all";return this.Http
2023-08-10 21:19:35 UTC	12067	IN	Data Raw: 6e 63 74 69 6f 6e 20 6e 28 29 7b 7d 72 65 74 75 72 6e 20 6e 2e 49 73 53 75 70 70 6f 72 74 65 64 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 6e 2e 43 6f 6d 70 6c 69 61 6e 63 65 49 6f 73 3a 63 61 73 65 20 6e 2e 43 6f 6d 70 6c 69 61 6e 63 65 41 6e 64 72 6f 69 64 3a 63 61 73 65 20 6e 2e 43 6f 6d 70 6c 69 61 6e 63 65 57 69 6e 64 6f 77 73 31 30 3a 63 61 73 65 20 6e 2e 43 6f 6e 66 69 67 49 6f 73 3a 63 61 73 65 20 6e 2e 43 6f 6e 66 69 67 41 6e 64 72 6f 69 64 3a 63 61 73 65 20 6e 2e 43 6f 6e 66 69 67 57 69 6e 64 6f 77 73 31 30 3a 63 61 73 65 20 6e 2e 45 6d 61 69 6c 50 72 6f 66 69 6c 65 49 6f 73 3a 72 65 74 75 72 6e 21 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 2c 6e 2e 43 6f 6d 70 6c 69 61 6e 63 Data Ascii: nction n(){}return n.IsSupportedType=function(t){switch(t){case n.ComplianceIos:case n.ComplianceAndroid:case n.ComplianceWindows10:case n.ConfigIos:case n.ConfigAndroid:case n.ConfigWindows10:case n.EmailProfileIos:return!0;default:return!1}},n.Complianc
2023-08-10 21:19:35 UTC	12083	IN	Data Raw: 26 6e 2e 64 61 74 61 2e 76 61 6c Data Ascii: &n.data.val
2023-08-10 21:19:35 UTC	12083	IN	Data Raw: 75 65 2e 6c 65 6e 67 74 68 3e 30 3f 74 2e 72 65 70 6f 72 74 65 64 4f 75 74 61 67 65 73 3d 6e 2e 64 61 74 61 2e 76 61 6c 75 65 3a 28 74 2e 75 73 65 72 4d 65 73 73 61 67 65 3d 27 54 68 65 72 65 20 69 73 20 6e 6f 20 6f 75 74 61 67 65 73 20 72 65 70 6f 72 74 65 64 2e 27 2c 74 2e 73 68 6f 77 55 73 65 72 4d 65 73 73 61 67 65 3d 21 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 69 73 52 65 70 6f 72 74 4f 75 74 61 67 65 54 72 61 63 6b 69 6e 67 50 61 67 65 4c 6f 61 64 69 6e 67 3d 21 31 2c 74 2e 75 73 65 72 4d 65 73 73 61 67 65 3d 27 53 6f 72 72 79 2c 20 66 6f 72 20 73 6f 6d 65 20 72 65 61 73 6f 6e 2c 20 77 65 20 63 61 6e 5c 75 30 30 32 37 74 20 67 65 74 20 79 6f 75 72 20 72 65 70 6f 72 74 65 64 20 6f 75 74 61 67 65 73 20 72 69 67 68 74 20 6e 6f 77 2e 20 50 6c Data Ascii: ue.length>0?t.reportedOutages=n.data.value:(t.userMessage='There is no outages reported.',t.showUserMessage=!0)},function(){t.isReportOutageTrackingPageLoading=!1,t.userMessage='Sorry, for some reason, we can\u0027t get your reported outages right now. Pl
2023-08-10 21:19:35 UTC	12099	IN	Data Raw: 6e 65 77 20 72 29 7d 7d 28 29 2c 41 64 6d 69 6e 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 3b 76 61 72 20 74 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 5b 6e 2e 43 72 65 61 74 65 3d 30 5d 3d 22 43 72 65 61 74 65 22 2c 6e 5b 6e 2e 45 64 69 74 50 6f 6c 69 63 79 4e 61 6d 65 3d 31 5d 3d 22 45 64 69 74 50 6f 6c 69 63 79 4e 61 6d 65 22 2c 6e 5b 6e 2e 45 64 69 74 4d 61 6d 4c 6f 73 73 70 72 6f 74 65 63 74 69 6f 6e 3d 32 5d 3d 22 45 64 69 74 4d 61 6d 4c 6f 73 73 70 72 6f 74 65 63 74 69 6f 6e 22 2c 6e 5b 6e 2e 45 64 69 74 4d 61 6d 4f 66 66 69 63 65 44 6f 63 73 3d 33 5d 3d 22 45 64 69 74 4d 61 6d 4f 66 66 69 63 65 44 6f 63 73 22 2c 6e 5b 6e 2e 45 64 69 74 4d 61 6d 50 72 6f 74 65 63 74 65 64 41 70 70 73 3d 34 5d 3d 22 45 64 69 Data Ascii: new r)}}(),Admin;(function(n){'use strict';;var t;(function(n){n[n.Create=0]="Create",n[n.EditPolicyName=1]="EditPolicyName",n[n.EditMamLossprotection=2]="EditMamLossprotection",n[n.EditMamOfficeDocs=3]="EditMamOfficeDocs",n[n.EditMamProtectedApps=4]="Edi
2023-08-10 21:19:35 UTC	12115	IN	Data Raw: 66 2c 74 68 69 73 2e 69 6e 74 75 6e 65 53 65 72 76 69 63 65 3d 65 2c 74 68 69 73 2e 69 6e 74 75 6e 65 48 65 6c 70 65 72 53 65 72 76 69 63 65 3d 6f 2c 74 2e 6f 70 65 72 61 74 69 6f 6e 4d 6f 64 65 6c 3d 6e 65 77 20 6e 2e 4f 70 65 72 61 74 69 6f 6e 4d 6f 64 65 6c 3b 76 61 72 20 68 3d 5b 5d 2c 73 3d 5b 5d 3b 74 2e 64 69 72 74 79 4f 66 66 69 63 65 41 73 73 69 67 6e 65 64 47 72 6f 75 70 73 3d 5b 5d 2c 74 2e 73 74 65 70 4e 61 6d 65 3d 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 6f 70 65 72 61 74 69 6f 6e 4d 6f 64 65 6c 2e 77 61 69 74 69 6e 67 4d 65 73 73 61 67 65 3d 27 52 65 74 72 69 65 76 69 6e 67 20 4f 66 66 69 63 65 20 67 72 6f 75 70 20 61 73 73 69 67 6e 6d 65 6e 74 73 27 2c 74 2e 6f 70 65 72 61 74 69 6f 6e 4d 6f 64 65 6c 2e 65 72 72 6f 72 4d 65 73 Data Ascii: f,this.intuneService=e,this.intuneHelperService=o,t.operationModel=new n.OperationModel;var h=[],s=[];t.dirtyOfficeAssignedGroups=[],t.stepName=null,function(){t.operationModel.waitingMessage='Retrieving Office group assignments',t.operationModel.errorMes
2023-08-10 21:19:35 UTC	12131	IN	Data Raw: 6f 75 70 73 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 61 28 6e 2e 64 61 74 61 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 73 65 72 76 65 72 45 72 72 6f 72 3d 21 30 2c 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 73 68 6f 77 53 70 69 6e 6e 65 72 3d 21 31 2c 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 65 72 72 6f 72 3d 6e 2e 64 61 74 61 2c 65 2e 4c 6f 67 45 72 72 6f 72 28 34 32 33 34 32 35 2c 22 49 6e 74 75 6e 65 5f 54 61 72 67 65 74 47 72 6f 75 70 73 43 6f 6e 74 72 6f 6c 6c 65 72 3a 20 4c 69 73 74 47 72 6f 75 70 73 20 65 72 72 6f 72 3a 20 7b 30 7d 22 2e 46 6f 72 6d 61 74 28 6e 2e 64 61 74 61 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 69 66 28 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 73 Data Ascii: oups().then(function(n){a(n.data)},function(n){t.IntuneModel.serverError=!0,t.IntuneModel.showSpinner=!1,t.IntuneModel.error=n.data,e.LogError(423425,"Intune_TargetGroupsController: ListGroups error: {0}".Format(n.data))})}function a(n){if(t.IntuneModel.s
2023-08-10 21:19:35 UTC	12147	IN	Data Raw: 64 65 6c 3d 69 2c 6e 2e 24 6c 61 62 65 6c 3d 72 2c 6e 2e 6d 6f 64 65 72 6e 53 65 61 72 63 68 54 65 72 6d 3d 22 22 2c 74 2e 52 65 73 75 6c 74 54 79 70 65 3d 3d 27 75 73 65 72 27 3f 28 75 3d 65 28 27 65 64 69 74 55 73 65 72 27 2c 74 29 2c 6e 2e 70 61 6e 65 6c 2e 69 6e 76 6f 6b 65 28 75 29 29 3a 74 2e 52 65 73 75 6c 74 54 79 70 65 3d 3d 27 67 72 6f 75 70 27 26 26 28 75 3d 65 28 27 65 64 69 74 47 72 6f 75 70 27 2c 74 29 2c 6e 2e 70 61 6e 65 6c 2e 69 6e 76 6f 6b 65 28 75 29 29 7d 2c 6e 2e 69 6e 69 74 43 61 6c 6c 62 61 63 6b 46 6c 79 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 2e 66 6c 79 6f 75 74 3d 74 7d 2c 6e 2e 69 6e 69 74 43 61 6c 6c 62 61 63 6b 50 61 6e 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 2e 70 61 6e 65 6c 3d 74 7d 2c 6e 2e 24 6f 6e 28 Data Ascii: del=i,n.$label=r,n.modernSearchTerm="",t.ResultType=='user'?(u=e('editUser',t),n.panel.invoke(u)):t.ResultType=='group'&&(u=e('editGroup',t),n.panel.invoke(u))},n.initCallbackFlyout=function(t){n.flyout=t},n.initCallbackPanel=function(t){n.panel=t},n.$on(
2023-08-10 21:19:35 UTC	12163	IN	Data Raw: 63 6b 65 72 2e 6d 61 6d 44 65 76 69 63 65 73 43 6f 75 6e 74 3d 75 2e 6c 65 6e 67 74 68 29 3a 74 2e 64 65 76 69 63 65 50 69 63 6b 65 72 2e 6d 61 6d 44 65 76 69 63 65 73 43 6f 75 6e 74 3d 30 2c 74 2e 72 65 74 72 69 65 76 65 44 65 76 69 63 65 73 4d 6f 64 65 6c 2e 45 6e 64 4f 70 65 72 61 74 69 6f 6e 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 72 65 74 72 69 65 76 65 44 65 76 69 63 65 73 4d 6f 64 65 6c 2e 53 65 74 4f 70 65 72 61 74 69 6f 6e 45 72 72 6f 72 28 6e 29 7d 29 7d 7d 2c 74 2e 55 70 64 61 74 65 53 65 6c 65 63 74 65 64 4d 64 6d 44 65 76 69 63 65 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 69 66 28 6e 2e 53 75 70 70 6f 72 74 73 52 65 6d 6f 76 65 43 6f 6d 70 61 6e 79 44 61 74 61 29 69 66 28 69 26 26 28 6e 2e 69 73 43 68 65 63 6b 65 64 3d 21 Data Ascii: cker.mamDevicesCount=u.length):t.devicePicker.mamDevicesCount=0,t.retrieveDevicesModel.EndOperation()},function(n){t.retrieveDevicesModel.SetOperationError(n)})}},t.UpdateSelectedMdmDevices=function(n,i){if(n.SupportsRemoveCompanyData)if(i&&(n.isChecked=!
2023-08-10 21:19:35 UTC	12179	IN	Data Raw: 65 73 5b 30 5d 3b 6e 2e 66 69 6c 65 6e 61 6d 65 3d 72 2e 6e 61 6d 65 7d 2c 6e 2e 53 75 62 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 2e 65 76 65 6e 74 29 7b 6e 2e 49 73 43 68 61 6e 67 65 64 3d 21 31 3b 76 61 72 20 75 3d 6e 2e 65 76 65 6e 74 2e 74 61 72 67 65 74 2c 66 3d 75 2e 66 69 6c 65 73 5b 30 5d 2c 72 3d 6e 65 77 20 46 69 6c 65 52 65 61 64 65 72 3b 6e 2e 73 68 6f 77 57 61 69 74 69 6e 67 49 6e 64 69 63 61 74 6f 72 3d 21 30 2c 72 2e 6f 6e 6c 6f 61 64 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 76 61 72 20 66 3d 75 2e 74 61 72 67 65 74 3b 66 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 32 26 26 28 6e 2e 61 70 70 6c 65 50 75 73 68 4e 6f 74 69 66 69 63 61 74 69 6f 6e 43 65 72 74 69 66 69 63 61 74 65 2e 43 65 72 74 69 66 69 63 61 74 65 3d 72 Data Ascii: es[0];n.filename=r.name},n.Submit=function(t){if(n.event){n.IsChanged=!1;var u=n.event.target,f=u.files[0],r=new FileReader;n.showWaitingIndicator=!0,r.onloadend=function(u){var f=u.target;f.readyState==2&&(n.applePushNotificationCertificate.Certificate=r
2023-08-10 21:19:35 UTC	12195	IN	Data Raw: 65 6f 75 74 3d 6e 2e 4d 69 6e 75 74 65 73 4f 66 49 6e 61 63 74 69 76 69 74 79 42 65 66 6f 72 65 53 63 72 65 65 6e 54 69 6d 65 6f 75 74 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 43 72 65 61 74 65 50 6f 6c 69 63 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4d 69 66 6f 53 65 72 76 69 63 65 2e 43 72 65 61 74 65 43 6f 6d 70 6c 69 61 6e 63 65 50 6f 6c 69 63 79 28 6e 29 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 55 70 64 61 74 65 50 6f 6c 69 63 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4d 69 66 6f 53 65 72 76 69 63 65 2e 55 70 64 61 74 65 43 6f 6d 70 6c 69 61 6e 63 65 50 6f 6c 69 63 79 28 6e 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 44 65 73 63 72 69 70 Data Ascii: eout=n.MinutesOfInactivityBeforeScreenTimeout},i.prototype.CreatePolicy=function(n){return this.MifoService.CreateCompliancePolicy(n)},i.prototype.UpdatePolicy=function(n){return this.MifoService.UpdateCompliancePolicy(n).then(function(t){return n.Descrip
2023-08-10 21:19:35 UTC	12211	IN	Data Raw: 64 65 6c 28 29 2c 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 54 6f 67 67 6c 65 48 69 67 68 6c 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 24 28 22 2e 67 72 69 64 52 6f 77 22 29 2e 63 73 73 28 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 2c 22 74 72 61 6e 73 70 61 72 65 6e 74 22 29 2c 24 28 22 23 75 73 65 72 5f 6c 69 73 74 5f 22 2b 6e 29 2e 63 73 73 28 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 2c 22 23 44 44 45 42 46 37 22 29 7d 2c 66 3d 74 2e 24 6f 6e 28 27 68 69 67 68 6c 69 67 68 74 73 65 6c 65 63 74 65 64 72 6f 77 27 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 61 6e 67 75 6c 61 72 2e 69 73 44 65 66 69 6e 65 64 28 69 29 26 26 74 2e 49 6e 74 75 6e 65 4d 6f 64 65 6c 2e 54 6f 67 67 6c 65 48 69 67 68 6c 69 67 68 74 28 69 29 7d 29 Data Ascii: del(),t.IntuneModel.ToggleHighlight=function(n){$(".gridRow").css("background-color","transparent"),$("#user_list_"+n).css("background-color","#DDEBF7")},f=t.$on('highlightselectedrow',function(n,i){angular.isDefined(i)&&t.IntuneModel.ToggleHighlight(i)})
2023-08-10 21:19:35 UTC	12227	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 74 2e 7a 74 64 4d 6f 64 65 6c 2e 61 6c 6c 47 72 6f 75 70 73 3d 5b 5d 2c 75 2e 47 65 74 41 6c 6c 47 72 6f 75 70 73 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 64 61 74 61 2e 6c 65 6e 67 74 68 3e 30 26 26 6e 2e 64 61 74 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 21 3d 3d 22 30 22 29 7b 76 61 72 20 69 3d 6e 65 77 20 44 61 74 65 2c 72 3d 69 2e 67 65 74 4d 6f 6e 74 68 28 29 2b 31 2c 75 3d 72 2b 22 2f 22 2b 69 2e 67 65 74 44 61 74 65 28 29 2b 22 2f 22 2b 69 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 66 3d 7b 69 73 43 68 65 63 6b 65 64 3a 21 31 2c 44 65 76 69 63 65 47 72 6f 75 70 3a 6e 2c 50 72 6f 66 69 6c 65 3a 74 2e 7a 74 64 4d 6f 64 65 6c 2e 6e 6f 6e 65 2c 44 61 74 65 41 64 Data Ascii: nction(){t.ztdModel.allGroups=[],u.GetAllGroups().then(function(n){n.data.length>0&&n.data.forEach(function(n){if(n!=="0"){var i=new Date,r=i.getMonth()+1,u=r+"/"+i.getDate()+"/"+i.getFullYear(),f={isChecked:!1,DeviceGroup:n,Profile:t.ztdModel.none,DateAd
2023-08-10 21:19:35 UTC	12243	IN	Data Raw: 7b 76 61 72 20 74 3d 7b 52 65 67 69 73 74 72 61 74 69 6f 6e 49 64 3a 6e 2e 52 65 67 69 73 74 72 61 74 69 6f 6e 49 64 2c 43 6f 6e 66 69 67 50 72 6f 66 69 6c 65 49 64 3a 66 7d 3b 75 2e 70 75 73 68 28 74 29 7d 29 2c 69 2e 55 70 64 61 74 65 44 65 76 69 63 65 73 50 72 6f 66 69 6c 65 28 75 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 7a 74 64 4d 6f 64 65 6c 2e 73 74 61 74 75 73 4d 65 73 73 61 67 65 3d 27 43 68 61 6e 67 65 20 69 6e 20 70 72 6f 67 72 65 73 73 2c 20 69 74 20 6d 61 79 20 74 61 6b 65 20 61 20 66 65 77 20 6d 69 6e 75 74 65 73 20 66 6f 72 20 79 6f 75 72 20 64 65 76 69 63 65 73 20 74 6f 20 62 65 20 75 70 64 61 74 65 64 2e 27 2c 74 2e 7a 74 64 4d 6f 64 65 6c 2e 73 68 6f 77 53 75 6d 6d 61 72 79 3d 21 30 2c 74 2e 7a 74 64 4d 6f 64 65 6c Data Ascii: {var t={RegistrationId:n.RegistrationId,ConfigProfileId:f};u.push(t)}),i.UpdateDevicesProfile(u).then(function(n){t.ztdModel.statusMessage='Change in progress, it may take a few minutes for your devices to be updated.',t.ztdModel.showSummary=!0,t.ztdModel
2023-08-10 21:19:35 UTC	12259	IN	Data Raw: 7a 74 64 4d 6f 64 65 6c 2e 7a 74 Data Ascii: ztdModel.zt
2023-08-10 21:19:35 UTC	12259	IN	Data Raw: 64 50 72 6f 66 69 6c 65 3d 6e 7d 2c 74 2e 54 6f 67 67 6c 65 41 75 74 6f 50 69 6c 6f 74 44 65 74 61 69 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 7a 74 64 4d 6f 64 65 6c 2e 73 68 6f 77 41 75 74 6f 50 69 6c 6f 74 44 65 74 61 69 6c 73 3d 21 74 2e 7a 74 64 4d 6f 64 65 6c 2e 73 68 6f 77 41 75 74 6f 50 69 6c 6f 74 44 65 74 61 69 6c 73 2c 61 6e 67 75 6c 61 72 2e 65 6c 65 6d 65 6e 74 28 6e 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 74 2e 7a 74 64 4d 6f 64 65 6c 2e 73 68 6f 77 41 75 74 6f 50 69 6c 6f 74 44 65 74 61 69 6c 73 29 7d 2c 74 2e 53 68 6f 77 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 2c 6e 2c 75 3b 69 66 28 74 2e 7a 74 64 4d 6f 64 65 6c Data Ascii: dProfile=n},t.ToggleAutoPilotDetails=function(n){t.ztdModel.showAutoPilotDetails=!t.ztdModel.showAutoPilotDetails,angular.element(n.currentTarget).attr("aria-expanded",t.ztdModel.showAutoPilotDetails)},t.ShowConfirmation=function(){var r,n,u;if(t.ztdModel
2023-08-10 21:19:35 UTC	12275	IN	Data Raw: 74 27 29 3a 6e 2c 75 3d 66 2e 69 6e 64 65 78 28 63 29 3b 69 66 28 69 2e 73 68 69 66 74 4b 65 79 26 26 75 21 3d 30 29 6f 3d 61 6e 67 75 6c 61 72 2e 65 6c 65 6d 65 6e 74 28 66 5b 75 2d 31 5d 29 2c 6f 2e 66 6f 63 75 73 28 29 2c 24 28 27 23 53 68 65 6c 6c 42 6f 64 79 41 6e 64 46 6f 6f 74 65 72 43 6f 6e 74 61 69 6e 65 72 27 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 6f 2e 70 6f 73 69 74 69 6f 6e 28 29 2e 74 6f 70 2d 32 30 29 3b 65 6c 73 65 7b 69 66 28 75 3d 3d 3d 66 2e 6c 65 6e 67 74 68 2d 31 7c 7c 69 2e 73 68 69 66 74 4b 65 79 29 7b 69 66 28 75 3d 3d 3d 30 29 7b 24 28 27 23 53 68 65 6c 6c 42 6f 64 79 41 6e 64 46 6f 6f 74 65 72 43 6f 6e 74 61 69 6e 65 72 27 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 30 29 3b 72 65 74 75 72 6e 7d 69 66 28 75 3d 3d 3d 72 2e 6c 65 6e 67 74 68 Data Ascii: t'):n,u=f.index(c);if(i.shiftKey&&u!=0)o=angular.element(f[u-1]),o.focus(),$('#ShellBodyAndFooterContainer').scrollTop(o.position().top-20);else{if(u===f.length-1\|\|i.shiftKey){if(u===0){$('#ShellBodyAndFooterContainer').scrollTop(0);return}if(u===r.length
2023-08-10 21:19:35 UTC	12291	IN	Data Raw: 69 3b 6e 2b 2b 29 74 2e 70 75 73 68 28 7b 6f 6e 3a 21 31 2c 74 6f 6f 6c 74 69 70 3a 72 5b 6e 5d 7d 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 76 61 72 20 69 3d 7b 7d 2c 74 3b 69 2e 65 76 65 6e 74 57 6f 72 6b 6c 6f 61 64 3d 6e 2e 65 76 65 6e 74 57 6f 72 6b 6c 6f 61 64 2c 69 2e 65 76 65 6e 74 49 64 3d 6e 2e 65 76 65 6e 74 49 64 3b 66 6f 72 28 74 20 69 6e 20 6e 2e 69 6e 63 6f 72 72 65 63 74 46 69 65 6c 64 73 29 69 5b 22 65 72 72 5f 22 2b 74 5d 3d 6e 2e 69 6e 63 6f 72 72 65 63 74 46 69 65 6c 64 73 5b 74 5d 3b 66 6f 72 28 74 20 69 6e 20 6e 2e 73 6e 61 70 73 68 6f 74 29 69 5b 22 73 6e 61 70 73 68 6f 74 5f 22 2b 74 5d 3d 6e 2e 73 6e 61 70 73 68 6f 74 5b 74 5d 3b 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 Data Ascii: i;n++)t.push({on:!1,tooltip:r[n]});return t}function e(n){var i={},t;i.eventWorkload=n.eventWorkload,i.eventId=n.eventId;for(t in n.incorrectFields)i["err_"+t]=n.incorrectFields[t];for(t in n.snapshot)i["snapshot_"+t]=n.snapshot[t];return i}function l(){v
2023-08-10 21:19:35 UTC	12313	IN	Data Raw: 6f 6e 2d 46 61 62 72 69 63 4d 44 4c 32 2d 2d 43 61 6e 63 65 6c 20 22 2b 77 74 2b 22 27 20 6e 67 2d 63 6c 69 63 6b 3d 27 70 61 6e 65 6c 43 6c 6f 73 65 28 65 2c 20 74 72 75 65 29 27 20 61 72 69 61 2d 6c 61 62 65 6c 3d 27 7b 7b 68 65 61 64 65 72 54 69 74 6c 65 7d 7d 20 22 2b 64 2b 22 27 20 74 69 74 6c 65 3d 27 22 2b 64 2b 22 27 3e 3c 2f 62 75 74 74 6f 6e 3e 20 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 70 72 6f 66 69 6c 65 43 61 72 64 7d 20 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 6e 67 2d 69 66 3d 27 74 69 74 6c 65 27 20 63 6c 61 73 Data Ascii: on-FabricMDL2--Cancel "+wt+"' ng-click='panelClose(e, true)' aria-label='{{headerTitle}} "+d+"' title='"+d+"'></button> \ {profileCard} \ <div ng-if='title' clas
2023-08-10 21:19:35 UTC	12329	IN	Data Raw: 20 66 2d 6d 72 67 6e 2d 74 6f 70 2d 36 30 70 78 27 3e 3c 2f 64 69 76 3e 20 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 20 3e 20 22 29 3a 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 53 68 65 6c 6c 42 6f 64 79 41 6e 64 46 6f 6f 74 65 72 43 6f 6e 74 61 69 6e 65 72 22 29 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 31 39 30 30 22 2c 70 3d 22 3c 64 69 76 20 69 64 20 3d 27 66 6c 79 6f 75 74 43 6f 76 65 72 27 20 63 6c 61 73 73 3d 27 66 6c 79 6f 75 74 43 6f 76 65 72 27 3e 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 20 3d 27 66 6c 79 6f 75 74 27 Data Ascii: f-mrgn-top-60px'></div> \ </div > "):(document.getElementById("ShellBodyAndFooterContainer").style.zIndex="1900",p="<div id ='flyoutCover' class='flyoutCover'>\ <div id ='flyout'
2023-08-10 21:19:35 UTC	12345	IN	Data Raw: 65 6e 74 49 64 29 2e 66 6f 63 75 73 28 29 7d 2c 63 2e 70 69 63 6b 65 72 2e 52 65 66 72 65 73 68 4c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 43 6c 65 61 72 53 65 61 72 63 68 28 29 2c 63 2e 70 69 63 6b 65 72 2e 61 6c 6c 49 74 65 6d 73 3d 5b 5d 2c 63 2e 70 69 63 6b 65 72 2e 70 61 67 65 54 6f 6b 65 6e 3d 6e 75 6c 6c 2c 63 2e 70 69 63 6b 65 72 2e 63 75 72 72 65 6e 74 50 61 67 65 54 6f 6b 65 6e 3d 6e 75 6c 6c 2c 79 28 6e 75 6c 6c 29 7d 2c 63 2e 53 65 61 72 63 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 63 2e 73 65 61 72 63 68 56 61 6c 75 65 3d 6e 2c 63 2e 73 65 61 72 63 68 52 65 73 75 6c 74 73 3d 7b 61 6c 6c 49 74 65 6d 73 3a 5b 5d 2c 6c 6f 61 64 69 6e 67 4d 65 6d 62 65 72 73 3a 21 31 2c 70 61 67 65 54 6f 6b 65 6e 3a 6e 75 6c 6c 2c 63 75 72 72 Data Ascii: entId).focus()},c.picker.RefreshList=function(){c.ClearSearch(),c.picker.allItems=[],c.picker.pageToken=null,c.picker.currentPageToken=null,y(null)},c.Search=function(n){if(c.searchValue=n,c.searchResults={allItems:[],loadingMembers:!1,pageToken:null,curr
2023-08-10 21:19:35 UTC	12361	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 75 2e 63 6f 6e 74 65 78 74 4d 65 6e 75 3d 7b 7d 7d 29 3b 76 61 72 20 6f 3d 22 3c 64 69 76 20 6e 67 2d 69 66 3d 5c 22 53 68 6f 77 43 6f 6e 74 65 78 74 75 61 6c 48 65 6c 70 44 69 76 28 29 5c 22 20 63 6c 61 73 73 3d 5c 22 66 31 31 2d 6d 72 67 6e 2d 74 6f 70 2d 33 32 70 78 5c 22 3e 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 72 20 63 6c 61 73 73 3d 5c 22 6c 69 73 74 48 65 61 64 65 72 53 65 70 61 72 61 74 6f 72 5c 22 20 6e 67 2d 73 68 6f 77 3d 5c 22 7b 25 6e 67 73 68 6f 77 56 61 6c 25 7d 5c 22 20 2f 3e 5c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c Data Ascii: ,function(){u.contextMenu={}});var o="<div ng-if=\"ShowContextualHelpDiv()\" class=\"f11-mrgn-top-32px\">\ <hr class=\"listHeaderSeparator\" ng-show=\"{%ngshowVal%}\" />\ <div class=\
2023-08-10 21:19:35 UTC	12377	IN	Data Raw: 77 28 6e 2c 74 2c 69 2c 72 2c 75 29 7b 69 66 28 74 6f 67 67 6c 65 43 6c 69 65 6e 74 49 64 3d 22 41 75 74 6f 52 65 6e 65 77 54 6f 67 67 6c 65 5f 22 2b 6e 2c 74 6f 67 67 6c 65 50 72 6f 63 65 73 73 69 6e 67 21 3d 21 30 26 26 54 6f 67 67 6c 65 53 77 69 74 63 68 2e 47 65 74 53 74 61 74 65 28 74 6f 67 67 6c 65 43 6c 69 65 6e 74 49 64 29 21 3d 54 6f 67 67 6c 65 53 77 69 74 63 68 2e 57 61 69 74 69 6e 67 53 74 61 74 65 29 7b 69 66 28 65 6e 61 62 6c 65 4f 6e 65 54 69 6d 65 52 65 6e 65 77 61 6c 3d 21 31 2c 74 6f 67 67 6c 65 4f 6c 64 53 74 61 74 65 3d 54 6f 67 67 6c 65 53 77 69 74 63 68 2e 47 65 74 53 74 61 74 65 28 74 6f 67 67 6c 65 43 6c 69 65 6e 74 49 64 29 2c 69 26 26 74 6f 67 67 6c 65 4f 6c 64 53 74 61 74 65 3d 3d 54 6f 67 67 6c 65 53 77 69 74 63 68 2e 4f 66 66 Data Ascii: w(n,t,i,r,u){if(toggleClientId="AutoRenewToggle_"+n,toggleProcessing!=!0&&ToggleSwitch.GetState(toggleClientId)!=ToggleSwitch.WaitingState){if(enableOneTimeRenewal=!1,toggleOldState=ToggleSwitch.GetState(toggleClientId),i&&toggleOldState==ToggleSwitch.Off
2023-08-10 21:19:35 UTC	12393	IN	Data Raw: 63 65 4d 61 74 63 68 53 75 62 6d 69 74 52 65 73 75 6c 74 52 6f 77 22 29 2e 73 68 6f 77 28 29 2c 24 28 22 23 73 75 62 6d 69 74 45 72 72 6f 72 4d 73 67 22 29 2e 66 6f 63 75 73 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 49 6e 76 6f 69 63 65 4d 61 74 63 68 43 61 6c 6c 62 61 63 6b 28 6e 29 7b 69 66 28 49 73 49 6e 74 65 67 65 72 28 6e 29 29 7b 76 61 72 20 74 3d 24 28 22 23 73 75 63 63 65 73 73 4d 73 67 54 65 6d 70 6c 61 74 65 22 29 2e 76 61 6c 28 29 3b 24 28 22 23 73 75 62 6d 69 74 53 75 63 63 65 73 73 4d 73 67 22 29 2e 74 65 78 74 28 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 74 2c 6e 29 29 2c 24 28 22 23 73 75 62 6d 69 74 45 72 72 6f 72 4d 73 67 22 29 2e 68 69 64 65 28 29 2c 24 28 22 23 73 75 62 6d 69 74 53 75 63 63 65 73 73 4d 73 67 22 29 2e 73 68 Data Ascii: ceMatchSubmitResultRow").show(),$("#submitErrorMsg").focus()}function submitInvoiceMatchCallback(n){if(IsInteger(n)){var t=$("#successMsgTemplate").val();$("#submitSuccessMsg").text(String.format(t,n)),$("#submitErrorMsg").hide(),$("#submitSuccessMsg").sh
2023-08-10 21:19:35 UTC	12409	IN	Data Raw: 69 6f 6e 44 61 74 65 22 29 2e 76 61 6c 28 69 5b 34 5d 29 2c 24 28 22 23 65 72 72 6f 72 43 6f 64 65 22 29 2e 76 61 6c 28 69 5b 35 5d 29 29 29 3a 28 24 28 22 23 61 6c 6c 53 65 74 74 6c 65 64 4e 6f 74 69 66 69 63 61 74 69 6f 6e 4c 61 62 22 29 2e 74 65 78 74 28 72 29 2c 24 28 22 23 61 6c 6c 53 65 74 74 6c 65 64 54 69 74 6c 65 4c 61 62 22 29 2e 74 65 78 74 28 27 53 6f 72 72 79 2c 20 74 68 65 72 65 20 69 73 20 61 20 70 72 6f 62 6c 65 6d 2e 27 29 29 29 3a 28 24 28 22 23 70 61 79 6d 65 6e 74 70 61 6e 65 22 29 2e 68 69 64 65 28 29 2c 24 28 22 23 61 6c 6c 73 65 74 74 6c 65 6d 65 6e 74 70 61 6e 65 22 29 2e 68 69 64 65 28 29 2c 24 28 22 23 70 61 72 74 69 61 6c 53 65 74 74 6c 65 6d 65 6e 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 6f 77 22 29 2e 74 65 78 74 28 72 29 2c Data Ascii: ionDate").val(i[4]),$("#errorCode").val(i[5]))):($("#allSettledNotificationLab").text(r),$("#allSettledTitleLab").text('Sorry, there is a problem.'))):($("#paymentpane").hide(),$("#allsettlementpane").hide(),$("#partialSettlementNotificationRow").text(r),
2023-08-10 21:19:35 UTC	12425	IN	Data Raw: 6f 64 65 72 6e 29 29 2c 76 28 21 31 29 2c 6e 74 28 61 29 2c 6e 2e 55 73 65 50 69 64 6c 26 26 66 28 69 29 26 26 24 28 22 23 50 61 79 6d 65 6e 74 43 6f 6c 6c 65 63 74 69 6f 6e 4c 6f 61 64 69 6e 67 22 29 2e 68 69 64 65 28 29 29 2c 69 2e 66 6f 72 6d 26 26 69 2e 66 6f 72 6d 2e 42 69 6c 6c 69 6e 67 41 64 64 72 65 73 73 53 68 65 65 74 24 49 6e 76 6f 69 63 65 43 6f 75 6e 74 72 79 43 6f 64 65 48 69 64 64 65 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 68 72 65 65 64 73 49 6e 66 6f 41 6c 65 72 74 42 61 72 22 29 26 26 28 6e 2e 49 73 47 65 6d 69 6e 69 26 26 69 2e 76 61 6c 75 65 3d 3d 27 30 27 26 26 69 2e 66 6f 72 6d 2e 42 69 6c 6c 69 6e 67 41 64 64 72 65 73 73 53 68 65 65 74 24 49 6e 76 6f 69 63 65 43 6f 75 6e 74 72 79 43 6f Data Ascii: odern)),v(!1),nt(a),n.UsePidl&&f(i)&&$("#PaymentCollectionLoading").hide()),i.form&&i.form.BillingAddressSheet$InvoiceCountryCodeHidden&&document.getElementById("threedsInfoAlertBar")&&(n.IsGemini&&i.value=='0'&&i.form.BillingAddressSheet$InvoiceCountryCo
2023-08-10 21:19:35 UTC	12441	IN	Data Raw: 30 30 30 30 22 2b 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 34 29 7d 29 2b 27 22 27 3a 27 22 27 2b 6e 2b 27 22 27 7d 66 75 6e 63 74 69 6f 6e 20 75 28 69 2c 66 29 7b 76 61 72 20 63 2c 6c 2c 73 2c 61 2c 76 3d 6e 2c 68 2c 65 3d 66 5b 69 5d 3b 65 26 26 74 79 70 65 6f 66 20 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 65 2e 74 6f 4a 53 4f 4e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 65 2e 74 6f 4a 53 4f 4e 28 69 29 29 2c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 74 2e 63 61 6c 6c 28 66 2c 69 2c 65 29 29 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 65 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 20 6f 28 65 29 3b 63 61 Data Ascii: 0000"+n.charCodeAt(0).toString(16)).slice(-4)})+'"':'"'+n+'"'}function u(i,f){var c,l,s,a,v=n,h,e=f[i];e&&typeof e=="object"&&typeof e.toJSON=="function"&&(e=e.toJSON(i)),typeof t=="function"&&(e=t.call(f,i,e));switch(typeof e){case"string":return o(e);ca
2023-08-10 21:19:35 UTC	12457	IN	Data Raw: 6f 67 53 65 72 76 69 63 65 2e 4c 6f 67 54 6f 53 65 72 76 65 72 57 69 74 68 54 61 67 49 64 28 6e 2c 74 2c 69 2c 6e 75 6c 6c 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 43 6c 69 65 6e 74 4c 6f 67 53 65 72 76 69 63 65 2e 45 72 72 6f 72 43 61 6c 6c 62 61 63 6b 29 7d 2c 6e 2e 53 65 74 42 69 6c 6c 4f 76 65 72 76 69 65 77 43 6f 6f 6b 69 65 73 41 6e 64 52 65 64 69 72 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 6e 21 3d 6e 75 6c 6c 26 26 6e 21 3d 27 27 26 26 4d 69 63 72 6f 73 6f 66 74 2e 4f 6e 6c 69 6e 65 2e 42 4f 58 2e 4a 53 2e 53 68 61 72 65 64 2e 53 65 74 53 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 28 22 4f 72 64 65 72 44 65 74 61 69 6c 73 22 2c 6e 2c 22 2f 22 29 2c 74 21 3d 6e 75 6c 6c 26 26 74 21 3d 27 27 26 26 4d 69 Data Ascii: ogService.LogToServerWithTagId(n,t,i,null,Microsoft.Online.BOX.JS.ClientLogService.ErrorCallback)},n.SetBillOverviewCookiesAndRedirect=function(n,t,i){n!=null&&n!=''&&Microsoft.Online.BOX.JS.Shared.SetSessionCookie("OrderDetails",n,"/"),t!=null&&t!=''&&Mi
2023-08-10 21:19:35 UTC	12473	IN	Data Raw: 66 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 2c 66 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2c 6e 2e 4a 53 2e 44 69 61 6c 6f 67 4d 61 6e 61 67 65 72 2e 67 65 74 5f 69 73 42 72 6f 77 73 65 72 49 45 28 29 26 26 68 26 26 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 5f 72 65 73 69 7a 65 43 6f 6e 74 65 6e 74 46 72 61 6d 65 4f 6e 49 45 52 65 61 64 79 28 29 7d 2c 30 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 72 65 73 69 7a 65 43 6f 6e 74 65 6e 74 46 72 61 6d 65 4f 6e 49 45 52 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 74 2c 72 3b 74 72 79 7b 69 66 28 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 68 69 73 2e 67 65 74 43 6f 6e 74 65 Data Ascii: f.appendChild(r),f.appendChild(o),n.JS.DialogManager.get_isBrowserIE()&&h&&window.setTimeout(function(){l._resizeContentFrameOnIEReady()},0)},t.prototype._resizeContentFrameOnIEReady=function(){var i=this,t,r;try{if(t=document.getElementById(this.getConte
2023-08-10 21:19:35 UTC	12489	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 61 6e 44 72 61 67 3d 6e 2c 6e 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 68 61 73 53 68 69 65 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 68 61 73 53 68 69 65 6c 64 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 5f 68 61 73 53 68 69 65 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 68 61 73 53 68 69 65 6c 64 3d 6e 2c 6e 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 5f 73 68 6f 77 44 65 63 6f 72 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 68 6f 77 44 65 63 6f 72 61 74 69 6f 6e 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 5f 73 68 Data Ascii: =function(n){return this._canDrag=n,n},n.prototype.get_hasShield=function(){return this._hasShield},n.prototype.set_hasShield=function(n){return this._hasShield=n,n},n.prototype.get_showDecoration=function(){return this._showDecoration},n.prototype.set_sh
2023-08-10 21:19:35 UTC	12505	IN	Data Raw: 72 20 41 64 6d 69 6e 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 7d 72 65 74 75 72 6e 20 6e 2e 43 6c 69 65 6e 74 53 69 64 65 4c 6f 67 67 69 6e 67 53 74 61 74 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 72 65 74 75 72 6e 22 43 6c 69 65 6e 74 53 69 64 65 7c 22 2b 6e 2b 22 7c 22 2b 74 2b 22 7c 22 2b 69 7d 2c 6e 2e 41 64 6d 69 6e 43 65 6e 74 65 72 4c 6f 67 67 69 6e 67 53 74 61 74 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 41 64 6d 69 6e 43 65 6e 74 65 72 7c 22 2b 6e 7d 2c 6e 2e 53 68 6f 77 56 65 72 69 66 69 65 64 44 6f 6d 61 69 6e 73 3d 22 53 68 6f 77 20 56 65 72 69 66 69 65 64 20 44 6f 6d 61 69 6e 73 22 2c 6e 2e 41 64 Data Ascii: r Admin;(function(n){var t=function(){function n(){}return n.ClientSideLoggingStatement=function(n,t,i){return"ClientSide\|"+n+"\|"+t+"\|"+i},n.AdminCenterLoggingStatement=function(n){return"AdminCenter\|"+n},n.ShowVerifiedDomains="Show Verified Domains",n.Ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
249	192.168.2.3	50103	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	11641	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 309 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:35 UTC	11642	OUT	Data Raw: 1f 8b 08 00 f6 d2 d5 64 00 ff 4d 90 cb 6e f2 30 10 85 5f a5 9a 75 84 c8 85 4b b3 6b f9 7b 53 ab 96 05 85 45 55 45 96 3d 4a 5c c0 83 ec 09 28 3f e2 dd 19 07 16 ac a2 39 19 9f 73 be f9 39 42 c5 dd 0e a1 04 dc a3 63 48 ae df 12 96 16 0f 77 73 55 a3 68 3b 4f 3b f4 6c 31 40 79 04 d7 6e bf 03 fa f0 e5 e6 ca 40 99 25 51 99 91 73 a8 19 cd ed af 61 02 36 cc 36 d4 9a 7f a4 a1 64 df a2 98 89 e7 a7 da f6 99 c6 32 79 09 30 ad 57 6c c9 41 99 8e 06 e3 7c 14 b7 cc 9b 38 c0 ff 3f ca de d7 bc fa d0 cb 97 67 5a 6f d3 0e e9 49 5e e8 46 79 25 79 7e 46 6d ec 9b 8e e5 d1 81 bc b9 ce d9 ed f8 d8 2d 1a 1b 62 b3 be 93 d4 7d 68 b9 21 2f 38 b9 58 29 c6 9a 7c 27 69 d6 b1 d0 c7 22 3d b4 69 35 2f 2e e7 99 2b b9 80 a8 4e ed 6d dd 77 0d 55 b0 4e 63 15 30 04 19 ab c8 55 6d 28 72 a7 09 b0 Data Ascii: dMn0_uKk{SEUE=J\(?9s9BcHwsUh;O;l1@yn@%Qsa66d2y0WlA\|8?gZoI^Fy%y~Fm-b}h!/8X)\|'i"=i5/.+NmwUNc0Um(r
2023-08-10 21:19:36 UTC	12600	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:35 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:35 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: ee372333-ab86-4921-8294-03ae8a536ef0 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 31035ab1a1df4454a2a3496ecc30ebb7 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.3	49768	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:56 UTC	1424	OUT	GET /static/fonts/KaTeX_Main-Regular.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:57 UTC	1568	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 31220 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Fri, 05 Apr 2019 00:04:42 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:18:58 GMT Cache-Control: max-age=60 ETag: "bd65225294e9ad1114ded0a8bde4d38b" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: RefreshHit from cloudfront Via: 1.1 ca6974974a9175b71fb6a84145111ed2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: OL9AlWFqVTrrA9m5WTqVCKc58zIETeSezQc4DwG0DrFQKm0z21IEvA==
2023-08-10 21:18:57 UTC	1569	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 79 f4 00 0f 00 00 00 01 09 98 00 00 79 93 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 06 60 00 88 4a 08 3a 09 97 17 11 08 0a 83 c1 48 82 f2 1f 01 36 02 24 03 89 14 0b 84 4c 00 04 20 05 8e 7d 07 8f 46 0c 81 0a 1b 98 de 47 d0 6d db b1 34 4c e7 6d a5 f5 b1 a0 f8 4c 66 76 20 86 8d 03 83 83 7f 4a f6 ff ff 7f 6e 52 91 31 d3 00 49 d9 36 00 3f bc 5e ff 0b 89 d8 26 b9 16 28 a3 55 53 6e 7d ab a8 7d af b5 b6 d6 1c 8e d5 e7 ad 66 fb aa e3 2a 77 61 bf 4d fa 0e 8f 78 55 d4 e4 4f 52 82 63 92 93 7a d2 33 5e 51 a1 2b 0a 5d 54 f8 31 f1 ec e3 62 25 57 25 11 b7 36 71 cd 5f 78 63 83 0f 91 27 34 f7 6b 17 36 d2 85 77 cc a8 a8 a8 47 28 58 21 5e e7 39 db 99 46 86 95 1e 68 2c 83 7b 14 7e 59 72 f3 bf 09 ff Data Ascii: wOF2yy?FFTM`J:H6$L }FGm4LmLfv JnR1I6?^&(USn}}f*waMxUORcz3^Q+]T1b%W%6q_xc'4k6wG(X!^9Fh,{~Yr
2023-08-10 21:18:57 UTC	1585	IN	Data Raw: 6f 7f 55 c7 bf 1a 95 a7 c9 f7 09 ba 99 57 36 13 c2 21 58 3b 3f 65 f4 83 ab 9d 13 fa 79 b7 e0 56 62 f6 96 db 7c 92 e6 ba 18 7a ac 92 48 66 29 65 7b 6a 38 32 57 6f c8 59 19 2b 21 3e 37 90 88 89 b0 1a f2 d2 3b fd 5d c3 62 58 04 04 eb 60 e3 a0 46 2b 15 2e 78 57 69 e2 d2 45 2e e5 7e c1 c3 54 eb 48 d9 eb 37 e6 4e fb e0 d4 bf 5f 03 b7 88 71 4a 13 34 47 85 94 c3 70 19 3b a9 28 31 6f a5 75 22 cb 9b db 32 ef 6f 99 b1 3c f9 86 ae 60 6e 8d 24 c7 53 1a 78 b3 60 b3 5a f1 b7 42 fd 6d 5e 8c cc 8f 8b d9 74 4e 8d 8a a8 cd a8 b3 26 25 1a ba f4 4c 1f 4e 09 d5 62 0f 5b 26 b0 d3 63 67 f1 28 c3 b7 c0 e0 71 12 e1 55 d4 88 a9 5a 0c ae f5 bb fa 7c 6c 1b e5 31 f8 5f 03 aa fd 87 b6 0b 8a 83 be ce 4e 0d f3 26 d7 7e 71 f4 8b da c9 3c 58 5d fe c7 fb 6a 63 a2 51 fd f8 58 fa 10 da 31 3e Data Ascii: oUW6!X;?eyVb\|zHf)e{j82WoY+!>7;]bX`F+.xWiE.~TH7N_qJ4Gp;(1ou"2o<`n$Sx`ZBm^tN&%LNb[&cg(qUZ\|l1_N&~q<X]jcQX1>
2023-08-10 21:18:57 UTC	1586	IN	Data Raw: 97 13 5f 28 10 74 a6 82 cf 83 82 5e 39 e0 98 5e 57 9e 8f a0 e2 28 4c a9 97 cb 68 ed a9 20 30 17 af 40 08 b5 e6 d1 4f 90 be 6b cf 64 0a 46 a5 50 8c 14 2c fd 23 58 fe 0c a2 3a ba eb a8 e7 39 79 34 9f eb d3 c3 11 a5 1a a1 3b 4e 6a 90 8b 5e 1c 38 3d 96 26 41 86 e7 66 b0 a0 6c 8d df 07 34 ef 2d 86 fe 39 f1 d5 3f 33 66 1c 79 1a bd 1a cb 89 24 be e5 91 35 e3 15 d3 94 fc b1 67 12 0a b7 42 6f ff f8 bd 83 c2 09 cf d8 c1 a5 b3 75 69 53 e9 11 c6 68 e9 3b 80 31 6f 6e 69 54 24 df f8 73 62 69 21 71 d3 dc a5 0b 14 df d9 13 d6 de e5 93 49 71 8f ac 34 27 03 d9 b2 15 46 b1 d0 d0 51 9c 07 61 6f 97 fc 72 21 2c 01 9d 8c 62 95 5f bd 8a f1 53 e7 2d 5f ef 40 2e 76 e0 48 d1 f7 0f 45 78 f8 51 8a c5 1c 7b 9f 07 b1 99 0a 12 4d 83 50 f1 e3 7f 14 0d 79 11 53 83 08 53 c0 aa 0f 11 86 10 Data Ascii: _(t^9^W(Lh 0@OkdFP,#X:9y4;Nj^8=&Afl4-9?3fy$5gBouiSh;1oniT$sbi!qIq4'FQaor!,b_S-_@.vHExQ{MPySS

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
250	192.168.2.3	50107	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	11705	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/mscorlib.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	11707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 138496 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:22:10 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=30697349874862490925009828911251203324"}],"include_subdomains ":true} Server: ECAcc (muc/3324) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: eb1f0837-f01e-002a-6b8d-ca15d1000000 Content-Length: 24942 Connection: close
2023-08-10 21:19:35 UTC	11708	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 6e 3f 6e 2e 70 75 73 68 28 74 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 30 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 76 61 72 20 69 2c 74 2c 72 3b 69 66 28 6e 29 66 6f 72 28 69 3d 6e 2c 6e 3d 6e 75 6c 6c 2c 74 3d 30 2c 72 3d 69 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 2b 29 69 5b 74 5d 28 29 7d 76 61 72 20 75 3d 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 37 2e 32 2e 30 22 2c 69 73 55 6e 64 65 66 69 6e 65 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7d 2c 69 73 4e 75 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 6e 75 6c 6c 7d 2c 69 73 4e 75 6c 6c 4f 72 55 6e 64 65 66 69 6e 65 64 3a 66 75 6e Data Ascii: (function(){function f(t){n?n.push(t):setTimeout(t,0)}function i(){var i,t,r;if(n)for(i=n,n=null,t=0,r=i.length;t<r;t++)i[t]()}var u={version:"0.7.2.0",isUndefined:function(n){return n===undefined},isNull:function(n){return n===null},isNullOrUndefined:fun
2023-08-10 21:19:35 UTC	11724	IN	Data Raw: 69 73 4e 61 6d 65 73 70 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 5f 5f 6e 61 6d 65 73 70 61 63 65 3d 3d 21 30 7d 2c 54 79 70 65 2e 63 61 6e 43 61 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 54 79 70 65 28 6e 29 7d 2c 54 79 70 65 2e 73 61 66 65 43 61 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 54 79 70 65 28 6e 29 3f 6e 3a 6e 75 6c 6c 7d 2c 54 79 70 65 2e 67 65 74 49 6e 73 74 61 6e 63 65 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3b 74 72 79 7b 74 3d 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7d 63 61 74 63 68 28 69 29 7b 7d 72 65 74 75 72 6e 20 74 26 Data Ascii: isNamespace=function(n){return n.__namespace==!0},Type.canCast=function(n,t){return t.isInstanceOfType(n)},Type.safeCast=function(n,t){return t.isInstanceOfType(n)?n:null},Type.getInstanceType=function(n){var t=null;try{t=n.constructor}catch(i){}return t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
251	192.168.2.3	50108	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	11706	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/listgrid.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	11732	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 153705 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:20:27 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1596936516686845462416288482587164924412"}],"include_subdomains ":true} Server: ECAcc (muc/331E) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: bcd17d65-901e-004e-3c6a-cae449000000 Content-Length: 61371 Connection: close
2023-08-10 21:19:35 UTC	11733	IN	Data Raw: 76 61 72 20 4e 61 76 69 67 61 74 65 50 61 67 65 2c 42 4f 58 2c 4c 69 73 74 47 72 69 64 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 5b 6e 2e 4e 6f 43 68 61 6e 67 65 3d 30 5d 3d 22 4e 6f 43 68 61 6e 67 65 22 2c 6e 5b 6e 2e 46 69 72 73 74 3d 31 5d 3d 22 46 69 72 73 74 22 2c 6e 5b 6e 2e 50 72 65 76 69 6f 75 73 3d 32 5d 3d 22 50 72 65 76 69 6f 75 73 22 2c 6e 5b 6e 2e 4e 65 78 74 3d 34 5d 3d 22 4e 65 78 74 22 2c 6e 5b 6e 2e 4c 61 73 74 3d 38 5d 3d 22 4c 61 73 74 22 2c 6e 5b 6e 2e 44 69 72 65 63 74 3d 31 36 5d 3d 22 44 69 72 65 63 74 22 7d 29 28 4e 61 76 69 67 61 74 65 50 61 67 65 7c 7c 28 4e 61 76 69 67 61 74 65 50 61 67 65 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: var NavigatePage,BOX,ListGrid;(function(n){n[n.NoChange=0]="NoChange",n[n.First=1]="First",n[n.Previous=2]="Previous",n[n.Next=4]="Next",n[n.Last=8]="Last",n[n.Direct=16]="Direct"})(NavigatePage\|\|(NavigatePage={})),function(n){var t;(function(n){function
2023-08-10 21:19:35 UTC	11749	IN	Data Raw: 76 Data Ascii: v
2023-08-10 21:19:35 UTC	11749	IN	Data Raw: 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6f 6e 53 65 61 72 63 68 54 65 78 74 62 6f 78 42 6c 75 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6f 6e 53 68 6f 77 57 61 74 65 72 6d 61 72 6b 54 65 78 74 28 74 68 69 73 2e 5f 73 65 61 72 63 68 54 65 78 74 42 6f 78 45 6c 65 6d 65 6e 74 2c 21 30 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6f 6e 53 65 61 72 63 68 54 65 78 74 62 6f 78 46 6f 63 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6f 6e 53 68 6f 77 57 61 74 65 72 6d 61 72 6b 54 65 78 74 28 74 68 69 73 2e 5f 73 65 61 72 63 68 54 65 78 74 42 6f 78 45 6c 65 6d 65 6e 74 2c 21 31 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 6f 6e 53 68 6f 77 57 61 74 65 72 6d 61 72 6b 54 65 78 74 3d 66 75 6e Data Ascii: entDefault()},n.prototype._onSearchTextboxBlur=function(){this._onShowWatermarkText(this._searchTextBoxElement,!0)},n.prototype._onSearchTextboxFocus=function(){this._onShowWatermarkText(this._searchTextBoxElement,!1)},n.prototype._onShowWatermarkText=fun
2023-08-10 21:19:35 UTC	11765	IN	Data Raw: 29 29 3b 21 72 2e 57 69 64 74 68 7c 7c 21 72 2e 57 69 64 74 68 2e 6c 65 6e 67 74 68 7c 7c 65 2e 77 69 64 74 68 28 72 2e 57 69 64 74 68 29 2c 65 2e 61 74 74 72 28 27 73 63 6f 70 65 27 2c 27 63 6f 6c 27 29 2c 65 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 2e 5f 67 72 69 64 76 69 65 77 48 65 61 64 65 72 52 6f 77 29 2c 24 28 22 3c 74 68 20 63 6c 61 73 73 3d 27 4c 69 73 74 47 72 69 64 2d 47 56 44 61 74 61 53 70 61 63 65 72 43 6f 6c 75 6d 6e 48 65 61 64 65 72 27 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 27 74 72 75 65 27 3e 26 6e 62 73 70 3b 3c 2f 74 68 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 2e 5f 67 72 69 64 76 69 65 77 48 65 61 64 65 72 52 6f 77 29 7d 66 6f 72 28 74 68 69 73 2e 67 65 74 5f 5f 69 73 51 75 69 63 6b 50 61 6e 65 6c 56 69 73 69 62 6c 65 28 Data Ascii: ));!r.Width\|\|!r.Width.length\|\|e.width(r.Width),e.attr('scope','col'),e.appendTo(this._gridviewHeaderRow),$("<th class='ListGrid-GVDataSpacerColumnHeader' aria-hidden='true'> </th>").appendTo(this._gridviewHeaderRow)}for(this.get__isQuickPanelVisible(
2023-08-10 21:19:35 UTC	11781	IN	Data Raw: 3f 27 4c 61 73 74 50 61 67 65 42 75 74 74 6f 6e 27 3a 27 4c 61 73 74 50 61 67 65 42 75 74 74 6f 6e 44 69 73 61 62 6c 65 64 27 7d 69 21 3d 6e 75 6c 6c 26 26 28 69 2e 67 65 74 28 30 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 68 69 73 2e 5f 70 61 72 65 6e 74 4c 69 73 74 47 72 69 64 2e 67 65 74 49 63 6f 6e 4d 61 72 6b 75 70 28 72 29 2c 69 2e 67 65 74 28 30 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 68 69 73 2e 5f 74 69 74 6c 65 41 74 74 72 69 62 75 74 65 2c 74 68 69 73 2e 5f 70 61 72 65 6e 74 4c 69 73 74 47 72 69 64 2e 67 65 74 49 63 6f 6e 54 69 74 6c 65 28 72 29 29 2c 74 3f 28 69 2e 67 65 74 28 30 29 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 3d 27 70 6f 69 6e 74 65 72 27 2c 69 2e 67 65 74 28 30 29 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 27 64 69 73 Data Ascii: ?'LastPageButton':'LastPageButtonDisabled'}i!=null&&(i.get(0).innerHTML=this._parentListGrid.getIconMarkup(r),i.get(0).setAttribute(this._titleAttribute,this._parentListGrid.getIconTitle(r)),t?(i.get(0).style.cursor='pointer',i.get(0).removeAttribute('dis

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
252	192.168.2.3	50109	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	11793	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/peoplepicker.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	11794	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 138496 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:22:11 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=285906706687083114017865647436742363948"}],"include_subdomains ":true} Server: ECAcc (muc/3350) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 84a96925-f01e-003a-508d-cad0b9000000 Content-Length: 11639 Connection: close
2023-08-10 21:19:35 UTC	11795	IN	Data Raw: 76 61 72 20 50 65 6f 70 6c 65 50 69 63 6b 65 72 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 66 74 3d 6e 75 6c 6c 2c 77 3d 6e 75 6c 6c 2c 70 3d 6e 75 6c 6c 2c 79 3d 27 54 6f 6f 20 6d 61 6e 79 20 72 65 73 75 6c 74 73 2c 20 75 73 65 20 73 65 61 72 63 68 2e 27 2c 6e 74 3d 27 54 6f 74 61 6c 3a 20 7b 30 7d 27 2c 6b 3d 32 35 30 2c 75 2c 63 3b 74 68 69 73 2e 49 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 75 29 7b 76 61 72 20 73 3d 24 28 22 23 22 2b 74 29 3b 4d 69 73 73 69 6e 67 49 6d 67 55 72 6c 3d 75 2e 4d 69 73 73 69 6e 67 49 6d 67 55 72 6c 2c 77 3d 75 2e 52 65 6d 6f 76 65 55 73 65 72 49 6d 67 55 72 6c 2c 70 3d 75 2e 44 65 6c 65 74 65 55 73 65 72 49 6d 67 55 72 6c 2c 73 2e 64 61 74 61 28 22 47 65 74 44 61 Data Ascii: var PeoplePicker=new function(){var n=this,ft=null,w=null,p=null,y='Too many results, use search.',nt='Total: {0}',k=250,u,c;this.Initialize=function(t,u){var s=$("#"+t);MissingImgUrl=u.MissingImgUrl,w=u.RemoveUserImgUrl,p=u.DeleteUserImgUrl,s.data("GetDa

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
253	192.168.2.3	50110	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	11806	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/productkeycontrol.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	11807	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 138495 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:22:12 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1478296400242373474513673698881140869237"}],"include_subdomains ":true} Server: ECAcc (muc/3363) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 20e0dc43-001e-002e-3e8d-ca98d6000000 Content-Length: 6211 Connection: close
2023-08-10 21:19:35 UTC	11808	IN	Data Raw: 77 69 6e 64 6f 77 2e 4f 33 36 35 3d 77 69 6e 64 6f 77 2e 4f 33 36 35 7c 7c 7b 7d 2c 4f 33 36 35 2e 50 72 6f 64 75 63 74 4b 65 79 43 6f 6e 74 72 6f 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3d 7b 45 6d 70 74 79 3a 7b 69 6d 67 53 72 63 3a 6e 75 6c 6c 2c 69 6d 67 41 6c 74 3a 6e 75 6c 6c 7d 2c 49 6e 63 6f 6d 70 6c 65 74 65 3a 7b 69 6d 67 53 72 63 3a 6e 75 6c 6c 2c 69 6d 67 41 6c 74 3a 6e 75 6c 6c 7d 2c 43 6f 6d 70 6c 65 74 65 3a 7b 69 6d 67 53 72 63 3a 6e 75 6c 6c 2c 69 6d 67 41 6c 74 3a 6e 75 6c 6c 7d 2c 56 61 6c 69 64 61 74 69 6e 67 3a 7b 69 6d 67 53 72 63 3a 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 68 33 2e 70 75 62 6c 69 63 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 64 6d 69 6e 63 65 6e 74 65 72 2f 61 64 6d 69 6e 2d 63 6f Data Ascii: window.O365=window.O365\|\|{},O365.ProductKeyControl=function(n,t,i){var r={Empty:{imgSrc:null,imgAlt:null},Incomplete:{imgSrc:null,imgAlt:null},Complete:{imgSrc:null,imgAlt:null},Validating:{imgSrc:'https://res-h3.public.cdn.office.net/admincenter/admin-co

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
254	192.168.2.3	50111	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	11848	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/gridview.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	12026	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 135094 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:22:16 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=104601466549868136066175649825084287648"}],"include_subdomains ":true} Server: ECAcc (muc/3334) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 71df014b-c01e-0043-3395-ca2c9d000000 Content-Length: 7808 Connection: close
2023-08-10 21:19:35 UTC	12027	IN	Data Raw: 76 61 72 20 47 72 69 64 56 69 65 77 4d 61 6e 61 67 65 72 3d 7b 7d 3b 47 72 69 64 56 69 65 77 4d 61 6e 61 67 65 72 2e 5f 67 72 69 64 56 69 65 77 49 6e 73 74 61 6e 63 65 49 64 73 3d 5b 5d 2c 47 72 69 64 56 69 65 77 4d 61 6e 61 67 65 72 2e 5f 67 72 69 64 56 69 65 77 49 6e 73 74 61 6e 63 65 73 3d 5b 5d 2c 47 72 69 64 56 69 65 77 4d 61 6e 61 67 65 72 2e 43 72 65 61 74 65 47 72 69 64 56 69 65 77 49 6e 73 74 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 76 61 72 20 72 3d 6e 2e 72 65 70 6c 61 63 65 28 2f 5f 47 72 69 64 5f 4c 69 73 74 56 69 65 77 55 70 64 61 74 65 50 61 6e 65 6c 24 2f 69 2c 22 22 29 2c 75 2c 66 3b 72 65 74 75 72 6e 20 47 72 69 64 56 69 65 77 4d 61 6e 61 67 65 72 2e 5f 67 72 69 64 56 69 65 77 49 6e 73 74 61 6e 63 65 49 64 73 5b 72 Data Ascii: var GridViewManager={};GridViewManager._gridViewInstanceIds=[],GridViewManager._gridViewInstances=[],GridViewManager.CreateGridViewInstance=function(n,t,i){var r=n.replace(/_Grid_ListViewUpdatePanel$/i,""),u,f;return GridViewManager._gridViewInstanceIds[r

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
255	192.168.2.3	50105	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	11897	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/netperf.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	12307	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 135095 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:25:16 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1004935577248957776018019501149206879663"}],"include_subdomains ":true} Server: ECAcc (muc/330F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: e695851f-f01e-0048-5195-cad7f6000000 Content-Length: 4787 Connection: close
2023-08-10 21:19:35 UTC	12308	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4e 65 74 50 65 72 66 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 72 29 7b 76 61 72 20 75 2c 6c 3d 5b 5d 2c 70 3d 5b 27 22 69 22 3a 33 30 30 30 30 2c 22 76 22 3a 33 27 5d 2c 6f 2c 61 2c 79 2c 73 2c 68 2c 76 2c 63 3b 69 66 28 6c 2e 70 75 73 68 28 70 29 2c 75 3d 5b 5d 2c 72 3d 3d 27 75 27 29 65 3f 28 75 2e 70 75 73 68 28 27 30 27 29 2c 75 2e 70 75 73 68 28 27 31 27 29 29 3a 28 75 2e 70 75 73 68 28 27 31 27 29 2c 75 2e 70 75 73 68 28 27 30 27 29 29 3b 65 6c 73 65 20 69 66 28 72 3d 3d 27 6c 27 29 75 2e 70 75 73 68 28 27 30 27 29 2c 75 2e 70 75 73 68 28 27 30 27 29 2c 65 3d 21 30 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 66 6f 72 28 6f 3d 6e 75 6c 6c 2c 79 3d 66 2e 6c 65 6e 67 74 68 2c 73 3d 30 3b 73 3c 79 3b 73 2b 2b 29 68 3d 77 69 6e 64 Data Ascii: function NetPerf(){function c(r){var u,l=[],p=['"i":30000,"v":3'],o,a,y,s,h,v,c;if(l.push(p),u=[],r=='u')e?(u.push('0'),u.push('1')):(u.push('1'),u.push('0'));else if(r=='l')u.push('0'),u.push('0'),e=!0;else return;for(o=null,y=f.length,s=0;s<y;s++)h=wind

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
256	192.168.2.3	50112	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	12034	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/searchbox.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:36 UTC	12674	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:35 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=102035082969522449684701504539511029503"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 0647c2a9-301e-0047-24d0-cba19a000000 Content-Length: 215 Connection: close
2023-08-10 21:19:36 UTC	12675	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 36 34 37 63 32 61 39 2d 33 30 31 65 2d 30 30 34 37 2d 32 34 64 30 2d 63 62 61 31 39 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 36 2e 34 37 32 37 39 39 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:0647c2a9-301e-0047-24d0-cba19a000000Time:2023-08-10T21:19:36.4727994Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
257	192.168.2.3	50113	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	12523	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/passwordstrengthmeter.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:35 UTC	12546	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 135094 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:35 GMT Last-Modified: Tue, 08 Aug 2023 04:22:15 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=364473287571194723815708788040756457736"}],"include_subdomains ":true} Server: ECAcc (muc/336F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 2b681f81-701e-0034-3e95-caf909000000 Content-Length: 3041 Connection: close
2023-08-10 21:19:35 UTC	12547	IN	Data Raw: 76 61 72 20 50 61 73 73 77 6f 72 64 53 74 72 65 6e 67 74 68 4d 65 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 74 2c 69 29 7b 28 74 68 69 73 2e 50 61 73 73 77 6f 72 64 4d 65 74 65 72 44 69 76 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6e 2b 22 5f 70 61 73 73 77 6f 72 64 53 74 72 65 6e 67 74 68 4d 65 74 65 72 22 29 2c 74 68 69 73 2e 50 61 73 73 77 6f 72 64 53 74 72 65 6e 67 74 68 4d 65 74 65 72 49 64 3d 6e 2c 74 68 69 73 2e 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 2c 74 68 69 73 2e 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 21 3d 6e 75 6c 6c 29 26 26 28 74 68 69 73 2e 50 72 6f 70 65 72 74 79 53 68 65 Data Ascii: var PasswordStrengthMeter=function(){function n(n,t,i){(this.PasswordMeterDiv=document.getElementById(n+"_passwordStrengthMeter"),this.PasswordStrengthMeterId=n,this.PasswordTextBox=document.getElementById(t),this.PasswordTextBox!=null)&&(this.PropertyShe

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
258	192.168.2.3	50114	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:35 UTC	12550	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/hipcontrol.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:36 UTC	12551	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 135095 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:36 GMT Last-Modified: Tue, 08 Aug 2023 04:13:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1682407060376317202714784344488997803016"}],"include_subdomains ":true} Server: ECAcc (muc/332B) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: d3c9f7e0-d01e-004f-5095-cabb95000000 Content-Length: 38677 Connection: close
2023-08-10 21:19:36 UTC	12552	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 48 69 70 43 68 61 6c 6c 65 6e 67 65 28 29 7b 74 68 69 73 2e 4c 6f 61 64 69 6e 67 54 72 69 61 6c 73 3d 33 2c 74 68 69 73 2e 43 75 72 72 65 6e 74 4c 6f 61 64 69 6e 67 41 74 74 65 6d 70 74 3d 30 2c 74 68 69 73 2e 46 61 69 6c 4f 76 65 72 4d 65 73 73 61 67 65 3d 27 27 2c 74 68 69 73 2e 53 68 6f 75 6c 64 53 68 6f 77 4d 65 73 73 61 67 65 4f 6e 46 61 69 6c 69 6e 67 3d 21 30 2c 74 68 69 73 2e 49 73 41 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 49 73 55 49 4c 65 73 73 3d 21 31 2c 74 68 69 73 2e 49 73 43 68 61 6c 6c 65 6e 67 65 4c 6f 61 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 43 68 61 63 68 65 64 4c 6f 61 64 69 6e 67 50 61 72 61 6d 73 3d 21 31 2c 74 68 69 73 2e 43 61 63 68 65 64 4c 6f 61 64 50 61 72 61 6d 31 3d 6e 75 6c 6c 2c 74 68 69 73 2e Data Ascii: function HipChallenge(){this.LoadingTrials=3,this.CurrentLoadingAttempt=0,this.FailOverMessage='',this.ShouldShowMessageOnFailing=!0,this.IsActive=!1,this.IsUILess=!1,this.IsChallengeLoading=!1,this.ChachedLoadingParams=!1,this.CachedLoadParam1=null,this.
2023-08-10 21:19:36 UTC	12568	IN	Data Raw: 64 5d 2e 47 65 74 43 68 61 6c 6c 65 6e 67 65 54 79 70 65 28 29 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 22 3a 28 63 61 70 74 63 68 61 43 68 61 6c 6c 65 6e 67 65 2e 53 68 6f 77 56 61 6c 69 64 61 74 69 6f 6e 3d 21 30 2c 56 61 6c 69 64 61 74 6f 72 56 61 6c 69 64 61 74 65 28 43 75 73 74 6f 6d 48 69 70 54 65 78 74 56 61 6c 69 64 61 74 6f 72 5f 76 61 6c 29 2c 56 61 6c 69 64 61 74 6f 72 56 61 6c 69 64 61 74 65 28 43 75 73 74 6f 6d 48 69 70 41 75 64 69 6f 56 61 6c 69 64 61 74 6f 72 5f 76 61 6c 29 29 7d 2c 63 61 70 74 63 68 61 43 68 61 6c 6c 65 6e 67 65 2e 53 68 6f 77 43 6f 6e 6e 65 63 74 69 76 69 74 79 46 61 69 6c 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 61 70 74 63 68 61 43 68 61 6c 6c 65 6e 67 65 2e 53 68 6f 77 43 6f 6e 6e 65 63 74 69 76 69 74 Data Ascii: d].GetChallengeType()).style.display="":(captchaChallenge.ShowValidation=!0,ValidatorValidate(CustomHipTextValidator_val),ValidatorValidate(CustomHipAudioValidator_val))},captchaChallenge.ShowConnectivityFailure=function(){captchaChallenge.ShowConnectivit
2023-08-10 21:19:36 UTC	12594	IN	Data Raw: 74 29 7b 69 66 28 73 6d 73 43 68 61 6c 6c 65 6e 67 65 2e 63 6c 69 63 6b 56 61 6c 69 64 61 74 6f 72 49 73 56 61 6c 69 64 3d 3d 21 30 29 72 65 74 75 72 6e 20 74 2e 49 73 56 61 6c 69 64 3d 21 30 2c 21 30 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 53 4d 53 45 6e 74 72 79 27 29 3b 69 66 28 73 6d 73 43 68 61 6c 6c 65 6e 67 65 2e 47 65 74 43 68 61 6c 6c 65 6e 67 65 54 79 70 65 28 29 3d 3d 22 56 6f 69 63 65 22 29 7b 69 66 28 6e 3d 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 4d 6f 62 69 6c 65 4e 75 6d 62 65 72 54 65 78 74 42 6f 78 5f 43 6c 69 63 6b 56 61 6c 69 64 61 74 6f 72 5f 76 61 6c 27 29 29 72 65 74 75 72 6e 20 74 2e 49 73 56 61 6c 69 64 3d 21 30 2c 21 30 7d 65 6c 73 65 20 Data Ascii: t){if(smsChallenge.clickValidatorIsValid==!0)return t.IsValid=!0,!0;var i=document.getElementById('SMSEntry');if(smsChallenge.GetChallengeType()=="Voice"){if(n==document.getElementById('MobileNumberTextBox_ClickValidator_val'))return t.IsValid=!0,!0}else

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
259	192.168.2.3	50115	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12550	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/geminiwizard.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:36 UTC	12584	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 135095 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:36 GMT Last-Modified: Tue, 08 Aug 2023 04:22:14 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1541437674877589454012748057663003914072"}],"include_subdomains ":true} Server: ECAcc (muc/3329) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: eb495b3c-f01e-002a-6195-ca15d1000000 Content-Length: 9028 Connection: close
2023-08-10 21:19:36 UTC	12585	IN	Data Raw: 76 61 72 20 47 65 6d 69 6e 69 57 69 7a 61 72 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 72 2c 75 2c 66 2c 65 2c 6f 2c 73 29 7b 74 68 69 73 2e 49 64 3d 6e 2c 74 68 69 73 2e 4e 61 76 69 67 61 74 69 6f 6e 50 61 6e 65 6c 49 64 3d 74 2c 74 68 69 73 2e 53 74 65 70 73 3d 5b 5d 2c 74 68 69 73 2e 46 6f 72 63 65 56 61 6c 69 64 61 74 69 6f 6e 4f 6e 4e 65 78 74 3d 72 2c 74 68 69 73 2e 45 6e 61 62 6c 65 41 6e 69 6d 61 74 69 6f 6e 4f 6e 54 72 61 6e 69 73 69 74 69 6f 6e 3d 75 2c 74 68 69 73 2e 4c 61 73 74 43 6f 6d 70 6c 65 74 65 64 49 6e 64 65 78 3d 2d 31 2c 74 68 69 73 2e 53 74 61 72 74 41 74 53 74 65 70 49 6e 64 65 78 3d 74 79 70 65 6f 66 20 66 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 66 3d 3d 6e 75 6c 6c 3f 30 3a 66 2c 74 68 69 73 2e 43 75 72 72 65 6e 74 Data Ascii: var GeminiWizard=function(n,t,i,r,u,f,e,o,s){this.Id=n,this.NavigationPanelId=t,this.Steps=[],this.ForceValidationOnNext=r,this.EnableAnimationOnTranisition=u,this.LastCompletedIndex=-1,this.StartAtStepIndex=typeof f=="undefined"\|\|f==null?0:f,this.Current

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.3	49792	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:57 UTC	1663	OUT	GET /static/webpack/production/runtime_e9038aed7abbdbad2158.zZ2kbtQlmumtpAghwuSOWRIAHWon-FbdTs21U26ckrM.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:58 UTC	1663	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 3268 Connection: close Date: Thu, 10 Aug 2023 21:18:58 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 10 Aug 2023 03:28:43 GMT ETag: "f4678e1b0c9e12576736acb06e9c6c6e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 b50b0f4274b74414c7dcdb544e6090a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: so3QUtLf0zOEmUtNhppJ35q1-UF1ce1GQqg6UMU5msHtWkhTkac9eg==
2023-08-10 21:18:58 UTC	1664	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 59 fd 53 ea 3a b7 fe dd bf 82 dd 3b e3 d0 11 6b bf 69 e1 74 ce 00 a2 88 22 22 a2 a8 d7 e9 a4 4d 0a 85 d2 d6 36 15 41 d9 7f fb bb c2 87 a2 5b f7 39 67 ee dc f3 ce 30 34 1f 2b 6b 3d 59 59 49 9e 24 3f bc 2c 74 a9 1f 85 79 c2 bf 6c d2 b9 24 9f 40 2e 4a f2 4f 28 c9 e1 42 54 40 56 72 2f 3e 14 7c f8 48 0f 05 1b 3e f2 43 21 b5 c4 42 60 dd 3f 94 d3 3f 90 10 90 70 40 87 e5 74 6f 8f 7f 89 2c 74 9f 3e 94 db ce 88 b8 54 88 93 88 46 74 16 13 61 88 d2 f6 34 bc 48 a2 98 24 74 26 b8 28 08 f2 71 21 e2 77 77 e3 fb e8 61 77 37 10 e2 2c 1d e6 59 06 ac f1 65 96 b0 c4 c5 0e 43 82 73 7e 98 f3 f9 bf a5 d3 2f 60 d0 99 27 f7 f8 c1 f2 e1 8f 2f bb bb bb 2e f4 a9 cc 34 95 83 0d 58 3e 10 d2 a1 ef d1 3c 9f e7 cb 74 69 5c 40 71 1c cc f2 b4 60 bf be de 43 Data Ascii: YS:;kit""M6A[9g04+k=YYI$?,tyl$@.JO(BT@Vr/>\|H>C!B`??p@to,t>TFta4H$t&(q!wwaw7,YeCs~/`'/.4X><ti\@q`C

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
260	192.168.2.3	50122	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12601	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/webuivalidation.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:36 UTC	12638	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 163727 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:36 GMT Last-Modified: Tue, 08 Aug 2023 04:22:13 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=153706006354469786367862488193065992622"}],"include_subdomains ":true} Server: ECAcc (muc/3323) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 081b3e8f-501e-0051-1953-ca574d000000 Content-Length: 26951 Connection: close
2023-08-10 21:19:36 UTC	12639	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2023-08-10 21:19:36 UTC	12655	IN	Data Raw: 61 Data Ascii: a
2023-08-10 21:19:36 UTC	12655	IN	Data Raw: 6c 69 64 61 74 6f 72 43 6f 6d 70 61 72 65 28 76 61 6c 75 65 2c 20 63 6f 6d 70 61 72 65 54 6f 2c 20 6f 70 65 72 61 74 6f 72 2c 20 76 61 6c 29 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 43 75 73 74 6f 6d 56 61 6c 69 64 61 74 6f 72 45 76 61 6c 75 61 74 65 49 73 56 61 6c 69 64 28 76 61 6c 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 22 22 3b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 20 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 28 56 61 6c 69 64 61 74 Data Ascii: lidatorCompare(value, compareTo, operator, val);}function CustomValidatorEvaluateIsValid(val) { var value = ""; if (typeof(val.controltovalidate) == "string") { value = ValidatorGetValue(val.controltovalidate); if ((Validat

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
261	192.168.2.3	50121	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12666	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/webtrends.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:36 UTC	12773	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=53939662119458958269076130640944874179"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 988c4b08-201e-005b-5ed0-cbf3fa000000 Content-Length: 215 Connection: close
2023-08-10 21:19:36 UTC	12774	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 39 38 38 63 34 62 30 38 2d 32 30 31 65 2d 30 30 35 62 2d 35 65 64 30 2d 63 62 66 33 66 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 36 2e 37 38 33 30 32 39 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:988c4b08-201e-005b-5ed0-cbf3fa000000Time:2023-08-10T21:19:36.7830291Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
262	192.168.2.3	50120	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12666	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/webtrendsstream.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:36 UTC	12772	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=318565834465618557417768796828446510866"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 0f845d5f-001e-0073-54d0-cb9252000000 Content-Length: 215 Connection: close
2023-08-10 21:19:36 UTC	12773	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 66 38 34 35 64 35 66 2d 30 30 31 65 2d 30 30 37 33 2d 35 34 64 30 2d 63 62 39 32 35 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 36 2e 37 37 37 33 35 31 39 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:0f845d5f-001e-0073-54d0-cb9252000000Time:2023-08-10T21:19:36.7773519Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
263	192.168.2.3	50116	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12667	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: larationr.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPPF2JcQcHQdzyz5AOwz1b6oKXTkw13ZKyeUVa1ty1laJCrJrKi6LkN7q3MGZF5_nULH-7ZTrIlJCgrmnfI5QKimQp4sale8WKo_ppfKmOUtMgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP32n2q44UBa6kmOuZ9kxPZakBO8d0TEDWOThPpNVzunlt8UpMV72llvexFhB69Yi8WwficpDhxTipR3BaC-d6RF-4KXsTWVh4rbfMpEQ-GB0bSXGRi1NsGI6cLpzLJDfcqsO_PKlK7-I_05dFArKzrN0vXJ2Q8KyqUTWLkxF-Xi7wYM3CIfq7vMe-wgbM3F5nra5mj43AcLNs1EI4N1GC7usVFnsr2EuCMA0UyxnZKIVjP2n5CpOXJHWhxlE_S9r8vxen-ZSc2cj83igI8blreGpLJDgSMm-x-aYFyHUu6m0gAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAEAAABdS2fcDgAAAA
2023-08-10 21:19:36 UTC	12672	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:36 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: ca69932b-a01e-0035-65d0-cb9168000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211936Z-5rgdwh68wx2qf3muefkxsu4sxs00000000ug00000001fu5b X-Cache: TCP_HIT Accept-Ranges: bytes
2023-08-10 21:19:36 UTC	12673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
264	192.168.2.3	50124	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12668	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/home.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:36 UTC	12774	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=84047815307944656504679755784326422770"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 2f34bd30-101e-0040-24d0-cbcdf9000000 Content-Length: 215 Connection: close
2023-08-10 21:19:36 UTC	12775	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 32 66 33 34 62 64 33 30 2d 31 30 31 65 2d 30 30 34 30 2d 32 34 64 30 2d 63 62 63 64 66 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 36 2e 38 34 37 38 32 30 39 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:2f34bd30-101e-0040-24d0-cbcdf9000000Time:2023-08-10T21:19:36.8478209Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
265	192.168.2.3	50119	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12669	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_sb6jQxfN8f3sA8faKcsD7Q2.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
2023-08-10 21:19:36 UTC	12677	IN	HTTP/1.1 200 OK Content-Length: 689016 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:19:36 GMT Connection: close
2023-08-10 21:19:36 UTC	12678	IN	Data Raw: 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.protot
2023-08-10 21:19:36 UTC	12693	IN	Data Raw: 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 30 Data Ascii: cked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 110
2023-08-10 21:19:36 UTC	12724	IN	Data Raw: 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2023-08-10 21:19:36 UTC	12740	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 75 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromCu
2023-08-10 21:19:36 UTC	12756	IN	Data Raw: 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: /g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", }, r
2023-08-10 21:19:36 UTC	12777	IN	Data Raw: 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 73 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(s
2023-08-10 21:19:36 UTC	12793	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2023-08-10 21:19:36 UTC	12809	IN	Data Raw: 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2023-08-10 21:19:36 UTC	12825	IN	Data Raw: 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2023-08-10 21:19:36 UTC	12841	IN	Data Raw: 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 69 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onRegi
2023-08-10 21:19:36 UTC	12857	IN	Data Raw: 74 65 6e 73 69 6f 6e 73 3a 20 21 30 2c 0a 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 73 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 70 69 63 6b 65 72 5f 61 63 63 6f 75 6e 74 5f 6d 73 61 5f 34 65 33 36 31 39 61 34 39 39 66 64 37 34 63 30 63 36 36 64 35 32 31 35 35 31 34 62 35 36 36 61 2e 70 6e 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 Data Ascii: tensions: !0, }), (e.exports = s); }, function (e, n, t) { e.exports = t.p + "content/images/picker_account_msa_4e3619a499fd74c0c66d5215514b566a.png"; }, function (e, n, t) { e.exports = t.p + "content/ima
2023-08-10 21:19:37 UTC	12873	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 20 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 47 69 74 48 75 62 46 65 64 3a 20 65 2e 69 73 47 69 74 48 75 62 46 65 64 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 Data Ascii: , isWindowsSso: e.isWindowsSso \|\| !1, isMeControlSession: !0, isGitHubFed: e.isGitHubFed \|\| !1, } ); }); }, parseBssoSessions: function (e) { ret
2023-08-10 21:19:37 UTC	12891	IN	Data Raw: 6f 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 4d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 65 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 43 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 55 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 53 68 61 72 65 64 44 61 74 61 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: o.setDefaultFocus = function () { var e = M(); e && e.setDefaultFocus && e.setDefaultFocus(); }), (o.getCurrentViewId = function () { return U(); }), (o.getSharedData = function () {
2023-08-10 21:19:37 UTC	12907	IN	Data Raw: 6e 20 6e 29 20 61 2e 63 61 6c 6c 28 6e 2c 20 74 29 20 26 26 20 28 65 5b 74 5d 20 3d 20 6e 5b 74 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 20 3d 20 6e 29 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 20 6e 2c 20 74 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 65 5b 6e 5d 2e 6d 61 74 63 68 28 68 29 20 7c 7c 20 5b 5d 3b Data Ascii: n n) a.call(n, t) && (e[t] = n[t]); return e; } function t(e, n) { return (e.__proto__ = n), e; } function i(e, n, t, i) { var a = e[n].match(h) \|\| [];
2023-08-10 21:19:37 UTC	12923	IN	Data Raw: 20 20 61 5b 64 5b 6c 5d 2e 6e 61 6d 65 5d 20 3d 20 64 5b 6c 5d 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 20 3d 20 53 2e 61 2e 66 28 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 20 69 6e 20 28 28 75 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 61 63 74 69 6f 6e 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 6d 65 74 68 6f 64 20 Data Ascii: a[d[l].name] = d[l].value; } t = S.a.f(t); var u = c.createElement("form"); for (var p in ((u.style.display = "none"), (u.action = r), (u.method
2023-08-10 21:19:37 UTC	12939	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 28 69 20 3d 20 21 30 29 2c 20 65 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 72 2c 20 22 64 69 72 74 79 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 21 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f Data Ascii: (i = !0), e.notifySubscribers(r, "dirty"); } finally { i = !1; } } }; })); }, no
2023-08-10 21:19:37 UTC	12955	IN	Data Raw: 20 20 20 20 20 20 20 20 63 20 3d 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 54 20 3d 20 53 2e 61 2e 44 61 28 22 5f 73 74 61 74 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 53 2e 6f 20 3d 20 53 2e 24 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: c = a; } }); } }); var T = S.a.Da("_state"); S.o = S.$ = function (e, n, t) { function i() { if (0 < arguments.length) {
2023-08-10 21:19:37 UTC	12971	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 64 2c 20 6c 20 3d 20 30 3b 20 28 64 20 3d 20 72 5b 6c 5d 29 3b 20 2b 2b 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 64 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 34 34 20 3d 3d 3d 20 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3e 3d 20 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 70 75 73 68 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 26 26 20 73 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: for (var d, l = 0; (d = r[l]); ++l) { var u = d.charCodeAt(0); if (44 === u) { if (0 >= c) { t.push( n && s.length
2023-08-10 21:19:37 UTC	12987	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 67 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 20 26 26 20 69 28 62 28 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 68 61 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 20 69 6e 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return a[e]; }; (g.get = function (e) { return a[e] && i(b(e)); }), (g.has = function (e) { return e in a;
2023-08-10 21:19:37 UTC	13003	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 6f 6d 70 6f 6e 65 6e 74 20 27 22 20 2b 20 65 20 2b 20 22 27 3a 20 22 20 2b 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 53 2e 6a 2e 72 65 67 69 73 74 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 Data Ascii: } function o(e) { return function (n) { throw Error("Component '" + e + "': " + n); }; } var r = {}; (S.j.register = function (e, n) {
2023-08-10 21:19:37 UTC	13019	IN	Data Raw: 20 20 20 20 20 20 20 20 6f 20 3d 20 61 2e 62 6f 64 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 6f 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 61 20 3d 20 6e 28 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 61 2c 20 74 2c 20 22 68 61 73 66 6f 63 75 73 22 2c 20 69 2c 20 21 30 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b 6f 5f 68 61 73 66 6f 63 75 73 4c 61 73 74 56 61 6c 75 65 20 3d 20 69 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b Data Ascii: o = a.body; } i = o === e; } (a = n()), S.m.eb(a, t, "hasfocus", i, !0), (e.__ko_hasfocusLastValue = i), (e.__k
2023-08-10 21:19:37 UTC	13035	IN	Data Raw: 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 69 2c 20 74 2c 20 22 76 61 6c 75 65 22 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 53 2e 61 2e 57 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 61 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 65 78 74 22 20 21 3d 20 65 2e 74 79 70 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 66 66 22 20 3d 3d 20 65 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 66 6f 72 6d 20 26 26 20 22 6f 66 66 22 20 3d 3d 20 65 2e 66 6f 72 6d 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 Data Ascii: S.m.eb(i, t, "value", a); }; !S.a.W \|\| !a \|\| "text" != e.type \|\| "off" == e.autocomplete \|\| (e.form && "off" == e.form.autocomplete
2023-08-10 21:19:37 UTC	13051	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 3d 3d 20 72 20 7c 7c 20 6e 75 6c 6c 20 3d 3d 3d 20 65 20 7c 7c 20 21 53 2e 61 2e 66 28 65 2e 5f 64 65 73 74 72 6f 79 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 28 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return ( e === r \|\| null === e \|\| !S.a.f(e._destroy) ); })), d(e); }, null,
2023-08-10 21:19:37 UTC	13067	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 29 28 69 2c 20 74 2e 65 6c 65 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 6f 2c 20 72 2c 20 73 2c 20 63 Data Ascii: })(i, t.element), i ); })), i(n); }); }, }), (n = e.bindingHandlers.component.init), (e.bindingHandlers.component.init = function (t, o, r, s, c
2023-08-10 21:19:37 UTC	13083	IN	Data Raw: 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 33 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 69 2e 53 74 72 69 6e 67 3b 0a 20 20 20 20 6e 2e 61 70 70 6c 79 45 78 74 65 6e 73 69 6f 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 3b 0a 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 0a 20 20 20 Data Ascii: n, t) { var i = t(3), a = t(1), o = i.String; n.applyExtensions = function (e) { var n; (n = e.bindingProvider.instance.preprocessNode), (e.bindingProvider.instance.preprocessNode = function (t) { if (
2023-08-10 21:19:37 UTC	13099	IN	Data Raw: 20 3a 20 66 65 20 26 26 20 6e 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 26 26 20 28 73 20 3d 20 44 2e 55 73 65 72 6e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 65 20 7c 7c 20 6f 20 7c 7c 20 62 65 20 7c 7c 20 67 65 29 20 26 26 20 28 72 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6e 20 26 26 20 28 72 20 3d 20 73 20 3d 20 44 2e 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 4c 6f 63 61 74 69 6f 6e 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 69 6e 69 74 69 61 6c 56 69 65 77 49 64 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 63 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 28 74 2c Data Ascii: : fe && n.getServerError() && (s = D.Username); (ue \|\| o \|\| be \|\| ge) && (r = s); } sn && (r = s = D.RemoteConnectLocation), (n.initialViewId = r), (n.currentViewId = s); })(t,
2023-08-10 21:19:37 UTC	13115	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6e 28 65 2c 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 49 6e 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 61 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 Data Ascii: , (n.fetchSessions_onUpdateUserTiles = function (e, n) { setTimeout(function () { hn(e, n); }); }), (n.fetchSessions_onIncrementAsyncTileRequestCount = function () { n.asyncTileRequestCount
2023-08-10 21:19:37 UTC	13131	IN	Data Raw: 20 20 20 28 6e 2e 76 69 65 77 5f 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 69 73 52 65 71 75 65 73 74 50 65 6e 64 69 6e 67 28 65 29 2c 20 6e 2e 73 68 6f 77 4c 69 67 68 74 62 6f 78 50 72 6f 67 72 65 73 73 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 6f 6f 74 65 72 5f 61 67 72 65 65 6d 65 6e 74 43 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6e 2e 61 67 72 65 65 6d 65 6e 74 54 79 70 65 20 3d 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 76 69 65 77 5f 6f 6e 53 77 69 74 Data Ascii: (n.view_onSetPendingRequest = function (e) { n.isRequestPending(e), n.showLightboxProgress(e); }), (n.footer_agreementClick = function (e) { (n.agreementType = e), n.paginationControlMethods().view_onSwit
2023-08-10 21:19:37 UTC	13147	IN	Data Raw: 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 31 5f 63 66 65 39 63 62 36 32 65 62 62 36 36 30 35 65 30 33 66 62 38 64 32 38 35 63 36 31 31 62 34 38 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 33 2d 73 6d 61 6c 6c 5f 61 31 39 65 37 62 63 61 34 34 36 36 30 35 39 65 61 64 64 33 34 34 61 62 31 31 65 36 39 30 34 66 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 Data Ascii: p + "content/images/appbackgrounds/11_cfe9cb62ebb6605e03fb8d285c611b48.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/13-small_a19e7bca4466059eadd344ab11e6904f.jpg"; }, function (e, n, t) {
2023-08-10 21:19:37 UTC	13163	IN	Data Raw: 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 2d 73 6d 61 6c 6c 5f 34 66 36 33 63 34 33 37 61 32 30 39 61 37 61 64 30 62 63 66 37 63 35 33 32 61 34 62 35 63 32 62 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 5f 37 34 39 36 32 64 39 36 65 64 34 34 39 38 61 35 33 62 32 37 33 64 37 63 37 66 39 37 63 64 39 35 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 Data Ascii: e.exports = t.p + "content/images/appbackgrounds/67-small_4f63c437a209a7ad0bcf7c532a4b5c2b.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/67_74962d96ed4498a53b273d7c7f97cd95.jpg"; },
2023-08-10 21:19:37 UTC	13179	IN	Data Raw: 20 20 20 20 20 28 6e 20 3d 20 5f 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 29 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 75 2e 45 72 72 6f 72 28 22 4e 6f 45 78 74 65 6e 73 69 6f 6e 22 2c 20 22 45 78 74 65 6e 73 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 2e 22 2c 20 6e 75 6c 6c 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 44 61 74 61 50 6f 69 6e 74 28 22 65 78 74 65 6e 73 69 6f 6e 2e 69 64 22 2c 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 4d 65 73 73 61 67 65 28 22 55 73 69 6e 67 20 43 68 72 6f 6d 65 20 65 78 74 65 6e 73 69 6f 6e 20 77 69 74 68 20 69 64 20 22 20 2b 20 65 29 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: (n = _.firstChild); if (!e) throw new u.Error("NoExtension", "Extension is not installed.", null); return ( p.logDataPoint("extension.id", e), p.logMessage("Using Chrome extension with id " + e),
2023-08-10 21:19:37 UTC	13195	IN	Data Raw: 20 20 20 43 68 65 63 6b 62 6f 78 3a 20 22 63 68 65 63 6b 62 6f 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 42 75 74 74 6f 6e 3a 20 22 62 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 44 61 74 61 3a 20 22 45 78 63 65 70 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 3a 20 22 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 45 78 63 65 70 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 55 73 65 72 41 63 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: Checkbox: "checkbox", Button: "button", ExceptionData: "ExceptionData", PageActionData: "PageActionData", ExceptionsTablesuffix: "Exceptions", PageActtionsTablesuffix: "UserActions",
2023-08-10 21:19:37 UTC	13211	IN	Data Raw: 6f 76 69 64 65 72 20 3d 20 69 2e 45 6d 70 74 79 45 76 65 6e 74 50 72 6f 76 69 64 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 3b 0a 20 20 20 20 20 20 20 20 20 20 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 69 2e 45 76 65 6e 74 41 70 69 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 69 Data Ascii: ovider = i.EmptyEventProvider); }, , , , , function (e, n, t) { var i; !(function (e) { var n = t(1), i = t(2), a = i.EventApi, o = i
2023-08-10 21:19:37 UTC	13227	IN	Data Raw: 61 6c 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 3a 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 3a 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 45 72 72 6f 72 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 63 65 6c 3a 20 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 5f 6f 6e 43 61 6e 63 65 6c 2c 5c 6e 20 20 20 20 20 Data Ascii: alViewId,\n currentViewId: currentViewId,\n initialSharedData: initialSharedData,\n initialError: $loginPage.getServerError() },\n event: {\n cancel: paginationControl_onCancel,\n
2023-08-10 21:19:37 UTC	13243	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 76 69 65 77 5f 6f 6e 52 65 64 69 72 65 63 74 20 7d 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 76 69 65 77 69 64 3d 22 27 20 2b 0a 20 20 20 20 20 20 74 28 30 29 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2e 49 64 70 52 65 64 69 72 65 63 74 53 70 65 65 64 62 75 6d 70 20 2b 0a 20 20 20 20 20 20 27 22 20 64 61 74 61 2d 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 3d 22 74 72 75 65 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 70 61 67 65 56 69 65 77 43 6f 6d 70 6f 6e 65 6e 74 3a 20 7b 20 6e 61 6d 65 3a 20 5c 27 6c 6f 67 69 6e 2d 69 Data Ascii: redirect: $loginPage.view_onRedirect } }">\n </div>\n\n <div data-viewid="' + t(0).PaginatedState.IdpRedirectSpeedbump + '" data-showIdentityBanner="true" data-bind="pageViewComponent: { name: \'login-i
2023-08-10 21:19:37 UTC	13259	IN	Data Raw: 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 4e 65 77 55 73 65 72 22 20 76 61 6c 75 65 3d 22 31 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 46 6f 75 6e 64 4d 53 41 73 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 73 46 6f 75 6e 64 4d 53 41 73 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 73 70 6f 73 74 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 66 50 4f 53 54 5f 46 6f 72 63 65 53 69 67 6e 69 6e 20 3f 20 31 20 3a 20 30 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 Data Ascii: \n <input type="hidden" name="NewUser" value="1" />\n <input type="hidden" name="FoundMSAs" data-bind="value: svr.sFoundMSAs" />\n <input type="hidden" name="fspost" data-bind="value: svr.fPOST_ForceSignin ? 1 : 0" />\n <input
2023-08-10 21:19:37 UTC	13275	IN	Data Raw: 69 20 3d 20 7b 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 70 6e 67 22 3a 20 33 34 33 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 73 76 67 22 3a 20 33 34 34 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 70 6e 67 22 3a 20 33 34 35 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 73 76 67 22 3a 20 33 34 36 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 70 6e 67 22 3a 20 33 34 37 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 73 76 67 22 3a 20 33 34 38 2c 0a 20 20 20 20 20 20 22 2e 2f Data Ascii: i = { "./AppCentipede_Beam.png": 343, "./AppCentipede_Beam.svg": 344, "./AppCentipede_Beam_white.png": 345, "./AppCentipede_Beam_white.svg": 346, "./AppCentipede_Bing.png": 347, "./AppCentipede_Bing.svg": 348, "./
2023-08-10 21:19:37 UTC	13291	IN	Data Raw: 6e 74 61 69 6e 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 68 65 61 64 65 72 5c 27 3a 20 74 72 75 65 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 68 65 61 64 65 72 4c 6f 67 6f 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 74 74 72 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 68 65 61 64 65 72 4c 6f 67 6f 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3a 20 73 74 72 5b 5c 27 Data Ascii: ntainer">\n <div id="header" data-bind="externalCss: { \'header\': true }">\n <img id="headerLogo" role="img" data-bind="\n attr: {\n src: headerLogo,\n alt: str[\'
2023-08-10 21:19:37 UTC	13307	IN	Data Raw: 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 66 53 68 6f 77 43 6f 70 79 44 65 62 75 67 44 65 74 61 69 6c 73 4c 69 6e 6b 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 64 65 62 75 67 44 65 74 61 69 6c 73 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 62 6f 6c 64 20 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 69 6e 67 2d 74 65 78 74 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 Data Ascii: <div class="table-cell">\n \x3c!-- ko if: svr.fShowCopyDebugDetailsLink --\x3e\n <div class="debug-details-header">\n <div id="debugDetailsHeader" class="bold debug-details-heading-text" role="heading" aria-leve
2023-08-10 21:19:37 UTC	13323	IN	Data Raw: 69 64 65 49 6e 4e 65 78 74 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 6f 75 74 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 4f 75 74 42 61 63 6b 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 69 6e 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 49 6e 42 61 63 6b 28 29 20 7d 5c 22 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 66 6f 72 65 61 63 68 3a 20 76 69 65 77 73 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 24 70 61 72 65 6e 74 2e 63 75 72 72 65 6e 74 56 69 65 77 49 6e 64 65 78 28 29 20 3d 3d 3d 20 24 69 6e 64 65 78 28 29 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ideInNext(),\n 'slide-out-back': animate.isSlideOutBack(),\n 'slide-in-back': animate.isSlideInBack() }\">\n\n \x3c!-- ko foreach: views --\x3e\n \x3c!-- ko if: $parent.currentViewIndex() === $index() --\x3e\n
2023-08-10 21:19:37 UTC	13339	IN	Data Raw: 76 69 63 65 43 6f 64 65 20 3d 20 74 20 3f 20 74 2e 64 65 76 69 63 65 43 6f 64 65 20 3a 20 6e 75 6c 6c 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 3d 20 22 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 75 73 65 45 76 69 63 74 65 64 43 72 65 64 65 6e 74 69 61 6c 73 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 73 68 6f 77 43 72 65 64 56 69 65 77 42 72 61 6e 64 69 6e 67 44 65 73 63 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 69 73 53 69 67 6e 75 70 50 6f 73 74 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 4e 65 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 28 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 20 3d Data Ascii: viceCode = t ? t.deviceCode : null), (e.proofConfirmation = ""), (e.useEvictedCredentials = !1), (e.showCredViewBrandingDesc = !1), (e.isSignupPost = !1), Ne && ((e.availableCreds =
2023-08-10 21:19:37 UTC	13355	IN	Data Raw: 20 73 74 72 5b 5c 27 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 75 70 5f 4c 69 6e 6b 5c 27 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3a 20 73 76 72 2e 75 72 6c 53 69 67 6e 55 70 20 7c 7c 20 5c 27 23 5c 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 3a 20 73 69 67 6e 75 70 5f 6f 6e 43 6c 69 63 6b 22 3e 3c 2f 61 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 6e 6f 74 3a 20 73 76 72 2e 66 49 73 53 65 6c 66 53 65 72 76 69 63 65 Data Ascii: str[\'STR_SSSU_Signup_Link\'],\n href: svr.urlSignUp \|\| \'#\',\n click: signup_onClick"></a>\n </div>\n \x3c!-- /ko --\x3e\n\n \x3c!-- ko ifnot: svr.fIsSelfService
2023-08-10 21:19:37 UTC	13371	IN	Data Raw: 3d 20 64 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 22 5c 78 33 63 21 2d 2d 20 22 20 2b 0a 20 20 20 20 20 20 28 74 28 31 33 29 2c 0a 20 20 20 20 20 20 27 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 69 64 3d 22 6d 6f 72 65 49 6e 66 6f 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 72 6f 77 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 74 65 78 74 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 2c 20 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 74 Data Ascii: = d); }, function (e, n, t) { e.exports = "\x3c!-- " + (t(13), ' --\x3e\n\n\x3c!-- ko if: moreInfoTitle --\x3e\n<div id="moreInfoHeader" class="row" role="heading" aria-level="1" data-bind="text: moreInfoTitle, externalCss: { \'t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
266	192.168.2.3	50118	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12670	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vts8ra1it9l0lgwizaxzhg2.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
2023-08-10 21:19:36 UTC	12675	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 content-length: 49972 Content-Type: application/x-javascript Content-Encoding: gzip Content-MD5: F796jFOPcfyA2yQHgXtB1w== Last-Modified: Thu, 13 Jul 2023 00:28:45 GMT ETag: 0x8DB83381EAF7708 X-Cache: TCP_HIT x-ms-request-id: 917228b3-401e-0007-0a01-c1e67d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0YB/UZAAAAAB93Iasl5XyR6cVFbT6P6cQRE0yQUExMDkxMjA4MDI1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0aFTVZAAAAAC5xXvfFNWqQrrLvt9igcCOQ0gxQUEyMDIwNjA4MDQ3ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Thu, 10 Aug 2023 21:19:35 GMT Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:36 UTC	12677	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-08-10 21:19:36 UTC	12709	IN	Data Raw: dd 7d cb 76 23 47 b2 d8 de 5f 51 83 f1 51 37 af aa 21 3c f8 44 0b 6a 83 00 d8 c4 6d 10 80 00 b0 29 1d 49 c6 29 a2 92 64 4d 03 55 b8 55 85 66 73 a8 f6 99 9d 17 77 e1 ad bd f3 c2 2b 2f bd f1 de 9f 32 e7 5c 7f 87 e3 91 99 95 f5 00 40 4a 1a cd bd 9e 33 a7 45 e4 23 32 32 32 32 32 22 32 32 ea 0f 37 6b 7f 1e 7b 81 ff 52 ec 3d aa bf ad e0 a5 bf f7 e8 dd bc f4 7e f0 7f da 0b 45 bc 0e 7d 0b ff 2e 8b 4f ab 20 8c a3 d7 1f 9d d0 8a 9b 58 d4 7c 94 65 8d c7 cf b6 e7 36 7c 7b 11 38 ae 70 1b 7f a8 7e 7e 2d bb 0a ec 3a 77 16 8b 97 b1 82 60 c7 76 f2 77 b0 07 3f b8 5b f3 0f 95 a4 e2 33 0e e3 35 1f 35 a0 a0 bc 6c 0a 3b 28 cf 9b 1e fc bb 6a 96 4a 76 f0 b2 b2 f7 f9 e5 0f c9 34 ec c0 f6 00 f9 97 b5 3d c2 d2 6f 7a 2f ab 00 1f fe 73 b0 67 87 f0 9f c3 3d db 69 86 e5 49 1c 7a fe 6d Data Ascii: }v#G_QQ7!<Djm)I)dMUUfsw+/2\@J3E#22222"227k{R=~E}.O X\|e6\|{8p~~-:w`vw?[355l;(jJv4=oz/sg=iIzm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
267	192.168.2.3	50102	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12672	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/reporting.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:37 UTC	12889	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=108699908635728654876350287572994736522"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: a84064f1-301e-0057-50d0-cb64f2000000 Content-Length: 215 Connection: close
2023-08-10 21:19:37 UTC	12890	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 38 34 30 36 34 66 31 2d 33 30 31 65 2d 30 30 35 37 2d 35 30 64 30 2d 63 62 36 34 66 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 36 2e 39 37 38 37 35 30 33 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:a84064f1-301e-0057-50d0-cb64f2000000Time:2023-08-10T21:19:36.9787503Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
268	192.168.2.3	50125	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12675	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/assistancepanel.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:37 UTC	13372	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=129183180734553950158306295292038769458"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 3f30e54d-201e-0039-44d0-cb31dd000000 Content-Length: 215 Connection: close
2023-08-10 21:19:37 UTC	13373	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 33 66 33 30 65 35 34 64 2d 32 30 31 65 2d 30 30 33 39 2d 34 34 64 30 2d 63 62 33 31 64 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 37 2e 32 32 32 38 31 30 38 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:3f30e54d-201e-0039-44d0-cb31dd000000Time:2023-08-10T21:19:37.2228108Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
269	192.168.2.3	50106	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12677	OUT	GET /images/webcontrols.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:37 UTC	13375	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=124152111908653231611290853766412603129"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 23657060-f01e-0067-65d0-cbda3d000000 Content-Length: 223 Connection: close
2023-08-10 21:19:37 UTC	13376	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 32 33 36 35 37 30 36 30 2d 66 30 31 65 2d 30 30 36 37 2d 36 35 64 30 2d 63 62 64 61 33 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 37 2e 32 37 34 39 30 36 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:23657060-f01e-0067-65d0-cbda3d000000Time:2023-08-10T21:19:37.2749061Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.3	49811	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:58 UTC	1667	OUT	GET /static/webpack/production/544eb0bcacbf47681dcb.UBYHq28Ln5Hi8t6eUSEEz2fCkP8WJ0HWYEUftmX8eYE.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:58 UTC	1669	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 27787 Connection: close Date: Thu, 10 Aug 2023 21:18:59 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:34 GMT ETag: "1f440f98e8c90c270c5cac0a7e629031" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 2aefdd231d9806ea2eced3399f411f80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: BXqmrKgnzBN0trTtD608GmmYiqr2YbxyVtywNhhHHyZOFySnckRmVQ==
2023-08-10 21:18:58 UTC	1669	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 6f db d8 b6 20 f8 5d bf 82 e6 a9 49 c8 98 92 25 3b 71 12 29 2c 1d c7 76 12 57 25 76 ca 76 92 aa 48 2a d7 16 b5 25 31 96 48 85 0f d9 8e a9 8b 7b d1 e8 c6 60 3e cd 60 7a 30 c0 00 d3 dd f3 a9 31 98 c1 74 0f 30 8f 6e 34 d0 0d dc fe 25 d3 f7 07 f4 5f 98 b5 f6 83 dc a4 28 c7 a9 4a 9d 73 6e e3 d6 39 b1 c8 cd b5 d7 5e 7b ed b5 d7 63 3f 8d 0b d7 1b f8 17 b5 b3 b3 97 47 3b 7b 3b 4f 5f ee b3 87 fd bd b3 dd 17 6f 0e bf 3f 39 3b b3 3f 0b 91 24 9d 9e 59 9b c5 e1 d8 e8 74 f4 39 05 f0 20 fc ab 19 99 d1 e0 8c 0c a6 ae a7 3e 9f f9 c3 e1 d9 dc a5 17 67 be 37 b9 12 5f fa 50 04 0d e4 4b ec 0d 26 54 bc 38 13 3f 1e 9c 0d 7c 47 22 1c 90 70 dc ff ab 86 b3 75 df 79 b0 f9 50 ef 59 d7 95 46 73 18 7b 4e e4 fa 9e 41 ad c8 0a cc 6b 3d 0e a9 16 46 Data Ascii: ko ]I%;q),vW%vvH*%1H{`>`z01t0n4%_(Jsn9^{c?G;{;O_o?9;?$Yt9 >g7_PK&T8?\|G"puyPYFs{NAk=F
2023-08-10 21:18:58 UTC	1685	IN	Data Raw: 13 ce 5b 6a f2 25 ae e2 86 51 3c b3 cf 08 d2 99 23 ab 51 67 d1 46 89 8b 9d f3 f4 2f 4b 25 62 7a 93 44 94 4d 31 fd e9 75 58 e5 37 f6 cd 2f 9b 25 fa 9d 2a 58 f9 3d 95 cf 57 d0 3d af 55 e9 40 79 18 47 76 47 c7 4b 1e f4 9e 72 a6 fd 5c 39 eb 77 1c c9 0a 36 32 79 ba ca 00 94 55 96 e3 a8 93 42 e3 41 30 29 78 5f c1 17 dd b9 13 c9 63 b2 5e 8a e5 4b ed eb 74 21 13 4e 82 2f 9a d7 ca b6 d0 51 31 33 df fc 7b 8a 67 d5 f1 91 35 22 22 86 3b 77 0e 28 d3 6c e2 e8 1b 39 69 cc 07 7c f1 eb 13 f9 8d 71 43 6c 11 c6 d3 7f 16 a6 38 00 f9 3d 35 8e a9 b5 97 41 b6 d3 06 dd c3 5d 05 e0 f3 e6 be 3e a7 90 0e 29 eb 0d b3 29 9f 4d 73 61 9d e5 16 7c cb 83 d3 70 97 79 04 ff 82 e5 43 d7 a2 27 01 3b ea 07 82 85 ec d0 b5 48 5e a9 26 ce bd 96 c7 22 59 ae 5d 6f f1 f3 82 ea 69 4e 59 88 9f 43 60 Data Ascii: [j%Q<#QgF/K%bzDM1uX7/%*X=W=U@yGvGKr\9w62yUBA0)x_c^Kt!N/Q13{g5"";w(l9i\|qCl8=5A]>))Msa\|pyC';H^&"Y]oiNYC`
2023-08-10 21:18:58 UTC	1686	IN	Data Raw: 9b d5 81 3b 72 23 9d 9d 99 c5 6e 64 57 c1 7f d2 d9 ad 31 7a 2c 7e df 88 df 40 6f 56 b2 13 51 8e 89 37 a2 e2 58 94 5f 7e da 88 37 de 6c 04 bf 68 06 16 63 ca 93 90 42 8d 04 34 7f 55 82 a5 e1 91 f3 bf 5c fd c2 2e 43 a5 64 a0 9b bc d4 8f a2 94 1f 80 d8 f2 42 3e 6e fc 00 05 7c 8c 09 e0 b9 b1 0c 89 f2 95 40 f9 12 09 af 4d 7d 2f 1a 83 5f 24 ab 6c a5 6c b0 04 cf 2c ce 51 4b f2 b2 d7 09 c0 e1 51 59 73 21 30 be 5b 49 e4 c5 c6 3b 20 f2 82 d2 f3 db 50 38 c0 96 19 90 ab 52 b2 96 8b df d3 f9 f5 3e fa 33 41 c7 68 25 1d 7b 1b cf 36 46 40 09 20 bf 45 73 0c 96 9a 63 1f 29 c3 6a 20 75 42 de 38 97 6e 21 70 14 e8 c4 f0 e7 c9 7d 73 05 79 b4 56 a3 94 0a 4e 7d 86 46 1d 6f 9d 94 a4 74 56 b4 95 6c 43 64 da fd 1c d3 9c cf 12 e3 d4 6a 8e e3 fc 49 88 21 c8 d6 b1 1f 07 8d 4d 7b ad ae Data Ascii: ;r#ndW1z,~@oVQ7X_~7lhcB4U\.CdB>n\|@M}/_$ll,QKQYs!0[I; P8R>3Ah%{6F@ Esc)j uB8n!p}syVN}FotVlCdjI!M{

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
270	192.168.2.3	50126	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12775	OUT	GET /Images/transparent.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:37 UTC	13382	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=40479930238047748895819108270789546359"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 5cbbf946-501e-0033-5cd0-cb956a000000 Content-Length: 226 Connection: close
2023-08-10 21:19:37 UTC	13383	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 35 63 62 62 66 39 34 36 2d 35 30 31 65 2d 30 30 33 33 2d 35 63 64 30 2d 63 62 39 35 36 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 37 2e 35 34 34 33 34 36 33 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:5cbbf946-501e-0033-5cd0-cb956a000000Time:2023-08-10T21:19:37.5443463Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
271	192.168.2.3	50127	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:36 UTC	12776	OUT	GET /Shell/Images/header_bg_signup_office.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:37 UTC	13383	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=117288652616132488202501724634789642920"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 74d7e420-001e-003e-4fd0-cb5dbe000000 Content-Length: 226 Connection: close
2023-08-10 21:19:37 UTC	13384	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 34 64 37 65 34 32 30 2d 30 30 31 65 2d 30 30 33 65 2d 34 66 64 30 2d 63 62 35 64 62 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 37 2e 35 35 39 32 37 34 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:74d7e420-001e-003e-4fd0-cb5dbe000000Time:2023-08-10T21:19:37.5592744Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
272	192.168.2.3	50128	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:37 UTC	12873	OUT	GET /Shell/Images/O365SharedClusteredImage.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:37 UTC	13385	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=31602482642297678561520602762475103893"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 7ba50dd8-301e-0025-33d0-cb63bd000000 Content-Length: 226 Connection: close
2023-08-10 21:19:37 UTC	13385	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 62 61 35 30 64 64 38 2d 33 30 31 65 2d 30 30 32 35 2d 33 33 64 30 2d 63 62 36 33 62 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 37 2e 36 30 31 30 35 34 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:7ba50dd8-301e-0025-33d0-cb63bd000000Time:2023-08-10T21:19:37.6010544Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
273	192.168.2.3	50129	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:37 UTC	13099	OUT	GET /images/servicestatus.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:37 UTC	13393	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=92712927675074680756610375068282451273"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 3269843b-e01e-0054-6bd0-cb8596000000 Content-Length: 223 Connection: close
2023-08-10 21:19:37 UTC	13394	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 33 32 36 39 38 34 33 62 2d 65 30 31 65 2d 30 30 35 34 2d 36 62 64 30 2d 63 62 38 35 39 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 37 2e 37 37 35 34 33 32 39 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:3269843b-e01e-0054-6bd0-cb8596000000Time:2023-08-10T21:19:37.7754329Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
274	192.168.2.3	50130	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:37 UTC	13373	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 957 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryy3NBGWA78tjyrB4t Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:37 UTC	13374	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 79 33 4e 42 47 57 41 37 38 74 6a 79 72 42 34 74 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 79 33 4e 42 47 57 41 37 38 74 6a 79 72 42 34 74 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 79 33 4e 42 47 57 41 37 38 74 6a 79 72 42 34 74 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryy3NBGWA78tjyrB4tContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryy3NBGWA78tjyrB4tContent-Disposition: form-data; name="t"50aS4zgW2W1XP95GWz4lmdjP------WebKitFormBoundaryy3NBGWA78tjyrB4tCont
2023-08-10 21:19:37 UTC	13379	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 16 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:37 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 15a38f9dbb0a4bc8972631efeb083ddc Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
275	192.168.2.3	50132	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:37 UTC	13377	OUT	GET /Shell/Images/pagelayout_white_panel.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:38 UTC	13455	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=675541018552657489213175479676499189075"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 4e403844-c01e-0053-60d0-cbe9f5000000 Content-Length: 226 Connection: close
2023-08-10 21:19:38 UTC	13456	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 34 65 34 30 33 38 34 34 2d 63 30 31 65 2d 30 30 35 33 2d 36 30 64 30 2d 63 62 65 39 66 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 38 2e 30 31 38 37 33 31 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:4e403844-c01e-0053-60d0-cbe9f5000000Time:2023-08-10T21:19:38.0187315Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
276	192.168.2.3	50134	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:37 UTC	13377	OUT	GET /Shell/Images/pagelayout_mos_background_right.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:38 UTC	13457	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=105933894377022504318430867888127125239"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 67cd1f24-901e-0071-63d0-cb2cea000000 Content-Length: 226 Connection: close
2023-08-10 21:19:38 UTC	13458	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 36 37 63 64 31 66 32 34 2d 39 30 31 65 2d 30 30 37 31 2d 36 33 64 30 2d 63 62 32 63 65 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 38 2e 30 39 32 32 32 30 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:67cd1f24-901e-0071-63d0-cb2cea000000Time:2023-08-10T21:19:38.0922204Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
277	192.168.2.3	50131	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:37 UTC	13378	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
2023-08-10 21:19:37 UTC	13394	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:19:37 GMT Content-Type: application/x-javascript content-length: 190151 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 27 Oct 2022 14:24:13 GMT ETag: 0x8DAB826EBE74413 x-ms-request-id: d3a43160-d01e-0052-21d0-cb0244000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T211937Z-5rgdwh68wx2qf3muefkxsu4sxs00000000v0000000012une X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:37 UTC	13396	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2023-08-10 21:19:37 UTC	13410	IN	Data Raw: ab ad e8 df 24 ba fd 5b b7 2f b7 77 88 4f c2 67 46 4d 1f 0b 75 02 77 fb 58 84 c3 d5 d5 a1 d5 c7 aa bc 89 52 ee 73 55 63 12 54 51 9e 19 a5 98 4c 6c 9b aa 29 7f 81 0e 15 8b c8 b4 6e 6d b8 35 23 fc 77 92 1f 7d c2 7d 60 e9 5a 4e 05 80 55 57 16 ca 64 24 83 8f 7e c9 a2 18 6f be 60 b5 e3 f7 6b ee db cb 3a 66 b6 43 02 28 82 2d f7 ac 41 3e 33 02 d7 52 93 5d 5b 34 e4 fa 89 04 cc b0 a4 8b 56 fe 62 07 43 75 54 db 27 52 61 9c c6 98 e4 50 a6 06 44 5d 6a 06 b3 6a 82 95 ba 93 06 36 1c 95 4e f9 bb 66 f8 2c 4d 84 8f 0d 47 8a 26 24 6d ba 5f e8 23 82 5e ae 0b 25 99 5f 59 dc 77 52 b5 ef 64 61 dc 24 de 4f 1c 01 23 91 79 96 8d 51 e7 a8 6c 4b 13 34 8f 0f b6 c9 ce 5a 39 e8 80 15 a4 7c 3d 89 b6 fd 8f b7 16 09 77 61 85 e5 30 04 cd 0f 55 aa ed 37 04 d3 e1 9c 74 a7 8a eb a4 e4 10 30 Data Ascii: $[/wOgFMuwXRsUcTQLl)nm5#w}}`ZNUWd$~o`k:fC(-A>3R][4VbCuT'RaPD]jj6Nf,MG&$m_#^%_YwRda$O#yQlK4Z9\|=wa0U7t0
2023-08-10 21:19:37 UTC	13412	IN	Data Raw: 95 a1 50 20 13 dc 09 ae 34 e2 7c 9d 30 c3 e4 c1 b6 9c ec e3 12 20 93 46 e3 3e 5b 03 ed 8f 67 c0 df fb 78 dd a8 ae 19 4d 00 1b f1 d1 0b 4a 7e 13 a6 94 dc 94 fe 24 50 2d cd 47 c7 3d 85 da e1 a9 62 8c 17 47 aa d5 45 78 07 f5 10 07 b4 78 d7 96 12 fa cd e1 40 53 82 00 82 12 ad ae 46 4d f9 c1 a7 c0 2f 64 02 06 d0 26 7a 72 65 91 74 91 31 d8 a2 52 17 e0 ac 82 55 04 66 ae 27 73 c2 f1 f4 4e 01 40 75 31 14 5d 18 6a c4 18 b2 35 15 0a d7 1f b2 c6 32 9c 55 a1 f8 e4 d6 c7 75 7d aa 14 55 21 35 ef fd 38 ba cc eb 7b 49 9f 4d 47 4b d0 e5 be d2 67 31 94 26 37 0c 28 1e c0 a4 59 3c 4b b5 71 c3 5c 85 c2 bd 2b ec d1 92 4d 17 61 b4 95 83 6f ef 6c 96 7c 4d d2 9b e4 cc 13 1e 9b 94 25 3b 59 f4 98 d7 35 b4 ba 8c f2 2b e1 55 59 58 bd d2 fc fe e1 bb b2 80 60 9e 8b 78 bc 40 3a 5d 23 d7 Data Ascii: P 4\|0 F>[gxMJ~$P-G=bGExx@SFM/d&zret1RUf'sN@u1]j52Uu}U!58{IMGKg1&7(Y<Kq\+Maol\|M%;Y5+UYX`x@:]#
2023-08-10 21:19:38 UTC	13428	IN	Data Raw: cc 68 6f b7 b7 64 ca dd ae 4a d9 e6 94 0f 04 97 4e a7 c2 f3 c0 0e a7 9c 5c a7 49 24 dd 09 ec 72 ca af 8c 88 09 2d 8c 1f 39 e5 34 9e a8 6a 9e 8b 84 db 42 a7 bc 10 4d 31 6e 5a 3c b6 5b a2 db 88 43 dd 12 3d 7d fb d7 30 69 b7 16 fa f8 3e ba 0a 07 54 7e cb df 9f e6 45 7a 1b a9 00 e4 6a 68 f2 b5 bd b5 69 c2 3f 35 45 44 aa 8f 69 2a f6 d3 1c ee fe 11 06 7b 48 f3 40 04 2d 47 ba a3 09 38 bc bd 8d 86 31 dc 16 6c 9b e0 50 7c 7f 9e e4 93 68 00 ab b6 21 cd b3 1c 6c 0b 77 e6 d6 26 55 73 2e 1e b6 90 b0 bb 4d 73 77 2e 1e 76 fc 37 e9 14 ca 0c bb 3e a8 0f 9a 1e 76 57 f0 dc 87 3a 00 b7 fb c2 84 90 d5 be 66 71 11 13 14 69 6f 9a 50 4f 16 3a 3e 3a a0 9e 1c 7c fc 78 fc 91 8a 7e de fb 78 74 78 f4 13 75 e5 f0 e8 ed f1 c7 0f 7b 67 87 c7 47 ed 2d 13 cc 11 ca 6d 0b 35 2b 02 4e 38 96 Data Ascii: hodJN\I$r-94jBM1nZ<[C=}0i>T~Ezjhi?5EDi*{H@-G81lP\|h!lw&Us.Msw.v7>vW:fqioPO:>:\|x~xtxu{gG-m5+N8
2023-08-10 21:19:38 UTC	13444	IN	Data Raw: e8 02 ed b7 1b 30 09 aa 8b f1 66 7d dd 87 be a5 89 29 6d ad 56 10 1e 45 fe f0 c5 b9 27 2d 54 f4 8d b9 67 48 81 d4 bd 69 12 41 b4 ab f6 4a a9 88 ba 2e f7 14 bf d4 b7 af c8 76 f5 ce 84 88 a4 94 5f fe db 53 02 7c b1 3a 29 cc e0 d4 b9 d5 53 c2 5a f1 1f e1 60 c9 b8 fe d9 5f a6 f1 1e 54 72 f7 2c d6 a6 25 92 b2 05 54 5c b4 7c f5 7c 28 37 70 f8 65 05 40 cc 2d 6c 6a bc cc 66 37 ee 9e 80 f9 cc fa e3 37 ef 09 3a dc 42 5c 16 d1 31 a2 c7 eb d1 b0 76 6c d1 e2 73 a3 67 88 37 5c 6a b0 71 e8 99 52 9f ad a4 04 19 38 94 39 82 75 69 60 e7 f4 5c 2a b4 a1 16 43 bd ad 52 4b 99 83 5a 36 cd 5a 4a ba 22 d3 d4 48 d1 25 4a 49 0a 37 39 2a 67 69 94 18 95 d1 95 a2 45 59 7e 67 31 04 91 52 b1 e0 10 44 c8 86 46 78 19 dd 79 81 ef 00 67 8c 2f 7c 47 71 b0 b5 45 aa 18 02 b8 0d 91 67 44 1e 8a Data Ascii: 0f})mVE'-TgHiAJ.v_S\|:)SZ`_Tr,%T\\|\|(7pe@-ljf77:B\1vlsg7\jqR89ui`\CRKZ6ZJ"H%JI79giEY~g1RDFxyg/\|GqEgD

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
278	192.168.2.3	50135	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:37 UTC	13386	OUT	GET /Shell/Images/pagelayout_mos_background_left.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:38 UTC	13459	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=694818513720102000714417746829247808894"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 89234316-801e-006d-5dd0-cb7e8a000000 Content-Length: 226 Connection: close
2023-08-10 21:19:38 UTC	13460	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 38 39 32 33 34 33 31 36 2d 38 30 31 65 2d 30 30 36 64 2d 35 64 64 30 2d 63 62 37 65 38 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 38 2e 33 34 34 30 37 31 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:89234316-801e-006d-5dd0-cb7e8a000000Time:2023-08-10T21:19:38.3440712Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
279	192.168.2.3	50138	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:37 UTC	13386	OUT	GET /Shell/Images/pagelayout_nav_highlight.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:38 UTC	13460	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:38 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=158377645489639660851983512362240891333"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 67f84fb7-801e-000f-19d0-cbbcad000000 Content-Length: 226 Connection: close
2023-08-10 21:19:38 UTC	13461	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 36 37 66 38 34 66 62 37 2d 38 30 31 65 2d 30 30 30 66 2d 31 39 64 30 2d 63 62 62 63 61 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 38 2e 33 39 30 33 32 38 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:67f84fb7-801e-000f-19d0-cbbcad000000Time:2023-08-10T21:19:38.3903285Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.3	49741	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:58 UTC	1668	OUT	GET /static/webpack/production/paper_cloud_docs~paper_pifs.fe9af606aefd018129cf886d5e3f19606dbbddff.MLLQ4hZFC6ZgaidRqLtSKQk2VkEALechDq_ssMjHRWk.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:58 UTC	1697	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 374 Connection: close Date: Thu, 10 Aug 2023 21:18:59 GMT Last-Modified: Thu, 10 Aug 2023 03:28:28 GMT ETag: "3e996fd1348d2e5cb92b7481b6acf059" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3d994808da6a9ce8c9e7b1364fa689ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: rebNazOPFzsz39qxRdN3e3XM4-jtY3GLZEk6J5Y6e5gY-IwHieMlgg==
2023-08-10 21:18:58 UTC	1697	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 90 c1 6e d4 30 10 86 ef fb 14 91 b8 b4 15 49 9d 65 bb 64 13 21 21 b8 70 00 0e 48 3d 5b 13 cf 38 19 d5 b1 2d db 69 d3 46 e1 d9 c9 ee 82 40 f4 d0 de 2c cf f7 fb fb 3d 85 b4 4e 46 46 6a 21 c8 e4 ba ce 90 1c 85 68 59 de cc 86 74 aa cb bd 9f 96 4d 21 23 41 50 fd 27 08 df 9d 0e 30 d0 67 67 13 b0 a5 20 a7 d2 d8 27 b9 9b 5b 50 77 5d 70 a3 c5 fa 1e c2 45 9e 2b 67 5c 90 32 26 b0 08 01 a5 fc 4b 5c 36 de 45 4e ec 6c 0d 6d 74 66 4c d4 04 ee fa d5 57 0a 3f 35 c9 f9 93 b9 b9 e7 c8 2d 1b 4e 8f 75 cf 88 64 9b 07 c6 d4 d7 3b 71 c4 9e 72 b6 48 53 5d 0a b1 7c 1c 08 19 32 67 cd 63 16 55 20 b2 d9 ea cd 2e 06 98 f2 73 a6 3a 66 2e e7 d7 fc e5 1c d8 be 5f 03 cb b2 06 7a f7 60 7f 0f b7 62 fe a7 d4 e9 68 68 65 ce f5 fe 40 bb f9 59 f3 95 19 56 cb 17 Data Ascii: n0Ied!!pH=[8-iF@,=NFFj!hYtM!#AP'0gg '[Pw]pE+g\2&K\6ENlmtfLW?5-Nud;qrHS]\|2gcU .s:f._z`bhhe@YV

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
280	192.168.2.3	50140	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:37 UTC	13387	OUT	GET /Shell/Images/header_wizard_hl_mos.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:38 UTC	13461	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:38 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1530209394626956256314538503513636141071"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 48cf7e0b-401e-0010-14d0-cb0fa9000000 Content-Length: 226 Connection: close
2023-08-10 21:19:38 UTC	13462	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 34 38 63 66 37 65 30 62 2d 34 30 31 65 2d 30 30 31 30 2d 31 34 64 30 2d 63 62 30 66 61 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 38 2e 34 32 37 34 31 33 33 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:48cf7e0b-401e-0010-14d0-cb0fa9000000Time:2023-08-10T21:19:38.4274133Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
281	192.168.2.3	50139	52.97.186.146	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:37 UTC	13388	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.microsoft365.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:37 UTC	13388	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2734 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: 77f5d568-4069-6b81-7f5d-d3daf5d1ece0 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443",h3-29=":443" X-CalculatedBETarget: ZR0P278MB0362.CHEP278.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 Set-Cookie: ClientId=9F94891D29A040C88D2106E8E34BD23A; expires=Sat, 10-Aug-2024 21:19:37 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=9F94891D29A040C88D2106E8E34BD23A; expires=Sat, 10-Aug-2024 21:19:37 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Sat, 10-Feb-2024 21:19:37 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OWAPF=v:15.20.6699.8&l:mouse; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-Version: 15.20.6699.8 X-OWA-DiagnosticsInfo: 1;0;0 X-IIDs: 0 X-BackEnd-Begin: 2023-08-10T21:19:37.837 X-BackEnd-End: 2023-08-10T21:19:37.852 X-DiagInfo: ZR0P278MB0362 X-BEServer: ZR0P278MB0362 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=ZRH"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: ZRH X-FEProxyInfo: ZR0P278CA0006.CHEP278.PROD.OUTLOOK.COM X-FEEFZInfo: ZRH X-FEServer: ZR0P278CA0006 Date: Thu, 10 Aug 2023 21:19:37 GMT Connection: close
2023-08-10 21:19:37 UTC	13390	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
282	192.168.2.3	50141	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:37 UTC	13394	OUT	GET /Images/list_bullet_5x5.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:38 UTC	13464	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=25904324243621370777333970690908814685"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 0d3a9f07-401e-002f-72d0-cbc70a000000 Content-Length: 226 Connection: close
2023-08-10 21:19:38 UTC	13465	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 64 33 61 39 66 30 37 2d 34 30 31 65 2d 30 30 32 66 2d 37 32 64 30 2d 63 62 63 37 30 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 38 2e 35 33 30 33 37 33 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:0d3a9f07-401e-002f-72d0-cbc70a000000Time:2023-08-10T21:19:38.5303736Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
283	192.168.2.3	50146	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:38 UTC	13457	OUT	GET /images/spinner_16x16_metro.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:38 UTC	13500	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=55407458680154762417883117750295843408"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 213cc56c-f01e-0005-22d0-cb181a000000 Content-Length: 223 Connection: close
2023-08-10 21:19:38 UTC	13501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 32 31 33 63 63 35 36 63 2d 66 30 31 65 2d 30 30 30 35 2d 32 32 64 30 2d 63 62 31 38 31 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 38 2e 37 36 36 36 33 38 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:213cc56c-f01e-0005-22d0-cb181a000000Time:2023-08-10T21:19:38.7666384Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
284	192.168.2.3	50148	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:38 UTC	13458	OUT	GET /images/spinner_24x24_metro.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:38 UTC	13501	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:38 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=127661135488986532511643229633300157957"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 0302c8a6-d01e-0060-0ad0-cbb65e000000 Content-Length: 223 Connection: close
2023-08-10 21:19:38 UTC	13502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 33 30 32 63 38 61 36 2d 64 30 31 65 2d 30 30 36 30 2d 30 61 64 30 2d 63 62 62 36 35 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 38 2e 38 33 37 38 32 32 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:0302c8a6-d01e-0060-0ad0-cbb65e000000Time:2023-08-10T21:19:38.8378222Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
285	192.168.2.3	50147	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:38 UTC	13463	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
2023-08-10 21:19:38 UTC	13467	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 content-length: 109863 Content-Type: application/x-javascript Content-Encoding: gzip Content-MD5: todPgSbCBNAfnMYQ5LVdvw== Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 X-Cache: TCP_HIT x-ms-request-id: 55266752-901e-0046-49d0-cb1e6e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0XlTVZAAAAACLfnx5iXoOQ7xzYRDxOdpARE0yQUExMDkxMjA3MDM1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0alTVZAAAAAA7jCtIqWUiRbX+iEL8s7DxQ0gxQUEyMDIwNjA4MDQ1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Thu, 10 Aug 2023 21:19:37 GMT Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:38 UTC	13469	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E]$\|zmk3h-SznuJ2V.tx~%Y
2023-08-10 21:19:38 UTC	13483	IN	Data Raw: a4 f7 2d 8f 77 77 7c 72 38 78 ec df a1 2f d7 a1 7f de 1d 60 1a 1b ee a5 76 f8 38 18 3c 06 e6 f4 ec b1 3f c6 58 5c 71 5a 51 98 91 82 1c 1d f3 87 7f 83 e1 64 cd 06 60 1c e8 47 73 5f 03 81 f5 5d ca dd 73 3a 5e d6 25 77 9c c9 64 d0 5f a7 5d de 12 f7 a7 44 cf c4 dd 43 42 df 2b 0e bb 14 5d ad 38 c0 30 7d 13 7a b1 89 68 d2 fc b3 d4 37 1c 96 87 fd 23 5d 77 d8 ac 7b 7e 7e b2 46 5f 8d 93 c3 fd 74 8d ed 1a df d2 a8 d5 c7 87 ae 8f 07 c3 f5 10 98 1f 6c 66 ff e4 10 1b a8 b5 c4 83 45 a5 d2 a7 c9 61 9f 24 3d 2b 31 6b 72 6b 95 a9 2b 79 ec f3 c8 d9 e7 d9 7a 78 d4 0f a8 77 d9 a9 7b 00 ca 16 4d 63 eb 5f 0c 4c cf 01 a3 b5 83 5d cd d6 d3 73 7a 32 c0 26 c8 e3 9b 29 ff e3 f9 e4 9e 2b 72 16 fc f5 7d d1 59 c3 7f 7f e0 69 0b 36 68 6a 2f 5f fe 44 99 1d ea 3e c1 22 b6 c1 58 6e 0e 32 Data Ascii: -ww\|r8x/`v8<?X\qZQd`Gs_]s:^%wd_]DCB+]80}zh7#]w{~~F_tlfEa$=+1krk+yzxw{Mc_L]sz2&)+r}Yi6hj/_D>"Xn2
2023-08-10 21:19:38 UTC	13485	IN	Data Raw: 23 30 22 75 c1 a1 5b a0 67 5c a3 58 32 27 9a 62 c7 a1 cd 04 4a 6f 34 45 70 03 b3 9f b8 bb 44 67 b9 38 b0 3b 37 09 72 77 d0 9d 93 c7 5d ad 74 cb 27 62 b8 95 4f e1 cc ec 52 35 5a 41 ba 85 ae 58 30 9c 7a a4 44 c9 ad f6 53 1e c9 0b d9 b1 eb 4e c8 a4 8e e4 ba 86 5b 12 3a 6f 2d f6 c5 6d f2 c4 30 68 7d 23 11 e4 9e 9b 3f 92 16 d1 30 7e c9 4a 72 85 b5 29 df 30 5f 1a eb d9 6c 18 53 82 a5 60 c4 f4 88 e1 a4 79 f5 39 95 31 36 4c f7 9f da 08 80 a3 9a ba 59 be 74 46 4c b3 9b cc 37 3d 92 b8 1f ee 9d 10 a3 05 97 29 9e c4 3e 2e 6c de d3 d8 56 b4 50 23 73 d1 f4 3b b9 0b e5 c7 f5 6d ee f9 9b b1 01 46 c9 8c 23 77 85 a0 24 36 cb 28 53 7c 77 93 65 37 c5 fa c6 fb 2d 3c b6 f1 99 42 0b 5e d1 8d 33 ba 76 60 76 87 62 70 1d c2 5b b3 43 d5 28 26 75 c7 17 04 33 de 04 4e c5 54 84 4a a3 Data Ascii: #0"u[g\X2'bJo4EpDg8;7rw]t'bOR5ZAX0zDSN[:o-m0h}#?0~Jr)0_lS`y916LYtFL7=)>.lVP#s;mF#w$6(S\|we7-<B^3v`vbp[C(&u3NTJ
2023-08-10 21:19:38 UTC	13494	IN	Data Raw: cd 3d fb 73 db 36 d2 bf 7f 7f 85 cd 7a 1c 22 82 9f 79 34 21 c3 ea 1c 57 ed b4 13 c7 19 ab b9 cc 8d ac 78 68 99 b2 d9 c8 62 4a 52 76 12 4b f7 b7 df 3e 00 10 20 29 c5 c9 f5 66 be 1f 6c 52 20 9e 8b c5 02 fb c0 2e 05 2d d7 3f 0a ce 04 a9 97 98 f7 e2 02 bd 76 20 51 a7 df 80 eb 09 bf 8c c7 f4 64 d7 ed 4e 1e 4e 3a 98 4c 74 6a 41 c9 c9 75 5a d2 8b 62 c3 9c 32 2a ed 18 aa 77 d2 27 a6 8a a6 1a 75 30 c4 8e aa d8 64 91 cb 00 d7 48 ac 0a 8a a2 33 6b 9d a4 b9 b1 4f 56 31 db a3 db 8b a6 08 cb 43 4f cb f0 ed ea 22 cd ef d7 08 65 5d d2 c4 ec 3a 2e 3e b4 c8 c9 76 49 58 f9 55 a7 91 2b 02 7d d4 d7 fb 20 19 aa f5 1a e2 3b e6 6f f3 9f 87 2a a6 6c 02 67 2d f5 02 db 6e 3e 75 7f 99 e8 27 39 ee 85 4b e3 9d 3c 7f fc 37 45 45 82 dd 97 82 df 3c 7d fe e4 6b e1 3c ed 9d b9 4d 0b de a6 Data Ascii: =s6z"y4!WxhbJRvK> )flR .-?v QdNN:LtjAuZb2w'u0dH3kOV1CO"e]:.>vIXU+} ;olg-n>u'9K<7EE<}k<M

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
286	192.168.2.3	50152	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:38 UTC	13465	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/website.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:39 UTC	13504	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:38 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=985970313919095150016001875247720478257"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 61f12c46-701e-0046-74d0-cbfe46000000 Content-Length: 215 Connection: close
2023-08-10 21:19:39 UTC	13505	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 36 31 66 31 32 63 34 36 2d 37 30 31 65 2d 30 30 34 36 2d 37 34 64 30 2d 63 62 66 65 34 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 39 2e 33 37 34 34 30 34 39 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:61f12c46-701e-0046-74d0-cbfe46000000Time:2023-08-10T21:19:39.3744049Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
287	192.168.2.3	50153	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:38 UTC	13466	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/home.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:39 UTC	13506	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:38 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=530005883781692886810325106341389107042"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 9a4a6ee5-501e-0023-11d0-cb5002000000 Content-Length: 215 Connection: close
2023-08-10 21:19:39 UTC	13507	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 39 61 34 61 36 65 65 35 2d 35 30 31 65 2d 30 30 32 33 2d 31 31 64 30 2d 63 62 35 30 30 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 39 2e 33 38 34 35 30 37 39 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:9a4a6ee5-501e-0023-11d0-cb5002000000Time:2023-08-10T21:19:39.3845079Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
288	192.168.2.3	50154	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:38 UTC	13466	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/home15.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:39 UTC	13507	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:38 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=466906101280367596911921672570480833075"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 05e4489d-a01e-0045-45d0-cb1f22000000 Content-Length: 215 Connection: close
2023-08-10 21:19:39 UTC	13508	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 35 65 34 34 38 39 64 2d 61 30 31 65 2d 30 30 34 35 2d 34 35 64 30 2d 63 62 31 66 32 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 39 2e 33 37 39 30 34 31 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:05e4489d-a01e-0045-45d0-cb1f22000000Time:2023-08-10T21:19:39.3790415Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
289	192.168.2.3	50155	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:39 UTC	13502	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/assistancepanel.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:39 UTC	13508	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:38 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=146886513553920607409147011017358903461"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: d324d64c-f01e-0048-3dd0-cbd7f6000000 Content-Length: 215 Connection: close
2023-08-10 21:19:39 UTC	13509	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 64 33 32 34 64 36 34 63 2d 66 30 31 65 2d 30 30 34 38 2d 33 64 64 30 2d 63 62 64 37 66 36 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 39 2e 35 38 31 33 36 31 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:d324d64c-f01e-0048-3dd0-cbd7f6000000Time:2023-08-10T21:19:39.5813617Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.3	49826	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:58 UTC	1697	OUT	GET /static/webpack/production/3ee69373c43503423dee.hQ390ZRL-Hgo8uZZODlkclJcvKXLvy33mubixfvo22U.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:59 UTC	1701	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 21869 Connection: close Date: Thu, 10 Aug 2023 21:19:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:18 GMT ETag: "b0363e551626c07ee9ee81eba4b59918" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 6678c1810851ff197cbe3fe4c41e86a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: dUB9DPaQEO3A6y9XNPQaVGAsG8VIHIdQe0SDT8RzslHp3Pr5TSN6Gg==
2023-08-10 21:18:59 UTC	1701	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 7d 7b 9f da c8 b1 e8 ff 7c 0a 46 67 cf 44 32 02 c3 3c fc 10 96 c9 ac 67 36 f1 c9 ae c7 67 ec 64 93 10 32 2b 44 03 da 11 12 91 c4 0c 04 74 3f fb ad aa 7e 4a 80 ed 3d e7 de df ae 07 a9 d5 cf ea ea 7a 74 57 57 d9 4f 51 32 49 9f 3a f7 f7 3f de 5e 5d 5f 7d ff e3 0d 3d dc 5c df bf fb e3 9f 3f fc e9 d3 fd bd ff d5 1c bb dd 70 e4 74 96 ab 7c 6e 0f 87 d6 23 83 ec 59 fe 7f 96 c1 92 65 f7 c1 64 11 25 e6 f3 7d 3a 9d de 3f 46 ec e9 3e 4d e2 8d f8 32 86 26 58 26 5f 56 c9 24 66 e2 25 8c d3 d5 e4 7e 92 86 b2 c2 49 90 cf c7 ff 87 bd ea 85 af c7 dd c0 1a b9 db 46 af 7b d1 f3 a6 ab 24 2c a2 34 b1 99 5b b8 89 b3 b5 56 39 6b e6 45 16 85 85 d5 7f 0c b2 66 e6 27 f6 f9 d9 0b c7 8d e0 e1 b2 fb d2 71 53 4a 79 e9 f4 65 d9 66 60 33 67 1b 4d ed c7 34 Data Ascii: }{\|FgD2<g6gd2+Dt?~J=ztWWOQ2I:?^]_}=\?pt\|n#Yed%}:?F>M2&X&_V$f%~IF{$,4[V9kEf'qSJyef`3gM4
2023-08-10 21:18:59 UTC	1703	IN	Data Raw: 14 a5 8d 99 de 49 88 38 fd 05 41 f5 33 10 09 64 de 0d 78 9f b0 69 b0 8a 0b be 16 b7 0a 78 9e 35 89 1e 2d d7 04 a0 77 50 f0 c2 b5 1d f8 8b d2 05 b1 f5 7c 4f 6c ad 2c 3a 2e f2 70 61 f4 04 84 51 40 c4 dd ce 02 f1 98 4d a3 04 e4 c8 13 1f a9 57 3a 6d e6 2c 9e 82 e4 07 7f 77 3b 2e ae c3 3c ff 20 6a d2 74 0e e7 22 de 34 a0 03 80 a9 9f a3 05 4b 57 15 2a 24 67 01 84 dd 14 30 95 e8 b4 ce 09 44 26 c8 66 2b 04 1c 08 a7 61 0c b3 2a be 38 25 af f2 3d ce 2c 80 fb 1b ea 94 59 0f 54 2a 3f 21 e5 84 65 62 b4 e3 8b d7 fd 76 00 58 08 1d a4 4a 39 b3 1d 43 f2 4b 39 0d 20 54 bd 8f 26 3e e3 0b f7 9e 2a fa 01 d8 40 99 1a 00 5a 25 19 9b fa 66 0a be 1b c3 29 fb e6 47 6a ce fc dc a8 54 ce 47 9b b9 b2 71 82 13 4b b2 34 8e 6b 24 ca 1c 25 10 23 c8 1b 33 f1 fa 7e 02 62 7d 25 05 fa 0c f5 Data Ascii: I8A3dxix5-wP\|Ol,:.paQ@MW:m,w;.< jt"4KW$g0D&f+a8%=,YT?!ebvXJ9CK9 T&>@Z%f)GjTGqK4k$%#3~b}%
2023-08-10 21:18:59 UTC	1709	IN	Data Raw: 0b d1 ec 57 71 c9 a0 c3 b7 93 7e 84 b2 ce 20 f5 ba 8e f3 7c da 59 83 46 87 e6 47 e9 d2 ac 2f 97 f5 85 c7 eb 0b 45 7d 9f d3 a5 33 c8 45 75 1b 50 ff 62 31 b5 58 f9 13 fa 9a e0 53 09 1f 25 e1 d8 f2 73 8a 8d cb 3f 79 4f b4 0f 3b 17 1b d8 8b d6 46 ee 60 cf 5b 4f 7c 6b 76 e1 ae e1 df 06 e4 70 3d 65 6b bd 28 6c 9b 38 75 4d 40 f0 b4 15 bf 92 0a 74 4a dd 84 59 57 7c 63 30 2a 9a 89 6d 83 53 73 04 9d 27 ed f3 f0 c5 55 a6 7a 9e 61 b6 57 7a db 4a fe 65 30 63 7f bd 25 60 55 0a 60 fa df 78 ba 31 ac 2b a3 f5 27 1b 07 e9 f0 f9 c6 6e 19 6d eb 12 0f 52 58 6e 48 eb 90 18 16 9a 1b f9 6b fc 49 7d c4 ed 93 2e c8 bc d1 9a f8 a8 9f b8 62 1d e6 be d9 d3 ae d1 bb 6e 29 90 31 44 f2 d1 05 d0 43 0a 1e 7d 03 21 cf 88 70 af 69 33 cd c7 4b 18 9c 16 a1 8b 00 9b ef 1f 44 0e a2 77 ee df d8 Data Ascii: Wq~ \|YFG/E}3EuPb1XS%s?yO;F`[O\|kvp=ek(l8uM@tJYW\|c0*mSs'UzaWzJe0c%`U`x1+'nmRXnHkI}.bn)1DC}!pi3KDw
2023-08-10 21:18:59 UTC	1739	IN	Data Raw: f6 d5 34 2d 8e d7 65 75 ba 9c 82 de c4 6a e9 6f 7b 8e d6 77 f1 b0 bc 9e 81 0e cd 81 de b5 7b a6 3c 9f a0 2f 34 da 01 c1 26 17 dc ea b6 8f 6c 33 56 56 ce ab dd 2e b7 97 8e 41 3d 78 3e 7e 33 1e 12 7d e1 6a 82 ce 4b fc a2 5c 18 26 04 30 af 15 75 51 96 e9 f0 08 b5 5c 04 56 85 a1 91 a8 53 a0 bf 11 1f 04 c9 f4 09 e4 35 0b 52 c4 23 e2 56 d4 61 c9 23 92 b2 08 4a cc 1e 11 9d 22 19 b7 84 76 8c e5 4b 95 de 81 0c bf 05 90 43 9e 39 96 9c 4c a4 27 30 7a 27 af 19 f4 30 9d d2 2f bf b2 af f3 34 54 da 55 1c cb e4 9c b2 b2 45 54 d0 83 10 6b 2a 15 8b b4 5b a8 bf 92 1e ab 2a f6 4f 6d 86 23 1c 1c 2a 08 c0 3b 6a ee 2f 6a f4 16 c0 8c e1 ac 65 e6 66 c4 29 6e be 5a 22 c5 27 72 8b 3d 0f 9f 26 e6 1c c8 4b 96 16 b6 13 ce 27 51 f6 6d ad 50 d6 43 6d 40 35 ab 45 90 3f ec 37 d2 ec 82 0c Data Ascii: 4-eujo{w{</4&l3VV.A=x>~3}jK\&0uQ\VS5R#Va#J"vKC9L'0z'0/4TUETk[Om#*;j/jef)nZ"'r=&K'QmPCm@5E?7

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
290	192.168.2.3	50157	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:39 UTC	13503	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/conciergehelper.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:39 UTC	13512	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:39 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=181381184759255358744042802516527493151"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 64dfc3a6-501e-0051-33d0-cb574d000000 Content-Length: 215 Connection: close
2023-08-10 21:19:39 UTC	13513	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 36 34 64 66 63 33 61 36 2d 35 30 31 65 2d 30 30 35 31 2d 33 33 64 30 2d 63 62 35 37 34 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 39 2e 38 30 34 31 37 36 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:64dfc3a6-501e-0051-33d0-cb574d000000Time:2023-08-10T21:19:39.8041765Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
291	192.168.2.3	50158	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:39 UTC	13504	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/adoption.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:39 UTC	13511	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:39 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1131719208315762699814438905561106479760"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 23122bea-001e-0063-46d0-cb573a000000 Content-Length: 215 Connection: close
2023-08-10 21:19:39 UTC	13512	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 32 33 31 32 32 62 65 61 2d 30 30 31 65 2d 30 30 36 33 2d 34 36 64 30 2d 63 62 35 37 33 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 33 39 2e 38 30 34 37 31 32 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:23122bea-001e-0063-46d0-cb573a000000Time:2023-08-10T21:19:39.8047124Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
292	192.168.2.3	50156	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:39 UTC	13509	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
2023-08-10 21:19:40 UTC	13513	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000 content-length: 113440 Content-Type: application/x-javascript Content-Encoding: gzip Content-MD5: SxsaXa39nTRc5WmIHM+/cw== Last-Modified: Thu, 26 Jan 2023 00:32:56 GMT ETag: 0x8DAFF34DE8E0647 X-Cache: TCP_REMOTE_HIT x-ms-request-id: 2a3f9787-b01e-0084-5596-cbcc2e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * X-Azure-Ref-OriginShield: 0bFTVZAAAAAA8gy4wH6MeTKHfwE4qt6XWRE0yQUExMDkxMjA4MDI1ADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== X-Azure-Ref: 0a1TVZAAAAABxqBTQANYrRp4E7sfo2+nkQ0gxQUEyMDIwNjA4MDUzADM5YTEyZjdlLTg5OWYtNDZjZi1hNmQwLTI0YmJiYTI3ZDk1Ng== Date: Thu, 10 Aug 2023 21:19:39 GMT Connection: close Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:19:40 UTC	13515	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 79 7f db 38 b2 28 fa ff fd 14 b6 a6 c7 11 db b4 2c 6a 97 6d c6 e3 78 e9 64 a6 bb 93 93 a5 e7 cc c8 ea 0c 45 41 12 db 14 29 93 94 97 c4 9e cf fe aa 0a 3b 29 67 39 e7 9e 7b df ef bd cc 34 4d 14 0a 85 42 01 28 14 0a 05 6a ff c7 ed ff b5 f5 e3 d6 de b7 ff db 7a f7 fe e4 ed fb ad d7 17 5b ef 5f be 7a 7b b6 f5 06 52 ff d8 fa f5 f5 fb 57 a7 e7 df 4e 07 2b c5 ff de 2f a2 7c 6b 16 c5 6c 0b fe 4e 82 9c 4d b7 d2 64 2b cd b6 a2 24 4c b3 55 9a 05 05 cb b7 96 f0 cc a2 20 de 9a 65 e9 72 ab 58 b0 ad 55 96 fe c1 c2 22 df 8a a3 bc 80 42 13 16 a7 b7 5b 75 20 97 4d b7 de 04 59 71 bf f5 ea 8d d3 00 fa 0c a8 45 f3 28 81 d2 61 ba ba 87 f7 45 b1 95 a4 45 14 b2 ad 20 99 12 b5 18 12 49 ce b6 d6 c9 94 65 5b b7 8b 28 5c 6c fd 12 85 59 9a a7 b3 62 Data Ascii: y8(,jmxdEA);)g9{4MB(jz[_z{RWN+/\|klNMd+$LU erXU"B[u MYqE(aEE Ie[(\lYb
2023-08-10 21:19:40 UTC	13529	IN	Data Raw: 66 30 6d 5c 6a 9e 08 90 79 a9 59 a2 a9 4e 43 ba 6f 99 9d 2d 97 80 2e b9 5e 32 f1 c1 62 f2 ba bc 3d ff c9 48 6c 3c d0 98 18 39 d5 ef 8d 19 b9 1f 56 95 7c fe 1d c5 cc 8a 63 27 1e ac 38 76 6a 58 59 f1 d2 d8 d2 97 d8 a9 25 46 90 3a e9 21 23 48 9d 76 de 99 11 a4 4e 26 66 66 05 a9 23 8d b7 22 90 0d 56 09 5e 42 26 05 81 54 5d d6 24 dd 47 81 b5 1b ae 3e 0d 55 66 e9 ee 13 4d e3 8a 53 ba 65 a1 57 a0 56 08 bb 8d 5b 0e fa a5 af 1e eb 0a cc fb 4f 6d 59 b0 74 01 4a f1 ba f1 06 54 5f e7 56 af 40 d1 56 57 e5 56 6e a5 74 ab b9 92 4d d5 8a 8b 4a 4f 1b 57 89 8c 18 4b 2e 7f 23 4f c5 54 f2 9e c4 9c ea 45 a8 8e 99 55 be 9f 14 ca cc 0d 17 9b 86 32 af 72 6f 69 a8 da 5c be 9d d4 33 32 c4 ec 08 5a 06 cc 16 9d 6a 6b f5 82 52 a8 0a 6d 38 20 2c e7 49 7b a8 5d ce b0 ee 28 a9 ae d8 70 Data Ascii: f0m\jyYNCo-.^2b=Hl<9V\|c'8vjXY%F:!#HvN&ff#"V^B&T]$G>UfMSeWV[OmYtJT_V@VWVntMJOWK.#OTEU2roi\32ZjkRm8 ,I{](p
2023-08-10 21:19:40 UTC	13531	IN	Data Raw: f7 32 26 6a ea 49 d8 8d 0d 89 c2 2b fb b6 e8 40 82 4b 06 7d e5 de 61 77 76 29 3f 4e 5c b9 54 38 e4 44 8c 9f 2e e1 90 2b 1d ca c8 eb a9 d4 f2 f2 f5 db 5f f9 08 61 84 20 7e 13 e9 8e 1c 45 45 f9 f7 ec 4c e5 da 56 00 2b 1c bc 2d a1 95 40 f1 ae cc b1 a2 c4 89 2f f4 8d 28 83 39 e0 dd 45 30 81 45 db 11 e5 41 b9 23 f5 41 49 f5 81 4b 8e 60 7f ce b5 48 99 3c d0 a0 9d 62 91 ae 26 72 3c b5 69 f3 0a 10 e3 5a b7 c7 21 b2 4e ea f8 8a 71 3e e1 48 25 e3 bc 2b a0 2a f0 23 20 6f 60 91 e6 8a 03 ea 11 eb d0 9c c6 60 16 48 59 f0 af f2 bf 7f 7b 72 76 6e 02 0a cb 65 da 25 d7 90 84 69 57 33 ff 3d a8 6a b4 2d ff f2 c1 c6 60 db 49 c7 c8 51 ce ca d0 00 1a 01 b8 dc 47 b5 39 fe 56 b2 a4 26 6b 97 09 2a ac 44 d5 d8 c9 05 e4 9a 7b 9f 45 2b e3 b7 9e c5 2c 47 a0 c6 13 15 e7 6a ff 34 e5 80 Data Ascii: 2&jI+@K}awv)?N\T8D.+_a ~EELV+-@/(9E0EA#AIK`H<b&r<iZ!Nq>H%+# o``HY{rvne%iW3=j-`IQG9V&kD{E+,Gj4
2023-08-10 21:19:40 UTC	13538	IN	Data Raw: a7 bd 6f 6d 6e db 58 16 fc be bf 42 62 6c 19 30 40 f1 a1 87 23 92 20 a3 6b 3b bb ae ca b9 71 25 b9 f7 c3 21 69 1e 90 04 49 44 20 c0 00 a4 1e 16 b8 bf 7d bb 7b de 00 28 c9 3e f7 d4 dd da da 54 2c 02 83 79 f6 f4 f4 f4 f4 f4 43 5d 10 64 db 87 88 3c 72 06 f7 db ba 1f 85 cb b8 53 73 30 db 78 6c 8c f1 c0 cd aa b6 0e dc b5 71 a7 6a f4 42 48 fd b1 1b 28 1e 60 97 6b da 08 65 86 94 32 b8 45 68 a9 0a 08 5c ec a0 06 44 b6 bb c2 ad fd d8 3a 44 57 bb 2b 21 11 c2 b3 33 42 cb dd 78 0f 12 5a bd 0d 41 0c cf ce 30 10 40 fa 15 b2 19 30 c0 c7 f7 86 92 fb 7b ae 90 4c ab 9f 2d 8f 95 5c 1e ea db 13 94 9b e5 c1 8e fc 57 2e 86 15 ee 75 4e 1b ef 3c 34 88 4d 93 f9 83 9c 78 7c 51 68 33 05 c4 71 da 80 90 f6 0b 50 6c e5 ae 14 8a cd 8b b8 a5 50 78 fe af c3 ad 81 86 60 a8 69 7a 10 c7 34 Data Ascii: omnXBbl0@# k;q%!iID }{(>T,yC]d<rSs0xlqjBH(`ke2Eh\D:DW+!3BxZA0@0{L-\W.uN<4Mx\|Qh3qPlPx`iz4
2023-08-10 21:19:40 UTC	13547	IN	Data Raw: 8d c1 54 40 2b 36 a1 05 40 d0 cf 11 6c fc 31 ef 4c ac 8d 3f d4 52 9b df 02 15 48 f1 b8 e9 b7 4c 3b 39 09 fb 15 50 a8 04 a0 18 d6 cb e0 18 da 45 ca 0a a3 37 29 83 d8 cd 0f d1 19 b5 e1 8b a5 5c a6 2c 62 35 96 ae 02 cc 05 a2 33 3f e6 76 3a 1e 3c 9f 45 f2 89 50 39 bb 16 b2 3b 85 b1 d0 4c 96 af f4 bc 26 45 ae ee 96 20 21 11 c7 a0 81 9e 87 4e a2 b9 a2 1d 43 0c 8c 5e e0 6e bd aa 49 d2 cc a7 b6 03 25 ce e9 04 5d 49 ac 30 1a b5 5d ae 2f 06 1c e2 d9 2b ea 75 b7 4e 55 7b 4a 4c c4 70 6e 90 b2 73 97 39 27 78 72 ae de a8 b9 f0 38 cc d8 75 19 9c 47 82 0e 6c 43 28 f4 36 f7 3f e3 0d af 92 66 3e 4e 3e f0 6d e9 d6 aa e0 79 cd 19 0f f0 b0 38 dc d6 5b c4 e4 a6 c1 6d 90 12 db a4 ef 75 76 a7 d0 a4 80 9e 7d 70 eb 6d 9a 15 98 a3 ae 3a 2b 21 27 c9 16 0f a9 44 20 df c5 48 70 a3 81 Data Ascii: T@+6@l1L?RHL;9PE7)\,b53?v:<EP9;L&E !NC^nI%]I0]/+uNU{JLpns9'xr8uGlC(6?f>N>my8[muv}pm:+!'D Hp

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
293	192.168.2.3	50161	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:40 UTC	13550	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/commonhealthdashboard.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13570	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:40 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=362619492019732794712966762926616432854"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 0d4b1125-801e-0052-79d0-cbb629000000 Content-Length: 215 Connection: close
2023-08-10 21:19:41 UTC	13571	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 64 34 62 31 31 32 35 2d 38 30 31 65 2d 30 30 35 32 2d 37 39 64 30 2d 63 62 62 36 32 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 31 2e 32 35 33 36 33 35 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:0d4b1125-801e-0052-79d0-cbb629000000Time:2023-08-10T21:19:41.2536352Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
294	192.168.2.3	50159	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:40 UTC	13550	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/embeddedfonts.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:19:09 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:40 UTC	13552	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166129 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:40 GMT Last-Modified: Tue, 08 Aug 2023 04:19:09 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1429903873929482805714210281109360763898"}],"include_subdomains ":true} Server: ECAcc (muc/3352) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 5fa99bf2-801e-001f-414d-ca79c5000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
295	192.168.2.3	50160	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:40 UTC	13551	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/admin/css/admin.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:13:54 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:40 UTC	13553	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 165967 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:40 GMT Last-Modified: Tue, 08 Aug 2023 04:13:54 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=123895526065121278313213586919230324067"}],"include_subdomains ":true} Server: ECAcc (muc/332D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 56b2f2b1-901e-0061-774d-cae982000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
296	192.168.2.3	50162	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:40 UTC	13552	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/o365themedefault.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:22:01 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:40 UTC	13554	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 138777 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:40 GMT Last-Modified: Tue, 08 Aug 2023 04:22:01 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=231420930099468756416017222375534543253"}],"include_subdomains ":true} Server: ECAcc (muc/331A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f3223327-601e-0065-5f8d-ca6485000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
297	192.168.2.3	50163	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:40 UTC	13555	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/masterstyles15.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:19:22 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:40 UTC	13556	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166128 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:40 GMT Last-Modified: Tue, 08 Aug 2023 04:19:22 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1791885965604209052013911922296823485384"}],"include_subdomains ":true} Server: ECAcc (muc/331F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 7d23da22-f01e-003a-1f4d-cad0b9000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
298	192.168.2.3	50164	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:40 UTC	13557	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/css/masterstyles15mvc.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:19:24 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:40 UTC	13558	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166127 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:40 GMT Last-Modified: Tue, 08 Aug 2023 04:19:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=39047657329439347375206421792280936936"}],"include_subdomains ":true} Server: ECAcc (muc/3324) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 9b525339-d01e-0002-294d-ca7479000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
299	192.168.2.3	50165	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13559	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/content/css/signup16.css HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:24:56 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13560	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 138503 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:24:56 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1153579374745249889512847844724879575991"}],"include_subdomains ":true} Server: ECAcc (muc/3352) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 35bea591-c01e-0031-688d-ca2bd2000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.3	49718	162.125.248.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:53 UTC	135	OUT	GET /hstsping HTTP/1.1 Host: dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t=50aS4zgW2W1XP95GWz4lmdjP; locale=en
2023-08-10 21:18:53 UTC	135	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Dropbox-Response-Origin: local Date: Thu, 10 Aug 2023 21:18:53 GMT Server: envoy X-Dropbox-Request-Id: 41cfaf4ae83d4f5da9dd975bfb0e586a Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.3	49827	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:58 UTC	1698	OUT	GET /static/webpack/production/6e501f8b9009ee898fc6.wFEyMPzjGdp0HhzwUx04Vd1h31nD7XJiB3IVsODHoBk.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:59 UTC	1723	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 116150 Connection: close Date: Thu, 10 Aug 2023 21:19:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 10 Jul 2023 21:31:41 GMT ETag: "aec76401b3ea856665a74f68b798e8c4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 20e88007b6f5218ef5942bc3581c73b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: ez3Kc7IXNQld8L8fHuTkmUPrHStrDgnTtS0NOK_PAbcmga9yESzlcA==
2023-08-10 21:18:59 UTC	1724	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6d 77 db 46 d2 26 fc dd bf 02 d1 c9 c9 b1 36 02 07 dd 68 bc d9 eb 9d a3 28 76 98 8c 9c 64 6c 47 99 d1 dc d9 dc 34 45 9b 8c 29 52 21 29 da 4e c6 fb db b7 ae ab 1b 24 9a 64 83 b2 13 cd e4 d9 67 12 0b 00 81 aa 7e ef ea ea ea 7a b9 fb 7a 34 b9 98 be ee fc f8 e3 e9 37 c7 9f 1f 7f 76 fa 90 0f 0f 3f ff f1 a4 fb dd d7 7f 79 fa e3 8f 0f f6 42 fc f3 9f ff f8 e1 b0 73 75 3d 1f de fd c7 3f 0e 96 03 01 9f cd ff cf 55 ef 6a 30 fb b1 77 71 39 9a 34 9f 7f 9c be 78 f1 e3 72 34 78 fd e3 74 32 7e eb be 3c 97 2c 06 b3 fa c7 f5 e4 62 3c 70 3f fa e3 e9 f5 c5 8f 17 d3 7e 9d e0 45 6f 3e 7c fe 7f 5e a4 cf ab 72 30 30 07 3f 1c fd 7a 47 a9 ec de 8b eb 49 7f 31 9a 4e ee 0e 8e c6 47 8b c3 5f 0f ae e7 83 68 be 98 8d fa 8b 83 fb 8b ce ec ee f8 50 6e Data Ascii: mwF&6h(vdlG4E)R!)N$dg~zz47v?yBsu=?Uj0wq94xr4xt2~<,b<p?~Eo>\|^r00?zGI1NG_hPn
2023-08-10 21:18:59 UTC	1732	IN	Data Raw: be b3 b5 6d 7f da c6 d9 6e 1d b4 82 cc 57 94 a3 85 c7 ba bc e5 35 50 66 9a 8c 04 5d ca 1e 68 29 1d 5b a5 d2 3d 67 fc 09 12 8d 96 2b 85 8f b7 5f 84 3c 4a a1 35 b8 17 de 1d 40 25 cd 59 09 6f be c4 05 84 9e 77 f7 b1 28 b0 33 49 cb 6a 29 ac 46 c9 75 c0 3e e0 bb b4 44 62 4c 2c ac 9c 9d dc b2 9d 31 d2 4e 18 21 79 21 c3 54 3e cb 2e aa 94 57 39 39 b7 2c 1d a3 7b b1 7b c9 4a e9 5d 21 f1 aa 1a 63 b9 e5 8e a3 4c 2b a4 9e 68 35 96 f5 b9 d4 31 7a b7 1c 02 2a 1b 03 0f 33 a5 94 f5 a8 a3 aa 22 d8 e6 bf 91 80 a0 55 65 eb 59 61 d7 22 0b d0 d0 94 4b 83 d6 00 6f 57 82 6d 32 4b 93 0c 8d ac 3e 72 93 bf 30 49 be 68 e9 fa 3b 5b 7d 9f be 77 df 0b ab 2c 1d 9d 19 f4 45 4f 06 a8 36 45 e4 6e 76 20 67 32 b7 8d 34 a8 92 e6 93 dd 6a 59 09 f9 c8 b4 3e 96 71 5d 90 85 74 3b 3c 25 8b 0f c8 Data Ascii: mnW5Pf]h)[=g+_<J5@%Yow(3Ij)Fu>DbL,1N!y!T>.W99,{{J]!cL+h51z*3"UeYa"KoWm2K>r0Ih;[}w,EO6Env g24jY>q]t;<%
2023-08-10 21:18:59 UTC	1746	IN	Data Raw: a6 86 74 6d de 79 e4 6e 36 6f 66 cb 12 8c 59 40 5b 58 12 c1 d4 5e 5b 7a 7c 30 f8 17 74 b9 6e 76 79 be ee f2 66 3f b6 76 78 46 29 4c 56 36 ba bc ac bb dc 50 1b 49 95 5e af 87 59 ad f1 fb 56 f8 ce 7b 72 fc f0 eb a3 96 38 a3 34 b0 a9 81 23 1f d9 81 c0 96 41 66 2e 4c a9 14 85 58 8a f6 83 f4 cb ae 21 48 57 1a 32 26 cc 53 fb 6c 48 9e c0 c9 a6 29 ba 31 81 eb ef b2 48 e9 7c 2d a3 22 a9 4a fb 9d bc a0 63 dd c2 da 8d d0 29 9c a6 ab de 92 32 6a fc ea 31 3a 52 64 af b6 ad b1 b9 d2 aa 3a 83 a2 88 94 52 c8 11 ec 9a e0 46 f4 4c 58 de b8 22 41 11 c6 2c cc cc ec 91 11 c9 c6 90 52 1c 9a a1 e2 ea c9 88 36 df 46 3b de 46 81 b7 94 11 c9 bc dc 4e 3d 0a a4 fe 7e 79 b6 cc 95 c5 ed cd 95 f7 e0 3d b4 d5 18 07 eb a1 fb 54 60 8c e1 00 cf c8 38 a9 30 b0 a0 85 6a e0 93 1e 8f 88 fe 81 Data Ascii: tmyn6ofY@[X^[z\|0tnvyf?vxF)LV6PI^YV{r84#Af.LX!HW2&SlH)1H\|-"Jc)2j1:Rd:RFLX"A,R6F;FN=~y=T`80j
2023-08-10 21:18:59 UTC	1755	IN	Data Raw: 59 d1 df 1a ae db aa ef 49 5c fb 3b 83 13 0f 28 7d e8 42 8d d3 08 3c 6c 4e 2b fd 9c b1 17 e0 33 90 71 46 b6 e8 42 c3 e9 23 52 40 00 22 49 41 d1 85 2c af 6c 74 6b 92 0b 33 c7 a6 e5 37 82 14 08 13 63 10 48 14 62 94 1c 91 81 84 e6 8e 11 61 88 53 a0 d8 91 e1 2a cb 71 a3 60 8c 21 52 68 57 ec 94 3a f2 19 59 65 b8 8a ab b9 c7 55 85 e9 2a 01 4b a1 76 ee ea 73 8e e5 82 33 18 c1 a6 65 d2 40 dd 27 a5 17 d1 02 25 42 74 40 5e 77 f8 07 4d 6c 0a 63 ea e5 a5 d4 94 4c 21 c4 40 2d ec cd bd e3 95 09 64 91 bd d6 3a 18 d6 f9 e2 3a 1b bb d3 45 18 17 7b 43 8c 5b 5b 34 5e 77 78 bf 63 3f 33 98 9d 17 ae d4 b6 f5 92 f5 0d 0f c9 5f 6e 57 ff 18 72 79 fa 86 cd 21 30 90 e6 d7 ea d4 bd 7b ff 53 a7 f7 33 79 cc 72 6c c6 fb b1 0d 61 8f 68 1a 0c 5b 1f 53 d4 32 77 8f 56 f0 02 09 f9 3a c6 7d Data Ascii: YI\;(}B<lN+3qFB#R@"IA,ltk37cHbaSq`!RhW:YeUKvs3e@'%Bt@^wMlcL!@-d::E{C[[4^wxc?3_nWry!0{S3yrlah[S2wV:}
2023-08-10 21:18:59 UTC	1771	IN	Data Raw: 30 3c e7 fc 48 e6 9a b9 5e b3 7c 35 6d 4c 51 ec 82 6e e1 fb ae e8 b5 42 ad 77 42 b2 35 a6 31 51 f2 43 79 5c e5 69 4c 29 8d a8 08 55 29 14 62 16 96 4e 8a 37 bb de b0 66 ff 24 84 38 13 28 e8 50 c7 d4 6e 50 e3 08 80 0d 5b 2f 3f 51 1a a4 ba 7a ea 92 13 ea d5 2e 5d 48 7e e9 69 b9 f4 a4 97 bf 7c 25 06 f0 de 9b ef f7 ea d3 87 4f 52 58 8f 31 1f 55 88 62 d5 3e 73 62 80 30 a6 42 f7 af f7 f4 d6 cd 3b d9 bf 7e 79 e9 50 da b6 37 df 68 e3 f9 22 bf a4 62 69 aa a2 62 92 d6 a7 33 a9 c9 6b fd 21 c2 54 0c 10 57 21 00 6f a9 59 ec 3a 2e 73 37 a3 e8 4e da 51 d0 aa 7f ee 2a 5f 5d e0 6b 22 64 d3 be 30 06 6f 19 64 44 18 e3 db 0b de 99 a4 3e 94 be 7c 55 09 45 c5 b7 28 f0 aa 3a 47 2e 8e ad 2d 8e a3 f3 15 b1 7f f7 47 bb b6 a3 95 fe e4 5d db 65 7e 86 91 f8 99 1e b3 40 fb 3d 56 c8 67 Data Ascii: 0<H^\|5mLQnBwB51QCy\iL)U)bN7f$8(PnP[/?Qz.]H~i\|%ORX1Ub>sb0B;~yP7h"bib3k!TW!oY:.s7NQ*_]k"d0odD>\|UE(:G.-G]e~@=Vg
2023-08-10 21:18:59 UTC	1782	IN	Data Raw: 09 75 bf 90 71 79 ba 48 ac c0 aa d0 fc bc 78 79 98 be 5b 0b ce 6b ec 40 c2 45 26 13 8c c7 8f 7a d7 ef 7e 5f 8b 73 b5 d1 93 cc 9b 11 df a9 f0 cd 09 78 87 9e 80 5d de 3a af 14 87 20 5a bd 09 a5 a8 d7 a5 c1 38 75 89 cd 7a 15 b0 b8 ad e8 81 2b d2 fa ce 15 59 67 cc 5e 8f 6a bf 24 7b 7c d3 95 90 9d a6 27 ab 5c 91 bd a9 11 bd da 25 59 82 26 09 16 53 55 09 93 f4 64 ad cc 65 cf e9 f6 30 4b 7d 96 77 1e 3b 1f 91 69 ed f4 84 6d 6c e8 11 db c5 72 7a ff 09 6a 33 e4 b9 64 66 24 51 0d f2 78 97 74 9f 7c ef 77 e7 d4 f1 18 7b 3c 8a 7e cd f8 ea 16 2b d9 d2 72 e4 cb f2 fd 3b 33 bc c9 3b 38 79 a4 1a 34 77 59 40 c9 82 e1 02 63 80 03 2e cb f7 ef d8 89 f5 8e a0 4b 62 af ae fd 78 e8 30 1a 6e bf cb 4d 87 fd a5 99 fd 3e 68 e9 79 af 46 ff ef 7e 7c f4 b1 cf ea f5 d6 30 4c 93 34 ec 77 Data Ascii: uqyHxy[k@E&z~_sx]: Z8uz+Yg^j${\|'\%Y&SUde0K}w;imlrzj3df$Qxt\|w{<~+r;3;8y4wY@c.Kbx0nM>hyF~\|0L4w
2023-08-10 21:18:59 UTC	1798	IN	Data Raw: d6 b2 9e f8 81 b9 1d 72 de 6d e3 86 5d af 22 08 ba 60 6e cb 03 bb d3 34 7e d6 90 9c 1b 4f 70 58 d5 79 f5 a7 61 6c b8 47 b4 a2 3f ce 56 3a 45 0e ab 10 e5 6a 11 fd 25 7f 14 7a 0d da c8 c8 a5 b3 52 87 d6 a0 7c af 55 de 33 6f 18 08 a9 0c c5 d1 04 3e 7d 17 61 be eb 6d ee 9d f7 48 9b b3 b7 2c 3e 86 18 a7 f1 63 4f c7 7b be d5 05 2e 98 33 7f 7b 6d fb 79 91 8b 41 68 61 0c 7c 7f 94 34 41 7b 94 ee ea 3d 5b 15 aa 2b ea f2 5f ef 3e a2 62 d0 00 e1 b6 99 43 1e 67 76 9c bd c4 9b fd eb 35 ce 76 1a ff f3 da 0e c6 2b a2 39 3e 2f e8 a6 14 3a d0 61 36 08 ca a6 0d 3b 95 9f fd 8d 0c bc b0 6f 12 5a 3a 39 09 b3 21 b6 6e 36 e4 23 d4 9d 2f b9 71 88 e9 49 a8 82 7d ea 98 e9 ba 57 d6 74 40 b1 70 59 44 59 5c d0 6a aa e3 53 40 c6 93 8c 27 57 49 48 fd 03 50 9a 4a 05 7d 22 42 c7 66 0f 21 Data Ascii: rm]"`n4~OpXyalG?V:Ej%zR\|U3o>}amH,>cO{.3{myAha\|4A{=[+_>bCgv5v+9>/:a6;oZ:9!n6#/qI}Wt@pYDY\jS@'WIHPJ}"Bf!
2023-08-10 21:18:59 UTC	1814	IN	Data Raw: 56 ea 7c 12 fd f7 4e 89 36 a2 7d 27 84 0b 40 d3 8b 24 60 77 79 42 f1 55 06 13 dc ce 8f dd 32 69 fc ad e6 cc 4c ee ad af 92 24 1c 9b a6 97 9b a6 b1 e9 ec 44 50 45 83 aa e4 c5 f6 37 0f 9d 7e d1 6d f1 ee ca 2c fe c0 dc 12 b7 2f cb 71 91 a1 99 b5 df 91 44 f1 72 2f eb 9a 90 1e b1 bf b1 2c 68 db 76 ca a9 a5 6e bf 19 94 3e bc d8 3b 99 8d 5f c6 25 c8 33 97 41 df ed d1 aa 0b 7b e6 92 e2 cc c9 4c ec 94 c1 de d7 44 7f 30 5f 9b e7 fd d7 1b b7 ff 26 47 d3 ab 8a f8 a5 a5 fe 46 65 7f fa dc db db e3 db 87 be ab b2 bf dd c4 fa bf 49 e7 f6 17 4c d3 dd d6 2c 5f 37 6e 1b fb 8e 6a d8 cb 83 7b d5 ae 57 2f 75 bf c0 5b cd 3a 8e 93 8d 72 e1 8d af 67 de be 9e 2b 03 e0 f1 d6 9d f8 ff e5 55 3d f0 c7 93 18 73 de d1 33 85 97 3d d3 e5 3e b2 7c 43 1f f9 49 09 d1 8c 9e bf 7c 64 f8 fa 51 Data Ascii: V\|N6}'@$`wyBU2iL$DPE7~m,/qDr/,hvn>;_%3A{LD0_&GFeIL,_7nj{W/u[:rg+U=s3=>\|CI\|dQ
2023-08-10 21:18:59 UTC	1826	IN	Data Raw: 78 df 2a 5d f7 a2 e1 8c 1a 3f af 25 3d ce bc 55 fa 7c b1 d6 dd 8b 9a 5a ab 7d 54 d2 68 86 f3 da 0e e7 b5 21 be 59 ed ee bc 09 dd 94 9c 7d b8 21 8e f6 11 f2 2d ce 6e 70 9d 62 8e e4 87 bf 2f 5d 4a de 09 ac e2 34 cd db 54 a9 b9 1d c6 3e b7 db d1 ca ba 11 1c 14 32 c7 9d aa 77 b8 a6 34 77 eb cf c1 5b 66 a8 50 0a 5a da 37 ef 27 3f bd da 3a 5d d8 3a bf b1 55 c8 8a cf 7d 9e 7f e5 e2 cf bb ac 6f bd 38 7a a8 df fe e8 79 2c bf 76 f5 2b 0a 75 7f bf ab 64 99 f2 1b 7d fc 6f 75 f1 b9 be 7e f2 ed 84 67 65 3f 5f b8 cc a5 07 b9 52 23 ff e1 d6 de c7 b4 93 53 a9 30 c1 5d c2 69 31 85 e1 1d cc eb 42 42 82 de 03 2b 2f 60 fe b6 2d 67 51 bc d3 99 cf af b1 1e 32 ce 40 f0 26 1e a3 f8 09 d8 a0 5e 64 5c 68 32 7d 8d e7 17 b1 e7 da ae 74 8f 2b 0a 1f d2 03 d0 68 5d cd 38 43 a6 b1 58 15 Data Ascii: x*]?%=U\|Z}Th!Y}!-npb/]J4T>2w4w[fPZ7'?:]:U}o8zy,v+ud}ou~ge?_R#S0]i1BB+/`-gQ2@&^d\h2}t+h]8CX
2023-08-10 21:18:59 UTC	1842	IN	Data Raw: 25 46 39 81 4e 28 3b 8a 1f 0a 53 88 b6 9f 90 cd 2a 61 0c 02 16 24 59 24 a2 ad 60 8e 4f 22 2c eb 92 e8 22 27 3c 4e 8a 58 5e 78 bc 01 99 14 f4 13 69 b8 81 e0 17 b2 c6 6e 56 da 88 e3 f6 37 e8 14 52 fd 50 16 86 7e c0 fd 86 87 b7 d2 3b f3 22 20 63 85 4f 02 6e 04 f5 18 97 4e b4 94 75 21 0e d9 4c ac a5 53 d3 f3 4f ff 0b 3b 47 14 58 05 05 d8 32 b1 4b c7 d1 6c 20 00 b8 1b f9 04 d4 f1 31 f2 62 bb 9d f8 f0 ca 4d fc 7a f7 eb fb 39 3c 7c 87 12 c3 24 2a 57 b0 c2 50 2f a6 00 a3 a0 36 44 fe b1 d8 49 64 31 4f 30 16 25 49 4d 73 05 4c a1 50 88 00 7c 2a d5 0a 28 c1 9d b0 d7 fa 10 f8 69 94 bc 07 c1 26 c8 0d a9 05 e3 da 37 00 fb 72 e2 fe 00 52 8b 1b 37 5f 00 18 c9 4e 00 cc 22 06 fe 93 3b 2b e2 9e 59 8e e6 71 6c 23 a9 16 f4 e1 b1 81 2a c1 a8 21 47 bb d7 8f a8 f9 c2 a6 37 0e 53 Data Ascii: %F9N(;Sa$Y$`O","'<NX^xinV7RP~;" cOnNu!LSO;GX2Kl 1bMz9<\|$WP/6DId1O0%IMsLP\|(i&7rR7_N";+Yql#!G7S

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
300	192.168.2.3	50168	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13561	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/microsoftajaxcombined.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:19:07 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13567	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166125 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:19:07 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=177301347301350543865455575333719474607"}],"include_subdomains ":true} Server: ECAcc (muc/330C) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 5458febe-a01e-0008-524d-cad0ce000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
301	192.168.2.3	50166	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13561	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/jquery/jquery-1_10_2_min.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:18:52 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13563	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166130 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:18:52 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=741363743961776525918044687573354120245"}],"include_subdomains ":true} Server: ECAcc (muc/3363) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 38f0f056-301e-0047-224d-caa19a000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
302	192.168.2.3	50169	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13562	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/headbundle.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:13:19 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13564	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166128 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:13:19 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=56364283434556612122420678155457684920"}],"include_subdomains ":true} Server: ECAcc (muc/3307) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 27ebc9e7-a01e-0018-244d-ca15a6000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
303	192.168.2.3	50167	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13563	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/controlbundle.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:13:20 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13565	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 166127 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:13:20 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=436246727985282410113138879564685793232"}],"include_subdomains ":true} Server: ECAcc (muc/3315) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f3b59db1-701e-000b-124d-ca31aa000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
304	192.168.2.3	50170	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13566	OUT	GET /shell/images/signup_ms_logo.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13594	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:41 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=376012593381163838510327327401689643471"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 7a709588-b01e-0059-69d0-cb4d42000000 Content-Length: 223 Connection: close
2023-08-10 21:19:41 UTC	13595	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 61 37 30 39 35 38 38 2d 62 30 31 65 2d 30 30 35 39 2d 36 39 64 30 2d 63 62 34 64 34 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 31 2e 37 39 36 35 32 36 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:7a709588-b01e-0059-69d0-cb4d42000000Time:2023-08-10T21:19:41.7965266Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
305	192.168.2.3	50173	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13568	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/angularlib.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:13:29 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13569	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 165968 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:13:29 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=36163939092400042315533445723807767000"}],"include_subdomains ":true} Server: ECAcc (muc/3330) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 44fe62ee-301e-0057-7f4d-ca64f2000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
306	192.168.2.3	50172	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13571	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/angularextensions.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:13:34 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13572	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 165967 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:13:34 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1473287578589614990012871945460027553307"}],"include_subdomains ":true} Server: ECAcc (muc/3361) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: d5a5c385-201e-005b-494d-caf3fa000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
307	192.168.2.3	50174	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13573	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/adminbootstrap.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:13:36 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13573	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 108972 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:13:36 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1725396611687572828315006436086728709469"}],"include_subdomains ":true} Server: ECAcc (muc/332B) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f7b520f9-501e-0023-03d2-ca5002000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
308	192.168.2.3	50171	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13574	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/adminapp.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:13:49 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13575	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 108972 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:13:49 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=16525751046022071420962009415153170720"}],"include_subdomains ":true} Server: ECAcc (muc/336A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 27db58c6-601e-0065-47d2-ca6485000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
309	192.168.2.3	50177	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13576	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/mscorlib.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:22:10 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13578	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 138502 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:22:10 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=13693072233097867497619488082690732031"}],"include_subdomains ":true} Server: ECAcc (muc/3324) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: eb1f0837-f01e-002a-6b8d-ca15d1000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.3	49830	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1699	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 920 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
2023-08-10 21:18:59 UTC	1700	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 65 6b 36 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 6c 6f 61 64 5f 69 66 72 61 6d 65 5f 61 74 74 65 6d 70 74 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 39 6f 74 4e 47 38 5f 64 53 62 44 72 5f 57 4e 4b 6a 61 64 69 75 50 35 39 41 37 77 74 45 52 47 79 58 6e 43 56 30 43 34 4d 75 43 61 73 53 55 4a 38 61 36 55 37 34 72 51 44 6e 49 57 56 4a 59 52 4f 6d 6f 48 69 5f 68 33 64 44 44 6f 4f 62 5f 4e 67 73 75 77 67 61 33 50 2d 6d 63 38 76 6d 4b 39 4b 4a 6d 53 68 4e 75 37 76 67 30 6e 6b 4a 33 79 39 48 34 56 65 58 4c 7a 47 6d 77 39 73 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"DBzT6sb01xsOk7nt0qek6","event_name":{".tag":"load_iframe_attempt"},"auth_token":"cd.AD9otNG8_dSbDr_WNKjadiuP59A7wtERGyXnCV0C4MuCasSUJ8a6U74rQDnIWVJYROmoHi_h3dDDoOb_Ngsuwga3P-mc8vmK9KJmShNu7vg0nkJ3y9H4VeXLzGmw9s
2023-08-10 21:18:59 UTC	1825	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 2 X-Webkit-Csp: sandbox Content-Length: 21 Date: Thu, 10 Aug 2023 21:18:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 420b41977b7d400a9f11ac4893849f84 Connection: close
2023-08-10 21:18:59 UTC	1842	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
310	192.168.2.3	50179	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13577	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/listgrid.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:20:27 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13579	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 153711 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:20:27 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=123067511967638730266035271385633583113"}],"include_subdomains ":true} Server: ECAcc (muc/331E) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: bcd17d65-901e-004e-3c6a-cae449000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
311	192.168.2.3	50176	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13577	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/peoplepicker.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:22:11 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13580	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 138502 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:22:11 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=330799016546435541014353475450244061304"}],"include_subdomains ":true} Server: ECAcc (muc/3350) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 84a96925-f01e-003a-508d-cad0b9000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
312	192.168.2.3	50180	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13581	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/productkeycontrol.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:22:12 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13582	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 138501 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:22:12 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=46977844799176326029510625444682906433"}],"include_subdomains ":true} Server: ECAcc (muc/3363) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 20e0dc43-001e-002e-3e8d-ca98d6000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
313	192.168.2.3	50181	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13583	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/gridview.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:22:16 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13584	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 135100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:22:16 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=2435049393287455467122332972032088820"}],"include_subdomains ":true} Server: ECAcc (muc/3334) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 71df014b-c01e-0043-3395-ca2c9d000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
314	192.168.2.3	50184	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13585	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/netperf.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:25:16 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13585	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 135101 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:25:16 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=420762196527064592512859053243679214309"}],"include_subdomains ":true} Server: ECAcc (muc/330F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: e695851f-f01e-0048-5195-cad7f6000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
315	192.168.2.3	50182	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13586	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/searchbox.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:42 UTC	13598	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=194389555599828647611573968169096677882"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: a23d073a-e01e-0009-61d0-cb8f12000000 Content-Length: 215 Connection: close
2023-08-10 21:19:42 UTC	13599	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 32 33 64 30 37 33 61 2d 65 30 31 65 2d 30 30 30 39 2d 36 31 64 30 2d 63 62 38 66 31 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 32 2e 33 31 36 35 35 33 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:a23d073a-e01e-0009-61d0-cb8f12000000Time:2023-08-10T21:19:42.3165532Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
316	192.168.2.3	50183	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13587	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/passwordstrengthmeter.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:22:15 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13588	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 135100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:22:15 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=172837019738175149876013265817202542"}],"include_subdomains ":true} Server: ECAcc (muc/336F) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 2b681f81-701e-0034-3e95-caf909000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
317	192.168.2.3	50185	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13589	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/jsc/hipcontrol.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:13:25 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13590	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 135100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:13:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=431985601967829915613933858593375413474"}],"include_subdomains ":true} Server: ECAcc (muc/332B) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: d3c9f7e0-d01e-004f-5095-cabb95000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
318	192.168.2.3	50186	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13589	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/webcontrols/js/geminiwizard.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:22:14 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13591	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 135100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:22:14 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=30877287517712938967571042086355605668"}],"include_subdomains ":true} Server: ECAcc (muc/3329) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: eb495b3c-f01e-002a-6195-ca15d1000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
319	192.168.2.3	50187	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13592	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/webuivalidation.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" If-Modified-Since: Tue, 08 Aug 2023 04:22:13 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:41 UTC	13593	IN	HTTP/1.1 304 Not Modified Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 163732 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Date: Thu, 10 Aug 2023 21:19:41 GMT Last-Modified: Tue, 08 Aug 2023 04:22:13 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=118743247220950862552976368623500412728"}],"include_subdomains ":true} Server: ECAcc (muc/3323) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 081b3e8f-501e-0051-1953-ca574d000000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.3	49829	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1718	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 835 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
2023-08-10 21:18:59 UTC	1719	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 65 6b 36 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 6c 6f 61 64 69 6e 67 5f 73 63 72 65 65 6e 5f 65 6e 64 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 39 6f 74 4e 47 38 5f 64 53 62 44 72 5f 57 4e 4b 6a 61 64 69 75 50 35 39 41 37 77 74 45 52 47 79 58 6e 43 56 30 43 34 4d 75 43 61 73 53 55 4a 38 61 36 55 37 34 72 51 44 6e 49 57 56 4a 59 52 4f 6d 6f 48 69 5f 68 33 64 44 44 6f 4f 62 5f 4e 67 73 75 77 67 61 33 50 2d 6d 63 38 76 6d 4b 39 4b 4a 6d 53 68 4e 75 37 76 67 30 6e 6b 4a 33 79 39 48 34 56 65 58 4c 7a 47 6d 77 39 73 6e Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"DBzT6sb01xsOk7nt0qek6","event_name":{".tag":"loading_screen_end"},"auth_token":"cd.AD9otNG8_dSbDr_WNKjadiuP59A7wtERGyXnCV0C4MuCasSUJ8a6U74rQDnIWVJYROmoHi_h3dDDoOb_Ngsuwga3P-mc8vmK9KJmShNu7vg0nkJ3y9H4VeXLzGmw9sn
2023-08-10 21:18:59 UTC	1824	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 2 X-Webkit-Csp: sandbox Content-Length: 21 Date: Thu, 10 Aug 2023 21:18:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b79e53e9c19f4f0d914877e657a5fc0b Connection: close
2023-08-10 21:18:59 UTC	1825	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
320	192.168.2.3	50189	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:41 UTC	13593	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/webtrends.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:42 UTC	13600	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:41 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=148330039305914340341024985362411965007"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 0647d9ca-301e-0047-1ad0-cba19a000000 Content-Length: 215 Connection: close
2023-08-10 21:19:42 UTC	13601	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 36 34 37 64 39 63 61 2d 33 30 31 65 2d 30 30 34 37 2d 31 61 64 30 2d 63 62 61 31 39 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 32 2e 34 31 30 34 31 30 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:0647d9ca-301e-0047-1ad0-cba19a000000Time:2023-08-10T21:19:42.4104101Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
321	192.168.2.3	50193	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:42 UTC	13596	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/webtrendsstream.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:42 UTC	13605	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:41 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=644153258519584853110440696072229081039"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 67cd2dc1-901e-0071-71d0-cb2cea000000 Content-Length: 215 Connection: close
2023-08-10 21:19:42 UTC	13606	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 36 37 63 64 32 64 63 31 2d 39 30 31 65 2d 30 30 37 31 2d 37 31 64 30 2d 63 62 32 63 65 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 32 2e 36 30 34 36 34 30 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:67cd2dc1-901e-0071-71d0-cb2cea000000Time:2023-08-10T21:19:42.6046400Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
322	192.168.2.3	50191	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:42 UTC	13596	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/home.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:42 UTC	13602	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:41 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=75457842939975832458343697236878684097"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 067654ec-e01e-0019-4fd0-cb4a7a000000 Content-Length: 215 Connection: close
2023-08-10 21:19:42 UTC	13603	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 36 37 36 35 34 65 63 2d 65 30 31 65 2d 30 30 31 39 2d 34 66 64 30 2d 63 62 34 61 37 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 32 2e 36 30 32 38 38 37 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:067654ec-e01e-0019-4fd0-cb4a7a000000Time:2023-08-10T21:19:42.6028877Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
323	192.168.2.3	50190	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:42 UTC	13597	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/reporting.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:42 UTC	13604	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:41 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=9154538256833674005521420822433846622"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: e876bfe0-b01e-0014-23d0-cb82ae000000 Content-Length: 215 Connection: close
2023-08-10 21:19:42 UTC	13605	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 38 37 36 62 66 65 30 2d 62 30 31 65 2d 30 30 31 34 2d 32 33 64 30 2d 63 62 38 32 61 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 32 2e 36 30 32 36 34 31 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:e876bfe0-b01e-0014-23d0-cb82ae000000Time:2023-08-10T21:19:42.6026412Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
324	192.168.2.3	50192	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:42 UTC	13597	OUT	GET /admincenter/admin-pkg/2023.8.3.2/en/js/assistancepanel.js HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:42 UTC	13603	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=608935317875853382111676144767850920372"}],"include_subdomains ":true} Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 4d4796e7-701e-0079-66d0-cb36e5000000 Content-Length: 215 Connection: close
2023-08-10 21:19:42 UTC	13604	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 42 6c 6f 62 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 62 6c 6f 62 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 34 64 34 37 39 36 65 37 2d 37 30 31 65 2d 30 30 37 39 2d 36 36 64 30 2d 63 62 33 36 65 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 32 2e 36 30 35 38 35 31 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist.RequestId:4d4796e7-701e-0079-66d0-cb36e5000000Time:2023-08-10T21:19:42.6058510Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
325	192.168.2.3	50197	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:42 UTC	13599	OUT	GET /shell/images/o365_gallatin_logo.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:43 UTC	13614	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1114080118403704017615322268366155391588"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 77abfe8b-901e-0061-55d0-cbe982000000 Content-Length: 223 Connection: close
2023-08-10 21:19:43 UTC	13615	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 37 61 62 66 65 38 62 2d 39 30 31 65 2d 30 30 36 31 2d 35 35 64 30 2d 63 62 65 39 38 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 33 2e 30 39 31 31 34 33 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:77abfe8b-901e-0061-55d0-cbe982000000Time:2023-08-10T21:19:43.0911436Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
326	192.168.2.3	50198	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:42 UTC	13601	OUT	GET /images/backgrounds/image1.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:43 UTC	13615	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=858768634534424297516367698004533451206"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 1f2e9455-d01e-003d-04d0-cbbcda000000 Content-Length: 223 Connection: close
2023-08-10 21:19:43 UTC	13616	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 31 66 32 65 39 34 35 35 2d 64 30 31 65 2d 30 30 33 64 2d 30 34 64 30 2d 63 62 62 63 64 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 33 2e 31 33 38 31 38 38 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:1f2e9455-d01e-003d-04d0-cbbcda000000Time:2023-08-10T21:19:43.1381886Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
327	192.168.2.3	50199	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:42 UTC	13607	OUT	GET /images/scrollbar/arrow_staticup_16.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:43 UTC	13618	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1825090435027996608310472459127063421394"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 40312c5c-901e-0013-29d0-cbeecd000000 Content-Length: 223 Connection: close
2023-08-10 21:19:43 UTC	13619	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 34 30 33 31 32 63 35 63 2d 39 30 31 65 2d 30 30 31 33 2d 32 39 64 30 2d 63 62 65 65 63 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 33 2e 33 39 32 35 37 36 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:40312c5c-901e-0013-29d0-cbeecd000000Time:2023-08-10T21:19:43.3925764Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
328	192.168.2.3	50202	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:42 UTC	13607	OUT	GET /images/scrollbar/arrow_staticdown_16.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:43 UTC	13619	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=4894841051015313067707271027429431680"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 06877e42-601e-004a-3ed0-cb694e000000 Content-Length: 223 Connection: close
2023-08-10 21:19:43 UTC	13620	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 36 38 37 37 65 34 32 2d 36 30 31 65 2d 30 30 34 61 2d 33 65 64 30 2d 63 62 36 39 34 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 33 2e 34 32 30 31 36 36 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:06877e42-601e-004a-3ed0-cb694e000000Time:2023-08-10T21:19:43.4201664Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
329	192.168.2.3	50201	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:42 UTC	13608	OUT	GET /images/webcontrols.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:43 UTC	13620	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1361153646783415010150968368741904910"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 9425b667-601e-0075-28d0-cba1ed000000 Content-Length: 223 Connection: close
2023-08-10 21:19:43 UTC	13621	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 39 34 32 35 62 36 36 37 2d 36 30 31 65 2d 30 30 37 35 2d 32 38 64 30 2d 63 62 61 31 65 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 33 2e 34 33 31 35 37 38 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:9425b667-601e-0075-28d0-cba1ed000000Time:2023-08-10T21:19:43.4315784Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.3	49832	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1720	OUT	GET /static/webpack/production/ce3721cd78168aca8dff.TOBxGySy4L8Jev4cz1MMkll3TM-ZkPmz6kB0Q7cRP8c.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:59 UTC	1852	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 65210 Connection: close Date: Thu, 10 Aug 2023 21:19:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:06 GMT ETag: "c30a969fcf7b3398f8a4d7eaa4063148" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 478446fb4d72a1fd99b9a7a5157265f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: hkLQ3sJiMD4e3Ugip7q8FKGhuGxNK31bYrM9tuPZ1afxgoxm1nhwvg==
2023-08-10 21:18:59 UTC	1853	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd fd 77 e3 36 92 28 fa bb fe 0a 5b 77 ae 57 9a a6 15 51 fc 96 86 f1 76 bb 9d 9d be 93 4e e7 b5 3b 93 dd e7 f1 71 68 89 b6 b9 91 49 2d 49 d9 ed 91 b5 7f fb ab 2a 7c 15 29 ca dd 99 99 bd 7b df 39 37 7d 62 40 20 80 42 a1 0a 85 42 a1 00 0c 1e b3 7c 51 3c 8e ae ae be ff f0 fa ed eb 37 df 9f 51 e4 ec ed d5 e9 1f 7f fa e1 4f e7 57 57 f1 17 73 3c 3f 5f 5c 0e 47 ab 75 75 37 b8 b8 e8 3f a4 90 bd ac fe 73 95 ac d2 f2 2a 59 dc 67 39 8f 5f 15 37 37 57 0f 59 fa 78 55 e4 cb 27 f9 e5 1a 40 a4 a5 fa b1 ce 17 cb 54 fe 98 2f 8b f5 e2 6a 51 cc 55 85 8b a4 ba bb fe 4f 77 ee 27 be 7f 7d d3 bf b4 36 3d 7b ec 04 d3 9b 75 3e af b3 22 1f a4 56 6d e5 c3 4d 3a 4a 3f af 8a b2 ae 8e 8e 06 3a 1e eb 5c c3 cd 43 52 1e a4 b1 63 d5 b1 6b e5 b1 3d b1 ca d8 Data Ascii: w6([wWQvN;qhI-I\|){97}b@ BB\|Q<7QOWWs<?_\Guu7?sYg9_77WYxU'@T/jQUOw'}6={u>"VmM:J?:\CRck=
2023-08-10 21:18:59 UTC	1885	IN	Data Raw: 82 8d 75 05 c8 2c eb 0b a2 8e 31 ca d0 62 6c b6 bd 54 b2 ad 71 9b 5f d7 00 5f e2 34 69 bc 25 a0 a8 51 c4 7b db 41 31 d2 b3 04 9a 36 11 16 ea 0c 15 3a 06 d0 c5 95 6b 8d d9 75 51 2c 81 59 3e aa 93 32 62 47 cf 7c af ee 92 55 3a d8 a8 0b 22 cd 07 a1 f1 a9 2b 29 77 3e c0 aa b5 35 82 79 a5 b0 58 cc 6f bb 6e c8 dc c9 b3 7b 37 e6 4e 96 79 c7 27 c0 fd c3 0d e2 3c b8 d8 c9 bf 83 dc 75 52 ed 56 cb 3b a5 97 e8 2b 3f 5f ca c6 86 c7 4b f9 b6 c3 cb e1 ee 55 9e ff 3f 6a 7b a2 79 93 65 55 0b 18 50 7b 6e 54 e2 b0 71 5b aa c9 8b ac dc be 59 b5 f5 b5 d7 ba bf d4 7c 06 75 f3 3a 2d e9 e6 d7 3f 66 8b 14 06 4a 8b 9d f7 5d e6 da 99 ab eb 3a d8 ce 8c 1f 69 78 99 4a db ad a6 ac bd e6 dc d9 46 8a 6e ab dd 19 42 e8 1e ba 9b 4a 3e 7f bb bc ce 2f ba dd f9 da 40 e9 ac 9a b7 9b 27 99 0e Data Ascii: u,1blTq__4i%Q{A16:kuQ,Y>2bG\|U:"+)w>5yXon{7Ny'<uRV;+?_KU?j{yeUP{nTq[Y\|u:-?fJ]:ixJFnBJ>/@'
2023-08-10 21:18:59 UTC	1901	IN	Data Raw: f9 a3 1b ad db 39 2c ff 32 04 ae 7d 59 4e eb 46 e4 f6 c9 9e 1b 95 a0 4b ea 40 25 00 34 85 4d 0a 47 53 30 19 d8 a0 a5 17 14 eb a1 5c 2d c2 92 52 68 cb 9d 8c a4 1a f1 9c 2e ac 74 5d 9f 86 dd 5b b6 8f 57 5f d5 94 36 8c d3 1e a0 e9 7b 2e 42 fc da ee b6 58 6a 5b 80 fc 20 36 f3 10 4a da 20 11 4c 15 0a 1c b4 d5 52 d0 46 68 a6 52 24 6a 71 00 c8 de 3a a5 04 46 c3 33 4b 2b 01 10 dc a9 38 43 90 c2 74 71 4c 09 f3 d2 ea f0 10 a2 64 da 50 1b 56 39 a0 99 92 11 65 b0 d7 5e 91 24 03 bb 18 90 ff ca fb bb 1a 79 78 71 f1 de de e6 57 e2 58 d3 40 59 20 c4 a8 8b 6b 66 0f 10 02 43 68 6e 48 84 5e 9a 31 f7 e6 28 68 c2 86 c0 c3 31 88 3b e5 14 20 53 4e 4a fe ba a6 cd 00 72 61 0e f9 74 53 38 7c 41 1a f2 5c dc 5d a6 df 04 11 2d 55 6d da 4d 9d 3a 48 1e a3 30 03 80 f7 eb a6 d2 17 96 ef Data Ascii: 9,2}YNFK@%4MGS0\-Rh.t][W_6{.BXj[ 6J LRFhR$jq:F3K+8CtqLdPV9e^$yxqWX@Y kfChnH^1(h1; SNJratS8\|A\]-UmM:H0
2023-08-10 21:18:59 UTC	1902	IN	Data Raw: d8 97 e0 f1 e6 ce f1 be f0 39 7a 99 92 96 7c c0 3b 4a 47 a0 8e 62 4b 98 49 d6 6d c3 b0 0b ae ea f1 76 70 7a bd d3 b2 0d 7e b5 53 fb 6e 73 a7 c3 c0 9f 0b bb 1d 28 22 2c 88 fa 0c 3a 66 a3 73 47 61 ea 90 61 ff 85 1b 2b 26 52 5c 07 eb 31 03 ef 84 c4 86 65 d1 31 dc 74 85 1a 54 86 19 d2 61 9b 61 b5 cf 65 6a 43 26 42 d7 8d da 52 ce a2 04 8f d7 cf 7b e1 a9 db c3 2b 89 8e 03 d2 90 99 bd 37 f4 cc 4e b7 e1 72 6b 8e 2b 60 ba fa dc cd ff 5d 22 d6 03 21 09 f7 37 74 9f 17 10 74 0b cf 4e 15 5c e1 0e 5e b5 f3 2b a2 5a 5c 7f 37 3b 2b f4 78 79 7e df 12 48 96 ba a8 2a 3b d1 0c 1c e5 dc 38 d1 ce fb e6 ca be f0 a3 c3 a5 68 de 09 90 7f 45 e8 a1 a2 4f 51 fd ca 70 a6 c4 f0 e3 f9 31 bf 05 8b 97 ff 61 ca 0a 41 0d 88 69 0c a0 0a a4 b9 80 66 58 1b 06 79 d9 46 a1 70 67 77 6d dd b2 08 Data Ascii: 9z\|;JGbKImvpz~Sns(",:fsGaa+&R\1e1tTaaejC&BR{+7Nrk+`]"!7ttN\^+Z\7;+xy~H*;8hEOQp1aAifXyFpgwm
2023-08-10 21:18:59 UTC	1918	IN	Data Raw: 52 30 04 30 d1 12 04 9d 3f 17 02 e9 1a 83 61 64 c3 bf 78 c8 f0 f5 d1 93 34 20 87 6f 95 81 e0 de 35 21 16 65 0c b8 da e5 aa 23 a1 af a8 5c 23 c0 47 c3 32 af dd 5b a5 5c 2c 37 79 e8 89 c5 02 2c 52 d8 eb 22 4f c2 bc c7 f5 1d 95 6f b8 d0 e6 cf 23 1f 17 db 99 36 80 62 2c 86 76 be 85 2d 00 6f 0d c7 e3 91 4c 9c c6 61 40 2f f5 c4 8b 51 32 f4 af 21 a9 94 65 57 f4 92 a0 c2 a7 61 bc 74 94 e3 1f f8 a4 73 0e 62 a5 a8 64 e7 7a 1a 90 32 90 b9 00 44 f5 58 ac 4a f7 89 73 13 28 42 22 6c 06 81 73 7c c2 34 7d 51 e8 18 a9 46 c8 c8 69 0e 7c 10 0b 32 3d 4e ac e9 0a 86 25 3b 50 c7 29 9c 87 f4 9c c3 92 9d b6 5b 46 d2 cf f2 3b ed 80 a1 30 64 5f 38 33 4d 46 27 4b 08 36 bb ef 18 a7 21 2c 99 fe 3c f5 db 60 83 30 26 15 21 80 1f 26 01 3a 78 7e 6b 9f 3b 86 7b 1a 87 3d b4 1b 91 1a a9 95 Data Ascii: R00?adx4 o5!e#\#G2[\,7y,R"Oo#6b,v-oLa@/Q2!eWatsbdz2DXJs(B"ls\|4}QFi\|2=N%;P)[F;0d_83MF'K6!,<`0&!&:x~k;{=
2023-08-10 21:18:59 UTC	1931	IN	Data Raw: dd f0 ea f0 6a 56 8d a5 cb 43 41 a6 2c a1 a6 f7 8d b5 25 0c c2 17 0a f6 ca df 02 3a 3c 0b e9 89 0a 47 b2 8c f4 04 64 d5 9b ee 53 04 6f d8 0c 69 00 cb 5d Data Ascii: jVCA,%:<GdSoi]
2023-08-10 21:19:00 UTC	2020	IN	Data Raw: f5 e3 09 e0 db 18 33 14 57 6a 60 71 74 6e 65 dc ae 01 65 2e 6e 36 37 01 0b aa 0f b8 d9 90 55 8d 98 d6 cf a2 25 c6 30 8c f8 1f 42 0d ae cb 36 9e 0a 3b 21 94 61 e1 29 4f 8a e2 0e 28 91 49 08 4f 7b 82 d7 6c bb 4d ff 75 30 12 6f 38 3b f1 01 6c c0 ed c0 f0 1d cf b6 ff 0b 52 c7 1c 98 cb da 99 dd 5b 00 c8 93 51 18 b9 d6 76 7b 0b be f9 9f 6d 4b c4 30 a1 e1 24 be 73 ad 71 38 18 04 18 b1 ca 1f 0c e8 59 db 2e 42 00 bb 46 d4 5f 76 ee c0 8d b6 ee c6 61 16 90 bf 68 04 64 28 a0 81 95 de ad bd 7c c5 6a 00 66 16 66 14 87 a6 38 98 91 87 48 89 c5 71 67 c9 34 4e 3f 83 be 5e f2 d0 78 98 52 6f 5b 94 a2 a5 cf 45 08 67 81 43 59 62 90 50 b7 ef a9 2d 83 53 39 ce c5 d4 f0 1e 3d 12 b7 f5 07 65 57 ec 97 12 23 e4 fd 57 de 93 73 76 d9 72 8b 35 ba fb e4 af ee de 5b 56 06 a2 bc a7 51 d1 Data Ascii: 3Wj`qtnee.n67U%0B6;!a)O(IO{lMu0o8;lR[Qv{mK0$sq8Y.BF_vahd(\|jff8Hqg4N?^xRo[EgCYbP-S9=eW#Wsvr5[VQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
330	192.168.2.3	50200	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:42 UTC	13609	OUT	GET /Images/transparent.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:43 UTC	13621	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=398691061636315408914063979537179600325"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 7ee40e6e-901e-004e-2cd0-cbe449000000 Content-Length: 226 Connection: close
2023-08-10 21:19:43 UTC	13622	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 65 65 34 30 65 36 65 2d 39 30 31 65 2d 30 30 34 65 2d 32 63 64 30 2d 63 62 65 34 34 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 33 2e 34 33 31 33 33 30 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:7ee40e6e-901e-004e-2cd0-cbe449000000Time:2023-08-10T21:19:43.4313300Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
331	192.168.2.3	50204	52.97.186.146	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:43 UTC	13609	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.microsoft365.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=9F94891D29A040C88D2106E8E34BD23A; OIDC=1
2023-08-10 21:19:43 UTC	13610	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: 5776b3a2-433c-09d0-3b5c-fed78dcc315f Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443",h3-29=":443" X-CalculatedBETarget: ZRAP278MB0141.CHEP278.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 Set-Cookie: OWAPF=v:15.20.6678.19&l:mouse; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-Version: 15.20.6678.19 X-OWA-DiagnosticsInfo: 1;0;0 X-IIDs: 0 X-BackEnd-Begin: 2023-08-10T21:19:43.051 X-BackEnd-End: 2023-08-10T21:19:43.051 X-DiagInfo: ZRAP278MB0141 X-BEServer: ZRAP278MB0141 X-UA-Compatible: IE=EmulateIE7 X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=ZRH"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: ZRH X-FEProxyInfo: ZR0P278CA0007.CHEP278.PROD.OUTLOOK.COM X-FEEFZInfo: ZRH X-FEServer: ZR0P278CA0007 Date: Thu, 10 Aug 2023 21:19:42 GMT Connection: close
2023-08-10 21:19:43 UTC	13611	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
332	192.168.2.3	50206	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:43 UTC	13616	OUT	GET /Shell/Images/header_bg_signup_office.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:43 UTC	13625	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=174147247301866075908955030587535135408"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: a84074e3-301e-0057-28d0-cb64f2000000 Content-Length: 226 Connection: close
2023-08-10 21:19:43 UTC	13626	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 61 38 34 30 37 34 65 33 2d 33 30 31 65 2d 30 30 35 37 2d 32 38 64 30 2d 63 62 36 34 66 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 33 2e 38 31 33 38 39 38 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:a84074e3-301e-0057-28d0-cb64f2000000Time:2023-08-10T21:19:43.8138980Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
333	192.168.2.3	50207	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:43 UTC	13617	OUT	GET /Shell/Images/O365SharedClusteredImage.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:43 UTC	13627	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=372562784929000559317328061958538005845"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: d0cc63a9-f01e-003a-6dd0-cbd0b9000000 Content-Length: 226 Connection: close
2023-08-10 21:19:43 UTC	13628	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 64 30 63 63 36 33 61 39 2d 66 30 31 65 2d 30 30 33 61 2d 36 64 64 30 2d 63 62 64 30 62 39 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 33 2e 39 30 36 32 35 39 34 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:d0cc63a9-f01e-003a-6dd0-cbd0b9000000Time:2023-08-10T21:19:43.9062594Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
334	192.168.2.3	50209	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:43 UTC	13623	OUT	GET /images/servicestatus.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:44 UTC	13629	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=957274904874152634810770669038864333612"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 0302d592-d01e-0060-38d0-cbb65e000000 Content-Length: 223 Connection: close
2023-08-10 21:19:44 UTC	13630	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 33 30 32 64 35 39 32 2d 64 30 31 65 2d 30 30 36 30 2d 33 38 64 30 2d 63 62 62 36 35 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 34 2e 32 33 37 37 37 37 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:0302d592-d01e-0060-38d0-cbb65e000000Time:2023-08-10T21:19:44.2377771Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
335	192.168.2.3	50210	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:43 UTC	13623	OUT	GET /Shell/Images/pagelayout_white_panel.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:44 UTC	13631	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=94724755598296925179609537895479705771"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: e58f4036-101e-000d-54d0-cb0215000000 Content-Length: 226 Connection: close
2023-08-10 21:19:44 UTC	13633	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 35 38 66 34 30 33 36 2d 31 30 31 65 2d 30 30 30 64 2d 35 34 64 30 2d 63 62 30 32 31 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 34 2e 32 35 33 39 31 37 30 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:e58f4036-101e-000d-54d0-cb0215000000Time:2023-08-10T21:19:44.2539170Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
336	192.168.2.3	50212	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:43 UTC	13624	OUT	GET /Shell/Images/pagelayout_mos_background_right.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:44 UTC	13630	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:43 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=65890132380149504771254901971966025655"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: e876c557-b01e-0014-16d0-cb82ae000000 Content-Length: 226 Connection: close
2023-08-10 21:19:44 UTC	13631	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 38 37 36 63 35 35 37 2d 62 30 31 65 2d 30 30 31 34 2d 31 36 64 30 2d 63 62 38 32 61 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 34 2e 32 35 38 37 30 39 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:e876c557-b01e-0014-16d0-cb82ae000000Time:2023-08-10T21:19:44.2587097Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
337	192.168.2.3	50211	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:43 UTC	13624	OUT	GET /Shell/Images/pagelayout_mos_background_left.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:44 UTC	13632	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1402136557248147801811925722798876340834"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 77ac03f2-901e-0061-54d0-cbe982000000 Content-Length: 226 Connection: close
2023-08-10 21:19:44 UTC	13633	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 37 61 63 30 33 66 32 2d 39 30 31 65 2d 30 30 36 31 2d 35 34 64 30 2d 63 62 65 39 38 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 34 2e 32 36 33 34 37 31 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:77ac03f2-901e-0061-54d0-cbe982000000Time:2023-08-10T21:19:44.2634711Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
338	192.168.2.3	50215	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:43 UTC	13626	OUT	GET /Shell/Images/pagelayout_nav_highlight.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:44 UTC	13636	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=54894399696050857531034571816193862756"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 06878095-601e-004a-52d0-cb694e000000 Content-Length: 226 Connection: close
2023-08-10 21:19:44 UTC	13637	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 36 38 37 38 30 39 35 2d 36 30 31 65 2d 30 30 34 61 2d 35 32 64 30 2d 63 62 36 39 34 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 34 2e 35 35 38 35 31 37 33 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:06878095-601e-004a-52d0-cb694e000000Time:2023-08-10T21:19:44.5585173Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
339	192.168.2.3	50216	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:44 UTC	13628	OUT	GET /Shell/Images/header_wizard_hl_mos.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:44 UTC	13638	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=140426719482421578022368608707007160249"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: e5205a0e-901e-0003-02d0-cb2ba5000000 Content-Length: 226 Connection: close
2023-08-10 21:19:44 UTC	13639	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 65 35 32 30 35 61 30 65 2d 39 30 31 65 2d 30 30 30 33 2d 30 32 64 30 2d 63 62 32 62 61 35 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 34 2e 36 34 31 30 34 33 32 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:e5205a0e-901e-0003-02d0-cb2ba5000000Time:2023-08-10T21:19:44.6410432Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.3	49828	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1721	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 381 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
2023-08-10 21:18:59 UTC	1722	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 35 2c 22 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 22 3a 7b 22 2e 74 61 67 22 3a 22 74 79 70 65 73 63 72 69 70 74 22 7d 7d 2c 22 74 72 69 67 67 65 72 22 3a 7b 22 2e 74 61 67 22 3a 22 74 72 69 67 67 65 72 5f 68 Data Ascii: {"scopes":[],"known_namespaces":[],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":25,"implementation":{".tag":"typescript"}},"trigger":{".tag":"trigger_h
2023-08-10 21:18:59 UTC	1842	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 1 X-Webkit-Csp: sandbox Content-Length: 137 Date: Thu, 10 Aug 2023 21:18:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 8337a1da37c74186b799650c5dd01738 Connection: close
2023-08-10 21:18:59 UTC	1842	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 5d 2c 22 73 74 6f 70 5f 70 75 62 6c 69 63 61 74 69 6f 6e 5f 66 6f 72 5f 73 65 63 6f 6e 64 73 22 3a 30 7d Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[],"stop_publication_for_seconds":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
340	192.168.2.3	50222	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:44 UTC	13634	OUT	GET /Images/list_bullet_5x5.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:45 UTC	13646	IN	HTTP/1.1 400 Bad Request Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=873018678308939487415772775067270333970"}],"include_subdomains ":true} Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: f6ff8abe-401e-003f-14d0-cb0262000000 Content-Length: 226 Connection: close
2023-08-10 21:19:45 UTC	13647	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4f 75 74 4f 66 52 61 6e 67 65 49 6e 70 75 74 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 4f 6e 65 20 6f 66 20 74 68 65 20 72 65 71 75 65 73 74 20 69 6e 70 75 74 73 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 0a 52 65 71 75 65 73 74 49 64 3a 66 36 66 66 38 61 62 65 2d 34 30 31 65 2d 30 30 33 66 2d 31 34 64 30 2d 63 62 30 32 36 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 35 2e 30 37 35 31 30 34 33 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range.RequestId:f6ff8abe-401e-003f-14d0-cb0262000000Time:2023-08-10T21:19:45.0751043Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
341	192.168.2.3	50221	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:44 UTC	13634	OUT	GET /images/spinner_16x16_metro.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:45 UTC	13647	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1678906457142425934914821213515204211056"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 52d6e231-001e-004c-50d0-cb5af1000000 Content-Length: 223 Connection: close
2023-08-10 21:19:45 UTC	13648	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 35 32 64 36 65 32 33 31 2d 30 30 31 65 2d 30 30 34 63 2d 35 30 64 30 2d 63 62 35 61 66 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 35 2e 30 38 31 33 38 31 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:52d6e231-001e-004c-50d0-cb5af1000000Time:2023-08-10T21:19:45.0813815Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
342	192.168.2.3	50224	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:44 UTC	13635	OUT	GET /images/spinner_24x24_metro.gif HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:45 UTC	13648	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=634693830453943856916036612701030230307"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 0f068fe2-401e-0000-29d0-cbcac1000000 Content-Length: 223 Connection: close
2023-08-10 21:19:45 UTC	13649	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 66 30 36 38 66 65 32 2d 34 30 31 65 2d 30 30 30 30 2d 32 39 64 30 2d 63 62 63 61 63 31 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 35 2e 30 38 30 34 34 36 35 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:0f068fe2-401e-0000-29d0-cbcac1000000Time:2023-08-10T21:19:45.0804465Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
343	192.168.2.3	50223	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:44 UTC	13635	OUT	GET /shell/images/signup_ms_logo.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:44 UTC	13637	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=144530105493469556373789793063220528837"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 7a70a18b-b01e-0059-5fd0-cb4d42000000 Content-Length: 223 Connection: close
2023-08-10 21:19:44 UTC	13638	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 61 37 30 61 31 38 62 2d 62 30 31 65 2d 30 30 35 39 2d 35 66 64 30 2d 63 62 34 64 34 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 34 2e 36 30 33 39 36 39 31 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:7a70a18b-b01e-0059-5fd0-cb4d42000000Time:2023-08-10T21:19:44.6039691Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
344	192.168.2.3	50227	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:44 UTC	13640	OUT	GET /shell/images/o365_gallatin_logo.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:44 UTC	13641	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=359661623410099397813778492908758020084"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 77ac0647-901e-0061-77d0-cbe982000000 Content-Length: 223 Connection: close
2023-08-10 21:19:44 UTC	13642	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 37 37 61 63 30 36 34 37 2d 39 30 31 65 2d 30 30 36 31 2d 37 37 64 30 2d 63 62 65 39 38 32 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 34 2e 38 35 38 31 32 39 33 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:77ac0647-901e-0061-77d0-cbe982000000Time:2023-08-10T21:19:44.8581293Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
345	192.168.2.3	50226	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:44 UTC	13640	OUT	GET /images/backgrounds/image1.jpg HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:44 UTC	13643	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=179401332733942705632763365740137206851"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 1f2e9a87-d01e-003d-6cd0-cbbcda000000 Content-Length: 223 Connection: close
2023-08-10 21:19:44 UTC	13644	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 31 66 32 65 39 61 38 37 2d 64 30 31 65 2d 30 30 33 64 2d 36 63 64 30 2d 63 62 62 63 64 61 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 34 2e 38 36 37 31 39 34 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:1f2e9a87-d01e-003d-6cd0-cbbcda000000Time:2023-08-10T21:19:44.8671946Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
346	192.168.2.3	50228	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:44 UTC	13641	OUT	GET /images/scrollbar/arrow_staticup_16.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:44 UTC	13644	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=336960516338333224111140556433247986036"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 40313047-901e-0013-3bd0-cbeecd000000 Content-Length: 223 Connection: close
2023-08-10 21:19:44 UTC	13645	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 34 30 33 31 33 30 34 37 2d 39 30 31 65 2d 30 30 31 33 2d 33 62 64 30 2d 63 62 65 65 63 64 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 34 2e 38 38 30 37 33 32 36 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:40313047-901e-0013-3bd0-cbeecd000000Time:2023-08-10T21:19:44.8807326Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
347	192.168.2.3	50229	152.199.21.175	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:45 UTC	13645	OUT	GET /images/scrollbar/arrow_staticdown_16.png HTTP/1.1 Host: res-h3.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://portal.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:45 UTC	13649	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/xml Date: Thu, 10 Aug 2023 21:19:44 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Zurich&ASN=212238&Country=CH&Region=ZH&RequestIdentifier=1202169203445008070810310636574564758866"}],"include_subdomains ":true} Server: Blob Service Version 1.0 Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-CDN-Provider: Verizon x-ms-request-id: 0687816b-601e-004a-09d0-cb694e000000 Content-Length: 223 Connection: close
2023-08-10 21:19:45 UTC	13650	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 52 65 73 6f 75 72 63 65 4e 6f 74 46 6f 75 6e 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 0a 52 65 71 75 65 73 74 49 64 3a 30 36 38 37 38 31 36 62 2d 36 30 31 65 2d 30 30 34 61 2d 30 39 64 30 2d 63 62 36 39 34 65 30 30 30 30 30 30 0a 54 69 6d 65 3a 32 30 32 33 2d 30 38 2d 31 30 54 32 31 3a 31 39 3a 34 35 2e 31 31 30 32 30 32 37 5a 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><Error><Code>ResourceNotFound</Code><Message>The specified resource does not exist.RequestId:0687816b-601e-004a-09d0-cb694e000000Time:2023-08-10T21:19:45.1102027Z</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
348	192.168.2.3	50234	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:51 UTC	13651	OUT	GET /?bgbpbtvq HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA
2023-08-10 21:20:01 UTC	13654	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Strict-Transport-Security: max-age=31536000; includeSubDomains Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin, <https://aadcdn.msauth.net>; rel=dns-prefetch, <https://aadcdn.msftauth.net>; rel=dns-prefetch P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 930a4e53-7320-4576-ae48-71c6c24f1500 x-ms-ests-server: 2.1.15984.6 - EUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+chi"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPowwP1JkfMjcNVbfQCeHns1Z9LOGlgI0L6QuoMrMiKDcBXag8QYkIr7se0A3rolIA4E_pcxSDz8c-4vO799JZE_5XTSYOjha1GNELxiRlgFcgAA; expires=Sat, 09-Sep-2023 21:19:52 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPx3MNeDf99axE4PeqP6nkSXpEmW1L9VrZE1hi_LbYDIYSevqfl1Psee0iQ7NyRDQrXCIRXFiP6kmszJM-lv6vWABR510a5Lqyhutp3kpTMW5vC5yRW_wYeLJwKsgJuZl8o-VfEbpRsCm8Vvi0RXdoQDb6G5fgyrPEodcIBgdoQ99J3Kw-tyBVk7XjoFZQRVzyxiTM1bo_p3Dq3Nrwx7GHifvhMETFaIqgC4FMESxcSZHw_lM0fwBz8FIkx6XwvsKk9_M90MSr4oAtxlAT3Ozqri9ts1hf3vZHRlPYTkMtpffb0t9wLyBEvl3LEUTag-BfcPwlGQAovyAFhBSoWzZxMUeKKeupVesOlCkraE1AzWiQ4eSOktk4GuA3d3lNgeklhh5SCztAB2BD4Tdgf79jg6wNzpDNQfpouLcpmQtt2eAgAA; domain=larationr.top; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAMAAABdS2fcDgAAAA; expires=Sat, 09-Sep-2023 21:19:52 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Thu, 10 Aug 2023 21:19:51 GMT Connection: close content-length: 36517 Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:20:01 UTC	13657	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2023-08-10 21:20:01 UTC	13670	IN	Data Raw: 6b 77 53 44 41 6f 4d 50 78 67 59 56 7a 45 43 72 51 31 32 49 39 72 73 6b 4a 78 6d 65 73 36 6a 38 4a 6a 68 5f 78 46 47 55 36 78 36 69 64 46 47 42 65 57 70 35 57 62 6c 61 64 5a 61 70 73 47 35 6c 70 6d 75 5a 71 57 42 41 52 34 2d 4a 65 56 68 37 74 34 42 77 55 6d 68 52 69 5a 5a 45 66 35 4f 31 65 36 4f 59 58 61 47 6c 6b 5a 54 6d 41 54 6d 73 44 47 64 49 71 4e 34 51 4d 62 59 77 63 37 77 79 78 32 68 67 4f 63 6a 42 74 34 47 41 5f 77 4d 76 7a 67 36 35 5f 62 64 2d 72 48 6e 6d 64 76 50 56 37 78 36 34 52 37 2d 30 55 36 35 7a 69 46 52 35 61 47 5a 67 53 35 56 46 57 6c 56 67 5a 46 47 53 61 62 2d 61 65 6e 5a 69 59 37 75 6c 64 6d 4a 37 71 56 68 42 72 6d 70 35 70 36 46 69 62 62 41 67 41 31 5c 75 30 30 32 36 66 6c 6f 77 3d 66 69 64 6f 5c 75 30 30 32 36 65 73 74 73 66 65 64 3d Data Ascii: kwSDAoMPxgYVzECrQ12I9rskJxmes6j8Jjh_xFGU6x6idFGBeWp5WbladZapsG5lpmuZqWBAR4-JeVh7t4BwUmhRiZZEf5O1e6OYXaGlkZTmATmsDGdIqN4QMbYwc7wyx2hgOcjBt4GA_wMvzg65_bd-rHnmdvPV7x64R7-0U65ziFR5aGZgS5VFWlVgZFGSab-aenZiY7uldmJ7qVhBrmp5p6FibbAgA1\u0026flow=fido\u0026estsfed=
2023-08-10 21:20:01 UTC	13686	IN	Data Raw: 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 63 61 6e 61 72 79 22 2c 70 2e 61 70 69 43 61 6e 61 72 79 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 63 6c 69 65 6e 74 2d 72 65 71 75 65 73 74 2d 69 64 22 2c 70 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 68 70 67 69 64 22 2c 70 2e 68 70 67 69 64 7c 7c 30 29 2c 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 68 70 67 61 63 74 22 2c 70 2e 68 70 67 61 63 74 7c 7c 30 29 3b 66 6f 72 28 76 61 72 20 72 3d 2d 31 2c 74 3d 30 3b 74 3c 62 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b Data Ascii: ent-Type","application/json; charset=UTF-8"),e.setRequestHeader("canary",p.apiCanary),e.setRequestHeader("client-request-id",p.correlationId),e.setRequestHeader("hpgid",p.hpgid\|\|0),e.setRequestHeader("hpgact",p.hpgact\|\|0);for(var r=-1,t=0;t<b.length;t++){

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
349	192.168.2.3	50235	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:56 UTC	13652	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_76bb127b5869a5c6b8b3.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/__//eqooqp/qcwvj2/x2.0/cwvjqtkbg?enkgpv_kf=4765445d-32e6-49d0-83g6-1f93765276ec&tgfktgev_wtk=jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hncpfkpix2&tgurqpug_varg=eqfg%20kf_vqmgp&ueqrg=qrgpkf%20rtqhkng%20jvvru%3C%2H%2Hyyy.qhhkeg.eqo%2Hx2%2HQhhkegJqog.Cnn&tgurqpug_oqfg=hqto_rquv&pqpeg=637929903776466681.A2A4AlPlQYKvPYTnOk00PYToNYGaPIGvPIOzO2TjPljoOoA1PVK3AoO5QVOvQYGaPk00AYLlNVi5BFCvAoAaOliyQYHlOYWz&wk_nqecngu=gp-WU&omv=gp-WU&uvcvg=I-XnsevaZLqScbPfu6RYpY7IJD_LTOPESPKueoPo49a8yaDo0kqCdRJbDG3lbRNIEam2zNMQCsdLvyVNVNFWspCLHwP5Uk8CHlDZMafbjd6z4GKk3_P0qHa9xXPJADlYDaFR66v5o5Tc01hUKi5E_UkoKs8q1prnbGla9Aj5bbLO6ATkGK82KM6RbZaa32JC_42rdz0FxBy525JrewXiOC1XYRBkEMHna3LGpORVj7Nfhqq6y-4zLmWjmayBnR-YwnorQ3rtTugIAMDKXXrnLy&z-enkgpv-UMW=KF_PGVUVCPFCTF2_0&z-enkgpv-xgt=6.12.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEP4i3rltxYEmBhePE6bCJFW46WRzjzPvpH-bMks8evgjUyFFy9hS5v4Cuv2Ca4v_237a4S_Z1LsjJjR1wDNO1CRfrX_vM6aL7hbTrQQUnPqhsgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEP08DaaCIJiew7pHv6LCk3YZtPg5Qn7aQ0aFWPyYjnBZ8WlGWlqg5PTqg_-STlnhroVP3_3ShMTdphxfnPDxjXxTRQywtvRyeBo01z5hQ-jyVmDj60qSbWZvqeUBihqhhxcWoFW0PXspUcE0LXDHXzEVbdOrryKcyl5US7fMcXxWoOYI-AD3Y2Al97W0DnjDmYJMHbj2YnqyMgXTrK_JoaM31AV8AsUlfD5p6D2Fx1weSrLaUnqebhfd3Kuv1OuX15ICkrom6WfGRJqv-pyBydZQBvyfruEML6NbT57el4hAL6k32pHTaZyF96BEohWjeMjxMKKncinun0_22BaylCUTgfoCSpC2MozjbdiXGpFwIgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAIAAABdS2fcDgAAAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.3	49835	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1722	OUT	GET /static/webpack/production/b7447ec7a5639b81bb9e.5B1z69DJcJdOytocwBFk4mleBWMQRi8eATiNFmXWFrY.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:59 UTC	1877	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 7410 Connection: close Date: Thu, 10 Aug 2023 21:19:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 10 Jul 2023 21:31:52 GMT ETag: "73812c68911f25d2b749dbf6bbe666c2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 3d994808da6a9ce8c9e7b1364fa689ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: mhW7m3hZpvYDwRH1vAeBR_VHsFSsCsE2ygbw7Ca-ZjaA1ACmuEAS1g==
2023-08-10 21:18:59 UTC	1878	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 3c 69 77 db 38 92 df f5 2b 68 ee 46 21 4d 52 26 29 59 96 45 51 1a 3b c7 76 7a 72 4d 8e 99 e9 f1 68 fc 68 19 b4 98 c8 84 86 47 1c b7 a5 fe ed 5b 05 80 24 28 51 b6 d3 d3 bb 2f 2f 16 0f a0 50 28 d4 8d 02 b5 9b 28 be a4 37 9d f3 f3 d7 ef 4e 9e 9f 9c be 7e c1 2e 5e 3c 3f 7f f6 d3 e7 b7 7f fe 78 7e ee 3f d8 62 b5 3a 9b ea 9d 65 9e ce b5 b3 33 f5 1b 81 e6 49 fa db 65 42 97 17 f4 fb 79 14 67 24 89 83 c5 79 7a f9 95 3d 8c e2 94 5d 2f 83 25 49 ce 2f 00 3a 49 8a 9b 3c be 5c 10 71 33 5b d0 fc f2 fc 92 ce 52 f1 20 8a c3 45 4e e2 19 34 3f 26 bd e3 c1 2c 74 d5 a9 79 d7 72 ec 9e 3b 0c f3 78 96 45 34 d6 32 33 31 89 7e a7 e6 29 51 d2 2c 89 66 99 ea 69 d5 5b fd ae 75 b0 bf d7 52 f6 95 4f 73 a2 5c e4 61 48 12 e5 9a 5e e6 0b a2 84 09 bd 56 62 Data Ascii: <iw8+hF!MR&)YEQ;vzrMhhG[$(Q//P((7N~.^<?x~?b:e3IeByg$yz=]/%I/:I<\q3[R EN4?&,tyr;xE4231~)Q,fi[uROs\aH^Vb

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
350	192.168.2.3	50239	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:20:02 UTC	13692	OUT	GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_vts8ra1it9l0lgwizaxzhg2.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPowwP1JkfMjcNVbfQCeHns1Z9LOGlgI0L6QuoMrMiKDcBXag8QYkIr7se0A3rolIA4E_pcxSDz8c-4vO799JZE_5XTSYOjha1GNELxiRlgFcgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPx3MNeDf99axE4PeqP6nkSXpEmW1L9VrZE1hi_LbYDIYSevqfl1Psee0iQ7NyRDQrXCIRXFiP6kmszJM-lv6vWABR510a5Lqyhutp3kpTMW5vC5yRW_wYeLJwKsgJuZl8o-VfEbpRsCm8Vvi0RXdoQDb6G5fgyrPEodcIBgdoQ99J3Kw-tyBVk7XjoFZQRVzyxiTM1bo_p3Dq3Nrwx7GHifvhMETFaIqgC4FMESxcSZHw_lM0fwBz8FIkx6XwvsKk9_M90MSr4oAtxlAT3Ozqri9ts1hf3vZHRlPYTkMtpffb0t9wLyBEvl3LEUTag-BfcPwlGQAovyAFhBSoWzZxMUeKKeupVesOlCkraE1AzWiQ4eSOktk4GuA3d3lNgeklhh5SCztAB2BD4Tdgf79jg6wNzpDNQfpouLcpmQtt2eAgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAMAAABdS2fcDgAAAA
2023-08-10 21:20:58 UTC	14389	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:20:58 GMT Content-Type: application/x-javascript content-length: 49972 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 13 Jul 2023 00:28:45 GMT ETag: 0x8DB83381EAF7708 x-ms-request-id: ae0d30f7-001e-0057-4144-c5854e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T212058Z-u3upexdscp2wm6s31nyr9xmc400000000dpg000000001ft9 X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:20:58 UTC	14390	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 Data Ascii:
2023-08-10 21:20:58 UTC	14390	IN	Data Raw: dd 7d cb 76 23 47 b2 d8 de 5f 51 83 f1 51 37 af aa 21 3c f8 44 0b 6a 83 00 d8 c4 6d 10 80 00 b0 29 1d 49 c6 29 a2 92 64 4d 03 55 b8 55 85 66 73 a8 f6 99 9d 17 77 e1 ad bd f3 c2 2b 2f bd f1 de 9f 32 e7 5c 7f 87 e3 91 99 95 f5 00 40 4a 1a cd bd 9e 33 a7 45 e4 23 32 32 32 32 32 22 32 32 ea 0f 37 6b 7f 1e 7b 81 ff 52 ec 3d aa bf ad e0 a5 bf f7 e8 dd bc f4 7e f0 7f da 0b 45 bc 0e 7d 0b ff 2e 8b 4f ab 20 8c a3 d7 1f 9d d0 8a 9b 58 d4 7c 94 65 8d c7 cf b6 e7 36 7c 7b 11 38 ae 70 1b 7f a8 7e 7e 2d bb 0a ec 3a 77 16 8b 97 b1 82 60 c7 76 f2 77 b0 07 3f b8 5b f3 0f 95 a4 e2 33 0e e3 35 1f 35 a0 a0 bc 6c 0a 3b 28 cf 9b 1e fc bb 6a 96 4a 76 f0 b2 b2 f7 f9 e5 0f c9 34 ec c0 f6 00 f9 97 b5 3d c2 d2 6f 7a 2f ab 00 1f fe 73 b0 67 87 f0 9f c3 3d db 69 86 e5 49 1c 7a fe 6d Data Ascii: }v#G_QQ7!<Djm)I)dMUUfsw+/2\@J3E#22222"227k{R=~E}.O X\|e6\|{8p~~-:w`vw?[355l;(jJv4=oz/sg=iIzm

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
351	192.168.2.3	50238	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:20:03 UTC	13694	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_sb6jQxfN8f3sA8faKcsD7Q2.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPowwP1JkfMjcNVbfQCeHns1Z9LOGlgI0L6QuoMrMiKDcBXag8QYkIr7se0A3rolIA4E_pcxSDz8c-4vO799JZE_5XTSYOjha1GNELxiRlgFcgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPx3MNeDf99axE4PeqP6nkSXpEmW1L9VrZE1hi_LbYDIYSevqfl1Psee0iQ7NyRDQrXCIRXFiP6kmszJM-lv6vWABR510a5Lqyhutp3kpTMW5vC5yRW_wYeLJwKsgJuZl8o-VfEbpRsCm8Vvi0RXdoQDb6G5fgyrPEodcIBgdoQ99J3Kw-tyBVk7XjoFZQRVzyxiTM1bo_p3Dq3Nrwx7GHifvhMETFaIqgC4FMESxcSZHw_lM0fwBz8FIkx6XwvsKk9_M90MSr4oAtxlAT3Ozqri9ts1hf3vZHRlPYTkMtpffb0t9wLyBEvl3LEUTag-BfcPwlGQAovyAFhBSoWzZxMUeKKeupVesOlCkraE1AzWiQ4eSOktk4GuA3d3lNgeklhh5SCztAB2BD4Tdgf79jg6wNzpDNQfpouLcpmQtt2eAgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAMAAABdS2fcDgAAAA
2023-08-10 21:20:04 UTC	13695	IN	HTTP/1.1 200 OK Content-Length: 689016 Content-Type: application/x-javascript Date: Thu, 10 Aug 2023 21:20:04 GMT Connection: close
2023-08-10 21:20:04 UTC	13696	IN	Data Raw: 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 69 2c 20 6f 20 3d 20 6e 5b 30 5d 2c 20 72 20 3d 20 6e 5b 31 5d 2c 20 73 20 3d 20 30 2c 20 63 20 3d 20 5b 5d 3b 20 73 20 3c 20 6f 2e 6c 65 6e 67 74 68 3b 20 73 2b 2b 29 0a 20 20 20 20 20 20 28 69 20 3d 20 6f 5b 73 5d 29 2c 0a 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 20 69 29 20 26 26 20 61 5b 69 5d 20 26 26 20 63 2e 70 75 73 68 28 61 5b 69 5d 5b 30 5d 29 2c 0a 20 20 20 20 20 20 20 20 28 61 5b 69 5d 20 3d 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 74 20 69 6e 20 72 29 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 Data Ascii: !(function (e) { function n(n) { for (var t, i, o = n[0], r = n[1], s = 0, c = []; s < o.length; s++) (i = o[s]), Object.prototype.hasOwnProperty.call(a, i) && a[i] && c.push(a[i][0]), (a[i] = 0); for (t in r) Object.protot
2023-08-10 21:20:04 UTC	13711	IN	Data Raw: 63 6b 65 64 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 54 69 6c 65 73 3a 20 31 30 32 2c 0a 20 20 20 20 20 20 20 20 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 3a 20 31 30 33 2c 0a 20 20 20 20 20 20 20 20 46 65 64 43 6f 6e 66 6c 69 63 74 3a 20 31 30 35 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 3a 20 31 30 36 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 4c 6f 67 69 6e 5f 50 68 6f 6e 65 53 69 67 6e 69 6e 3a 20 31 30 37 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 46 69 6e 69 73 68 3a 20 31 30 38 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 53 74 72 6f 6e 67 41 75 74 68 3a 20 31 30 39 2c 0a 20 20 20 20 20 20 20 20 57 69 6e 31 30 48 6f 73 74 5f 48 49 50 5f 4c 6f 67 69 6e 3a 20 31 31 30 Data Ascii: cked: 100, Tiles: 102, RemoteConnect: 103, FedConflict: 105, Win10Host_Login: 106, Win10Host_Login_PhoneSignin: 107, Win10Host_Finish: 108, Win10Host_StrongAuth: 109, Win10Host_HIP_Login: 110
2023-08-10 21:20:04 UTC	13727	IN	Data Raw: 28 50 52 4f 4f 46 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 54 79 70 65 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 45 6d 61 69 6c 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 20 20 41 6c 74 45 6d 61 69 6c 3a 20 32 2c 0a 20 20 20 20 20 20 20 20 20 20 53 4d 53 3a 20 33 2c 0a 20 20 20 20 20 20 20 20 20 20 44 65 76 69 63 65 49 64 3a 20 34 2c 0a 20 20 20 20 20 20 20 20 20 20 43 53 53 3a 20 35 2c 0a 20 20 20 20 20 20 20 20 20 20 53 51 53 41 3a 20 36 2c 0a 20 20 20 20 20 20 20 20 20 20 43 65 72 74 69 66 69 63 61 74 65 3a 20 37 2c 0a 20 20 20 20 20 20 20 20 20 20 48 49 50 3a 20 38 2c 0a 20 20 20 20 20 20 20 20 20 20 42 69 72 74 68 64 61 79 3a 20 39 2c 0a 20 20 20 20 20 20 20 20 20 20 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 3a 20 31 30 2c 0a 20 20 20 20 20 20 20 Data Ascii: (PROOF = { Type: { Email: 1, AltEmail: 2, SMS: 3, DeviceId: 4, CSS: 5, SQSA: 6, Certificate: 7, HIP: 8, Birthday: 9, TOTPAuthenticator: 10,
2023-08-10 21:20:04 UTC	13743	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 7c 7c 20 22 22 20 3d 3d 3d 20 6e 20 7c 7c 20 28 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 50 2e 70 61 72 73 65 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 2e 71 75 65 72 79 20 3d 20 74 2e 71 75 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 73 2e 66 69 6e 64 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 2e 71 75 65 72 79 2c 20 65 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 20 3f 20 74 2e 71 75 65 72 79 5b 69 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 46 72 6f 6d 43 75 Data Ascii: n \|\| "" === n \|\| (n = document.location.search); var t = P.parse(n); t.query = t.query \|\| {}; var i = s.findOwnProperty(t.query, e, !0); return i ? t.query[i] : ""; }, appendOrReplaceFromCu
2023-08-10 21:20:05 UTC	13759	IN	Data Raw: 2f 67 2c 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 2c 0a 20 20 20 20 20 20 20 20 20 20 69 6e 64 65 6e 74 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 65 74 61 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 62 22 3a 20 22 5c 5c 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 74 22 3a 20 22 5c 5c 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 6e 22 3a 20 22 5c 5c 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 66 22 3a 20 22 5c 5c 66 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 72 22 3a 20 22 5c 5c 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 27 22 27 3a 20 27 5c 5c 22 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 5c 5c 22 3a 20 22 5c 5c 5c 5c 22 2c 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: /g, gap, indent, meta = { "\b": "\\b", "\t": "\\t", "\n": "\\n", "\f": "\\f", "\r": "\\r", '"': '\\"', "\\": "\\\\", }, r
2023-08-10 21:20:05 UTC	13775	IN	Data Raw: 20 20 20 76 61 72 20 6d 20 3d 20 66 2e 61 64 64 28 64 2c 20 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 74 61 72 67 65 74 55 72 6c 20 3d 20 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 61 2e 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 2c 20 70 29 2c 20 6e 2e 73 65 6e 64 52 65 71 75 65 73 74 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 42 65 61 63 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 69 2c 20 61 2c 20 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 76 28 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 70 2e 66 6f 72 45 61 63 68 28 73 Data Ascii: var m = f.add(d, c); p.targetUrl = m; } } a.Handler.call(n, p), n.sendRequest(); }), (n.Beacon = function (e, t, i, a, o) { var r = [], s = v(!0); p.forEach(s
2023-08-10 21:20:05 UTC	13791	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6e 20 3f 20 28 6c 20 3d 3d 3d 20 70 2e 46 54 45 72 72 6f 72 20 3f 20 68 28 65 2c 20 64 29 20 3a 20 76 28 65 2c 20 64 29 29 20 3a 20 62 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 67 20 3d 20 22 22 29 2c 20 28 6c 20 3d 20 70 2e 45 72 72 6f 72 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 54 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6c 20 3d 20 70 2e 54 69 6d 65 6f 75 74 29 2c 20 28 75 20 3d 20 22 22 29 2c 20 28 66 20 3d 20 22 22 29 2c 20 28 67 20 3d 20 22 22 29 2c 20 76 28 64 29 3b 0a 20 20 20 20 20 Data Ascii: n ? (l === p.FTError ? h(e, d) : v(e, d)) : b(e); } function k() { (g = ""), (l = p.Error), (u = ""), (f = ""), v(d); } function T() { (l = p.Timeout), (u = ""), (f = ""), (g = ""), v(d);
2023-08-10 21:20:05 UTC	13807	IN	Data Raw: 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 7b 20 63 72 65 64 54 79 70 65 3a 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 2c 20 70 72 6f 6f 66 3a 20 65 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 28 28 74 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 20 3d 20 21 30 29 2c 20 65 2e 74 79 70 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 53 4d 53 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 56 6f 69 63 65 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 69 73 56 6f 69 63 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: n) { var t = { credType: m.OneTimeCode, proof: e }; switch (((t.proof.isEncrypted = !0), e.type)) { case PROOF.Type.SMS: case PROOF.Type.Voice: if (!e.isVoiceOnly) {
2023-08-10 21:20:05 UTC	13823	IN	Data Raw: 20 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 3f 22 20 2b 20 67 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 77 63 74 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 20 2b 20 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 20 22 3f 22 20 2b 20 67 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 74 2e 73 75 62 73 74 72 28 31 29 29 2c 20 28 65 20 3d 20 70 2e 61 70 70 65 6e 64 28 65 2c 20 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: p.appendOrReplace( "?" + ge, "wctx", "LoginOptions%3D3%26" + p.extract("wctx", "?" + ge) ); (t = t.substr(1)), (e = p.append(e, t));
2023-08-10 21:20:05 UTC	13839	IN	Data Raw: 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 70 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 74 28 34 29 2c 0a 20 20 20 20 20 20 72 20 3d 20 74 28 30 29 2c 0a 20 20 20 20 20 20 73 20 3d 20 77 69 6e 64 6f 77 2c 0a 20 20 20 20 20 20 63 20 3d 20 72 2e 44 69 61 6c 6f 67 49 64 3b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 68 69 73 2c 0a 20 20 20 20 20 20 20 20 74 20 3d 20 65 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3b 0a 20 20 20 20 20 20 28 6e 2e 6f 6e 52 65 67 69 Data Ascii: (e.exports = p); }, function (e, n, t) { var i = t(2), a = t(1), o = t(4), r = t(0), s = window, c = r.DialogId; function d(e) { var n = this, t = e.isPlatformAuthenticatorAvailable; (n.onRegi
2023-08-10 21:20:05 UTC	13855	IN	Data Raw: 74 65 6e 73 69 6f 6e 73 3a 20 21 30 2c 0a 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 28 65 2e 65 78 70 6f 72 74 73 20 3d 20 73 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 70 69 63 6b 65 72 5f 61 63 63 6f 75 6e 74 5f 6d 73 61 5f 34 65 33 36 31 39 61 34 39 39 66 64 37 34 63 30 63 36 36 64 35 32 31 35 35 31 34 62 35 36 36 61 2e 70 6e 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 Data Ascii: tensions: !0, }), (e.exports = s); }, function (e, n, t) { e.exports = t.p + "content/images/picker_account_msa_4e3619a499fd74c0c66d5215514b566a.png"; }, function (e, n, t) { e.exports = t.p + "content/ima
2023-08-10 21:20:05 UTC	13871	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 20 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 20 21 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 73 47 69 74 48 75 62 46 65 64 3a 20 65 2e 69 73 47 69 74 48 75 62 46 65 64 20 7c 7c 20 21 31 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 Data Ascii: , isWindowsSso: e.isWindowsSso \|\| !1, isMeControlSession: !0, isGitHubFed: e.isGitHubFed \|\| !1, } ); }); }, parseBssoSessions: function (e) { ret
2023-08-10 21:20:05 UTC	13887	IN	Data Raw: 6f 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 4d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 65 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 20 26 26 20 65 2e 73 65 74 44 65 66 61 75 6c 74 46 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 43 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 55 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6f 2e 67 65 74 53 68 61 72 65 64 44 61 74 61 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: o.setDefaultFocus = function () { var e = M(); e && e.setDefaultFocus && e.setDefaultFocus(); }), (o.getCurrentViewId = function () { return U(); }), (o.getSharedData = function () {
2023-08-10 21:20:05 UTC	13903	IN	Data Raw: 6e 20 6e 29 20 61 2e 63 61 6c 6c 28 6e 2c 20 74 29 20 26 26 20 28 65 5b 74 5d 20 3d 20 6e 5b 74 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 20 3d 20 6e 29 2c 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 20 6e 2c 20 74 2c 20 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 65 5b 6e 5d 2e 6d 61 74 63 68 28 68 29 20 7c 7c 20 5b 5d 3b Data Ascii: n n) a.call(n, t) && (e[t] = n[t]); return e; } function t(e, n) { return (e.__proto__ = n), e; } function i(e, n, t, i) { var a = e[n].match(h) \|\| [];
2023-08-10 21:20:05 UTC	13919	IN	Data Raw: 20 20 61 5b 64 5b 6c 5d 2e 6e 61 6d 65 5d 20 3d 20 64 5b 6c 5d 2e 76 61 6c 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 20 3d 20 53 2e 61 2e 66 28 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 20 69 6e 20 28 28 75 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 61 63 74 69 6f 6e 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 2e 6d 65 74 68 6f 64 20 Data Ascii: a[d[l].name] = d[l].value; } t = S.a.f(t); var u = c.createElement("form"); for (var p in ((u.style.display = "none"), (u.action = r), (u.method
2023-08-10 21:20:05 UTC	13935	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 28 69 20 3d 20 21 30 29 2c 20 65 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 72 2c 20 22 64 69 72 74 79 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 21 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f Data Ascii: (i = !0), e.notifySubscribers(r, "dirty"); } finally { i = !1; } } }; })); }, no
2023-08-10 21:20:05 UTC	13951	IN	Data Raw: 20 20 20 20 20 20 20 20 63 20 3d 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 54 20 3d 20 53 2e 61 2e 44 61 28 22 5f 73 74 61 74 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 53 2e 6f 20 3d 20 53 2e 24 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: c = a; } }); } }); var T = S.a.Da("_state"); S.o = S.$ = function (e, n, t) { function i() { if (0 < arguments.length) {
2023-08-10 21:20:05 UTC	13967	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 64 2c 20 6c 20 3d 20 30 3b 20 28 64 20 3d 20 72 5b 6c 5d 29 3b 20 2b 2b 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 64 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 34 34 20 3d 3d 3d 20 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 30 20 3e 3d 20 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 70 75 73 68 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 26 26 20 73 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: for (var d, l = 0; (d = r[l]); ++l) { var u = d.charCodeAt(0); if (44 === u) { if (0 >= c) { t.push( n && s.length
2023-08-10 21:20:05 UTC	13983	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 67 65 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 5b 65 5d 20 26 26 20 69 28 62 28 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 67 2e 68 61 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 20 69 6e 20 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return a[e]; }; (g.get = function (e) { return a[e] && i(b(e)); }), (g.has = function (e) { return e in a;
2023-08-10 21:20:05 UTC	13999	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 6f 6d 70 6f 6e 65 6e 74 20 27 22 20 2b 20 65 20 2b 20 22 27 3a 20 22 20 2b 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 53 2e 6a 2e 72 65 67 69 73 74 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 Data Ascii: } function o(e) { return function (n) { throw Error("Component '" + e + "': " + n); }; } var r = {}; (S.j.register = function (e, n) {
2023-08-10 21:20:05 UTC	14015	IN	Data Raw: 20 20 20 20 20 20 20 20 6f 20 3d 20 61 2e 62 6f 64 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 6f 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 61 20 3d 20 6e 28 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 61 2c 20 74 2c 20 22 68 61 73 66 6f 63 75 73 22 2c 20 69 2c 20 21 30 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b 6f 5f 68 61 73 66 6f 63 75 73 4c 61 73 74 56 61 6c 75 65 20 3d 20 69 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 5f 5f 6b Data Ascii: o = a.body; } i = o === e; } (a = n()), S.m.eb(a, t, "hasfocus", i, !0), (e.__ko_hasfocusLastValue = i), (e.__k
2023-08-10 21:20:05 UTC	14031	IN	Data Raw: 20 20 20 20 20 20 53 2e 6d 2e 65 62 28 69 2c 20 74 2c 20 22 76 61 6c 75 65 22 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 53 2e 61 2e 57 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 61 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 74 65 78 74 22 20 21 3d 20 65 2e 74 79 70 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6f 66 66 22 20 3d 3d 20 65 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 66 6f 72 6d 20 26 26 20 22 6f 66 66 22 20 3d 3d 20 65 2e 66 6f 72 6d 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 Data Ascii: S.m.eb(i, t, "value", a); }; !S.a.W \|\| !a \|\| "text" != e.type \|\| "off" == e.autocomplete \|\| (e.form && "off" == e.form.autocomplete
2023-08-10 21:20:05 UTC	14047	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 3d 3d 3d 20 72 20 7c 7c 20 6e 75 6c 6c 20 3d 3d 3d 20 65 20 7c 7c 20 21 53 2e 61 2e 66 28 65 2e 5f 64 65 73 74 72 6f 79 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 28 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: return ( e === r \|\| null === e \|\| !S.a.f(e._destroy) ); })), d(e); }, null,
2023-08-10 21:20:05 UTC	14063	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 29 28 69 2c 20 74 2e 65 6c 65 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 48 61 6e 64 6c 65 72 73 2e 63 6f 6d 70 6f 6e 65 6e 74 2e 69 6e 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 6f 2c 20 72 2c 20 73 2c 20 63 Data Ascii: })(i, t.element), i ); })), i(n); }); }, }), (n = e.bindingHandlers.component.init), (e.bindingHandlers.component.init = function (t, o, r, s, c
2023-08-10 21:20:05 UTC	14079	IN	Data Raw: 6e 2c 20 74 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 74 28 33 29 2c 0a 20 20 20 20 20 20 61 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 6f 20 3d 20 69 2e 53 74 72 69 6e 67 3b 0a 20 20 20 20 6e 2e 61 70 70 6c 79 45 78 74 65 6e 73 69 6f 6e 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 3b 0a 20 20 20 20 20 20 28 6e 20 3d 20 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 29 2c 0a 20 20 20 20 20 20 20 20 28 65 2e 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 2e 69 6e 73 74 61 6e 63 65 2e 70 72 65 70 72 6f 63 65 73 73 4e 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 0a 20 20 20 Data Ascii: n, t) { var i = t(3), a = t(1), o = i.String; n.applyExtensions = function (e) { var n; (n = e.bindingProvider.instance.preprocessNode), (e.bindingProvider.instance.preprocessNode = function (t) { if (
2023-08-10 21:20:05 UTC	14095	IN	Data Raw: 20 3a 20 66 65 20 26 26 20 6e 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 26 26 20 28 73 20 3d 20 44 2e 55 73 65 72 6e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 75 65 20 7c 7c 20 6f 20 7c 7c 20 62 65 20 7c 7c 20 67 65 29 20 26 26 20 28 72 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 6e 20 26 26 20 28 72 20 3d 20 73 20 3d 20 44 2e 52 65 6d 6f 74 65 43 6f 6e 6e 65 63 74 4c 6f 63 61 74 69 6f 6e 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 69 6e 69 74 69 61 6c 56 69 65 77 49 64 20 3d 20 72 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 6e 2e 63 75 72 72 65 6e 74 56 69 65 77 49 64 20 3d 20 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 28 74 2c Data Ascii: : fe && n.getServerError() && (s = D.Username); (ue \|\| o \|\| be \|\| ge) && (r = s); } sn && (r = s = D.RemoteConnectLocation), (n.initialViewId = r), (n.currentViewId = s); })(t,
2023-08-10 21:20:05 UTC	14111	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 55 70 64 61 74 65 55 73 65 72 54 69 6c 65 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 6e 28 65 2c 20 6e 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 65 74 63 68 53 65 73 73 69 6f 6e 73 5f 6f 6e 49 6e 63 72 65 6d 65 6e 74 41 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 61 73 79 6e 63 54 69 6c 65 52 65 71 75 65 73 74 43 6f 75 6e 74 Data Ascii: , (n.fetchSessions_onUpdateUserTiles = function (e, n) { setTimeout(function () { hn(e, n); }); }), (n.fetchSessions_onIncrementAsyncTileRequestCount = function () { n.asyncTileRequestCount
2023-08-10 21:20:05 UTC	14127	IN	Data Raw: 20 20 20 28 6e 2e 76 69 65 77 5f 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6e 2e 69 73 52 65 71 75 65 73 74 50 65 6e 64 69 6e 67 28 65 29 2c 20 6e 2e 73 68 6f 77 4c 69 67 68 74 62 6f 78 50 72 6f 67 72 65 73 73 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 28 6e 2e 66 6f 6f 74 65 72 5f 61 67 72 65 65 6d 65 6e 74 43 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 28 6e 2e 61 67 72 65 65 6d 65 6e 74 54 79 70 65 20 3d 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 76 69 65 77 5f 6f 6e 53 77 69 74 Data Ascii: (n.view_onSetPendingRequest = function (e) { n.isRequestPending(e), n.showLightboxProgress(e); }), (n.footer_agreementClick = function (e) { (n.agreementType = e), n.paginationControlMethods().view_onSwit
2023-08-10 21:20:05 UTC	14143	IN	Data Raw: 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 31 5f 63 66 65 39 63 62 36 32 65 62 62 36 36 30 35 65 30 33 66 62 38 64 32 38 35 63 36 31 31 62 34 38 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 31 33 2d 73 6d 61 6c 6c 5f 61 31 39 65 37 62 63 61 34 34 36 36 30 35 39 65 61 64 64 33 34 34 61 62 31 31 65 36 39 30 34 66 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 Data Ascii: p + "content/images/appbackgrounds/11_cfe9cb62ebb6605e03fb8d285c611b48.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/13-small_a19e7bca4466059eadd344ab11e6904f.jpg"; }, function (e, n, t) {
2023-08-10 21:20:05 UTC	14159	IN	Data Raw: 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 2d 73 6d 61 6c 6c 5f 34 66 36 33 63 34 33 37 61 32 30 39 61 37 61 64 30 62 63 66 37 63 35 33 32 61 34 62 35 63 32 62 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 74 2e 70 20 2b 0a 20 20 20 20 20 20 22 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 70 70 62 61 63 6b 67 72 6f 75 6e 64 73 2f 36 37 5f 37 34 39 36 32 64 39 36 65 64 34 34 39 38 61 35 33 62 32 37 33 64 37 63 37 66 39 37 63 64 39 35 2e 6a 70 67 22 3b 0a 20 20 7d 2c 0a 20 Data Ascii: e.exports = t.p + "content/images/appbackgrounds/67-small_4f63c437a209a7ad0bcf7c532a4b5c2b.jpg"; }, function (e, n, t) { e.exports = t.p + "content/images/appbackgrounds/67_74962d96ed4498a53b273d7c7f97cd95.jpg"; },
2023-08-10 21:20:05 UTC	14175	IN	Data Raw: 20 20 20 20 20 28 6e 20 3d 20 5f 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 29 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 75 2e 45 72 72 6f 72 28 22 4e 6f 45 78 74 65 6e 73 69 6f 6e 22 2c 20 22 45 78 74 65 6e 73 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 2e 22 2c 20 6e 75 6c 6c 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 44 61 74 61 50 6f 69 6e 74 28 22 65 78 74 65 6e 73 69 6f 6e 2e 69 64 22 2c 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 70 2e 6c 6f 67 4d 65 73 73 61 67 65 28 22 55 73 69 6e 67 20 43 68 72 6f 6d 65 20 65 78 74 65 6e 73 69 6f 6e 20 77 69 74 68 20 69 64 20 22 20 2b 20 65 29 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: (n = _.firstChild); if (!e) throw new u.Error("NoExtension", "Extension is not installed.", null); return ( p.logDataPoint("extension.id", e), p.logMessage("Using Chrome extension with id " + e),
2023-08-10 21:20:05 UTC	14191	IN	Data Raw: 20 20 20 43 68 65 63 6b 62 6f 78 3a 20 22 63 68 65 63 6b 62 6f 78 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 42 75 74 74 6f 6e 3a 20 22 62 75 74 74 6f 6e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 44 61 74 61 3a 20 22 45 78 63 65 70 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 3a 20 22 50 61 67 65 41 63 74 69 6f 6e 44 61 74 61 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 45 78 63 65 70 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 45 78 63 65 70 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 61 67 65 41 63 74 74 69 6f 6e 73 54 61 62 6c 65 73 75 66 66 69 78 3a 20 22 55 73 65 72 41 63 74 69 6f 6e 73 22 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: Checkbox: "checkbox", Button: "button", ExceptionData: "ExceptionData", PageActionData: "PageActionData", ExceptionsTablesuffix: "Exceptions", PageActtionsTablesuffix: "UserActions",
2023-08-10 21:20:05 UTC	14207	IN	Data Raw: 6f 76 69 64 65 72 20 3d 20 69 2e 45 6d 70 74 79 45 76 65 6e 74 50 72 6f 76 69 64 65 72 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 2c 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 3b 0a 20 20 20 20 20 20 20 20 20 20 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 28 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 74 28 32 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 69 2e 45 76 65 6e 74 41 70 69 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 69 Data Ascii: ovider = i.EmptyEventProvider); }, , , , , function (e, n, t) { var i; !(function (e) { var n = t(1), i = t(2), a = i.EventApi, o = i
2023-08-10 21:20:05 UTC	14223	IN	Data Raw: 61 6c 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 3a 20 63 75 72 72 65 6e 74 56 69 65 77 49 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 3a 20 69 6e 69 74 69 61 6c 53 68 61 72 65 64 44 61 74 61 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 45 72 72 6f 72 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 67 65 74 53 65 72 76 65 72 45 72 72 6f 72 28 29 20 7d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 63 65 6c 3a 20 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 5f 6f 6e 43 61 6e 63 65 6c 2c 5c 6e 20 20 20 20 20 Data Ascii: alViewId,\n currentViewId: currentViewId,\n initialSharedData: initialSharedData,\n initialError: $loginPage.getServerError() },\n event: {\n cancel: paginationControl_onCancel,\n
2023-08-10 21:20:05 UTC	14239	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 3a 20 24 6c 6f 67 69 6e 50 61 67 65 2e 76 69 65 77 5f 6f 6e 52 65 64 69 72 65 63 74 20 7d 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 76 69 65 77 69 64 3d 22 27 20 2b 0a 20 20 20 20 20 20 74 28 30 29 2e 50 61 67 69 6e 61 74 65 64 53 74 61 74 65 2e 49 64 70 52 65 64 69 72 65 63 74 53 70 65 65 64 62 75 6d 70 20 2b 0a 20 20 20 20 20 20 27 22 20 64 61 74 61 2d 73 68 6f 77 49 64 65 6e 74 69 74 79 42 61 6e 6e 65 72 3d 22 74 72 75 65 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 70 61 67 65 56 69 65 77 43 6f 6d 70 6f 6e 65 6e 74 3a 20 7b 20 6e 61 6d 65 3a 20 5c 27 6c 6f 67 69 6e 2d 69 Data Ascii: redirect: $loginPage.view_onRedirect } }">\n </div>\n\n <div data-viewid="' + t(0).PaginatedState.IdpRedirectSpeedbump + '" data-showIdentityBanner="true" data-bind="pageViewComponent: { name: \'login-i
2023-08-10 21:20:05 UTC	14255	IN	Data Raw: 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 4e 65 77 55 73 65 72 22 20 76 61 6c 75 65 3d 22 31 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 46 6f 75 6e 64 4d 53 41 73 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 73 46 6f 75 6e 64 4d 53 41 73 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 73 70 6f 73 74 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 61 6c 75 65 3a 20 73 76 72 2e 66 50 4f 53 54 5f 46 6f 72 63 65 53 69 67 6e 69 6e 20 3f 20 31 20 3a 20 30 22 20 2f 3e 5c 6e 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 Data Ascii: \n <input type="hidden" name="NewUser" value="1" />\n <input type="hidden" name="FoundMSAs" data-bind="value: svr.sFoundMSAs" />\n <input type="hidden" name="fspost" data-bind="value: svr.fPOST_ForceSignin ? 1 : 0" />\n <input
2023-08-10 21:20:05 UTC	14271	IN	Data Raw: 69 20 3d 20 7b 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 70 6e 67 22 3a 20 33 34 33 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 2e 73 76 67 22 3a 20 33 34 34 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 70 6e 67 22 3a 20 33 34 35 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 65 61 6d 5f 77 68 69 74 65 2e 73 76 67 22 3a 20 33 34 36 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 70 6e 67 22 3a 20 33 34 37 2c 0a 20 20 20 20 20 20 22 2e 2f 41 70 70 43 65 6e 74 69 70 65 64 65 5f 42 69 6e 67 2e 73 76 67 22 3a 20 33 34 38 2c 0a 20 20 20 20 20 20 22 2e 2f Data Ascii: i = { "./AppCentipede_Beam.png": 343, "./AppCentipede_Beam.svg": 344, "./AppCentipede_Beam_white.png": 345, "./AppCentipede_Beam_white.svg": 346, "./AppCentipede_Bing.png": 347, "./AppCentipede_Bing.svg": 348, "./
2023-08-10 21:20:05 UTC	14287	IN	Data Raw: 6e 74 61 69 6e 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 68 65 61 64 65 72 5c 27 3a 20 74 72 75 65 20 7d 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 64 3d 22 68 65 61 64 65 72 4c 6f 67 6f 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 74 74 72 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 68 65 61 64 65 72 4c 6f 67 6f 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3a 20 73 74 72 5b 5c 27 Data Ascii: ntainer">\n <div id="header" data-bind="externalCss: { \'header\': true }">\n <img id="headerLogo" role="img" data-bind="\n attr: {\n src: headerLogo,\n alt: str[\'
2023-08-10 21:20:05 UTC	14303	IN	Data Raw: 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 73 76 72 2e 66 53 68 6f 77 43 6f 70 79 44 65 62 75 67 44 65 74 61 69 6c 73 4c 69 6e 6b 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 65 72 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 64 65 62 75 67 44 65 74 61 69 6c 73 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 62 6f 6c 64 20 64 65 62 75 67 2d 64 65 74 61 69 6c 73 2d 68 65 61 64 69 6e 67 2d 74 65 78 74 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 Data Ascii: <div class="table-cell">\n \x3c!-- ko if: svr.fShowCopyDebugDetailsLink --\x3e\n <div class="debug-details-header">\n <div id="debugDetailsHeader" class="bold debug-details-heading-text" role="heading" aria-leve
2023-08-10 21:20:05 UTC	14319	IN	Data Raw: 69 64 65 49 6e 4e 65 78 74 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 6f 75 74 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 4f 75 74 42 61 63 6b 28 29 2c 5c 6e 20 20 20 20 20 20 20 20 27 73 6c 69 64 65 2d 69 6e 2d 62 61 63 6b 27 3a 20 61 6e 69 6d 61 74 65 2e 69 73 53 6c 69 64 65 49 6e 42 61 63 6b 28 29 20 7d 5c 22 3e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 66 6f 72 65 61 63 68 3a 20 76 69 65 77 73 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 24 70 61 72 65 6e 74 2e 63 75 72 72 65 6e 74 56 69 65 77 49 6e 64 65 78 28 29 20 3d 3d 3d 20 24 69 6e 64 65 78 28 29 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ideInNext(),\n 'slide-out-back': animate.isSlideOutBack(),\n 'slide-in-back': animate.isSlideInBack() }\">\n\n \x3c!-- ko foreach: views --\x3e\n \x3c!-- ko if: $parent.currentViewIndex() === $index() --\x3e\n
2023-08-10 21:20:05 UTC	14335	IN	Data Raw: 76 69 63 65 43 6f 64 65 20 3d 20 74 20 3f 20 74 2e 64 65 76 69 63 65 43 6f 64 65 20 3a 20 6e 75 6c 6c 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 3d 20 22 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 75 73 65 45 76 69 63 74 65 64 43 72 65 64 65 6e 74 69 61 6c 73 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 73 68 6f 77 43 72 65 64 56 69 65 77 42 72 61 6e 64 69 6e 67 44 65 73 63 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 65 2e 69 73 53 69 67 6e 75 70 50 6f 73 74 20 3d 20 21 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 4e 65 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 28 65 2e 61 76 61 69 6c 61 62 6c 65 43 72 65 64 73 20 3d Data Ascii: viceCode = t ? t.deviceCode : null), (e.proofConfirmation = ""), (e.useEvictedCredentials = !1), (e.showCredViewBrandingDesc = !1), (e.isSignupPost = !1), Ne && ((e.availableCreds =
2023-08-10 21:20:05 UTC	14351	IN	Data Raw: 20 73 74 72 5b 5c 27 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 75 70 5f 4c 69 6e 6b 5c 27 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3a 20 73 76 72 2e 75 72 6c 53 69 67 6e 55 70 20 7c 7c 20 5c 27 23 5c 27 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 69 63 6b 3a 20 73 69 67 6e 75 70 5f 6f 6e 43 6c 69 63 6b 22 3e 3c 2f 61 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 2f 6b 6f 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 6e 6f 74 3a 20 73 76 72 2e 66 49 73 53 65 6c 66 53 65 72 76 69 63 65 Data Ascii: str[\'STR_SSSU_Signup_Link\'],\n href: svr.urlSignUp \|\| \'#\',\n click: signup_onClick"></a>\n </div>\n \x3c!-- /ko --\x3e\n\n \x3c!-- ko ifnot: svr.fIsSelfService
2023-08-10 21:20:05 UTC	14367	IN	Data Raw: 3d 20 64 29 3b 0a 20 20 7d 2c 0a 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 6e 2c 20 74 29 20 7b 0a 20 20 20 20 65 2e 65 78 70 6f 72 74 73 20 3d 0a 20 20 20 20 20 20 22 5c 78 33 63 21 2d 2d 20 22 20 2b 0a 20 20 20 20 20 20 28 74 28 31 33 29 2c 0a 20 20 20 20 20 20 27 20 2d 2d 5c 78 33 65 5c 6e 5c 6e 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 20 2d 2d 5c 78 33 65 5c 6e 3c 64 69 76 20 69 64 3d 22 6d 6f 72 65 49 6e 66 6f 48 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 72 6f 77 22 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 20 64 61 74 61 2d 62 69 6e 64 3d 22 74 65 78 74 3a 20 6d 6f 72 65 49 6e 66 6f 54 69 74 6c 65 2c 20 65 78 74 65 72 6e 61 6c 43 73 73 3a 20 7b 20 5c 27 74 Data Ascii: = d); }, function (e, n, t) { e.exports = "\x3c!-- " + (t(13), ' --\x3e\n\n\x3c!-- ko if: moreInfoTitle --\x3e\n<div id="moreInfoHeader" class="row" role="heading" aria-level="1" data-bind="text: moreInfoTitle, externalCss: { \'t

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
352	192.168.2.3	50242	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:20:07 UTC	14368	OUT	POST /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 442 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:20:07 UTC	14370	OUT	Data Raw: 7b 22 73 63 6f 70 65 73 22 3a 5b 5d 2c 22 6b 6e 6f 77 6e 5f 6e 61 6d 65 73 70 61 63 65 73 22 3a 5b 22 63 6c 6f 75 64 5f 64 6f 63 73 5f 70 65 72 66 22 2c 22 75 73 65 72 5f 63 65 6e 74 72 69 63 5f 70 65 72 66 22 2c 22 75 78 61 5f 65 76 65 6e 74 73 22 2c 22 77 65 62 5f 74 69 6d 69 6e 67 22 5d 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 61 72 74 69 66 61 63 74 5f 6e 61 6d 65 22 3a 22 64 72 6f 70 62 6f 78 2d 77 65 62 22 2c 22 61 72 74 69 66 61 63 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 22 2c 22 63 6c 69 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 32 35 2c 22 69 6d 70 6c Data Ascii: {"scopes":[],"known_namespaces":["cloud_docs_perf","user_centric_perf","uxa_events","web_timing"],"environment":"prod","artifact_name":"dropbox-web","artifact_version":"0000000000000000000000000000000000000000","client_metadata":{"client_version":25,"impl
2023-08-10 21:20:07 UTC	14370	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 3 X-Webkit-Csp: sandbox Content-Length: 1464 Date: Thu, 10 Aug 2023 21:20:07 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 549c89cbcef34052a7ddfb745d5c28bb Connection: close
2023-08-10 21:20:07 UTC	14371	IN	Data Raw: 7b 22 64 65 62 75 67 5f 69 6e 66 6f 73 22 3a 5b 5d 2c 22 6d 61 78 5f 73 63 6f 70 65 73 5f 70 65 72 5f 72 65 71 75 65 73 74 22 3a 31 30 30 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 72 65 70 6f 72 74 69 6e 67 5f 63 6f 6e 66 69 67 73 22 3a 5b 7b 22 61 67 67 72 65 67 61 74 69 6f 6e 5f 69 6e 74 65 72 76 61 6c 5f 73 65 63 6f 6e 64 73 22 3a 36 30 2c 22 64 72 6f 70 5f 66 72 61 63 74 69 6f 6e 5f 6f 66 5f 68 6f 73 74 73 5f 70 65 72 5f 6d 65 74 72 69 63 22 3a 30 2c 22 64 72 6f 70 5f 70 65 72 69 6f 64 73 22 3a 7b 22 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 73 74 69 63 6b 69 6e 65 73 73 22 3a 7b 22 6c 69 6d 69 74 22 3a 7b 22 2e 74 61 67 22 3a 22 69 6e 64 65 70 65 6e 64 65 6e 74 22 7d 7d 7d 2c 22 64 72 6f Data Ascii: {"debug_infos":[],"max_scopes_per_request":100,"publication_interval_seconds":60,"reporting_configs":[{"aggregation_interval_seconds":60,"drop_fraction_of_hosts_per_metric":0,"drop_periods":{"fraction":0,"stickiness":{"limit":{".tag":"independent"}}},"dro

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
353	192.168.2.3	50244	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:20:09 UTC	14372	OUT	POST /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 525 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:20:09 UTC	14374	OUT	Data Raw: 7b 22 64 6f 63 5f 69 64 22 3a 22 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 65 6b 36 22 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 39 6f 74 4e 47 38 5f 64 53 62 44 72 5f 57 4e 4b 6a 61 64 69 75 50 35 39 41 37 77 74 45 52 47 79 58 6e 43 56 30 43 34 4d 75 43 61 73 53 55 4a 38 61 36 55 37 34 72 51 44 6e 49 57 56 4a 59 52 4f 6d 6f 48 69 5f 68 33 64 44 44 6f 4f 62 5f 4e 67 73 75 77 67 61 33 50 2d 6d 63 38 76 6d 4b 39 4b 4a 6d 53 68 4e 75 37 76 67 30 6e 6b 4a 33 79 39 48 34 56 65 58 4c 7a 47 6d 77 39 73 6e 69 46 4b 71 37 35 54 69 67 4b 6d 39 65 38 6b 52 76 6e 59 51 6c 50 62 75 50 32 5f 78 6e 76 39 41 68 79 43 39 52 44 66 7a 53 76 37 5a 4d 44 64 5a 69 61 48 52 2d 6c 7a 49 42 56 50 51 6e 4d 4a 6b 45 58 5f 39 4a 6d 35 6c 42 30 6c 73 43 Data Ascii: {"doc_id":"DBzT6sb01xsOk7nt0qek6","auth_token":"cd.AD9otNG8_dSbDr_WNKjadiuP59A7wtERGyXnCV0C4MuCasSUJ8a6U74rQDnIWVJYROmoHi_h3dDDoOb_Ngsuwga3P-mc8vmK9KJmShNu7vg0nkJ3y9H4VeXLzGmw9sniFKq75TigKm9e8kRvnYQlPbuP2_xnv9AhyC9RDfzSv7ZMDdZiaHR-lzIBVPQnMJkEX_9Jm5lB0lsC
2023-08-10 21:20:09 UTC	14375	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 27 X-Webkit-Csp: sandbox Content-Length: 276 Date: Thu, 10 Aug 2023 21:20:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 37ec3f9f3ece4577975fee23965a2b24 Connection: close
2023-08-10 21:20:09 UTC	14376	IN	Data Raw: 7b 22 66 69 6c 65 6e 61 6d 65 22 3a 22 50 41 43 49 46 49 43 41 20 43 4f 4d 50 41 4e 49 45 53 20 73 68 61 72 65 64 20 56 69 74 61 6c 20 44 6f 63 75 6d 65 6e 74 73 20 77 69 74 68 20 79 6f 75 e2 86 93 2e 70 61 70 65 72 22 2c 22 6d 61 78 5f 61 63 63 65 73 73 5f 75 72 6c 22 3a 22 22 2c 22 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 22 3a 7b 22 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 5f 74 61 67 22 3a 7b 22 2e 74 61 67 22 3a 22 61 63 74 69 76 65 22 2c 22 63 6f 6d 6d 65 6e 74 22 3a 66 61 6c 73 65 2c 22 64 6f 77 6e 6c 6f 61 64 22 3a 74 72 75 65 2c 22 65 64 69 74 22 3a 66 61 6c 73 65 2c 22 66 69 6c 65 5f 6c 6f 63 6b 5f 73 74 61 74 65 22 3a 7b 22 2e 74 61 67 22 3a 22 75 6e 6c 6f 63 6b 65 64 22 7d 2c 22 71 75 6f 74 61 22 3a 30 2c 22 72 65 6e 61 6d Data Ascii: {"filename":"PACIFICA COMPANIES shared Vital Documents with you.paper","max_access_url":"","state_and_actions":{"state_and_actions_tag":{".tag":"active","comment":false,"download":true,"edit":false,"file_lock_state":{".tag":"unlocked"},"quota":0,"renam

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
354	192.168.2.3	50247	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:20:09 UTC	14374	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:20:09 UTC	14375	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Thu, 10 Aug 2023 21:20:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: a7087abeaf7e4188b51179197351d9a7 Connection: close
2023-08-10 21:20:09 UTC	14375	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
355	192.168.2.3	50250	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:20:09 UTC	14376	OUT	GET /2/cloud_docs/get_doc_state_and_actions_logged_out HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:20:10 UTC	14377	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 142 Date: Thu, 10 Aug 2023 21:20:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f2a381f2fe944caca3ef90b9cb973555 Connection: close
2023-08-10 21:20:10 UTC	14377	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 67 65 74 5f 64 6f 63 5f 73 74 61 74 65 5f 61 6e 64 5f 61 63 74 69 6f 6e 73 5f 6c 6f 67 67 65 64 5f 6f 75 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/get_doc_state_and_actions_logged_out": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
356	192.168.2.3	50246	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:20:10 UTC	14377	OUT	POST /log/ux_analytics HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 957 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryBDkwVkDTcGjyQWnH Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:20:10 UTC	14378	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 44 6b 77 56 6b 44 54 63 47 6a 79 51 57 6e 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 73 5f 78 68 72 22 0d 0a 0d 0a 74 72 75 65 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 44 6b 77 56 6b 44 54 63 47 6a 79 51 57 6e 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 22 0d 0a 0d 0a 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 44 6b 77 56 6b 44 54 63 47 6a 79 51 57 6e 48 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryBDkwVkDTcGjyQWnHContent-Disposition: form-data; name="is_xhr"true------WebKitFormBoundaryBDkwVkDTcGjyQWnHContent-Disposition: form-data; name="t"50aS4zgW2W1XP95GWz4lmdjP------WebKitFormBoundaryBDkwVkDTcGjyQWnHCont
2023-08-10 21:20:10 UTC	14379	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.dropbox.com Access-Control-Expose-Headers: Accept-Ranges, Content-Encoding, Content-Length, Content-Range, X-Dropbox-Metadata, X-Dropbox-Request-Id, X-JSON, X-Server-Response-Time, Timing-Allow-Origin, x-dropbox-pdf-password-needed Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin Vary: Origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 12 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:20:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: fd1ee59ca0584e7ea5df04f7ded2807b Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
357	192.168.2.3	50257	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:20:11 UTC	14382	OUT	POST /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 598 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 X-Dropbox-Client-Yaps-Attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx;atlasservlet.web_platform-live:canary-pdx;atlasservlet.super_admin_and_deployment-live:canary-pdx;atlasservlet.chat-multithreaded_live:prod-pdx;atlasservlet.ux_analytics-live:canary-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you%E2%86%93.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:20:11 UTC	14384	OUT	Data Raw: 72 65 71 75 65 73 74 5f 69 64 3d 32 62 66 35 38 37 30 32 36 63 63 38 34 65 36 66 62 32 35 66 32 37 37 30 61 39 65 38 37 37 62 37 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 25 32 46 73 63 6c 25 32 46 66 69 25 32 46 70 71 62 79 67 76 61 6c 7a 70 38 32 33 36 36 33 6f 69 6f 30 71 25 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 25 32 35 45 32 25 32 35 38 36 25 32 35 39 33 2e 70 61 70 65 72 25 33 46 64 6c 25 33 44 30 25 32 36 72 6c 6b 65 79 25 33 44 34 75 33 74 62 68 79 33 76 7a 35 6d 75 69 70 6d 6e 38 6a 71 77 34 6f 6d 67 26 61 67 67 72 65 67 61 74 65 64 5f 73 77 5f 64 61 74 61 3d 25 37 42 25 Data Ascii: request_id=2bf587026cc84e6fb25f2770a9e877b7&url=https%3A%2F%2Fwww.dropbox.com%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2FPACIFICA-COMPANIES-shared-Vital-Documents-with-you%25E2%2586%2593.paper%3Fdl%3D0%26rlkey%3D4u3tbhy3vz5muipmn8jqw4omg&aggregated_sw_data=%7B%
2023-08-10 21:20:11 UTC	14384	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 19 X-Xss-Protection: 1; mode=block Content-Type: text/plain; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:20:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3ab7306048d1495aab45b0262e6eaf21 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
358	192.168.2.3	50258	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:20:11 UTC	14387	OUT	GET /log_js_sw_data HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:20:12 UTC	14387	IN	HTTP/1.1 404 Not Found Strict-Transport-Security: max-age=31536000; includeSubDomains X-Dropbox-Is-Upstream-Batch: true Content-Length: 1233 Content-Type: text/html Date: Thu, 10 Aug 2023 21:20:11 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c42faad966674cca97389595ec6b39f8 Connection: close
2023-08-10 21:20:12 UTC	14388	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 44 72 6f 70 62 6f 78 20 2d 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 66 6c 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 6d 65 74 61 73 65 72 76 65 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Dropbox - 404</title><link href="https://cfl.dropboxstatic.com/static/metaserve

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
359	192.168.2.3	50281	23.227.196.61	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:20:59 UTC	14404	OUT	GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1 Host: larationr.top Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://larationr.top/?bgbpbtvq Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: qPdM=xYHFKpmg9Mdh; qPdM.sig=qIcni4hFjbsas_M0Vz1WWgbjUak; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; brcap=0; buid=0.AScAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAA.AQABAAEAAAAtyolDObpQQ5VtlI4uGjEPowwP1JkfMjcNVbfQCeHns1Z9LOGlgI0L6QuoMrMiKDcBXag8QYkIr7se0A3rolIA4E_pcxSDz8c-4vO799JZE_5XTSYOjha1GNELxiRlgFcgAA; esctx=PAQABAAEAAAAtyolDObpQQ5VtlI4uGjEPx3MNeDf99axE4PeqP6nkSXpEmW1L9VrZE1hi_LbYDIYSevqfl1Psee0iQ7NyRDQrXCIRXFiP6kmszJM-lv6vWABR510a5Lqyhutp3kpTMW5vC5yRW_wYeLJwKsgJuZl8o-VfEbpRsCm8Vvi0RXdoQDb6G5fgyrPEodcIBgdoQ99J3Kw-tyBVk7XjoFZQRVzyxiTM1bo_p3Dq3Nrwx7GHifvhMETFaIqgC4FMESxcSZHw_lM0fwBz8FIkx6XwvsKk9_M90MSr4oAtxlAT3Ozqri9ts1hf3vZHRlPYTkMtpffb0t9wLyBEvl3LEUTag-BfcPwlGQAovyAFhBSoWzZxMUeKKeupVesOlCkraE1AzWiQ4eSOktk4GuA3d3lNgeklhh5SCztAB2BD4Tdgf79jg6wNzpDNQfpouLcpmQtt2eAgAA; fpc=AmtiFc-BLE5KrbEEZ3hXsam8Ae7AAQAAAFtLZ9wOAAAAuL4zcAMAAABdS2fcDgAAAA
2023-08-10 21:20:59 UTC	14406	IN	HTTP/1.1 200 OK Date: Thu, 10 Aug 2023 21:20:59 GMT Content-Type: application/x-javascript content-length: 109863 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 26 Jan 2023 00:32:54 GMT ETag: 0x8DAFF34DD9DC630 x-ms-request-id: cc29de99-c01e-0033-20d0-cb6b64000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20230810T212059Z-4uerzt5u8p36m5u4urf466xyzn0000000dng000000002pxm X-Cache: TCP_HIT Accept-Ranges: bytes Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
2023-08-10 21:20:59 UTC	14407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b db c8 91 30 fa 7d 7f 05 c5 93 68 00 13 a4 48 ea 6a 92 10 d7 e3 f1 64 bd c7 63 fb b5 3d d9 37 af cc f8 81 c8 a6 84 31 04 30 b8 d8 56 44 ee 6f 3f 55 d5 77 a0 49 c9 1e 27 9b 73 4e 9e 8c 45 34 1a 7d a9 ae ae ae aa ae cb c1 a3 bd 7f 6b 3d 6a 75 1f fe bf d6 db 77 4f de bc 6b bd fa b9 f5 ee 3f 9e bf f9 a9 f5 1a 9e fe d2 7a f9 ea dd f3 a7 cf 1e de 0e 76 8a ff bd bb 8e 8b d6 32 4e 58 0b fe 5e 46 05 5b b4 b2 b4 95 e5 ad 38 9d 67 f9 2a cb a3 92 15 ad 1b f8 37 8f a3 a4 b5 cc b3 9b 56 79 cd 5a ab 3c fb 8d cd cb a2 95 c4 45 09 1f 5d b2 24 fb dc f2 a0 b9 7c d1 7a 1d e5 e5 6d eb f9 6b bf 07 ed 33 68 2d be 8a 53 f8 7a 9e ad 6e e1 f7 75 d9 4a b3 32 9e b3 56 94 2e a8 b5 04 1e d2 82 b5 aa 74 c1 f2 d6 e7 eb 78 7e dd fa 25 9e e7 59 91 Data Ascii: k{0}hHjdc=710VDo?UwI'sNE4}k=juwOk?zv2NX^F[8g*7VyZ<E]$\|zmk3h-SznuJ2V.tx~%Y
2023-08-10 21:20:59 UTC	14422	IN	Data Raw: b5 83 5d cd d6 d3 73 7a 32 c0 26 c8 e3 9b 29 ff e3 f9 e4 9e 2b 72 16 fc f5 7d d1 59 c3 7f 7f e0 69 0b 36 68 6a 2f 5f fe 44 99 1d ea 3e c1 22 b6 c1 58 6e 0e 32 31 06 09 af 13 b6 c3 b6 19 8a c7 74 f8 fb bb 3e 7d 8c 8b 6d 20 fc 48 83 3d 38 ff ce 43 1d e0 26 33 1c dc e9 ac 2c e9 84 24 af 02 6d 4b b1 f1 8d e4 b3 a9 07 6b ee 63 10 b7 c3 46 10 b7 b2 c7 13 2c fe 12 ad fe c4 83 02 66 3c ae fe 91 ef 78 13 18 d5 9f 66 69 81 a1 ab 29 9e da 99 df 7c a1 2a bf c4 ac a2 18 77 7b e0 1b 25 38 9e a3 2d a9 8c 71 00 c7 3c 68 db 71 5f 04 6d 3b 3e 39 f1 7b b4 ae 6f 59 09 84 06 bb 3d f5 7b d0 e1 0a 08 d8 8b b8 28 6b 61 bc 39 29 c7 a0 ce 44 e6 3f 50 4a dd 0c d3 fd 3e c9 31 50 46 1b 0b da 94 4d 41 56 e1 dc d4 1b cc 40 68 56 d4 c5 b5 ea 1f e3 d5 9f 11 d3 23 ec d5 fe c4 7a d5 e6 e2 Data Ascii: ]sz2&)+r}Yi6hj/_D>"Xn21t>}m H=8C&3,$mKkcF,f<xfi)\|*w{%8-q<hq_m;>9{oY={(ka9)D?PJ>1PFMAV@hV#z
2023-08-10 21:20:59 UTC	14423	IN	Data Raw: 23 30 22 75 c1 a1 5b a0 67 5c a3 58 32 27 9a 62 c7 a1 cd 04 4a 6f 34 45 70 03 b3 9f b8 bb 44 67 b9 38 b0 3b 37 09 72 77 d0 9d 93 c7 5d ad 74 cb 27 62 b8 95 4f e1 cc ec 52 35 5a 41 ba 85 ae 58 30 9c 7a a4 44 c9 ad f6 53 1e c9 0b d9 b1 eb 4e c8 a4 8e e4 ba 86 5b 12 3a 6f 2d f6 c5 6d f2 c4 30 68 7d 23 11 e4 9e 9b 3f 92 16 d1 30 7e c9 4a 72 85 b5 29 df 30 5f 1a eb d9 6c 18 53 82 a5 60 c4 f4 88 e1 a4 79 f5 39 95 31 36 4c f7 9f da 08 80 a3 9a ba 59 be 74 46 4c b3 9b cc 37 3d 92 b8 1f ee 9d 10 a3 05 97 29 9e c4 3e 2e 6c de d3 d8 56 b4 50 23 73 d1 f4 3b b9 0b e5 c7 f5 6d ee f9 9b b1 01 46 c9 8c 23 77 85 a0 24 36 cb 28 53 7c 77 93 65 37 c5 fa c6 fb 2d 3c b6 f1 99 42 0b 5e d1 8d 33 ba 76 60 76 87 62 70 1d c2 5b b3 43 d5 28 26 75 c7 17 04 33 de 04 4e c5 54 84 4a a3 Data Ascii: #0"u[g\X2'bJo4EpDg8;7rw]t'bOR5ZAX0zDSN[:o-m0h}#?0~Jr)0_lS`y916LYtFL7=)>.lVP#s;mF#w$6(S\|we7-<B^3v`vbp[C(&u3NTJ
2023-08-10 21:20:59 UTC	14433	IN	Data Raw: cd 3d fb 73 db 36 d2 bf 7f 7f 85 cd 7a 1c 22 82 9f 79 34 21 c3 ea 1c 57 ed b4 13 c7 19 ab b9 cc 8d ac 78 68 99 b2 d9 c8 62 4a 52 76 12 4b f7 b7 df 3e 00 10 20 29 c5 c9 f5 66 be 1f 6c 52 20 9e 8b c5 02 fb c0 2e 05 2d d7 3f 0a ce 04 a9 97 98 f7 e2 02 bd 76 20 51 a7 df 80 eb 09 bf 8c c7 f4 64 d7 ed 4e 1e 4e 3a 98 4c 74 6a 41 c9 c9 75 5a d2 8b 62 c3 9c 32 2a ed 18 aa 77 d2 27 a6 8a a6 1a 75 30 c4 8e aa d8 64 91 cb 00 d7 48 ac 0a 8a a2 33 6b 9d a4 b9 b1 4f 56 31 db a3 db 8b a6 08 cb 43 4f cb f0 ed ea 22 cd ef d7 08 65 5d d2 c4 ec 3a 2e 3e b4 c8 c9 76 49 58 f9 55 a7 91 2b 02 7d d4 d7 fb 20 19 aa f5 1a e2 3b e6 6f f3 9f 87 2a a6 6c 02 67 2d f5 02 db 6e 3e 75 7f 99 e8 27 39 ee 85 4b e3 9d 3c 7f fc 37 45 45 82 dd 97 82 df 3c 7d fe e4 6b e1 3c ed 9d b9 4d 0b de a6 Data Ascii: =s6z"y4!WxhbJRvK> )flR .-?v QdNN:LtjAuZb2w'u0dH3kOV1CO"e]:.>vIXU+} ;olg-n>u'9K<7EE<}k<M

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.3	49833	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1739	OUT	GET /static/webpack/production/3a78e91d6aadf6acf68f.vvRP4rRPgDOCZoHXFooGsAZ7v3LTGdymEN13v3SRmS0.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:59 UTC	1869	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 38869 Connection: close Date: Thu, 10 Aug 2023 21:19:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 02 Aug 2023 19:34:54 GMT ETag: "12798204852e9d8cc8328254469ad415" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 9c0ce977a13f3d9bbc6eed6540faf728.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: glqabZ86s7NmIzSe5LYXs7DD0hJ4h9FLEYaWCG1M6reL-kCJZAeLeg==
2023-08-10 21:18:59 UTC	1870	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec 7d 7b 7f db 46 ae e8 ff fa 14 b6 7e 3d 5a 32 19 ab 92 93 74 bb 54 59 5d c7 71 5a b7 71 ec da 4e d2 d6 d7 c7 4b 49 23 99 b1 44 2a 7c f8 11 49 f7 b3 5f 00 f3 e4 43 8e b3 ed b6 7b f6 6c 77 63 91 c3 79 62 30 18 00 03 60 9c 9b 30 1a c5 37 ed 8b 8b 57 87 3b 2f 76 9e bf da a3 87 bd 17 17 bb df bf 79 fd e3 c9 c5 85 ff c9 1c cb e5 d9 b9 db 9e e7 e9 a5 73 76 d6 bc e6 90 3d 49 ff df 3c 98 f3 e4 22 18 cd c2 e8 22 1e 8f 2f ae 43 7e 73 11 47 d3 3b f9 65 00 d5 f2 44 bd e4 d1 68 ca e5 cb 70 1a e7 a3 8b 51 3c 54 95 84 d1 78 9a f3 68 a8 b3 ff bf e1 d3 27 cf be 1e 0e b7 9b e7 6c d1 e8 76 9e 7a e3 3c 1a 66 61 1c 39 9c 65 2c 72 17 cd 3c e5 1b 69 96 84 c3 ac d9 8b da 23 27 63 cd a0 c9 1c 9d cf 5d 24 3c cb 93 68 63 be 72 5d 95 63 50 9b 63 6c e5 Data Ascii: }{F~=Z2tTY]qZqNKI#D*\|I_C{lwcyb0`07W;/vysv=I<""/C~sG;eDhpQ<Txh'lvz<fa9e,r<i#'c]$<hcr]cPcl
2023-08-10 21:19:00 UTC	1981	IN	Data Raw: 8a bb ec 1a 47 5f 34 25 84 ee 1e 04 b7 c8 18 49 cd fd 84 ec ac f7 28 1f c5 97 c1 c8 c3 b6 8b 08 72 62 a2 79 6f ce 6e 00 32 8a fd 4a 0f 50 b3 61 fb f9 14 dc eb a0 da 3d 31 7a 11 98 c1 95 7e 86 0b 2e 8a 1f f3 94 82 1c 75 57 18 2f 11 98 ed 29 87 59 e2 de 99 28 28 40 eb 3a a9 7b ae 24 76 d8 49 86 7d f9 79 3c 0d e7 d0 cd c6 58 46 b7 54 20 f2 9a 03 20 52 2f c3 ac b9 72 cf bd 33 8c f6 21 0a 60 63 50 80 78 11 af 8e 89 0e ae 83 70 8a a8 25 00 d3 bb 6e b5 ae 29 be ad 7b ce ec 96 d3 cb 70 0c fd 5a 50 78 24 9e 78 22 95 de 4e c4 27 57 36 8d 5b 31 bb f3 27 ed 5b 76 08 7f ef d0 d7 aa 4d 76 44 18 c5 1f fd ad 60 18 02 e2 e8 72 d5 56 70 66 7b f0 22 22 07 b2 2b 78 d4 73 d1 83 b6 4e 68 a6 f6 d3 78 86 21 a3 c2 e1 ab e0 2e ce 33 15 88 d1 36 71 b9 71 42 6d 7e 82 e1 3a 6f ce dd Data Ascii: G_4%I(rbyon2JPa=1z~.uW/)Y((@:{$vI}y<XFT R/r3!`cPxp%n){pZPx$x"N'W6[1'[vMvD`rVpf{""+xsNhx!.36qqBm~:o
2023-08-10 21:19:00 UTC	1997	IN	Data Raw: 1e 60 3b cf 25 0c b5 19 bf d1 52 e0 30 59 6e 27 20 69 11 ab 22 06 56 45 84 f5 77 44 4c 82 fd d1 b7 45 65 88 eb 56 da 28 ab 4b 54 c9 95 21 0b 69 11 ff 02 a6 81 ee 8d 04 89 a0 4d 6e 2e a8 dc e5 ca 1f 29 42 3b f3 65 e2 c0 87 64 3c ef ce 97 cb 58 58 37 2b b7 06 35 92 19 1e a2 cf fc 01 6e ff 16 59 04 79 04 c8 e2 80 cd ce 5d 2d 94 6c 6a bc c9 5d 67 c0 2e dd de 35 b2 8d c2 e4 00 2a 18 14 c8 e7 40 15 9c 14 0b ce f0 d4 79 a2 70 52 6c 97 33 7d a0 75 e8 df a0 c5 07 40 5b 29 00 de c3 c0 d8 82 38 13 ef 84 29 69 d4 db 5b f9 ef 7b 02 f6 d0 89 f7 96 d1 0c 5d 50 44 65 61 98 87 b6 6b 8f 09 cd e0 2e 5e 3b 92 14 47 74 3b 5a 26 5f f0 0a 07 61 9e 52 b2 62 a1 70 b4 bd 92 e9 fa be 2b ef 0e 83 0d 89 1c 6b b2 73 7f 9f ae b1 c0 99 20 9b a3 98 69 9b 11 20 21 ca fe 28 c7 3d d0 d6 83 Data Ascii: `;%R0Yn' i"VEwDLEeV(KT!iMn.)B;ed<XX7+5nYy]-lj]g.5*@ypRl3}u@[)8)i[{]PDeak.^;Gt;Z&_aRbp+ks i !(=

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.3	49834	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1744	OUT	GET /static/webpack/production/58cc5c6db7c1186fa9f3.zY6o-XeH44T0_vpOvZUDLeJeznVBNUebzrAuflJz95U.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:00 UTC	1931	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 4524 Connection: close Date: Thu, 10 Aug 2023 21:19:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 08 Jul 2023 03:20:22 GMT ETag: "078bf31ea544e63eeb616600b04136eb" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 6ea1443d3dc39c2be7c23883fb0bd3e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 1j-pI2lCnruinnomYUYBLLpYavH2GzNbKOT7eOpwxL5cALbw9rtGGg==
2023-08-10 21:19:00 UTC	1931	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 5a 7b 73 db 46 92 ff 9f 9f 82 c2 a6 54 40 65 04 91 8e ed ac c1 43 54 b6 a4 bd 78 d7 8e 5d 7e 64 ef 4e a7 92 87 c0 90 44 0c 0e 70 83 01 25 06 c4 7e f6 ed 9e 07 1e 24 28 27 75 2e 97 88 19 cc a3 a7 9f bf ee 81 7b 9f f0 38 bb f7 ef ee de bc 7b 79 f5 f2 d5 9b 6b f5 70 7d 75 77 f9 f3 e7 5f fe f1 f1 ee 2e fc e6 88 dd ee e6 d6 f3 f3 b2 58 b9 37 37 ce 86 c1 70 51 fc 2b a7 39 13 77 73 98 cc 84 6d 94 3c 4e 99 69 44 69 56 c6 77 71 16 d9 a1 09 5f a4 25 e3 51 33 9c 53 99 6c d8 5d cc 8a af 32 cb bb 9d ff 7a 31 7d fa 94 c5 4f 9e 39 b7 a4 1a 3d 79 f6 34 58 94 3c 92 49 c6 5d 46 24 e1 5e e5 94 05 1b 17 52 24 91 74 66 dc 17 ae f4 e0 27 76 25 71 2e 57 2c fa 3a cf 1e 1c e2 36 b3 bc 4a 30 59 0a 3e a6 b5 d7 0c fc 40 e3 24 7b 55 4a 99 f1 c1 b1 69 Data Ascii: Z{sFT@eCTx]~dNDp%~$('u.{8{ykp}uw_.X77pQ+9wsm<NiDiVwq_%Q3Sl]2z1}O9=y4X<I]F$^R$tf'v%q.W,:6J0Y>@${UJi

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.3	49836	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1745	OUT	GET /pithos/privacy_consent HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
2023-08-10 21:18:59 UTC	1848	IN	HTTP/1.1 307 Temporary Redirect Content-Security-Policy: sandbox Location: https://www.dropbox.com/pithos/host%3Awww.dropbox.com/privacy_consent Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3; HttpOnly; Path=/; SameSite=None; Secure X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 1; mode=block Content-Type: text/html; charset=utf-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:18:59 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 172 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c98ff9e50e654e9887269c51e0f712d1 Connection: close
2023-08-10 21:18:59 UTC	1849	IN	Data Raw: 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 0d 0a 54 68 65 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 6d 6f 76 65 64 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 69 74 68 6f 73 2f 68 6f 73 74 25 33 41 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5f 63 6f 6e 73 65 6e 74 3b 0d 0a 79 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 0d 0a 0d 0a 0d 0a Data Ascii: 307 Temporary RedirectThe resource has been moved to https://www.dropbox.com/pithos/host%3Awww.dropbox.com/privacy_consent;you should be redirected automatically.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.3	49839	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1745	OUT	GET /paper/ep/redirect/image?url=https%3A%2F%2Fpaper-attachments.dropboxusercontent.com%2Fs_8D66F23E9081292BB340707BF77F870E88B0620DDDFBF6FC9FE7C1CDD93906F0_1691690588179_751d-69c2-bfc5-7ea9.png&hmac=IVMu5yKoRDONl4U8UOJYrumevZezS7mUN0aD2%2FxDcNg%3D HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
2023-08-10 21:18:59 UTC	1850	IN	HTTP/1.1 302 Found Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Date: Thu, 10 Aug 2023 21:18:59 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:18:59 GMT Location: https://uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com/p/thumb/AB9lmxu6tlgeO1DY9f4mZYQIZtSNHK7X--vfWqgNa1P4Zq17YwXLsxJqY8dO22TUvc889Io-U7Nm4R2ItGOCgVUv524NL2y5DNHF11D-KeaE1auFPb6fvo9LHETT3pPe-QdvVSVNFo8ozXiWsiXBPxfYpotT45lR2Hahvm6VTOhSwxg9sNZ8SJJn09oDQH7_BCDpQSplkS_VPQR9owSmJwLdxTjdOJZXH84owBImVlv4qg_TXRp0MWY5TpuRc-dL50aibHPoXXnITaIZ1R9wly9X643PV-S5uxo0d2e8oNEuLP55UDdUhQrkFYkhzBHiPOEw8V8HWSbctlS3dO2Cq3Ot9RWQUZKq1R7KFZvSOoROt1nJYR3yC4gqp5p1Ky1xcWK-fN6veA8d59R0dokwD9fzfGUIH_xGN1otBRFO5-EvMA/p.png Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Force-Header-Redirect: true X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/ep/redirect/image X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: bb6a1dbb-86a4-41a3-b8a9-bcf35e193a81 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 0 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 54fce515387c429a9265ae347db31081 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.3	49712	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:54 UTC	323	OUT	POST /paper/cloud-docs/edit?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0&parent_frame_performance=%7B%22fetchStart%22%3A1691734731033%2C%22requestStart%22%3A1691734731251%2C%22navigationStart%22%3A1691734731029%7D&parent_frame_referrer= HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 622 Cache-Control: max-age=0 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://www.dropbox.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
2023-08-10 21:18:54 UTC	324	OUT	Data Raw: 61 75 74 68 5f 74 6f 6b 65 6e 3d 63 64 2e 41 44 39 6f 74 4e 47 38 5f 64 53 62 44 72 5f 57 4e 4b 6a 61 64 69 75 50 35 39 41 37 77 74 45 52 47 79 58 6e 43 56 30 43 34 4d 75 43 61 73 53 55 4a 38 61 36 55 37 34 72 51 44 6e 49 57 56 4a 59 52 4f 6d 6f 48 69 5f 68 33 64 44 44 6f 4f 62 5f 4e 67 73 75 77 67 61 33 50 2d 6d 63 38 76 6d 4b 39 4b 4a 6d 53 68 4e 75 37 76 67 30 6e 6b 4a 33 79 39 48 34 56 65 58 4c 7a 47 6d 77 39 73 6e 69 46 4b 71 37 35 54 69 67 4b 6d 39 65 38 6b 52 76 6e 59 51 6c 50 62 75 50 32 5f 78 6e 76 39 41 68 79 43 39 52 44 66 7a 53 76 37 5a 4d 44 64 5a 69 61 48 52 2d 6c 7a 49 42 56 50 51 6e 4d 4a 6b 45 58 5f 39 4a 6d 35 6c 42 30 6c 73 43 39 67 71 68 56 75 4a 4e 30 36 78 72 38 4e 6a 78 2d 49 66 74 43 50 53 79 61 43 6a 52 41 68 6a 44 39 48 6a 45 71 Data Ascii: auth_token=cd.AD9otNG8_dSbDr_WNKjadiuP59A7wtERGyXnCV0C4MuCasSUJ8a6U74rQDnIWVJYROmoHi_h3dDDoOb_Ngsuwga3P-mc8vmK9KJmShNu7vg0nkJ3y9H4VeXLzGmw9sniFKq75TigKm9e8kRvnYQlPbuP2_xnv9AhyC9RDfzSv7ZMDdZiaHR-lzIBVPQnMJkEX_9Jm5lB0lsC9gqhVuJN06xr8Njx-IftCPSyaCjRAhjD9HjEq
2023-08-10 21:18:54 UTC	412	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self' https://www.dropbox.com; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:18:54 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:18:54 GMT P3p: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA" Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Set-Cookie: ET=b66feefb809d9a6d; expires=Wed, 01-Jan-3000 08:00:00 GMT; domain=.www.dropbox.com; path=/paper; secure; SameSite=None; httponly Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/cloud-docs/edit X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 5abe6798-488b-44f1-b742-8ee25c8f0245 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 84ea683669c64acda454779084f155c0 Connection: close Transfer-Encoding: chunked
2023-08-10 21:18:54 UTC	413	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 45 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 2f 3e 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 49 4d 41 47 45 49 Data Ascii: 2000<!DOCTYPE html><html class="no-js" lang="en"> <head> <meta charSet="utf-8" /> <meta httpEquiv="X-UA-Compatible" content="IE=edge" /> <meta name="referrer" content="origin" /> <meta name="robots" content="NOINDEX, NOIMAGEI
2023-08-10 21:18:54 UTC	425	IN	Data Raw: 32 30 30 30 0d 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 73 69 64 65 62 61 72 2d 61 63 74 69 76 65 20 68 70 2d 65 78 70 65 72 69 6d 65 6e 74 2d 66 69 78 2d 72 74 6c 2d 70 6f 63 6b 65 74 20 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 64 79 2d 77 72 61 70 70 65 72 22 3e 3c 64 69 76 20 69 64 3d 22 62 61 6e 6e 65 72 2d 6f 75 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 63 6c 6f 75 64 5f 64 6f 63 73 2d 61 70 70 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 70 2d 61 70 70 2d 63 6f 6e 74 61 69 6e 65 72 20 68 70 2d 61 70 70 2d 70 61 70 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 68 69 6e 2d 73 70 69 6e 6e 79 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 Data Ascii: 2000 <body class="sidebar-active hp-experiment-fix-rtl-pocket "> <div class="body-wrapper"><div id="banner-outer-container"></div><div id="cloud_docs-app-container"><div class="hp-app-container hp-app-paper"><div class="thin-spinny"></div><div
2023-08-10 21:18:54 UTC	441	IN	Data Raw: 74 74 61 63 68 6d 65 6e 74 73 2e 64 72 6f 0d 0a Data Ascii: ttachments.dro
2023-08-10 21:18:54 UTC	441	IN	Data Raw: 32 30 30 30 0d 0a 70 62 6f 78 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 73 5f 38 44 36 36 46 32 33 45 39 30 38 31 32 39 32 42 42 33 34 30 37 30 37 42 46 37 37 46 38 37 30 45 38 38 42 30 36 32 30 44 44 44 46 42 46 36 46 43 39 46 45 37 43 31 43 44 44 39 33 39 30 36 46 30 5f 31 36 39 31 36 39 30 35 38 38 31 37 39 5f 37 35 31 64 2d 36 39 63 32 2d 62 66 63 35 2d 37 65 61 39 2e 70 6e 67 22 20 64 61 74 61 2d 61 63 65 2d 67 61 6c 6c 65 72 79 2d 63 6c 69 70 62 6f 61 72 64 2d 6a 73 6f 6e 3d 22 7b 26 71 75 6f 74 3b 69 74 65 6d 73 26 71 75 6f 74 3b 3a 5b 7b 26 71 75 6f 74 3b 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 69 6d 61 67 65 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 75 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 70 61 70 65 Data Ascii: 2000pboxusercontent.com/s_8D66F23E9081292BB340707BF77F870E88B0620DDDFBF6FC9FE7C1CDD93906F0_1691690588179_751d-69c2-bfc5-7ea9.png" data-ace-gallery-clipboard-json="{"items":[{"type":"image","url":"https://pape
2023-08-10 21:18:55 UTC	449	IN	Data Raw: 32 30 30 30 0d 0a 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 20 20 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 20 69 64 3d 22 63 6c 69 65 6e 74 2d 76 61 72 73 2d 6a 73 6f 6e 2d 74 61 67 22 3e 0a 20 20 20 20 7b 22 69 6e 69 74 69 61 6c 44 61 74 61 53 74 6f 72 65 53 74 61 74 65 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 61 64 43 6c 69 65 6e 74 56 61 72 73 2d 7a 6a 6f 32 4b 6b 74 57 4c 63 56 47 46 6f 6b 6d 31 79 65 6f 45 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 31 30 2c 22 63 6f 6c 6c 61 62 5f 63 6c 69 65 6e 74 5f 76 61 72 73 22 3a 7b 22 68 69 73 74 6f 72 69 63 61 6c 41 75 74 68 6f 72 44 61 74 61 22 3a 7b 22 64 2e 31 67 67 39 75 41 31 69 55 67 64 44 6d 71 6b 54 6f 32 71 6f 77 50 69 4c 32 77 4b 77 66 42 33 78 Data Ascii: 2000/script> <script type="application/json" id="client-vars-json-tag"> {"initialDataStoreState":{"data":{"padClientVars-zjo2KktWLcVGFokm1yeoE":{"version":10,"collab_client_vars":{"historicalAuthorData":{"d.1gg9uA1iUgdDmqkTo2qowPiL2wKwfB3x
2023-08-10 21:18:55 UTC	457	IN	Data Raw: 32 30 30 30 0d 0a 75 6d 54 61 73 6b 73 22 3a 30 2c 22 74 65 6d 70 6c 61 74 65 43 6f 6c 6f 72 22 3a 22 23 32 39 62 63 38 30 22 2c 22 73 68 61 72 65 61 62 6c 65 4d 6f 62 69 6c 65 50 61 64 55 72 6c 22 3a 22 5c 75 30 30 32 46 70 61 70 65 72 5c 75 30 30 32 46 64 6f 63 5c 75 30 30 32 46 50 41 43 49 46 49 43 41 2d 43 4f 4d 50 41 4e 49 45 53 2d 73 68 61 72 65 64 2d 56 69 74 61 6c 2d 44 6f 63 75 6d 65 6e 74 73 2d 77 69 74 68 2d 79 6f 75 2d 7a 6a 6f 32 4b 6b 74 57 4c 63 56 47 46 6f 6b 6d 31 79 65 6f 45 22 7d 2c 22 63 6c 6f 75 64 44 6f 63 73 49 6e 69 74 69 61 6c 53 74 61 74 65 2d 63 6c 6f 75 64 44 6f 63 73 49 6e 69 74 69 61 6c 53 74 61 74 65 22 3a 7b 22 69 6e 69 74 69 61 6c 43 6c 6f 75 64 44 6f 63 49 64 22 3a 22 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 Data Ascii: 2000umTasks":0,"templateColor":"#29bc80","shareableMobilePadUrl":"\u002Fpaper\u002Fdoc\u002FPACIFICA-COMPANIES-shared-Vital-Documents-with-you-zjo2KktWLcVGFokm1yeoE"},"cloudDocsInitialState-cloudDocsInitialState":{"initialCloudDocId":"DBzT6sb01xsOk7nt0q
2023-08-10 21:18:55 UTC	473	IN	Data Raw: 37 35 65 38 64 63 34 32 66 35 36 31 66 61 0d 0a 62 36 33 0d 0a 62 33 61 63 30 61 39 35 32 35 31 62 35 37 36 33 62 37 34 30 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 61 70 65 72 2e 64 72 6f 70 62 6f 78 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 77 65 62 70 61 63 6b 2f 70 72 6f 64 75 63 74 69 6f 6e 2f 35 37 36 36 35 39 61 32 32 31 36 34 62 65 65 64 61 66 30 64 2e 69 42 6b 4c 52 38 6b 51 69 56 58 6a 79 75 5f 2d 62 49 6f 6e 43 43 33 35 4d 49 69 4a 73 79 4d 31 35 55 34 45 78 56 62 6a 66 6b 38 2e 6a 73 2e 67 7a 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 31 62 65 61 32 35 37 35 65 38 64 63 34 32 66 35 36 Data Ascii: 75e8dc42f561fab63b3ac0a95251b5763b740" src="https://paper.dropboxstatic.com/static/webpack/production/576659a22164beedaf0d.iBkLR8kQiVXjyu_-bIonCC35MIiJsyM15U4ExVbjfk8.js.gz" crossorigin="anonymous"></script> <script nonce="1bea2575e8dc42f56

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.3	49838	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1780	OUT	GET /static/api/2/dropins.js HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
2023-08-10 21:19:00 UTC	1936	IN	HTTP/1.1 200 OK Server: envoy Date: Thu, 10 Aug 2023 21:18:59 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 39314 Vary: Accept-Encoding Last-Modified: Tue, 08 Aug 2023 20:11:00 GMT X-Content-Type-Options: nosniff X-Cached: HIT Expires: Thu, 10 Aug 2023 22:18:59 GMT Access-Control-Allow-Origin: * Timing-Allow-Origin: https://www.dropbox.com Accept-Ranges: bytes Cache-Control: no-cache, no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: e42a2ec338194363bf7ef96675abc7a1 Connection: close
2023-08-10 21:19:00 UTC	1936	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 64 72 6f 70 69 6e 73 5f 73 64 6b 5f 76 32 2e 6a 73 2e 4c 49 43 45 4e 53 45 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6f 29 65 5b 74 5d 3d 6f 5b 74 5d 7d 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 69 66 28 6f 5b 6e 5d 29 72 65 74 75 72 6e 20 6f 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6f 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 74 29 2c 69 Data Ascii: /! For license information please see dropins_sdk_v2.js.LICENSE /!function(e,o){for(var t in o)e[t]=o[t]}(window,function(e){var o={};function t(n){if(o[n])return o[n].exports;var i=o[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i
2023-08-10 21:19:00 UTC	1952	IN	Data Raw: 65 4c 69 73 74 65 6e 65 72 28 77 69 6e 64 6f 77 2c 22 6d 65 73 73 61 67 65 22 2c 63 29 7d 2c 4f 62 6a 65 63 74 28 6e 2e 66 29 28 65 2c 72 2e 6f 6e 43 6c 6f 73 65 2c 72 2e 6f 70 74 69 6f 6e 73 29 29 7d 3b 44 72 6f 70 62 6f 78 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 77 69 6e 64 6f 77 2c 22 6d 65 73 73 61 67 65 22 2c 63 29 7d 65 Data Ascii: eListener(window,"message",c)},Object(n.f)(e,r.onClose,r.options))};Dropbox.addListener(window,"message",c)}e
2023-08-10 21:19:00 UTC	1965	IN	Data Raw: 6c 73 65 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 28 6e 2e 6a 29 28 37 33 35 2c 37 30 30 29 3b 72 2e 6f 6e 43 6c 6f 73 65 3d 74 28 4f 62 6a 65 63 74 28 6e 2e 62 29 28 72 2e 6f 70 74 69 6f 6e 73 2c 72 2e 6f 70 74 69 6f 6e 73 2e 69 66 72 61 6d 65 29 2c 6c 2c 72 2e 6f 70 74 69 6f 6e 73 29 2e 6f 6e 43 6c 6f 73 65 7d 7d 65 6c 73 65 20 61 6c 65 72 74 28 22 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 74 68 65 20 44 72 6f 70 62 6f 78 20 43 68 6f 6f 73 65 72 22 29 7d 3b 44 72 6f 70 62 6f 78 2e 63 68 6f 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 75 6c 6c 3d 3d 65 26 26 28 65 3d 7b 7d 29 2c 65 3d 63 28 65 29 2c 70 28 65 29 7d 2c 44 72 6f 70 62 6f 78 2e 63 61 6e 63 65 6c 43 68 6f 6f 73 65 72 3d 66 75 6e 63 74 69 6f Data Ascii: lse{var l=Object(n.j)(735,700);r.onClose=t(Object(n.b)(r.options,r.options.iframe),l,r.options).onClose}}else alert("Your browser does not support the Dropbox Chooser")};Dropbox.choose=function(e){null==e&&(e={}),e=c(e),p(e)},Dropbox.cancelChooser=functio
2023-08-10 21:19:00 UTC	2011	IN	Data Raw: 73 73 28 6f 2e 70 61 72 61 6d 73 2c 74 68 69 73 2e 6c 61 73 74 4e 61 76 69 67 61 74 69 6f 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 75 72 73 6f 72 5f 63 68 61 6e 67 65 64 22 3a 74 68 69 73 2e 6c 61 73 74 4e 61 76 69 67 61 74 69 6f 6e 3d 7b 63 75 72 73 6f 72 3a 6f 2e 70 61 72 61 6d 73 7d 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6c 6f 73 65 5f 64 69 61 6c 6f 67 22 3a 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 61 6e 63 65 6c 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 61 6e 63 65 6c 28 74 68 69 73 2e 6c 61 73 74 4e 61 76 69 67 61 74 69 6f 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 65 73 69 7a 65 22 3a 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 52 65 73 69 7a 65 26 26 74 68 69 73 2e 6f Data Ascii: ss(o.params,this.lastNavigation);break;case"cursor_changed":this.lastNavigation={cursor:o.params};break;case"close_dialog":void 0!==this.options.onCancel&&this.options.onCancel(this.lastNavigation);break;case"resize":void 0!==this.options.onResize&&this.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.3	49840	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1781	OUT	GET /static/webpack/production/d5234f674cac144b79bf.cDu6D0nBAZvocplrTbBtBSOvdUuoODvKDRycRtZhb4I.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:00 UTC	1953	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 10945 Connection: close Date: Thu, 10 Aug 2023 21:19:00 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 10 Jul 2023 21:31:35 GMT ETag: "2a94e693fb118faa6fd42f801249da80" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 b03c46754456cd1729ff37c2faafd4ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 43rRvfi9VWRcqcmywU51ewETAmNhftmjn24qHMH2vT6YaOvWMaRm0Q==
2023-08-10 21:19:00 UTC	1953	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 7d 7d 77 d3 c6 b6 f7 ff fe 14 8e 6e af 91 4e 84 48 80 b6 b7 32 c2 27 90 40 53 20 a1 01 5a 5a 5f af 5c c5 1e c7 22 8e e4 4a a3 04 63 eb 7c f6 67 ef 3d af 92 e5 40 ef 3d eb 59 ab c5 b6 34 af 7b f6 fe ed 97 d9 33 71 6f 93 74 92 dd 06 e7 e7 af 4f 0f 0e 0f 9e bd 3e a2 2f 47 87 e7 cf 7f fe 70 f2 ea dd f9 79 f4 d5 12 eb f5 70 e4 05 8b b2 98 b9 c3 a1 73 c3 a0 78 5e fc 6b 11 2f 58 7e 7e 01 95 59 ae 7e 94 e9 64 ce e4 8f f1 3c 2b 27 e7 93 6c ac 8a a6 31 4f 6e d8 f9 84 15 57 3c 5b c8 87 8b 64 aa de df 24 ec f6 3c 4b e7 cb 7f 15 ff da ff fe e1 f7 fb 3f 5c 30 67 e4 af 3a fb 7b 8f f7 c2 69 99 8e 79 92 a5 2e f3 b9 9f 7b 2b a7 2c 58 b7 e0 79 32 e6 4e 3f 0f 26 2e f7 9d d8 f1 5d 5d ce 5b e5 8c 97 79 da 4d 2b cf eb ab c7 5d 68 c0 5b dd c4 79 Data Ascii: }}wnNH2'@S ZZ_\"Jc\|g=@=Y4{3qotO>/Gpypsx^k/X~~Y~d<+'l1OnW<[d$<K?\0g:{iy.{+,Xy2N?&.]][yM+]h[y

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.3	49841	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1848	OUT	GET /static/webpack/production/44358a50a900da035ada.LGT6HPSCk03xwXtkplDP_6Ti9yb6DDIdp68pzO0HY98.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:00 UTC	2037	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 15547 Connection: close Date: Thu, 10 Aug 2023 21:19:01 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 10 Jul 2023 21:31:51 GMT ETag: "dd977c5bf0413b561e91851dc4a22d24" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 f6d3d027dc70c7291c2f685efb187ab2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: gndjHTnb4pLKHDOz7kx57k3rpUIgJpnC18EARCVwD0-PESqCZ_0L0Q==
2023-08-10 21:19:00 UTC	2038	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 7d 6b 77 db b6 b2 e8 77 fd 0a 89 27 5b 87 ac 61 46 72 da ee 96 0a a3 95 d8 4e e3 36 b1 53 3b 69 9a 2a da 2a 4d 41 12 13 19 54 49 d0 8f 48 ba bf fd ce e0 41 82 0f c5 e9 3e fb dc 9b 95 65 91 20 08 0e 06 83 79 61 06 b0 6f 22 36 8d 6f dc c9 e4 e5 d9 d3 a3 a7 cf 5e 1e 8b 8b e3 a3 c9 e1 8b b7 a7 bf 5c 4c 26 fe bd 35 36 9b d1 d8 71 57 59 ba b0 47 23 eb 9a 42 f5 24 fd 3f ab 60 45 93 c9 25 bc 4c 13 7d 93 b1 e9 92 aa 9b 70 19 67 d3 c9 34 0e 75 55 16 f0 e8 9a 4e a6 34 fd c4 e3 95 2a 5c 45 33 fd fc 3a a2 37 93 98 2d ef ac 31 59 b7 fa df f5 bd 59 c6 42 1e c5 cc a6 84 93 c4 59 5b 59 4a db 29 4f a2 90 5b 83 c4 4d 6c ee c0 cf d4 e6 c4 7a 1a 86 34 4d e3 e4 ee 59 30 9d 53 8b d8 f9 bb ce 3a a1 3c 4b 58 3b da 3a 79 f5 d3 98 47 b3 28 0c b0 c6 Data Ascii: }kww'[aFrN6S;i*MATIHA>e yao"6o^\L&56qWYG#B$?`E%L}pg4uUN4\E3:7-1YYBY[YJ)O[Mlz4MY0S:<KX;:yG(

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.3	49843	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1849	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
2023-08-10 21:19:00 UTC	1964	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Thu, 10 Aug 2023 21:18:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: f5a0a60367914cb59ecba6061a141960 Connection: close
2023-08-10 21:19:00 UTC	1964	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.3	49842	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1868	OUT	GET /2/client_metrics/record HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
2023-08-10 21:19:00 UTC	2023	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 116 Date: Thu, 10 Aug 2023 21:19:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 683d1c169888477699f9209ca482186f Connection: close
2023-08-10 21:19:00 UTC	2024	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 69 65 6e 74 5f 6d 65 74 72 69 63 73 2f 72 65 63 6f 72 64 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "client_metrics/record": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.3	49844	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:59 UTC	1868	OUT	GET /pithos/host%3Awww.dropbox.com/privacy_consent HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:00 UTC	2026	IN	HTTP/1.1 200 OK Content-Security-Policy: base-uri 'self' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https://* ws://127.0.0.1:/ws wss://docsend-uppy-companion.herokuapp.com/ ; default-src 'none' ; font-src https:// data: ; form-action 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; media-src https://* blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; script-src 'unsafe-eval' https://www.dropbox.com/static/api/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js 'nonce-xQYSkz9IZ9nizVNxZ0fU' ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; worker-src https://www.dropbox.com/static/serviceworker/ blob: Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-dynamic ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-xQYSkz9IZ9nizVNxZ0fU' 'nonce-JmB66UrpM11UlRgUPmsY' Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Server-Response-Time: 17 X-Xss-Protection: 1; mode=block Content-Type: text/javascript; charset=UTF-8 Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:18:59 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 9320 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 04f0180f3d2e41e79ce58844163b564e Connection: close
2023-08-10 21:19:00 UTC	2028	IN	Data Raw: 28 28 29 3d 3e 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 63 6f 6e 73 74 20 5f 74 6f 5f 6f 62 6a 3d 65 3d 3e 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 29 2c 72 65 71 75 69 72 65 3d 28 2e 2e 2e 65 29 3d 3e 7b 74 68 72 6f 77 20 76 6f 69 64 20 30 7d 2c 5f 72 65 71 75 69 72 65 3d 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3d 28 65 2c 2e 2e 2e 72 29 3d 3e 7b 69 66 28 72 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 7d 3b 0a 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 7b 69 6e 66 65 72 4c 6f 63 61 6c 65 46 72 61 67 6d 65 6e 74 3a 5f 7d 3d 5f 74 6f 5f 6f 62 6a 28 28 28 29 Data Ascii: (()=>{'use strict';const _to_obj=e=>Object.assign({},e),require=(...e)=>{throw void 0},_require=require,define=(e,...r)=>{if(r.length)throw void 0;return"function"==typeof e?e():e};const{inferLocale}=_to_obj((()=>{const{inferLocaleFragment:_}=_to_obj((()

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.3	49847	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	1952	OUT	GET /static/webpack/production/c861c239bed0e42e4847.obO1giTD6WsT4sESd05O8sH8NTRGNr7BFGTPTNoAoKo.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:00 UTC	2071	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 30097 Connection: close Date: Thu, 10 Aug 2023 21:19:01 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 10 Jul 2023 21:32:05 GMT ETag: "892a28cad5db513d7228cdc6e6834b18" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 ca6974974a9175b71fb6a84145111ed2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: DilVi2qxZeC7j7y1lHSFajkVeVyepfoFbyDCTEQpEvmsEVcEtQTkog==
2023-08-10 21:19:00 UTC	2072	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd eb 6e 5d c7 95 2e fa df 4f c1 d6 8f 0d 09 60 88 59 f7 2a e5 b8 81 64 25 bb 19 9c e5 9c 46 92 5e 0d a8 b1 61 30 12 6d 13 91 45 81 92 ed 78 bb 73 9e fd 8c 6f 5c aa 6a 4e 52 32 65 d1 39 d9 dd 0b 10 b4 38 66 cd 59 f7 cb a8 6f dc 1e 7f 77 f5 ea c5 f5 77 67 9f 7f be ff 7f 7e f5 9b 5f fd 7a ff 5b fe e3 b7 bf f9 7c 77 fe 6f bf ff bf ff f8 f9 e7 9f fe e8 1b ff f9 9f ff f1 bf 9e 9c bd fe e6 cd 57 8f ff e3 3f 1e 7d 7b 49 af df bc f9 7f 5f 5f bc be bc f9 fc f9 cb eb 6f 5e 7c fe e2 fa b9 3d 78 7d f5 c5 9b 47 ff eb f4 07 9f dc d3 2f be 79 f5 fc ed d5 f5 ab c7 97 a7 bb d3 97 4f 7e 78 f4 cd 9b cb 93 37 6f 6f ae 9e bf 7d f4 cb 97 67 37 8f 77 4f e8 e7 c5 e3 dd e9 a3 7f 79 f9 fd eb af f6 d7 5f 5e 3f 3a 7d dc 3f 7b f2 c3 cd e5 db 6f 6e 5e Data Ascii: n].O`Y*d%F^a0mExso\jNR2e98fYowwg~_z[\|woW?}{I__o^\|=x}G/yO~x7oo}g7wOy_^?:}?{on^
2023-08-10 21:19:00 UTC	2088	IN	Data Raw: 8a 91 bb 90 39 b0 fa 94 dc bd 38 49 3c cd dc 3d 24 ad 03 6a da 73 8b a8 99 03 bb ca b0 ca ae 1b 83 d6 65 73 54 24 cd ce 2c f3 1c 51 35 33 7b b7 1c 51 35 e9 98 74 6e 04 d5 cc 1c 9d 98 d7 06 d3 09 6b 7c 8a aa 99 ba bf 25 4d 77 e2 58 cb e2 6a 2a 1d b6 71 35 f5 79 5f 3b 49 dc 88 c5 1e 38 93 37 99 2e 39 e6 7a e4 3c d2 33 36 cb 11 57 33 c3 f2 2c 8e b8 9a eb 56 53 37 60 93 1c 6b 73 17 70 e8 4e 6e 79 03 0e d5 58 87 b9 82 d2 dd 79 a6 d1 e6 3c 13 87 ee 70 9d 89 23 37 0e cf 99 38 71 f3 70 9c 89 03 b5 f8 e1 38 53 e9 ee 38 d3 68 73 9c 49 07 55 91 f5 2b 36 1a 38 08 c5 ff ad d8 82 e0 c0 75 7e a4 e3 c0 55 2f 41 4e 69 7c df 1d 67 e2 c0 cd 71 87 5f f8 86 e9 8e 33 71 30 b7 61 be c7 e5 4c ee 52 51 2f 86 69 7a ba 3f 9b dc 79 32 65 87 ad 52 e6 32 13 47 6d 1d 1e 33 71 d2 c6 e1 Data Ascii: 98I<=$jsesT$,Q53{Q5tnk\|%MwXj*q5y_;I87.9z<36W3,VS7`kspNnyXy<p#78qp8S8hsIU+68u~U/ANi\|gq_3q0aLRQ/iz?y2eR2Gm3q
2023-08-10 21:19:00 UTC	2245	IN	Data Raw: e9 5b 56 1c f6 bc 5b 71 00 37 ca 93 15 c7 dc 1a b4 0e da bf 1d 7a e3 ef bd a0 f2 6a c4 81 6d 74 b2 e1 60 f2 b6 09 07 3f ee 16 1c 94 c9 1c 2a 27 43 a6 e1 c7 30 67 5a 6f 71 8a d4 93 24 54 ce 64 bf 91 6a 9c ec 37 aa 04 cb 9a ec 37 68 36 af ec 37 72 5d 99 6f 80 f1 19 e6 1b 5e 5c 46 77 f3 8d 55 8b 45 64 07 97 f9 86 6d 1b 78 0a 91 52 4b b3 3f 1e 7e 0f 66 17 08 2f 32 c5 f0 ae 45 bc 86 98 7a 01 5d d2 a1 b6 d0 d5 26 94 ee 6a 13 46 9b da 44 e5 db f5 50 9b a0 fc d8 cb 88 a9 4d d4 2a 52 7b 53 9b 68 8b 78 3b 31 b5 89 e6 59 4a de d5 26 9a 98 41 74 b5 09 88 76 96 49 18 db 0a db 99 dc 52 9b b0 e7 a6 36 d1 70 5b 9f d4 41 d6 ed 46 47 14 e6 04 66 73 04 bf 8c 18 de 4a 0f b5 89 56 c5 21 4f 77 c0 e3 d9 d5 52 9f 18 d4 70 e7 a7 74 08 dd e2 14 c3 bb 06 89 43 60 6a 13 e8 38 df f8 Data Ascii: [V[q7zjmt`?'C0gZoq$Tdj77h67r]o^\FwUEdmxRK?~f/2Ez]&jFDPMR{Shx;1YJ&AtvIR6p[AFGfsJV!OwRptC`j8
2023-08-10 21:19:00 UTC	2258	IN	Data Raw: 0d b0 a7 6a 01 fc c6 de 2b 44 8f d9 61 88 0e 66 1e f2 5f 00 d7 1c 9a 5f 7f ff 64 fe f6 f9 df 63 6a 75 e8 97 df e8 97 af 5f fe 50 bd f1 cf 4f 53 fb fa f4 f7 bb f0 fa 4b 78 36 b4 3a ff fa f9 35 ec 7f bd bc be 3a bf 0c fe 38 f9 76 7e fd d7 f5 a5 77 ec fd f0 d4 bf 59 0d eb bf 73 fc 75 b4 db 0b 02 00 Data Ascii: j+Daf__dcju_POSKx6:5:8v~wYsu

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.3	49848	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2018	OUT	GET /static/webpack/production/2cdc887fa30d028a6cac.yYomW_BQJnWDD10UrVD9zI1YaI83_RjUsYv9vtzPLm0.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:00 UTC	2121	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 41585 Connection: close Date: Thu, 10 Aug 2023 21:19:01 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:07 GMT ETag: "895d732e3f4c851612d16d80d33d6732" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 9defe0d67603d45217a1199d0f877384.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: UoyvWXhhQSHrW_cpnkCfCz_Zacj1BuUJTaNc7yAcdkSW-v8-DzvFgA==
2023-08-10 21:19:00 UTC	2121	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd 69 77 1b b9 92 20 fa 9d 7f e2 51 bc be 2a a6 99 5c 65 cb 36 e9 34 5b b6 e5 b2 aa bc 5d 4b 2e 57 95 c4 e2 49 91 a0 94 36 99 49 67 26 b5 58 62 bf ee e9 e9 65 7a ef 59 7a ba 67 e9 65 96 de a7 97 99 79 d3 3d d3 cb 3d e7 dd aa 3f 32 7f e0 fe 85 17 11 00 12 40 66 92 52 95 d5 e7 bc 29 9f a2 90 81 00 10 00 02 81 40 20 00 94 8f 3d 7f 18 1c d7 fa fd 27 cf 37 1e 6e dc 7f b2 49 81 cd 87 fd 07 8f 5f 3d fb 74 bb df 77 2e c4 38 3f df ed 59 b5 e9 2c 3a 2c ef ee 96 a6 ee 94 85 7d 77 38 f1 fc 9f d4 c2 fd 60 34 ea 1f 79 ec b8 1f f8 e3 53 11 b3 0f 59 b3 50 7e cc fc e1 98 89 8f c1 38 98 0d fb c3 60 10 09 c0 d0 8d 0e f7 03 37 1c e2 f7 4f 36 6f dc 66 ee fe fa ad 52 cf 3e 2b 34 1b b7 5a ed d1 cc 1f c4 5e e0 97 99 1d 5b 67 cf f7 df b0 41 5c 1b Data Ascii: iw Q*\e64[]K.WI6Ig&XbezYzgey==?2@fR)@ ='7nI_=tw.8?Y,:,}w8`4ySYP~8`7O6ofR>+4Z^[gA\
2023-08-10 21:19:00 UTC	2352	IN	Data Raw: 03 7e c0 29 27 06 47 10 88 e6 40 e4 b5 00 23 98 c5 38 d7 2e c4 c9 ed 54 a1 a0 e9 65 17 d2 91 b9 09 b9 62 9c 86 c5 79 7d 4d e0 d3 69 0a 2a f4 fa dc 5a 8b b8 dc 82 45 5c 7c c8 26 a9 1c 13 55 0b 6a 30 18 27 13 0b 1d aa 26 c9 5c 47 83 55 10 7a ef 19 c9 68 10 07 c1 18 eb 37 18 67 51 69 84 03 05 cc 37 74 10 0d 63 10 4c 4f 73 a0 c4 11 59 38 fc 08 a9 d6 d7 a4 94 22 d7 40 e4 75 1c 66 73 81 21 17 67 a1 23 a8 7f ba 46 51 16 8d 86 25 4e ba 02 a2 46 7f 16 29 2d 21 0a 19 a4 e1 fe 89 98 e5 68 80 50 22 fe 39 75 13 f3 e1 c5 69 68 9e 5d 40 87 86 0e 0b 41 6f 88 bf 98 f9 e5 6a 41 55 90 63 58 ca a8 6c 3d 10 2d 3a 05 4d 7b 52 d5 f6 21 d2 48 9c 0a 2f aa 62 0f e0 a2 61 29 9e b4 57 5d 54 41 65 cd 59 d0 5d c4 7f 28 69 a2 05 d4 2b 84 aa 1f e8 f9 55 35 73 7d 36 55 ec 86 20 be cd e5 Data Ascii: ~)'G@#8.Teby}Mi*ZE\\|&Uj0'&\GUzh7gQi7tcLOsY8"@ufs!g#FQ%NF)-!hP"9uih]@AojAUcXl=-:M{R!H/ba)W]TAeY](i+U5s}6U
2023-08-10 21:19:00 UTC	2368	IN	Data Raw: 18 40 ee 7b 83 01 e4 be 4f 31 f0 d7 10 78 8b 81 bf 91 01 64 b1 27 18 f8 5b 19 f8 7b 19 f8 a1 08 7c f3 d3 12 82 6c 88 56 a3 af ff 4e 06 fe 41 04 be f9 29 19 f8 27 32 f0 33 7c 7c 95 be f9 59 19 f8 79 19 f8 45 39 f4 be f9 a7 62 e8 7d f3 73 32 f0 0b 32 f0 4b 32 f0 cb 62 a0 7d f3 ab 32 f0 eb 32 f0 2b 62 34 7d f3 6b 32 f0 1b 32 80 dc f1 12 03 bf 29 03 bf 25 03 c8 0b 68 fb f8 e6 5f cb c0 6f cb 00 32 ce 36 06 fe 9d 0c fc 8e 0c fc 9e 0c 20 bf e0 60 f9 e6 df cb c0 ef ca c0 ef cb 00 f2 cb 0e d5 f0 3f f1 50 e9 9b 3f 90 01 e4 13 b4 7f 7d f3 9f 65 e0 0f 65 e0 8f c4 c8 ff e6 4f 64 e0 cf 64 e0 cf 65 e0 2f 65 e0 bf ca c0 1f 0b 59 f0 cd 9f ca c0 7f 91 81 bf 90 81 bf 92 81 ff 26 03 c8 26 af 31 80 6c 82 a6 ca 6f fe 87 10 25 df fc b5 10 25 df fc 8d 84 20 9b 7c 89 81 bf 95 81 Data Ascii: @{O1xd'[{\|lVNA)'23\|\|YyE9b}s22K2b}22+b4}k22)%h_o26 `?P?}eeOdde/eY&&1lo%% \|
2023-08-10 21:19:00 UTC	2384	IN	Data Raw: 2b 66 97 da 47 40 d6 62 f1 5a c4 bf 9b 90 46 52 1e da f7 6d 0b a1 56 4b 57 a2 98 01 2d 4e 82 9c 22 d7 66 3e fa 4e 0a 80 e9 8f d0 81 73 50 47 df f3 af 96 4b 27 41 2f db 13 62 3c 6a 62 88 c6 63 a0 c2 33 17 9b 7a ad 7c e0 17 69 98 5f 34 4d 13 79 4f 4a 25 45 91 22 9f 99 87 fa 37 90 ed c4 5c d1 e9 99 a9 eb 1b 8f 82 99 7d 14 14 b7 3c 04 66 d5 43 60 4d d5 ae 9d dd 78 d0 dd e4 3d 5f 6b 3a b3 a8 55 91 56 b9 88 2a 0f b1 58 c8 2c bb b2 fc 65 32 63 61 a8 7f d3 90 0a 71 3d 1b 54 f5 c6 36 2b 6c f8 07 99 6f f7 18 55 ff b2 59 aa fa 5f 60 4d ec a6 91 3d c1 c6 45 c4 1f 76 59 98 8b 1b f5 0f 84 c8 91 fa 07 9a 7e 8c 29 96 15 9c 45 f4 aa 67 20 6a cd d9 0f 6a 11 cd c3 2b e4 b8 d0 39 4e 24 9e 12 4b 9e 67 39 9b 87 f2 17 ae 04 f5 9b 5e 7c 42 57 38 bd 33 f5 4b ee c6 c6 c6 31 9d 2d Data Ascii: +fG@bZFRmVKW-N"f>NsPGK'A/b<jbc3z\|i_4MyOJ%E"7\}<fC`Mx=_k:UV*X,e2caq=T6+loUY_`M=EvY~)Eg jj+9N$Kg9^\|BW83K1-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.3	49846	162.125.69.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2019	OUT	GET /p/thumb/AB9lmxu6tlgeO1DY9f4mZYQIZtSNHK7X--vfWqgNa1P4Zq17YwXLsxJqY8dO22TUvc889Io-U7Nm4R2ItGOCgVUv524NL2y5DNHF11D-KeaE1auFPb6fvo9LHETT3pPe-QdvVSVNFo8ozXiWsiXBPxfYpotT45lR2Hahvm6VTOhSwxg9sNZ8SJJn09oDQH7_BCDpQSplkS_VPQR9owSmJwLdxTjdOJZXH84owBImVlv4qg_TXRp0MWY5TpuRc-dL50aibHPoXXnITaIZ1R9wly9X643PV-S5uxo0d2e8oNEuLP55UDdUhQrkFYkhzBHiPOEw8V8HWSbctlS3dO2Cq3Ot9RWQUZKq1R7KFZvSOoROt1nJYR3yC4gqp5p1Ky1xcWK-fN6veA8d59R0dokwD9fzfGUIH_xGN1otBRFO5-EvMA/p.png HTTP/1.1 Host: uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:00 UTC	2054	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: public, max-age=31536000, no-transform Content-Disposition: inline; filename="FO5-EvMA.png"; filename=UTF-8''FO5-EvMA.png Referrer-Policy: no-referrer Timing-Allow-Origin: Vary: Origin X-Content-Type-Options: nosniff X-Dropbox-Content-Length: 243248 X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 119 Content-Type: image/png Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:00 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5cef6816d8c243119e3da5ac38ef49c9 Connection: close Transfer-Encoding: chunked
2023-08-10 21:19:00 UTC	2055	IN	Data Raw: 34 30 30 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 01 f0 08 06 00 00 00 38 b7 1d 3d 00 00 01 35 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 78 9c 63 60 60 32 61 80 82 dc bc 92 a2 20 77 27 85 88 c8 28 05 f6 7b 0c 6c 0c 2c 0c 82 0c da 0c 16 89 c9 c5 05 0c 98 80 11 c1 fc 76 0d c2 bb ac 8b 45 1d 21 c0 95 92 5a 9c 0c a4 ff 00 71 65 52 76 41 09 d0 e8 0a 20 5b a4 bc 04 cc ee 01 b1 93 0b 8a 40 ec 05 40 b6 68 11 d0 81 40 f6 0e 90 78 3a 84 7d 06 c4 4e 82 b0 1f 80 d8 45 21 41 ce 40 f6 17 20 db 21 1d 89 9d 84 c4 86 da 0b 02 f2 c5 20 8f 7b ba 3a 9b 19 5a 9a 99 e9 1a e9 1a 2a 24 e5 24 26 67 2b 14 27 27 e6 a4 a6 90 e1 2b 02 00 14 c6 10 16 b3 18 10 1b 33 30 30 2d 41 88 21 c2 b3 24 b5 a2 04 c4 72 29 ca 2f 48 ca af d0 51 f0 cc 4b d6 Data Ascii: 4000PNGIHDR8=5iCCPICC Profilexc``2a w'({l,vE!ZqeRvA [@@h@x:}NE!A@ ! {:Z*$$&g+''+300-A!$r)/HQK
2023-08-10 21:19:00 UTC	2071	IN	Data Raw: b4 6d ce c3 5e c7 0d 0a Data Ascii: m^
2023-08-10 21:19:00 UTC	2089	IN	Data Raw: 34 30 30 30 0d 0a 23 7d 11 39 5e d6 94 ba 8a bc ee 13 7b db 78 dd 27 f6 b6 cb 71 16 f5 23 c7 66 0e 80 d4 17 11 61 6c 09 01 19 30 1b 80 74 c1 e9 87 67 61 b7 8d d9 ab d2 ae c9 f1 7c 2a f3 71 73 d8 85 d7 9b c3 de b6 b5 6f 3d 54 e4 b8 4e 2a 72 dc 1c 76 9f bc 9e 7f f5 55 e4 b5 90 4b 07 ec 25 8a 62 03 79 97 a2 46 72 a5 bc ae 72 a3 dc 9f 1a 03 c4 ed 3f 4b 06 98 c7 f8 d7 a2 e4 d7 de cb 31 0d 03 f0 a1 e9 f2 ef 7d 56 eb 19 84 7b 4f 3f 85 a7 9f 7e ba a5 f0 4f bf 24 ce 66 c9 7c 01 77 b3 6b fa 9a f5 63 cf 1b f3 f9 d8 f3 e9 3c ec 8b d0 ea bc ee a6 fc 9a 22 c7 ae 9e b7 4d 8e e7 f3 ba 2f ec f3 16 b7 8b 3c 7f 97 25 c7 8b 4a 77 b7 e7 8c 7d 13 38 e7 50 8d c7 70 04 30 7b c4 4a 34 66 9c b6 ff c4 1d a0 65 ca d6 ef b8 0b 57 07 28 72 6c 5e 73 f5 d6 be 6e 2a 6b df 6c da 4e 39 96 Data Ascii: 4000#}9^{x'q#fal0tga\|qso=TNrvUK%byFrr?K1}V{O?~O$f\|wkc<"M/<%Jw}8Pp0{J4feW(rl^sn*klN9
2023-08-10 21:19:00 UTC	2105	IN	Data Raw: 29 6e d4 b4 fa c1 0d 0a Data Ascii: )n
2023-08-10 21:19:00 UTC	2105	IN	Data Raw: 34 30 30 30 0d 0a ce 95 a7 b5 62 23 e7 f2 fa b0 d3 4e 6c a6 de 45 71 53 76 c0 02 45 02 58 fd c1 d9 30 d8 0a c7 b1 3c 3c 21 88 42 39 99 c0 7f fc 31 de fe e5 2f f1 93 bf ff 2a 7e f1 f5 6f e0 dd df fc 06 fb 27 a7 b8 1e 18 95 2a ad 81 1c fc 08 70 21 48 29 37 22 51 5a dd 48 93 e1 69 82 36 06 2a 32 b7 6e 42 70 59 9d 0a b2 0c fa 2c bb e2 20 d3 17 75 4c ca 41 53 0c 99 c4 43 df f2 5c 30 c0 2e 20 04 80 6c ab 1c 50 2f 00 9d 03 51 09 4f c6 8f a8 fc c3 fa 52 19 69 58 ba e9 1a c1 49 ec bd 63 73 4c 37 c5 14 31 24 80 2c ac 01 16 68 03 71 cb 67 86 23 a7 4a b5 61 65 cf 82 23 20 1f 33 18 20 17 ab 20 54 99 84 19 0c d6 58 7f 0e 15 e0 47 00 55 a0 e0 d4 b8 13 e4 fe 41 2a 0b c9 b8 1f 74 de 8b e9 67 a4 46 c0 5c b1 e6 8c 97 2a 33 54 ba 96 84 38 e7 6c bd 91 f2 81 52 86 8f 29 00 5a Data Ascii: 4000b#NlEqSvEX0<<!B91/~o'p!H)7"QZHi62nBpY, uLASC\0. lP/QORiXIcsL71$,hqg#Jae# 3 TXGUAtgF\*3T8lR)Z
2023-08-10 21:19:00 UTC	2121	IN	Data Raw: 79 08 1d 81 62 85 0d 0a Data Ascii: yb
2023-08-10 21:19:00 UTC	2125	IN	Data Raw: 34 30 30 30 0d 0a ff 1c 94 6a e5 31 8e e4 28 aa 4e 69 85 16 b3 19 f9 f3 dc 46 8a 4a 22 e4 34 90 12 82 24 f9 01 d4 c0 24 b8 43 19 44 09 8f 90 7c 05 04 c0 b2 91 e7 d5 0a 14 a1 3f 03 02 d9 60 08 73 6b 6e 65 f4 49 66 4c e3 91 3f b5 12 77 7e 2f 8c ac 07 a9 d4 10 8f b6 5a 36 c0 11 76 f8 d6 9c eb d6 af 63 35 dc 63 53 d4 1c af eb 58 1d c6 ee 3a 4e f0 be a1 c0 c4 9e 19 3d dc 13 eb 38 7a b8 df 9a bc af 39 b8 bd 01 40 63 73 2b e9 f8 71 9c 77 36 1c 99 33 ca 9f 6b 94 77 c2 2e 1f 46 8c 9f 32 bd d7 82 e1 4e 57 2b 71 37 72 d7 f0 70 97 dd 91 d1 f4 9c 72 6f 01 1f 07 6f 07 06 51 3c 7e 0a a6 64 c1 b0 b0 44 be 4c 99 37 bb c4 a7 a5 3a 32 3d 1c 45 58 2d 96 1f 82 22 14 3f 03 23 f6 63 f6 87 ac 56 94 40 3f 70 ca 76 20 b8 c0 0c 13 79 1b 78 2f 05 a1 23 5f 37 dd 10 d4 db 80 40 ce bd Data Ascii: 4000j1(NiFJ"4$$CD\|?`skneIfL?w~/Z6vc5cSX:N=8z9@cs+qw63kw.F2NW+q7rprooQ<~dDL7:2=EX-"?#cV@?pv yx/#_7@
2023-08-10 21:19:00 UTC	2141	IN	Data Raw: 83 ae 83 a2 1b 74 0d 0a Data Ascii: t
2023-08-10 21:19:00 UTC	2141	IN	Data Raw: 34 30 30 30 0d 0a 63 02 23 81 a3 27 f2 5e 20 6c e5 b3 24 92 71 39 00 c8 79 0c 38 e2 10 85 97 a2 3f 2c ca b2 fb ee 13 09 5a e3 dc 80 35 99 a0 25 20 15 5c 31 5e 8f 1b 82 1b f0 f6 ad 3c 6e eb 68 8f ad 7e 56 dc 26 e0 2a c3 ad ff b2 8c df 4f 82 67 62 c4 ec f0 59 23 ff 92 3f 21 51 9b 06 5b 86 0b 9b 70 f3 a2 7a 7f 50 b8 80 4a 5e 53 cd 5b c7 e1 fe de aa 7b cf 2e a8 a1 31 63 f3 01 aa bf 7e 9a c2 43 2a fc 2e 4a af 9e 85 64 0d a2 79 71 8b e2 cb e1 3b bb 13 b4 de 9e 3e 3c fe c4 13 38 71 e2 c4 10 c6 9c ed c1 7b a7 08 71 5a b6 38 71 e2 04 36 6e dc 88 03 07 83 db af 4b ce 4a 3e ff 45 30 0e 2a df 0e fc 83 ca bb 81 21 92 5b f5 bd e4 fa 76 fc dc 20 31 06 c5 e2 20 8e 1e 3d 82 e2 e0 a0 57 0c ac b5 92 24 d0 6d 1c 16 5e 93 da 10 f7 3a d0 3f 80 23 47 df 1c 9e 62 92 1f e8 b0 7e Data Ascii: 4000c#'^ l$q9y8?,Z5% \1^<nh~V&OgbY#?!Q[pzPJ^S[{.1c~C.Jdyq;><8q{qZ8q6nKJ>E0*![v 1 =W$m^:?#Gb~
2023-08-10 21:19:00 UTC	2157	IN	Data Raw: 8f 7f d0 41 88 30 0d 0a Data Ascii: A0
2023-08-10 21:19:00 UTC	2165	IN	Data Raw: 34 30 30 30 0d 0a 25 f1 ff b0 e2 1d 43 9a 9d 42 ef 0e fe 2c ec ff ab e3 8a 38 c1 fb 9a 82 3b 78 1d 21 b0 85 8a ed b2 99 23 9a 3d 10 02 83 f5 b4 43 79 57 15 60 66 e7 ee 6b 08 1d 1d ed b8 fe fa eb b1 74 c9 12 bc f2 ca 2b b9 f8 7b 41 c3 8c 92 28 83 7d 7d 03 78 ea e9 a7 71 e0 c0 01 4c 9b 36 cd b5 97 ac e9 49 62 50 2c 95 f0 c4 af 7f 8d 3d bb f7 40 33 96 e7 c1 00 be 4c db 25 17 5d 84 cb d7 ae f5 71 ee 3e cb b2 4d 11 4e d7 6b 08 79 65 3f 05 4a 72 bc 5e 3d 6e 86 2a 71 57 e8 b3 82 30 0d 10 4a 69 8a 87 1f 7e 18 77 dd 75 97 ab 73 4e 2a a8 39 b0 cc 40 94 95 3d 2f 58 57 0b a5 cd b8 9a ab eb bf 34 9c 39 63 16 fe e8 8f ff 18 1f fb f8 c7 31 75 ea d4 68 4c 54 7e 92 1c f1 94 da 29 fd c4 0d 5c 68 80 c5 f5 54 4f bc f5 24 da 8f 8d 19 9d 5d 1d 48 92 04 9a 48 0c e4 92 6d fd d3 Data Ascii: 4000%CB,8;x!#=CyW`fkt+{A(}}xqL6IbP,=@3L%]q>MNkye?Jr^=nqW0Ji~wusN9@=/XW49c1uhLT~)\hTO$]HHm
2023-08-10 21:19:00 UTC	2181	IN	Data Raw: 4c e0 c0 81 83 68 0d 0a 34 30 30 30 0d 0a b6 5a c8 4f cd f5 3f 82 e2 e7 f1 e2 c2 02 3e f7 b9 cf e1 a6 9b 6e c6 9b df fc 66 67 d0 a8 c4 96 8f 27 02 67 30 ab d5 6a 78 ee b9 e7 f0 37 7f f3 61 7c 4b 79 bb e9 b5 c7 98 08 83 95 8e b9 7f ff 3e ec dc b9 23 a9 42 0c 25 f3 f3 73 38 7c f8 10 0e 1d 3a 84 7b ee b9 17 77 de 75 27 be ff fd ef e3 e8 33 cf e0 f8 89 13 60 06 32 32 e2 c4 8c 87 1e 7a 08 7f f6 67 7f 8e 7d fb f6 63 f7 79 bb 83 74 d9 cb 2b 4a a7 7b ef bd 17 9f f9 ec 67 31 3b 3b eb ae 53 b7 76 a0 c7 5b bd 5e c7 b6 6d db dd ed 23 7e 9e 5b cb 83 83 be 2e 23 29 d3 76 d5 69 bd c2 0a 53 50 dc ab fa 91 1e 02 28 4a 53 e4 15 3c ad 2a ae 34 ad 3e 73 58 5e 5d 2b 6d c7 60 d8 55 6a 47 60 e2 54 fc ee 5d 55 02 63 77 cc 81 c5 8d 9e 9c c2 15 5c f8 44 19 f7 8a 98 5b 14 5c f0 36 Data Ascii: Lh4000ZO?>nfg'g0jx7a\|Ky>#B%s8\|:{wu'3`22zg}cyt+J{g1;;Sv[^m#~[.#)viSP(JS<*4>sX^]+m`UjG`T]Ucw\D[\6
2023-08-10 21:19:00 UTC	2197	IN	Data Raw: 42 15 ad 8b 04 50 16 76 3a ad 28 f1 5e a9 0d 0a Data Ascii: BPv:(^
2023-08-10 21:19:00 UTC	2197	IN	Data Raw: 34 30 30 30 0d 0a 4f 14 77 fd 1b 40 88 aa cb aa 1e 65 10 60 8e 3b f5 c6 2b ee a1 51 64 c0 c6 04 63 81 73 e5 f6 67 c8 83 7b a7 18 03 dc 31 02 eb 0d 12 62 36 62 65 d4 08 a3 2d 75 57 c1 5a d2 71 f9 51 c2 87 81 bd da 69 a9 10 b5 77 85 84 c8 d3 ea ae 28 b0 3e 8a be bf 26 32 fa f9 84 d0 8f a9 52 5e b8 c2 8f a0 c2 ef 15 76 58 04 36 15 ea 17 d8 d1 04 e4 3e 8b 21 fa 24 d2 3f 03 05 4f 23 8e b0 61 7c b9 18 c5 38 38 41 f3 20 d8 2c e8 29 bc f7 fe 04 ac 5d bd 4d ec 27 af 84 87 fd 08 f3 be 01 b0 fb ee ce 51 c5 3a a5 ca 91 fa 41 28 d8 af 56 3d 69 fa 9f 9d b8 3e 53 74 5c 29 ec b5 83 7b b6 e2 fa 1c 1d 5f 18 74 5c ed b4 96 b8 3e c7 fb 7a c1 3e bb e8 28 e9 6c c5 f5 39 3a 06 b8 5c f0 00 08 e2 72 b2 db a7 8a 30 bc 9b 7f f5 4e 16 ab 7d 15 f9 cd 45 8d 9f e2 1e 5a 15 8c ea 54 da Data Ascii: 4000Ow@e`;+Qdcsg{1b6be-uWZqQiw(>&2R^vX6>!$?O#a\|88A ,)]M'Q:A(V=i>St\){_t\>z>(l9:\r0N}EZT
2023-08-10 21:19:00 UTC	2213	IN	Data Raw: f6 3f d5 2b 47 50 0d 0a Data Ascii: ?+GP
2023-08-10 21:19:00 UTC	2213	IN	Data Raw: 34 30 30 30 0d 0a 2e d0 c6 04 85 2c ec 4c 01 08 67 83 28 85 11 72 48 1d 8a 4e e4 ff c6 80 37 01 58 30 0d a5 fa 99 01 93 0d ae 5a 00 c2 4e b2 81 8b c2 9c 93 d4 c9 ce 20 96 e7 a8 37 1b e8 a0 8b 76 cd 62 6c e7 66 ec bf f1 4a 8c ed de 1e ae 1c 0a b3 c2 37 af b7 a5 7e 75 e8 b8 3e d8 db d2 5a b1 b4 39 93 3e 4f 94 98 34 64 a9 7f 59 c8 ef 9f c5 a7 2a b0 9e 28 ed e1 6f 41 db a2 38 26 8b 8c 37 92 b9 07 ec d8 52 5f d2 5d 3f 18 4c 63 05 d8 69 09 44 fe 14 ba 16 6b 0e 39 95 11 2b 84 c7 54 ca 65 21 c0 6d cc 1e e2 67 0c cf e7 aa d2 0b 8b f7 9d fe c5 5c 9d 5c eb 5f 56 db 72 86 aa a0 47 26 39 1f ab dc 50 2a af 5a 92 73 af a2 fc 77 a2 c2 d2 69 b7 fd 77 f7 7c 64 74 14 5b 36 6f c6 cc cc 0c ea f5 7a dc 6d 61 c4 f3 d0 25 1e f8 23 c6 fb 84 76 0c b7 93 3c 32 82 66 ab 89 66 ab 85 Data Ascii: 4000.,Lg(rHN7X0ZN 7vblfJ7~u>Z9>O4dY(oA8&7R_]?LciDk9+Te!mg\\_VrG&9PZswiw\|dt[6ozma%#v<2ff
2023-08-10 21:19:00 UTC	2229	IN	Data Raw: d7 b6 c0 67 db 98 0d 0a 34 30 30 30 0d 0a a7 0d 3e 57 df 2d 23 f5 3f ee c5 24 17 91 cb 65 9c 04 86 10 59 77 4b 66 b3 19 97 77 ae 72 ee ca 45 9e fd fa 0b dc 7c e7 53 6e 7f 74 93 83 9b f7 58 1d 1d 33 ac 07 40 09 fd 8c f5 4c e8 76 f6 b8 78 f9 02 57 5f 7e 8e 2b af 3d c7 c5 e7 9f a6 3f b3 03 73 d0 4e b1 33 01 41 48 84 a4 f4 93 31 19 22 4f 08 24 13 34 68 27 3a bd a9 64 ca 25 10 13 ac d7 e8 7a 8d a6 08 31 e1 67 03 db a4 37 28 62 35 0a 4c f1 da 3b 2f cf 6d bf 36 f6 41 eb 1d ce 8c b8 5d 87 bc a5 a9 47 5b 8e fb de 26 82 9c 52 4e a3 78 e3 46 78 4d ae 97 ea 1e 00 99 4c a9 11 36 da f9 aa a4 11 9e 78 f8 99 8d d9 71 64 3c 66 95 44 3a 3c a2 53 25 68 b0 5a 10 5d 56 e4 d5 3c 46 6e e4 2b 73 2b ca be 01 5e 73 38 5e 51 d0 8b 21 60 0c dd 2a aa e4 51 34 c5 8c a4 0c 58 51 26 7d Data Ascii: g4000>W-#?$eYwKfwrE\|SntX3@LvxW_~+=?sN3AH1"O$4h':d%z1g7(b5L;/m6A]G[&RNxFxML6xqd<fD:<S%hZ]V<Fn+s+^s8^Q!`*Q4XQ&}
2023-08-10 21:19:00 UTC	2258	IN	Data Raw: 56 c5 a7 30 a2 dc 97 7f 6f 0d 89 c6 a8 2a 0d 0a 34 30 30 30 0d 0a 29 d4 f6 f7 56 c2 19 f5 dd ac d3 63 f4 5d 21 e2 81 7b da 10 ea 16 87 9a 5a 05 6e d4 d8 e8 bb 8a 9d 1e de ef dd 24 11 12 29 af b1 79 0f 34 74 c4 c5 2e fd d9 73 c4 ce 24 b7 2e 7c 41 6c fd 03 ed db ec 9b c7 ed db 57 b1 fd b4 ad 37 5c 3a 65 f2 c0 e9 57 cb e1 75 7a a3 79 47 b3 df c6 a3 f7 cc 51 13 54 d4 bd 71 b9 2b 2f d4 25 d9 53 a8 40 8a ca f5 eb 0f b8 fe e9 03 5e 7d f5 3c f3 19 3c fd d4 8c b3 fb 33 e4 38 31 44 8b aa 3a b7 d7 73 f5 a9 05 fb 73 b1 b0 63 a0 ef 84 97 5f ba cc d9 bd 19 07 4b 61 88 82 c6 81 8b fb bb 5c bd 78 96 b9 c0 b1 c2 ed 3b 0f b8 71 e3 36 31 82 76 79 f7 27 53 50 ea e0 72 18 2e 8a 8a d7 0e 99 ca 11 9b 20 34 05 1b 47 f2 8c 75 ee 79 1a a9 10 88 50 3c d8 85 24 e4 f0 61 cd 4c a0 21 Data Ascii: V0o*4000)Vc]!{Zn$)y4t.s$.\|AlW7\:eWuzyGQTq+/%S@^}<<381D:ssc_Ka\x;q61vy'SPr. 4GuyP<$aL!
2023-08-10 21:19:00 UTC	2274	IN	Data Raw: 6e cb 8c 94 0f 4a 76 ad 9c b0 62 8c f1 e8 f9 c5 5a 27 a5 19 c2 d6 0d 0a 34 30 30 30 0d 0a 17 a6 bf ea d6 01 2a 67 34 8d 44 24 f3 c4 a3 86 96 ea f2 bf 4d 67 46 76 57 db 2e 27 63 c9 90 2a 0c 7e 9e f8 26 48 ca bd 12 7a d1 92 99 02 83 69 d3 dc b7 83 8d be a7 d3 1e 11 cd b4 6f 7b 9b fa 95 f6 bd 26 44 40 0b 81 ce 0a 21 69 3c 02 a4 30 9c 99 72 91 63 cd 54 71 12 10 f1 a8 3a ae a5 e3 d1 fc 94 f0 ce f7 b9 f7 e7 ff 82 f9 9b ef b2 5a ec c3 bc 27 7a 21 04 67 4a 2f ef 29 09 cb 76 1d b1 bf 7f b8 ef ef 1e a3 8e 0c 9a 8c f4 2b 77 fd 32 31 6b e9 ab 95 c7 ca 0e de 7c 66 eb 5c 34 cf cb c6 4d 65 1c ab 60 1c b1 08 24 f1 99 61 2c 61 43 9e b3 cb 81 9f 7f f4 19 67 d7 ef 31 eb 3c 49 60 0d 7c f0 f9 23 3e fe fa 9a b5 cc 19 f0 f8 e4 48 1a f8 e2 eb 2b 3e f9 fc 92 f7 df 38 60 96 d3 96 Data Ascii: nJvbZ'4000g4D$MgFvW.'c~&Hzio{&D@!i<0rcTq:Z'z!gJ/)v+w21k\|f\4Me`$a,aCg1<I`\|#>H+>8`
2023-08-10 21:19:00 UTC	2290	IN	Data Raw: d3 92 2b 02 43 f2 ac f2 ba 6a 89 e7 6f f6 8b 68 1b 7f 3f 7e b1 8c 5b 33 5f 58 14 06 a1 dc 0d 0a 34 30 30 30 0d 0a 6b ee 3b 60 c8 e7 43 b5 c0 41 2a bb 39 86 00 8c 14 ba 3e 96 f1 83 cb f4 d2 13 99 b3 64 df ad 39 9d 0b b7 f7 3c af 9d ec f3 fe fd 5b bc 77 e7 80 b7 8e 03 af 1f 08 87 b3 64 55 c5 34 8c 61 39 13 88 ea 64 69 5a 0a 69 de 19 23 c4 db c7 da 33 3b ed 77 7b b5 6e 5e c7 8d 6b 37 bc 16 da eb 95 c5 91 7c e6 c8 16 fc d4 22 ed e2 4e 92 11 47 a3 61 95 8c 70 5d 8e c9 36 84 57 e2 5f 32 ba cd 48 2f 0e 6b 2e 2f 2e 48 29 e1 bd af e3 6b 78 c2 9d 13 db 75 7f d7 93 bb 6e ef ba b6 f5 dd cd 07 65 f3 c9 e7 eb f7 c6 fb ed 21 dc 58 99 e7 1d f3 cd f7 6f 5c fe a7 f7 7d c3 47 ea 66 de 89 38 76 f7 fd 52 d6 b1 71 6f 6f 15 4b 2a 26 c4 95 fd e7 9c c3 a7 c4 e0 06 9c 77 f8 c1 5b Data Ascii: +Cjoh?~[3_X4000k;`CA9>d9<[wdU4a9diZi#3;w{n^k7\|"NGap]6W_2H/k./.H)kxune!Xo\}Gf8vRqooK&w[
2023-08-10 21:19:00 UTC	2306	IN	Data Raw: f9 84 8b 0e 1d 3c 4a 60 2d 03 ab 34 70 ed 2d 27 80 0e 09 92 23 ad 80 35 f8 e4 08 83 c7 39 cf 20 33 06 ed 49 dd 82 0d 0a 34 30 30 30 0d 0a b0 38 e2 e8 f6 6b 1c bf fb 2e f1 f1 19 ab 87 8f 59 9d 9d 71 f5 f8 8c ab b3 73 96 d7 d7 a4 61 80 75 b4 18 58 ef e8 3a 4f 3f 9b e1 f7 e7 84 83 05 7b b7 6f 33 3f 3e a4 3f 3a 40 f6 e6 b8 7e 86 9b 75 ac bb c0 e0 1d 22 19 e1 10 40 3c c1 79 0b 11 10 ad 7e 9e ea 8d 11 1c 9c 65 0d f7 58 c9 a3 20 96 a7 c0 17 b7 7e 09 39 a4 27 20 59 98 77 5e b1 3c 52 d9 95 df 7b c4 97 b2 26 e6 42 5b 5c fd ab 35 b4 c4 52 36 8c 83 c1 7c 37 a2 fb e6 09 b7 fe d0 fe 21 b4 52 12 2c 25 53 6a f9 ba af a4 ee a9 91 f9 df 66 76 5f da 38 18 bf 59 59 b3 6c b9 b2 10 a3 84 aa 67 90 01 1f 1c 7e f0 68 0a f4 7d cf 6c 36 e3 f1 e3 c7 7c f2 c9 27 74 dd bb c6 28 67 81 Data Ascii: <J`-4p-'#59 3I40008k.YqsauX:O?{o3?>?:@~u"@<y~eX ~9' Yw^<R{&B[\5R6\|7!R,%Sjfv_8YYlg~h}l6\|'t(g
2023-08-10 21:19:00 UTC	2322	IN	Data Raw: d0 34 2b e5 a2 f7 b4 da 4c 40 92 ed 1e 88 ea 69 56 fd 43 db cc a4 7d df 6e fd 93 dd 4f 6e e5 e8 b4 af 23 e5 35 f5 b4 47 cd 2f f1 3a d5 8b 0d 0a 33 36 33 30 0d 0a 3a bc de 49 8e 43 c5 8e b2 34 ab d9 3d d8 b1 0d 71 db b4 f4 48 a4 de 01 ba 40 4b ba e5 ac 9d 0e a1 ad d3 ee 6d 26 66 d5 92 a3 f1 4c 98 ac cd 04 8f c2 2e f6 e6 f8 48 a3 e9 0c e7 7d 9b 0d 00 a1 b0 b6 33 47 b4 c0 d8 64 ba ff 8b e0 21 46 02 47 0c af 2b ff 10 81 c4 98 00 2c 31 01 1c c4 23 40 b6 08 2c a2 6b 68 1c 44 34 36 00 1a f8 e0 2d 20 13 42 29 d4 ba 5e e3 7f fe e7 7f f1 fc c5 1f f0 1f ff fe 1f 78 f1 f2 c5 31 78 32 8a 8e 2e 4b 03 76 8e d8 83 cf 9d e0 85 3e 47 7e cc 15 fb 31 fb a0 73 e4 c7 94 d8 63 da cc 19 8e 09 5b e9 28 65 8e 83 4a 9a a0 31 33 ea 46 56 fe 81 10 f4 cf 05 83 32 cc a7 1a 0b 10 e7 24 Data Ascii: 4+L@iVC}nOn#5G/:3630:IC4=qH@Km&fL.H}3Gd!FG+,1#@,khD46- B)^x1x2.Kv>G~1sc[(eJ13FV2$

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.3	49849	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2023	OUT	GET /static/webpack/production/203e68a375ea7f28c0de.MMYkLQEeFZd4PYXbLlLiCe5SizWEJT-CGzSC04pJQ8c.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:00 UTC	2336	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 161609 Connection: close Date: Thu, 10 Aug 2023 21:19:01 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:05 GMT ETag: "6c45a1193c091a08f258c0d89f840161" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 6ea1443d3dc39c2be7c23883fb0bd3e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: YxwCHM-dxKYODqykq_v58ClsLkCy9YKIxvhaOpnlSVFP-Qk_ExWGdw==
2023-08-10 21:19:00 UTC	2336	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd e9 76 db 48 b2 2e fa 9f 4f 41 e3 d4 56 13 45 90 22 38 0f 82 b5 65 0d 65 75 d9 96 5b 92 5d 55 cd 62 ab 21 32 29 a2 0c 02 2c 00 94 ac 92 b8 df e7 be c6 7d b2 fb 45 0e 18 48 d0 83 5a f7 9c b3 96 2d 22 e7 c8 c8 c8 c8 88 c8 cc c8 d2 9d e3 4d fc bb ea d5 d5 9b b3 83 a3 83 57 6f 8e f9 c7 f1 d1 d5 e1 eb 0f ef 7e be b8 ba b2 be 9a e3 f1 71 38 d2 ab 8b 65 38 2b 0d 87 da c2 5e b0 e0 ca 9e cc 1d ef 7f 52 df 57 fe 74 7a 75 eb b0 bb 2b df 73 ef 65 ca 35 aa 66 81 0a 2c bd 89 cb 64 60 ec fa cb c9 d5 c4 1f 87 32 62 62 87 b3 6b df 0e 26 14 fe 9f 6b bb d5 69 5c 4f 6b da c8 78 28 d4 fa d3 a5 37 8e 1c df 2b 31 23 32 3c fd 81 55 d9 e7 85 1f 44 a1 e5 95 cc 5a cf d4 57 86 59 eb b4 37 f2 9d 5d ff c1 c6 51 75 c2 a6 8e c7 de 07 3e 1a 8a ee 4b 91 Data Ascii: vH.OAVE"8eeu[]Ub!2),}EHZ-"MWo~q8e8+^RWtzu+se5f,d`2bbk&ki\Okx(7+1#2<UDZWY7]Qu>K
2023-08-10 21:19:00 UTC	2420	IN	Data Raw: bf a1 27 aa 5d 2a 2c 69 23 d5 8f ed c3 70 27 1f 0f 5d a3 3e 16 53 9f 5b 18 e4 77 39 b1 1e 10 88 86 38 71 1c 9f 7a 75 85 11 61 c1 8f e8 bb a3 84 98 93 1d 82 af 22 41 70 3b 45 e9 5f ee 3f a6 22 15 d1 ca 6b 2f 33 d1 59 02 42 44 21 b7 f7 97 db 59 c3 ff 76 ce a0 a4 8e 2c 6b 80 cc 46 f3 ba 90 35 1d 59 e1 f7 32 87 f0 9b 38 83 68 20 cd 1a 68 8e 17 5d 1a 4a 77 fd 75 da a5 ae 4b a3 20 71 89 a5 e2 12 55 ad bc 54 1c 62 bc 95 43 8c bf 4e 9a 57 5f 25 cd 94 6d 81 5c a8 27 47 ae 15 03 f3 c4 79 ea fc b1 24 1b 92 9d a0 4e a9 c0 19 2c c5 62 5f b5 78 bc ce 41 f9 58 93 0c 12 5b d1 43 b1 52 43 34 62 ce 2d a3 d1 38 85 66 8c 01 b1 23 e1 77 5e 1c 64 a9 26 86 1a 68 4f 99 17 08 62 f2 53 3d cb 9f 56 42 58 a1 53 48 7c 72 25 05 81 f8 6f 9a 69 69 2a c9 a1 8a 0c 0b 0c 52 63 72 91 a7 fb Data Ascii: '],i#p']>S[w98qzua"Ap;E_?"k/3YBD!Yv,kF5Y28h h]JwuK qUTbCNW_%m\'Gy$N,b_xAX[CRC4b-8f#w^d&hObS=VBXSH\|r%oiiRcr
2023-08-10 21:19:00 UTC	2436	IN	Data Raw: 1d 87 ce 39 61 5d ac 73 60 9c 15 1c 51 34 8e 2e f8 52 0f 23 fb ee 62 05 f5 3a 7a 08 7d 29 c9 9a 7c 1d 45 53 2b 5f cf a6 c0 ed 7e 85 06 7c 5e f9 2a 13 fe 16 7b 83 39 f0 f3 99 f2 69 1d 3c 03 8e b2 93 57 30 0b 65 9f be 13 26 e3 7a 8e 1b 99 dc 95 88 80 a3 ee 4e cb f4 58 2e ad 54 e8 f8 2f 72 59 67 b5 4e 46 de ef e6 ca 76 d7 b5 b7 a4 b2 4b 63 f3 e1 17 fb b2 de 03 d5 42 5c aa 60 c1 c7 cb 69 42 78 32 78 49 6c ec b2 f5 ff 9b a8 d6 51 91 5f 5f bf c2 ca 3c f8 3e 57 0c 73 df ef 71 8d 80 ed a2 e0 7f c8 06 96 45 55 bd a5 ae bf e5 46 34 bc 76 6b 37 06 39 75 d3 a8 61 af 6e eb 5b 46 d4 1c 15 ad 53 8e 2d 05 85 e6 2c 38 34 27 1e be 36 2d 9f 6b 09 cf 59 5b e1 39 6b 27 3c 67 6d 85 e7 ac 29 3c e7 d5 95 f7 81 00 12 83 02 6a 43 b2 10 06 09 ec 95 2c cb 23 6b fa 23 46 ef 93 a3 16 Data Ascii: 9a]s`Q4.R#b:z})\|ES+_~\|^*{9i<W0e&zNX.T/rYgNFvKcB\`iBx2xIlQ__<>WsqEUF4vk79uan[FS-,84'6-kY[9k'<gm)<jC,#k#F
2023-08-10 21:19:00 UTC	2437	IN	Data Raw: dd 5d 02 7e 4a 01 b3 3d ac 25 d1 3b 80 6a c2 94 46 3e ea 86 9a fa 3c 9c c4 fa 14 0b b0 2c b4 b8 be b4 f6 37 86 91 e8 ae d9 30 de dc 68 43 56 d5 29 dc 22 cb aa ca ee 43 c2 83 69 e4 76 cc a2 ac cc 0e dc 4a 47 ef f3 ab 84 21 50 3b a6 c7 ef eb a0 77 98 55 64 23 4a 84 d8 9b cf d0 de 02 26 da 2f f5 2d ad 92 eb d1 13 e4 31 c5 6d 47 19 27 07 89 ba 98 02 d3 69 ec f6 8a 25 76 7b 18 43 42 e3 c4 4c 6d 08 99 29 da 55 65 53 6a 11 b3 af a3 2c 7e 52 87 2f 52 0c 47 ff 4b 0d 77 3f d5 a1 97 c5 cf 6b f8 e8 5f c8 ee da 9f 74 6c d0 a6 d7 db a0 15 2d f6 46 f8 65 52 69 fe 59 13 f8 4f 46 37 19 a3 c9 2b 0a c3 60 cc 88 28 bd 28 59 5b 43 e4 c7 02 59 14 7b f8 78 e8 99 ec ac a6 14 da c0 b0 5a 50 51 b3 72 ab 83 00 ac eb 45 a0 d2 83 42 f6 b4 c5 22 f8 ad b6 7d ad ce b3 f4 0b fb f6 b1 47 Data Ascii: ]~J=%;jF><,70hCV)"CivJG!P;wUd#J&/-1mG'i%v{CBLm)UeSj,~R/RGKw?k_tl-FeRiYOF7+`((Y[CY{xZPQrEB"}G
2023-08-10 21:19:00 UTC	2453	IN	Data Raw: c1 13 52 57 83 96 12 d2 8f 0e 61 09 b5 67 4c 90 93 e6 77 79 e8 05 3c 3e 98 97 dc 7e 66 c5 d8 ad c7 93 7b 58 38 94 4d c1 8e cb 90 46 66 93 50 43 de 06 f1 c0 f0 96 26 96 98 3a d9 94 18 ff b6 cb cc 89 15 e4 0f 87 7d ac 68 ce 2b 6d 09 7c 89 e0 9d 70 b5 2c 56 6c 2f b1 9d 54 2f 49 1a 08 8c 5e 55 cc cb 31 e2 b3 c0 49 1e 58 bb 33 c4 99 b0 de 7a 4a 5c a2 1b 94 85 83 c8 29 5d 50 f0 4e 5f 7d d6 57 6f d5 55 2f 82 8c ae df ab 01 5c 53 a2 00 45 01 16 90 dc 8b 25 c0 ca d5 d5 b6 ba f4 61 5f 9d e1 79 86 e2 50 79 4e b4 15 a5 da c6 e0 00 12 98 45 15 a8 cd 05 44 13 2c b2 94 3c ca d5 b3 08 4f 4b 59 0e 27 1c ec 09 12 cd 88 de 4a 77 1d d5 41 5b 07 58 8e 55 ca 8a 00 9d 31 a5 64 83 2c 17 e5 fa f9 42 bf ae 2b b0 61 65 52 f8 98 8b e8 9d 45 2a ff 72 11 7d 76 49 a7 02 07 b0 72 b3 19 Data Ascii: RWagLwy<>~f{X8MFfPC&:}h+m\|p,Vl/T/I^U1IX3zJ\)]PN_}WoU/\SE%a_yPyNED,<OKY'JwA[XU1d,B+aeRE*r}vIr
2023-08-10 21:19:00 UTC	2505	IN	Data Raw: c8 be 14 dd 47 13 15 b9 16 50 81 c6 b7 3f 94 26 33 05 30 59 28 9e cf 30 88 56 8d 08 a0 42 f4 07 a3 7e 3f 6c 54 4d eb 1c 87 5b 71 9b 63 74 a5 4c 97 18 01 56 98 47 a5 95 b3 b9 c8 d2 e5 1f 6f cd 76 f6 cc 7b 8a f1 4c 45 3a f2 37 f9 ce f4 ef f3 9d 06 9e 84 e6 61 c7 5c cb d1 fa 8f 6c c1 5c e4 92 9e 98 53 29 1b 0c a5 d3 53 1a 39 35 a3 6d 61 5f 57 08 44 cf 3d 98 f9 da 35 5d c1 d8 09 1a 27 81 a8 1a 34 43 3d 77 4c b8 55 5a 95 4a cf 5a 88 ce 18 cf 6e b1 50 53 55 81 6b d2 da b2 70 ad d4 76 14 ae 7b 87 68 cb f1 c3 f0 1b ce 5f f9 19 7a 47 f2 92 24 0e 43 4d af fd ba 3b 38 66 50 77 16 e5 75 ac 69 8e 45 2e 57 d5 35 b9 7d 45 e0 f9 16 c2 8a 25 e3 5f b9 a7 56 f1 ab ab 2d 73 79 57 5d 5a 58 27 7c e6 0b f5 c2 51 b7 20 4f 6a 1e 90 af 49 66 a9 c1 5a 94 e9 46 4d 98 02 34 04 f1 8c Data Ascii: GP?&30Y(0VB~?lTM[qctLVGov{LE:7a\l\S)S95ma_WD=5]'4C=wLUZJZnPSUkpv{h_zG$CM;8fPwuiE.W5}E%_V-syW]ZX'\|Q OjIfZFM4
2023-08-10 21:19:00 UTC	2521	IN	Data Raw: 02 b6 e0 a0 ca b1 e4 f6 32 1d 9b b3 89 70 4c 43 d8 0e 94 c0 91 a6 9d 02 e8 a8 57 b2 e5 83 12 72 ca 48 11 b5 e0 04 d1 3d 91 50 54 ee 35 f8 d2 07 17 e9 4d 48 33 62 6b 9d a4 05 0c 98 0d 03 97 62 a2 56 98 3f 22 54 85 0e 90 0c 70 e4 b1 09 8d 61 a1 98 54 86 43 c0 88 62 18 cb ab 89 18 02 fb 2c 4f b6 45 63 f8 b0 dd 3c 3e 78 77 f2 fb c6 d1 76 73 e7 b8 79 78 74 f0 79 67 6b 7b ab 69 6d 1c c3 6f cb 6d fe be 73 f2 e1 e0 d3 49 13 6a 1c 6d ec 9f 7c 69 1e bc 6b 6e ec 7f 69 7e dc d9 df 72 9b db 7f 1c 1e 6d 1f 1f 37 0f 8e a0 b1 9d bd c3 dd 9d 6d 28 dd d9 df dc fd b4 b5 b3 ff be f9 16 de 04 4c d6 dc dd 81 7d 0d cd 9e 1c 50 97 bc b1 9d ed 63 6c 6e 6f fb 68 f3 03 fc dc 78 bb b3 bb 73 f2 c5 85 a6 de ed 9c ec 63 bb ef 0e 8e 9a 1b cd c3 8d a3 93 9d cd 4f bb 1b 47 cd c3 4f 47 87 Data Ascii: 2pLCWrH=PT5MH3bkbV?"TpaTCb,OEc<>xwvsyxtygk{imomsIjm\|ikni~rm7m(L}PclnohxscOGOG
2023-08-10 21:19:00 UTC	2522	IN	Data Raw: f8 a1 72 99 3f 70 30 26 5a 12 68 c7 fa 92 dd c1 30 f6 12 23 a5 5e e0 29 9e e6 3c 24 c8 e0 06 24 bb 28 47 dc 0b 47 21 c5 13 7b 1b a1 7b 71 8a 28 6b 9c 16 cc d3 38 07 76 c0 25 bf 63 51 8b d0 3d 3a 0e 4b 94 9f ff 10 e9 93 e2 b2 89 01 55 81 dd 68 06 53 28 cd a2 ef 8c a2 30 e4 c5 58 78 63 e8 04 01 41 a1 18 6a 52 d4 2f 4e 47 29 e1 dc 22 0b 06 e1 38 c8 ae 19 8d 36 e8 3c c7 1a 50 08 18 02 61 8b f6 bc 8c 5c b2 a9 90 db 41 06 28 94 f1 04 00 d7 6c d0 9c 04 20 f2 ea ed 66 22 ca ee 80 88 38 42 2f 0b 39 79 9a 70 11 99 4f 23 ca 90 c0 4d 42 8a be d1 24 13 d0 9c 99 09 85 52 b6 d7 d4 29 15 65 0b c8 92 4f 45 12 b0 72 fa 52 7e 20 43 0b f4 ea 7c 01 b9 df cf cc 74 6b 50 d1 71 9e e8 2f 34 9c 74 7d 5f 96 2f 88 ef ca bb b6 27 06 e7 c9 1e dd 04 f3 41 fe 54 58 0c fd 7b 25 26 c6 e3 Data Ascii: r?p0&Zh0#^)<$$(GG!{{q(k8v%cQ=:KUhS(0XxcAjR/NG)"86<Pa\A(l f"8B/9ypO#MB$R)eOErR~ C\|tkPq/4t}_/'ATX{%&
2023-08-10 21:19:00 UTC	2538	IN	Data Raw: e9 bd ea c1 fe e2 de 0f e0 f9 fd 37 6e a2 0f 69 71 4b e2 4e bc 17 ee eb 8e b1 90 0c 04 05 41 2f c5 c2 b6 59 30 20 59 f2 89 e2 da 9d 5b 25 aa 1e 3d b4 5c c2 47 87 76 df fb 16 ba ea d2 3d 71 f8 2a 91 22 f3 d1 50 5c e8 91 89 1b 83 9d 00 b6 2b 3b b1 39 dd 3d 53 be 57 26 e6 60 48 29 ac c0 23 d3 15 ee a2 ca 73 c9 f4 b7 e5 91 a9 f4 9d b8 64 22 8f 4c 0a 6e a4 43 26 25 4c 35 d6 8e 00 f9 ed 3c 6f 4c 29 ae 99 78 74 44 6a 22 c4 70 99 05 dd d5 5c 52 48 d6 22 fc 75 5f 13 c6 39 ed df e1 b5 5f af c1 2e bc 98 a3 7c 17 46 e1 4a 11 3f bb 16 e1 a5 9b df ff 7e a9 fc fd f2 7f 85 52 ad 1f b9 e5 e5 60 30 0a bd a3 e3 b8 bc 30 5f bf 55 5e f2 41 4a 68 39 a1 1f 1d 3b 67 56 79 7d 6d b7 fc 88 a5 84 5c 98 71 ad 3f e8 b9 34 b0 40 aa 72 cb ad e5 f5 a5 9d 76 e8 0d e2 32 17 16 10 53 88 16 Data Ascii: 7niqKNA/Y0 Y[%=\Gv=q*"P\+;9=SW&`H)#sd"LnC&%L5<oL)xtDj"p\RH"u_9_.\|FJ?~R`00_U^AJh9;gVy}m\q?4@rv2S
2023-08-10 21:19:00 UTC	2548	IN	Data Raw: ae cd 06 47 07 95 1f c2 20 b4 9f 49 4e 42 c7 d4 15 04 6c 25 50 4a 61 72 3c 9d f1 f4 e1 76 4e 2e b4 44 49 4b 3a ec 00 47 39 94 9b e9 a9 ad 4b 1d 49 13 a6 c4 0e b4 29 b6 78 43 14 b1 1f 99 13 ab 9f 3e c9 1c c8 01 3f 04 f8 58 83 96 be 48 ef 92 8e 34 69 be 4c 33 17 9f 57 06 56 df 6c 3c a0 1f 79 d5 7b ae a2 45 eb b6 39 85 08 cd 6b 37 80 f0 2d 27 8c 37 bb b8 c6 56 28 4f 71 55 a6 80 1e 53 82 15 10 7b 15 c6 50 5c 0d ba 55 10 77 ab b8 07 b6 88 8f 0d 72 20 3e 97 2c 0a 8b 40 a5 15 19 9d f0 b2 26 30 72 3b d6 15 67 eb c8 3e ae a1 65 01 48 0c ec 8a 8d 9c f3 09 e2 56 92 f4 a9 85 79 79 40 04 65 67 f6 c6 7e 2a c7 4c bc dd f5 62 90 f6 f9 87 10 73 d5 1b a2 70 c1 a2 10 8f 11 71 ab 2a 6b 32 4c 8b 21 2f d9 b0 8e 48 17 9a 82 0b 6c ea c8 36 1e fb 27 a0 f3 fb 65 94 58 71 17 ba 23 Data Ascii: G INBl%PJar<vN.DIK:G9KI)xC>?XH4iL3WVl<y{E9k7-'7V(OqUS{P\Uwr >,@&0r;g>eHVyy@eg~Lbspqk2L!/Hl6'eXq#
2023-08-10 21:19:00 UTC	2556	IN	Data Raw: 30 78 3c 5c ff 78 38 f8 34 f8 f2 c5 51 38 04 48 e0 07 d9 81 41 91 f3 35 d9 88 88 b2 b7 b7 61 07 38 d0 d4 1c 18 3c b7 19 ba 00 20 4e 5e 1e 6d 09 67 71 a0 a7 88 ae 8a 55 3f ac 86 b1 ea 15 18 c3 d3 d5 6e 86 1c 73 4b e0 d8 a4 eb c3 6e 81 89 33 1e d6 05 27 25 98 c4 4d 45 77 8c c6 75 61 a3 17 38 ac 24 0f 1c f4 b1 1e d7 30 0f 1e 86 23 2f 3f 46 7b 5d ce a3 60 b0 4e ed b5 fe 93 4f 07 c1 60 30 a4 ff 63 7b 29 7e 6a 53 72 99 27 dc 8d 71 f8 5d 47 61 28 ee 59 25 bb 7c 67 2a 66 55 3e 12 13 cd 3c ce 13 8a 65 1a 37 26 c7 c3 2e b1 02 84 47 bd e3 5f bf 8a 4f 56 7b dd 8d 78 f4 ee 83 de bb 5f 43 22 66 00 c0 ab 18 87 f9 47 bd 0d fc bd 0e 99 c8 15 0a 46 32 c3 79 e8 00 8d e0 fb 21 ba be c5 4b 58 75 8f 50 83 a6 8a 11 ba 63 35 53 f1 ab a7 0f ea e4 f6 24 9c e7 2c 64 26 e1 03 79 cc Data Ascii: 0x<\x84Q8HA5a8< N^mgqU?nsKn3'%MEwua8$0#/?F{]`NO`0c{)~jSr'q]Ga(Y%\|g*fU><e7&.G_OV{x_C"fGF2y!KXuPc5S$,d&y
2023-08-10 21:19:00 UTC	2572	IN	Data Raw: 96 03 e5 ea 6a 0f df 2e 48 e2 fd 2b 9a 0f f5 71 79 22 c7 4a 67 74 d3 75 0b df d5 85 ef ce 31 c4 25 33 00 2b 81 fc 8c 40 cc e4 d8 f8 f7 11 df 2d e6 f3 d4 2d d0 ab 1e 0a 0a c5 82 ed 39 df 16 df 24 2e 7b 0b 47 25 3e 1b f9 35 67 c7 dc 4b 8c 7b 6c 53 f1 74 c9 7a 5b 75 4d 1d f7 ef b7 ae a1 dc 49 98 5a 4e 77 5e cd 21 f5 26 a8 60 b7 80 2b 49 76 91 17 65 0a 8b 42 e4 69 9b 8e 67 63 71 6d 3e e8 f6 bc ef 35 df 0e d0 b3 d3 1c 0d 55 78 98 35 0c 55 70 b8 e5 30 b6 0c 43 95 f2 44 de 15 1c 5a 7a 93 de 2e f3 8b 56 7c 98 83 2f 56 da f6 44 47 b4 3d 73 36 50 9e 87 c9 58 89 6e cf 7d 20 fd c7 ab d5 d6 dd b5 8a ae a1 5e 9d f6 8d 21 be b9 6e 6e 24 3d 75 3b 75 eb 76 28 65 80 00 d8 16 cb 1f 5e cf 37 b7 ab 87 1a 71 ab 0d 71 80 88 ce c6 77 cb 7e 7d 4a 80 05 6f 16 32 d8 2d c2 0e 70 2a Data Ascii: j.H+qy"Jgtu1%3+@--9$.{G%>5gK{lStz[uMIZNw^!&`+IveBigcqm>5Ux5Up0CDZz.V\|/VDG=s6PXn} ^!nn$=u;uv(e^7qqw~}Jo2-p*
2023-08-10 21:19:00 UTC	2573	IN	Data Raw: 3c 7e f3 d5 36 25 41 91 9b f0 ff ad a3 9d bd 5d a4 04 4d b4 b5 b7 7b 74 00 29 11 d4 f8 e0 48 61 7f b3 73 b8 1d 05 9b 07 3b 87 d8 38 cf 0e f6 a0 04 6c 5d c0 d8 23 3a 80 b7 bb ad 08 61 e3 db 7d 04 50 f8 fd f2 70 5b 73 f4 74 7b f3 39 90 3b 44 7c 13 b8 8f 24 f0 3f b1 6b 0e 1e f7 07 fd 01 26 5c d6 f5 ac 1a 3e 7c 78 01 13 6f 7e 06 4a d3 95 f8 f9 f0 3c 05 49 df f9 e8 61 e7 81 b9 66 a0 cb f4 80 67 6f 28 76 20 3e cd 0a 66 d8 f9 ca 0a fe fb ee 1d be 28 8f 6f f9 18 7a 3f 29 93 ab 6a 18 be 3c 78 7e 68 24 84 28 29 a2 ac 16 e7 f3 e1 e1 cd d5 59 31 a5 54 d8 9d 51 3a ec 66 f0 9b 73 a2 b3 69 71 36 0c 39 06 10 be 2f 91 a0 4f 20 5d fc 36 96 12 5c 8b 3a b8 26 60 b6 de b4 3a 6b d9 83 75 be 98 2c ca 2b da f1 87 cf c4 2f e6 2e c1 c3 f3 27 f3 f3 73 d8 62 87 9b fa 83 72 0d cd a0 Data Ascii: <~6%A]M{t)Has;8l]#:a}Pp[st{9;D\|$?k&\>\|xo~J<Iafgo(v >f(oz?)j<x~h$()Y1TQ:fsiq69/O ]6\:&`:ku,+/.'sbr
2023-08-10 21:19:00 UTC	2589	IN	Data Raw: e7 97 3f 23 4b 9b 58 1d c7 93 18 1b 89 4e 23 ff d2 6c 34 ea b1 0b 6e 5c aa a0 e1 67 de 19 32 a6 55 38 0b a7 d4 86 b1 bf 89 d3 4f cf 7b 09 f5 77 3f fe 73 63 1d 9a 94 d4 01 d8 58 ef 25 af c2 1b 14 59 c7 f0 21 86 4f c3 28 56 c8 bb 8f 46 7a f8 91 70 45 c5 fc 09 eb 53 ef 9f a6 40 0c f5 34 1a ba 9a 04 43 36 16 18 36 53 33 80 b7 8e e9 fb cf 70 f8 2f e3 e9 bf f2 e2 d9 f3 4f cf b6 fe be f6 7c 5d c7 b5 fe f2 e5 67 a1 0d 9e 4d 03 0d 85 31 fa 2c e0 cd 51 a3 b1 8f 65 1a 3b 26 5b f2 9e 6f ef eb b7 9f 6f e7 ea 2c 00 b0 d8 c8 82 d6 97 54 35 7b fb 3f 44 80 71 a6 ae bd 7c 5d 06 a0 3f de ee 98 8f 8f 83 42 db 4e 3b fb 91 fe c2 d9 70 6b b4 6e 8a 47 19 8e 42 7e 10 a2 6c ab 04 56 36 52 51 b6 fc e1 ff 3e bb fc f2 8c 71 6a a5 f0 f1 8d f5 75 f7 73 db c5 cf 51 16 16 2c 0e c8 bb f3 Data Ascii: ?#KXN#l4n\g2U8O{w?scX%Y!O(VFzpES@4C66S3p/O\|]gM1,Qe;&[oo,T5{?Dq\|]?BN;pknGB~lV6RQ>qjusQ,
2023-08-10 21:19:00 UTC	2666	IN	Data Raw: c5 e3 eb be 27 ce a7 e8 d0 9d 9b cc 14 33 53 38 ea f1 be a9 f5 0e 21 63 8c 19 e3 fa ac 19 ae 8d d0 8f 32 ea 84 7f 30 92 58 2d 22 d5 d2 4b 94 2b e2 b5 89 5e e0 f8 b0 cb 9a 20 88 15 21 30 41 57 32 44 02 cc e9 ec ff 5a 9f ad 1c 64 56 ac 3a 64 7b 94 30 46 58 f8 5e 29 1f 77 94 ee 8c f3 e8 12 37 20 95 d5 7f ad ef 96 99 c9 d9 51 3e ea f3 fa b8 8a a1 b6 58 b0 7f 8e c7 e6 3b 0c 4b 75 08 e0 28 ce 82 b6 37 9d 79 30 46 5d 94 bb 53 36 93 20 a5 f9 67 71 46 e1 57 b0 6d 43 72 39 ec 80 8e 68 44 25 e3 af f3 60 ae 9e 07 bf a6 68 33 36 4f e9 1b 3e 2a 52 c3 4c 42 1b 03 06 74 fc 30 1b 90 7b 26 38 88 d2 18 6e d6 6b 27 b1 e7 23 32 76 8c 27 1a 80 1e c5 53 2f 54 9f 3e 62 a2 70 18 78 53 81 bc ea 1c bd ed be 1c 0d 86 ad e1 c5 80 1b 17 b4 c8 89 ba ec 0c e7 f1 24 1c 3f 40 ce b1 97 0e Data Ascii: '3S8!c20X-"K+^ !0AW2DZdV:d{0FX^)w7 Q>X;Ku(7y0F]S6 gqFWmCr9hD%`h36O>*RLBt0{&8nk'#2v'S/T>bpxS$?@
2023-08-10 21:19:00 UTC	2682	IN	Data Raw: 5c 1d 5d 9e 50 55 91 06 2a 3f 4f 64 2f bb a8 88 1a a7 f8 3a 5b 55 07 f0 3c b2 a8 ab d5 31 fa 25 9a cf b0 32 ba 21 3d 5e 72 c1 8d 92 ec 6f bf eb 8d 92 cc 89 bf e7 8d 92 2c 80 ab 6f 94 bc 8a 61 53 f3 c6 13 52 18 b6 06 1b d1 b8 32 3f b7 b2 52 b3 1f f0 36 59 dc 96 28 c8 c1 d3 5f 50 bb 6a 78 8d 53 41 7e 8a cc 2b c5 da c9 56 f9 69 85 ad 8a 8d 1b fe 85 75 37 54 dd 4f 29 6f 37 1c b5 10 16 d6 bc a1 6a 5e 5c f2 9b af ff 64 40 fd e4 f2 76 93 9d 69 81 eb 9c 39 87 4c ab b7 54 ab 1f 2d ec 32 16 82 cd 1c 63 e1 e8 b0 4d e5 8c ad aa 05 a8 e2 a9 52 24 72 72 b9 c0 f1 d0 59 40 74 4d 01 25 93 b9 36 f6 71 20 ce d7 d0 33 df 34 38 0c 6e bd bb 50 94 79 cb b3 4a e5 20 ef de 0d a6 1e 5a 55 7c fa 94 e2 03 72 93 35 48 43 04 a0 d3 e2 c9 b1 36 55 6e 1c d7 4e bc 04 6d 3b 26 f8 43 62 f3 Data Ascii: \]PU*?Od/:[U<1%2!=^ro,oaSR2?R6Y(_PjxSA~+Viu7TO)o7j^\d@vi9LT-2cMR$rrY@tM%6q 348nPyJ ZU\|r5HC6UnNm;&Cb

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.3	49732	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:54 UTC	424	OUT	GET /page_success/end?dws_page_name=cloud_docs_paper_content_page&path=%2Fscl%2Ffi%2Fpqbygvalzp823663oio0q%2F_-My-Paper-doc.paper&request_id=2bf587026cc84e6fb25f2770a9e877b7&time=1691702333 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
2023-08-10 21:18:55 UTC	476	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Server-Response-Time: 0 Content-Type: text/javascript Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:18:54 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5b4c2a3d9d474409a4a8bd57ec41948f Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.3	49851	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2024	OUT	GET /static/webpack/production/a21c5224998b633286f4.rQRcp3jmk733KBe7uAe0ZL46KWMlMUvqfxvueAS1xRA.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:00 UTC	2157	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 22001 Connection: close Date: Thu, 10 Aug 2023 21:19:01 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:35:18 GMT ETag: "039f0f3fdcd37730668f08158cb3dc24" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 2aefdd231d9806ea2eced3399f411f80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: LIG0UG2EJXm-bbeFlVYpu0TsHpWj2nIncgkAlnJktzO-7QDyx1WRzw==
2023-08-10 21:19:00 UTC	2157	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd bd eb 7a db 38 b2 28 fa 5f 4f 41 b3 cf ca 88 31 2d eb e2 ab 14 b6 47 b6 e5 8e 57 fb 92 65 39 9d 99 e5 f6 d6 47 91 90 c4 09 45 6a 48 ca 8e db d6 7e 82 fd 00 fb f9 ce 93 9c aa 02 40 82 17 39 49 77 cf 3a 33 f3 75 4c 01 85 42 a1 50 28 54 e1 52 a8 3f 7a 81 1b 3e 36 46 a3 8b eb fe 69 ff f8 62 40 1f 83 d3 d1 c9 fb 8f 57 3f 0f 47 23 eb ab 10 2f 2f 77 f7 46 63 b1 8c 67 f5 bb 3b 7d 61 2f 58 34 b2 dd b9 17 fc 6f e5 7b 14 4e 26 a3 07 8f 3d 8e c2 c0 7f 12 39 63 40 cd 22 f9 63 19 b8 3e 13 3f 1c 3f 5c ba 23 37 74 62 91 e0 da f1 6c 1c da 91 8b bf ff f7 e1 84 ed 35 27 cd 7d fd de 7c ae b5 9a dd c9 32 70 12 2f 0c ea cc 4c cc d0 78 be 1e ff 83 39 49 c3 65 13 2f 60 1f a2 10 30 24 4f f5 c4 d4 47 23 16 5f 86 ee d2 67 ba f9 fc 60 fb 4b d6 dd 68 Data Ascii: z8(_OA1-GWe9GEjH~@9Iw:3uLBP(TR?z>6Fib@W?G#//wFcg;}a/X4o{N&=9c@"c>??\#7tbl5'}\|2p/Lx9Ie/`0$OG#_g`Kh
2023-08-10 21:19:00 UTC	2407	IN	Data Raw: c7 e0 ea 4e 19 3f f7 91 95 10 99 6a 39 e8 cd 57 53 81 48 b5 12 91 ca 41 78 1b 72 a5 0a 34 51 ac a5 0f 3c 62 85 fc 49 5f 7c 71 f8 2a 0c 6e 45 28 0a 48 53 3e b3 22 1c 90 e7 87 4b 67 76 4a c1 31 e8 f7 15 45 17 e2 00 80 99 9f b2 3e af 48 e6 01 35 8a 9b 2d f4 64 cb 0e bf d6 b4 d7 e4 f7 9a 30 d4 94 a1 6e 7f c9 a5 9c f4 e2 18 0c 97 21 6d 64 d4 b3 40 a7 b8 c4 94 45 95 c1 21 13 74 03 9a bc f1 f8 d3 2a 25 c0 a6 aa 7d 5c 29 5d 43 6b ee 52 99 8f ef 19 64 c4 38 99 41 e5 af 6a 55 0c 70 7a 45 36 95 6d 31 07 1d a5 45 5d 3d fe b8 50 c2 6b d7 0d 0c 65 b2 52 38 bf e8 65 1d 52 46 87 05 28 b0 08 3f ae 24 ba b0 1a 4e 44 0e a9 f5 aa 04 a0 ba 08 d0 f2 e6 cd 86 52 b8 97 89 d1 9a 12 4a fc 15 05 fa 35 fa d5 22 6f de 28 2d 4a 39 e4 66 ee 5f 56 40 04 b5 e9 f1 23 07 e9 d6 3c 0f 1c 34 Data Ascii: N?j9WSHAxr4Q<bI_\|qnE(HS>"KgvJ1E>H5-d0n!md@E!t%}\)]CkRd8AjUpzE6m1E]=PkeR8eRF(?$NDRJ5"o(-J9f_V@#<4

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.3	49852	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2024	OUT	GET /static/webpack/production/ea67d264b690942c8510.zy-U6PEBZo5tZvAwyC0Mt1Ga6AOObigtU7jOeqlAl_Q.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:00 UTC	2389	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 94627 Connection: close Date: Thu, 10 Aug 2023 21:19:01 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:33 GMT ETag: "5c3729b768565d111532b0e648364f99" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 b03c46754456cd1729ff37c2faafd4ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: GxLRtcbOx14ORmbVPUSDk-hv7x2PfLCrNWKpeGsd4m2m68OVCAGLIA==
2023-08-10 21:19:00 UTC	2390	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6b 7b e2 c6 d2 28 fa 9d 5f 81 b5 df ed 85 82 c0 80 ef 30 ca 6c c6 c6 33 ac d8 c6 cb 30 99 24 c4 e1 11 92 00 c5 80 88 24 7c 99 31 fb b7 9f ba 74 eb 86 c0 ce 65 9d f3 e1 e4 c9 b8 51 5f ab ab ab ab ab aa bb ab 0b 8f ce dc 72 1f cb 83 c1 65 a7 79 de fc 70 d9 a2 1f ad f3 c1 d9 a7 cf d7 3f 74 07 03 fd d5 1c 2f 2f fd 3b b5 bc 58 fa 93 42 bf af 2c 8c 85 ed 0d 0c 6b e6 cc ff 6f ec f7 c0 1d 8d 06 0f 8e fd 38 70 e7 d3 67 91 32 84 aa 6d 4f 7e 2c e7 d6 d4 16 1f e6 d4 5d 5a 03 cb 35 7d 11 61 19 fe 64 e8 1a 9e 85 df ff d7 3a 3a ac d4 86 66 4d b9 d3 be e5 aa 95 d3 fa 68 39 37 03 c7 9d 17 02 cd d6 4c f5 5b 67 f8 bb 6d 06 65 cb 1e 39 73 fb c6 73 a1 8a e0 b9 60 6b ca 60 60 fb 57 ae b5 9c da 8a f6 ed c1 98 2e ed fa 4e 65 a5 36 1e 0c 2f 3f Data Ascii: k{(_0l30$$\|1teQ_reyp?t//;XB,ko8pg2mO~,]Z5}ad::fMh97L[gme9ss`k``W.Ne6/?
2023-08-10 21:19:00 UTC	2406	IN	Data Raw: f2 52 70 f4 51 bf 82 8e 6a 93 c5 e4 75 cc 97 17 45 59 c9 31 5a 89 31 da fb ad 5e e8 ff 56 bf 2b aa f5 bd c6 66 86 94 1a f9 d0 65 10 5d 7b c5 6b a5 4c 0c 74 19 0a 46 67 46 17 6c 5c 55 1b e9 78 e9 46 d7 cd f7 5c a6 6e f6 ab a1 d2 36 da dd b5 df 2b f5 70 98 47 1a 7c a8 f5 d1 4a 70 cf 38 af dc 78 07 fe b9 68 7e 6f 8b 0b e4 36 8a e4 ef 21 ae 64 96 0e 2a 75 4c ac 56 56 19 ac 78 63 6d 4f 45 74 a5 43 b5 7d 71 ac 60 f2 9e a2 4a 87 50 d7 53 c9 fc be 82 df f0 15 cf b2 57 2b 9a 7b 35 f4 55 b8 7f 90 ba 18 f7 57 5c 65 4e 1c 7a 1d ed 66 e9 4f e4 85 14 11 75 cb 33 87 63 43 17 99 59 89 e9 ee f1 f5 62 99 55 4e 41 ca 2b b2 10 ca d7 9a 7e a5 9e 85 cc 28 2b 01 1c 1c ec af af 9e 7f 65 f1 44 4d 17 96 e8 33 d7 bd 77 6c b4 ad 21 22 d8 e1 80 8c f3 78 d9 6b a2 2f 41 db 12 f3 d9 a1 Data Ascii: RpQjuEY1Z1^V+fe]{kLtFgFl\UxF\n6+pG\|Jp8xh~o6!d*uLVVxcmOEtC}q`JPSW+{5UW\eNzfOu3cCYbUNA+~(+eDM3wl!"xk/A
2023-08-10 21:19:00 UTC	2471	IN	Data Raw: d4 b5 85 10 56 be 6f ec 74 8c 46 0b 9d 8e 07 2a b9 95 06 4e d0 a1 6b 88 ac e7 8c 54 e9 55 76 94 34 85 34 92 4b e9 46 a9 d0 01 b6 4e 56 2a e1 13 d9 2f 18 ea 7b b3 6f dc e9 41 7f 74 57 97 cc 84 9f 29 41 ce 14 67 13 20 0a 93 67 68 71 8a 36 b9 f4 87 67 8f d1 d5 60 b4 ea 26 d9 da 03 9d 2d e7 87 36 a4 2f 9a 8c 39 ac fd 59 82 45 a3 d1 48 45 59 9e b1 93 5a c2 47 e5 68 08 c3 65 32 95 27 50 77 74 dd 88 64 d2 9c c4 85 99 89 0b 13 c6 1d e3 a4 a0 ea f9 76 84 81 4c 56 e6 6d e0 c3 92 95 57 57 d2 2f 58 12 6b db 65 a9 d0 79 f3 9f 9c e1 a6 30 a6 c4 58 7f 84 23 c0 7f 4a 34 33 d0 2d a2 09 92 99 99 92 cc 90 12 a5 64 36 ca 7e 1a 04 8a b0 9f 45 83 25 b3 20 21 99 19 a9 79 42 5e 78 32 18 bc f4 f4 15 71 57 80 b2 00 cb 1e 49 6d 69 d6 7d 87 22 51 10 0a 55 6b 7c 36 88 84 ac 20 14 b2 Data Ascii: VotFNkTUv44KFNV/{oAtW)Ag ghq6g`&-6/9YEHEYZGhe2'PwtdvLVmWW/Xkey0X#J43-d6~E% !yB^x2qWImi}"QUk\|6
2023-08-10 21:19:00 UTC	2472	IN	Data Raw: fc d5 37 ef ea f1 0f 40 27 1e e6 7a 66 1f 93 b6 ba 5a f1 31 b3 6f e6 d4 f0 7d d0 d7 5c 0d 10 b8 a0 d3 50 75 4f c3 ab b9 75 5f 4e 0c 0d 16 fd ba a5 91 33 89 3a a8 de f8 5c a5 b5 c6 5f 12 5a 99 ad c6 9f 69 a1 28 dc 2c 45 dd 89 bb 19 bb f0 aa d9 fc ec c1 42 1b cd eb 53 2d 92 ce 70 ef 78 7d 51 8b e6 6b 68 25 e4 e7 4a 62 d3 bb de c1 88 5b e3 31 1e b7 5e 15 71 85 64 ae ad 8c 41 cb 89 db ca 51 81 b4 57 ce 4d 9b b4 9d 82 2a 1d aa 47 9a a9 ac 1f 45 6c b4 cd 03 5f 75 ca ee cc 41 2f c3 2c 7a a6 4c 94 4c 5a 11 ae 3d 7c ab c4 d7 2b c0 74 93 39 1b fe 3b 4b fa 60 f7 e5 13 2b 73 dd ea fb 77 80 79 56 2f 62 0f ed cd f1 cc c0 e7 db f6 99 3b 5b b8 73 64 37 73 35 21 71 67 e4 70 fb f3 3b 7c 15 d2 00 b1 f0 bd 52 f4 84 b4 bd 0b d2 76 d4 33 50 cb 27 bb bb 3b 88 0d c8 97 8c 57 71 Data Ascii: 7@'zfZ1o}\PuOu_N3:\_Zi(,EBS-px}Qkh%Jb[1^qdAQWM*GEl_uA/,zLLZ=\|+t9;K`+swyV/b;[sd7s5!qgp;\|Rv3P';Wq
2023-08-10 21:19:00 UTC	2487	IN	Data Raw: 6f d4 77 aa 95 5a e3 4d de 2b b1 6a cc 82 5d 62 19 0a ad 66 b3 de ea 79 e8 31 78 32 bc f0 99 e0 95 3c 09 17 66 f2 da 8b 59 6a 07 6b 18 42 c5 15 e9 2a 2e 69 2b cc 3c 76 e7 fa 1e f6 bb 60 79 6f ab b5 ce 8e c0 ed 88 5f 97 61 50 e7 3d b3 e7 e0 95 37 e5 c1 42 60 33 6d c5 03 ad 0b 2d 60 24 b4 80 d5 6e ad 27 02 75 19 68 c8 40 53 06 5a 32 d0 e6 01 b4 1a 17 81 8e 08 b4 2a 3c 50 ef 76 79 a0 d1 aa 8a 40 bb d3 cb f1 50 47 64 6a 56 44 f9 66 b5 26 03 a2 d5 66 53 e6 69 8b 40 bb 51 13 69 ed 96 ac a0 dd 69 a8 50 8d 42 0d 0a b5 28 d4 91 a1 26 95 68 52 89 26 95 68 52 89 26 95 68 51 89 56 4d 74 a1 5b ef 8a e4 56 b3 5e ad f7 f0 1d 89 5d 43 d7 a2 d6 24 b4 b5 5a 53 06 24 b6 6a 12 7f 35 89 b6 5a 57 22 92 50 2b 63 08 7f ad 9a 44 a4 44 6d a7 2a f1 d8 96 e8 ab cb 40 53 e2 51 e6 91 Data Ascii: owZM+j]bfy1x2<fYjkB.i+<v`yo_aP=7B`3m-`$n'uh@SZ2<Pvy@PGdjVDf&fSi@QiiPB(&hR&hR&hQVMt[V^]C$ZS$j5ZW"P+cDDm*@SQ
2023-08-10 21:19:00 UTC	2503	IN	Data Raw: c5 72 72 1e 75 a0 d0 62 7b c9 6c f0 a6 85 2c 0a 88 25 9e 2c 80 b6 14 48 59 83 48 a5 f5 eb 93 af bd 5a e9 e4 66 92 6a aa cd da 45 ba 9e 44 c4 c4 4e e2 d1 83 28 b1 a0 93 a3 80 fc cc 1f 6f f4 ec dc 1c 3b 1a d7 66 c7 ff db 9d 8b 73 d1 be 5a a3 4d 17 dd 2a 85 2a 4d 31 2a 72 f6 28 5f c2 0f d4 f1 14 4d 94 e9 11 9a b9 d6 58 59 50 ab 71 82 7a 31 d1 0c 16 cb 9c 0b 52 c6 d1 9b 51 48 47 40 7a 8c 37 d6 dc 34 cc 7a d5 f5 2b 70 44 c2 d3 c9 fa 43 40 55 81 68 b6 ac 09 84 a8 9d 5c b6 49 2c 08 69 c3 12 f1 a2 14 b4 c5 71 78 13 a8 8d 85 c5 a5 0e 5b 91 a7 21 eb 95 02 d5 c6 02 4f 30 c2 ce 9f d1 f3 25 41 8d 26 40 a1 e9 d4 b3 15 a4 d6 78 83 a9 80 8c 65 64 d0 89 a4 85 d9 7a 40 ed 60 6b 5f 3d a8 45 87 17 8a f4 41 b4 af 4e 73 fe b2 13 62 1c 45 f6 a7 7e f1 27 b1 5d 84 3b 38 da 81 d1 Data Ascii: rrub{l,%,HYHZfjEDN(o;fsZM*M1r(_MXYPqz1RQHG@z74z+pDC@Uh\I,iqx[!O0%A&@xedz@`k_=EANsbE~'];8
2023-08-10 21:19:00 UTC	2623	IN	Data Raw: 41 89 28 77 da f1 c9 df 67 ce c4 b7 53 b2 bf b9 43 c7 db 91 34 96 67 fa 8b 68 8e 92 cc 8f a9 a4 c8 6b 96 d8 fe 1d 8b 41 ed b9 7e 44 92 a2 50 6b b8 84 7c da 62 75 48 51 26 59 72 73 c9 ab 79 fe 6e 9e bf 0c db ed d2 ca d5 52 a7 58 5c 35 8d 72 4a dd 39 b5 72 fe 72 9f 95 af 96 f6 3f 87 65 b1 24 f3 ec 04 1f 6f c6 ca f4 64 ef 64 b1 c4 86 9e 99 e1 9c ec 1c 64 25 4e 5b 5e 2d 82 4b 3a f3 9d 19 98 0d 9d 46 80 14 8a f1 f5 08 e9 1d 24 34 b0 e6 85 3f be 40 43 43 5f 38 3d 58 fc 05 bb 8f 44 9c 7d 59 6e 9f 6f 2c 1e 38 78 84 fa c3 35 32 5d 78 bd 35 37 4d 1a 36 5e 4c 9c ca b0 b6 50 aa 37 5b 21 bf 58 f9 f5 e3 af d2 e1 2a 97 24 74 6a d2 84 4e 8d 62 74 aa 79 ba 92 1c 4b a7 bf 5e a6 ff 99 6e 90 ff f0 04 0e 31 77 66 6c 3b f2 ad ba e2 56 ee 78 c3 a0 20 56 9a 98 31 67 97 ed 48 d7 Data Ascii: A(wgSC4ghkA~DPk\|buHQ&YrsynRX\5rJ9rr?e$oddd%N[^-K:F$4?@CC_8=XD}Yno,8x52]x57M6^LP7[!X*$tjNbtyK^n1wfl;Vx V1gH
2023-08-10 21:19:00 UTC	2639	IN	Data Raw: 95 ac 2e ca ce 13 51 c9 ea a2 ec 14 44 7d 0e 3c a1 fc 3c 11 95 ac 2e ca ce 17 d1 2e c6 aa 0c 11 f5 39 f0 84 71 f2 46 b4 6b 42 b4 dc 13 a2 5d 88 28 7a e0 c9 85 9f 6e 76 d1 e6 f9 22 da 35 21 5a f6 46 34 97 9a dd ab 7f d3 fb fb 54 2f a7 fb 31 46 1c d1 a9 5e ac 2e ca 2e 74 64 27 f2 0f 49 66 17 e5 57 73 e4 a7 5b 5d 94 5d e4 c8 4e b7 ba 28 bb ba 81 9d 71 5a fa 40 e7 15 f7 77 77 44 25 ab 8b 31 f2 45 54 b2 ba 28 3b 05 51 7b fe a1 07 38 a2 c0 ec ba 23 2a 59 5d 94 9d 27 a2 92 d5 65 ec 72 a8 d9 75 e0 07 cd ae d2 b4 b2 27 a2 5d 13 a2 65 6f 44 73 d0 ec a2 fc dc 3b a9 6a 76 51 76 be 88 76 4d 88 96 33 11 35 4e 5f ba 78 27 05 66 d7 1d 51 61 75 37 f4 fe 1e 8c f7 62 75 11 46 1c 51 c1 ce 61 fa 22 9b 5d 8c 5f 08 f9 79 38 bb 28 bb 9a 23 3b c4 ea 6e 60 6b 02 91 23 3f c4 ec 62 Data Ascii: .QD}<<..9qFkB](znv"5!ZF4T/1F^..td'IfWs[]]N(qZ@wwD%1ET(;Q{8#*Y]'eru']eoDs;jvQvvM35N_x'fQau7buFQa"]_y8(#;n`k#?b
2023-08-10 21:19:00 UTC	2655	IN	Data Raw: 93 01 85 dd 02 ad a0 67 82 6f 14 a9 ec 16 9e 29 ec 42 42 84 12 1a 23 66 82 d0 4f e5 b6 a4 c4 88 84 10 53 fc 2d b0 9d 12 d8 d5 36 85 8b 74 f0 1d 1e bf f1 15 74 2c 83 25 d3 64 3e 1d 7c 2e c8 6f 7b 09 86 6c 43 db 53 68 cb 41 db 26 b4 e5 a1 ed 19 b4 15 68 db 0c b8 ff a6 35 7a 5e 6b 0e 56 1f 24 61 aa 2c e7 94 0f 36 11 42 cc 89 00 ac 83 c2 98 ca 6d 46 05 eb 90 10 b8 cd 51 6e e9 12 11 fe ce 95 b0 f2 9d cc c6 9b dd 95 ef 3a cf a0 db 8c 1b 86 b9 0e c3 a0 1e 29 ec a7 1d d4 23 d4 86 ca 88 64 00 48 e5 22 e8 03 e0 bb 60 d8 0c 33 57 a1 50 01 94 28 73 88 91 83 2a ba c6 4e 0d 91 43 42 e4 06 61 56 50 77 d7 b8 a9 61 56 48 08 dc d6 e0 eb c0 4e b8 b7 44 6e 35 4b 32 da 54 99 c5 2b 41 83 c0 5c e6 d0 6a 67 f6 21 25 61 b1 4a d0 28 9c 92 2c a7 07 94 04 b4 bd 40 8b 0e 99 e0 b4 32 Data Ascii: go)BB#fOS-6tt,%d>\|.o{lCShA&h5z^kV$a,6BmFQn:)#dH"`3WP(s*NCBaVPwaVHNDn5K2T+A\jg!%aJ(,@2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.3	49850	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2025	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en
2023-08-10 21:19:00 UTC	2054	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Thu, 10 Aug 2023 21:19:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 77c121c995ef4b7ba01594a43bb1a162 Connection: close
2023-08-10 21:19:00 UTC	2054	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.3	49853	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2053	OUT	GET /static/webpack/production/aa7bc43daf3c3d0c03a8.i3qsTcFgoOzzyfb1BvKL1Ngsl_TBIEdwWAwwi2z1rq4.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:00 UTC	2454	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 49931 Connection: close Date: Thu, 10 Aug 2023 21:19:01 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:11 GMT ETag: "c2295f578375683a6fb54652cbfd7f4b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 c7311454ce938e04f3523616a5b033da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 2jLTcGNod200DBklDUvVyJhz4-zgCwFHDwft5xrBiemhdE_11knsfg==
2023-08-10 21:19:00 UTC	2455	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd fb 7a db 48 92 27 fa 3f 9f 02 c6 9e 63 93 2d 02 c6 fd 42 15 db 2b cb 72 cb d3 b2 5d c7 72 a9 a6 47 a5 d1 07 91 90 c8 36 44 68 09 50 b6 2c 69 bf 79 8d 7d 8b 7d a6 f3 0a e7 05 4e fc 22 13 37 12 94 e4 5b 77 cd 6c b9 4a 20 90 f7 8c 8c 8c 8c 88 8c 8c ec 7e 9c ce c6 e9 47 fd f8 78 ef ed d6 8b ad e7 7b 3b fc b2 f3 e2 78 7b f7 97 37 7f dd 3f 3e 1e de 9b e2 e6 e6 f0 a8 a7 5f 2c b2 49 f7 f0 50 bd 88 2e e2 f9 71 34 3e 9f ce fe 67 ed fd 38 3d 3d 3d be 9c c6 1f 8f d3 59 72 25 63 4e a8 e8 78 5e 7c 2c 66 e3 24 96 1f a3 24 5d 8c 8f c7 e9 28 93 01 e3 28 9b 9c a4 d1 7c 8c ef ff 39 32 e3 c8 35 3c 57 3d ea 5f 77 4c c3 0b 06 a7 8b d9 28 9f a6 b3 6e dc cf 7b d7 9d a7 7f 7a d4 51 fe a4 6c a7 17 57 f3 e9 d9 24 57 2c c3 08 95 bf a4 e9 59 12 2b Data Ascii: zH'?c-B+r]rG6DhP,iy}}N"7[wlJ ~Gx{;x{7?>_,IP.q4>g8===Yr%cNx^\|,f$$]((\|925<W=_wL(n{zQlW$W,Y+
2023-08-10 21:19:00 UTC	2470	IN	Data Raw: f7 14 f1 14 e4 9b e9 14 09 d3 07 a2 b0 ed 80 8b 0f 0a 2a 2e a9 56 28 88 16 13 24 6c 52 19 97 4c 8f b4 07 ec f8 41 53 14 14 5b 50 98 90 36 14 30 6b 3f 69 b2 d9 0f 4e 7d d7 cc a8 8f a4 76 92 44 f5 cd ad 2f 1d cf ce 3d fb 78 ff 09 86 e9 5e c4 4f e7 df 19 e1 eb 48 80 2d 35 b1 b8 a2 d9 bc 55 87 e5 0e bf 08 13 eb a0 94 27 38 46 61 30 85 5a 11 56 e6 10 c9 35 7e 95 25 e1 8f e8 3c ad a6 3f b8 0a 8d f7 54 7e 6c 25 0f 18 a8 cb df 03 65 0a 04 ca 01 18 7e 40 af 8c c7 bc 25 a9 db ae 25 58 47 6c 52 12 06 07 cc f5 79 cc 36 61 d5 26 34 56 c4 b3 58 b5 1d 08 f3 b6 b7 17 14 bc a4 25 b6 ad 89 0f 32 b0 0c da bb 81 60 2f 97 67 7c 2b 07 79 2f ab f2 80 96 43 d1 8d a6 4f 42 5a 37 82 91 ee 7b 81 dc d3 23 81 23 14 33 97 37 fd a0 63 20 11 d3 a9 31 d1 3e 94 14 2e ef 0b 53 b1 1a 17 cb Data Ascii: *.V($lRLAS[P60k?iN}vD/=x^OH-5U'8Fa0ZV5~%<?T~l%e~@%%XGlRy6a&4VX%2`/g\|+y/COBZ7{##37c 1>.S
2023-08-10 21:19:00 UTC	2591	IN	Data Raw: ad 01 a8 21 bd 5d d2 14 ad 42 b0 4f be eb d4 bf 35 e7 c0 31 ea 59 34 87 f0 03 96 99 6e dd 64 8c 75 4a b5 00 a8 93 76 cd fa b7 46 c8 55 cf a0 99 0d 2a dc 80 d2 49 34 fa a0 45 f3 79 fa b1 ae 1f ac 4f 09 ab 98 a4 d6 d2 24 65 c3 83 07 b0 5b 06 2c dc c0 6e c1 48 90 46 d7 c6 f6 00 3d 47 c4 43 3a f2 2f e0 cd 0e 4d b2 13 8e 69 41 03 e8 97 76 86 cc ee 42 30 36 ac 3d a2 68 21 4a 0b 1d 1f 89 c0 4d 97 9a 3a 48 50 60 30 c3 00 16 11 05 20 65 70 90 f0 26 8c d8 8a 89 0a d6 c5 a8 ed e4 c8 2a 1a ca 47 53 11 6a 23 44 b2 81 a8 1d 8a e6 4f ee d6 14 9d 44 84 6d f9 49 94 24 15 b2 e5 d3 d1 87 78 fe cf 60 43 3c 42 5c 6c 7f f8 bc 9b 67 6a c2 0a 84 5e 4c 73 9f d6 6f 84 b3 c5 18 7e 42 8e c3 67 56 24 13 ff f3 c2 1b 85 0a cb af c2 f6 93 0a 80 36 d7 dc 12 a1 0c 30 58 ee 3c 40 df 43 ec Data Ascii: !]BO51Y4nduJvFUI4EyO$e[,nHF=GC:/MiAvB06=h!JM:HP`0 ep&GSj#DODmI$x`C<B\lgj^Lso~BgV$60X<@C
2023-08-10 21:19:00 UTC	2603	IN	Data Raw: 25 f8 db 57 de a0 95 96 57 6d 49 7e d0 b6 2e 31 00 c9 cf fd b2 01 47 9d 56 8b 25 a7 52 fa af ae 98 8b 5a 6c 28 8d 9e 44 b7 b7 47 06 c5 cc 0d c2 c7 0c f0 6a e9 83 3c 37 b0 2b 6d be f0 4d 2c 22 27 b2 56 14 bd b8 b1 31 e3 14 5a 09 f4 d9 5a 2e 54 17 01 d0 56 f6 ae b2 b9 71 4c 27 b1 9a d0 b4 fa 45 6f 34 9a 2a 96 eb 0e eb e7 f1 6e 3f 77 f0 09 70 4d 75 6e 00 0b 86 d3 db b2 eb dd 7a db 6e bd 9d e0 ee 69 b2 74 93 3f 11 0d ac 5f d7 6a 59 88 d3 53 2f 4f d8 b5 af 26 c4 ff 31 b6 a1 34 c4 af 66 7c d5 8c b7 1e d5 db d5 3a 43 76 c4 29 fb 81 e2 14 87 e7 74 65 30 f8 1b 39 98 cd e2 e7 42 23 55 f1 f4 d6 34 2e 2f af 66 f7 c0 0c f9 89 d7 9f 9d f7 58 2a 3e c2 fa d3 f4 d6 b0 98 b4 dd b7 6e eb ad 76 d0 f6 ce 5d a3 b6 ef db 5d 52 63 b6 b2 3e fb 6c f1 25 49 f5 25 96 1c 60 56 4e f6 Data Ascii: %WWmI~.1GV%RZl(DGj<7+mM,"'V1ZZ.TVqL'Eo4n?wpMunznit?_jYS/O&14f\|:Cv)te09B#U4./fX>nv]]Rc>l%I%`VN
2023-08-10 21:19:00 UTC	2608	IN	Data Raw: 69 05 af 03 1b 6b 56 4d be bc 82 32 67 16 47 78 55 64 ac 22 d5 fa b2 da c3 9b 23 71 31 62 ec ca d6 01 79 9f 20 d2 e5 64 38 11 d4 7c 42 f5 79 a2 99 51 0c 75 33 96 79 4d b9 0f 95 be a6 ef 87 e5 78 20 55 80 50 69 84 18 8f dc 30 c1 6c ac 4f 32 e1 27 c3 40 80 d2 01 2f 8d 5e 92 51 11 96 03 ff 1b 7e ee 50 61 9d 20 b9 2f 3e 57 06 24 61 d0 88 61 28 46 ce b8 10 86 d7 45 31 87 c3 a4 0c 71 89 18 b6 90 60 38 34 d8 05 9e 62 29 fd b9 e0 c0 05 97 3c ea cb f2 94 b9 7c 01 c5 90 a7 c4 10 4f 11 d0 e0 2d 12 f7 10 bd 30 43 02 04 cb d1 32 fa 59 01 3f 0b 91 60 ea 4e 80 8f b2 1c 38 40 62 d7 63 41 56 1a f6 af af fa c5 0f ed 25 e6 a3 f3 58 24 da 74 1e bc 2b 86 c2 03 cc 03 ea 5b f0 ad 18 c7 44 26 7b d4 33 44 6f 35 b5 ef 0b a2 29 03 04 a9 22 9c 14 9c d1 27 04 ba ce 98 b7 2c 84 53 53 Data Ascii: ikVM2gGxUd"#q1by d8\|ByQu3yMx UPi0lO2'@/^Q~Pa />W$aa(FE1q`84b)<\|O-0C2Y?`N8@bcAV%X$t+[D&{3Do5)"',SS
2023-08-10 21:19:00 UTC	2620	IN	Data Raw: b7 a3 6f 40 16 f2 74 3d ed df b5 cd 9b 2b 93 a9 dd 2f 58 d7 17 05 b5 d6 0d 0b 78 ad cc ac 7a 6b f9 a9 16 87 5a a2 91 85 94 a8 fb 98 6a 82 ca cd 7a 00 bb 9d 1f ca 57 67 e0 a7 2d 2f 06 59 d5 67 bd 97 83 8b fe e0 40 c4 ac 3f 2f 5f 41 a1 dc 7b f2 dd d1 e1 af 9f 60 34 56 19 27 ae 2d fa 6f 6f 6f b9 71 fd 7a aa 3c be 38 63 27 ad 53 05 1a b7 f3 48 15 b4 5a 79 d3 bb 8b 4b ed 6e 7e f0 80 37 94 d8 6f fe 36 59 57 d8 4a 5d 39 da 9f d8 f4 6b d9 4c b3 6d ed fe ed aa 41 48 c5 18 35 b8 34 f3 f0 33 23 13 65 ed 23 aa b6 d6 53 f4 b3 72 f9 fa 86 a2 ed cf 6a 4f 90 cf 66 d5 49 bb 57 46 6b 75 e9 a5 dd 95 cf 11 36 76 b6 2c 0b ef 54 3a d1 56 93 b1 7f e8 5d 9c 61 f3 20 0d 2e a6 d3 5f 15 97 25 76 a5 bd 97 93 e2 4a c4 a2 a3 e6 e2 58 2e 4e 45 88 86 7e 54 3f ee cb eb d9 6c 3c 12 b9 6b Data Ascii: o@t=+/XxzkZjzWg-/Yg@?/_A{`4V'-oooqz<8c'SHZyKn~7o6YWJ]9kLmAH543#e#SrjOfIWFku6v,T:V]a ._%vJX.NE~T?l<k

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.3	49854	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2504	OUT	GET /static/webpack/production/560cd16fcac899cdf8de.WBtKv9t3muteHSopmtHgmdgdVDNvltp-EpSjhpmmA2w.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:01 UTC	2691	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 469221 Connection: close Date: Thu, 10 Aug 2023 21:19:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Tue, 08 Aug 2023 17:42:13 GMT ETag: "205880bd7552c8bafdd196c2941135ab" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 179ba4c3ce59451c080c2ed7517bcb96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: NslcAQcmrQZmWpaMgLnDfQuovFIutfmMcf8ANXuQCn5Gia4RuooWNg==
2023-08-10 21:19:01 UTC	2692	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 6b 63 e3 b8 b1 28 f8 5d bf 42 66 f6 3a e4 1d 5a ed 57 bf a4 61 7c dd b6 7a da 67 fc 3a 7e cc 24 71 bc 5a 5a 84 24 c6 14 a9 90 94 dd 1a 5b e7 b7 6f 55 01 20 01 3e 24 b9 ed 64 37 8f b6 08 14 80 42 a1 50 28 14 0a 05 f3 d1 0f bd e8 b1 d5 eb 1d 9f ed 1f ee 7f 39 ee d2 8f ee 61 ef e0 db f5 e9 af 97 bd 9e b3 14 e2 f9 f9 e6 d6 6a 4d a6 c9 c8 bc b9 31 26 ee 84 c5 3d d7 1b fb e1 ff 28 bf 7b d1 60 d0 7b f0 d9 63 2f 0a 83 99 c8 b9 83 aa 59 2c 3f a6 a1 17 30 f1 d1 0f a2 a9 d7 f3 a2 7e 22 12 3c 37 19 dd 45 6e ec e1 f7 ff 7c fe 74 d7 ef ef b2 3b e3 d6 de 8f 63 77 66 6e 7d b6 5a fd 28 ec bb a9 79 33 98 86 fd d4 8f 42 93 d9 a9 1d 5a 4f 8d b3 bb 7f b2 7e da f2 d8 c0 0f d9 79 1c 41 7d e9 cc 4c 6d a3 d7 63 c9 49 e4 4d 03 66 d8 4f 0f 6e 30 Data Ascii: kc(]Bf:ZWa\|zg:~$qZZ$[oU >$d7BP(9ajM1&=({`{c/Y,?0~"<7En\|t;cwfn}Z(y3BZO~yA}LmcIMfOn0
2023-08-10 21:19:01 UTC	2708	IN	Data Raw: 3b e8 7e d9 e5 b9 5f bf ee 7f dd df e6 bf 3e 75 b7 09 ee eb ee 97 8f 5b 94 bb bf 7d b8 f3 f9 0b 67 8d 85 f2 e6 46 6d 27 c7 62 71 3b a2 76 4a fb f2 f5 cb 7b 98 6c 6b 2a 89 61 3f 7e 7c 76 7d e8 18 20 1c cc 8d 8d 3e d2 a6 d7 43 8f c5 30 ed f5 e8 bc d9 32 40 df fb 7b f7 b4 06 e6 0f 16 5a 06 6e 3b ce 2e 0e be 1d d5 d5 14 e1 cd 7b 5e d5 f9 d1 e9 af 35 50 13 3f bc 27 98 ab fd d3 5f b0 d7 dd 1a c0 14 cf 62 81 5f 18 41 7f d9 3f 85 ff d6 80 de b9 21 fc 97 e0 8e 81 bc 35 50 01 2c d2 bc 1b 97 d7 a7 97 dd ab 1a b0 04 5d ce 53 aa ec 74 ff b7 bf d5 40 85 ee c3 8c 60 ce 0e ba fb 75 74 8b fa cc 0d 39 41 8e af 4f ea 08 12 4c c7 04 b3 ff 77 60 e9 ba 2e ba 7f 80 3c 71 39 fa 17 d7 97 75 c8 c7 a0 2d 50 65 bf 9c 1d d7 8d d3 30 0a f8 28 1d ec 9f 9e 9d d7 75 b0 ef 86 d1 84 77 f1 Data Ascii: ;~_>u[}gFm'bq;vJ{lk*a?~\|v} >C02@{Zn;.{^5P?'_b_A?!5P,]St@`ut9AOLw`.<q9u-Pe0(uw
2023-08-10 21:19:01 UTC	2735	IN	Data Raw: c1 70 48 01 28 9b 13 12 92 8b 10 81 86 58 27 d5 72 38 cc 50 8e cf 0e 51 48 c8 03 51 e8 cb fb c3 83 7d a8 a2 21 68 c1 05 9a 5a 07 67 03 a8 05 e7 4e 86 22 49 12 0d 8c 73 01 c0 f1 e9 33 e7 6f 9c 0c 9d 27 9c d2 6d 2c d3 fd d0 05 d9 14 33 4f f9 8a 62 9c c7 98 00 14 3e 00 81 35 63 41 10 3d 2a 09 43 bc 2d 09 df dd ed af 5b 87 20 e5 ee 50 15 86 cf af 5f 3f 7c 3d 34 ec c9 34 9e 04 54 01 b0 01 a0 de 98 c3 46 30 ce 9f 94 51 7e 3e c1 e6 d5 a2 77 5b 52 2a 40 ff c1 06 60 fb 11 65 3b 1e ce bf 29 6a c6 3d 1e 23 9a cc 68 8b d4 48 f5 2d 9e 21 02 2f d2 48 dd 16 7f 94 d3 9c 10 bb 2f d5 6f 0d 4e 11 a3 54 ad 54 61 17 60 26 1f 51 33 f8 6b b3 b6 71 17 b8 f8 fa 84 81 7d a6 3f 6c 66 68 68 a8 2a 39 ee d7 2f d8 b0 fb 7d 62 1a ff b7 69 c8 ca 2a f1 68 fd 33 82 dd bf f1 6c 58 b6 61 fd Data Ascii: pH(X'r8PQHQ}!hZgN"Is3o'm,3Ob>5cA=C-[ P_?\|=44TF0Q~>w[R@`e;)j=#hH-!/H/oNTTa`&Q3kq}?lfhh9/}bih3lXa
2023-08-10 21:19:01 UTC	2741	IN	Data Raw: 63 a7 9d 8f 60 3e 84 35 06 b6 4b 65 d2 1e e4 93 b6 48 7a 60 7f 66 fe 86 07 65 fc e2 8d ef 54 8b 55 a9 ec 73 94 c4 cd 95 dc 3d 00 38 70 ac bf a8 1b 5a 1c 2a 72 c2 fc 51 eb 0e 49 83 71 8b 61 d5 c2 5a 88 af d5 66 af cc 8a 7a f8 13 bb 58 45 83 bf 57 1b 2a 0f b7 57 57 92 40 25 e6 bf a0 23 2e 92 25 9f fb df b5 63 23 ee cf 52 78 7b 78 6d 2b 73 37 fb 66 e6 2c 13 43 55 55 5c e9 2f 65 c9 c4 0e ec a9 3d b4 27 8d 55 65 84 e0 cd a8 c0 9b 91 ce 9b 1f 6c fb e3 ad 7c 12 bb 24 18 5d 92 1b eb eb 6b a1 95 f1 09 dd 38 5a f4 30 4d b3 5f 7a 23 59 3a b3 8b a8 d1 4d af a5 70 17 8a 67 02 cd 86 5a 3e ba bc d9 59 00 8d 03 da 5e 90 2f 2c f4 d9 03 ce f3 32 6e f9 6b cc 39 82 cb 5a 94 a8 35 16 e1 96 f7 e4 75 08 16 de a0 9e cf b3 51 ca 81 e4 28 d9 29 a9 18 96 3a 52 c8 d5 03 fe 64 74 66 Data Ascii: c`>5KeHz`feTUs=8pZrQIqaZfzXEWWW@%#.%c#Rx{xm+s7f,CUU\/e='Uel\|$]k8Z0M_z#Y:MpgZ>Y^/,2nk9Z5uQ():Rdtf
2023-08-10 21:19:01 UTC	2752	IN	Data Raw: d3 2b 67 1e 47 a6 4f 50 c9 ba 4f 98 8e ad ef cb b6 b6 f1 96 9c 26 13 e3 1e 54 75 c1 a1 f4 74 b0 77 32 38 bb dc 3f 7e 0f 3f 4f 7e 1d 9c c0 4f f2 fd fa f1 74 70 79 7c 72 f9 fb f1 c7 cb 4f c3 c3 c3 cb b7 83 cb 83 e1 c9 60 ff 47 9d 99 a2 77 cc 21 57 af 27 41 40 76 1c 5c 11 79 e8 7c bd 7f eb 8c 6e 3f 04 a3 5b 16 27 69 fa 37 ff 7d a4 4c 70 92 ef b7 f7 87 1e b5 24 42 9b c8 4a 14 0a 99 7f e1 3e 8f 45 85 17 32 4a 4b 82 67 39 ae cb 93 ce 02 d1 12 86 1b cf c0 a3 7e f3 1f 78 c5 13 06 78 ee cc 6b 1c 5f 0b eb 17 e1 2e ab bd 23 cd 5f c4 f9 bb c5 4f df 3b a4 76 d4 ce da 8a 0a 58 79 4c d6 2e e9 9b 79 08 a8 1e e3 5f 78 61 21 f4 a3 3c c1 8b 34 e8 7d 9e 36 a3 2f d4 02 46 3d 58 b8 25 f3 c7 12 2d b8 6d 84 30 49 30 87 30 f8 fc ab 25 7c 4e 9d ea db ce f5 6c 2d 6d e6 cf a7 2c 44 Data Ascii: +gGOPO&Tutw28?~?O~Otpy\|rO`Gw!W'A@v\y\|n?['i7}Lp$BJ>E2JKg9~xxk_.#_O;vXyL.y_xa!<4}6/F=X%-m0I00%\|Nl-m,D
2023-08-10 21:19:01 UTC	2764	IN	Data Raw: 08 68 a1 b6 26 80 03 0e e0 70 5d 00 ef 0b 00 9c e2 2a 57 20 ca 2f ab 2b b6 b9 8e ec 6e c9 ef 6d 33 4b b1 ec e0 88 ef e1 88 8b be e9 c5 78 b9 1c 49 ce f9 73 cf c7 86 ca d7 7b 7e 2d e1 cb 7d 90 e1 ca e7 53 de 04 79 5b 2f a5 08 39 35 b5 3e a1 a1 52 1a b6 9e 86 cb 5a 65 0f 34 25 20 28 f4 da db 4f bd ad 9d 17 cf 9b db cf bf a9 9b 92 3a be f5 d4 d3 50 c2 39 62 16 0b da 4d 55 82 5a bf af 7e 83 44 8e de 75 34 34 c7 7d ed b3 13 d3 f9 77 0d 2c 46 bd 50 61 d1 9c 9a a8 e6 2f 1f 14 ac c7 a7 d1 b2 b2 65 81 bd 08 b1 17 0a ec d5 1e d7 7e aa b0 47 89 a1 76 e6 98 4a da ab 9c 45 6c 4e 28 7e b5 75 29 65 0d d3 6a 68 2b 34 49 55 aa 1b 90 59 6f f0 22 cd a4 1f 14 e9 d0 f4 b6 46 d4 15 b5 6d b7 ac e5 da 84 fa f2 69 52 b3 eb 11 9f d1 20 b9 85 e5 9c 7c 56 43 10 52 c7 6b 11 b0 f0 77 Data Ascii: h&p]*W /+nm3KxIs{~-}Sy[/95>RZe4% (O:P9bMUZ~Du44}w,FPa/e~GvJElN(~u)ejh+4IUYo"FmiR \|VCRkw
2023-08-10 21:19:01 UTC	2822	IN	Data Raw: 93 ec 48 b8 42 21 73 24 8e 1a fc a8 7d aa 64 6c 3e 82 e6 4a 22 d5 4f ea 23 e7 6c 90 64 02 51 ae 7b a9 5c eb c1 b4 7f a1 97 0c c2 d1 2c 8c 35 f6 a8 33 b8 f6 c2 d9 c3 c3 ca 34 fb f1 f4 eb 23 49 18 28 74 2f be 26 a7 73 e5 56 5f 7b 5f b1 a1 40 de b1 d4 78 77 f3 50 fb fe 0e 91 bb d4 23 a5 cc b2 77 05 eb ca be 3f 55 bf dd 3c b8 7d 81 25 5f fc e4 ea 29 8b c5 2c c5 c0 c6 f3 7e 46 4e df c8 87 02 8f de 84 36 8a 58 79 5e 28 e6 54 0f 88 0d dc a0 fc e0 c0 8b 2e 17 b0 f0 61 2c 4f 0b 01 6e 31 1e 79 81 24 0a 4a ab 96 5b 1e 6e f7 4e 05 1e e3 20 02 56 15 ff 2b 4c 15 b4 b6 0a 81 34 29 31 12 42 11 c0 b3 cb 62 ce 26 a8 c5 30 48 57 61 16 55 fe d1 80 64 1a 30 25 af 58 17 2b 01 f2 ff 42 58 c6 87 c1 ed 6f 04 41 8b e3 70 4a b8 8e 78 cc ee 47 d3 2b a0 7c ee 41 35 10 b6 d9 8d 8c 7c Data Ascii: HB!s$}dl>J"O#ldQ{\,534#I(t/&sV_{_@xwP#w?U<}%_),~FN6Xy^(T.a,On1y$J[nN V+L4)1Bb&0HWaUd0%X+BXoApJxG+\|A5\|
2023-08-10 21:19:01 UTC	2828	IN	Data Raw: 05 e8 af 4d d9 42 ea e3 da 30 0d 2c 7f b5 f1 d6 5c 1b 05 31 aa d9 5f 1b d5 9a b2 97 34 94 b5 6b c4 c0 49 56 74 03 8b 11 15 a5 a5 9a 44 27 74 da 5c 7e 63 87 56 d5 b2 94 bc d9 c0 0a 0c f7 27 f5 a4 0e 45 b4 91 63 b6 79 f8 7c 59 a1 ec c7 b7 36 be b6 5c 6e 79 99 ad 19 c7 1f 55 d5 4d c3 0f 94 ae da c7 41 3c cc d5 16 08 62 e0 0c 6b 76 84 1b 58 c3 90 8d 3c 6e 15 c1 73 31 f9 cc 81 10 df 46 83 fb 62 fb 05 56 1f 71 32 d5 a3 ac dc a3 15 85 ad df 37 b9 51 15 77 a0 b2 56 15 c3 f4 3d 4a 3d 58 10 8a f8 78 a7 10 8b d1 2e cf 0c 33 0a 87 95 b7 df ab ce 39 b8 42 44 6c 24 62 3f 50 50 37 74 58 a1 06 7e 7a 39 63 8f 97 4e e3 db 68 d1 d8 4a b5 82 ca 1b f4 23 a4 58 59 3d 82 c6 70 1e f8 2e 43 0e 40 3a 9d 21 55 36 6a c9 52 cf f2 24 e2 2c 0b 1a 35 36 90 6b cc 5b bc c8 da f1 45 cd cc Data Ascii: MB0,\1_4kIVtD't\~cV'Ecy\|Y6\nyUMA<bkvX<ns1FbVq27QwV=J=Xx.39BDl$b?PP7tX~z9cNhJ#XY=p.C@:!U6jR$,56k[E
2023-08-10 21:19:01 UTC	2831	IN	Data Raw: 34 38 3c 1d 1e 1d 9e 92 7f bc 12 65 94 87 5b 8c ac df 2a 8e b8 5d 19 4a 32 89 d4 36 7a 5f 02 22 6e 4c b5 87 27 4c a4 76 be 7c 8e 58 fc 99 f1 63 32 99 56 aa 47 e8 7b 32 b0 ed 66 88 45 e8 84 9c 4b c0 7c f5 42 d8 b3 08 5c cd c2 fe 12 3c 09 7d c2 60 d3 5f e9 d2 92 c1 3c 85 01 32 e4 f3 18 c9 44 da 2c 7b ca d5 45 8b 5f 85 a1 a7 76 0e 16 16 d2 6f 95 dd d3 c1 52 7b b1 86 b1 a4 95 d9 47 9f 7d a8 c6 98 a1 f1 47 cc 0d 81 75 77 f6 82 71 8c e8 c1 3c 84 ac 88 5a 4d a1 6c 7f 99 56 10 ff a4 ee 9a 6f 47 1d d2 78 74 d3 1e be a5 df 37 d4 77 c1 5f b6 8f 2f f0 64 c0 8a 30 18 85 48 7f 73 c7 5e e6 08 4d fa bc d5 f2 0e 3f 9f d1 69 fe 36 ca 1e 0b 14 56 54 8e 89 e6 b2 8a 76 8e d2 f8 5b 70 ce 8a b2 76 0b 84 18 24 4f f6 3a 14 a6 72 b9 1d c6 a4 ef 09 f1 cb 3a ce b6 16 0f c8 04 cc 27 Data Ascii: 48<e[*]J26z_"nL'Lv\|Xc2VG{2fEK\|B\<}`_<2D,{E_voR{G}Guwq<ZMlVoGxt7w_/d0Hs^M?i6VTv[pv$O:r:'
2023-08-10 21:19:01 UTC	2847	IN	Data Raw: a9 b5 c5 64 34 5f f3 40 ac 3c 4e 69 aa 19 43 83 71 cd c8 b9 25 5e 86 3b 75 b0 3e 7f 6a 2b 94 ef 3f b3 75 98 65 86 5a fc ab 67 f3 d4 91 55 53 3b be ef d9 0a 35 fa 9e fe 06 1d 75 de 53 30 6c 39 fd e2 f3 73 c1 11 9f 7a 6f cc 38 22 8c b3 e3 a3 5b d9 96 7c 4b 0c 3a f8 f2 f4 01 ae 70 78 ca d3 60 8e d8 12 0d 6a 77 ed 1e 9c c0 b7 b8 1d 42 fa 40 3a be 46 8d 05 d7 58 50 8d e8 e1 1a 38 b2 b4 13 cd 1c d7 4f 17 bb dd 3e be df c8 5f f7 f7 bd e2 d9 a0 f4 fd 4b a6 f3 3d f6 b7 a1 9e 79 cf 2f 30 02 a9 cf ea 14 06 9c a5 61 82 b2 ef 3f f2 98 a7 c0 60 cd 6e 2d b4 01 4e 6b 0a 7e 32 75 7b 6b 59 50 ae 80 52 d3 dd f5 65 54 b2 0d c3 ea eb 7d 74 2d 43 a9 fc e7 c9 8f 3d ad 6f 84 0f b4 6a e7 d6 d0 a9 4a 82 ca d6 d2 8c 6d 07 d6 4d e9 f7 53 23 f8 d4 05 28 f1 51 5c 5d fb e9 99 96 f2 36 Data Ascii: d4_@<NiCq%^;u>j+?ueZgUS;5uS0l9szo8"[\|K:px`jwB@:FXP8O>_K=y/0a?`n-Nk~2u{kYPReT}t-C=ojJmMS#(Q\]6
2023-08-10 21:19:01 UTC	2848	IN	Data Raw: 54 6e 51 8a 29 e3 14 ac 00 b0 02 e6 6b e1 8f 27 e9 76 35 83 06 d4 2a 5d af b1 17 e4 51 1a 61 a3 04 41 b9 55 3c 46 8a 91 ae cd fd a9 33 16 ea 7b 78 79 f3 19 56 75 45 41 80 ca e5 84 86 c7 a5 b7 d3 81 c8 15 f6 04 9a ec 32 e2 df cd 94 dc 70 d6 07 b8 fd 20 1e 19 08 55 8e 4b f9 d2 4f fb 86 1b dd 88 38 f3 a8 7e 57 c4 46 96 62 14 d3 6c f2 ca c0 d9 7e c9 74 a4 7a 2c 6a c0 2d 2d 81 d9 c8 c9 32 19 b1 25 e5 15 e5 fe 5b 99 cd 6d df 90 2b d2 f6 32 a0 b7 5d 45 02 da 54 0f 48 cc 43 ed e7 13 b2 d7 6d 9a aa ac 68 7a ed 31 52 43 59 73 ba 84 44 1e c1 96 55 48 65 8f 12 56 e5 de 5f 43 02 8d c2 05 bd 70 dc d4 11 cc e4 7b d0 e2 7a 31 eb 63 e9 bd a4 c7 52 d6 a7 cf 7a 2c 66 ed b2 f3 92 9d 1d 64 48 20 bd 87 02 fe 7f 62 40 0a 57 08 26 bc 78 46 47 a1 74 bb fb a6 e4 65 31 d4 4e 77 e9 Data Ascii: TnQ)k'v5*]QaAU<F3{xyVuEA2p UKO8~WFbl~tz,j--2%[m+2]ETHCmhz1RCYsDUHeV_Cp{z1cRz,fdH b@W&xFGte1Nw
2023-08-10 21:19:01 UTC	2854	IN	Data Raw: 41 27 57 b6 f4 cf 77 2e 48 e3 3b 82 f3 74 80 96 2a e7 c6 24 62 2b 50 54 c9 c6 0f d2 c0 be c8 36 67 8c bc 40 f4 a8 f0 30 a2 c8 68 8a a7 32 d3 52 d1 ee 11 35 4d 1f 0d 17 9a ef 45 07 56 55 7a 62 8d ad 3b 74 86 2a d9 d3 3e 34 69 fc 02 73 67 8f 07 94 c3 b6 91 9c d5 de 80 49 68 79 68 fe ea 91 32 39 e6 9e df 5e 14 ab 62 b6 cc da 28 65 d1 fc fa 21 cf 02 19 56 ab 90 4b 9a e8 59 6e 35 9b 15 d2 f3 02 e5 12 44 fb a8 67 5e 4b 2d 4b 9a 8d f7 5b 11 02 45 cb 90 f4 0e 6b 61 a8 01 60 04 94 0a 92 09 77 f6 ce 86 a1 50 09 5d 60 ac 94 50 df 2c ff 13 66 72 cf 59 94 5d 8c 0f b4 83 ac 80 89 5c 03 f1 a3 80 4e c1 4b 07 e3 ad 2d 2c 62 95 82 0e 50 0f 40 ce 54 78 07 e8 57 ca c5 14 e0 92 82 ce a5 87 5e e5 31 e4 01 0f e9 ad 48 12 54 d0 b0 cc bb bf 9c 70 ee c4 8b fe 9d ef f5 8d ee ce 97 Data Ascii: A'Ww.H;t$b+PT6g@0h2R5MEVUzb;t>4isgIhyh29^b(e!VKYn5Dg^K-K[Eka`wP]`P,frY]\NK-,bP@TxW^1HTp
2023-08-10 21:19:01 UTC	2865	IN	Data Raw: 3c 0f 16 17 b2 da 40 5e f9 ad 33 03 0a 9e c0 15 6c e3 e7 0c 27 60 d8 e8 e8 25 de d8 fe 05 68 38 b0 70 00 19 81 ae 0a 10 4b 30 00 89 91 3d 9e 9b 6b 0d 91 5f 73 b4 fb 32 e3 0d 89 dd bf ee 24 53 12 5d 79 5d e4 4d 58 6b e3 54 e9 0d 75 6b f9 1b d3 55 99 99 dd 69 31 3f fb b1 1c ac 21 12 b0 a5 8f 77 6d 41 33 47 03 a8 22 01 87 19 ec 21 84 c7 be 6a d7 32 2b e3 22 4d 15 8c 5a 09 b0 6b 63 52 1b 05 41 8c ab ed cc 23 5c dd 88 6d d3 24 ff 31 f8 8c b9 b9 19 c2 39 93 dd 68 dc f2 0d de f3 6f 0c ba 16 b1 38 c9 d4 ee f2 81 dd 8a 72 c2 da 2f c7 06 c1 44 5b 1e 28 7a 26 25 d8 d9 31 a1 67 c9 24 5b 9e 00 7a 16 25 d8 06 3a 41 e5 c9 22 80 8d 3e 49 9b 01 66 08 2c 54 7f a9 85 53 8b ab 21 78 34 68 29 97 2f 12 54 9c e8 7b 46 bf d2 82 ed 21 6f 11 c3 a4 82 c5 a9 48 09 df 71 d1 fa 77 97 Data Ascii: <@^3l'`%h8pK0=k_s2$S]y]MXkTukUi1?!wmA3G"!j2+"MZkcRA#\m$19ho8r/D[(z&%1g$[z%:A">If,TS!x4h)/T{F!oHqw
2023-08-10 21:19:01 UTC	2878	IN	Data Raw: 4e 31 22 70 e8 c6 b0 f4 66 f9 20 2c 60 52 c5 e5 34 47 a5 9d e6 fb c3 d3 ce 9b c3 1f 2f 77 3a bb 5b 67 fb a7 97 db 87 fb 87 c7 97 27 ef 0e 8f 4f 2f df 6f 1d 74 4a d8 c5 6c 74 04 72 e5 0d b0 8a e4 5b 47 67 a4 73 be 7a a1 da 88 cf 2a 10 00 a1 f0 26 fa 24 50 a0 d6 8b 82 28 6e c5 0a 2a a0 27 39 84 19 e1 81 78 ab cb 2b 22 26 c4 1c 0b 16 32 23 d4 4f 61 9e b1 e2 e2 8d cc e6 9a c2 e1 88 eb 30 e4 22 ee e1 dc ea 99 ad 4e b1 69 5c 95 93 dc 68 d8 5a 90 21 f3 07 c3 00 43 a5 de 8b a2 ce c4 f5 51 27 cd 91 94 3e bb 38 48 63 8b e5 b0 bf 98 f4 35 71 b5 1a 55 2b 10 85 46 91 63 4a 01 3f d8 2c 80 e3 22 7f 32 3d a5 86 45 1d ce 59 18 2a a8 5b 19 0e 9b af 0c f1 81 13 bb 5e f8 58 43 8e 7c 37 c3 54 3b c8 f4 93 76 ef 2d 35 4a 26 73 0f 38 7e e3 c5 ac 99 54 c3 44 3e 7c 15 54 62 52 8b Data Ascii: N1"pf ,`R4G/w:[g'O/otJltr[Ggsz&$P(n'9x+"&2#Oa0"Ni\hZ!CQ'>8Hc5qU+FcJ?,"2=EY*[^XC\|7T;v-5J&s8~TD>\|TbR
2023-08-10 21:19:01 UTC	2882	IN	Data Raw: e6 1e 09 00 37 91 39 99 20 4b 0f d4 21 66 76 13 f5 d1 24 49 eb 1e 30 a4 90 dc f5 88 7d ae d3 ad 40 34 6e 93 f9 8c b1 2c 7a a0 f7 55 62 3d c4 f6 67 97 06 93 49 f6 32 e4 bc cd ac 09 23 b8 99 30 d2 e1 d9 f9 de 41 95 4a 4d 6c 0c 14 a5 cb bb 08 89 0c 5e 2f 61 65 79 27 70 69 3d 12 6d 1f f6 37 b5 a9 04 9d 16 2e 29 0d e3 f2 b2 9d b2 b7 38 ca 6d 41 0f cf 27 a6 27 6b ff 53 4b 0f c2 6d 27 44 88 20 ea 01 98 88 65 aa 3b 89 04 31 03 7b 64 d6 5c fc c1 9a da 17 45 05 93 da 3e f6 fa c0 c6 41 a7 bc 03 ac 8b 76 4b e1 7f 9c c2 92 78 b8 15 88 47 f1 13 b8 96 35 ea 09 2e a1 69 29 25 70 30 f8 bc 25 0b 12 05 27 8c 11 31 69 8f 8c 1c 3a 94 01 9c 4f f9 80 81 b4 64 80 bb bb e3 00 1e a8 00 4e 29 ec b9 30 58 c3 28 6d 37 9c 04 33 6b 03 d2 ce 38 d3 bd 90 62 14 b4 cb 49 cd 2e 46 4d 09 c9 Data Ascii: 79 K!fv$I0}@4n,zUb=gI2#0AJMl^/aey'pi=m7.)8mA''kSKm'D e;1{d\E>AvKxG5.i)%p0%'1i:OdN)0X(m73k8bI.FM
2023-08-10 21:19:01 UTC	2895	IN	Data Raw: e9 41 d6 b5 21 73 7b 51 7d 5e 8c 39 26 4a e7 76 07 78 d4 16 db 52 35 b1 b8 bb 0b 2b 98 dc 8a 81 05 b9 20 b7 06 b8 29 ad f1 12 1a 7b d6 ea b7 fb fd cf 0f f7 f6 7b 07 f5 46 7e d6 1f dc de 0d 80 af f6 fb 0f 1f d5 08 09 1a 6b e1 27 cd 32 6b 26 44 98 22 d9 54 76 c0 1b 1e db 5d 24 39 8c 9e 45 8a ae 85 82 78 8c cf a2 81 4c d3 66 e0 b0 35 93 b7 31 5d 6d fe 87 6e 5c 3c a7 c8 64 40 00 2d f8 03 b3 ab 48 44 46 88 23 9d 21 4f c2 3c 94 48 d9 33 70 41 26 e9 cf c4 52 01 04 15 5f 7d d6 08 1c 22 5b 68 58 16 10 3d f8 a5 87 ad 59 0b 48 65 1d a5 a6 36 82 3f 1a 4d 4d 70 c4 a4 a9 21 be ae 28 33 2b e3 ea 17 80 a2 19 f6 9f 0a 38 eb 20 ab a0 c7 2e d6 22 a4 0b 10 46 a3 2f 2a 1f bb 2c 2c 51 77 54 45 db d0 64 44 c0 81 90 00 4a d7 3a 6f 14 23 ff 39 11 42 f9 da e9 7e 0b a6 28 68 4b 4d Data Ascii: A!s{Q}^9&JvxR5+ ){{F~k'2k&D"Tv]$9ExLf51]mn\<d@-HDF#!O<H3pA&R_}"[hX=YHe6?MMp!(3+8 ."F/*,,QwTEdDJ:o#9B~(hKM
2023-08-10 21:19:01 UTC	2964	IN	Data Raw: d6 8c 9b e3 e6 aa 99 36 17 cd 49 d3 6f ce 9b 89 93 ed cd a0 c7 c6 c6 b9 76 d7 a4 69 e7 cd e5 00 d1 3d bb d3 e6 84 c7 15 ca 4d 06 cd 12 f7 61 3c ff ad 36 20 fb e7 94 4c 8c 8d d7 28 c9 b1 95 e2 10 0c 2b 30 9e ab ef 21 3b 0a ce 45 04 6a a2 60 55 c8 24 14 28 76 43 a8 27 48 ae 95 66 80 af 61 d8 10 c4 c2 2c fa 1c 4f 4b 38 91 c6 36 91 dd 44 0a 38 56 85 d1 9e 11 c0 10 64 c0 17 46 2b 84 38 95 ad 47 36 5b ef 26 0c e6 13 bb 99 1b 2e c6 54 f6 66 81 55 9e b1 65 33 78 25 d9 2b 42 a6 06 02 48 05 b8 84 73 45 cb a4 66 01 7c c4 98 0c f6 24 4d 08 d3 88 c4 91 90 93 5b 58 2b 54 8f 93 3a d4 4c 68 e2 dd 08 0e 1f c5 1e b4 e1 a6 53 19 60 c7 76 89 96 0b f9 fe 2f ab 30 51 cc 2a b6 bc 0c ec 7d 2b ec bd 42 93 0b 82 a1 a6 23 2e 04 47 8d 2b f2 4c d6 a3 ac ca 87 c3 c1 99 ac 3a 77 b1 87 Data Ascii: 6Iovi=Ma<6 L(+0!;Ej`U$(vC'Hfa,OK86D8VdF+8G6[&.TfUe3x%+BHsEf\|$M[X+T:LhS`v/0Q*}+B#.G+L:w
2023-08-10 21:19:01 UTC	2970	IN	Data Raw: 62 85 e5 25 fd 83 35 27 a0 0e fe 87 e0 40 fc f0 35 53 71 68 8d 4e 09 5e ff 55 67 a7 2a 85 ab 97 94 07 1a 6b 16 e0 90 2e bc f8 e6 79 af ff 59 30 bc bd c1 bf ec f9 74 50 88 10 37 dc 9f aa 23 ef 7e 5a d2 24 b8 2d 5b 63 82 c5 8a a9 a6 09 bc 46 a7 93 99 71 ce 3f 11 3d 2f d1 28 13 83 4f 8f 34 38 d0 c6 8d 2e 7b ae ac ef 2f 26 e0 89 53 b6 27 9c d2 d5 14 fc f3 91 9f ea 9a 90 dd c2 64 49 6a 49 37 e1 1e c2 16 78 57 e1 7c 32 f6 13 fa 06 9d 73 f6 cb fa e5 59 f7 00 6b c3 9d 9e 07 b2 24 e2 04 de b3 e0 db e8 32 4e dc 0c 0d 61 aa 41 3b 10 42 61 ca d8 09 70 08 ec 74 b6 22 f2 a6 fa bd 81 2a 7c 89 53 76 d6 d9 ef 0d 7a dd c2 65 74 c5 00 c1 96 25 39 66 4b 1a 39 8c c3 7f 0b 81 64 ff e0 e7 9f de 9f fc 57 c7 1a 7e 6f 31 5a d7 12 e0 e3 76 da 67 82 95 5f 91 5a b1 ec ea a0 70 55 f9 Data Ascii: b%5'@5SqhN^Ugk.yY0tP7#~Z$-[cFq?=/(O48.{/&S'dIjI7xW\|2sYk$2NaA;Bapt"\|Svzet%9fK9dW~o1Zvg_ZpU
2023-08-10 21:19:01 UTC	2981	IN	Data Raw: 00 89 a1 a7 b1 9e 6f 3c a5 8a 3d 4b d4 9a b3 3c 1b 06 57 ce c8 c5 ca 10 18 0d 83 ec a0 2b 90 ff 99 f3 7a 60 ce a9 47 6d 08 1c c0 b0 c7 d9 a8 45 5c 05 82 05 c8 84 92 91 32 ce b4 83 48 fd 4e ca 7e a0 27 7b 19 24 c6 9c c6 9a d6 c8 84 52 50 05 57 bf 82 0f 51 77 1a 07 c6 5c cb ce 01 20 ae e0 3c 15 d1 28 31 17 ae 27 23 4f c0 a9 67 40 2a 4e 85 6e a2 5c 71 1d e1 0c e1 05 d9 8f 72 61 65 e7 48 aa bc 42 52 ff 17 77 6f b2 dc 38 92 b5 0b ee f9 14 14 b2 4a 09 54 80 d4 10 8a 89 4a a6 52 a1 21 43 55 9a 4a 43 46 56 29 f5 cb 20 c2 49 a2 44 02 fc 01 30 14 4c 89 66 b5 ea 55 6f da 7a d3 d7 ec de 4d 2f fa 19 7a df bb 7e 8c 7a 92 3e 83 3b e0 98 28 8a 8a fa ad ed d6 10 22 1c 0e 9f fd f8 39 c7 cf f9 0e 5e 4c 72 5e 3e 00 e0 47 02 a8 44 19 40 24 87 7f 59 f8 83 1f 64 a7 04 7f 25 c7 Data Ascii: o<=K<W+z`GmE\2HN~'{$RPWQw\ <(1'#Og@*Nn\qraeHBRwo8JTJR!CUJCFV) ID0LfUozM/z~z>;("9^Lr^>GD@$Yd%
2023-08-10 21:19:01 UTC	2997	IN	Data Raw: 5a 93 4a c3 0e 68 cd 93 c7 fe d4 6a e5 2b 77 9a cc d8 b2 e6 55 b6 40 ad e1 96 6f b3 ad b6 ab ab 6d 65 ac c8 34 fd f1 f1 ea 9a 42 04 63 52 d6 7d 9d d3 30 17 64 b8 f4 dd 20 fb 1a 53 28 0b 6c 1f 6e 60 89 b4 a9 46 47 d9 97 57 ba 94 f7 d9 b9 46 32 0d bb 9c 1e 84 76 12 f3 91 e3 f9 8d aa 3d cd 6f bf a9 18 45 51 8c 1e 0a 2c 4a ab 94 45 51 d1 e4 09 54 19 c6 2c ec 0e 82 fb cd 58 f2 1e 29 fc 45 8c 26 c9 42 0c 8c 2c 83 86 4e 81 ea 56 7e 37 38 65 04 8a 73 0a b8 43 c1 a6 18 c3 a3 ea 2d 9c 94 0f 35 d3 87 5e 0e 62 e7 6f 08 2b 8e ea 42 b2 6d c4 a3 80 32 5e 04 23 8b 00 8f 54 b6 1f 57 c9 be b8 98 05 ef f4 39 d6 0f 23 c9 37 30 7e 0d da 42 ca c7 35 c4 a2 2b a0 64 4c 15 e0 8e 9a 8c 12 f3 ac 45 9c 88 51 7b 3c 46 1e 44 20 db b6 dd 0b b6 15 24 02 34 33 fb 66 b6 b1 d0 da c6 9a 92 Data Ascii: ZJhj+wU@ome4BcR}0d S(ln`FGWF2v=oEQ,JEQT,X)E&B,NV~78esC-5^bo+Bm2^#TW9#70~B5+dLEQ{<FD $43f
2023-08-10 21:19:01 UTC	2998	IN	Data Raw: 65 c5 a2 4a 81 3b c8 0a d6 83 ac ff 7d 4e b6 ea d7 66 0b 63 65 3e 30 4f 70 5e de b3 38 af a8 9c f3 8a b4 1d dc 33 15 6f c5 ac 55 34 9b b5 e2 ec 92 79 c2 2f 3c 6e fa e0 65 bc d3 20 7f ca 52 3d 29 73 94 e3 8d d4 5b 79 4e aa 63 b2 96 7b ad 4e c2 dc 41 a8 5e a7 47 5d 8e 7d 49 be 57 47 59 ee 24 53 ef e5 59 95 3b aa 92 a6 ab c3 68 36 83 31 28 b0 8d 58 80 c6 43 94 f4 5d e3 11 72 2c 82 7a 3b a3 eb d9 53 be a4 eb 99 53 bc a4 eb da 31 9d e7 bd 92 a6 27 7d 9f ce 3c 86 51 a5 8c 37 e0 4d b5 3f 78 31 9b 65 76 c9 f6 43 9e aa cc a0 40 53 0b b7 3f 16 55 42 ba e6 39 61 b1 27 e9 19 fa d4 09 ea c2 01 e3 e2 09 ea 3e 79 82 ba 76 a1 9e f4 8c 44 a2 ee 4e 4b aa cb 1e 8c f8 51 72 f4 d5 66 1e 7d b2 65 6f d2 96 65 8a 75 f3 c5 6a 87 9b 6a 0c 17 b3 86 c5 c0 89 96 2f 47 9e 68 c5 82 b4 Data Ascii: eJ;}Nfce>0Op^83oU4y/<ne R=)s[yNc{NA^G]}IWGY$SY;h61(XC]r,z;SS1'}<Q7M?x1evC@S?UB9a'>yvDNKQrf}eoeujj/Gh
2023-08-10 21:19:01 UTC	3014	IN	Data Raw: dc 7a 8e a9 cd 83 57 67 d1 8f 30 64 20 2d a4 68 c6 d4 ce 78 1b f5 a4 11 1e 61 d0 ae 8b 76 d0 c8 ff 56 36 b5 44 27 77 38 32 f4 f6 f5 b0 6e 8f ae 7e 74 fe 87 14 fa 30 db ef 2d b5 83 9c c0 f2 13 fb c6 3a 70 97 25 bf 1f 34 8e d9 f1 e8 fc a0 5d 39 8e 0e 1f 08 12 3b 3c 61 f3 7b 8c 0c 20 fb 24 9e b8 21 f0 3a e8 b3 1a 56 17 ff 0f 53 d2 7f a2 07 8d 7a f8 f4 e8 ea 67 93 07 8d 3a e9 94 d5 79 b7 ec 83 5f 2f fc 87 3b 7d 8b ff d0 20 96 a5 45 30 a7 7e fb 03 fe 23 2a 29 f3 09 cb 52 00 d1 fc 0c 37 a3 5f 6d 85 df 3c 04 2c ef 87 c3 7c db c7 fe b3 d7 ce b3 62 db e5 a0 57 18 fa 6a 60 cb 77 66 47 7f 38 fa f9 cf aa 3a bb 1f be be 1c 40 a9 23 ab e1 d0 1a e3 bd 5f 7d 13 3d 64 68 7f 4f 40 54 0a 35 7b 32 1b 83 13 ed 0a 3c cd d7 3a 1a 79 67 c7 c7 9f 8e cb d4 65 5d d1 fc e1 c9 e2 72 Data Ascii: zWg0d -hxavV6D'w82n~t0-:p%4]9;<a{ $!:VSzg:y_/;} E0~#*)R7_m<,\|bWj`wfG8:@#_}=dhO@T5{2<:yge]r
2023-08-10 21:19:01 UTC	3015	IN	Data Raw: 6d 2f 1d df 27 4a 03 12 c0 61 9f 01 34 f7 41 c2 aa 01 7e 09 a1 00 5f e8 df 03 ca 51 29 f2 ef 09 57 e5 58 86 95 c1 5b 29 62 f9 1c c8 a9 c0 2a 9f 86 49 3e 07 20 56 62 91 ff 08 30 c7 df 2f b6 58 89 21 32 db fc 7d ce df e7 63 88 fb b0 c2 a7 0d aa f6 fb c7 0a 99 01 67 88 c2 55 11 16 1f 46 0e 56 6e c1 42 89 04 a3 56 30 5d 06 2c 90 aa 35 02 9f 0c 1d 4c c3 6a a8 ea 36 94 52 12 31 48 c4 79 21 ca 4b be 14 48 ca 56 af 0c 34 43 c5 cb f9 ab 52 32 8d 75 da 6d b6 c9 b2 fe 31 b2 8c 02 8f 85 e5 67 b5 53 44 d3 c7 ca 94 b5 64 8d 7c 8c d6 98 d5 10 51 de 28 06 4b f6 fd f5 43 78 44 52 f4 9f 7a 6d df 00 4e 0b 2e 3d 1e 57 24 9f 45 4c 15 6e a8 3d 2e c4 41 c9 3c c8 d4 14 ed 07 e3 76 e9 b6 90 89 f3 fc 85 8b 5c 87 ff 8d 3b e0 2f 42 da 50 24 73 e6 c4 6f 5e bb 03 0c 08 35 f7 62 8c 41 Data Ascii: m/'Ja4A~_Q)WX[)b*I> Vb0/X!2}cgUFVnBV0],5Lj6R1Hy!KHV4CR2um1gSDd\|Q(KCxDRzmN.=W$ELn=.A<v\;/BP$so^5bA
2023-08-10 21:19:01 UTC	3031	IN	Data Raw: 9f 3f ba 34 0c f6 d1 3a 6b ec 3d 82 df ec ad b5 e2 66 44 4d ea b7 8f ac 8a 3b 95 3b dd 61 fb d6 c7 8d cd e6 5b ee c1 ef 9d 64 65 61 62 70 3b 27 ef c1 16 4e 00 79 e2 5d 60 85 77 5f ec 75 77 81 07 4e 0a 8f 45 61 1e a4 f7 de 62 49 c2 42 24 dc 57 63 99 24 4c 45 0d ee 3f 50 55 0b 7e 97 ba 4a d9 57 f4 97 ca c8 91 19 46 8b 85 7b f6 38 4b 8c 44 06 c5 57 e9 e1 6b 04 0a da e1 32 60 e9 3d c0 00 a1 b3 14 97 33 42 17 2c c5 14 8c 4e 3a 4b 0f 39 4b b1 36 4b 31 29 4b f0 31 4b 30 24 93 d0 4b c1 bc 95 3b 8f 65 6e 3a 96 bb 24 99 72 b3 b1 cc 7d c6 72 57 21 d3 ee 28 8d ff 8b 0a 95 f4 e3 27 f2 c7 34 49 0a 93 5f d3 24 37 4c cb 71 8c c1 52 e4 c1 b2 58 80 65 8f 33 05 05 d7 5e 40 f2 4b 5e d2 f6 c7 53 51 4a fe dc a0 cf 01 ac 69 34 b5 23 ae 83 37 e5 dd 8d 71 97 2e ad 5e 9b 61 64 bf Data Ascii: ?4:k=fDM;;a[deabp;'Ny]`w_uwNEabIB$Wc$LE?PU~JWF{8KDWk2`=3B,N:K9K6K1)K1K0$K;en:$r}rW!('4I_$7LqRXe3^@K^SQJi4#7q.^ad
2023-08-10 21:19:01 UTC	3032	IN	Data Raw: bc b8 3f da 0b da 09 32 3f 53 81 50 78 88 bf 75 1b d6 57 75 6e 36 a7 7d 55 eb c2 67 d8 72 a3 a1 3d 77 f5 dc 7e 19 98 f9 95 f6 d5 92 1f 5e 4d 2b 59 57 be 7f 0a 08 67 17 53 f7 09 c2 b1 8f c9 cd 7c e2 fa 36 2e 9c d1 80 3b a9 a1 6c 9a df 6f 68 5d 00 1e 94 50 d2 f8 f8 a1 d3 be 6a 24 63 8b 8d 06 0c 45 5d df b2 bd 85 49 7f d6 f6 a2 ed 2a 74 0c d8 a5 e1 35 be 82 8e 33 eb 92 df 67 34 fb 10 4b 83 95 5e fe bf d4 bd 69 97 1c c7 71 28 fa bd 7f c5 a0 6d 81 dd 46 4d 4f 55 77 57 57 55 0f 9b 30 56 62 28 80 00 b1 70 d1 70 2e 5c d3 5d 33 53 44 77 55 a3 aa 1a c0 00 68 1f 5a 0b 49 90 b2 16 5b a2 16 5b a2 e4 55 bb 6c 5d 6b b1 2c db e7 88 f7 c3 3b e7 bd 73 45 fd 05 fe 00 ff 86 17 91 5b 65 56 66 cd 0c 20 de 7b 75 65 13 93 1d 91 19 19 99 19 19 11 99 19 99 d5 6c 54 de f8 30 8e 3a Data Ascii: ?2?SPxuWun6}Ugr=w~^M+YWgS\|6.;loh]Pj$cE]I*t53g4K^iq(mFMOUwWWU0Vb(pp.\]3SDwUhZI[[Ul]k,;sE[eVf {uelT0:
2023-08-10 21:19:01 UTC	3048	IN	Data Raw: 71 fa 4c d2 52 ce 25 83 14 5a ec 75 25 ad 74 a6 c2 77 2a af 35 55 0c 93 78 b6 49 36 7a 9f 65 b1 04 f4 61 26 d1 0c b4 32 9f a5 9b 24 ec cd 26 a5 10 55 7d f4 09 27 d9 30 7d 96 6d 18 28 88 5b 08 62 52 cd df 54 52 04 0e cd dc 43 1d c4 5e 5c 52 e0 d4 a4 3c 34 01 5f 54 cc 36 51 51 5f 64 ce a8 21 7e 90 a2 6e 18 50 6f f0 2d 36 fe 1e 93 52 8e 22 cf 1a 91 6f 7c 99 d5 57 53 f6 cb ac ce 2a 3a b5 f6 b0 19 5f 60 2a 81 bc 29 c2 1a 42 51 ef fc 19 9f 02 a5 1f c4 30 af 73 8c ec 3a 51 dc 77 3e cd 71 72 34 33 2b f7 49 8e 2b 9d 3d 86 f9 94 c0 2c 54 cc 5b df 67 c6 b8 a8 01 a7 95 fc 74 11 49 de 76 51 9a f3 d6 0f 19 42 23 45 f7 6a 69 07 c8 70 76 c9 62 31 53 1b 28 1a a1 a8 31 86 14 7d 96 6a ad ff 8e e8 35 49 61 b2 aa 68 94 4c 5a 65 ed 3b 6f f0 22 2c a2 bb a1 77 81 78 c7 85 cf e9 Data Ascii: qLR%Zu%tw5UxI6zea&2$&U}'0}m([bRTRC^\R<4_T6QQ_d!~nPo-6R"o\|WS:_`*)BQ0s:Qw>qr43+I+=,T[gtIvQB#Ejipvb1S(1}j5IahLZe;o",wx
2023-08-10 21:19:01 UTC	3049	IN	Data Raw: d4 16 2c 2e ac 59 7b 89 cf 62 e0 bb e0 3b 71 12 4d 9a c7 f8 4d 6a 7e e7 9d 5e c7 9e d7 bc c8 d0 c2 7b be 64 89 43 6f f9 9e 49 93 02 23 43 e3 64 65 7e 52 ed d2 a8 23 65 18 15 8d e5 b0 8a 27 57 8d f1 d2 fb a8 58 96 ec ef 21 fb 78 13 ba 09 53 45 16 5a f6 de d5 10 0c 45 b4 33 2d 86 b9 45 6f d6 0f 77 ad bd fd f9 5e 94 00 9b c3 89 c5 e4 68 18 5a 79 54 5c 2f 59 18 c6 16 39 57 23 d7 d1 f7 a8 a8 e3 3f d6 a6 b3 d5 6e 39 30 52 e6 ff 69 33 81 3d 9b 40 7b 90 3f 96 d0 2a ac e6 cd 9b 51 7e 29 9d d0 57 d5 e9 83 48 c7 ec 65 7b 9d e4 c5 c7 5b 46 0f 76 a3 e2 dc 3d 28 80 0f 8e 17 f9 50 7f 2e 20 69 39 8e e3 b6 3b 6a 46 90 23 60 d8 52 3b f0 71 f9 68 00 23 7b fb 93 2c 44 12 2f 85 59 02 da f1 da 62 ce 6f bc 5f 8b 8a 02 20 23 3a 07 8e 96 f7 41 ce 60 17 2a 79 b1 c2 8f 84 61 fa 96 Data Ascii: ,.Y{b;qMMj~^{dCoI#Cde~R#e'WX!xSEZE3-Eow^hZyT\/Y9W#?n90Ri3=@{?Q~)WHe{[Fv=(P. i9;jF#`R;qh#{,D/Ybo_ #:A`ya
2023-08-10 21:19:01 UTC	3065	IN	Data Raw: 07 68 28 a5 47 51 90 c3 5e 77 de 44 fd 69 72 1c 02 89 25 3e 76 9d 18 70 69 8b df ed fb 94 49 dd da 47 cd 93 69 ec 1b b7 f7 fe e3 e8 e7 9d f7 ce ce af 8e 8f 0e 7f ba ea 8f 7c 97 fd d9 22 2e bc 3b 80 6a 27 33 3c 83 bf 83 59 8d 67 64 7a 7f 0a 83 7f 18 8c 03 f4 36 7d 1c 52 d0 eb 51 d4 bf f5 bd d7 b3 2c ce 8f 09 73 00 95 b8 32 ef 50 ba 06 1e cb 12 2f e4 eb ab d0 68 7d 46 8a e8 16 4c 46 da 90 b6 ed 5e 23 4d 50 4e 6f a0 10 0d 07 02 ae ba c1 0e 62 2c e2 67 a4 b2 b5 bf fb 53 a7 5c 69 c1 e6 b9 8f b6 4b 77 c4 f0 2e a4 76 50 ac f4 88 bd 24 5c 76 c9 e1 6e 18 7d ac 03 51 bb 6c 3d 2f 86 04 5f b6 84 32 5d e2 04 4c c2 15 43 50 b4 b7 a6 ca 33 63 6b 6c 84 78 bc 5f d4 14 b9 81 ac e3 cb da e6 e8 db bc 65 73 d5 f7 24 ee 8f f7 f7 f5 a0 5b 68 6d ae fa 87 1b ec 1d 10 9d ea a2 50 Data Ascii: h(GQ^wDir%>vpiIGi\|".;j'3<Ygdz6}RQ,s2P/h}FLF^#MPNob,gS\iKw.vP$\vn}Ql=/_2]LCP3cklx_es$[hmP
2023-08-10 21:19:01 UTC	3066	IN	Data Raw: 24 b0 20 d5 6a 4d 69 12 21 48 fa 85 bd 8f d6 e0 15 6f 5e 0b e8 b9 44 64 0b 09 fc 4b 49 fa 57 a0 e0 2f 23 e0 da 6f 84 82 bf 80 80 09 e6 e9 8b c9 07 76 39 85 78 80 0f ff 3a a4 13 3e 2a e9 68 5b f3 43 08 c7 20 ec 41 97 59 d4 fb ff b9 22 73 45 db f0 14 22 1d 0c 66 9b 6c 7e 61 52 b0 ca 10 62 89 10 3b f6 39 3c 8a 2f f1 89 a0 3e 28 5c ad d4 3a b7 4b eb 51 1e 57 e8 40 f8 d1 a4 16 58 7e 99 3f 74 67 d9 bb 69 13 84 a3 0f 01 48 38 f2 78 79 f7 cb 01 be 99 b6 33 13 92 e6 2f f4 88 7a e5 5e 47 1f 7c f1 ef c4 f5 f8 c2 73 5e e6 d2 26 ab f5 be 9f 53 96 e7 a7 6e 30 22 ba 4a 1a 5e 30 c0 47 fe ec a1 06 c7 f7 a3 de ef fd 60 90 2f cc 1f 63 10 e0 fd d8 60 0c fa 19 77 4d ef 0e 0e e1 0c 7f 7c d4 bb 7a 7b 7c 7a f0 c7 e3 a3 f3 dd c3 ab c3 de 9b f3 ab 37 ef ff f8 c7 2a 23 cd ad ad 6f Data Ascii: $ jMi!Ho^DdKIW/#ov9x:>h[C AY"sE"fl~aRb;9</>(\:KQW@X~?tgiH8xy3/z^G\|s^&Sn0"J^0G`/c`wM\|z{\|z7#o
2023-08-10 21:19:01 UTC	3082	IN	Data Raw: 8a 97 0b 2f 5b 12 8d 5d 4d 55 b6 86 5a ce da de bf 3b ba fa f1 60 ff fc ad 89 ba 27 ee 0c af 61 da 77 7d aa 45 a1 41 59 67 3b 9e e7 ec 58 ef 84 71 7a 6a d5 4d 39 3a 47 32 e8 ed 1f 14 a7 26 c8 b4 f6 05 39 98 47 72 65 72 38 ed ed ed 1e ee bd 3f c4 d3 0f b3 cb aa 01 60 ce 58 9c ca 07 54 74 72 7c 76 80 6c 78 01 b9 3d ce 65 15 2d 78 a6 85 b3 28 4e 55 0a 42 1d 09 fc 86 60 0e 30 51 53 47 4b f0 30 42 3a 3e 95 94 b4 80 43 c2 2c ee 26 7d 24 17 8d 70 a9 71 0f e2 c9 19 d5 9e ff 74 b2 94 25 17 87 e5 81 cc 50 d4 84 3d 54 59 53 c4 9c a9 f6 38 c6 6b 9e 8f 6a 8f d9 a5 1a ca 97 5d a9 18 bb 4f 71 6f 03 04 ea 25 36 c8 7d 11 1f 28 c4 55 4c a6 8c 35 ef 44 b5 82 60 b4 65 94 8b b2 a0 08 82 a2 65 a2 12 32 59 14 f7 2a 85 3c a0 81 70 3a c6 56 c1 de 35 4d fc 73 1f 2f ac dd 78 46 41 Data Ascii: /[]MUZ;`'aw}EAYg;XqzjM9:G2&9Grer8?`XTtr\|vlx=e-x(NUB`0QSGK0B:>C,&}$pqt%P=TYS8kj]Oqo%6}(UL5D`ee2Y*<p:V5Ms/xFA
2023-08-10 21:19:01 UTC	3083	IN	Data Raw: 3c f5 dd fe df 05 94 b2 b6 3c 29 10 70 df 0f 26 69 75 c9 fc 5a b5 bc 7e ba 8b 5c a5 81 4b 93 1e f9 1f df f1 13 e9 82 5e 40 a2 73 37 b9 5d d8 22 b2 67 5c 9c ea 20 ec af 94 4e 34 fa d4 1f 93 9e 49 75 c2 13 1c 52 7d 58 cd 1d 50 e6 c9 18 bf 1f f5 77 e3 fe 30 f8 e0 7b 4b 6a 23 9d 1d dc 31 92 a4 3a 25 3a 1c c3 27 57 74 31 bf 4b ba 15 d9 24 98 db a7 66 90 63 b9 5a f1 f9 98 ae 96 5e 0e 2a 29 e7 3f 2c 4b 2f 14 83 23 3c a0 df ea 8f cf 8a a5 50 a8 59 0a 91 7e 9c d4 b6 44 28 0e 36 cc 12 56 41 61 13 95 1b 85 be 19 79 bb 1d a5 62 3d 13 dc 4d d8 0c 95 c6 25 f8 22 1d fa 23 7a cd e9 66 38 8f d5 69 08 5a 2a d9 fd e8 c6 fe f1 cd 3b 37 be 45 82 79 ed 0f dd 0f 41 14 2b 05 54 a6 e9 20 98 55 b2 1b ce de c3 18 8c 80 42 62 df 53 87 8b ac c7 43 f9 6a fd 06 d1 9f fc 44 ce a1 f7 fa Data Ascii: <<)p&iuZ~\K^@s7]"g\ N4IuR}XPw0{Kj#1:%:'Wt1K$fcZ^)?,K/#<PY~D(6VAayb=M%"#zf8iZ;7EyA+T UBbSCjD
2023-08-10 21:19:01 UTC	3092	IN	Data Raw: 93 ef df ff 83 e1 53 70 e8 58 1d 2d 54 57 ba 56 04 97 f4 a0 f1 3f 69 e2 4a ee 8d 40 0e 0d 88 2a 0d d6 b6 d2 b2 bf 63 19 7d 05 d9 37 61 75 c8 0f 5c 54 63 86 65 35 91 29 d4 78 40 b7 ce 7a aa 2e 5e 5d 51 07 bd a8 5e f4 62 a7 54 93 f3 72 47 44 cf ba dd 35 75 26 b2 b3 52 60 4a 24 d5 f2 cf 9e b1 6f f5 0a ac f0 b4 7e b5 af 58 5e c1 2a 7f b6 fe a9 a6 a5 d5 49 24 b0 71 5c 9d 0b 08 2c 97 a7 50 ef 2a c7 d8 95 95 7b 56 2a f4 64 f1 88 6e dc 65 a3 61 73 4f b8 e5 5a c1 b1 47 2a c6 1e 32 88 f5 ab c7 59 d5 a6 ac 51 cf fe a9 8a 3a 62 60 b2 39 c9 86 03 b9 e2 24 fc 59 6f 5d 94 7b c6 e5 aa c7 d2 5d 8e ed 96 91 0e 6a 52 4d 90 3d 6b d6 37 fb de 90 2c 57 f1 5a 38 e7 79 11 bd 8a ea da dd 74 1d ab d7 a5 9e 4f cc 5e fe 5b a4 63 41 2f b3 3c 01 99 d5 6c b0 e4 b4 34 c9 ac e3 72 53 17 Data Ascii: SpX-TWV?iJ@c}7au\Tce5)x@z.^]Q^bTrGD5u&R`J$o~X^I$q\,P{VdneasOZG*2YQ:b`9$Yo]{]jRM=k7,WZ8ytO^[cA/<l4rS
2023-08-10 21:19:01 UTC	3100	IN	Data Raw: 61 cc 28 b8 fc d1 ed a4 5c 01 f4 44 f0 1f 6f 7a fb b9 10 81 fc fc c5 1f 1d 18 c1 9a f1 20 74 2f db e2 e4 e3 a4 61 c1 28 dd dc c9 83 e8 3a a3 c0 f8 a3 db 79 91 35 26 89 17 81 0a d3 84 f4 11 03 0a 51 fe a4 65 f7 42 75 5e b2 9c 14 9b 4d a9 ba 3a ee cf 0e 1c 51 06 14 1e 3f 65 c3 57 2d a5 63 ca 1e 85 c4 b0 30 fa 34 a6 8f 03 55 f3 77 17 13 32 51 69 d6 11 16 10 d5 80 a0 79 64 e5 d0 86 ff 34 a2 d7 03 12 fd bd c6 40 22 29 8a c6 98 2b 84 18 e9 10 f8 82 eb 6c fa bb d3 9f 7e ca 0c 1e db c0 0e 0a c3 a1 50 09 ef 58 18 8a 95 1e 46 23 54 82 85 25 30 04 35 90 6d 05 52 64 7d 95 40 2b 90 8f 2c f1 b2 a6 a0 b1 4b 5a 02 c5 17 50 64 41 8d ca 5b 60 1a aa 10 21 1b 1d 7a 72 f8 76 56 e3 64 59 18 4c f1 81 78 6b 70 1f 70 e0 46 25 23 ab bd b7 80 6b 77 bd 97 c9 1d 61 cc 6d a3 07 03 6a Data Ascii: a(\Doz t/a(:y5&QeBu^M:Q?eW-c04Uw2Qiyd4@")+l~PXF#T%05mRd}@+,KZPdA[`!zrvVdYLxkppF%#kwamj
2023-08-10 21:19:01 UTC	3116	IN	Data Raw: 67 fe 35 96 5e 27 04 15 ff 32 2d c2 8c f8 27 61 5d 10 f9 1c 83 0e d4 01 c4 32 29 2c 9f e4 52 20 04 33 7b 05 d1 b4 44 d2 f6 a8 45 97 ff e8 27 93 34 ef e7 51 2d 76 31 1b 10 0f cc a3 2a 9f 40 79 e5 2c 3f 80 2d 38 55 75 29 1b b6 e0 83 3c ef 93 a5 3b ad cb 28 c0 18 1b 28 dc 59 24 e3 89 2c 46 a6 8f 52 96 64 b7 99 0e 92 72 14 70 b4 a0 1c 87 a9 34 f4 68 ce e7 3d d8 22 1c 9c 43 d3 26 94 ea 75 4e 55 e9 b9 30 8b c8 e0 69 ba 03 61 be 5e 9a 2f 53 81 12 00 2d 81 42 88 2f 56 a4 c7 93 28 24 4e 0b 82 6a 24 81 44 11 47 2f 1b 60 1e 10 0d 44 dd fe 9c 94 51 ac 7f 7a fd e0 2e f2 10 65 e0 71 03 be f5 de cf 53 a2 99 d2 d8 df 01 f1 69 32 99 a8 8d 13 0a 30 4f f2 ba 62 31 f1 51 a8 94 ff 0b 7d 01 71 e2 80 a1 97 a5 6c 07 f4 41 65 16 d3 4a 23 b7 76 44 76 d4 b2 54 ef 1c 04 da 78 1f 0d Data Ascii: g5^'2-'a]2),R 3{DE'4Q-v1*@y,?-8Uu)<;((Y$,FRdrp4h="C&uNU0ia^/S-B/V($Nj$DG/`DQz.eqSi20Ob1Q}qlAeJ#vDvTx
2023-08-10 21:19:01 UTC	3132	IN	Data Raw: f0 c3 b6 a4 8d 25 a9 3d f8 b7 d5 72 ce db 25 6f 32 5d 42 01 5d 78 0c 0c 6d 56 e4 57 33 74 32 d8 a9 18 9f d5 d8 84 89 d5 a3 1f 05 92 84 12 5a 39 a1 f4 1f a4 de 69 19 c2 22 b0 b9 83 b4 33 5f 36 39 a1 a4 4d d2 03 09 b5 65 12 2d 8b 8b a5 bc 2e 19 43 d9 22 f0 53 f9 f3 3c 26 bb cb b8 3f 19 37 ed 19 9f cd 2b c6 98 98 67 25 9b e8 3b 1d fc 49 95 7a 92 c8 fb 3f d7 5d c4 f8 ec 6f f3 3a b4 86 97 07 4b 34 c0 53 c9 a7 b6 98 b1 38 39 b7 aa a5 5c 8e 63 f6 76 bd 66 53 88 05 db 37 a4 89 c7 89 0c 3e 4d 68 a4 42 37 0c a8 dc 97 a9 1a df 70 98 bb 2b 28 82 1c d3 c4 df 72 3a ee 09 07 ee ca a7 c8 4f 88 c5 73 3c a4 54 5f 2f 2d 22 7d d5 94 64 d7 a0 47 53 aa 32 fc 71 37 01 52 f8 4d 6f bf 11 3c fd cc c2 e4 82 05 37 32 ba 72 8c dd f1 90 df ac 89 8a b8 8c e4 db 9e 57 e0 8c c2 ff 5e db Data Ascii: %=r%o2]B]xmVW3t2Z9i"3_69Me-.C"S<&?7+g%;Iz?]o:K4S89\cvfS7>MhB7p+(r:Os<T_/-"}dGS2q7RMo<72rW^
2023-08-10 21:19:01 UTC	3301	IN	Data Raw: 73 55 b6 61 5d 20 50 1a e3 0d e2 31 51 fd b1 04 a3 d5 9e 7e 3b 59 40 03 f5 cd e4 40 90 f1 da 43 72 c8 20 8d eb e2 4c 3f 3e 93 26 e2 8d 33 c8 0d 71 c0 b4 9c 39 1d bc 20 e0 5e 72 52 4d d8 c7 a8 fd 0f 77 5a 78 e4 29 1e 26 f4 d5 43 89 6c 6f ca 24 06 fd 62 fd 52 c1 be a2 4a 97 a5 34 0e 07 bc 95 90 65 73 72 15 bd 94 13 d3 35 98 a5 53 41 04 fc 2a bc 46 c0 e1 b1 28 d6 f3 bb dd a4 fa 81 1a 50 5f 43 17 45 46 71 24 6e 22 c1 2c 21 08 95 8d 20 b6 87 8e 2f 03 93 3d 21 bd 45 5d 2c 39 76 93 8e 0f 05 6b 9b 49 4c f8 9f 2b ef 08 bf f0 51 86 74 4f bf b2 c4 d3 23 e0 d5 da 47 d8 7a 2e 8a db 4f ea cd 58 ed 26 13 bb 6b 25 1e 68 0d d8 c7 a4 f0 dd 26 c9 f3 e4 ba f5 6d 27 51 5c b9 8b f5 ab 3f 06 c4 a2 59 60 1d 0c 6e 19 8f c3 95 93 9c 26 b7 b1 8f 09 8b 4f 65 10 24 98 2f 7a b9 1d c7 Data Ascii: sUa] P1Q~;Y@@Cr L?>&3q9 ^rRMwZx)&Clo$bRJ4esr5SA*F(P_CEFq$n",! /=!E],9vkIL+QtO#Gz.OX&k%h&m'Q\?Y`n&Oe$/z
2023-08-10 21:19:01 UTC	3317	IN	Data Raw: 8b 13 be 68 bf 0d 09 c9 67 51 8c e5 70 68 09 94 19 ec 8c 2c bc fa 8b 49 50 4c 0c 67 3f 69 d3 56 ff 48 7d 44 0e 33 2f 34 7f e0 8d fa fc 77 0c bf e5 d3 5f 50 bf 08 3e ce a9 04 d5 5e 99 3c 65 19 bc e4 f4 e1 fa ec 7c 0e 35 d6 40 0e f1 c4 f0 2d d1 2d be 24 e9 f1 f2 c9 2f 8f 0e cf d8 f9 b2 2a 12 28 14 44 23 6f a0 86 5a cd 1b c8 40 6b 10 7b 64 b5 98 27 ce 35 cc 07 92 b4 20 ba 62 12 b8 e7 9b 81 e1 74 ec e0 19 45 56 62 05 2c 43 a9 61 da 35 98 af 6c 91 4e 34 5a 0e cb 4a a5 e6 08 31 00 95 36 52 27 4a 36 43 0f 42 66 33 98 cb 12 36 0b 38 9b 39 35 36 7b ae a3 3f 02 6c e6 2b d7 e0 8b 80 42 3c 48 47 fd 48 6a 9d 1b c5 bc 7d 8f 9d 4f ac e0 d6 a0 02 df 18 f5 77 ec 95 06 58 05 85 e4 50 a4 d2 41 c6 32 00 90 2f 73 00 10 6b d2 e6 24 da b5 d1 fd 06 0a 52 6e 51 d0 8d e6 c7 e0 e4 Data Ascii: hgQph,IPLg?iVH}D3/4w_P>^<e\|5@--$/*(D#oZ@k{d'5 btEVb,Ca5lN4ZJ16R'J6CBf368956{?l+B<HGHj}OwXPA2/sk$RnQ
2023-08-10 21:19:01 UTC	3333	IN	Data Raw: c4 a4 fd 29 b8 c9 33 8a 36 57 dd e6 01 4b 87 bd 88 24 31 74 97 fa 8e 58 cc 2d 49 e5 ad cd a8 c3 a1 c6 fa 5a a5 62 ad 98 eb bc be 60 93 7a 30 18 56 09 a6 2d 17 ad c5 ef b4 b2 ae 02 34 d6 65 02 5c 4c dc 89 e9 b9 f4 5b 55 14 75 2d 2d 52 d6 ea 2a 70 fe b0 96 db 16 d5 e6 68 44 07 05 9c 9f 68 1d 98 1c ca a7 e7 a7 0a 87 ed 19 30 67 dc c6 09 3f 93 73 40 e4 ba 82 4d 5a d3 1e 49 bb 1b e5 ac 10 93 8c 6b 5c 5e 4b f0 15 4c 5e 41 e1 44 3e 7d 42 73 cf 9b 1c 55 c3 ca fb cf 9f fb 94 21 be e8 5c 5c 94 53 c0 38 23 96 ae d0 7c 86 ea 0c 94 93 0e f7 2f db 21 d7 b9 11 80 55 2f e8 d3 ef 5e f0 39 fa 14 cc ca 59 3c 1e df 7d cc d2 df 67 c9 e1 08 6b 18 af 1e 1e c6 1d ae f9 4c c4 bb 76 f8 19 50 0f 3a 79 44 a8 51 06 9e 8a b1 c3 c5 97 a4 60 9b 56 3e 3c c0 48 d1 0b 84 69 b4 47 b3 04 b8 Data Ascii: )36WK$1tX-IZb`z0V-4e\L[Uu--R*phDh0g?s@MZIk\^KL^AD>}BsU!\\S8#\|/!U/^9Y<}gkLvP:yDQ`V><HiG
2023-08-10 21:19:01 UTC	3335	IN	Data Raw: 64 d5 58 72 73 21 30 71 33 2c 30 b2 f9 28 be 3f 8c f7 f9 76 f5 e2 c3 49 61 f3 3e 84 fb e7 2b bc 2c 32 e7 b8 4b 54 e5 f8 ea db dd c1 17 bb 0a 6e 1c b1 45 93 c7 1c 5f 4e 48 37 3b bd b0 88 2a d6 76 b8 39 54 06 bc b4 2b fd 30 10 e8 d4 08 7d 61 0b 58 c0 51 5f da 8c b7 9a 1e 7d bd 89 8e 10 69 3e 3c b0 1b d6 51 44 91 69 d6 1d aa c2 47 7e e8 76 c6 df 4b 75 e1 20 36 0a c4 34 2d 3a e6 f6 18 1c 7c 4a f4 63 dd cd 08 42 ec 46 6c 01 d4 b2 56 36 f0 aa 43 02 c6 6c 6b 68 10 7b 33 81 8e f8 59 2c fb f7 8a 16 6d 4e 1a 05 b3 8d da 93 18 f7 30 8d b3 aa 8f 21 23 b9 33 53 fa 07 8c af 9c c0 0d 10 10 bd 26 05 af 35 54 35 1a 17 4e 03 ef fe b0 ff 04 7b f8 e3 5b d8 6a d8 1d 17 03 3a b6 b1 f6 fd 26 a1 7d 3f 89 6e d2 51 82 02 de af 69 75 47 48 f0 07 e1 07 65 e3 0b e0 a7 e9 14 70 e7 03 Data Ascii: dXrs!0q3,0(?vIa>+,2KTnE_NH7;*v9T+0}aXQ_}i><QDiG~vKu 64-:\|JcBFlV6Clkh{3Y,mN0!#3S&5T5N{[j:&}?nQiuGHep
2023-08-10 21:19:01 UTC	3351	IN	Data Raw: 7d ab 41 a1 b7 3c 48 d6 61 83 b2 ce b3 4b 87 b4 36 6d 35 1b f9 a0 38 e3 90 f0 fc 44 71 a6 d9 d5 9d 69 1c e3 fd da 41 c3 45 ee 51 a3 0c e5 9d c7 86 52 5a b9 d6 ab a6 6a ba a2 00 6b 6d 8c e3 cb 64 1c f4 bf 70 82 54 d9 77 b3 ff 7d cd 74 f2 ba 43 e6 5b 18 e6 73 2f 2d 80 77 7f 0b dc 3d 86 74 78 64 35 61 74 69 4d f7 a2 c1 31 e5 74 42 d9 a7 1b 03 a3 2e f0 17 16 aa 8f ac ca 61 d4 2a e3 af 8e 7c 68 7c 79 28 e1 d0 49 3c d2 cf 5a cd 81 d0 a7 76 b8 2c d7 d5 77 82 92 80 22 80 83 55 47 c3 36 86 38 30 3c c1 ec 04 01 74 ad 9d 90 f6 78 1f 1a 43 e6 9b 87 2f 29 fb e7 9d f3 c3 0f 07 ef 0f 8f 0e 2e f6 0f ff 76 b1 77 fc fe f8 f4 ec e2 f8 74 ff e0 f4 f0 e8 6f 11 3b c9 64 dd bb 74 7b 29 07 56 fa 07 df d8 3a 35 17 bb f9 1f cd 5d b3 6b fd e1 81 26 e5 ca 55 a6 a8 a7 1d 59 02 ac 33 Data Ascii: }A<HaK6m58DqiAEQRZjkmdpTw}tC[s/-w=txd5atiM1tB.a*\|h\|y(I<Zv,w"UG680<txC/).vwto;dt{)V:5]k&UY3
2023-08-10 21:19:01 UTC	3352	IN	Data Raw: 5d 09 94 6d 78 35 89 04 ec 0b 3d be 05 fe 89 63 b0 86 dd 9b 63 a0 4d 06 d3 d2 47 53 2f 0f 0c f3 03 62 48 15 6d 0f 06 63 a7 09 ea f2 09 28 23 e0 d7 4f 16 11 52 7b 4c de dd d5 d5 05 13 01 9a 6e c7 bc 8a e3 0e 5f 15 76 36 4e d2 71 12 dd 4f 16 ac 4a 54 4b 5b ce e3 f2 0b ea f3 e3 af 31 70 0b 67 5a 18 51 16 b9 d0 27 df 15 a7 8f 93 4e 79 db 4c d6 cb 96 5b 48 e3 90 56 de 10 03 08 fa 8a e3 a8 39 9d 9a c8 be 07 52 1d 0d 0c d0 d8 95 f0 d3 b1 48 5a ba 28 d5 29 bf 30 59 92 53 2b 53 b9 c4 75 f3 c8 ec d8 66 27 d2 79 b4 ba 9a ad ad 99 25 8d e0 54 59 68 b5 f5 c5 64 99 f7 14 fe ff d6 e4 98 cd da b3 06 1c b3 97 eb d1 d6 3d 88 d2 ec 2b 00 45 a2 09 6e d9 2b bb df 43 8d 99 fe da 39 81 62 b0 86 52 60 a6 ba 55 a7 43 dc 55 16 8f c8 ec 3c 60 cc b7 d9 fc 54 49 59 ba 64 f4 e2 8e d9 Data Ascii: ]mx5=ccMGS/bHmc(#OR{Ln_v6NqOJTK[1pgZQ'NyL[HV9RHZ()0YS+Suf'y%TYhd=+En+C9bR`UCU<`TIYd
2023-08-10 21:19:01 UTC	3368	IN	Data Raw: a1 23 35 5e 86 6a d4 99 a2 2b 55 1f 33 9d 7e 5e e3 56 e8 83 b1 94 84 9f 64 da d4 2a 9c a3 52 4a 6f 44 8f c4 3c 34 46 1e 6e a0 a1 0d 3b 0e 77 a2 d5 d7 21 74 79 bd ea 9d 5c 2d c2 0a 77 c2 6c 48 cf c2 bf e9 87 39 4a 05 0e 37 44 48 66 4b f9 98 c4 93 1a c3 ae 16 f3 fd 0b be 40 74 30 c0 77 ec f1 4a f5 7b 30 52 3b 91 bf f4 ca e6 82 50 e9 c4 bf d5 da b2 af 92 4b d5 4e 43 c6 55 a6 5c e3 c7 d4 db d9 fd 62 97 94 5c 37 41 40 65 56 9a fa 08 bb 7a be 76 31 36 86 d7 91 be f9 f9 0e 48 c9 82 9c 37 16 6b c7 75 6e d0 62 cb 6d 86 9b ab 57 c1 15 07 c3 27 a5 6c 39 fb 77 84 13 47 27 09 43 8e 27 ad 2d 4f 4f 97 23 d5 f4 b0 44 99 6c 1a 95 94 dd 29 67 bd 43 0f 83 74 90 16 23 19 c9 5b f1 6d 82 8c 02 91 7d a0 f8 09 69 d5 78 54 32 26 35 42 3f f0 32 7b 71 8b f0 ed 97 61 c2 b0 2e 90 f5 Data Ascii: #5^j+U3~^Vd*RJoD<4Fn;w!ty\-wlH9J7DHfK@t0wJ{0R;PKNCU\b\7A@eVzv16H7kunbmW'l9wG'C'-OO#Dl)gCt#[m}ixT2&5B?2{qa.
2023-08-10 21:19:01 UTC	3384	IN	Data Raw: 80 de d5 9c 4a a9 79 1d 74 00 f9 6e 0e 97 4b 82 e6 f4 b3 c6 21 e1 a1 15 7c 8a 1c 0e 04 d5 81 7a ed 36 b6 02 fe 2a ec 28 e9 82 1b c8 f9 84 69 16 d5 6e ed ad c2 55 da 7f e1 f9 d0 de c2 ae 56 c5 4e 57 ad 4e d5 31 d0 d8 a8 1d 29 1a 8a 0f a5 a1 ae fb 40 05 0b 75 90 ba 0f 26 f5 99 56 a2 50 39 a2 51 2a 3c 3a 94 06 23 bd 36 a0 7c ce 35 a2 2d ba 29 e5 43 5d ef 43 4b 17 e7 fa 64 f9 32 14 84 69 a4 91 a9 b0 32 eb 0e d2 83 10 a3 c6 f4 4a 8b ec 49 c7 06 fe 0c dd 4c 33 20 d3 a8 08 2e c3 3b cc cc 93 61 7e 10 c1 0e 61 5a f1 37 f4 70 83 9b 03 30 99 5b ad 94 d8 a5 b6 f5 d2 9e 1c 66 bc a8 a0 eb 22 b1 26 ef a8 22 20 d7 0b 5a 98 c2 9d 49 c3 c9 9b a9 c1 4d 97 fd 0f 8b 32 d1 1c 4e dc 2e 22 3f 24 dc a9 ee 2b ec 56 4b 9e e7 9f 98 d3 c9 cf 3f f3 60 ff 27 3c 33 fd e3 9f 99 db 09 25 Data Ascii: JytnK!\|z6(inUVNWN1)@u&VP9Q<:#6\|5-)C]CKd2i2JIL3 .;a~aZ7p0[f"&" ZIM2N."?$+VK?`'<3%
2023-08-10 21:19:01 UTC	3385	IN	Data Raw: 0c db 7c 5e c4 25 4b d1 5e 1d 17 9f 60 c8 e3 82 81 10 e5 ff 3b 39 5d 26 0a fb 7c 86 fe 17 cc 2c e4 12 13 88 1a 21 33 90 80 20 2a b8 74 fd 61 1f b8 2f e1 3a 75 5c 88 f4 df 38 06 d3 6f 76 c6 ea 7c e7 0b 78 cf 5b f3 3d 79 cd a7 6d 0b 15 e2 27 27 df e6 ec 2d 50 ad 7e 4c 4f 98 53 43 5c b2 7a 17 d5 b8 ba 49 f1 80 d3 e0 8e 1c d1 da 11 4a 8d 2c 6b f3 c0 2f d1 3f eb 1c 48 d4 55 67 6c 77 b5 71 4b 2d 8d c7 fc 66 f9 25 ef df de 5d 5c 2d bb 81 85 5c ec 26 26 36 69 16 c0 0c 15 69 58 ea 1f c0 2f a5 37 a2 ca 70 51 a9 c3 c7 f8 da 8f c3 19 56 e7 22 ff b3 83 2c 13 60 fa 82 58 18 df 93 7c be 17 c6 da a7 b5 df 7b 66 d7 2c 19 d8 57 e3 02 ab 4e ad 07 cb 02 00 c5 5a c5 eb a2 64 a0 49 1f b6 5c 6a 90 e4 5c b1 01 c3 65 9f 39 28 d8 56 9e 2a 70 84 bf 02 64 25 58 3d 2f df de ce 4f 92 Data Ascii: \|^%K^`;9]&\|,!3 ta/:u\8ov\|x[=ym''-P~LOSC\zIJ,k/?HUglwqK-f%]\-\&&6iiX/7pQV",`X\|{f,WNZdI\j\e9(Vpd%X=/O
2023-08-10 21:19:01 UTC	3401	IN	Data Raw: 5b f9 13 1c 23 b8 e1 24 48 31 df e8 09 8e f8 25 fc a0 95 bf c4 5a d3 78 ee e2 52 a9 11 93 2d e9 82 ba 3d c1 6d 57 d6 c7 97 f6 11 bf f1 ae fb 74 2d 67 6f e2 8c 94 7e ac 52 4d 6e 4f 5b 90 57 99 2e 0e ff 83 b0 cc 7c 31 92 03 f5 53 d6 54 e5 ea b2 f6 8f 88 a6 1d f5 f0 10 16 5c 07 1d 27 c6 90 d5 1c c3 ea a6 26 98 77 f4 e2 df dd 51 4e a7 ef 7e eb 80 d2 81 71 34 d8 3c bd 68 2d bd e0 05 f5 02 28 11 f6 29 2d 5f 4a 4d d8 9c 64 37 93 5c 0f e9 78 ed 2c 98 55 ef 2b d9 17 71 3f 93 2e 79 3f c3 18 f5 52 29 6b 2c 6d e3 8d 67 70 5a 1f eb 7c aa 4d 89 8b 3d 79 ee 72 d3 b3 20 ba 4b 41 ab 16 5c 2f 9c 99 d7 0b 43 ed 7a 41 57 5a 1f dd 8f 29 a3 7d 1d d6 79 e0 99 7e 26 8f 51 83 9d 89 8b 08 56 69 3f 36 3c 4d 50 33 4d 18 26 8f 16 39 9a 9c 0c 6a 3d 4d 86 45 13 0f 94 1a eb f5 93 b3 bd Data Ascii: [#$H1%ZxR-=mWt-go~RMnO[W.\|1ST\'&wQN~q4<h-()-_JMd7\x,U+q?.y?R)k,mgpZ\|M=yr KA\/CzAWZ)}y~&QVi?6<MP3M&9j=ME
2023-08-10 21:19:01 UTC	3402	IN	Data Raw: 20 f1 9c 95 0d b1 8b 1d fc a4 e3 54 e7 ba ff 2d 58 e2 92 73 77 c7 3e d7 73 9c ba 7b 35 4e dd 41 9f d1 c7 59 b1 fc cb e8 b7 6c fc 8b c5 3e 6e b7 df 6f 32 4a 39 aa 94 e7 47 37 fb ba e0 66 d6 60 e0 78 d1 6e 98 34 8c e1 6f 80 9e 65 c8 49 ab c0 5d 4a 7c 59 2e e2 fd 5d dc 70 04 12 c5 eb 34 1c e0 fd 2d cd d6 12 ee 1a 1c c6 84 5a 7b 96 8c fa 24 f7 d7 af e6 eb c6 62 7c 0c 0c 49 38 af 02 a1 be b4 d4 d3 2f 75 af d7 96 8b c0 0e 5f 41 af 3e 14 25 97 64 c5 79 8e 25 8d 5a cf 92 7b 38 e1 a0 b4 83 38 cb 03 a0 35 63 85 64 a1 52 6e 05 67 f1 f0 a1 94 31 1f 1b c5 2a 6c 8b 46 66 90 d1 c5 e0 16 66 11 56 84 8b 61 98 7f 0c 11 c3 ef 3d 59 48 67 55 4f 95 eb d9 6c 0e 0e 46 24 ab 98 0b 86 d1 98 87 86 a1 5a e9 48 2a 56 1e d1 db c2 62 d0 ca 27 bb af f9 88 19 ea a4 e8 61 ac 88 3f 08 68 Data Ascii: T-Xsw>s{5NAYl>no2J9G7f`xn4oeI]J\|Y.]p4-Z{$b\|I8/u_A>%dy%Z{885cdRng1lFffVa=YHgUOlF$ZHVb'a?h
2023-08-10 21:19:01 UTC	3418	IN	Data Raw: 03 21 a6 30 37 a8 30 75 aa 3c f8 d1 8c 6f a5 fa 59 77 9d f4 2b cd ff f9 ec 82 c3 88 26 52 76 af 57 ab 66 d0 8b 21 bb f5 9b 48 51 de ef 0d c4 23 c1 4f fc 39 13 b0 5b f1 2f e1 e6 f6 f0 5c f4 1a 96 5a 77 08 3a a2 bf 11 63 12 da 12 df 0e ce 07 da db 01 bd 2d 41 c3 ce d0 01 f6 be 33 49 d2 c3 e8 ab 8f f8 2c 29 d8 b5 b7 fc 8b e0 36 2c ec 12 d3 a0 d0 4b 5c 85 8b af e1 46 c1 ad bf 78 48 05 8b 65 9a db 4a 03 7a 55 11 9e 34 ac 2b 65 bc aa 30 ab e7 02 4e 2f f5 aa 6b 45 98 3a 5a 38 ee f6 c5 e4 2a 4f 61 b2 78 d5 ab 91 04 1f 9d c4 d3 aa 4d 92 39 09 a2 14 be 0a 77 40 23 03 dd 23 24 be 04 5d 48 1b 93 7c 99 6a 2f 53 6b fb d5 c0 f3 90 14 eb de 7b 86 80 bc 99 00 e4 cd 2a 80 bc 49 f8 a0 a1 ce e8 94 15 3f ca 8a 2f 51 a2 03 ca a2 7a 14 d9 4c 43 91 55 a0 5e c3 8a c5 7b e0 cd eb Data Ascii: !070u<oYw+&RvWf!HQ#O9[/\Zw:c-A3I,)6,K\FxHeJzU4+e0N/kE:Z8OaxM9w@##$]H\|j/Sk{I?/QzLCU^{
2023-08-10 21:19:01 UTC	3434	IN	Data Raw: 5b ed 78 41 02 0a 3d 2a 00 a6 b2 10 b2 df 83 e7 0e 61 d6 95 30 3f 61 b3 2b e3 a2 dc 19 c0 f7 7f 8f ef c9 33 df 0a a4 d6 55 51 33 e6 9a 39 54 f6 83 ae 07 2b 3e da 55 e1 7c 61 17 bd a7 f4 91 c5 ca 83 3e fe 25 5d 54 11 aa 96 fa d5 ca 4c 61 cf 99 34 f3 86 95 5c 6f f3 80 55 bb 82 37 ad 70 2e 7c 62 cb 34 94 16 c4 43 18 b8 ab ad 73 39 e0 c6 4a 6e 63 5e 16 0c 62 11 c5 33 9e eb 17 10 4e 2d 4a 77 7a 26 85 22 ae 34 67 78 56 4b 9b 28 b7 4d c9 c6 bc 9e 9b 06 19 ca 26 47 00 29 5d 72 53 78 9f 25 ca d8 0a 74 91 c4 60 98 d0 17 6a 9f 76 8d fa fd cb 2e 33 3e 72 e7 90 6a 6f 9f 33 a9 c6 3a d6 e3 a5 19 9e c7 f2 f0 77 28 97 3a c9 fc 38 56 e3 a6 e5 cf 90 29 2f fc f5 b0 a8 cd 69 12 3c 99 95 55 ba a1 87 8b 8b cd 4d 71 10 15 16 4f e5 2a b7 b1 5d 69 ab f0 54 4d c6 a7 35 06 00 7b cf Data Ascii: [xA=a0?a+3UQ39T+>U\|a>%]TLa4\oU7p.\|b4Cs9Jnc^b3N-Jwz&"4gxVK(M&G)]rSx%t`jv.3>rjo3:w(:8V)/i<UMqO]iTM5{
2023-08-10 21:19:01 UTC	3450	IN	Data Raw: 9f 5f 76 66 ce 13 25 d3 a7 14 93 e8 8d 21 4b 76 6e 91 78 6c 45 17 e4 b7 56 0f ab 42 bf 66 26 51 9f d6 0c 93 b2 d3 d6 8a 5d 47 01 e0 bf 2b 8c 5f 98 45 ca 59 02 16 a4 48 25 71 6f a3 c2 fd 30 f6 dc 71 30 b8 de 40 b5 f6 37 41 d8 b3 b6 50 39 0c 2a e7 43 83 83 db 78 f1 d3 13 20 9d 66 62 d7 31 39 00 76 1c 57 40 7b a6 32 ba 93 96 ef 8c 57 03 76 cc 77 dc af c5 8e 48 d5 d3 a5 4b f6 41 d3 c9 76 55 3d 21 04 dc 26 0b c3 b2 33 ab 0a 1d da e0 9c f3 76 0a 8e ac 51 70 d1 a2 a3 a1 15 b4 94 e3 a5 75 69 d2 26 ab 98 c7 74 38 aa d6 f2 a1 04 29 c2 f5 31 4d 23 61 9c ed 53 3a f2 6e da 27 80 fe 09 9d 9b f4 b3 f4 be 7d b2 7b 72 40 ba 25 e9 9b 27 bb bf 1c 1e fd 02 79 e6 f2 9d b8 c3 4d c7 22 17 38 4f 02 3e 6e 53 fe bd 0f 0f ed dd b3 b3 c3 5f 8e 0e f6 af 3e fc fb ea f3 c1 d5 f9 f1 d5 Data Ascii: _vf%!KvnxlEVBf&Q]G+_EYH%qo0q0@7AP9*Cx fb19vW@{2WvwHKAvU=!&3vQpui&t8)1M#aS:n'}{r@%'yM"8O>nS_>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.3	49855	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2590	OUT	GET /static/webpack/production/baa559eb90d18088047f.62bTZ-1Y5wrXwa9_3c21HWyky0dzLHhP70An-t16gvc.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:01 UTC	2708	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 8415 Connection: close Date: Thu, 10 Aug 2023 21:19:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:35:56 GMT ETag: "f48c693b4cb0a06d506f86b8263afcb7" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 abd012b9637ad93b7c9aa82d2cfb262c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: U3mPB8h3dOrTAyxpSWCACreeUXBnq3NnLpQ8m4d3zUIit4J8U23IDQ==
2023-08-10 21:19:01 UTC	2709	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 5d 7b 73 e3 36 92 ff 5f 9f 82 e6 dd 39 e4 0e 44 4b 7e cc 78 a4 30 2e 8f ed b9 f8 32 7e 64 e4 d9 24 eb f2 b9 28 12 94 b8 a2 08 2d 1f b6 15 99 fb d9 af 1b 00 c5 b7 ec 99 64 f7 2a a9 58 04 41 a0 d1 68 74 ff ba 1b 40 b4 47 2f 70 d8 a3 71 7f ff e9 ea f8 f4 f8 c3 a7 33 fe e3 ec f4 fe e4 c7 2f 97 3f 8d ee ef cd 17 6b 3c 3f df de e9 c6 22 89 a6 da ed ad ba b0 16 34 bc b7 9c b9 17 fc b3 f0 fb 9e b9 ee fd 83 47 1f ef 59 e0 2f e5 9b 31 34 4d c3 ec 21 09 1c 9f ca 07 db 67 89 73 ef 30 3b 92 05 8e 15 4d c7 cc 0a 1d 7c fe a7 73 e0 ee 1d 1e be df 55 ef c8 aa d3 df dd 1d b8 49 60 c7 1e 0b 34 4a 62 12 e8 ab ab f1 df a9 1d 1b 0e 75 bd 80 5e 87 0c 9a 88 97 5a 4c d4 fb 7b 1a 5d 30 27 f1 a9 4a 56 0f 96 9f d0 c1 56 2f d5 87 0f 56 a8 30 33 d0 fa Data Ascii: ]{s6_9DK~x0.2~d$(-d*XAht@G/pq3/?k<?"4GY/14M!gs0;M\|sUI`4Jbu^ZL{]0'JVV/V03

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.3	49856	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2665	OUT	GET /static/webpack/production/89b15544be7d0981c0ce.4YByqBMD2GuNM2mQjudvyReJe0vGQKkrUDx6_ngAh1s.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:01 UTC	2717	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 21209 Connection: close Date: Thu, 10 Aug 2023 21:19:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:35:55 GMT ETag: "2083ef61249ad1c7af5dc60e5795beb0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 c7311454ce938e04f3523616a5b033da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: rNnWjxpnLHysX0AwQgTEcwXi2heapzk67KCgFb5DddI_oKiUtby8ow==
2023-08-10 21:19:01 UTC	2718	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 bd db 6e 23 49 b6 28 f6 ce af a0 f2 60 ab 33 47 49 8a d4 a5 2e 64 67 0b 2a 49 d5 ad e9 52 55 4d 49 d5 8d 3d da b2 90 22 83 62 76 91 99 ec cc a4 54 1a 89 1b f3 60 3f 18 86 cf 81 61 18 b0 81 63 9c 17 c3 cf 7e 34 e0 7d f9 97 f9 01 1f c0 3f e0 b5 56 5c 32 22 33 92 a2 aa ab 71 f6 19 60 ba c4 c8 b8 c7 8a 75 8b 75 71 6f a3 78 98 dc b6 2f 2f df bc db 3f dc 7f f5 e6 88 fe 38 3a bc 3c f8 e1 e3 db 1f 4f 2f 2f 83 47 6b 3c 3c 9c 5f 78 ed d9 3c 1b bb e7 e7 ce 2c 9c b1 f4 32 1c 4e a3 f8 1f f9 df 57 d0 01 4b e5 8f 79 3c 9c 30 f1 63 30 49 e6 c3 cb 61 32 c8 44 c1 30 cc c6 57 49 98 0e c5 ef eb 34 9c 8d 7f 9d 88 5f 51 3c 9a cc 59 3c 60 ff f8 e2 c5 f3 d1 cb 17 a3 6d e7 c2 bf 6f 74 77 5e f4 46 f3 78 90 47 49 ec 32 3f f7 63 ef fe dd d5 2f 6c 90 Data Ascii: n#I(`3GI.dg*IRUMI="bvT`?ac~4}?V\2"3q`uuqox//?8:<O//Gk<<_x<,2NWKy<0c0Ia2D0WI4_Q<Y<`motw^FxGI2?c/l
2023-08-10 21:19:01 UTC	2726	IN	Data Raw: ae a9 52 fe 5d 02 d0 9e 04 96 2f fd b4 5c 4a 7e eb 72 bb 4c 6e 02 24 e2 d4 04 df 92 85 53 6a 42 6c ac 04 5c c3 38 04 18 09 58 26 c1 12 c6 60 e8 f8 f7 00 6e 3f 87 51 de db ed 74 16 1e 77 0c f8 48 97 81 a5 f2 3a e8 61 c0 4d 5b fb f2 b5 e9 98 93 50 4e 14 ea de 08 20 36 c7 20 47 84 95 c7 e8 ae 32 46 83 2e 2b 4a 7b d5 a7 03 05 2d 28 d2 11 97 a6 5d 4e 00 11 d6 96 17 92 a8 18 ec 17 20 c1 e7 7f 48 37 12 c4 77 26 d0 0f 2e 50 21 3e f3 94 40 84 92 58 10 8c 39 0f 86 c6 48 47 71 9e de 51 90 87 d7 c7 6f de 1c 7d d8 1b 59 85 26 2e 5f e6 7e 83 58 0e 8c 23 c2 d2 4b 65 6a 3b 80 45 f5 96 76 fe c3 d1 fe e1 23 9d 6b 9c 59 e9 59 c1 f3 ef 6f d1 46 b7 e7 74 3b 9d bf c3 a8 99 1a e3 63 cc c2 af 0c 80 ac a0 21 ad c6 09 89 72 18 21 8f 44 51 0a 54 f7 c8 ec 3f be a7 d4 65 5f 69 fe fe Data Ascii: R]/\J~rLn$SjBl\8X&`n?QtwH:aM[PN 6 G2F.+J{-(]N H7w&.P!>@X9HGqQo}Y&._~X#Kej;Ev#kYYoFt;c!r!DQT?e_i
2023-08-10 21:19:01 UTC	2779	IN	Data Raw: e5 a1 7e 75 87 15 c2 62 32 77 2a 32 ae 22 db 71 14 74 fa d1 b7 71 7f 63 23 f2 12 ac 75 1e 5d 78 0b 5e e9 7e d1 1e 87 d9 bb db 58 e2 3b c1 03 6d fe 43 b6 b1 59 74 9e f0 fc 0f e8 fd 95 48 43 3d 9c 52 32 6a 26 7d 87 2b 3b 81 ce 06 e9 9e 89 53 f5 d9 70 16 38 22 d6 4a 4e 2d 85 a9 a5 df 26 30 b5 d4 63 e7 f1 79 7a 71 81 6e 3e 34 5a 6f 3f 4d c3 3b 00 58 fa 17 c6 dd cb 79 b9 10 12 6d e3 a9 d4 b1 11 fa 8d e7 5e 2c a2 d6 f8 91 87 6a 0f 4c a3 bb b6 c6 d7 2f fa 8a 41 fa 06 09 14 fb 02 96 ca e8 8c 81 a4 af 66 b3 90 92 84 7e 52 6a 75 ca 19 a8 d8 73 3e eb 18 97 db e9 27 b0 fd c9 c6 86 17 9d 27 17 45 65 f8 21 22 7b a1 ea 91 f5 73 37 25 67 74 ee 5c 7f 7e d1 97 03 90 17 7c ea a5 e7 d9 05 06 09 26 ab cd 4c 0b ab cc 03 d9 83 70 b1 c0 97 5c ca 6f 8b 19 11 e0 9e 79 ea af 20 a6 Data Ascii: ~ub2w*2"qtqc#u]x^~X;mCYtHC=R2j&}+;Sp8"JN-&0cyzqn>4Zo?M;Xym^,jL/Af~Rjus>''Ee!"{s7%gt\~\|&Lp\oy

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.3	49857	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2666	OUT	GET /static/webpack/production/9454d8fa2212567ac845.WfD7VSo61Cc5xmHVBpbY72RawNlX3T2FkjNti0c6IYw.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:01 UTC	2803	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 254344 Connection: close Date: Thu, 10 Aug 2023 21:19:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:36:08 GMT ETag: "36e19613e7ba83a1a238d902b2693894" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 633b37c269943f0b3472e0abe1a07b2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: ianzz-ht7nBbmkUod5LH0Yv4lD_Yy8haMyc4NSzgS2ntc5y1beMYbg==
2023-08-10 21:19:01 UTC	2803	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd eb 5a dc c6 b6 28 fa bf 9f a2 d1 9a 9b 29 4d 44 bb f1 2d 49 77 64 16 06 1c 33 83 0d cb e0 78 26 98 c9 27 5a 05 28 56 4b 1d 49 6d 4c a0 f7 77 5e e3 fc 3b cf 72 1e e5 3c c9 19 97 2a a9 4a 2a 35 38 c9 5e 67 7f 67 7e 6b c5 4d a9 ee 35 6a dc 6a 5c dc eb 38 8d b2 eb c1 d9 d9 fe c1 d6 ce d6 cb fd 5d fa b1 bb 73 b6 fd fa fd db 1f 8f ce ce 82 7b 6b dc dd 9d 9c 7a 83 d9 bc b8 72 4f 4e 9c 59 38 13 f9 59 18 4d e3 f4 2c bb b8 38 fb 1c 8b eb b3 2c 4d 6e fe 27 7f 39 87 ee 44 ae fe 98 a7 51 22 e4 1f 93 24 9b 47 67 51 36 29 64 41 9c 5e 24 73 91 4e aa ea bf 86 05 74 2b ce fe e7 c6 24 fc 26 7c fe 3c 74 4e fd db de c6 c6 c6 d3 d1 c5 3c 9d 94 71 96 ba c2 2f fd d4 bb 3d 38 ff 55 4c ca 41 24 2e a0 c1 61 9e 41 f3 f2 c6 2d 7d e7 ec 4c 14 6f b2 Data Ascii: Z()MD-Iwd3x&'Z(VKImLw^;r<J58^gg~kM5jj\8]s{kzrONY8YM,8,Mn'9DQ"$GgQ6)dA^$sNt+$&\|<tN<q/=8ULA$.aA-}Lo
2023-08-10 21:19:01 UTC	2819	IN	Data Raw: a7 89 7c 0c 0a da 1c 8f be ed 06 e1 c3 d6 d8 d4 55 c9 ba f5 9e 81 a1 df d2 04 b2 8e 6e 35 30 6f eb 26 19 5c 2c 52 8a f3 1f ce 9a 3a ce bd 1d d7 5b 73 fa d8 d3 ba 8c 4d 8c 9e 04 7b d1 fa d0 51 cc 4b 15 ea c1 08 d8 e1 36 71 3f f5 d6 d0 e6 aa 34 95 62 6f a7 c6 65 50 cb 60 3d d6 9c 75 67 ed b7 f1 6f 6b 6b 8b c6 e2 f6 76 da 1b ce 7e 0b 6a 16 ed 9d 69 ae ae 35 49 1d 82 bb 36 56 b6 d5 42 d5 fd fb e3 f5 3a 85 a3 73 da 3d 1e 82 d8 4e 51 44 f5 bd 6e ab 0e 29 5c 75 ab 2d 59 45 a3 67 22 7b 8f 75 cd c8 72 a5 0d bc 6e 7c 31 8c 9d 81 4c be ad 8c 9d b3 f4 3c 63 13 f1 4d 4a e6 5c 71 48 de e8 9d b4 d0 ae e3 01 37 36 9f 99 96 16 a4 8b 2a 76 7b 9b b1 af d9 0b 7a 71 63 fe 86 df de 00 a1 3e 80 33 aa 38 22 c9 09 19 13 b2 48 f6 26 af 6b 49 b7 c7 fc 40 25 7c 5b 95 03 43 bb 72 80 Data Ascii: \|Un50o&\,R:[sM{QK6q?4boeP`=ugokkv~ji5I6VB:s=NQDn)\u-YEg"{urn\|1L<cMJ\qH76*v{zqc>38"H&kI@%\|[Cr
2023-08-10 21:19:01 UTC	2932	IN	Data Raw: 19 ff 84 60 44 85 85 48 30 ff ab 0c 73 a3 f4 0e 5a c0 13 15 01 07 e3 39 ed 45 c1 46 af 2e 56 af 88 db d2 fb fc ac 6d 6a 40 37 b8 59 ff a7 c7 0f 69 a1 82 3f 00 b4 cc 07 d7 c0 48 63 a3 83 74 22 3c 43 9d 52 7e c5 54 50 6f f5 75 13 51 7b 45 b2 bd 27 35 67 96 58 40 56 47 5d d5 9a ed a3 d5 5f e4 37 01 57 6c f2 89 fc 23 f9 99 79 5b 95 b9 1e aa 9b b6 31 ef 6b fb ad da 32 70 65 4d 4b 01 02 a2 3e ea a0 fa aa 87 41 ff 38 bf a1 2f 40 ce fb a4 6b 8a 53 f8 07 88 2b dc 05 8c 1d c6 a6 75 85 d4 c1 af 64 5a 78 50 b4 be 48 92 70 56 50 8e 75 3d f1 1c 47 21 14 68 29 09 b0 1e 29 e0 39 92 81 8b 54 70 24 74 6a 37 a2 8d ee a6 11 db 27 ae c4 77 77 31 e9 dc 56 d0 9f 1c 7f b4 9d fa aa f0 98 e8 7c 9c b5 13 a5 db 13 9d b1 22 2f 04 e4 0d fc 85 cb 83 78 f4 78 21 f3 c8 e1 5b 24 46 09 4d Data Ascii: `DH0sZ9EF.Vmj@7Yi?Hct"<CR~TPouQ{E'5gX@VG]_7Wl#y[1k2peMK>A8/@kS+udZxPHpVPu=G!h))9Tp$tj7'ww1V\|"/xx![$FM
2023-08-10 21:19:01 UTC	2944	IN	Data Raw: bb 67 7f 39 21 36 a6 f1 16 88 26 b5 a4 e2 cf 38 45 f6 0f 3f 19 a5 2c 30 e1 84 68 00 9d 2d e3 3c b2 e3 36 12 80 11 45 5c 7f 7c 7f f6 21 98 45 ae f4 05 cf 86 37 41 d8 eb 11 98 0d dc 1c d9 70 9d c5 c4 a4 4e e7 c0 68 f6 5d 77 7b 17 b4 29 fb 0f eb 6c 31 8e 3c d8 f0 8b fb 22 9e e6 17 c1 ed 98 5a bd 86 17 d7 38 7c 24 04 f9 3c c8 10 57 fc ef d1 bd 70 3a 87 0d 87 c8 21 e4 88 7d 70 e4 e5 0c 24 22 dc 8f f4 f9 2d 03 f8 61 b3 12 8e 0e 5e 58 1e 65 a5 b7 14 a7 8c ac c0 cd a2 6a af 8c 58 23 68 ca a4 af 81 e3 c8 89 a5 54 c1 04 74 76 13 61 0a e0 b0 8b 9a 8f 2e 2c 15 ac 0a f6 36 ee c2 87 e4 0e e3 73 6c bc 0e 66 1c ff 1a eb 6f 60 e6 f8 85 21 4d 7d 84 1e f1 2c 4f 71 7a 2e d2 7f 04 a8 66 ab 6e 94 ef 79 9f 7c f7 7c c4 c9 d4 31 55 3a 26 53 ff fe 39 36 5f a9 6b 3d b4 74 ea c8 cb Data Ascii: g9!6&8E?,0h-<6E\\|!E7ApNh]w{)l1<"Z8\|$<Wp:!}p$"-a^XejX#hTtva.,6slfo`!M},Oqz.fny\|\|1U:&S96_k=t
2023-08-10 21:19:01 UTC	2947	IN	Data Raw: 1c 00 5b 8b c1 2a af 72 6d 4f 59 b6 93 28 77 89 5e 96 2a 9c bb c4 fb 16 e3 a8 34 af 6f 46 c4 30 4a d5 ae c4 e4 d0 2a c8 44 8d 82 75 c8 09 02 a8 cb 27 d2 34 a9 ac 8d 62 1c e9 95 9f 28 b3 a8 7e 1f 9e 24 e1 af d1 62 65 1c c0 72 0d f4 43 53 33 92 58 c6 89 03 91 df c5 69 b1 e0 78 32 ce 1e 1e 4e b5 61 f4 76 a1 9c 2c b0 f1 f4 5d 31 36 37 89 67 e1 8a 1a ce 59 c7 e0 87 b8 50 6c 61 84 c4 1b e6 80 94 ea b3 d8 14 95 5c a5 24 7c be 8e c3 8f ab b0 c2 16 15 24 49 b1 66 8f 02 d4 3e 10 02 40 bf 70 8d 08 7d c6 05 d0 d9 36 72 e1 52 e8 00 c8 7d e9 9a fd 96 d2 f5 65 ea 4a d9 89 76 af 08 aa 95 3f 87 53 81 82 7f c9 03 b1 4e d8 d5 93 2a 89 71 aa cf 40 8b 58 e5 43 b4 29 69 72 75 6d 58 42 dc 5c d5 87 6a 81 c4 70 f5 e5 eb f5 0e e4 9f c0 b3 03 4f 0f 67 ac 41 a8 d0 71 a8 d4 85 85 a6 Data Ascii: [rmOY(w^4oF0JDu'4b(~$berCS3Xix2Nav,]167gYPla\$\|$If>@p}6rR}eJv?SNq@XC)irumXB\jpOgAq
2023-08-10 21:19:01 UTC	2959	IN	Data Raw: 9b df 27 53 06 3a 51 03 29 78 20 32 5f 69 ae a1 b2 2e aa 91 93 d2 f5 9b ed 37 6b b4 9c a0 be 8a be 85 54 24 fc 1b b5 31 f0 f3 63 92 07 77 11 79 b3 35 14 a4 c5 81 df bf a5 89 11 29 fe f8 d8 8f fc f5 f1 94 c3 b8 72 bc 60 a6 a8 68 57 4e db 17 29 3a 47 c8 04 b4 de a5 1e 84 bb e6 6e 31 af 14 a7 62 08 e1 1a 47 ef 11 5b 08 b0 05 7e a8 f0 43 03 aa 47 ca b8 07 7d 5b 2f be 8f d2 51 af c7 9d e1 2f 76 fe 76 27 07 36 34 ce 6d 61 20 b8 e1 48 69 cc d9 d6 cc 14 be 5a ae 4a b7 28 9d 55 8f b5 bf fd 72 ce b4 a7 5e 84 33 a0 17 8b 4a 8c b5 04 ea c4 09 e5 7a 3c 4f 98 46 e4 8c 1a 5b 0c 6f 50 6f 4e 3d 88 bf b4 f6 13 4f 3d e5 d6 65 91 64 d3 d9 48 2f 71 58 34 22 db 67 09 de 4e 92 78 63 5e 75 17 28 d4 12 af 88 a8 ae d0 d0 17 45 38 5d 3a ff c0 09 40 67 46 be 61 0a b4 a3 0a 78 82 b3 Data Ascii: 'S:Q)x 2_i.7kT$1cwy5)r`hWN):Gn1bG[~CG}[/Q/vv'64ma HiZJ(Ur^3Jz<OF[oPoN=O=edH/qX4"gNxc^u(E8]:@gFax
2023-08-10 21:19:01 UTC	3216	IN	Data Raw: f3 db 05 56 15 22 b4 0f a3 c6 7c d3 03 5e 5b 98 2b 58 d9 1d a2 fa ce d2 fc cf 85 2d c2 5e 88 b1 fb d0 74 94 20 fa 5d b1 5c 8c 33 61 cc 7b 1f 85 08 88 13 0a ca 1a 91 2c e3 6e 6a a9 df 19 9d 5e 3e 14 a2 ed 68 12 bf 88 54 22 78 93 fd 98 c4 1a 03 57 29 23 b9 b0 18 2f 0e e6 64 e0 2c bd 66 4e 6b 7c 70 10 48 ae cb ab f0 65 63 f5 e6 38 68 e2 dd c6 c2 18 d3 f9 14 dd 43 79 f8 af 87 9f 5a 56 15 c1 42 8a ab 3b 6e 98 0b b3 94 2b da dd b0 2f 68 de 2a 01 26 08 38 23 12 ba 12 93 2a d8 50 8b 94 06 1b 76 21 d3 84 f1 8c 2a 1f a5 58 85 25 4e fd 10 84 bf c9 42 4c 56 1c 8e a7 68 a3 40 a1 15 1b c9 e1 e7 35 85 13 c2 58 ae d5 d3 63 72 3e 38 0b ed 6f 87 fc d2 c3 e0 7e 9c 3c 46 52 b2 17 35 ca 6c e4 0c c7 39 e9 12 c6 c6 4c 48 6a 77 46 c4 8a 0a f4 a7 88 52 c8 c1 48 c0 a6 3b 49 da c5 Data Ascii: V"\|^[+X-^t ]\3a{,nj^>hT"xW)#/d,fNk\|pHec8hCyZVB;n+/h&8#Pv!*X%NBLVh@5Xcr>8o~<FR5l9LHjwFRH;I
2023-08-10 21:19:01 UTC	3229	IN	Data Raw: 07 04 15 bd c4 90 1d f9 87 56 46 8e 09 6b a0 5f e2 ed d3 a7 e5 db a7 c5 db a7 f2 ed 8b f2 ed b3 e2 ed 33 f9 96 bb 2c 27 53 be 7e 2e 5e 3f 7b 52 7e fc a2 78 fb 42 be 7d 5e be fd a1 78 fb 83 7c fb d2 50 16 51 be 7d 29 de 3e 1f 35 ed ba cc 69 98 68 1b 26 d8 d1 a7 d9 86 d9 75 2a 73 6c 77 c4 c4 3a 0d 53 6c 97 73 ea 34 4f b0 2d 26 d5 69 98 5e f1 ee a9 d3 30 b9 e2 dd 33 a7 61 6a c5 bb e7 4e c3 bc 62 77 69 32 9d 86 69 15 1f fe e0 34 4c aa 78 f7 d2 69 98 52 de 95 f5 40 11 7a fc 18 71 09 79 99 d7 09 e3 7d 94 bc 4e 6e de 9a f2 a9 7a 7d 7a 61 8d 57 14 6e ba f7 74 6b d9 74 b6 b7 e1 59 03 ea 75 68 72 7a 56 8a fc 28 2c 65 61 09 ca 83 d8 9f db db a9 99 5b 14 f1 85 22 2f 89 6d 5d 8c 57 12 bf 85 36 ae 3b 62 71 ac 04 61 2b 32 30 18 15 ac 37 c3 2a bf 91 28 fc b1 3b 84 7b 20 Data Ascii: VFk_3,'S~.^?{R~xB}^x\|PQ})>5ih&uslw:Sls4O-&i^03ajNbwi2i4LxiR@zqy}Nnz}zaWntktYuhrzV(,ea["/m]W6;bqa+207(;{
2023-08-10 21:19:01 UTC	3233	IN	Data Raw: 54 0b 30 4a 51 bd a9 7f 69 2b 58 d6 15 04 ae b1 b5 65 d8 08 65 df 31 fe f3 3f fe 6f c3 f9 83 f1 07 1b 7e fd 3f c5 af ff 0b d6 ef 0f 06 fe fa 9f c5 af ff 01 bf fa 7d c4 ae 08 da 0c ec 25 9c 87 70 62 42 cf 1d e8 c6 51 90 4e 3f 24 31 3d 4a 5a 5c 9f 18 dd 51 98 48 e1 3f 40 17 6f 93 20 83 52 1c 5f f9 51 26 af c7 63 96 0d 86 82 7c 30 47 3a 26 00 ea 8e 84 89 1d 5a 24 27 93 8c 18 c8 e1 00 dd 23 c8 9c 9f f2 fb f0 32 4e d2 00 35 3c c7 18 97 46 d6 39 44 f6 67 00 2d 2c 21 e8 79 1f 4d ee 6f 82 99 f7 25 4c 52 b7 5b d2 f9 65 30 b9 12 2e bf 3e fb 5e 20 b1 be a7 2c 46 7b 5e 14 1d c6 93 c0 d2 dc 34 50 42 2b 3b 86 7a fa e2 0f 59 05 d9 83 d4 ce a3 db 30 62 d6 5f 84 31 23 63 67 26 88 7a 62 6e f9 b5 55 a0 6c b3 45 45 4e c7 9e 10 17 32 dc e2 02 9d fb cf a2 e6 aa 15 b8 c8 bb 7b Data Ascii: T0JQi+Xee1?o~?}%pbBQN?$1=JZ\QH?@o R_Q&c\|0G:&Z$'#2N5<F9Dg-,!yMo%LR[e0.>^ ,F{^4PB+;zY0b_1#cg&zbnUlEEN2{
2023-08-10 21:19:01 UTC	3246	IN	Data Raw: 46 82 31 05 ea 38 d3 cd f5 8c 9d 2d 72 67 d5 8c 8c 14 30 27 34 83 8d a0 f8 39 b1 0c d0 52 ab 56 76 7e 3c 73 67 3c e6 69 dd 31 f1 ce 81 a8 d9 b4 ff e7 03 75 0a a4 4c 80 7a f4 b8 f5 bb 9a b7 72 94 c7 d5 e9 90 98 02 88 14 ed 94 e1 dd 98 f6 48 2d 56 14 e5 cf 48 97 62 95 2e b9 3c d4 82 48 af 5f 8a 1a f4 a1 ca 01 97 73 c6 aa 09 f7 6c a7 24 1c 6f 15 47 88 f1 80 cb 06 25 cf 2f 7f f2 e9 36 9e e2 48 22 7c 45 27 f0 ae cc 77 9a 5c db 63 9f fd e4 49 5a 96 d6 f9 68 82 16 2e 64 0c 79 3d 2d 1e ab c5 19 3c 4a 56 7c fa 6c a4 43 ab 3d 21 c5 9f f4 55 2a 1d 2f 21 07 93 26 34 4c b4 a8 d2 b5 47 c4 ec 60 33 17 3e 54 5f 78 af f0 99 75 b5 80 82 91 65 c9 8c 01 cd a8 85 11 55 ff 5b ce 08 97 d2 eb 9c 23 da 0a 5a f8 b4 0c d1 65 c8 f2 87 c8 45 31 03 6f 05 05 57 20 7d 49 03 54 15 1e 03 Data Ascii: F18-rg0'49RVv~<sg<i1uLzrH-VHb.<H_sl$oG%/6H"\|E'w\cIZh.dy=-<JV\|lC=!U*/!&4LG`3>T_xueU[#ZeE1oW }IT
2023-08-10 21:19:01 UTC	3250	IN	Data Raw: 11 5d 3c db 88 f4 01 69 84 e8 d1 40 68 e9 6c f4 f1 b2 36 20 76 bb 9e 7d d3 09 6d e8 d9 90 af 6a e8 a2 f3 b3 8c 7e f4 7f e8 e8 d1 fb e3 96 7f e0 df 1f 74 b6 2f dc f1 2e d8 17 b6 ef b4 ef 58 3b f0 a3 7e 01 35 8a f4 09 d8 9a 3b 9e c5 5f ea 17 94 89 72 58 cf b3 50 0f ae 51 4d 3d e6 e7 e7 aa 78 0c e0 bc 31 92 09 c7 be 3b 13 c3 71 5e 92 a4 9f 8d 72 e8 67 a1 49 65 f8 4e 06 f2 7f 81 f9 51 81 b9 8d ff b1 4c 78 8c f0 fd 2f f0 3e 02 2c ae 86 f1 7f 41 f9 1c 50 16 dc 67 ab d5 b0 15 87 ba 0e e5 c1 02 91 bd b3 68 04 1d e9 16 6a 5d b3 00 18 53 82 95 a6 4c ad 86 3a 88 83 69 09 d5 52 99 50 2d d5 f2 03 6e 7f a8 b5 73 a1 08 9e 9c a9 7c fc f1 3f d0 51 3f 3e 61 d4 bb bb bb 7f a0 a3 de 9d 30 ea 0f 7f f8 c3 2a b3 c1 0e f2 33 f3 1a 7c 71 5e 10 42 f2 b6 cf d0 92 76 13 3f b6 03 3d Data Ascii: ]<i@hl6 v}mj~t/.X;~5;_rXPQM=x1;q^rgIeNQLx/>,APghj]SL:iRP-ns\|?Q?>a0*3\|q^Bv?=
2023-08-10 21:19:01 UTC	3263	IN	Data Raw: 43 f9 0f 5d 3a f2 53 77 fb 43 97 77 1e bf 7c 29 38 3a a8 83 9c eb 34 b6 3f d4 d8 59 68 dc b9 70 f9 bd a2 6e 86 34 4d 95 a2 e0 ff 04 63 4a 98 47 c0 c6 88 78 85 95 50 3e 16 2d 70 4e 32 e2 b3 87 4a 0c 0c 1a 29 5f 1c fb 7b 77 03 80 6b fe 06 26 09 e7 88 48 86 7e d9 79 7a f1 49 b5 fc 81 df bb 1b 4d 28 0e 67 89 94 ec 0b cb 2e cf 57 94 cb 79 0a 29 e7 ae 19 8d b6 d9 35 23 d4 fc 32 66 b2 54 64 c5 07 b9 63 73 a3 1b bc 87 29 39 af bc ff 19 67 6c 60 49 c9 5b 06 97 18 fc 4a 1c bb 27 6a 54 27 34 cb a6 eb 36 0c d1 b7 1f f4 81 0f d2 9d 2d 84 6a 17 13 c2 d3 ad d8 5d a0 6e 63 8a e7 9a 4e 28 8f 12 2e df a0 e5 12 5d 80 a3 ba d0 20 13 c7 2c 09 36 83 26 cb fe bd bc bd d3 41 5b c1 41 c1 e3 43 f2 0e c4 d6 26 cf 51 7c 67 68 67 c2 08 e6 e6 fc 71 d1 71 df 00 d1 c9 be 41 05 3e 48 50 Data Ascii: C]:SwCw\|)8:4?Yhpn4McJGxP>-pN2J)_{wk&H~yzIM(g.Wy)5#2fTdcs)9gl`I[J'jT'46-j]ncN(.] ,6&A[AC&Q\|ghgqqA>HP
2023-08-10 21:19:01 UTC	3267	IN	Data Raw: bd fd c6 17 7f fd b7 ff f2 9b 4f 00 34 7e f2 db cf 43 ff 3f 79 fb 3b b4 04 3f fe c5 6f de fc 0c 2c ec db bf f8 05 7e fa e6 bf d2 da c3 c0 3f c5 40 ff c5 c7 de fe fa 77 68 4c 7f 4f 73 ff 01 0d f1 5b d8 f9 c7 5e 79 f8 ea 2f 1e 7e ec 3b 0f 3f 06 fd 7f 91 06 0d 20 fa 09 0c f3 37 3f fa 19 4e f2 d5 8f 09 98 7c ef b7 b8 0c f0 ff df 7f fb bb 9f 7b e7 1b df a3 69 7c 81 b0 e1 2b bf fe ea 3f bf fd fd af 42 3d 1c cd 9b df 79 fb 1f ff 16 16 91 f0 f4 ef df fe ee 0f 71 4c df ff ea db 7f f2 0f 6f ff fc e7 d4 d8 6f ff 1e be ff e4 9d 5f bc f9 f0 c1 d7 61 d6 ef fc 10 00 fc e3 5f ff 33 f4 fa b9 df be f1 06 37 03 4d d2 aa 7c f1 37 df ff 34 a3 c9 db df 85 4f 7f f9 ce d7 ff 8e f6 00 77 fe 69 9e e0 27 be 01 e3 83 7a ff fe cb ef be f3 c6 27 e8 23 c0 fd fb d0 cc 3b 3f fb ca 3b ff Data Ascii: O4~C?y;?o,~?@whLOs[^y/~;? 7?N\|{i\|+?B=yqLoo_a_37M\|74Owi'z'#;?;
2023-08-10 21:19:01 UTC	3273	IN	Data Raw: 63 a8 5b 60 45 5e 47 ad c2 3b 3d 12 80 32 57 a6 92 68 9c ed 47 6e d3 de 60 3f 42 d6 3f 2c 70 78 64 60 e1 60 d8 a3 cf f2 7d 19 a1 bd f2 70 7f 88 2f 66 77 2b 98 98 5f a7 2d 2c 6f 5f 06 57 5c 2e 6f e5 14 cd 99 1b 98 05 01 cd bf f5 90 40 29 f9 34 04 17 bd 14 10 57 70 d8 5b 90 08 a3 68 a9 5e 14 7c 2a f9 51 79 b1 38 19 a0 f7 55 9c b4 47 94 ca 15 38 9b 2e bb bd 34 58 1c 5a d8 98 27 ad 49 bb 97 b4 0f 55 50 9d c6 45 9a e7 29 66 1d a3 4f 22 9d 25 27 9b a4 21 f5 ba 7d 4c af 33 2b af fb 70 b7 a8 0b eb 96 15 8b 1e 98 5c 4a 30 37 37 39 ee 5f c4 1c ed 68 21 30 fd 71 89 81 ac d4 64 b0 5d d2 7b f8 d0 6c 75 16 7b c7 df 6f 61 a6 dc de 71 fb b2 b5 5c 3c 78 30 f9 ce d8 fd b9 3c 5d 41 d3 a2 34 0f cf 83 da 00 ed 35 29 a4 c8 70 72 ad bd b9 78 19 39 81 97 7a 14 e9 e5 47 7f 8e 74 Data Ascii: c[`E^G;=2WhGn`?B?,pxd``}p/fw+_-,o_W\.o@)4Wp[h^\|*Qy8UG8.4XZ'IUPE)fO"%'!}L3+p\J0779_h!0qd]{lu{oaq\<x0<]A45)prx9zGt
2023-08-10 21:19:01 UTC	3280	IN	Data Raw: f7 82 1a 76 b7 ba 2e a7 ec 4c c7 ab 6b 42 a5 80 12 70 c2 74 ba c9 e6 5a f5 0d c6 a0 5b 5c 0b 59 b4 b9 b9 d4 25 b6 36 85 5a 78 9a 19 d4 78 af 74 87 f6 7c d8 b3 e9 04 94 b8 1f df 1a 69 99 1d 1d 28 90 49 e3 93 de 16 50 dc ba fe a2 74 79 40 e8 63 be 6e 0e fc a1 22 11 c5 bd f4 63 82 e1 51 66 1d 83 e1 08 ca b7 29 46 99 66 6d 2f 14 2e e9 e4 95 c7 d6 dc 50 27 ce 72 ca 79 06 74 b5 60 79 aa 3a 5a 96 03 9f 7f 3e 9e 9a 81 c2 e1 be af d2 8f d7 7f 21 0d 46 d2 07 2f ad 92 23 5e 53 a4 e0 c7 6c 2f 81 06 07 f0 12 6f 52 86 01 4c 84 4c bd 6a 4b 45 95 96 99 7d b8 54 e0 2a 59 46 61 5b fa 62 f1 e9 c1 83 ad 8d 9e 53 4c e9 cc bf bc 85 c7 e9 b2 43 69 fd ca cf cb ed b2 27 26 55 b6 4b e6 36 f9 96 e5 ec 55 24 90 76 df 63 fc 2e ed a6 64 76 9b 30 01 4e 63 86 51 9d d1 8a ed 7d 74 89 7d Data Ascii: v.LkBptZ[\Y%6Zxxt\|i(IPty@cn"cQf)Ffm/.P'ryt`y:Z>!F/#^Sl/oRLLjKE}T*YFa[bSLCi'&UK6U$vc.dv0NcQ}t}
2023-08-10 21:19:01 UTC	3284	IN	Data Raw: 61 eb a2 13 0a 1a 10 09 95 92 94 93 30 f9 00 77 b3 a0 26 e1 36 cc e2 30 c9 81 f0 41 70 9b 86 18 91 a2 11 c0 13 f7 26 fd 80 6c 09 85 5b 80 7a d7 40 1b 1e c1 5c 11 73 9f 00 63 44 74 0b c6 49 0d e6 3e 0a 9b b6 57 2c d1 22 63 e2 66 2b b8 21 83 3b ac ab 52 f9 d4 3c 21 d3 15 20 68 7b 90 74 32 20 b1 23 20 f9 76 d8 e8 7e e4 25 f1 cb 1b 16 cd 48 57 cb b9 55 9e 7d 03 4a 97 a1 c0 c8 6a f3 bc 25 4b 1b e7 f8 cf f9 f6 ce f5 74 76 be 63 24 98 c1 0f 5d eb 3b cf ca cd ca 83 c5 bb 6e 22 98 fb 4c b6 cc 70 6a 6d 79 a6 a0 dd 51 ac e9 ca 33 57 68 e5 e6 25 34 bb e2 07 2d cd dc c9 ab fe 4f d3 77 3e cd 9c e6 a9 eb 2a cb d4 f2 6c fd 9c fd 81 15 67 e6 e8 85 9a ee e7 d7 9f 3f 3c 7d fb 15 a3 eb da 3a a3 94 c6 5d fe 83 29 73 0a f9 af 47 90 19 e4 69 c1 eb d2 25 31 d7 d3 dd 5a 21 22 fe Data Ascii: a0w&60Ap&l[z@\scDtI>W,"cf+!;R<! h{t2 # v~%HWU}Jj%Ktvc$];n"LpjmyQ3Wh%4-Ow>*lg?<}:])sGi%1Z!"
2023-08-10 21:19:01 UTC	3297	IN	Data Raw: 31 22 79 e2 84 42 9d a0 70 62 35 32 24 64 19 bb c8 10 a1 4d f8 c3 c8 7d 63 55 25 e1 a2 eb c5 9f a3 e1 8b f2 24 a1 c2 91 c6 8e f8 8a 44 53 df 9b 52 c5 4a b5 68 aa d5 73 3d 54 b0 69 6f 50 a9 de e6 09 3b 6a 66 52 69 bb 6e a8 96 5a 17 15 b2 79 47 ae 40 64 92 80 c2 8e cc 29 51 44 44 77 05 39 f8 28 f3 47 cc 9a ce 6a dd 92 25 ac 60 01 c6 b0 2f 85 e3 99 dd 38 f4 9b db c0 fd 26 f6 46 9c 43 59 9c 5f 9d 84 28 8d fb ee 8b e4 5b 76 be ee 4d 16 46 84 fa e4 56 cf 4c 86 38 b5 7b 1b 5b d7 7f d0 29 83 d2 96 17 ad 8c 66 8c 57 3c 9f 56 71 c1 ba a6 5b 93 56 50 ba ed 7e 05 f2 c8 72 e9 ed 57 a0 81 3e a1 81 47 df 24 cc 51 79 e2 23 27 6a 91 91 eb 5a 20 8a 1d 11 36 41 0f 9a 00 34 d4 d3 16 13 49 a5 5e 78 f3 5e 1f 70 c7 08 fe 7f 3e 0c a6 58 35 f4 38 e1 e9 70 c4 33 83 39 12 b9 34 10 Data Ascii: 1"yBpb52$dM}cU%$DSRJhs=TioP;jfRinZyG@d)QDDw9(Gj%`/8&FCY_([vMFVL8{[)fW<Vq[VP~rW>G$Qy#'jZ 6A4I^x^p>X58p394
2023-08-10 21:19:01 UTC	3489	IN	Data Raw: 98 bf ee eb 73 fb 47 fb fa d4 be 55 8f 39 de 3f 39 7d da ee 4e 59 73 f7 85 f6 a6 dc 7a cb 78 ff 78 ff fe 27 da 7a c9 27 fb fb cb 5e 38 bd 57 00 ee c7 a7 fb 47 7a 58 6e b7 e2 2b 5d 5f 5a 18 fe ca 1a 10 5f 6c b8 b6 af 8f ae 6f 45 ad 56 47 e6 94 fd ee b2 58 13 7d d3 37 a9 c7 7f fb 56 2f e1 cc 08 71 c5 1d 3b fa c7 f9 d9 c5 cd 93 fd 67 9b cd d5 93 df fe f6 a7 9f 7e ea 7e 0a dd e5 f5 d3 df fa be ef 7f 6b 77 2e 96 d3 bd 11 29 f2 aa 0c ed fb ef 97 f1 be b2 bb fc f9 b9 0d d2 ca c9 5d 9e 9c 18 5a 79 7a 75 fb a5 d7 f7 bf 7b b5 da 3c 33 94 b6 d8 82 5f f9 e4 bb d8 e4 a9 4b 73 9b bb dc b8 2e b4 b1 f1 5d 6e 87 ce 37 ce fe e9 9b f2 46 1b ba d0 4c 6d ec a6 c6 8d 9d b3 87 ed c6 b6 7c ad f1 b1 7c a9 fc ea bb a1 7c c4 b7 a9 7c 2f 76 ae 5c 6d 28 bf 73 db 95 0f 95 6f a7 c6 f5 Data Ascii: sGU9?9}NYszxx'z'^8WGzXn+]_Z_loEVGX}7V/q;g~~kw.)]Zyzu{<3_Ks.]n7FLm\|\|\|\|/v\m(so
2023-08-10 21:19:01 UTC	3505	IN	Data Raw: 6d 7d c2 ff b1 55 e9 17 63 23 b4 a4 1e 29 91 c8 11 0d 04 59 39 a8 9e d8 44 46 56 57 0b e7 44 96 50 61 7b f0 6e 20 e2 85 c2 a0 08 80 7a d0 1e 13 71 9b d4 08 78 a4 5a 55 97 fb 51 b5 12 14 3d f0 24 87 82 24 9b 18 07 e8 15 c8 19 3a 55 02 ed c1 a7 04 45 d3 78 9e 5e 89 34 8e aa 0e c6 d6 28 dd 81 fc dd 2d 19 dd b3 f7 03 eb 04 05 c1 b9 16 d1 86 f7 e6 b9 48 c2 bd d4 39 18 72 b7 cd e2 4e 21 b1 92 3b 1f e9 0d de a2 7c 84 d5 9c fe 53 33 2f b2 86 d0 db 11 69 9b 73 0d 06 0f 8c a5 f5 c2 5b 9d 63 29 1f f6 8a 43 44 00 a6 0c 9e b4 0d b0 d1 99 b3 1e e1 26 79 e9 a4 5c cf 2a 02 b0 2c f2 c5 5b d7 0a b0 52 ca 49 88 42 90 d8 08 e2 87 62 6f c1 07 60 b1 76 1b 1d 82 7e 64 ec d7 6d c3 b5 f6 6c 6e a6 88 e0 4c 48 52 66 01 8b 1e 25 7a 8a 4e 20 fd d4 0e 94 82 70 5d 98 66 00 65 55 53 de Data Ascii: m}Uc#)Y9DFVWDPa{n zqxZUQ=$$:UEx^4(-H9rN!;\|S3/is[c)CD&y\*,[RIBbo`v~dmlnLHRf%zN p]feUS
2023-08-10 21:19:01 UTC	3506	IN	Data Raw: 08 98 4c d9 4e 0c c6 a3 59 16 cd 2c 78 4f 0d 16 dd 77 b5 9f 0a 73 6f 18 fd 86 38 66 b6 e8 c0 26 2e a8 e1 28 8d 3a aa 73 49 5f dd 76 64 70 c4 6e 94 35 00 55 c4 1e 3a b5 a0 b0 ba 4b 13 97 4e 8c d6 12 26 0d f5 44 a1 4e 15 d1 0c a1 81 18 55 c7 ca c1 00 4f 26 78 45 81 82 64 a2 46 62 d3 59 47 52 db a4 49 43 3a fa b0 68 39 8e 26 2c e1 49 16 81 9a 08 41 8b 87 ea 19 87 0d 24 a9 a0 06 1e 67 30 66 05 98 59 90 6c 14 d3 51 65 92 89 3c c3 15 44 c8 6d ea 62 ed fd 05 98 9b 2e 08 0d 7a cf 76 1c 48 74 23 60 ec 3b e5 6d e4 8a de 61 65 f1 ab f2 c7 02 10 22 cf 6c e4 81 95 56 14 7c 71 9d d2 d1 9c ba c6 0e c4 82 1b e5 95 2b 6d 53 2d 5c 3a f5 39 62 23 38 00 2f 44 3a 6b 57 45 9c 14 36 7c 61 2d fd b1 ad e7 c4 29 32 8d aa 6a 74 2d 7a 95 02 20 56 ca 7a 56 95 1f e4 98 0a 30 35 ae b6 Data Ascii: LNY,xOwso8f&.(:sI_vdpn5U:KN&DNUO&xEdFbYGRIC:h9&,IA$g0fYlQe<Dmb.zvHt#`;mae"lV\|q+mS-\:9b#8/D:kWE6\|a-)2jt-z VzV05
2023-08-10 21:19:01 UTC	3515	IN	Data Raw: e9 3a 7c fc 15 14 d1 aa fe cb 74 4a 1b 02 08 9c d9 7c 26 c5 33 d6 3d 29 ae c9 27 42 ee 31 e0 6b f2 db 81 b4 8b d9 16 f7 a4 10 7c 7c c3 b7 24 5a c6 e0 2d f9 54 dc 92 8f 07 df b2 4d cc d3 6f 1e b3 51 cc d3 c1 53 b6 89 79 8a 06 31 a4 68 db d0 4f c3 77 29 58 93 e3 c9 47 56 51 fb e5 e7 71 fc cb 37 5e d8 b1 75 d4 5e 73 c1 ee 65 3e 85 23 d8 95 ba 35 fd 7e df 5b c0 ea 7f 82 bc 93 fc 25 65 72 4b df be 79 59 9d fc ad a9 ec f6 86 ca 76 ef 49 8a bb e8 56 79 f7 7e 02 e8 9b ab 2e f4 f6 b8 9d ef 92 db eb 3f fe b0 aa 1d ae 57 ce c7 63 c8 c7 e7 1c 39 94 0e b6 f1 3e ae 7e a8 fe d4 6c 43 0e 42 d4 bb 84 dd 7f d7 45 1c 36 b1 c7 55 37 ce a3 9a ee df 7c b3 fd e7 cf 69 11 5a 48 8a 22 17 d0 79 75 fb fc e0 cf d7 cd fa fb 58 a4 cb f3 ef 92 d6 61 77 92 8f a1 6e 07 1b e1 ba 7f 1b fc Data Ascii: :\|tJ\|&3=)'B1k\|\|$Z-TMoQSy1hOw)XGVQq7^u^se>#5~[%erKyYvIVy~.?Wc9>~lCBE6U7\|iZH"yuXawn
2023-08-10 21:19:01 UTC	3531	IN	Data Raw: 00 70 58 00 10 21 25 cf 01 1a 13 8c 8a 30 cd af f6 7f c3 67 35 de 69 40 cf f3 96 ee 51 d8 09 f8 b3 00 ea d6 4e 5a 2c 00 2b 40 53 ac b2 da ff 98 dc 95 7e 8b 29 0b 74 54 d6 06 b0 13 52 35 e9 2e 29 db 59 b3 5d 18 c9 da ed 62 59 21 c9 bd 97 47 70 58 84 7c f2 86 71 48 28 ef 67 b2 b9 9e 0c a7 61 36 bf 21 cc b7 7b 09 6c 0e 7a e1 c3 8f 61 46 7f 65 ec 17 e0 e7 92 5b 7e 7d 2c 87 42 fe 21 bf cf c3 8e 3d 86 a1 7b 64 a1 61 b9 35 74 18 73 85 ba 0f 30 51 40 f7 0a 16 36 55 f1 b9 94 43 45 3f 74 07 78 e3 f2 ee bc 8e 45 25 38 36 5a 53 84 e2 4b 47 a6 e8 96 87 7f 23 4e 46 5f 8e 12 27 57 3a 6a a5 6c d6 8e cc 12 52 bd 10 08 b8 d2 0c a7 a1 88 c8 82 5f cf 10 07 9a e8 58 85 00 f0 c4 3d b9 27 29 a0 2e 4a 03 e6 00 8c 6e 9a 7d c2 91 77 67 62 e8 1b 5d 1a 8d b7 c5 6d 6d 79 61 17 0f 3f Data Ascii: pX!%0g5i@QNZ,+@S~)tTR5.)Y]bY!GpX\|qH(ga6!{lzaFe[~},B!={da5ts0Q@6UCE?txE%86ZSKG#NF_'W:jlR_X=').Jn}wgb]mmya?
2023-08-10 21:19:01 UTC	3547	IN	Data Raw: df 49 0e 83 71 00 17 a5 87 88 e0 fe 1e c5 1a c5 e1 7a e1 bd bb 89 62 09 23 f1 ca 16 17 d2 23 d9 eb 6a 24 e2 4f ea 45 b4 21 aa d2 e5 7e 78 51 96 06 b1 a5 9a ab 1a 15 b4 68 ee 45 8e c5 06 cb 2f 6c a6 3f 07 57 b3 10 76 8b a9 b9 b1 21 f3 af 45 ed c7 0c 3a 7a 71 36 05 a7 76 eb c5 fb 43 e9 92 09 7c 51 2b 24 17 93 5e 8a 5f e9 a7 da 1a 7f 2c 5d e7 41 22 0d da 0b aa 66 39 4f bd 38 12 45 da 3e 84 a7 d2 4e 51 d9 1f 1c 2c f4 49 c1 d4 ab a5 75 96 0f a7 fd 75 65 b5 7d 85 9b 15 33 db d8 66 5e 2a c8 4b 35 1d 0b 22 8b 51 a7 dd 0f 09 aa 14 a9 97 70 b4 e7 cb 25 74 21 42 9c 5b cc f0 8b 2f a6 36 38 5b 41 64 8d f3 b8 d9 7a d3 77 5a 35 6d 9c 76 90 57 53 bd 34 b7 2a 2f 1f 1e e8 bb 53 b4 d2 d8 c9 2a b7 a1 4e b4 a3 0a 5f 0d 7c 56 9a 32 a6 7a 46 50 f3 f0 12 25 78 b4 0d 43 64 ca da Data Ascii: Iqzb##j$OE!~xQhE/l?Wv!E:zq6vC\|Q+$^_,]A"f9O8E>NQ,Iuue}3f^K5"Qp%t!B[/68[AdzwZ5mvWS4/S*N_\|V2zFP%xCd
2023-08-10 21:19:01 UTC	3549	IN	Data Raw: 09 64 03 51 d1 80 ab fa c9 bf d1 0e 35 2c af b4 15 ad 63 17 0b 67 20 d7 8d b6 65 ec 61 11 15 8f 23 94 1a 37 ad dd f2 8c e7 41 21 56 26 07 6d 54 79 b5 af c7 ad 21 1a 6b cc 6a 83 35 9b 88 5a bf 58 b2 49 2b cd 1b 4d 98 05 bf a2 6a a2 67 18 54 65 f1 02 61 f9 dc 2b 57 5e cf fb 25 47 7d d9 1d ac 1c 8a 3c d7 b7 65 fd 03 bc ea cf ee fc 70 4e 2c 0f c1 9c 32 19 c1 e4 34 5e 74 56 e7 50 1f f3 3d a9 b0 70 1c b3 db 6d f9 55 24 94 4f cd 4d 20 43 a7 d4 e7 de c9 01 08 a5 ad 88 9e 59 88 d8 88 f6 13 8d e3 57 81 62 12 71 e1 41 1d 9c c5 b0 3b 4f fa d4 85 0d c9 8e 3a 19 bb 45 27 1b 0e 82 08 9b da 1b 07 47 c2 ce fa c0 99 b7 88 cf f9 fc 0f c7 e7 e4 f0 9c c9 dc cd de ba 99 bf 9f 04 ee 7b f7 d2 0f 1d fd ad 90 6b b1 53 d1 d6 4b 8f 95 c8 9c 32 2e e7 ee ce ae 8c cb 89 64 e6 2e 07 97 Data Ascii: dQ5,cg ea#7A!V&mTy!kj5ZXI+MjgTea+W^%G}<epN,24^tVP=pmU$OM CYWbqA;O:E'G{kSK2.d.
2023-08-10 21:19:01 UTC	3557	IN	Data Raw: 00 bb e0 de 2e 26 0a f7 47 ea 63 f1 6d c9 d3 70 58 fa 20 80 b9 c8 e4 8c 5c a8 8f 0b d7 bb 80 f2 6b b4 a4 c3 a0 07 ab dd b3 8c e0 bf 58 20 0c d0 c8 b7 49 68 b9 90 96 48 a3 06 e0 91 07 81 7f 5c c8 bc 6b b5 12 7b b5 37 79 8a 36 7b 21 2c 5c a8 0b 39 5d a3 53 64 52 48 f7 b3 b7 c4 4f dd 7e 10 4d c2 a5 e7 a7 e6 85 7d d5 3f 11 43 90 f7 ba 02 ad 7d 2a 67 c9 2a a7 24 78 3f aa 0e 0a 5a 76 27 2e 53 19 8d ad 42 79 3c f6 74 c9 9a 02 fe 2e 7f c3 f2 73 35 be a6 45 95 89 76 59 5f cd 0b dc 27 1c 72 d4 fd 2f e6 09 3b 30 d2 00 cd bb 65 12 8e 44 ee 0a d7 7b 22 b8 f0 13 9e 5a 29 a1 d8 b8 4b 1c dd 29 94 67 f1 be e7 e1 ce 88 26 5e 38 35 da 06 c1 5b 5e 72 47 da 27 6d ed 1d ea af cb 8b f0 42 fb a4 66 b4 36 37 f7 f7 ec a9 b6 80 2d 61 9a d2 d8 68 b9 95 48 93 66 48 62 f8 23 92 5f b8 Data Ascii: .&GcmpX \kX IhH\k{7y6{!,\9]SdRHO~M}?C}g$x?Zv'.SBy<t.s5EvY_'r/;0eD{"Z)K)g&^85[^rG'mBf67-ahHfHb#_
2023-08-10 21:19:01 UTC	3573	IN	Data Raw: c4 7d ed 8c 83 0d df a0 ba 9d c0 ed 57 b6 bb 66 4f 7a 43 67 64 59 73 67 64 2a 1b af 4d d0 cb ac 68 0a de 52 d7 a7 9d 5d a1 6e 85 e2 a9 89 b9 78 aa 9a e6 49 d7 3f 5e 50 91 a0 18 2f 82 65 de 0a 72 46 e8 0d 3d 2f 35 f1 12 8e 88 62 7c fa d0 61 62 c6 2d c5 6c ac 32 12 2d ca 4c e7 a3 d4 95 56 72 83 96 06 e7 98 be 62 11 19 a3 0b 78 26 f4 5d 0d 92 10 e5 7c 55 a1 9c ae 61 60 3b d5 82 55 2b 0c a9 28 32 b4 a2 12 16 cb 88 45 0b 28 66 85 1e 2e a0 9b 25 ad aa 32 82 4f 25 82 b9 4e e2 56 57 fd 15 2f 5f 5d cd 51 8d 45 31 12 10 f0 0b 2c 3d 98 ae 43 b5 b7 22 0d 31 e6 16 8c 29 d1 7b ee c8 bd 1d 03 21 82 9e f3 71 cc 29 d3 56 ec 6f 45 a5 65 e7 4a 5c 21 57 62 63 be 1d a0 e8 e2 db f1 f6 49 9d 8d e1 c6 25 67 1c e9 07 c2 d2 da 02 89 e3 6f c2 5f d8 d1 f3 32 6d e5 00 e8 5d 04 04 7e Data Ascii: }WfOzCgdYsgd*MhR]nxI?^P/erF=/5b\|ab-l2-LVrbx&]\|Ua`;U+(2E(f.%2O%NVW/_]QE1,=C"1){!q)VoEeJ\!WbcI%go_2m]~
2023-08-10 21:19:01 UTC	3589	IN	Data Raw: a1 0c b3 94 29 1c 4d 1e 25 cb 67 b3 07 45 e9 16 8a 84 f1 03 f2 d8 1c b7 97 73 69 e6 9c 41 06 9e 60 b4 5a bb dc 9c 6d 0d 2c 77 e0 66 8e f6 05 f1 50 9a 65 31 c0 f7 d3 44 76 0a 6c b0 ca ac d0 80 c2 43 e1 01 b1 15 ac a0 19 10 ec 1f 51 00 cd 48 bc 48 70 25 e4 c7 20 2e fa 3c 22 f4 3e c1 c3 a4 6d 0d 65 a0 fb c6 07 01 13 5f c1 03 fb 3e 49 b7 42 64 4a 0e 12 4c 67 28 6d cb e8 15 05 40 f5 39 a0 32 d9 94 97 43 e7 61 bd a7 5b 8a ad f4 21 06 4f 45 91 28 84 2a d1 15 87 17 51 41 d4 14 c1 5a c9 e7 08 df 98 f6 d9 30 6b 8a 57 2d 74 7f d9 5b 03 1d 80 5b 6e 25 55 46 4b fb 9d 6a 07 eb b6 68 99 c5 02 70 32 47 f9 75 1d f5 1b d0 aa c5 ee 30 a3 be 00 67 8d 5e 9b df f6 f3 d9 64 12 e6 79 35 74 6d bd 10 e5 20 2f cc df 9a 19 cd ab d0 09 cf 30 77 96 b4 b4 6d 4f 6d 5a d9 29 2d 8e ed 6d Data Ascii: )M%gEsiA`Zm,wfPe1DvlCQHHp% .<">me_>IBdJLg(m@92Ca[!OE(*QAZ0kW-t[[n%UFKjhp2Gu0g^dy5tm /0wmOmZ)-m

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.3	49858	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:00 UTC	2690	OUT	GET /static/webpack/production/c6e3e4b583e4f456ca85.4hVQesaocPlhDG3TlmS2PF_aGVO5vUm3IKz_XfWNwU8.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:01 UTC	2784	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 117779 Connection: close Date: Thu, 10 Aug 2023 21:19:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:35:16 GMT ETag: "a245dbbb2b859a36fee0d6191f25735c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 478446fb4d72a1fd99b9a7a5157265f4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: ZyOam-4ColMw-9FMT7XUVje6FGaj7QCCdZDcXAx009XMU396BVG8cw==
2023-08-10 21:19:01 UTC	2784	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd eb 76 db 3a b2 30 f8 5f 4f 21 6b e6 73 93 1d 5a 91 7c 4b 22 b5 76 96 63 2b 3b ee ed 5b fb d2 e9 7d 32 59 5e b4 04 db ec 48 a4 9a a4 e2 78 3b fa d6 79 8d f3 02 f3 0a f3 7f 1e e5 3c c9 54 e1 42 02 20 78 93 95 f4 9c 5e dd 1d 0b 04 0a 85 42 a1 6e 28 00 d6 83 e7 8f 83 87 f6 f5 f5 d1 e9 de c1 de bb a3 21 fd 63 78 70 bd ff e1 ea e4 b7 8b eb eb 41 69 8d ef df 3f 7d b6 db b3 79 74 6f 7d fa d4 9a b9 33 12 5e df 40 23 12 fe 6f fe 63 ee 8f 27 84 ff 18 4d 82 f9 f8 7a 1c 8c 22 5e e0 f9 b7 93 39 f1 47 49 f5 7f ba d1 d4 f3 c9 75 4c a2 58 54 f2 dd d8 fb 4a ae c7 24 fa 12 07 b3 ff ed be 7a b3 f5 ea d5 56 b7 f5 d9 79 6a 74 bb 6f 7a b7 73 7f 14 7b 81 6f 11 27 76 02 fb e9 f4 e6 9f 64 14 b7 c7 e4 16 20 9d 85 01 c0 88 1f ad d8 69 5d 5f 93 e8 Data Ascii: v:0_O!ksZ\|K"vc+;[}2Y^Hx;y<TB x^Bn(!cxpAi?}yto}3^@#oc'Mz"^9GIuLXTJ$zVyjtozs{o'vd i]_
2023-08-10 21:19:01 UTC	2800	IN	Data Raw: 05 63 e8 11 59 c1 1b d5 59 a3 a0 b3 4a dc b1 53 57 b7 64 95 79 fd 45 be 94 b1 e0 ec d6 12 e2 25 a8 e6 88 f3 1c 7e d9 ad cb 2f 55 11 d5 18 a6 98 aa 59 ae 91 03 e9 cf e1 9d 9c 7e 1b 95 58 68 b7 76 fa 83 e9 98 e6 12 9e b6 09 4c 99 53 5d d4 26 2f 1b a2 62 82 03 cb 86 c8 5c 01 2c 76 fb b3 b7 11 eb 1b fd 95 0e bf ae 64 93 df 78 7c 79 95 7e b9 a1 03 b3 0b 5e 09 93 62 6f bb 26 88 a5 36 fe 1b f5 76 fe 2b 6c e6 6f 9a 36 ca ab 70 40 a3 38 84 5e ed 04 75 e9 46 73 86 5b 97 8d 09 14 af f5 67 6f 34 9b c0 af ce d1 af 01 bd ea 96 73 ee 4e 72 97 ee 24 ab 5b a6 46 99 a1 ed 96 6e ea 71 f6 4a 1c 50 31 0a bf cc b5 01 83 4f 9b 9f eb 06 64 2b f5 b3 22 15 51 24 52 2b eb 8c 5c 20 79 4a a4 ee 71 8c fa 99 72 9b 52 a6 1c 0c a1 aa 66 58 81 f4 78 d6 c1 8a 2a 5d 56 56 1d 75 24 9d 31 81 Data Ascii: cYYJSWdyE%~/UY~XhvLS]&/b\,vdx\|y~^bo&6v+lo6p@8^uFs[go4sNr$[FnqJP1Od+"Q$R+\ yJqrRfXx*]VVu$1
2023-08-10 21:19:01 UTC	2900	IN	Data Raw: 64 fb ab 96 74 85 1d cf 4c 7b 7d 49 9f c6 9d 40 c3 09 85 b2 ec 03 ec e9 56 0e 81 7b 69 08 3c e9 ec 7d 4e 85 6c 7f 55 36 ee e8 e0 d4 f0 54 3a 2c b5 dc 78 e4 22 2f 9a 8d 70 27 79 86 55 d2 43 ae e9 95 ed ab 52 98 a9 ce 51 8f 72 8d f5 03 ce f6 2a 1d 14 9d ec 2d c1 a4 ca b9 de ca 20 7e 7c a4 a5 40 6d 56 79 cd ba ca d1 64 f5 05 ce 04 9c 16 8a 69 54 bb 3d bf fe fb 20 15 9e 03 31 28 7d 3d f6 53 f5 d6 d2 92 13 33 b5 6f 1e 55 ee 03 d5 2d 06 15 c9 6d 13 92 79 77 dd 15 62 59 ff ba 3a f1 18 8c d9 da 50 f1 dc 31 e1 59 e9 86 a8 42 a4 9f 79 af 13 1f 41 15 ab 45 1d ce ae 69 38 26 8b a2 04 ff ba d7 a2 88 e8 a3 c9 c2 51 31 7c 65 c4 d0 7c a3 41 31 8a 75 6f 25 48 22 a4 26 eb 48 45 f2 b5 09 49 cd a4 29 41 af c6 99 3a e9 40 9a 6c 53 a9 28 bd 31 a1 94 b1 84 4a 90 aa 75 48 83 a3 Data Ascii: dtL{}I@V{i<}NlU6T:,x"/p'yUCRQr*- ~\|@mVydiT= 1(}=S3oU-mywbY:P1YByAEi8&Q1\|e\|A1uo%H"&HEI)A:@lS(1JuH
2023-08-10 21:19:01 UTC	2915	IN	Data Raw: 69 40 d8 72 c6 42 40 b7 53 f4 ba 69 ca 87 68 86 fa cd 09 b0 3d 4c 28 01 5a f0 64 31 f6 9b 5e 73 1c c5 98 db 47 64 9c f0 d3 ad e6 d4 4b e6 5b 96 9c 62 5c d4 48 f1 ed 22 bf 93 06 6a 88 d9 2c fe 08 e6 98 a8 b0 0b 15 ba 9a 9f 17 48 6d e2 a9 e3 8c 5d 57 d0 e2 ff 98 f2 fd f4 30 13 76 5c 38 25 b9 c5 96 d1 d4 cc 4d e5 87 54 7c e0 26 5f 77 36 10 d6 5d 37 18 a4 59 69 9a 95 8a 91 dc 2e dd da 08 fb 9f 45 ee 57 ca a7 54 f9 04 0a 26 33 0d ce e0 2f 66 11 0c e0 2f d5 cc 4a 37 76 0f cb 01 ad 7c fe 9a c5 2e bb 67 e1 51 5a 32 ad 0c dd 74 c6 e7 e9 79 f7 e2 c2 4d cf 7b 17 e2 81 c9 b4 a2 ef e8 1d c3 38 b7 37 65 ea 9d 3a ac bc b8 71 b6 7a b0 54 fd 74 0d 80 a6 06 80 26 64 3a e0 9b 7a 81 66 90 a9 3d 3d 5f 5c 00 e7 18 c3 3f 2f 5e 4c 98 a2 7d be 70 b0 f8 c2 d6 2b 8f 6d d6 e6 f1 31 Data Ascii: i@rB@Sih=L(Zd1^sGdK[b\H"j,Hm]W0v\8%MT\|&_w6]7Yi.EWT&3/f/J7v\|.gQZ2tyM{87e:qzTt&d:zf==_\?/^L}p+m1
2023-08-10 21:19:01 UTC	2931	IN	Data Raw: 8b db f8 f6 17 f4 7f 00 e1 94 ca d4 fa 5d 75 50 a8 b9 53 72 cd 1e cd f2 57 cc 25 17 f2 67 9c 6e ea 8b bc 55 88 7d 92 b0 9b 37 ab d4 91 bc ea 08 ba 1b 74 5b 21 e2 66 62 28 2d dc aa 9b 5e ed d6 33 a0 06 39 69 78 bb 70 53 8b 37 f3 f9 5a 85 fb 5c b9 70 c6 9b dc 82 8d aa 64 99 f8 34 36 15 44 0d 57 14 a5 f4 90 1b 68 cd 9b 09 93 0d ac 7c 4e 88 e9 4d 45 4f c3 8d 44 f9 9c f4 81 d6 30 d8 9a 2e 0b cb e7 03 24 b1 a1 29 7a c7 60 9d 2d 9f 8e 36 ce 1a b3 d9 31 99 9f cb a7 23 68 77 b3 25 32 dd 00 96 4f a9 38 d6 3a ba 0f 13 b5 d6 13 52 0a af 42 56 c8 29 a6 c3 ae d0 47 41 52 c9 61 bb b4 41 99 2d f1 a9 e6 3a a7 ae 31 92 ef a8 8d 6c 7b c5 07 36 cf 69 d9 cb f7 6e b6 eb ad 86 a1 5a f4 58 a7 fd b7 b5 e9 fd 0f da d1 cc 62 4d a3 c4 b0 b8 9e 08 52 b1 df 9e 2e 85 14 3a 7f 36 41 a4 Data Ascii: ]uPSrW%gnU}7t[!fb(-^39ixpS7Z\pd46DWh\|NMEOD0.$)z`-61#hw%2O8:RBV)GARaA-:1l{6inZXbMR.:6A
2023-08-10 21:19:01 UTC	3151	IN	Data Raw: ae bc ed df 98 70 98 88 fa 54 47 8d 75 c2 b6 6e 6f 0a 6d 52 84 b6 cc 71 a0 84 7e b6 9f 48 3f 4f 20 9f 72 3c 0b 0a e2 e6 f5 27 d3 50 71 a4 5a 44 b4 fd 14 f6 93 31 c6 6f ca 84 8a 11 6a 77 9e c2 8a 4c 50 af c7 90 76 fe 07 19 52 25 ce 05 51 29 97 26 4f 26 2c f3 80 f5 58 54 e1 15 5c 79 54 5d e1 a3 e3 bc 72 7a 6f f2 8e 3a 55 49 39 dc 87 b3 9f 87 45 77 9c d1 d9 e9 70 f7 e8 e0 f8 e3 e5 de e1 c1 f0 f8 ec 32 e7 b9 d3 ef 39 8d cf a3 e1 29 f9 e8 7c 1c 8e 64 f9 b6 c3 1b 40 fb fd df 65 f1 8e 73 78 72 3c bc dc db 3d 1d 9e c9 c2 57 ce df 46 27 c7 59 97 6f 2a a7 ab ed 9d dc 24 9e ea d3 53 8e d8 9a 3e 3c b5 e0 5e e3 31 96 d6 c3 aa c7 58 c6 ca 65 ee cd 8d a4 8a 78 a5 a3 4b 25 89 af eb fb 52 f4 ab c9 3d 9a 53 fd 6b 72 9f 8a 63 55 47 94 88 b4 88 ba f9 fe 8b 11 3a 0c be dd 95 Data Ascii: pTGunomRq~H?O r<'PqZD1ojwLPvR%Q)&O&,XT\yT]rzo:UI9Ewp29)\|d@esxr<=WF'Yo*$S><^1XexK%R=SkrcUG:
2023-08-10 21:19:01 UTC	3167	IN	Data Raw: f4 aa 8c f9 bc 8c 2b f3 5a a6 6d ce 19 9f 1d 03 2b 24 81 ac 1a 0a f3 48 73 2d c3 c8 e5 88 64 35 71 4d 4b d2 32 c9 fc 97 b6 b9 18 04 ce 71 c3 42 cd e2 d9 ca 02 3d 3f ca 70 b6 86 a9 89 22 b7 3c c5 56 e4 d6 0a 51 81 4c 1d 14 aa b8 5a 58 f0 ea 06 a2 82 6b 4a a1 61 6a 65 aa 87 98 af 94 04 23 53 40 15 0b 00 b6 5a 52 92 4c 75 aa 65 37 81 5a 25 27 c6 6c 3e 25 8f 2c b7 e4 58 c6 eb 2e 08 fe 0c 93 d6 f2 b6 65 9d 8b df 6e 01 6d b6 f0 8b be b1 ad d0 55 31 a9 2a 6c 10 5e 51 ad d8 d5 e3 2f 09 a4 aa 7d 73 15 74 cb 9d 07 6b 26 af be 0c 4e fa 67 14 55 5c 4c 91 cc ed 73 c9 22 89 77 bb 77 e8 c5 ee 1a bc fd 9e d5 cd 2e b6 47 25 b6 d9 05 f0 59 7d 9d c9 3e 0e 62 ff 1e ed 7d 5c 55 06 d1 2a 49 25 dc 9c 2c 99 0e 62 5e ea e6 0e a6 c6 4b 9f 95 ba 35 ee 57 6a aa c5 4b 5c 93 b3 e8 a2 Data Ascii: +Zm+$Hs-d5qMK2qB=?p"<VQLZXkJaje#S@ZRLue7Z%'l>%,X.enmU1l^Q/}stk&NgU\Ls"ww.G%Y}>b}\UI%,b^K5WjK\
2023-08-10 21:19:01 UTC	3183	IN	Data Raw: 70 54 4a f9 38 03 fb 6d 1a 15 bd 2e a5 23 d7 47 9a 51 72 a9 ea b8 14 5b f5 60 af 8b 3a e6 a9 57 b8 b4 54 90 8d 17 3e 92 70 64 17 7a b4 61 35 54 82 ba 0c 42 23 ba 4c b0 55 13 94 a9 56 25 56 1a 26 50 f1 49 96 0a 6b 15 91 29 59 fb cc 41 d6 a5 84 a3 22 c3 83 c8 a3 ee b8 c5 65 4d 32 10 a7 d5 51 0b 09 e1 49 23 53 64 d6 42 9b 42 1f c1 36 ea 8e 5a c3 67 6a bb 05 0a 88 74 e4 36 e5 6b 32 cf 68 40 6f 46 34 a4 d4 03 04 f7 2e ef b0 61 3a b5 2f 36 8a 60 45 1a 75 98 27 ef 59 86 0f 85 f3 5b 5e af 41 ac c9 52 c7 80 aa 64 16 38 3b c6 f9 74 24 47 5e b9 78 f1 c1 83 53 cc 86 68 1e 28 f5 24 86 b8 37 48 94 60 49 73 79 14 08 b8 2f 9f 06 e9 98 c6 2a 37 07 21 1f 7e 25 b7 df 2b fc 99 8b 45 85 5b 11 a9 51 26 59 07 34 82 f8 03 be 3d d1 6f 79 29 15 f4 5c ee 33 2f 7b 9b 06 09 3e e7 22 Data Ascii: pTJ8m.#GQr[`:WT>pdza5TB#LUV%V&PIk)YA"eM2QI#SdBB6Zgjt6k2h@oF4.a:/6`Eu'Y[^ARd8;t$G^xSh($7H`Isy/*7!~%+E[Q&Y4=oy)\3/{>"
2023-08-10 21:19:01 UTC	3199	IN	Data Raw: 7a 9c ad 26 af 81 2f 82 76 d5 39 7a 79 fd 8b fa 46 7f b3 f6 85 1d 40 75 70 4c 56 59 09 81 38 af 1d c8 08 29 7e f0 81 b9 c0 43 0f 02 89 c1 43 7f 0a 77 61 d1 c3 fa 14 ae c0 a2 87 8d a9 37 c7 0f 83 29 5c 81 45 0f 9b aa 20 b0 c5 f7 76 93 c3 3c 76 12 f6 62 2f f4 66 de dc 53 c8 f3 04 0d c6 e6 59 c0 fd 54 ac 07 c6 f4 30 1d 97 be 01 cf d5 3d f1 2c 8f 3b 71 f0 f3 3a c7 15 7c a9 b0 ab eb a5 f9 c6 e3 c1 d1 4f bb 87 07 fb 97 af 0f 26 87 fb 97 47 ef de bc 9a 9c 14 35 99 8f ab a5 32 77 81 a5 ad a8 3e 0d 9c 68 f6 d0 28 de 87 57 bf d2 03 69 03 62 74 9f 86 86 a1 50 1d 9f 06 63 7b 76 9f 2c 73 71 c1 a1 81 23 d7 ea d9 c0 4c 7d 8a 6b 03 69 d9 e4 d9 40 fb 14 0e 1b f1 b8 2c e3 2d ad 69 74 89 e0 20 73 df 88 7f 5f 5a d0 fc 36 ca e6 4f 72 db b0 cc 9c d9 6b 43 43 1c 5a 2a af 8b 85 Data Ascii: z&/v9zyF@upLVY8)~CCwa7)\E v<vb/fSYT0=,;q:\|O&G52w>h(WibtPc{v,sq#L}ki@,-it s_Z6OrkCCZ*
2023-08-10 21:19:01 UTC	3202	IN	Data Raw: 01 30 c7 26 59 bd 93 e2 7e 95 bf ac fd 30 39 9a 9c ec 9e 4d 2e cf 8e 2f 8f 5f fd e7 64 ef 0c a9 9a 0d 4b 99 d7 27 c7 6f 78 29 4c fa fb 07 a7 bb 87 87 c7 3f 5f 9e 4d 4e cf 2e 8f 8f 0e ff 7e b9 77 bc 3f b1 f7 41 ae 6f 81 89 44 2a b2 7b 7a fa ee cd e4 f2 f0 78 6f f7 f0 72 f7 e4 64 f7 ef a7 b0 6f 49 65 4e 27 27 07 bb 87 07 ff 3d b9 9c bc 79 7b f6 f7 cb b3 93 dd 83 43 d4 18 09 6f 72 aa c3 7d fa ee ed db e3 93 b3 d3 4b b8 45 b5 85 5b bd 0c 5a 0c 17 ad 80 69 33 45 f0 38 b9 be b4 0b fd 67 f6 96 f1 bf 03 6b 86 99 5b 56 e0 52 41 33 6a 00 93 bb ba d8 b8 a5 ae 13 ad e1 00 75 07 24 6d f8 0d 62 1c 6a 1b 1f 67 d7 d7 51 3c 39 1d b0 75 7e 59 32 af 32 cb 54 bb 65 bd ae 56 f7 0a d9 12 09 d9 5a d6 51 83 88 0f 08 22 9e 08 0b 49 04 79 90 8c 91 0c 38 3c 47 8a 73 24 e0 05 bd a6 Data Ascii: 0&Y~09M./_dK'ox)L?_MN.~w?AoD*{zxordoIeN''=y{Cor}KE[Zi3E8gk[VRA3ju$mbjgQ<9u~Y22TeVZQ"Iy8<Gs$

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.3	49859	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:01 UTC	2691	OUT	GET /static/webpack/production/c364c30a7132105003e0.8XJOW7LRMgP1ARGwZw08JDY68ADKiGvFWrlYEzy29bw.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:01 UTC	3134	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 62991 Connection: close Date: Thu, 10 Aug 2023 21:19:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:35:12 GMT ETag: "348553722263ba16701f45c9f1d90f60" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 2bb98457c96f801517f8d0d98344cd3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 9kOLhxubCf3pSkw7Zml_9JoHzzojIHcDUhHXNigrxav_mIfHQJxR2g==
2023-08-10 21:19:01 UTC	3135	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 69 77 db 48 92 2e fc 5d bf 02 e6 dc eb 2b de 26 50 d8 17 b9 59 3e 5e e4 b6 a7 bd b5 ed 72 f7 8c 5f 1f 1d 88 04 45 96 41 82 0d 2e b2 2c eb fe f6 37 9e c8 04 90 00 41 6a b1 cb ed 99 51 77 59 4c 00 b9 46 46 c6 96 91 91 fb a7 93 d9 30 3b 35 8e 8e 9e bf 7a f0 f8 c1 c3 e7 87 9c 38 7c 7c f4 e8 e9 6f 2f ff fa f6 e8 a8 7f 69 8e af 5f 3f 7c ec 1a f3 d5 62 bc ff e1 43 67 1e cf 93 fc e8 98 0a 25 f9 ff 93 0f ab d9 30 4d e4 c3 20 cd 56 c3 a3 61 36 58 c8 17 93 d9 28 5d 25 b3 41 99 7d 16 2f 27 eb e4 68 98 2c 3e 2d b3 79 fd e5 34 3b 9e 50 55 61 32 8c 42 d3 f4 3b 1f 7b e7 7b 96 6b 1f 8c 56 b3 c1 72 92 cd f6 93 de b2 17 77 cf 5f 1d ff 9e 0c 96 c6 30 19 4d 66 c9 eb 3c a3 2a 96 67 fb cb 5e e7 e8 28 59 bc c8 86 ab 34 e9 f4 ce d7 31 b5 7c 70 Data Ascii: iwH.]+&PY>^r_EA.,7AjQwYLFF0;5z8\|\|o/i_?\|bCg%0M Va6X(]%A}/'h,>-y4;PUa2B;{{kVrw_0Mf<*g^(Y41\|p
2023-08-10 21:19:01 UTC	3151	IN	Data Raw: f0 61 6a 71 c2 28 36 02 8f fe 93 8b cc a0 c9 60 a2 e1 a7 8e e1 06 81 1e 91 0a e7 d4 f2 b0 b9 47 33 53 9f de 10 f1 08 0d 2f b4 a9 15 a8 52 c5 14 92 6e 16 79 63 cf 08 cd 20 ae 7f 41 59 62 c8 26 f6 77 2d d2 ff 4c 92 a0 cc 7a 1e 36 70 d1 5a 0f 49 6d 24 aa e4 b6 7c 05 0d 4c f5 90 34 31 a2 68 36 29 6b 7e a3 19 c3 72 a1 78 3a a4 92 ba 30 80 c1 5b a5 d9 15 ec 2c 93 f2 a7 2a 73 0f 1f 98 4f 9c 8a 98 d4 61 eb 0a d8 fa 0c 5c 1f ca 65 d4 18 36 40 eb 04 0c 5a 0b 0a 67 6c 10 84 65 b7 0d db b3 0d d7 b7 a9 3f 3e 09 81 d0 c5 37 fb e3 a1 43 8a 65 dc 34 1f fb 0f fd 1a 75 db a4 70 3f 42 18 53 9b fa 2f 60 a5 aa 75 f7 56 3c bb 29 85 bb 8a 18 d6 c0 8c 6f a1 70 97 59 af 08 b2 70 5f f1 69 09 d2 52 b2 a1 ba 80 c0 18 6e e4 e0 5f b9 d0 e0 6a 16 86 11 2c 3f 16 ad 41 2a 62 97 e4 8d d8 Data Ascii: ajq(6`G3S/Rnyc AYb&w-Lz6pZIm$\|L41h6)k~rx:0[,sOa\e6@Zgle?>7Ce4up?BS/`uV<)opYp_iRn_j,?Ab
2023-08-10 21:19:01 UTC	3454	IN	Data Raw: e8 38 86 05 7f 19 25 07 49 3f 3e cd 09 35 40 eb 55 f3 e1 b7 f6 c0 f0 aa 35 4a ca 9b 3f b6 60 8f 8e 95 d7 44 29 61 1f 83 cb 8a ef f8 44 d8 94 8f 3a 7f 74 1c 98 c4 3c cb 6d 7c 21 12 15 a5 f4 25 20 d9 11 76 f9 b0 56 2d bc ee 5c 9b fa ea 59 30 cc 39 5e 50 fb 4c 64 c9 ba 0a f9 52 61 17 31 ec 40 e3 83 28 a8 75 c6 8e 60 42 33 ed 31 89 58 8e 15 1b 04 a1 e2 93 19 ba 44 9c 5c 74 84 f8 08 55 00 b8 aa 1d 21 39 d9 72 ec 9d 84 8b 89 d6 71 1a cf 7e 94 4c a6 b4 f5 73 0b 64 6a 47 6f a5 b1 eb d1 aa 1a ec 76 10 aa 3a 32 dc 80 4a b5 57 a0 32 64 91 e3 8f e7 c6 4a 3b 3f 3d 2b 56 fb 7a cb 87 6f 84 db 97 33 e1 3a 42 dc 18 b7 db d8 6f 81 db 38 f0 f4 83 c8 76 d5 d4 cf 4d b5 95 7e de 12 ed eb 21 b6 0a ba 1d 78 5d c3 84 1b a0 75 6b f9 ba 5b 86 43 a0 d3 a2 88 e4 22 8f b4 31 d3 b7 35 Data Ascii: 8%I?>5@U5J?`D)aD:t<m\|!% vV-\Y09^PLdRa1@(u`B31XD\tU!9rq~LsdjGov:2JW2dJ;?=+Vzo3:Bo8vM~!x]uk[C"15
2023-08-10 21:19:01 UTC	3470	IN	Data Raw: fa ee 3e 3e 77 91 47 96 44 2f 87 e8 03 91 23 64 af e9 e1 0c 4b 7e 46 ed af 48 a0 f8 18 9d 73 5f 6a 18 65 11 6a 5b ad ae 8e 50 37 8b 10 bf fa ca 18 f1 41 8f 8e 51 5b a1 d4 e3 36 1d ab d5 6e ad 1f 23 ae fe 15 51 b2 db 56 0f c7 3b 5d 6b d0 15 08 34 ad 96 a3 23 c0 ed 12 f9 ee da 0e 67 ff ec 22 94 74 ab b3 01 89 2d c8 f8 bd dc 7c 2f 37 df 8d 86 af 56 a6 dd ed f7 87 a7 e7 f3 31 66 bb e6 99 b1 e9 d6 af b1 32 10 49 dd 1f c7 d5 9d d7 7c f0 64 51 1d 7f ee 1d 50 4b a4 ab 5d d5 62 b3 7a 7c ec 45 2f c3 09 ed 83 aa 79 cd 23 39 7c d0 5c d5 77 62 eb cc 8b f7 3e d2 12 8d 08 e6 28 05 5e a7 52 4b 23 1e 79 56 b4 08 fc b8 56 b5 aa 75 6b 11 2e 6a f5 9d a5 17 9f 2f e7 46 fc f0 61 6c c5 e1 7e 78 e9 2d 9f b8 91 57 ab 0b 14 07 05 14 2b b7 46 0b 6d 2f 47 6e cd ae 9b 73 fa d3 b2 9b Data Ascii: >>wGD/#dK~FHs_jej[P7AQ[6n#QV;]k4#g"t-\|/7V1f2I\|dQPK]bz\|E/y#9\|\wb>(^RK#yVVuk.j/Fal~x-W+Fm/Gns
2023-08-10 21:19:01 UTC	3486	IN	Data Raw: ab 4d 9c 69 c6 2c f6 20 b1 22 a0 17 b9 98 bf 72 21 a0 48 c3 43 19 23 09 74 5a fc 44 e5 b9 c5 86 98 63 93 2d 4f 4f 89 18 ab 8e 27 86 28 0c 16 67 ea 29 7e 91 43 fd 2e 9f a6 42 57 99 cc 85 76 22 32 a6 9d ba 1c 56 dd f3 18 d9 82 ea e6 55 71 1c ca e2 79 65 57 fa 58 78 61 71 b6 84 2d ea 4f 66 63 e5 8b bf 70 7d 98 30 f3 75 52 c7 fe eb c8 23 e8 13 77 79 a5 c7 5f 16 07 b1 c2 40 64 56 3e 90 ee 5e 15 4f 69 76 ae 2d 78 25 d7 40 ce 9c 0d cd cb 34 54 85 c6 a5 61 29 9f 9d aa c4 5e 67 0a f4 c4 80 49 f4 cc d2 e0 b7 85 41 3d f5 97 b3 ed ba c2 df eb f2 3f d9 20 90 59 33 5c c1 07 20 b5 82 c9 bb a9 d9 da 9b 23 34 cc c4 25 7d 64 32 da a5 bf d1 98 84 a4 da a5 75 4a 2f 9f be 7e f9 2a 9c 08 fe 2a 23 e9 aa 31 d3 67 2f d7 5c 89 d5 2d 77 f9 9f 2b 67 89 70 46 db ce 7e 62 8b 8e 0c f3 Data Ascii: Mi, "r!HC#tZDc-OO'(g)~C.BWv"2VUqyeWXxaq-Ofcp}0uR#wy_@dV>^Oiv-x%@4Ta)^gIA=? Y3\ #4%}d2uJ/~**#1g/\-w+gpF~b
2023-08-10 21:19:01 UTC	3603	IN	Data Raw: f4 04 9c de fc f2 fb 8b 3f 3e ae 27 f9 45 a1 6a 5b d9 08 d0 3f 7d 78 fb 26 28 c9 ed 71 4b 91 09 a2 4b e5 6b f9 cf fb 38 1b ba 70 83 51 b3 cc 1b d4 85 6f 6b 54 74 04 15 5c 58 2f b9 57 f0 2d e6 22 42 84 50 be c5 b3 70 e2 0d 95 4b 33 1e a8 1f 42 1a 50 2f c5 e3 4a 77 88 15 20 04 38 04 31 5c f7 85 bd bf cb d1 95 f4 3b 17 cf 17 f7 64 65 0d b6 46 e1 d0 9c b6 0f 6d 9d 3f ce bd e5 95 38 96 0a 97 f2 a0 f9 fd 9c 23 78 31 7e bf 0d c7 1c a1 7c 52 ad 0b df f4 07 a3 c8 42 9c 17 46 48 58 52 2d f0 19 dc 9e 12 31 29 e5 11 58 f5 fb 84 97 7c bf 10 a1 fc d3 d8 70 a9 ab b5 f0 29 2f 8e 29 2f ba 77 12 30 2c 24 6a 64 8f 8f b9 d2 30 03 c2 54 d1 ea f6 38 1a 43 a8 6e ec ea 16 f0 15 e7 1f bd 2a e4 a2 f0 34 5f fa 95 f4 fd 5d c6 a2 62 59 44 aa d2 81 64 27 d8 58 b9 b1 c6 b7 19 d7 1d 04 Data Ascii: ?>'Ej[?}x&(qKKk8pQokTt\X/W-"BPpK3BP/Jw 81\;deFm?8#x1~\|RBFHXR-1)X\|p)/)/w0,$jd0T8Cn*4_]bYDd'X

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.3	49746	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	477	OUT	GET /static/fonts/AtlasGrotesk-Regular-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:55 UTC	478	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 78156 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:51 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 17:03:52 GMT Cache-Control: max-age=43200 ETag: "9c03b55db2514e78544fc6ef3688cb3d" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 9c0ce977a13f3d9bbc6eed6540faf728.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: nJmhMCe0o-5sOd1MSOxwS9uEVFuXfC93kE7Qcfdq6C4m4j6eZVAvrA== Age: 15304
2023-08-10 21:18:55 UTC	479	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 31 4c 00 10 00 00 00 04 85 70 00 01 30 eb 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 90 5e 1c ce 64 06 60 00 8c 02 08 2e 09 82 73 11 0c 0a 86 db 50 85 fb 0f 0b 94 34 00 01 36 02 24 03 a8 64 04 20 05 90 3c 07 eb 00 0c 83 6c 5b e5 49 b4 00 4a 87 ec 1e 96 c2 ba 01 54 74 89 1a 35 da 39 da b6 2a 74 04 fa 7d 2e 12 a0 ea d8 ae e7 44 a3 9a 74 1d dd 67 31 ea 09 c2 8f a0 7a 2d c3 1f 41 e7 6d a2 20 9f ba d8 97 fd ff ff ff ff ff ff ff bf 6e 59 3c 6b be b3 0b 74 f6 5d 1c 72 8a 41 05 63 54 72 fc fc b6 a0 66 e6 54 fa a0 99 45 c5 19 a8 24 83 29 66 c2 a4 95 95 e6 ea e6 d0 5a d7 a3 1a c4 28 ab e2 4d 47 25 62 9a 5d d3 20 a5 62 b7 ee 50 65 f2 85 39 bd 89 45 d2 ea ba 2c cb 3e 15 2f 9d 2f 31 36 33 c2 b9 41 02 af Data Ascii: wOF21Lp0^d`.sP46$d <l[IJTt59*t}.Dtg1z-Am nY<kt]rAcTrfTE$)fZ(MG%b] bPe9E,>//163A
2023-08-10 21:18:55 UTC	495	IN	Data Raw: 82 74 83 17 c4 27 28 1a e5 d8 81 9f 6c 55 58 63 37 a7 0e a1 04 d0 2c 46 1e 66 39 ae 4b 5d 1b 49 de 3a b2 14 70 ac 01 80 06 52 b0 00 a6 25 2c b7 7f d0 f2 9f fa e0 b1 bc 4a 07 16 5b b5 63 81 d4 76 a2 b5 19 15 c6 37 b3 a1 ac 14 f7 02 5c 20 99 0c 6f a3 45 12 d7 2b 64 65 83 0a 5d c9 1a 35 b2 ed 96 69 44 3f 98 c1 e4 0a 7c 2c ab 53 b2 7c a8 ee bd 51 26 40 83 b6 30 98 83 3a 01 2b 35 b0 65 32 26 b2 46 68 00 56 8e 75 65 50 9b 2f 4d f2 20 ad c8 4e cd 44 66 57 47 43 d8 7a 57 e6 46 00 f0 b6 ab 48 bb ea e3 a0 d9 aa 9e d9 35 95 34 aa 99 59 42 b9 12 a7 4c e6 dc 33 90 8c 94 3e e5 64 85 7e 54 5c 89 6f d1 c2 c3 c5 55 57 86 14 b1 f6 66 14 80 d2 4c 7e bb 32 52 73 82 d7 70 54 bc 66 d6 d7 c9 3d 5c 04 00 32 d6 32 a4 bd 52 a6 59 ef 39 d4 9a 8b 00 09 a8 cc 2d 77 ae 73 85 df 64 5b Data Ascii: t'(lUXc7,Ff9K]I:pR%,J[cv7\ oE+de]5iD?\|,S\|Q&@0:+5e2&FhVueP/M NDfWGCzWFH54YBL3>d~T\oUWfL~2RspTf=\22RY9-wsd[
2023-08-10 21:18:55 UTC	511	IN	Data Raw: 23 40 01 82 0a 1b cc 18 08 2a ec 30 63 60 3f 83 d5 b4 54 c8 4f 52 40 88 3e 12 a8 41 d6 de 9e 23 e4 ec 48 33 16 2b ec 7d 98 3c da f4 46 06 e0 7e 2d a6 a6 d6 0b bb 1e 31 a1 d6 57 0d a1 42 80 10 06 29 66 2c a4 d2 82 9f f8 45 b6 7e 06 ca 33 de 04 c5 0e 38 e8 8c 46 d7 60 08 62 c4 00 c8 d0 81 32 f8 86 00 83 fc 7b 01 40 20 08 ab 4a 48 14 e3 53 e1 c0 c5 8f 28 1e 30 3d 7e cd 37 9c 69 56 b8 5e 5b 16 da 6a a7 d3 ce b9 e0 a2 4b 2e bb ee 41 19 a7 44 2b c9 0b f6 d5 ea da 55 60 60 1b 3b 09 21 e8 9c a7 90 96 d0 0c 20 28 24 b0 e8 09 05 91 a0 79 e1 8b 5c d4 dc 7d 32 63 ec 4e 4d cc 8c 9d 12 f5 d7 ea 96 5a 6b d3 ea 78 f8 de 3a 9e 50 64 51 3d d8 35 ba 98 62 8b d3 2f d6 8a 1b 68 aa 85 d6 3a ee 9f fe 2d 7a 8f a5 a5 2f 9b 70 20 24 72 47 62 cf 19 e3 d3 09 02 65 2e 14 e9 78 b5 99 Data Ascii: #@*0c`?TOR@>A#H3+}<F~-1WB)f,E~38F`b2{@ JHS(0=~7iV^[jK.AD+U``;! ($y\}2cNMZkx:PdQ=5b/h:-z/p $rGbe.x
2023-08-10 21:18:55 UTC	527	IN	Data Raw: cd 4b 17 c0 9e bb 85 0a 57 a2 e6 96 e6 36 0e 5e c4 c2 de 4b 4b 72 3d ef fc 45 81 99 4a 62 d6 56 53 4f 68 db c5 c3 29 0f c5 4c eb 59 3b 0f 7b d3 5d 1f bd fc 88 ce 83 26 5f d8 ae c4 2d 2e 54 40 ca 3e 9a 79 39 e3 da f6 fa 48 08 71 70 cf e1 2c bc 9e b7 2c 25 6e ee f8 6e c1 3a 95 19 bb c7 5d 97 bc 33 8d 53 e6 fb 21 99 37 7d d6 3c e0 f6 7f 17 5d b2 3b 6f 5f d7 5f f7 78 63 a7 13 f4 be 39 e4 6c 7f e0 d2 b8 be 73 68 fe 5b bd 4a b3 ea a1 cb eb e0 0e ec e7 4c eb 7d f3 14 cf c9 59 3e 98 a5 07 76 e2 43 fd 6d 60 1e 6d a6 c6 ee 03 47 f8 a2 2d 45 6a be 76 e2 27 87 cd c3 c7 ed 84 03 48 a0 ea 3e 56 0b 14 7f 11 d8 b5 57 3e ca ee 00 da e9 5f bc 82 0b 4b ef 2d cb dc a5 f2 9a e1 9f 10 eb 32 2d 73 d5 5e 59 f2 21 30 0a 56 f5 6b e6 16 af fb 20 72 aa 3f 40 e4 10 70 a8 e2 81 a1 e1 Data Ascii: KW6^KKr=EJbVSOh)LY;{]&_-.T@>y9Hqp,,%nn:]3S!7}<];o__xc9lsh[JL}Y>vCm`mG-Ejv'H>VW>_K-2-s^Y!0Vk r?@p
2023-08-10 21:18:55 UTC	543	IN	Data Raw: a2 ed 3e 31 e9 29 c9 4c 6a 7c b3 37 7d b1 d5 4b bb 7a 48 a5 53 e3 49 da d5 c1 87 60 08 25 c2 40 8b 36 ed 05 82 9a 40 0b 24 59 83 2c 08 e7 c9 84 29 58 ac ec 04 d9 aa d9 b8 1b 60 d0 5d 18 e5 c0 a0 d1 18 00 76 f7 63 9a 10 da 3d b6 79 86 5c b5 91 a5 d0 5c c1 fc ca b5 7d 9c b0 66 75 d5 9a 9d 57 97 5f 6c 48 4d 47 7e b1 7c be 3a 26 f9 50 37 5b 04 52 23 74 1c a5 82 b2 56 e7 47 4d 13 0f 83 8b 3a 22 f3 d2 97 6f 8b eb 3a b6 64 0f 6d 08 38 76 ee 8a 8d a1 6d 8f c2 ac 61 8d 01 c2 8c 82 bf 40 c3 49 b0 e9 08 8f 52 61 87 61 6d 24 18 20 a1 80 23 72 8b 81 6c 08 4a 8a 32 4b c1 44 1b 2d 3d 02 77 d3 f3 47 43 23 ef 6b db b7 cd fc 7e 8f b1 af 1d a9 aa 4b e2 10 82 2f 9e 4c 52 0c cc 6e 62 5f c3 31 95 95 cc 82 45 b0 bc 26 f7 62 57 14 7f 98 cd bc 28 a4 be 39 dd f0 fb f6 33 c9 4c 1c Data Ascii: >1)Lj\|7}KzHSI`%@6@$Y,)X`]vc=y\\}fuW_lHMG~\|:&P7[R#tVGM:"o:dm8vma@IRaam$ #rlJ2KD-=wGC#k~K/LRnb_1E&bW(93L

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.3	49860	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:01 UTC	2776	OUT	POST /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 892 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" X-CSRF-Token: 50aS4zgW2W1XP95GWz4lmdjP X-Dropbox-Uid: -1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Content-Type: application/json x-dropbox-client-yaps-attribution: atlasservlet.cloud_docs-live:prod-pdx;atlasservlet.web_platform-live:control-pdx sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/PACIFICA-COMPANIES-shared-Vital-Documents-with-you.paper?dl=0&rlkey=4u3tbhy3vz5muipmn8jqw4omg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:01 UTC	2777	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 2e 74 61 67 22 3a 22 64 72 6f 70 62 6f 78 5f 70 61 70 65 72 22 7d 2c 22 64 6f 63 5f 69 64 22 3a 22 44 42 7a 54 36 73 62 30 31 78 73 4f 6b 37 6e 74 30 71 65 6b 36 22 2c 22 65 76 65 6e 74 5f 6e 61 6d 65 22 3a 7b 22 2e 74 61 67 22 3a 22 6c 6f 61 64 5f 69 66 72 61 6d 65 5f 62 72 6f 77 73 65 72 5f 63 61 70 61 62 69 6c 69 74 69 65 73 22 7d 2c 22 61 75 74 68 5f 74 6f 6b 65 6e 22 3a 22 63 64 2e 41 44 39 6f 74 4e 47 38 5f 64 53 62 44 72 5f 57 4e 4b 6a 61 64 69 75 50 35 39 41 37 77 74 45 52 47 79 58 6e 43 56 30 43 34 4d 75 43 61 73 53 55 4a 38 61 36 55 37 34 72 51 44 6e 49 57 56 4a 59 52 4f 6d 6f 48 69 5f 68 33 64 44 44 6f 4f 62 5f 4e 67 73 75 77 67 61 33 50 2d 6d 63 38 76 6d 4b 39 4b 4a 6d 53 68 4e 75 37 76 67 30 6e 6b 4a 33 79 Data Ascii: {"client":{".tag":"dropbox_paper"},"doc_id":"DBzT6sb01xsOk7nt0qek6","event_name":{".tag":"load_iframe_browser_capabilities"},"auth_token":"cd.AD9otNG8_dSbDr_WNKjadiuP59A7wtERGyXnCV0C4MuCasSUJ8a6U74rQDnIWVJYROmoHi_h3dDDoOb_Ngsuwga3P-mc8vmK9KJmShNu7vg0nkJ3y
2023-08-10 21:19:01 UTC	3151	IN	HTTP/1.1 200 OK Content-Disposition: attachment Content-Security-Policy: sandbox Content-Type: application/json Pragma: no-cache X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-Server-Response-Time: 3 X-Webkit-Csp: sandbox Content-Length: 21 Date: Thu, 10 Aug 2023 21:19:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 12cefe5368714768a40e42eec550d37e Connection: close
2023-08-10 21:19:01 UTC	3151	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 53 75 63 63 65 73 73 2e 22 7d Data Ascii: {"result":"Success."}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.3	49862	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:01 UTC	2778	OUT	GET /static/webpack/production/00e4f72cc8d07e2964b5.ezimfJZlTtJey57m97Ax4xFG22d8BUDGW-mXRHxj1SA.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:01 UTC	3615	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 42732 Connection: close Date: Thu, 10 Aug 2023 21:19:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:25 GMT ETag: "bd71dd2dfd3da7db8433b7b535b9aea9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 49039a44484a184312d8f608c205b640.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 2F-8Ao6WGL2neDQsTs-cVdYNVTDiqRPPKAk75ifidcpUQPxdRJMCSw==
2023-08-10 21:19:01 UTC	3616	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd db 72 e3 48 b2 20 f8 ce af a0 30 bb 6a e2 08 64 92 ba 8b 2c 96 56 a9 4b 66 56 e5 ad 53 99 d5 dd a5 d6 a6 41 24 24 a1 44 02 2c 00 94 52 25 71 ec fc c3 3e ac ad d9 ac d9 b1 79 d8 5f 98 f7 d9 3f e9 2f 59 bf 44 00 11 88 00 49 65 65 75 1f db be 28 09 20 2e 1e 1e ee 1e ee 1e 1e 1e 8d bb 30 1a c6 77 ad cf 9f 5f bf 3b 38 3a 78 fe fa 98 7e 1c 1f 7d 3e 7c f9 e9 ed 8f a7 9f 3f f7 17 96 78 7c 3c 3b 77 5b 93 69 7a dd 38 3b 73 26 fe 24 48 3e 5f 40 a5 20 f9 af e2 61 1a 0d 47 81 78 18 8c e2 e9 f0 f3 30 1e a4 e2 45 18 5d 8e a6 41 34 c8 8b ff e2 a7 e3 30 0a 3e 67 41 9a c9 42 91 9f 85 b7 c1 e7 61 90 de 64 f1 e4 bf ee ed 5e ec 0e fd ce b6 73 ee 3d d4 3a bb db 1b dd cb 69 34 c8 c2 38 6a 04 5e e6 45 ee c3 bb 8b 5f 82 41 d6 1a 06 97 d0 d4 fb Data Ascii: rH 0jd,VKfVSA$$D,R%q>y_?/YDIeeu( .0w_;8:x~}>\|?x\|<;w[iz8;s&$H>_@ aGx0E]A40>gABad^s=:i48j^E_A
2023-08-10 21:19:01 UTC	3631	IN	Data Raw: 68 d0 ff 24 7f 11 5d e2 5e 5c ff 37 78 55 3c 7d 80 27 d6 23 ef e0 97 10 48 a7 72 1c 1f 67 60 bc 75 76 77 36 5c 0f fe 5d df c1 7f da f8 67 7d 1d 06 ec e1 17 23 4a 9a 6f 91 fd 37 ba f9 35 ed 3e 7b 26 2e 7c 1d c4 e3 67 3f 04 43 be 45 56 dc fd ca 87 1d e5 de 35 56 fa 29 48 52 64 9b fa 7a 0b fe 8b 6f c4 ad b2 dd a7 b7 f7 ec 62 14 5f 3c bb c5 96 3a cf 5e bf 3a 3c 7e 7b 7a 0c 2d 3e ab 05 ad e0 0b de d4 97 6a b3 e2 4c 51 75 cc 92 10 54 44 91 26 de 11 08 76 c2 08 6f 9d 95 f8 ee d2 81 b0 d6 7b 39 4f 40 5c 6a a6 bd 9c 6d 83 fc 42 19 79 18 41 e1 68 49 9f 5e 5a f0 b9 af 26 43 aa 83 b0 ab a3 77 33 4c d5 88 79 df 8b 85 b2 9e f4 89 07 03 e4 67 b0 98 92 20 8d 47 b7 41 d7 87 5f 28 04 ba b1 87 49 6c 38 22 9a af 52 45 07 15 be eb 27 ec a3 88 fa 29 fc 0c 45 82 59 98 d1 1c 92 Data Ascii: h$]^\7xU<}'#Hrg`uvw6\]g}#Jo75>{&.\|g?CEV5V)HRdzob_<:^:<~{z->jLQuTD&vo{9O@\jmByAhI^Z&Cw3Lyg GA_(Il8"RE')EY
2023-08-10 21:19:01 UTC	3631	IN	Data Raw: 4a 02 2b 07 79 7b 51 0e f2 83 4c cb 81 1d 92 c3 5f c9 21 2c 5a a6 e2 88 5e 14 03 f4 b5 96 ab 12 95 2d 61 32 fc 06 d8 c4 84 7c 77 1f 90 8b 8a 8a 17 c1 4a 73 e5 76 53 de 5a 92 11 88 b7 f1 4d d0 f7 95 0b 72 56 8a 0b 72 18 66 69 04 f2 93 70 92 81 0a 6b 39 68 78 7a 3f be 88 47 ab ab fc 6f cb 47 51 f0 0a d6 65 5c cf e8 ee 82 7c a7 e9 cc 56 e4 bc af d0 b5 62 62 e2 0e 80 b2 49 45 34 65 3b 85 a3 0c a9 98 f3 99 56 97 d0 aa 55 ae 59 6b 17 13 ab 55 17 38 58 d8 b9 98 6d 22 8c 86 eb e9 07 50 e8 ce 96 40 a5 67 58 31 a9 43 62 42 64 f2 e3 24 89 93 86 73 e8 47 51 9c d5 d1 11 5c f7 eb a4 e9 d6 7d f8 5f 3d 47 3d 91 b4 df af 90 07 d8 5b 91 54 ac dd 8b 8a 33 2b d1 da 5a 7e c4 04 98 0d 14 69 d0 7f c6 01 c5 dd f4 d5 07 cc 7f 83 6a 76 1c 5d 86 57 53 fe 8e 37 2a 71 58 04 88 2a da Data Ascii: J+y{QL_!,Z^-a2\|wJsvSZMrVrfipk9hxz?GoGQe\\|VbbIE4e;VUYkU8Xm"P@gX1CbBd$sGQ\}_=G=[T3+Z~ijv]WS7qX
2023-08-10 21:19:01 UTC	3667	IN	Data Raw: 79 de 35 25 d4 fc 2f 03 19 67 2f e3 fa 68 20 a6 bc f2 32 14 27 98 5e 30 ba 69 fa 44 f6 94 ff 2d 18 96 15 53 2a 21 fb 69 f2 5d 82 e8 60 50 cf 91 e8 bc 23 8f 95 ce 45 9f 90 ba 7e ff 2c 3a d7 13 49 ea e4 da a0 b3 af 3e 1f ee 08 65 22 bf 32 5e 2c e9 b1 a3 38 c3 4d a9 11 fa dc 67 9e 53 ff c7 bf ff f7 ba 23 6c aa 01 e5 67 fd e1 f4 af 2e 45 12 f5 82 aa 06 e9 58 6d 22 43 ea e7 17 8b c4 bd ef 5f 8f 13 72 55 ce eb 62 0e 96 d4 bd 45 9b 10 78 35 d0 59 bf 98 bc 79 93 a4 4a 71 91 e6 53 7c c4 f6 1a 3c 1d 41 4f 04 15 2d b7 b4 88 c8 23 92 18 14 92 cc 1a 5b 17 b4 2d 7f 30 62 49 22 83 8a e8 33 98 7d f7 c5 67 74 91 89 88 24 19 72 84 71 01 f1 28 68 05 bc e5 fd 29 ba 89 40 43 ab ab cb 19 62 c2 c9 23 20 96 20 1f c5 7c 0b a1 fd 26 3a bc a6 69 dd fe ba 39 08 93 01 ee 99 5b e4 d8 Data Ascii: y5%/g/h 2'^0iD-S*!i]`P#E~,:I>e"2^,8MgS#lg.EXm"C_rUbEx5YyJqS\|<AO-#[-0bI"3}gt$rq(h)@Cb# \|&:i9[
2023-08-10 21:19:01 UTC	3683	IN	Data Raw: 15 7a b8 2b 60 1e c5 50 28 7c 54 6a 76 98 2a f6 0c e6 a8 1f 36 9c 03 f6 9f 3f e7 59 8b 07 4c cb e9 8e 48 33 92 27 88 30 73 a5 aa e8 3b fc cd d1 94 7a a6 42 ae 68 2f 04 90 8e b5 c7 3b 0c 5d 50 8f 15 82 6a 07 67 98 d5 02 0b 33 70 4f 94 6e c3 be 13 c9 4f 9c c8 ee 94 0f 4d c9 8e 92 e3 8d 24 83 f0 fe 5e 7b cb f9 dd 8d 32 4c 0b dc e3 7d e8 87 01 e8 6e 0e 8a 8b d8 83 e5 e7 92 08 41 0a 0a 8b 9c 2e 34 12 f1 54 9b 50 02 f4 28 ba b2 d4 0b f5 8d 4a e9 3c 42 49 af 05 f2 31 83 75 44 89 ce 4b 6a bb 66 14 b1 01 98 4c 57 d5 32 55 08 19 84 42 1b 4c 1c 34 ad 83 36 52 25 ac d3 07 ae 8c 5f b6 f1 ce 69 8b af 5d ba 1e 06 6e 63 7e 91 87 d7 a0 af f7 60 c0 83 59 c5 df 51 98 36 3e 33 c6 15 df ee 60 9e 9b ae b0 5d a5 5c a3 b0 f6 9d 51 62 2d 7e c4 b5 ef 16 ea 74 c3 d1 2b bf 08 3a 97 Data Ascii: z+`P(\|Tjv*6?YLH3'0s;zBh/;]Pjg3pOnOM$^{2L}nA.4TP(J<BI1uDKjfLW2UBL46R%_i]nc~`YQ6>3`]\Qb-~t+:
2023-08-10 21:19:01 UTC	3690	IN	Data Raw: 7c 45 f9 03 d8 d2 39 33 23 9f 5c 8c d4 c5 c5 7f 00 ba 1a 11 ad 60 a2 cc 60 32 e0 b8 2c 01 30 3e 68 36 8a 2b 71 84 6d a2 9e e2 a5 4b 6e a4 d4 13 2f 3b 6d f7 5e d9 58 32 31 06 69 a3 28 1d 85 76 5e ba c6 f1 a8 51 a8 f3 bd e2 eb e2 41 c5 0a 48 18 ed 79 4b 60 19 1e 4a 3d d5 4b ec 2c 7e 40 de 81 e9 18 e1 ce b6 27 93 e0 b6 61 fe 96 11 2a 7e 88 ff e7 0d e0 b0 78 04 be 7a 67 9a 01 47 32 29 de fe c8 ec ad 9e 35 14 5b e3 01 58 8e 29 46 8c 58 25 74 46 8e 9d 59 26 18 a1 01 43 f4 fc 85 e4 35 0e 91 46 c8 71 eb f2 22 0d 2f 7c cc 62 be ea ae d7 75 d7 94 9b 5c 37 1b 71 5e 6b c7 5f 6f 36 39 2b 9f 26 a4 e8 54 d9 c0 fb 07 53 28 ed c5 02 5a 27 01 71 99 e3 84 d0 60 83 53 24 93 1b 96 31 6b 95 23 2b 96 57 92 dc 34 cf d2 82 c1 ac 2a 9e a5 95 7e a5 15 09 45 f7 67 fe ab 17 eb 96 5b Data Ascii: \|E93#\``2,0>h6+qmKn/;m^X21i(v^QAHyK`J=K,~@'a~xzgG2)5[X)FX%tFY&C5Fq"/\|bu\7q^k_o69+&TS(Z'q`S$1k#+W4~Eg[

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.3	49861	162.125.69.16	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:01 UTC	2783	OUT	GET /p/thumb/AB9lmxu6tlgeO1DY9f4mZYQIZtSNHK7X--vfWqgNa1P4Zq17YwXLsxJqY8dO22TUvc889Io-U7Nm4R2ItGOCgVUv524NL2y5DNHF11D-KeaE1auFPb6fvo9LHETT3pPe-QdvVSVNFo8ozXiWsiXBPxfYpotT45lR2Hahvm6VTOhSwxg9sNZ8SJJn09oDQH7_BCDpQSplkS_VPQR9owSmJwLdxTjdOJZXH84owBImVlv4qg_TXRp0MWY5TpuRc-dL50aibHPoXXnITaIZ1R9wly9X643PV-S5uxo0d2e8oNEuLP55UDdUhQrkFYkhzBHiPOEw8V8HWSbctlS3dO2Cq3Ot9RWQUZKq1R7KFZvSOoROt1nJYR3yC4gqp5p1Ky1xcWK-fN6veA8d59R0dokwD9fzfGUIH_xGN1otBRFO5-EvMA/p.png HTTP/1.1 Host: uc0bdd2013c0bfd789fa3d3c0bf9.previews.dropboxusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:01 UTC	3614	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: public, max-age=31536000, no-transform Content-Disposition: inline; filename="FO5-EvMA.png"; filename=UTF-8''FO5-EvMA.png Referrer-Policy: no-referrer Timing-Allow-Origin: Vary: Origin X-Content-Type-Options: nosniff X-Dropbox-Content-Length: 243248 X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 162 Content-Type: image/png Accept-Encoding: identity,gzip Date: Thu, 10 Aug 2023 21:19:01 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b545a95a275f4d3baa1e9e55f50df2ad Connection: close Transfer-Encoding: chunked
2023-08-10 21:19:01 UTC	3634	IN	Data Raw: 34 30 30 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 01 f0 08 06 00 00 00 38 b7 1d 3d 00 00 01 35 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 78 9c 63 60 60 32 61 80 82 dc bc 92 a2 20 77 27 85 88 c8 28 05 f6 7b 0c 6c 0c 2c 0c 82 0c da 0c 16 89 c9 c5 05 0c 98 80 11 c1 fc 76 0d c2 bb ac 8b 45 1d 21 c0 95 92 5a 9c 0c a4 ff 00 71 65 52 76 41 09 d0 e8 0a 20 5b a4 bc 04 cc ee 01 b1 93 0b 8a 40 ec 05 40 b6 68 11 d0 81 40 f6 0e 90 78 3a 84 7d 06 c4 4e 82 b0 1f 80 d8 45 21 41 ce 40 f6 17 20 db 21 1d 89 9d 84 c4 86 da 0b 02 f2 c5 20 8f 7b ba 3a 9b 19 5a 9a 99 e9 1a e9 1a 2a 24 e5 24 26 67 2b 14 27 27 e6 a4 a6 90 e1 2b 02 00 14 c6 10 16 b3 18 10 1b 33 30 30 2d 41 88 21 c2 b3 24 b5 a2 04 c4 72 29 ca 2f 48 ca af d0 51 f0 cc 4b d6 Data Ascii: 4000PNGIHDR8=5iCCPICC Profilexc``2a w'({l,vE!ZqeRvA [@@h@x:}NE!A@ ! {:Z*$$&g+''+300-A!$r)/HQK
2023-08-10 21:19:01 UTC	3650	IN	Data Raw: b4 6d ce c3 5e c7 0d 0a Data Ascii: m^
2023-08-10 21:19:01 UTC	3651	IN	Data Raw: 34 30 30 30 0d 0a 23 7d 11 39 5e d6 94 ba 8a bc ee 13 7b db 78 dd 27 f6 b6 cb 71 16 f5 23 c7 66 0e 80 d4 17 11 61 6c 09 01 19 30 1b 80 74 c1 e9 87 67 61 b7 8d d9 ab d2 ae c9 f1 7c 2a f3 71 73 d8 85 d7 9b c3 de b6 b5 6f 3d 54 e4 b8 4e 2a 72 dc 1c 76 9f bc 9e 7f f5 55 e4 b5 90 4b 07 ec 25 8a 62 03 79 97 a2 46 72 a5 bc ae 72 a3 dc 9f 1a 03 c4 ed 3f 4b 06 98 c7 f8 d7 a2 e4 d7 de cb 31 0d 03 f0 a1 e9 f2 ef 7d 56 eb 19 84 7b 4f 3f 85 a7 9f 7e ba a5 f0 4f bf 24 ce 66 c9 7c 01 77 b3 6b fa 9a f5 63 cf 1b f3 f9 d8 f3 e9 3c ec 8b d0 ea bc ee a6 fc 9a 22 c7 ae 9e b7 4d 8e e7 f3 ba 2f ec f3 16 b7 8b 3c 7f 97 25 c7 8b 4a 77 b7 e7 8c 7d 13 38 e7 50 8d c7 70 04 30 7b c4 4a 34 66 9c b6 ff c4 1d a0 65 ca d6 ef b8 0b 57 07 28 72 6c 5e 73 f5 d6 be 6e 2a 6b df 6c da 4e 39 96 Data Ascii: 4000#}9^{x'q#fal0tga\|qso=TNrvUK%byFrr?K1}V{O?~O$f\|wkc<"M/<%Jw}8Pp0{J4feW(rl^sn*klN9
2023-08-10 21:19:01 UTC	3667	IN	Data Raw: 29 6e d4 b4 fa c1 0d 0a Data Ascii: )n
2023-08-10 21:19:01 UTC	3691	IN	Data Raw: 34 30 30 30 0d 0a ce 95 a7 b5 62 23 e7 f2 fa b0 d3 4e 6c a6 de 45 71 53 76 c0 02 45 02 58 fd c1 d9 30 d8 0a c7 b1 3c 3c 21 88 42 39 99 c0 7f fc 31 de fe e5 2f f1 93 bf ff 2a 7e f1 f5 6f e0 dd df fc 06 fb 27 a7 b8 1e 18 95 2a ad 81 1c fc 08 70 21 48 29 37 22 51 5a dd 48 93 e1 69 82 36 06 2a 32 b7 6e 42 70 59 9d 0a b2 0c fa 2c bb e2 20 d3 17 75 4c ca 41 53 0c 99 c4 43 df f2 5c 30 c0 2e 20 04 80 6c ab 1c 50 2f 00 9d 03 51 09 4f c6 8f a8 fc c3 fa 52 19 69 58 ba e9 1a c1 49 ec bd 63 73 4c 37 c5 14 31 24 80 2c ac 01 16 68 03 71 cb 67 86 23 a7 4a b5 61 65 cf 82 23 20 1f 33 18 20 17 ab 20 54 99 84 19 0c d6 58 7f 0e 15 e0 47 00 55 a0 e0 d4 b8 13 e4 fe 41 2a 0b c9 b8 1f 74 de 8b e9 67 a4 46 c0 5c b1 e6 8c 97 2a 33 54 ba 96 84 38 e7 6c bd 91 f2 81 52 86 8f 29 00 5a Data Ascii: 4000b#NlEqSvEX0<<!B91/~o'p!H)7"QZHi62nBpY, uLASC\0. lP/QORiXIcsL71$,hqg#Jae# 3 TXGUAtgF\*3T8lR)Z
2023-08-10 21:19:01 UTC	3707	IN	Data Raw: 79 08 1d 81 62 85 0d 0a Data Ascii: yb
2023-08-10 21:19:01 UTC	3724	IN	Data Raw: 34 30 30 30 0d 0a ff 1c 94 6a e5 31 8e e4 28 aa 4e 69 85 16 b3 19 f9 f3 dc 46 8a 4a 22 e4 34 90 12 82 24 f9 01 d4 c0 24 b8 43 19 44 09 8f 90 7c 05 04 c0 b2 91 e7 d5 0a 14 a1 3f 03 02 d9 60 08 73 6b 6e 65 f4 49 66 4c e3 91 3f b5 12 77 7e 2f 8c ac 07 a9 d4 10 8f b6 5a 36 c0 11 76 f8 d6 9c eb d6 af 63 35 dc 63 53 d4 1c af eb 58 1d c6 ee 3a 4e f0 be a1 c0 c4 9e 19 3d dc 13 eb 38 7a b8 df 9a bc af 39 b8 bd 01 40 63 73 2b e9 f8 71 9c 77 36 1c 99 33 ca 9f 6b 94 77 c2 2e 1f 46 8c 9f 32 bd d7 82 e1 4e 57 2b 71 37 72 d7 f0 70 97 dd 91 d1 f4 9c 72 6f 01 1f 07 6f 07 06 51 3c 7e 0a a6 64 c1 b0 b0 44 be 4c 99 37 bb c4 a7 a5 3a 32 3d 1c 45 58 2d 96 1f 82 22 14 3f 03 23 f6 63 f6 87 ac 56 94 40 3f 70 ca 76 20 b8 c0 0c 13 79 1b 78 2f 05 a1 23 5f 37 dd 10 d4 db 80 40 ce bd Data Ascii: 4000j1(NiFJ"4$$CD\|?`skneIfL?w~/Z6vc5cSX:N=8z9@cs+qw63kw.F2NW+q7rprooQ<~dDL7:2=EX-"?#cV@?pv yx/#_7@
2023-08-10 21:19:01 UTC	3740	IN	Data Raw: 83 ae 83 a2 1b 74 0d 0a Data Ascii: t
2023-08-10 21:19:01 UTC	3740	IN	Data Raw: 34 30 30 30 0d 0a 63 02 23 81 a3 27 f2 5e 20 6c e5 b3 24 92 71 39 00 c8 79 0c 38 e2 10 85 97 a2 3f 2c ca b2 fb ee 13 09 5a e3 dc 80 35 99 a0 25 20 15 5c 31 5e 8f 1b 82 1b f0 f6 ad 3c 6e eb 68 8f ad 7e 56 dc 26 e0 2a c3 ad ff b2 8c df 4f 82 67 62 c4 ec f0 59 23 ff 92 3f 21 51 9b 06 5b 86 0b 9b 70 f3 a2 7a 7f 50 b8 80 4a 5e 53 cd 5b c7 e1 fe de aa 7b cf 2e a8 a1 31 63 f3 01 aa bf 7e 9a c2 43 2a fc 2e 4a af 9e 85 64 0d a2 79 71 8b e2 cb e1 3b bb 13 b4 de 9e 3e 3c fe c4 13 38 71 e2 c4 10 c6 9c ed c1 7b a7 08 71 5a b6 38 71 e2 04 36 6e dc 88 03 07 83 db af 4b ce 4a 3e ff 45 30 0e 2a df 0e fc 83 ca bb 81 21 92 5b f5 bd e4 fa 76 fc dc 20 31 06 c5 e2 20 8e 1e 3d 82 e2 e0 a0 57 0c ac b5 92 24 d0 6d 1c 16 5e 93 da 10 f7 3a d0 3f 80 23 47 df 1c 9e 62 92 1f e8 b0 7e Data Ascii: 4000c#'^ l$q9y8?,Z5% \1^<nh~V&OgbY#?!Q[pzPJ^S[{.1c~C.Jdyq;><8q{qZ8q6nKJ>E0*![v 1 =W$m^:?#Gb~
2023-08-10 21:19:01 UTC	3756	IN	Data Raw: 8f 7f d0 41 88 30 0d 0a Data Ascii: A0
2023-08-10 21:19:01 UTC	3756	IN	Data Raw: 34 30 30 30 0d 0a 25 f1 ff b0 e2 1d 43 9a 9d 42 ef 0e fe 2c ec ff ab e3 8a 38 c1 fb 9a 82 3b 78 1d 21 b0 85 8a ed b2 99 23 9a 3d 10 02 83 f5 b4 43 79 57 15 60 66 e7 ee 6b 08 1d 1d ed b8 fe fa eb b1 74 c9 12 bc f2 ca 2b b9 f8 7b 41 c3 8c 92 28 83 7d 7d 03 78 ea e9 a7 71 e0 c0 01 4c 9b 36 cd b5 97 ac e9 49 62 50 2c 95 f0 c4 af 7f 8d 3d bb f7 40 33 96 e7 c1 00 be 4c db 25 17 5d 84 cb d7 ae f5 71 ee 3e cb b2 4d 11 4e d7 6b 08 79 65 3f 05 4a 72 bc 5e 3d 6e 86 2a 71 57 e8 b3 82 30 0d 10 4a 69 8a 87 1f 7e 18 77 dd 75 97 ab 73 4e 2a a8 39 b0 cc 40 94 95 3d 2f 58 57 0b a5 cd b8 9a ab eb bf 34 9c 39 63 16 fe e8 8f ff 18 1f fb f8 c7 31 75 ea d4 68 4c 54 7e 92 1c f1 94 da 29 fd c4 0d 5c 68 80 c5 f5 54 4f bc f5 24 da 8f 8d 19 9d 5d 1d 48 92 04 9a 48 0c e4 92 6d fd d3 Data Ascii: 4000%CB,8;x!#=CyW`fkt+{A(}}xqL6IbP,=@3L%]q>MNkye?Jr^=nqW0Ji~wusN9@=/XW49c1uhLT~)\hTO$]HHm
2023-08-10 21:19:01 UTC	3806	IN	Data Raw: 4c e0 c0 81 83 68 0d 0a 34 30 30 30 0d 0a b6 5a c8 4f cd f5 3f 82 e2 e7 f1 e2 c2 02 3e f7 b9 cf e1 a6 9b 6e c6 9b df fc 66 67 d0 a8 c4 96 8f 27 02 67 30 ab d5 6a 78 ee b9 e7 f0 37 7f f3 61 7c 4b 79 bb e9 b5 c7 98 08 83 95 8e b9 7f ff 3e ec dc b9 23 a9 42 0c 25 f3 f3 73 38 7c f8 10 0e 1d 3a 84 7b ee b9 17 77 de 75 27 be ff fd ef e3 e8 33 cf e0 f8 89 13 60 06 32 32 e2 c4 8c 87 1e 7a 08 7f f6 67 7f 8e 7d fb f6 63 f7 79 bb 83 74 d9 cb 2b 4a a7 7b ef bd 17 9f f9 ec 67 31 3b 3b eb ae 53 b7 76 a0 c7 5b bd 5e c7 b6 6d db dd ed 23 7e 9e 5b cb 83 83 be 2e 23 29 d3 76 d5 69 bd c2 0a 53 50 dc ab fa 91 1e 02 28 4a 53 e4 15 3c ad 2a ae 34 ad 3e 73 58 5e 5d 2b 6d c7 60 d8 55 6a 47 60 e2 54 fc ee 5d 55 02 63 77 cc 81 c5 8d 9e 9c c2 15 5c f8 44 19 f7 8a 98 5b 14 5c f0 36 Data Ascii: Lh4000ZO?>nfg'g0jx7a\|Ky>#B%s8\|:{wu'3`22zg}cyt+J{g1;;Sv[^m#~[.#)viSP(JS<*4>sX^]+m`UjG`T]Ucw\D[\6
2023-08-10 21:19:01 UTC	3822	IN	Data Raw: 42 15 ad 8b 04 50 16 76 3a ad 28 f1 5e a9 0d 0a Data Ascii: BPv:(^
2023-08-10 21:19:01 UTC	3822	IN	Data Raw: 34 30 30 30 0d 0a 4f 14 77 fd 1b 40 88 aa cb aa 1e 65 10 60 8e 3b f5 c6 2b ee a1 51 64 c0 c6 04 63 81 73 e5 f6 67 c8 83 7b a7 18 03 dc 31 02 eb 0d 12 62 36 62 65 d4 08 a3 2d 75 57 c1 5a d2 71 f9 51 c2 87 81 bd da 69 a9 10 b5 77 85 84 c8 d3 ea ae 28 b0 3e 8a be bf 26 32 fa f9 84 d0 8f a9 52 5e b8 c2 8f a0 c2 ef 15 76 58 04 36 15 ea 17 d8 d1 04 e4 3e 8b 21 fa 24 d2 3f 03 05 4f 23 8e b0 61 7c b9 18 c5 38 38 41 f3 20 d8 2c e8 29 bc f7 fe 04 ac 5d bd 4d ec 27 af 84 87 fd 08 f3 be 01 b0 fb ee ce 51 c5 3a a5 ca 91 fa 41 28 d8 af 56 3d 69 fa 9f 9d b8 3e 53 74 5c 29 ec b5 83 7b b6 e2 fa 1c 1d 5f 18 74 5c ed b4 96 b8 3e c7 fb 7a c1 3e bb e8 28 e9 6c c5 f5 39 3a 06 b8 5c f0 00 08 e2 72 b2 db a7 8a 30 bc 9b 7f f5 4e 16 ab 7d 15 f9 cd 45 8d 9f e2 1e 5a 15 8c ea 54 da Data Ascii: 4000Ow@e`;+Qdcsg{1b6be-uWZqQiw(>&2R^vX6>!$?O#a\|88A ,)]M'Q:A(V=i>St\){_t\>z>(l9:\r0N}EZT
2023-08-10 21:19:01 UTC	3838	IN	Data Raw: f6 3f d5 2b 47 50 0d 0a Data Ascii: ?+GP
2023-08-10 21:19:02 UTC	3838	IN	Data Raw: 34 30 30 30 0d 0a 2e d0 c6 04 85 2c ec 4c 01 08 67 83 28 85 11 72 48 1d 8a 4e e4 ff c6 80 37 01 58 30 0d a5 fa 99 01 93 0d ae 5a 00 c2 4e b2 81 8b c2 9c 93 d4 c9 ce 20 96 e7 a8 37 1b e8 a0 8b 76 cd 62 6c e7 66 ec bf f1 4a 8c ed de 1e ae 1c 0a b3 c2 37 af b7 a5 7e 75 e8 b8 3e d8 db d2 5a b1 b4 39 93 3e 4f 94 98 34 64 a9 7f 59 c8 ef 9f c5 a7 2a b0 9e 28 ed e1 6f 41 db a2 38 26 8b 8c 37 92 b9 07 ec d8 52 5f d2 5d 3f 18 4c 63 05 d8 69 09 44 fe 14 ba 16 6b 0e 39 95 11 2b 84 c7 54 ca 65 21 c0 6d cc 1e e2 67 0c cf e7 aa d2 0b 8b f7 9d fe c5 5c 9d 5c eb 5f 56 db 72 86 aa a0 47 26 39 1f ab dc 50 2a af 5a 92 73 af a2 fc 77 a2 c2 d2 69 b7 fd 77 f7 7c 64 74 14 5b 36 6f c6 cc cc 0c ea f5 7a dc 6d 61 c4 f3 d0 25 1e f8 23 c6 fb 84 76 0c b7 93 3c 32 82 66 ab 89 66 ab 85 Data Ascii: 4000.,Lg(rHN7X0ZN 7vblfJ7~u>Z9>O4dY(oA8&7R_]?LciDk9+Te!mg\\_VrG&9PZswiw\|dt[6ozma%#v<2ff
2023-08-10 21:19:02 UTC	3854	IN	Data Raw: d7 b6 c0 67 db 98 0d 0a Data Ascii: g
2023-08-10 21:19:02 UTC	3854	IN	Data Raw: 34 30 30 30 0d 0a a7 0d 3e 57 df 2d 23 f5 3f ee c5 24 17 91 cb 65 9c 04 86 10 59 77 4b 66 b3 19 97 77 ae 72 ee ca 45 9e fd fa 0b dc 7c e7 53 6e 7f 74 93 83 9b f7 58 1d 1d 33 ac 07 40 09 fd 8c f5 4c e8 76 f6 b8 78 f9 02 57 5f 7e 8e 2b af 3d c7 c5 e7 9f a6 3f b3 03 73 d0 4e b1 33 01 41 48 84 a4 f4 93 31 19 22 4f 08 24 13 34 68 27 3a bd a9 64 ca 25 10 13 ac d7 e8 7a 8d a6 08 31 e1 67 03 db a4 37 28 62 35 0a 4c f1 da 3b 2f cf 6d bf 36 f6 41 eb 1d ce 8c b8 5d 87 bc a5 a9 47 5b 8e fb de 26 82 9c 52 4e a3 78 e3 46 78 4d ae 97 ea 1e 00 99 4c a9 11 36 da f9 aa a4 11 9e 78 f8 99 8d d9 71 64 3c 66 95 44 3a 3c a2 53 25 68 b0 5a 10 5d 56 e4 d5 3c 46 6e e4 2b 73 2b ca be 01 5e 73 38 5e 51 d0 8b 21 60 0c dd 2a aa e4 51 34 c5 8c a4 0c 58 51 26 7d 27 05 89 99 48 8e b1 6e Data Ascii: 4000>W-#?$eYwKfwrE\|SntX3@LvxW_~+=?sN3AH1"O$4h':d%z1g7(b5L;/m6A]G[&RNxFxML6xqd<fD:<S%hZ]V<Fn+s+^s8^Q!`*Q4XQ&}'Hn
2023-08-10 21:19:02 UTC	3870	IN	Data Raw: 6f 0d 89 c6 a8 2a 0d 0a Data Ascii: o*
2023-08-10 21:19:02 UTC	3870	IN	Data Raw: 34 30 30 30 0d 0a 29 d4 f6 f7 56 c2 19 f5 dd ac d3 63 f4 5d 21 e2 81 7b da 10 ea 16 87 9a 5a 05 6e d4 d8 e8 bb 8a 9d 1e de ef dd 24 11 12 29 af b1 79 0f 34 74 c4 c5 2e fd d9 73 c4 ce 24 b7 2e 7c 41 6c fd 03 ed db ec 9b c7 ed db 57 b1 fd b4 ad 37 5c 3a 65 f2 c0 e9 57 cb e1 75 7a a3 79 47 b3 df c6 a3 f7 cc 51 13 54 d4 bd 71 b9 2b 2f d4 25 d9 53 a8 40 8a ca f5 eb 0f b8 fe e9 03 5e 7d f5 3c f3 19 3c fd d4 8c b3 fb 33 e4 38 31 44 8b aa 3a b7 d7 73 f5 a9 05 fb 73 b1 b0 63 a0 ef 84 97 5f ba cc d9 bd 19 07 4b 61 88 82 c6 81 8b fb bb 5c bd 78 96 b9 c0 b1 c2 ed 3b 0f b8 71 e3 36 31 82 76 79 f7 27 53 50 ea e0 72 18 2e 8a 8a d7 0e 99 ca 11 9b 20 34 05 1b 47 f2 8c 75 ee 79 1a a9 10 88 50 3c d8 85 24 e4 f0 61 cd 4c a0 21 ef cd 4b 7c ff 49 a1 b9 0d 47 68 e6 70 ca 3a 4e Data Ascii: 4000)Vc]!{Zn$)y4t.s$.\|AlW7\:eWuzyGQTq+/%S@^}<<381D:ssc_Ka\x;q61vy'SPr. 4GuyP<$aL!K\|IGhp:N
2023-08-10 21:19:02 UTC	3893	IN	Data Raw: 5a 27 a5 19 c2 d6 0d 0a Data Ascii: Z'
2023-08-10 21:19:02 UTC	3930	IN	Data Raw: 34 30 30 30 0d 0a 17 a6 bf ea d6 01 2a 67 34 8d 44 24 f3 c4 a3 86 96 ea f2 bf 4d 67 46 76 57 db 2e 27 63 c9 90 2a 0c 7e 9e f8 26 48 ca bd 12 7a d1 92 99 02 83 69 d3 dc b7 83 8d be a7 d3 1e 11 cd b4 6f 7b 9b fa 95 f6 bd 26 44 40 0b 81 ce 0a 21 69 3c 02 a4 30 9c 99 72 91 63 cd 54 71 12 10 f1 a8 3a ae a5 e3 d1 fc 94 f0 ce f7 b9 f7 e7 ff 82 f9 9b ef b2 5a ec c3 bc 27 7a 21 04 67 4a 2f ef 29 09 cb 76 1d b1 bf 7f b8 ef ef 1e a3 8e 0c 9a 8c f4 2b 77 fd 32 31 6b e9 ab 95 c7 ca 0e de 7c 66 eb 5c 34 cf cb c6 4d 65 1c ab 60 1c b1 08 24 f1 99 61 2c 61 43 9e b3 cb 81 9f 7f f4 19 67 d7 ef 31 eb 3c 49 60 0d 7c f0 f9 23 3e fe fa 9a b5 cc 19 f0 f8 e4 48 1a f8 e2 eb 2b 3e f9 fc 92 f7 df 38 60 96 d3 96 3f 3e 8f 7c f4 eb 33 2e 97 89 21 f5 a8 3a 9c 0f a6 08 d0 3c 9f e2 3e 4e Data Ascii: 4000g4D$MgFvW.'c~&Hzio{&D@!i<0rcTq:Z'z!gJ/)v+w21k\|f\4Me`$a,aCg1<I`\|#>H+>8`?>\|3.!:<>N
2023-08-10 21:19:02 UTC	3946	IN	Data Raw: 5f 58 14 06 a1 dc 0d 0a Data Ascii: _X
2023-08-10 21:19:02 UTC	3965	IN	Data Raw: 34 30 30 30 0d 0a 6b ee 3b 60 c8 e7 43 b5 c0 41 2a bb 39 86 00 8c 14 ba 3e 96 f1 83 cb f4 d2 13 99 b3 64 df ad 39 9d 0b b7 f7 3c af 9d ec f3 fe fd 5b bc 77 e7 80 b7 8e 03 af 1f 08 87 b3 64 55 c5 34 8c 61 39 13 88 ea 64 69 5a 0a 69 de 19 23 c4 db c7 da 33 3b ed 77 7b b5 6e 5e c7 8d 6b 37 bc 16 da eb 95 c5 91 7c e6 c8 16 fc d4 22 ed e2 4e 92 11 47 a3 61 95 8c 70 5d 8e c9 36 84 57 e2 5f 32 ba cd 48 2f 0e 6b 2e 2f 2e 48 29 e1 bd af e3 6b 78 c2 9d 13 db 75 7f d7 93 bb 6e ef ba b6 f5 dd cd 07 65 f3 c9 e7 eb f7 c6 fb ed 21 dc 58 99 e7 1d f3 cd f7 6f 5c fe a7 f7 7d c3 47 ea 66 de 89 38 76 f7 fd 52 d6 b1 71 6f 6f 15 4b 2a 26 c4 95 fd e7 9c c3 a7 c4 e0 06 9c 77 f8 c1 5b 6e 80 38 a0 2b e3 af 96 71 0d 0a 7d f0 44 22 c3 7a c9 d0 39 96 3e b0 ea 3b ba 83 7d e4 f6 31 a7 Data Ascii: 4000k;`CA9>d9<[wdU4a9diZi#3;w{n^k7\|"NGap]6W_2H/k./.H)kxune!Xo\}Gf8vRqooK&w[n8+q}D"z9>;}1
2023-08-10 21:19:02 UTC	3981	IN	Data Raw: 33 06 ed 49 dd 82 0d 0a Data Ascii: 3I
2023-08-10 21:19:02 UTC	3981	IN	Data Raw: 34 30 30 30 0d 0a b0 38 e2 e8 f6 6b 1c bf fb 2e f1 f1 19 ab 87 8f 59 9d 9d 71 f5 f8 8c ab b3 73 96 d7 d7 a4 61 80 75 b4 18 58 ef e8 3a 4f 3f 9b e1 f7 e7 84 83 05 7b b7 6f 33 3f 3e a4 3f 3a 40 f6 e6 b8 7e 86 9b 75 ac bb c0 e0 1d 22 19 e1 10 40 3c c1 79 0b 11 10 ad 7e 9e ea 8d 11 1c 9c 65 0d f7 58 c9 a3 20 96 a7 c0 17 b7 7e 09 39 a4 27 20 59 98 77 5e b1 3c 52 d9 95 df 7b c4 97 b2 26 e6 42 5b 5c fd ab 35 b4 c4 52 36 8c 83 c1 7c 37 a2 fb e6 09 b7 fe d0 fe 21 b4 52 12 2c 25 53 6a f9 ba af a4 ee a9 91 f9 df 66 76 5f da 38 18 bf 59 59 b3 6c b9 b2 10 a3 84 aa 67 90 01 1f 1c 7e f0 68 0a f4 7d cf 6c 36 e3 f1 e3 c7 7c f2 c9 27 74 dd bb c6 28 67 81 55 dc 8b 4a 98 85 6d 6d 84 9f 6c db 2f e2 fc 38 fb d4 b0 b4 0e d1 8d 6f 15 61 69 97 b0 22 37 5c 1f 5f dc f1 cc c8 dc 6c Data Ascii: 40008k.YqsauX:O?{o3?>?:@~u"@<y~eX ~9' Yw^<R{&B[\5R6\|7!R,%Sjfv_8YYlg~h}l6\|'t(gUJmml/8oai"7\_l
2023-08-10 21:19:02 UTC	3997	IN	Data Raw: cd 2f f1 3a d5 8b 0d 0a 33 36 33 30 0d 0a 3a bc de 49 8e 43 c5 8e b2 34 ab d9 3d d8 b1 0d 71 db b4 f4 48 a4 de 01 ba 40 4b ba e5 ac 9d 0e a1 ad d3 ee 6d 26 66 d5 92 a3 f1 4c 98 ac cd 04 8f c2 2e f6 e6 f8 48 a3 e9 0c e7 7d 9b 0d 00 a1 b0 b6 33 47 b4 c0 d8 64 ba ff 8b e0 21 46 02 47 0c af 2b ff 10 81 c4 98 00 2c 31 01 1c c4 23 40 b6 08 2c a2 6b 68 1c 44 34 36 00 1a f8 e0 2d 20 13 42 29 d4 ba 5e e3 7f fe e7 7f f1 fc c5 1f f0 1f ff fe 1f 78 f1 f2 c5 31 78 32 8a 8e 2e 4b 03 76 8e d8 83 cf 9d e0 85 3e 47 7e cc 15 fb 31 fb a0 73 e4 c7 94 d8 63 da cc 19 8e 09 5b e9 28 65 8e 83 4a 9a a0 31 33 ea 46 56 fe 81 10 f4 cf 05 83 32 cc a7 1a 0b 10 e7 24 89 da 2b ac 4f a0 ef eb 2a 55 dc 7f b3 a5 3c 33 7a e3 01 66 8f 6c c2 e6 5e ec 4d e5 1a 5f ee 88 cd e6 4e 4f b5 ec 1c 0f Data Ascii: /:3630:IC4=qH@Km&fL.H}3Gd!FG+,1#@,khD46- B)^x1x2.Kv>G~1sc[(eJ13FV2$+O*U<3zfl^M_NO

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.3	49863	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:01 UTC	2899	OUT	GET /static/webpack/production/c025b20740bee5bbd20e.CFVe0o7N1UFEbh-B9NSjEJmLH7rMhTo61iCmucFn2tQ.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:01 UTC	3708	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 79619 Connection: close Date: Thu, 10 Aug 2023 21:19:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:36:09 GMT ETag: "629effa9f7b432972733489bcc0561f0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 b03c46754456cd1729ff37c2faafd4ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: J5oCwV1MVHFfNOIcPwEDgUruzZTrnf7LPBsQjrhyHuLWr8HJDYqGwQ==
2023-08-10 21:19:01 UTC	3709	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd ed 72 db b8 96 28 fa 5f 4f a1 68 ea 7a a4 09 a5 c8 4e ec 38 f2 56 e7 3a b6 d3 71 b7 1d bb 63 27 e9 de 39 29 17 25 52 12 3b 14 a9 26 29 3b 6a 47 53 f3 1a b7 ea de bf e7 15 ce ff f3 28 f3 24 77 ad 05 80 04 40 90 a2 6c a7 f7 9e 53 d3 b5 77 2c 92 f8 58 00 16 16 d6 37 9a 37 5e e0 84 37 9d ab ab 93 b3 fd c3 fd 57 27 47 f4 e3 e8 f0 ea e0 cd fb b7 3f 5f 5c 5d f5 57 96 f8 f6 ed d3 e7 56 67 36 8f 27 cd 4f 9f 1a 33 7b e6 46 57 03 a8 e4 46 ff ce 1f e6 81 e3 bb fc 61 e8 87 73 e7 ca 09 87 31 7f e1 05 23 7f ee 06 c3 b4 78 60 27 de b5 7b e5 b8 f1 97 24 9c f1 97 33 6f 24 2a 24 ee bf 0f 9e ed ba cf ba cf 46 8d cf d6 6d 6d 73 7b 7b b7 37 9a 07 c3 c4 0b 83 a6 6b 25 ad db b3 c1 ef ee 30 e9 38 ee c8 0b dc f3 28 84 6a c9 a2 99 58 8d ab 2b 37 Data Ascii: r(_OhzN8V:qc'9)%R;&);jGS($w@lSw,X77^7W'G?_\]WVg6'O3{FWFas1#x`'{$3o$*$Fmms{{7k%08(jX+7
2023-08-10 21:19:01 UTC	3772	IN	Data Raw: ac cf a5 24 e4 b2 47 a2 e0 39 da 0f 2e 01 37 fb e8 45 1e de b0 b7 fc 85 17 7f b0 7d cf e1 6e af 52 ad d7 61 74 41 69 f2 bc 94 16 17 f9 a4 3c 55 58 1f 9e 46 e2 39 bf 14 1e f6 a8 4a 1e 98 af 17 d2 0e 87 ee f3 70 b4 3d 0c 14 c3 e9 e0 bd 1f fc 05 00 32 b5 13 d8 f1 f3 e6 ad 1b 45 e8 9b c2 34 a6 f8 1b 5d 68 d9 dc 09 2a 41 cd e3 f9 07 3c 03 25 81 8e ec 91 f8 78 88 bf 49 b9 fc ce 45 e5 02 7f 7d 1c d4 d9 33 ba 6c 20 af cd df bf c6 df b8 d1 f7 0a e2 94 39 38 48 2f 46 8b 17 7f bc 1e 1a 94 8b 3a 94 74 bd f9 ee 96 bf 69 b8 9f bc 08 78 ba 5b fe c5 e9 e3 e3 3f f2 75 f2 63 a2 db 40 8e ae 27 37 3f 1b 54 92 86 b1 62 f9 bf 2f 62 ef 4f 43 e0 67 36 05 45 a8 91 b3 74 7f f2 3b 87 e1 90 95 ec 10 74 96 fc e6 98 c3 a9 bc a4 6e 3e 13 8b a2 22 a4 29 d6 84 82 7c fe b6 8d bb 4d 43 67 Data Ascii: $G9.7E}nRatAi<UXF9Jp=2E4]h*A<%xIE}3l 98H/F:tix[?uc@'7?Tb/bOCg6Et;tn>")\|MCg
2023-08-10 21:19:01 UTC	3788	IN	Data Raw: 6d 40 a0 36 8f 75 af f3 32 b4 48 74 af 22 d0 a1 79 5a 28 44 b3 4a 1d 95 69 16 b4 61 6d 41 c3 54 51 57 9d fd 69 1e 3b e3 11 ce d1 a0 66 07 52 3d 24 1e 01 63 47 b9 f3 6f e3 cb 08 f6 5d ae c5 22 38 4c 69 2f 05 80 ca b3 17 ba 31 ad ab c1 a7 ac 4a fc 94 c6 30 83 1a 42 e5 6c 24 42 12 1c 66 94 f3 aa 7f 6c a9 28 0f 8b 67 a5 23 62 17 c7 01 6b 4b 01 57 5a a2 92 dd 8f 59 dc 75 24 e0 c6 0f b4 e4 18 fc 29 cc 1a ce a1 48 41 84 2a 23 47 80 af fc 76 c2 85 eb 8f a3 a1 48 ab b1 fb db e5 fb 77 8e fc d3 f5 97 c2 cc 43 69 e2 c4 e7 1f b2 2b 11 40 b0 fb cb cd f3 37 8e cc de f2 f3 4b 28 e9 c8 c9 71 12 77 50 c2 ff 90 a0 1f e5 2d 3a 01 91 7a dc 78 c6 fa 70 11 ce 87 6d 92 ae 5c f9 0d 84 87 94 e3 f6 de 20 ed b8 63 cb 90 7a bc d2 7d 5f a8 f1 65 e7 d5 a7 91 d9 39 19 ab 5c 0a 85 5e a4 Data Ascii: m@6u2Ht"yZ(DJiamATQWi;fR=$cGo]"8Li/1J0Bl$Bfl(g#bkKWZYu$)HA*#GvHwCi+@7K(qwP-:zxpm\ cz}_e9\^
2023-08-10 21:19:01 UTC	3804	IN	Data Raw: e7 25 34 73 8b d5 bd 08 c2 6b fc 0e 5e 6f 63 8a 26 78 15 74 28 cd f9 4e 5a 8e df 47 03 8c a5 0e fc a0 f3 3e 3c c3 f7 43 31 2d 9f e2 a2 88 2e e2 22 f0 ef 5a 18 8e 81 d1 18 65 32 29 7a 98 45 ca bb 3d b8 d9 de ed 7a a1 58 26 51 b8 e7 e1 d6 6d 63 d1 36 96 c5 bc 2d e1 a1 46 40 22 58 67 ce 4f 5f 60 88 72 b0 2e 5f b6 4b 5f 4a 8d 82 bb 27 fb 3b 67 17 e7 e0 8b fc 82 60 be 10 ce 96 c3 35 05 5a d5 1d e1 06 11 c4 cf 7a 29 59 65 3b 35 50 4b 0d d3 12 9f 60 d6 ab 6a 1b ce e6 4b 6c 8a 0a 9a b8 4e 0a 5f a5 83 02 65 41 04 c3 a1 c1 d6 87 db 33 3c f1 e4 73 ef b4 92 45 46 06 63 ba 15 46 8a 26 46 74 48 21 da fc 04 b9 42 5b 50 e0 27 94 5d 8e 71 73 34 c2 eb de 89 5e 3d 50 7f a4 9f 9b 86 ad 7b 48 9b 76 eb 1e 0b d8 7a e8 0a 4e 73 98 2c 58 9c 78 d2 5b 59 95 21 97 6c 23 48 18 a3 26 Data Ascii: %4sk^oc&xt(NZG><C1-."Ze2)zE=zX&Qmc6-F@"XgO_`r._K_J';g`5Zz)Ye;5PK`jKlN_eA3<sEFcF&FtH!B[P']qs4^=P{HvzNs,Xx[Y!l#H&
2023-08-10 21:19:02 UTC	3895	IN	Data Raw: ed d1 d7 e3 67 e7 23 bb da 4d aa 04 e6 62 05 aa 69 43 3d 6d a8 a8 0d 35 b5 a9 2a 9c 24 a8 ac 4d b5 b5 b1 3a ea f7 4d 96 7f 39 8f cb 12 b6 1b b6 75 19 e7 dc ca e7 b5 34 fe d7 8d dd ca 67 28 df e6 0f c2 b6 fc 04 e3 4f 2e 81 95 85 bf 87 d9 00 3d 52 e2 09 4c 12 39 fb c7 d1 c5 34 2e e0 36 b8 8c 49 58 a1 da b7 d3 a3 97 1f 5f b9 6c cc 11 da 97 61 6e a0 1e ec 31 d6 84 f3 9d b7 eb ba da 49 4a 45 b0 3a 1a c3 55 04 57 74 bd de 05 de 80 dc ce 6f 93 72 f7 d9 8e dd ce 27 f8 82 ab 95 df b4 f1 23 34 6a 2f 79 ae 2c 36 a4 92 18 ab 6c a5 fb 51 1e 5d 11 f0 ba c8 d5 e2 3f 8a 4f 06 9d fa 1d 29 55 3a 5b 07 db 9b 47 db 67 9f b6 b7 8f 76 76 7f 3e db dd 83 1f ef 0f f6 3e 9d 1d 1d 6c fe 76 fa f8 b1 f3 23 59 7a 6f f7 ed de e6 c1 3b f8 f3 34 60 57 1d 2d d5 47 c5 92 c5 68 06 88 3b 87 Data Ascii: g#MbiC=m5*$M:M9u4g(O.=RL94.6IX_lan1IJE:UWtor'#4j/y,6lQ]?O)U:[Ggvv>>lv#Yzo;4`W-Gh;
2023-08-10 21:19:02 UTC	3911	IN	Data Raw: 14 13 8f b7 54 6d 98 99 09 9a 7e 0e 83 bb 33 75 0a b2 76 91 32 90 d4 e3 f3 47 59 65 bc c8 5a d9 48 49 b1 ae cd 33 79 8f 58 d3 72 ab a3 ae ce d0 f2 51 0b 7d e6 3e 04 c3 ac f2 2e e6 d6 90 54 d0 04 12 80 03 c9 fe 33 31 89 36 a6 5e b0 1f 3d 3e d6 7c 71 60 af ef c7 3d ca ef 9b e9 ca 2a 7e 05 5a e3 12 9f ff b5 6b e3 20 6f a6 99 6b 09 45 69 3b c7 62 e2 9a 73 11 ca e2 42 7b ae 56 55 cb 51 cb d1 c4 8c 2e 4f e4 3b 2d 49 5b 1f 26 8c e0 ba d0 a7 8c af 78 c4 02 18 cb 42 1a 72 85 85 d3 09 84 58 dc 27 be 0e c7 54 29 4b cb c1 cf c5 67 c4 c8 46 b9 37 99 5c 92 66 4b 9b ac a0 3d 17 f3 15 9b eb 0d da 38 2e 5a 83 02 6a 1a 5c 7c 51 f7 ec ce d8 bd ba 37 6b ec 78 a8 fb 6a 69 39 62 0b 07 87 b2 86 ae 13 f9 b7 e1 0d 10 50 23 01 36 8c 17 8a 0d 18 8a f5 7d 2b 20 f9 1a d7 6c 2e e3 aa Data Ascii: Tm~3uv2GYeZHI3yXrQ}>.T316^=>\|q`=*~Zk okEi;bsB{VUQ.O;-I[&xBrX'T)KgF7\fK=8.Zj\\|Q7kxji9bP#6}+ l.
2023-08-10 21:19:02 UTC	3919	IN	Data Raw: 6a 52 81 62 4a c7 ed 44 c2 95 f6 38 10 29 4e 68 8b b5 96 2d a1 25 6d ef d2 9e 26 04 c3 af 3d e6 dd 7b 2c 5b 69 43 e1 5f 3b d8 c3 36 6d 69 12 15 ed 35 b8 22 aa 8f 00 03 80 bb d5 a7 85 46 5e d8 42 20 88 03 6c 93 8c 20 86 8f 32 5a e8 15 24 c3 71 e3 30 ef e8 88 6d 80 2c 13 b7 10 36 da 42 ba a1 85 6d 55 49 77 10 eb 02 74 41 ab bf 83 7a 04 7e 4d 22 e4 8f c9 0e d2 16 c8 f2 4e 9f 68 01 55 d3 4d c1 09 ab db f8 19 bc 22 76 b1 83 2c 03 d8 d1 1e cb 31 52 51 70 40 50 2c 89 95 6f 21 b2 00 b2 2a 51 05 e2 1c 38 00 53 da 1e 76 0b b4 0b 23 c3 8e eb 93 c2 d5 c0 a5 05 0d 07 b7 32 74 4f 20 6d b1 38 c3 5d 48 8c 07 75 56 58 62 54 1e 79 0b 6e 13 d3 25 be 88 73 69 23 2c f0 93 f6 1a 12 53 87 88 1e 25 cc 0e 0c d7 61 ca 41 65 7d 93 b6 35 02 0e 1d 23 b4 b8 15 10 15 ed 2a 8e 40 1c 1d Data Ascii: jRbJD8)Nh-%m&={,[iC_;6mi5"F^B l 2Z$q0m,6BmUIwtAz~M"NhUM"v,1RQp@P,o!Q8Sv#2tO m8]HuVXbTyn%si#,S%aAe}5#@

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.3	49865	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:01 UTC	3488	OUT	GET /static/webpack/production/963f506dd3b13f085f86.9xSTzoX27fePTtpU9w3kQf0jim1dDShjEsYt5H_LWjc.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:02 UTC	3886	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 42449 Connection: close Date: Thu, 10 Aug 2023 21:19:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:36:10 GMT ETag: "3059a3e5a0ba887521c0da9fb013a9be" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 2177a1d449a3e8dc7269040f15d81cb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: 1ytB8amOr3j3coDuN2auc_wyeh-EejweESRCv-HC8o6ZUpJbj-Q1hw==
2023-08-10 21:19:02 UTC	3887	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd d9 76 e3 46 b6 20 fa ce af 90 70 ce 55 03 2d 90 96 72 4e d2 28 b5 52 a9 74 ca ce 4c a9 24 a5 5d 65 5d 2d 2d 88 08 8a b0 40 80 06 40 0d a6 d8 eb fc c6 7d eb 75 1f ee 87 f4 a7 f4 97 dc bd 77 0c 88 00 02 14 e5 a1 4e 77 ad 55 4e 31 10 73 ec d8 53 ec c1 bd 8d d3 28 bb ed 5d 5c 7c 3a dc 7d bf fb ee d3 3e fd b1 ff fe 62 ef e3 d7 2f 3f 9c 5c 5c 04 8f d6 78 78 38 3b f7 7a d3 59 31 76 cf ce 9c 69 38 65 f9 c5 25 34 62 f9 7f 17 3f 66 69 94 30 f1 63 98 64 b3 e8 22 ca 86 85 28 f8 25 2c 26 71 ca 2e 4a 56 94 b2 2c 0d cb f8 86 5d 44 ac b8 2e b3 a9 59 38 c9 2e ff fb 8b e1 76 f8 e6 ed db 6d e7 dc 9f 77 b6 5f bf 7c dd 1f cd d2 61 19 67 a9 cb fc d2 4f bd f9 e1 e5 2f 6c 58 f6 22 36 82 be 8f f2 0c 3a 28 ef dd d2 77 2e 2e 58 f1 39 8b 66 09 73 Data Ascii: vF pU-rN(RtL$]e]--@@}uwNwUN1sS(]\\|:}>b/?\\xx8;zY1vi8e%4b?fi0cd"(%,&q.JV,]D.Y8.vmw_\|agO/lX"6:(w..X9fs
2023-08-10 21:19:02 UTC	3893	IN	Data Raw: 5a 04 d8 1b 60 98 e5 9e f2 eb 0d b6 90 5a 0f ca 6f 65 54 92 41 29 2d ea 01 e9 9e 95 e7 9d 41 d6 d3 81 76 63 43 dd ae 20 c8 48 a9 ba b1 e1 9a 75 02 f3 e7 92 15 75 b7 83 e0 ac ba c2 ea 6a 9d f7 30 46 d2 dd e1 c8 25 d9 4f bd ad b1 45 0b b1 48 06 16 c2 a2 db ba ca 15 03 f1 73 d0 cc 1e 80 b9 22 c4 dc 4c 76 88 26 6b df 7c e3 78 cd ef e3 ac 28 d1 45 e5 ec 1c b6 4b 75 9b a2 99 ba b9 39 25 77 88 e6 80 91 d2 f6 28 98 48 7b e2 2f 9f 9c 66 fb 68 dd 85 a4 91 dc d3 24 4e 30 3b 6c ca 9a d2 ec 78 e2 ca de 7d c1 51 73 29 99 4e 9d 9b a6 9b 20 a7 fb 57 c0 32 c2 60 7b 10 7e 1b d8 6a 0e 36 37 43 29 d3 87 df 6e 6f ed 80 60 21 b7 24 f4 fa 8e f6 03 80 83 d6 ab 66 53 f8 4e 96 c7 57 71 1a 26 28 b7 63 48 88 e6 86 74 da 76 c4 36 1b b5 49 db d5 26 65 0b 14 46 33 00 de 30 80 bb 33 c8 Data Ascii: Z`ZoeTA)-AvcC Huuj0F%OEHs"Lv&k\|x(EKu9%w(H{/fh$N0;lx}Qs)N W2`{~j67C)no`!$fSNWq&(cHtv6I&eF303
2023-08-10 21:19:02 UTC	3904	IN	Data Raw: 4c 4d 28 e7 05 3c 02 04 c3 50 88 43 09 1e 8b a1 52 fc d3 ac db e7 10 44 bd 6c 12 97 ee 6a a8 67 e8 71 ad ef b2 2d e3 b0 33 7e 74 51 4b fb 80 f5 8e 1f 1e c6 f5 f5 8e cd f5 ea e7 21 9b 12 a1 f0 16 5c 48 2f f6 31 90 27 a0 28 91 ed 46 0f 60 a3 73 97 46 64 b7 1a 18 92 32 18 58 e5 23 72 5f 2f bc 56 88 f5 db c0 50 81 9f 07 f3 a0 14 46 d5 9d c2 1b 96 93 86 9b a8 cb 17 0c dd 22 c2 e6 a1 c5 76 fb 68 80 8b d1 a0 90 df ba 74 10 e2 2b 04 6e fc c8 bf f2 f7 90 cc dc 53 be 23 6c fd b4 67 3b 72 bb c8 00 ab 51 2a 8e 36 e5 be 8b 97 58 44 d8 88 03 56 7f e1 c3 f6 14 cb 53 59 d7 c3 95 4f 02 56 b1 a7 ea cf de 04 98 84 50 93 55 5d 1e 99 33 91 18 3f e1 4c 35 10 03 7c 7c 48 f0 f3 50 14 16 07 93 f0 8a bd e3 86 e9 6e c4 6f e3 94 c7 66 40 07 2b 3d b8 45 e1 8f 82 f1 c6 c6 b8 4a de 34 Data Ascii: LM(<PCRDljgq-3~tQK!\H/1'(F`sFd2X#r_/VPF"vht+nS#lg;rQ*6XDVSYOVPU]3?L5\|\|HPnof@+=EJ4
2023-08-10 21:19:02 UTC	4012	IN	Data Raw: 70 48 ab f1 8a 2d 0a 48 db 03 0e ee 77 dd 12 a1 df 66 60 e1 eb e9 7e fa ad 46 0e 8d ac 37 6a 61 66 b9 11 16 83 ee 8f 83 8f 8f d9 ed 29 1c 7a 76 84 66 fc e3 2c 81 ab 5d 7c c8 34 a4 a7 81 c1 e3 75 7d 92 58 b8 2f 5b 2d 1f 2a 96 3d 3c 6c a1 13 71 f3 39 51 43 4f 2b 61 27 0b 86 f8 d7 a1 a7 66 f3 a8 67 a2 25 1b fa e9 fc 85 f8 e7 2f 46 3f 9d bf 0e ff fc 15 e8 a7 f3 57 e3 9f bf 1a fd 58 03 17 fd 39 f8 e7 2f 40 3f 9d 3f 80 7f fe 93 d0 0f 39 81 77 14 87 77 ba c4 b8 44 a8 62 44 b4 96 d6 3b b9 b1 31 22 f9 c9 75 34 3b 08 65 da 34 8b 51 6c 5a 6f c2 94 55 2f 02 35 2b ac 15 17 9a 35 d0 3b 86 80 52 14 c0 c0 47 da 13 aa 69 b8 82 09 55 57 30 f2 68 73 05 58 c9 d8 63 89 c5 bd e7 0d 9a 26 18 8d f8 27 b9 3b ef 28 2b 20 74 24 11 91 ed 9d 3e a6 90 d0 cb 79 e9 3a 6a 8b 1a 78 f7 a4 Data Ascii: pH-Hwf`~F7jaf)zvf,]\|4u}X/[-*=<lq9QCO+a'fg%/F?WX9/@??9wwDbD;1"u4;e4QlZoU/5+5;RGiUW0hsXc&';(+ t$>y:jx
2023-08-10 21:19:02 UTC	4024	IN	Data Raw: a4 57 43 55 2d 8a fb 97 ac 1a c4 fc ef d4 ca 5e 36 2e ec ce b7 72 88 38 6f aa 61 6d 9d 28 e8 9d 25 f6 b4 da 88 b6 d2 92 5a 1e 31 73 2d cb ed 00 af 2d 8e 08 9f 0f 71 c4 c8 a3 de 06 64 40 60 9b 76 18 e5 29 53 76 d3 16 5b 7b c9 71 3b 3b 1a 22 69 15 e5 19 55 28 1c 34 01 3c e0 88 2a 13 53 29 e9 6b 0b 68 e2 50 d0 1f b2 5b 03 1b 4b 4e 19 8a dd 13 93 07 f6 a0 4f 64 0a 36 18 95 06 d3 29 e4 26 d2 2e 2e 05 cd 79 78 ba 15 f4 0c cb e3 ed ed 64 d9 b6 b0 ea a4 dd 41 71 85 1b 73 82 aa e5 73 7a ca 17 82 56 65 4f cd 5d 7c 8a 75 95 91 65 61 cc a9 ed 44 1b 50 96 bd 3a bd d5 a0 37 18 9f cb 27 1b 00 46 f5 f2 3a a1 72 11 3f b2 f7 09 ff d9 a2 39 a0 04 59 8f 36 a9 98 bc dc 09 70 67 46 71 ef 0a 45 d0 b4 6d 57 01 a6 73 5f a2 70 45 11 f0 22 ac 9e 78 cf 79 a6 d4 f4 ea 5b 0e 63 b8 25 Data Ascii: WCU-^6.r8oam(%Z1s--qd@`v)Sv[{q;;"iU(4<*S)khP[KNOd6)&..yxdAqsszVeO]\|ueaDP:7'F:r?9Y6pgFqEmWs_pE"xy[c%

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.3	49864	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:01 UTC	3489	OUT	GET /2/cloud_docs/log_client_event HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:01 UTC	3691	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Content-Length: 122 Date: Thu, 10 Aug 2023 21:19:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ced11d7c5ac0480db4d54e3f9128d6fc Connection: close
2023-08-10 21:19:01 UTC	3691	IN	Data Raw: 45 72 72 6f 72 20 69 6e 20 63 61 6c 6c 20 74 6f 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 20 22 63 6c 6f 75 64 5f 64 6f 63 73 2f 6c 6f 67 5f 63 6c 69 65 6e 74 5f 65 76 65 6e 74 22 3a 20 55 73 65 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 73 20 69 6e 73 74 65 61 64 20 6f 66 20 47 45 54 20 74 6f 20 61 63 63 65 73 73 20 44 72 6f 70 62 6f 78 20 41 50 49 27 73 Data Ascii: Error in call to API function "cloud_docs/log_client_event": Use HTTP POST requests instead of GET to access Dropbox API's

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.3	49866	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:01 UTC	3602	OUT	GET /static/webpack/production/40510ae9daba5bc1eecd.V6a3ctxyWdzDRllwjLOfmIDzNHv4uE2gDbtPTAvJzfo.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:02 UTC	3946	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 50458 Connection: close Date: Thu, 10 Aug 2023 21:19:02 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:35:45 GMT ETag: "4158cd31625479157aaf571d60760761" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 fa2f998214db1c6c6bdb96ceff3ce5d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: w1G8ECR7MOCqlXAkS79zW1Y7_KrVRz0eiv2AfoArDh1uXvtBUZ2Asw==
2023-08-10 21:19:02 UTC	3947	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 59 73 e3 58 97 20 f6 8e 5f 41 a1 3d fa c8 4e 90 29 6a c9 85 fa 58 39 4a 2d 29 55 6a 4b 2d 99 55 a9 96 15 10 71 49 a2 04 02 4c 00 94 52 a5 e4 c4 37 d1 7e 69 bf ba c7 d3 33 5e 66 26 c2 31 e1 87 09 77 87 23 1c e1 08 f7 f4 c3 f7 4b c6 d5 0f 7e 6c ff 04 9f 73 ee 05 70 01 5c 70 93 94 95 e5 ee af bb 52 04 70 f7 7b f6 7b ee 39 e5 1b db b5 bc 9b da c5 c5 ee c1 da c6 da eb dd 4d fa b1 b9 71 b1 be 7d ba ff f6 f8 e2 a2 39 b6 c4 97 2f 67 e7 95 5a 7f 10 74 cb 67 67 7a df ec 33 ff e2 12 2a 31 ff 5f 88 87 81 6b 39 4c 3c b4 1c 6f 60 5d 58 5e 2b 10 2f 5c 33 b4 af d9 85 c5 82 ab d0 eb a7 5f f6 bc 4b 3b ae d9 b7 db a2 ce bf 58 ae 5b 0b ed 7a 7d 41 3f 37 ee b4 fa f3 e5 a5 46 7b e0 b6 42 db 73 cb cc 08 0d bb 72 77 70 f9 13 6b 85 35 8b b5 6d Data Ascii: YsX _A=N)jX9J-)UjK-UqILR7~i3^f&1w#K~lsp\pRp{{9Mq}9/gZtggz3*1_k9L<o`]X^+/\3_K;X[z}A?7F{Bsrwpk5m
2023-08-10 21:19:02 UTC	3948	IN	Data Raw: 62 b6 a1 42 a5 fa 14 79 26 df ba 41 b3 a0 29 80 a0 3b 8d b7 a6 87 76 8f 9d 78 ef 6d 76 a3 c3 f6 50 d3 5f be 88 b7 c0 41 99 6f b6 50 38 97 3e 2e 34 9b 21 6e 23 cd e3 bb 3a 6c dc 77 0b f3 f3 b4 40 c0 46 ca e2 43 d5 3e 0b ab f5 73 fe 50 f9 ae 8e a3 82 31 f7 a5 71 84 86 17 2f 8b 9f c1 ab c0 b8 03 d1 a1 11 52 9f 46 df 67 d7 27 88 ff f6 99 07 8d 1a 21 d1 02 43 83 0d a1 d7 ae 21 41 0b cb ad 29 c9 60 ab 05 3d 71 a2 40 c4 3d f7 c9 54 53 0b 00 a6 2a 13 6d eb 46 44 9b f2 32 09 93 e4 c2 14 3c 2b 87 38 34 74 fe 04 9c 3f 37 92 81 53 3c 14 5c 0d 64 df 03 05 61 59 0f 6c 5c a1 5d 3b 08 13 d2 32 04 49 a2 90 7c 98 04 3b 41 0a c3 b5 51 28 1e 4a f3 cd 6b 13 63 f0 55 4b 10 56 60 2a ce 26 8d bb d1 ee bf 52 bc e3 f0 d5 58 00 c4 26 08 6c 3b 1e 20 76 7d 61 e1 4f 63 40 0c 2b 4f a5 Data Ascii: bBy&A);vxmvP_AoP8>.4!n#:lw@FC>sP1q/RFg'!C!A)`=q@=TSmFD2<+84t?7S<\daYl\];2I\|;AQ(JkcUKV`&RX&l; v}aOc@+O
2023-08-10 21:19:02 UTC	3964	IN	Data Raw: a0 95 04 a3 b4 92 dc c7 a1 74 fd e2 9a 9b 85 59 4e a8 af f2 d5 ac 72 93 55 2e a5 63 51 cc 75 c9 83 51 7c d8 74 2d b2 86 67 c5 e2 58 12 3e e4 9e 21 c0 95 22 49 59 44 ed e6 f2 31 0a f4 61 1c 31 79 44 16 f9 02 0d 95 cf e3 82 33 fe 54 d6 f0 4e b9 5f 93 04 88 d1 8a e9 66 cf fb c9 3e ee d9 0e 3b ed 07 b0 5d 1b de 4d 2a 95 49 c0 5a 20 86 37 e7 16 b2 2a ab fe 94 77 7d 9e d5 38 db bf 52 a8 d0 eb 54 84 50 fd 8f 7f fd 67 7f 76 51 fe fb 3f ff 6f 2a 17 4f ff f8 d7 25 7d ba d8 e7 0a a1 f1 52 9b 31 c7 bb d8 29 14 b3 b8 98 a4 de ac 58 68 9b 60 c3 b6 fc c9 b7 29 e9 f7 3c 97 4e 7b e4 5e 7d b5 ad 2a ff f2 af fe fa 8f 7f f3 cb 7f ff 1f fe f8 37 ff f0 b7 7f 01 0f ff f0 7f fe 1f a5 5f fe f2 ff fa e5 2f ff 25 fc 3b 76 eb b2 39 4c 0b 34 81 59 8f 56 a3 ed b3 3f 8f dc 3d 21 31 4f Data Ascii: tYNrU.cQuQ\|t-gX>!"IYD1a1yD3TN_f>;]MIZ 7w}8RTPgvQ?oO%}R1)Xh`)<N{^}7_/%;v9L4YV?=!1O
2023-08-10 21:19:02 UTC	4042	IN	Data Raw: 54 ca 5b 38 b8 8b d2 78 e2 a1 e1 75 ff 94 05 03 5b 04 e1 2e 45 4f e2 00 44 72 e8 1d be 9a 2a 2f 1e 0c c0 ca 83 b3 e0 38 8e 09 5f ca be 22 76 8b 71 77 0b c2 67 43 27 b0 b5 5b e8 54 ea 86 dd 86 ee 78 88 60 78 fa 17 7f 4a 85 25 2e 1f 4b de 1b b2 67 c3 74 09 7c 73 3c 9e 13 49 35 8b a7 93 d1 31 6e 5f 59 9a 2c 2f 2c 6f fb 3c 23 22 7c 1d 41 60 52 07 29 e0 ff 31 66 4c be 87 da 14 9b a8 c0 37 36 0b 63 4d f9 b8 7c a6 5d df 9d 7d d7 f9 29 74 91 b9 30 3a d2 be d7 e6 8b 2e b2 fb ff e8 5a 94 10 04 27 82 00 bb 72 57 66 cd 04 02 f0 fa 27 b1 6d 64 f9 f4 ab f2 a4 5e a1 d4 c6 b3 22 b8 36 25 70 84 b3 01 47 da 31 6a 77 75 9a 34 a5 79 7b 56 e4 5c 50 04 20 b1 b3 c2 3d 20 24 e9 e4 b7 0e 22 d5 df 02 88 e4 9c ea 72 79 4b c7 e7 bc bb 07 df 26 3f 09 05 df 46 97 89 4a 86 23 53 d9 f3 Data Ascii: T[8xu[.EODr*/8_"vqwgC'[Tx`xJ%.Kgt\|s<I51n_Y,/,o<#"\|A`R)1fL76cM\|]})t0:.Z'rWf'md^"6%pG1jwu4y{V\P = $"ryK&?FJ#S
2023-08-10 21:19:02 UTC	4051	IN	Data Raw: 60 b1 1b e2 84 2d d6 44 1c c9 b0 cf 6f 86 1e 01 4d 83 83 73 4f 11 13 b8 67 e8 cf c3 87 fc 20 1c dc ed 5d 1e 5c 5e f2 61 46 f7 82 3e dc c9 62 2c 71 37 02 56 32 e4 38 43 1f 25 b9 82 81 81 23 79 0b 97 0d ba 33 8b d4 9d b8 fa dc 4f ac 02 20 5b d2 df e3 64 0c 00 bb 3b 0d 83 2f 63 60 bb 12 7c 86 19 70 10 56 08 43 11 dd a1 0a 52 5d 45 54 ec 34 97 2a 08 0f 45 7e 4f 72 f5 b8 cd 5d 58 e5 58 09 55 9a 15 e3 5a 43 51 09 9b e3 3a b0 36 77 48 7d 5a b9 92 dc a1 28 c9 3d a0 7c 95 1e 06 27 40 7b a4 8d 18 d2 a9 fc 42 25 c1 dc bb fc e0 fb c0 10 37 63 81 89 ca bf 05 01 92 e5 3c f3 ee 42 77 18 f4 b6 8e 8f 9d 41 b7 f1 6f 8d 27 31 3a ab 78 dd 44 4c 33 8a 29 81 4f 73 80 21 81 6d 37 04 a1 87 ae a2 06 ca 6b 57 94 7a 68 a5 17 0d 40 26 5a 4b 1a d0 22 7b bc 85 4f bb 77 be f2 ab a0 66 Data Ascii: `-DoMsOg ]\^aF>b,q7V28C%#y3O [d;/c`\|pVCR]ET4*E~Or]XXUZCQ:6wH}Z(=\|'@{B%7c<BwAo'1:xDL3)Os!m7kWzh@&ZK"{Owf
2023-08-10 21:19:02 UTC	4067	IN	Data Raw: 03 c3 8c ae bb 87 1b f2 d9 61 8b 1a ed a9 46 33 8d ee b4 b6 73 90 44 ce 45 0a 95 06 ee d4 71 17 46 d9 c7 ff 7c c5 ff bc c7 ff ec 6a 14 7e 1b 1f 6c e2 7f 0e f0 3f 47 f8 9f 0f d9 7b a2 47 03 c3 ad 88 4f ca 97 ee 40 33 44 3a 6f f9 e7 4e 08 a7 dd 39 e5 1f c2 c8 b6 74 a2 8c f3 8a 54 36 bf 38 6f d1 36 bc 2b 69 31 d0 66 69 96 79 dd fd c2 b6 98 d7 ff e8 be 15 7f a1 55 86 2e aa 8f dd 99 54 2d 57 92 ea d4 79 ed ac 02 fa fc 91 eb e9 89 44 48 e1 15 55 f9 f2 78 5e d0 ba b5 fe c7 f2 b2 58 3f 1c fe 0f 20 a6 c3 4c 3f a8 5b e3 8f 33 b6 83 7c 9a e7 6e a4 19 e1 a0 b5 f5 4f cb cb db 2c 68 7d e2 01 de 74 11 34 48 60 5e 2f 2f 9f 76 ed b7 04 d9 bc de 2c 2f 7f 64 b0 ff d9 cd 78 0b d4 f9 c7 89 8f 8a 58 fa cc c7 22 4f c0 f5 1c b0 34 6d 63 ea fc de fd b3 4d 32 f9 3b f8 23 a0 0c e9 Data Ascii: aF3sDEqF\|j~l?G{GO@3D:oN9tT68o6+i1fiyU.T-WyDHUx^X? L?[3\|nO,h}t4H`^//v,/dxX"O4mcM2;#

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.3	49868	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:01 UTC	3650	OUT	GET /static/webpack/production/576659a22164beedaf0d.iBkLR8kQiVXjyu_-bIonCC35MIiJsyM15U4ExVbjfk8.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:02 UTC	4073	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 14742 Connection: close Date: Thu, 10 Aug 2023 21:19:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:36:09 GMT ETag: "4290032597940bdf204e32fa7c9cfe82" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 9c0ce977a13f3d9bbc6eed6540faf728.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: MmSJj9UMYn0HTYhqBnIMPR-fdoZrywqz1vSLASxwxUS4tfQyrOiFoA==
2023-08-10 21:19:02 UTC	4074	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d eb 72 db 38 93 e8 7f 3e 85 a2 ad ca 8a 35 88 7c 8f 63 e9 70 5d 8a 2f 89 33 be 25 b6 93 2f e3 72 a9 68 91 92 39 91 48 0d 49 39 d1 28 da da d7 d8 aa 73 5e 6e 9f e4 74 e3 42 80 24 48 91 4e 66 bf d9 fd 91 58 c4 ad 81 46 77 a3 bb d1 00 5a 5f 3d df 09 be b6 fb fd d3 8b de 61 ef f5 e9 11 fd 71 74 d8 3f 78 7b 73 fe eb 55 bf 6f ad 2c f1 fd fb ed 9d d9 9e ce a2 87 d6 ed 6d 73 6a 4f dd b0 7f 0f 95 dc f0 df f9 c7 cc 77 c6 2e ff 18 8c 83 99 d3 77 82 41 c4 13 7c 3b f6 1e dd be e3 46 5f e2 60 ca 13 a7 de 50 e4 3f 7a ee d7 7e e0 8f e7 ff 1e b9 83 d8 0b fc fe 24 78 74 c3 e6 1d 59 18 1b eb 5b 9d e1 cc a7 c9 2d 97 c4 c4 36 17 8f 76 d8 08 89 4f 02 12 91 01 f1 88 d3 bd b8 ff 1d 6a b6 1d 77 e8 f9 ee 65 18 40 ab f1 bc 15 93 66 bf ef 46 67 81 Data Ascii: }r8>5\|cp]/3%/rh9HI9(s^ntB$HNfXFwZ_=aqt?x{sUo,msjOw.wA\|;F_`P?z~$xtY[-6vOjwe@fFg

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.3	49867	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:01 UTC	3651	OUT	GET /static/webpack/production/2fb2466cd701c4229b26.Hd_QNpBbEqJ5m-AQdNL3G-r6QWSJOt0XRvH7T70qLxc.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:02 UTC	4038	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 3790 Connection: close Date: Thu, 10 Aug 2023 21:19:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Tue, 27 Jun 2023 23:21:04 GMT ETag: "1a56aec3b0f578225d15307bf444f2ea" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 6678c1810851ff197cbe3fe4c41e86a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: Dcdi3OBJE5sVbwNOq02h_YPWPl59nybLxNI8lYlXxQyMx8koCk6jmw==
2023-08-10 21:19:02 UTC	4039	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 5a 6d 73 db 36 12 fe ae 5f 61 f3 5a 0f 79 81 69 d9 4e 9c 46 32 eb 49 1c 5f d3 9e 13 a7 96 73 6d 46 a3 f1 50 24 24 b1 a1 40 86 04 9d f8 64 f6 b7 df 2e 00 92 e0 9b ed 4c 7b 99 c9 98 c2 db 02 8b dd 67 9f 5d d2 fc 12 30 3f fa 62 5f 5f 9f 5f bc 7c fd f2 d5 f9 99 78 38 7b 7d 7d fa e6 c3 bb 7f 4f ae af 9d 07 47 dc dd 4d 67 96 1d 67 e9 ca 9c 4e 8d d8 8d 69 72 3d 87 49 34 f9 53 fd c8 98 1f 52 f5 c3 0b a3 cc bf f6 23 2f 55 0d 7f b8 e9 3a 60 f4 9a d3 94 17 6d cc e5 c1 0d bd f6 69 fa 89 47 b1 6a 8c 83 85 ea ff 73 f8 c3 fe f3 67 2f e8 33 63 46 36 83 c3 1f 0e 46 8b 8c 79 3c 88 98 49 09 27 cc da 5c cc ff a0 1e b7 7d ba 80 a5 df 27 11 4c e2 b7 26 27 c6 f5 35 4d df 46 7e 16 52 83 6c 6e dc 30 a3 a3 ed 61 6e 8d b9 7d 15 65 c9 4f 49 94 c5 af Data Ascii: Zms6_aZyiNF2I_smFP$$@d.L{g]0?b___\|x8{}}OGMggNir=I4SR#/U:`miGjsg/3cF6Fy<I'\}'L&'5MF~Rln0an}eOI

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.3	49869	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:01 UTC	3707	OUT	GET /static/webpack/production/87df4624ffe7b5a7c2ce.GFvBN5WXECmkVw2Fb6h_LbiNdghMP8zM-DyMiIk6pQg.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:02 UTC	4090	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 130243 Connection: close Date: Thu, 10 Aug 2023 21:19:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:35:52 GMT ETag: "f8caad8ec85b0eafe2debb6738ce99ea" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 099d4ba9ace3ae96fa2a16ccfeeac6ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: qTHYcEE-5glTnFAHyDz-eiHQIt4zaBoqC3XhgJZwC3-QsM-a8Gmd8g==
2023-08-10 21:19:02 UTC	4091	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd eb 76 db 48 b6 30 f6 9f 4f 01 e3 7c c7 43 1e 83 94 28 4b be 50 c3 d1 27 eb e2 56 b7 2c 79 2c b9 7b ba fd 69 e9 40 44 91 44 0b 04 d8 00 28 99 2d 33 6b f2 33 3f 92 95 1f 5f d6 ca 59 2b 59 c9 53 e4 01 f2 28 f3 04 79 84 ec bd ab 0a a8 42 15 28 4a f6 cc 39 b9 cc c5 22 80 aa 5d b7 5d fb 5e bb 9a b7 61 1c 24 b7 9d cb cb e3 d3 dd fd dd 37 c7 07 f4 e3 60 ff 72 ef bb 8f 27 3f 9c 5d 5e f6 ef 2d f1 e5 cb a7 8b 56 67 3a cb c6 cd 4f 9f dc a9 3f 65 e9 e5 15 54 62 e9 7f 23 1e 66 71 10 31 f1 30 88 92 59 70 19 24 83 4c bc 88 fd 3c bc 61 97 01 cb ae f3 64 2a 5e 4e c3 a1 fc 7e 13 b2 db cb 24 8e e6 ee 85 77 d7 dd ea be ec 0d 67 f1 20 0f 93 b8 c9 bc dc f3 5b 77 8d d3 ab 5f d9 20 ef 04 6c 18 c6 ec 7d 9a 40 b5 7c de cc 3d f7 f2 92 65 ef 92 60 Data Ascii: vH0O\|C(KP'V,y,{i@DD(-3k3?_Y+YS(yB(J9"]]^a$7`r'?]^-Vg:O?eTb#fq10Yp$L<ad*^N~$wg [w_ l}@\|=e`
2023-08-10 21:19:02 UTC	4106	IN	Data Raw: 03 9e 82 cf 6d 6d 17 c7 76 af 92 60 4e 82 3e 8a 5d b4 ba 4d 3a 51 49 bf 5c 52 5c 08 80 8b 5e 4f e0 26 40 8a 2f 0b d3 17 74 3d ab 33 75 7c c7 a2 a9 c4 25 91 fa 4f da 38 e4 7a f7 22 2f e3 8e 8a 1d 17 c1 f5 5c 10 b7 5c 3a 2d 52 9d 0a 83 aa 4c 0d aa 52 ee 12 c1 cb 1a 26 98 49 85 b2 8d 2d b5 81 a6 0d 77 aa 15 57 11 98 56 69 ce 90 81 78 90 74 f7 c5 c6 f3 4a 46 bf c7 85 f4 f9 35 f1 07 04 52 58 06 f8 e9 71 e1 cf 10 c7 ce fa 39 3a 57 fd d4 c7 6b ac d3 8c c7 bb 95 cf b4 23 fb 6a 89 ba 1c c5 77 45 11 3c 8b 90 b2 0c 96 48 5c e1 d1 12 51 72 55 b0 9f 2e 16 9a 47 7b 16 5b a4 0b aa 19 83 90 fe 1e d4 7f ca a8 2b 80 60 2e b4 70 d8 cc c5 71 60 71 14 f8 93 20 5d 17 ce 9e 1f ff 21 77 00 a8 3c 95 e3 fc 97 32 06 40 9d 11 3c 7a f4 07 d7 99 b3 bc e3 14 d0 9d 2c 0f a3 c8 49 d9 6f Data Ascii: mmv`N>]M:QI\R\^O&@/t=3u\|%O8z"/\\:-RLR&I-wWVixtJF5RXq9:Wk#jwE<H\QrU.G{[+`.pq`q ]!w<2@<z,Io
2023-08-10 21:19:02 UTC	4108	IN	Data Raw: fd b3 f2 04 8e e5 db 27 9e 05 f9 32 f7 b3 6b d7 73 67 71 e5 91 2f 25 3d 5f d2 1d 1a ae 8f 39 71 2e e9 02 b6 4b 71 01 a2 fa 4a de 29 a8 be c3 3b 9c e8 e6 1b f5 e5 70 c6 c1 d1 c5 ee 13 5c 2d 78 1a 4b 5e 75 29 6e 7c 0b e3 0c 86 7c 49 d9 f3 f0 ba b7 31 e8 1f 97 a0 f0 c0 ef a1 7f 93 e0 a9 19 f1 48 89 35 e3 5c 3c 71 34 10 0f 64 e7 cf 08 97 e5 13 0e 28 c2 94 1d fc 71 9c e4 98 9a c1 bd 68 c0 3a bc dc f8 06 59 bc 29 72 8e 3c 94 a0 3c 09 1b 3e 65 92 c2 e3 49 ef fd a0 4a d4 37 85 7b ee f5 0a 55 f5 ce 79 21 bf d4 18 b4 a5 74 7e d7 a0 fb 8d 85 13 97 72 95 12 a4 a6 cc c8 58 86 a4 c4 55 c5 79 3f 19 50 d9 43 bc 3a 80 05 64 7c 2e e2 65 45 ed fb 2a 15 e5 31 d7 11 1b cc f0 14 b3 2d 1a f6 99 fb 5f 62 f7 59 88 96 d7 a2 af 30 a7 c3 24 9d ec 0b 75 f6 03 23 d2 f0 81 ee 2f 49 3a Data Ascii: '2ksgq/%=_9q.KqJ);p\-xK^u)n\|\|I1H5\<q4d(qh:Y)r<<>eIJ7{Uy!t~rXUy?PC:d\|.eE*1-_bY0$u#/I:
2023-08-10 21:19:02 UTC	4109	IN	Data Raw: 2c 65 93 44 e4 09 7f 00 aa 89 50 b0 a9 38 2a 4b 45 94 6c b0 b6 45 12 1b d4 5b ba 84 35 5f e5 46 6e 29 b1 2a fe fd d6 63 e0 b2 9d 64 12 e6 8a 12 e3 b9 42 d7 73 3d b7 58 07 79 d9 b4 36 8c f2 c6 90 b0 c2 a2 58 f5 14 20 bf fb ba 70 fb 56 67 5d 61 28 f4 bd 78 54 af af f1 17 cd 50 61 1c 0b cc 66 f5 f2 1b 44 df 54 c9 f9 96 88 bd 01 e0 5b ad 07 5d 90 f7 20 9f 06 b2 e0 9c f9 93 77 74 f8 02 1d 0d 7d 20 8a f8 9b ae f9 02 ac f3 43 c4 db 1e dd e5 05 63 09 b3 31 23 c7 04 5a 9b 77 f3 1c d3 53 f7 9f 74 e9 9e 3d 8a a0 3f 07 68 6f 59 7e e8 87 d1 2c d5 b3 2a 41 11 59 13 2f b7 15 53 ca af 09 d3 6b 8b 03 de 95 2b fb 2a 1d 65 8d ed 2a c8 1a af 05 48 9c 4a bd 9a d0 47 1d ba 2e 98 8e fd 8c 37 51 57 b9 66 66 2a c7 78 95 be 9a 89 9a 6a 27 57 64 dd 62 b0 43 ce 8b 3e 8a 9b 7b aa aa Data Ascii: ,eDP8KElE[5_Fn)cdBs=Xy6X pVg]a(xTPafDT[] wt} Cc1#ZwSt=?hoY~,AY/Sk+eHJG.7QWffxj'WdbC>{
2023-08-10 21:19:02 UTC	4125	IN	Data Raw: a3 56 8a 00 84 a1 66 06 ec e6 9d 37 f3 b9 c8 5e ad ab 2a 37 d8 b6 38 04 6e 4c 4b fa 8c bf b5 7d 72 80 9c bd 0b a4 23 39 51 b4 0b a6 85 46 55 e7 52 63 5f 84 8e 3b 5d 09 b4 ce 13 e9 01 e2 2a 2b a0 79 88 28 16 0d c3 d4 26 97 e1 b2 e1 60 96 b6 7b 9a 70 5a df 47 c3 db b6 d7 c0 72 96 69 99 2c b5 d7 35 a8 55 eb a3 2e 75 eb 61 32 32 e3 1a 28 c6 40 d6 85 b0 4a fa 79 73 ac 27 34 18 27 37 03 d8 91 e5 80 34 4c 98 00 d3 ad a5 57 99 77 a1 a6 6d 8c b2 48 67 96 c1 aa 41 0f d4 19 62 b8 c1 d4 65 a6 91 92 85 05 7b 38 0f a1 c0 90 ad c4 0a 9c 2f 49 8d b8 a0 eb 64 bd 53 0d 64 3c 67 5c a5 0a ac ef d2 f0 c8 57 4d 6e 75 91 18 06 28 4b 43 6c ac bb e8 dc f7 ec 78 fa 1f f3 e0 28 41 4c cb 44 6e 05 ac 2f 7e 4f c1 e3 f6 74 1d 77 bb 16 08 ac f4 a7 fa 7d 43 ef 75 25 60 20 d3 c2 05 86 7a Data Ascii: Vf7^78nLK}r#9QFURc_;]+y(&`{pZGri,5U.ua22(@Jys'4'74LWwmHgAbe{8/IdSd<g\WMnu(KClx(ALDn/~Otw}Cu%` z
2023-08-10 21:19:02 UTC	4126	IN	Data Raw: ec ed ea 46 61 b5 d2 2e 7c 89 e2 58 85 aa ba ce cd 61 15 70 75 f4 c2 5a da cf 57 8e 3a e3 da 94 7f 65 65 7d 6a 33 f4 e7 3a 53 3a ac 67 4a e7 14 c1 fa da e2 49 5b 7f 96 29 dd 7b f9 62 97 f1 a5 7b 2f 5f bd e2 9c 29 f2 9f c8 9a 3e 79 ce 18 d3 5d 1e ba ca d9 d2 d7 4f 9e 32 c6 74 0f 8b d6 ce 59 a4 eb 8c ba 78 c6 8b d8 3e 67 c1 ab 2f 9e f2 e0 55 7c 71 85 b1 17 92 51 bd 50 f2 f3 bb 59 28 e7 15 51 4e 54 e5 4d 56 2b 5c d7 f2 7e 4c 32 2b 32 5d c3 23 23 68 00 e1 c1 1b 39 63 17 92 57 a5 87 6b 08 f8 03 a0 34 4a e3 29 90 13 8f a3 1a d4 f2 b1 49 7a 3d 51 3d d1 41 02 b8 d1 8b ca 08 01 34 51 a5 aa 5b cc cc 0e 97 02 ff 61 94 0e c5 a5 2f 71 54 60 7a 8b 7d 8f 65 80 6f bf 5d b6 b1 44 96 d7 e5 71 38 ed 8b 25 c5 0e 7a 2b 2a d1 09 d0 20 e0 39 be 99 4f 93 61 52 e2 87 9c bc 53 a8 Data Ascii: Fa.\|XapuZW:ee}j3:S:gJI[){b{/_)>y]O2tYx>g/U\|qQPY(QNTMV+\~L2+2]##h9cWk4J)Iz=Q=A4Q[a/qT`z}eo]Dq8%z+* 9OaRS
2023-08-10 21:19:02 UTC	4142	IN	Data Raw: 62 0d c5 0a 67 2c 0d 39 7f d0 98 4d db 55 a6 ba d4 06 5b 4a 0a 38 2d b7 b5 a9 d8 36 29 9e 3a 19 e1 2d b1 1e 37 e0 6d 3b 82 ae 99 3a 46 1d 50 13 94 0c f7 3e 7d 2c 26 75 33 03 a5 92 68 51 e3 d3 c5 15 57 f8 72 7c 7c 52 02 d1 43 ac 33 43 87 64 95 cd ba af 2d a0 d2 d9 3b 66 20 90 d9 23 6f 67 8c fc b8 47 3a 5d df 98 63 bf 64 b1 e4 51 ff ec 5c 5a 32 52 14 e0 94 3e eb 65 16 3e ff ac 5f bb f5 95 51 d1 df ca ee ee b0 16 ee 4f 51 3e e2 f2 18 7b c0 64 68 a0 29 64 59 c4 c4 cd 29 1a 8c 85 a1 9b 66 5d 3f 87 fe b0 93 cd 92 d2 df 68 c2 58 6f a5 55 77 68 a2 95 9a 30 b5 69 51 8d 7d c0 7a 93 bb bb c4 5c 6f a2 af d7 77 7c da 67 c6 84 d6 10 eb 06 63 88 0e 00 2a 93 1c 9a e5 7d 06 93 12 37 c2 3c b9 e7 d6 db 25 b0 d2 52 0c d9 11 26 66 80 08 f2 22 b4 9d 52 a3 34 99 61 30 64 93 8e Data Ascii: bg,9MU[J8-6):-7m;:FP>},&u3hQWr\|\|RC3Cd-;f #ogG:]cdQ\Z2R>e>_QOQ>{dh)dY)f]?hXoUwh0iQ}z\ow\|gc*}7<%R&f"R4a0d
2023-08-10 21:19:02 UTC	4148	IN	Data Raw: b0 6b e5 34 80 17 73 89 c0 b3 ff d3 87 4e 39 31 9b 0f 7d 2d e3 f2 50 05 82 82 0c 35 33 7a 69 98 d1 fb 35 66 74 a1 7e 6a 72 9d 33 8b 80 eb da 6c 51 f1 53 5c 54 8b ce b5 7a d9 3e e6 b3 40 cc 67 0a c5 8e 40 2c d6 f0 5e d7 bd 44 7c da d4 e6 5e a8 56 43 d3 a5 ae 9a d1 b6 c2 6d 4a df 37 40 dc 36 c1 d7 98 ef 5b 7f 25 56 47 35 64 18 9f 35 6d 12 21 fc 18 11 7e f7 81 4b 58 d5 29 ae 95 e3 1d 90 65 ae 4c ae 62 f1 e9 c1 c9 89 cf 3d 63 9d 68 db 82 48 97 ce b5 91 01 8c 9b 80 53 78 ee 93 9a 2d 29 de 5c 47 09 ae 52 93 14 d1 60 30 91 f7 41 d4 1b da da d3 67 1c a5 4b 39 51 98 b4 35 57 19 88 23 c1 51 71 03 8f 1d 6e e0 ba e2 d7 e6 84 3a c5 e2 a2 00 16 30 bd ac 3e 12 81 2e 81 ac ac c5 67 7d 77 57 6b f3 17 c7 34 80 1f 63 8f df 01 fc 0c 7a 96 2e bb 9c ab 07 ca 20 57 6f b1 05 35 Data Ascii: k4sN91}-P53zi5ft~jr3lQS\Tz>@g@,^D\|^VCmJ7@6[%VG5d5m!~KX)eLb=chHSx-)\GR`0AgK9Q5W#Qqn:0>.g}wWk4cz. Wo5
2023-08-10 21:19:02 UTC	4176	IN	Data Raw: 4a 30 6b 33 2f 1b f3 4d 8a 75 cd 19 96 62 97 c5 14 b8 1b 55 0b 3d 32 4a 2d ef 5e 74 58 61 cb f1 cb 60 e8 5f 87 f0 05 20 d9 6d f1 46 6e cb 6f ad c3 83 a3 5f a4 52 8d 92 f2 0c 30 38 0c 74 72 06 50 1b 05 c8 b4 37 28 d0 c6 a6 85 22 27 7e 0a 58 8a bb 8a d3 39 88 78 d2 07 d1 64 9a 49 44 09 d3 0b 60 2e c2 de 05 1a 8d c3 81 8a 3c 81 3a d9 c3 d0 25 22 15 ad 78 8c 57 c5 1d 28 d9 9c 4f 2d 24 25 00 be 69 1a a5 c3 b0 9f 61 1b 71 f0 05 12 58 74 81 b4 40 85 0e 88 56 6a a8 a7 c4 2e 60 82 af 51 38 b9 8c 31 9d 3b dc 6a 78 c3 e0 bf 75 7a 8f ae 89 90 7d dc 0d 5c 34 27 30 a2 1e 96 a2 46 e1 86 6a 64 c1 7f 15 dc 22 f1 2b ba ce 50 48 cd 5a c4 a0 29 3a a9 52 fd 33 9e ac 67 f6 81 b1 b6 8e c1 c7 17 96 eb 64 07 0f a0 f4 0c e6 5a 0d 95 7a 6c d1 c6 5d 1e a4 8c 10 9c fe 18 95 52 f3 31 Data Ascii: J0k3/MubU=2J-^tXa`_ mFno_R08trP7("'~X9xdID`.<:%"xW(O-$%iaqXt@Vj.`Q81;jxuz}\4'0Fjd"+PHZ):R3gdZzl]R1
2023-08-10 21:19:02 UTC	4192	IN	Data Raw: 09 4e a7 5d e0 df 53 91 78 a5 ed 7b 01 aa 18 e5 cf 78 26 cd d8 5d 40 32 e1 4f e3 cc 5b ea 00 bd a1 78 9d 95 51 38 0e b3 76 30 f3 fe 79 8b c9 f4 c5 f8 33 32 a1 7f b5 f6 43 10 87 6f ae b3 ab 70 72 fe 6a db 8f 00 a1 3b 78 25 cb 1f 94 ce aa a3 55 5b 5b 56 eb c9 5f 5c d1 c0 ae d7 6c 8e f9 8a ad 31 5f 2c 23 ae 59 6d ec 6b bb 1e 29 cc c1 09 a5 3d f6 47 ac 25 f9 90 a2 46 f6 d9 fc 0a cf 9f ab e5 fc 9d 54 bc 0d b5 64 12 f6 d3 f7 a1 f0 84 c0 9d 98 a6 e8 12 73 12 ee 9f ed 7d cd 82 04 ba 34 8a 5b 40 1b e8 4b d0 33 3b da 9a 66 71 5e 1b 53 ab dd 5b 81 b0 31 c4 b7 cc e6 da f2 7f 15 b6 f0 ef d6 ee d6 1f 7f ef 50 69 84 66 05 0f e9 e4 95 d2 c7 3f 8a 2e 2a b3 4d f7 ee 39 b8 a5 27 c1 e6 bd 80 cc f7 ef 3f a0 1b 38 0a 6a 3f c0 22 62 92 33 c0 df de 89 da a5 39 96 63 17 0a 48 fc Data Ascii: N]Sx{x&]@2O[xQ8v0y32Coprj;x%U[[V_\l1_,#Ymk)=G%FTds}4[@K3;fq^S[1Pif?.*M9'?8j?"b39cH
2023-08-10 21:19:02 UTC	4212	IN	Data Raw: 7c cc ca ab 15 e6 64 56 99 91 79 c5 5c cc 3a 73 31 6b ab ec 59 81 5c 10 ba 56 2c 0b df 8a 15 f4 d1 b8 e1 11 5e a1 7f 05 7c 7a 09 5d df 63 d7 2f a0 d1 2e 96 bd 42 26 e8 9a aa 63 66 44 2c 7a 89 69 0f bd ca eb 55 f8 72 4a 5f e0 8f 5b 9c d7 6b e0 a8 f6 a9 d5 ab d7 55 f7 8e 59 ac 33 9c d8 6b e8 ef 18 ff 80 0f 87 e4 06 b2 04 a3 ef 61 37 eb f0 e9 03 b6 5e 86 36 3b 82 ed da c2 7e 91 8d 3b e0 ca 50 74 44 9f a0 ec 44 17 da a6 71 48 52 50 9f 37 e5 62 22 51 31 6c e5 ee 52 7c 9a ab 27 61 0b ef 2a f8 87 10 90 ee 9e 0d fa dd f4 27 69 e3 13 1f 43 3d 6d 73 38 82 58 a5 eb 18 80 07 6e 86 36 3e 03 cb 72 21 76 a2 4b ce 6d d0 4e 7a dc fa e8 0a d8 7a a0 78 a4 09 18 47 11 5d 45 50 5a 41 2a 5f f4 54 29 58 f4 b8 42 7e 60 d2 c7 1e 2e 88 9a cc fa 59 dd 74 fc 3b 38 15 6d bf ed 34 80 Data Ascii: \|dVy\:s1kY\V,^\|z]c/.B&cfD,ziUrJ_[kUY3ka7^6;~;PtDDqHRP7b"Q1lR\|'a'iC=ms8Xn6>r!vKmNzzxG]EPZA_T)XB~`.Yt;8m4
2023-08-10 21:19:02 UTC	4230	IN	Data Raw: bb 2e 7e d4 af 02 0e f5 d2 45 9f ff 80 b2 6b e3 13 05 b2 48 ca e3 4b 2b 0e 6a a8 c3 22 ef f1 9b a2 d4 10 50 eb 12 50 67 8c e9 d0 9d ab 71 57 be 58 a4 2d b3 37 d0 20 16 59 70 7d 0a d0 eb 3a 03 20 59 98 f2 a2 05 28 16 b1 9d 12 bb 61 00 de 17 bd 96 60 cb 09 ea fc 55 2b 24 55 e1 66 9c fd 71 f6 16 23 b3 9f d6 6d 2b 2e e9 7a bb a2 fe 5d 7a dd 2c 38 08 0c f1 fd 76 1a 81 a2 90 5c 91 89 91 f5 d8 66 c6 8e 0f da 83 8f c6 da a5 fa b5 76 a3 00 21 73 0a 40 cd a7 4d 79 ad f3 a1 49 db 8b ee f1 88 67 0f 51 5e 3e 0f ec 47 86 56 f9 5d 80 9e 52 f7 59 9e 58 c0 27 a7 91 63 43 dc 12 19 bb ce 35 af 4d 47 c0 bf e1 8c e0 02 03 00 90 a6 07 fd e6 8a 41 a6 18 a5 9e 91 b2 d0 f5 67 90 7c 24 48 8a 2a 1b 28 b8 e3 c0 1d 13 5a de bd c4 52 c5 4a 67 3c 7d b5 d3 cd 6a d5 55 8d a6 48 16 1d 46 Data Ascii: .~EkHK+j"PPgqWX-7 Yp}: Y(a`U+$Ufq#m+.z]z,8v\fv!s@MyIgQ^>GV]RYX'cC5MGAg\|$H*(ZRJg<}jUHF
2023-08-10 21:19:02 UTC	4240	IN	Data Raw: d9 db 19 dc d0 7f 01 89 29 a0 54 7d 2d dc 5d e5 e2 d6 9b 49 83 bd 0f f1 00 ee e3 bf 60 3a 2c 59 84 17 be 0a 8f 46 a6 0d a5 fc 09 33 dd 52 5f 02 82 26 a1 c5 86 3b b3 8f 41 6a c4 02 45 43 4e f5 66 4b 0d 9b d2 c2 60 96 7b fe 40 4d e9 0b 98 cd c9 25 37 1d fc ab 61 78 c7 45 d9 5e b9 e8 e9 c3 7f 36 b2 88 46 ca 0f 52 6b bd c8 8f b5 11 a4 36 33 f5 dc 0b 07 9c b0 2a 07 9b 4e 75 b0 b4 b2 9e e3 03 6a 67 06 ab 2a 4e 9f 7c 1d 91 26 c8 f2 97 54 cd 46 b9 89 2c 59 f4 70 84 2f 19 f4 3e df ca a6 4c 01 02 c8 16 b1 ff 60 a3 e8 ad d9 1f 05 fd ab 8f 70 bf de 16 d6 5c 7f 74 9f fa 03 24 8c 49 3c 1e 07 89 94 1f d7 ba 7c a9 04 de 44 52 e9 5f 81 33 f9 ec 8f af d0 d8 70 3e 1c 35 aa 3a a0 40 83 fe 00 4d 72 1a 4d 51 39 8c 5c f4 35 03 12 46 cb fb 7b c3 24 80 97 86 de 20 52 e8 78 17 35 Data Ascii: )T}-]I`:,YF3R_&;AjECNfK`{@M%7axE^6FRk63NujgN\|&TF,Yp/>L`p\t$I<\|DR_3p>5:@MrMQ9\5F{$ Rx5

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.3	49744	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	477	OUT	GET /static/webpack/production/paper_bundle.1885980d0c2e444b4c260d20339401ec.6JKOhZEZLVUo0awj9vBTCyS8J99CxnWy1B_2dSb-wc0.css.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:55 UTC	884	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Content-Length: 204641 Connection: close Date: Thu, 10 Aug 2023 21:18:56 GMT Last-Modified: Wed, 28 Jun 2023 17:27:24 GMT ETag: "0b34782f75d917e2934705a63663662f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9c0ce977a13f3d9bbc6eed6540faf728.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: myYrh6vnII08LwKEaO33odpAjA6cRInrS1IUFbcMISZrz_uvDZkPbQ==
2023-08-10 21:18:55 UTC	884	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd 6b 93 eb b8 91 28 f8 dd bf 42 e3 13 8e 3e d5 23 ea 50 d4 5b 15 b7 63 c6 8f b9 f6 ee f5 cc c4 d8 37 66 67 1c 8e 13 94 44 95 e8 92 44 2d 49 9d aa 6a 45 fd 8a fd ba bf 6e 7f c9 e2 4d 3c 12 20 f8 50 b5 ed b6 bb cf 11 08 24 12 09 e4 03 89 44 e2 53 51 c6 db e7 3f e6 f1 36 b9 6d d0 df 9e f2 ec 7a de 05 db ec 98 e5 eb 4f c9 3c 59 26 9b c7 4b bc db a5 e7 a7 f5 f2 f2 fa fe a9 6a 30 18 91 bf 9b ed be c5 f9 e7 20 38 5c e8 cf 60 f3 34 1c 7c da ef f7 0f 8f 9b 2c df 25 79 90 c7 bb f4 5a ac a7 97 57 56 52 b5 a0 bf 87 83 f1 e5 75 50 64 c7 74 37 60 48 3c 3c ee b3 73 19 14 e9 8f c9 7a 3c 41 2d 5f 50 cd e0 25 8f 2f eb 4d 9e c4 cf 01 fe 4d eb ec e3 53 7a 7c 5b ff 2a 3b 23 08 71 31 fc 7d 76 8e b7 d9 f0 bb 7f 3e ef e2 63 32 40 3f b3 ef 86 27 Data Ascii: k(B>#P[c7fgDD-IjEnM< P$DSQ?6mzO<Y&Kj0 8\`4\|,%yZWVRuPdt7`H<<sz<A-_P%/MMSz\|[*;#q1}v>c2@?'
2023-08-10 21:18:55 UTC	886	IN	Data Raw: 41 b3 e0 89 0a ab 7d 47 d2 b4 c2 a7 5f d2 00 7c 42 fc 3b e9 f9 c9 8f 5f fe 90 9c d2 3e f8 04 82 73 7f 79 df 7c ac fd 49 06 3b b4 fb 4b fc 66 e3 fe e9 8c ec ee 52 bf f9 48 7f 7a a3 bb 0f c9 5f 3b 6e ad 15 d3 c9 f7 56 00 4d d1 fa 00 45 e0 8d 12 6b 75 3f 4a 75 42 ab 5f 4a fd 21 bb e6 db e4 57 d9 2e f9 f7 3c b3 a2 a0 d4 aa 34 65 38 59 8e b2 72 df 84 6f 3c 20 f5 ac 0d da 8c f0 77 65 30 0e 67 1d 07 a7 03 e9 59 da b7 19 17 5d 3b 9d a7 cd 04 d3 ab 74 6f 3b b2 5e 66 0d 02 d4 ab 14 57 34 c7 ee b4 fd 7b 3e 57 68 38 be bf e9 b3 05 ff b1 fe d4 0e 94 f6 e7 0b 8d c7 f8 57 e1 3a 69 7f c6 e0 3f de bf d5 73 86 a6 23 fc 6b 70 98 34 3b 6b f8 c3 21 ce 2f 75 fe 5c b9 d2 af 7f f9 cb 2c 7b 8e c2 46 3a c4 d6 be 4f 4e 6c 39 12 4a e2 ae e3 51 a0 f4 c9 6f 2d 46 45 97 4e 97 11 29 10 Data Ascii: A}G_\|B;_>sy\|I;KfRHz_;nVMEku?JuB_J!W.<4e8Yro< we0gY];to;^fW4{>Wh8W:i?s#kp4;k!/u\,{F:ONl9JQo-FEN)
2023-08-10 21:18:56 UTC	902	IN	Data Raw: 7b a3 c3 45 3a eb 53 92 cd 20 5a 23 42 29 6a 06 60 1f 59 77 6f 9e 13 27 40 75 2c d7 1e d7 be f8 4f 44 82 ba d8 af 2d 9a 7d f1 22 48 cf 46 da ed ce 7c 29 5e ad ed 8f 2d 5d d1 a1 be f6 a0 49 44 cb 3d c1 59 43 36 b7 45 86 52 c4 0c b8 2a 89 4f d9 15 01 09 0e f1 e5 f2 16 94 68 df f7 74 28 fb 70 c0 80 70 b5 73 2d 9b b9 34 1e 13 73 73 3e 51 fe a7 5f 8d f0 c2 bc f1 9a 82 f1 d6 0e 06 6d 8e 97 45 a8 ab 47 0f 24 9b f3 65 67 da 5a 14 a7 07 b2 2d b8 14 c6 56 8b c6 b1 f1 ea d4 c1 ab f5 53 d5 ee e1 ba 5a f2 da 92 c8 4c dc 8c 5b 4f 08 c5 c5 42 b1 34 c1 3b 24 ec 4f c0 cc fc 30 ad 31 2f 77 1c 45 af 8c ed f1 d6 5c 47 84 7b 65 72 2f 9a fb 68 e4 8f 67 78 6e 3c f4 cd ef 1d 9e b6 ab 23 b4 25 5e 76 ec 56 fb b5 44 70 99 cf 1c 38 38 5b c7 0c 95 a5 7d bc fb ac 02 74 5e e1 58 ad 14 Data Ascii: {E:S Z#B)j`Ywo'@u,OD-}"HF\|)^-]ID=YC6ER*Oht(pps-4ss>Q_mEG$egZ-VSZL[OB4;$O01/wE\G{er/hgxn<#%^vVDp88[}t^X
2023-08-10 21:18:56 UTC	903	IN	Data Raw: 16 9f 4f d1 7e 46 f8 47 f0 92 c7 97 8b 34 2b b2 ec 7c 44 4b 11 89 6c cc 42 c7 f4 e9 bc 3e a5 bb dd 31 e1 cc 47 d7 27 5e 5e ac 80 6d 29 a4 95 2d 75 5c 26 27 46 8a 4a 94 45 44 aa bb 2a 8b 6f a4 a8 48 8e 68 5e 92 1d 9e 93 d7 60 73 45 ab f9 7c f3 91 dc c1 01 73 15 96 df 8b fd 6a 1f 3f bc 1f ca d3 91 c0 ce 36 e9 31 19 34 c2 f7 9f 4e c9 2e 8d 07 78 19 0c 8a 6d 9e 24 e7 01 6a 34 f8 7c 8a 5f 83 5d f2 2d dd 26 ac 3a b1 0e 1f 6e 8d 80 db a8 41 07 cb 1a 81 e3 2c 93 d7 12 8d 70 bc 89 16 93 c9 c3 e3 f6 9a 17 a8 d2 25 43 7a 3f c9 85 6a a4 f3 ba cf ce 48 ec a7 3f 26 eb 31 9e 3f 26 2a 26 91 26 3b 48 41 25 5f c8 22 c4 dd b0 e5 80 e7 db b6 44 c4 b0 b0 b8 d7 34 66 e8 49 7e 65 cc 1a ca 06 9a d2 df fb 9a a1 d6 fd fb 4c a2 24 6a e8 a2 86 67 15 f5 f3 8c 66 35 0c 17 61 82 b4 ba Data Ascii: O~FG4+\|DKlB>1G'^^m)-u\&'FJEDoHh^`sE\|sj?614N.xm$j4\|_]-&:nA,p%Cz?jH?&1?&&&;HA%_"D4fI~eL$jgf5a
2023-08-10 21:18:56 UTC	919	IN	Data Raw: 26 cb 80 e0 3f 61 0a 8d bb c0 57 c4 d2 72 70 2a 75 e4 88 80 aa 89 48 69 80 34 a9 e3 ad 1d 21 db cd 36 6f 2e 25 ee 9d 58 7c 04 92 29 e7 02 9a 8d 82 78 cc 0b 07 21 ca 9b c0 5f c4 a7 82 53 db 2e 15 40 e3 3b f6 ae bd 35 ea 4d 4c 40 ab 2d 9b 2a d8 f1 dd 7b a7 d5 6d 6c 59 aa 45 ad 94 bc 28 f6 9a 59 22 b6 4c 65 d3 3a a9 06 0c 98 40 45 12 60 aa f9 db cc 89 6b 41 5c 2b 8f 1d 01 59 09 99 87 3b 11 be a4 35 2d 3a 0c e8 44 c5 38 f3 11 77 9a a3 bf 92 15 27 18 d4 85 02 0a dd 44 7f c1 02 64 0e 23 a4 58 37 43 70 6f 96 cb 11 23 56 2b 4c 36 9c c0 5c 02 69 0a dd 85 0d 93 01 d6 da e1 ab 1d b2 90 f8 4a a2 8c 5c cb 94 27 34 51 32 d7 a9 18 c2 a0 33 02 ff 9a fa c1 bd 80 11 47 0a 5e 3b ea 30 45 a0 9d b9 6c 1c 9e 80 6e 96 54 60 c0 cb aa de 0d 93 6a 1a b8 32 f6 36 f2 f5 85 e5 d0 5a Data Ascii: &?aWrpuHi4!6o.%X\|)x!_S.@;5ML@-{mlYE(Y"Le:@E`kA\+Y;5-:D8w'Dd#X7Cpo#V+L6\iJ\'4Q23G^;0ElnT`j26Z
2023-08-10 21:18:56 UTC	935	IN	Data Raw: 13 37 52 2d 1d 99 9b cd 7d 20 b0 39 31 7e 8f 03 be e2 4e 02 7b ee e8 ee 8d 63 bf 5c 64 9e 7c 24 0c d0 24 70 64 2f b2 f8 97 e3 09 b7 f4 b3 55 1c 19 d8 1f cc 6a 46 74 09 1f 34 cb 95 33 d9 e7 e4 12 5a 4a 94 39 16 7d 2f f2 20 cb 80 aa e2 05 b8 00 44 5e 51 58 3e 19 63 8b 7c 6c aa c3 c2 82 16 34 54 50 6c e4 89 2d 2b c8 75 ad d6 24 0a e1 cc 03 28 3a 68 a9 a4 6f 86 44 8d 02 ed 90 1f 8b 79 3b 51 2f c7 14 25 a1 03 2a 46 8f 2d 6f 5d e1 96 3e df 35 90 20 c5 a7 ee 81 df 8b b0 0f 49 91 68 73 8c 53 69 8c 01 22 a4 78 6f 06 4c 4c 58 06 02 b0 d1 bf ff 5e 2d dc a8 56 6b 19 a8 87 a5 12 8a 7a a4 59 26 3c 5c 02 81 14 2e a0 05 b8 23 1b 2a 81 e6 62 1b 18 f5 35 3d a5 af 56 61 e4 4e ee 69 18 95 28 b9 65 9e f2 6c 5d ef 38 2d 44 57 f0 57 14 57 74 f6 60 cd a8 8a 89 c8 db e9 32 1b e1 Data Ascii: 7R-} 91~N{c\d\|$$pd/UjFt43ZJ9}/ D^QX>c\|l4TPl-+u$(:hoDy;Q/%F-o]>5 IhsSi"xoLLX^-VkzY&<\.#b5=VaNi(el]8-DWWWt`2
2023-08-10 21:18:56 UTC	937	IN	Data Raw: 6f 5c 5a 65 e7 91 46 a8 f7 f0 94 5d a8 9f 76 c0 54 3b 7d e2 71 2b ec 1d 86 b7 41 4d dd 6d d0 13 13 ae a2 55 be 9f 9a 96 7a 4c 58 6b 49 bb 5b ef 15 b0 38 ff 97 a8 69 44 fd 4d ac e0 cd df 66 ed 97 25 05 95 83 4b 01 db fc ef 42 c8 df 87 8c e9 f7 05 ad ee 3a d7 05 bf 0b b5 a9 75 f4 f7 a1 fa 3a 57 19 bf 0f 55 7f 89 6c 91 89 50 69 b7 2c ad ae 70 cb 82 2a 44 95 71 cb f2 bb 4c e1 ef 33 77 0f 22 d3 31 b8 f8 f9 5d a8 f8 bb 6e 84 35 11 fa 8f e2 bf f8 be ec 77 21 18 7b c9 f6 2a be 5b fb 7d c8 a7 c6 4f 8c 47 96 6a e9 95 43 5e f8 51 79 bb 0d 43 53 5c af c4 d6 4b 41 43 ad 35 cc cd dd 48 25 e3 af 50 c4 db 19 f8 fd 46 e6 ed 0a ca df 57 26 f9 ca 65 59 2c 4c fd f1 4b f3 e1 c6 16 ee 2e c9 1d 22 e5 de c1 0e a8 fc 75 54 4b 99 94 9f f8 52 97 41 1a cd db 9a bd 70 e7 d8 c9 16 e7 Data Ascii: o\ZeF]vT;}q+AMmUzLXkI[8iDMf%KB:u:WUlPi,pDqL3w"1]n5w!{[}OGjC^QyCS\KAC5H%PFW&eY,LK."uTKRAp
2023-08-10 21:18:56 UTC	953	IN	Data Raw: e4 0d 4b 37 a0 25 6f f0 87 d8 4a 9a 00 d6 6e 74 9a 5c d2 11 66 94 91 87 58 75 11 c6 d2 de b1 e9 fa a8 bd 85 e7 63 81 7a b1 13 15 87 a6 c6 df e6 8b 93 e7 e3 77 89 f2 30 47 cf 67 4e 82 e2 4a 7d 34 a9 f3 04 fe 25 68 31 c2 02 5a 46 db 63 84 92 b5 65 12 c3 22 1f 95 7a 13 09 2a 1b b8 46 46 32 5b 02 5b 08 2c 2d f1 e7 cd e5 88 b8 78 b5 14 10 6c 89 fd 4a 5b c2 f5 6f 5e ac aa df bb a0 6d 3d 9b 40 be d4 51 3e 2d e2 71 56 8c c5 77 7b 38 8e a3 3d e9 aa cf 0c 7e 66 8d 35 e8 4e 81 c2 50 16 5b ce b6 9b 64 7e 6e 3a 66 a5 e8 66 d3 ed 15 1c 9e f1 38 c9 35 6d d6 2a a6 f5 73 7d ae 43 43 28 f6 0b 37 22 45 1e eb b9 d3 c7 5b 63 4d 43 ca f1 8a 2b e0 7f c0 d2 61 5d df 91 9a 98 01 09 4a 02 07 84 42 f8 bc 28 10 a5 9b f7 9c cd 7d 33 11 27 b3 cc 5e 89 3e a3 c2 7a 7c 63 41 cc 0b 67 38 Data Ascii: K7%oJnt\fXuczw0GgNJ}4%h1ZFce"zFF2[[,-xlJ[o^m=@Q>-qVw{8=~f5NP[d~n:ff85ms}CC(7"E[cMC+a]JB(}3'^>z\|cAg8
2023-08-10 21:18:56 UTC	954	IN	Data Raw: 97 42 99 ec aa cb 44 a3 4b be 45 bb 2d 5b 00 8f b3 f0 39 73 41 22 1b 5f 8d 8a 7d c9 cf 82 ed 12 32 a9 c4 1c e1 8d 8f 9d 7a f0 55 3f 70 bb e5 00 6c d8 8a 49 09 7a bc 27 fb 0a a8 2e 1b f9 58 ec 3a 11 8a 43 58 b6 70 be b8 93 79 2e be 51 8e 17 c9 b5 73 19 84 d5 8f 21 1e 24 b9 e8 23 57 86 85 60 21 25 86 dc f1 60 26 1c 57 e5 c9 08 0e 42 38 50 6c e3 82 07 ab 86 a0 6e cd 6a f7 65 1d 07 85 09 29 c2 b6 d8 60 33 5d b8 92 f2 d0 21 db 52 09 a9 f8 63 d7 63 53 d9 62 94 fe 46 b3 12 75 8d 4b 2b 23 ac 5e c1 c7 86 d5 63 2f 67 61 ab 1b a5 9e 90 da f6 68 d6 b9 3c 8b 98 a0 cf 1c d5 2a a5 34 6d ad f8 6b f9 74 e0 63 ab 6a 2b 31 42 4d 0c d0 26 e2 5e 90 29 23 ae 74 2e 71 5d 4d 09 d3 16 43 e1 28 37 05 25 02 9a a2 1f d4 07 67 7a 6f a4 95 11 b2 ab 89 75 42 1f 9d 49 db f9 64 0c ea 9a Data Ascii: BDKE-[9sA"_}2zU?plIz'.X:CXpy.Qs!$#W`!%`&WB8Plnje)`3]!RccSbFuK+#^c/gah<*4mktcj+1BM&^)#t.q]MC(7%gzouBId
2023-08-10 21:18:56 UTC	970	IN	Data Raw: ab d8 11 06 b4 da a3 34 09 bf f1 00 7a cd a9 99 3e 66 c2 b0 58 76 97 65 05 c3 62 a5 8a 07 35 86 27 05 d6 1b 8f 2c f5 49 09 db 02 09 8e 52 af 76 ed 12 b3 d8 af 3e 0f 8e 83 6a 77 2b 4b 03 2b be e2 1f 9a 81 a9 a6 2b a9 42 c2 f3 1b 5d 04 72 e8 06 5c 92 41 f3 76 67 12 6a dd ac b7 c3 b1 5d 6f 7e c6 d7 ac 53 7a d9 0a ba b3 9c 7a 9d 28 bc 74 38 96 0a 80 2e 5e 14 03 11 96 c9 10 2d 38 dc 6c 04 02 91 5a 3a 0c cf 91 d2 5e 08 bd 4f ae c2 a0 9e 93 40 a7 e4 78 59 6c 37 a7 27 07 c4 18 e5 b4 7b e0 3e 02 44 e3 d5 e6 d1 23 74 0b 0c f7 3d 0a 43 05 3f fd b8 d1 d2 53 4a 86 82 b4 64 78 56 59 f6 7f f1 b0 ae 92 0b 9d aa 9c b0 8e 2c f7 b4 28 da 05 5f 6a 53 ba a2 9a e1 d1 8c ee 0f c7 fd e3 51 b8 62 ec d8 c0 38 de 75 bb 70 3c ed 22 5d 3a f6 dd 2f 3a 6d 0e 13 e6 74 c7 5e eb c9 0c a4 Data Ascii: 4z>fXveb5',IRv>jw+K++B]r\Avgj]o~Szz(t8.^-8lZ:^O@xYl7'{>D#t=C?SJdxVY,(_jSQb8up<"]:/:mt^
2023-08-10 21:18:56 UTC	986	IN	Data Raw: fd c3 a4 b1 e0 42 11 6d 8e 54 d5 93 77 c3 d9 30 53 5a 28 ab f9 e0 01 5e 4a 27 35 fd 90 2d 35 9e 91 d2 62 5e c0 9c d2 6c 46 ba 90 0f dc e9 ca 30 bc 8f e6 34 7e de 3c 1e 45 be d7 31 5f 7d fa 60 10 87 74 ae 2f 09 0e 26 e5 cd 71 83 33 cf 8c 2a 09 9e 7f 21 99 64 f8 e1 17 1d f3 08 3e 71 c9 91 68 27 92 77 c3 9d fb e0 77 53 d7 dd 2b 34 a6 06 fb b2 6e 61 a1 66 66 72 0d 23 a1 73 cf b4 3c 43 70 6f a4 fa b9 45 ff dd d1 29 35 5f e2 e4 14 52 bd 9b a0 41 5c 03 dd 87 ed 76 bb 39 9c 36 a7 6e 9e 6a 51 28 86 4f a2 06 7a 85 07 f9 e7 9e 37 b1 93 8a 27 18 17 7e 53 2e c3 17 c4 d5 ad 0f be 36 34 a8 bc 75 e7 ee 65 c2 6b c9 30 98 fe b0 10 cc ee da d3 e9 fb fb f9 bb 2b fb ed 0d 46 81 82 c5 62 d3 49 1f 9f 73 73 7e 39 39 b6 25 69 9d 32 6a 34 ca a5 31 ae 43 ab c5 6f 86 43 ee a5 fd 91 Data Ascii: BmTw0SZ(^J'5-5b^lF04~<E1_}`t/&q3*!d>qh'wwS+4naffr#s<CpoE)5_RA\v96njQ(Oz7'~S.64uek0+FbIss~99%i2j41CoC
2023-08-10 21:18:56 UTC	1002	IN	Data Raw: c4 4f bd ea d0 9c 27 f5 b7 29 a6 bf 01 09 a0 7a d5 a1 39 4f 6a 70 53 4c d2 01 89 a0 b4 ea 33 4c 8d 02 92 41 f5 aa 83 6f dc 53 7d 9f 61 ea 08 90 14 aa 5b 1d 5c ef a4 1a 37 43 17 2c a9 c7 cd d0 15 47 2a 72 33 74 e0 48 4d 2e c5 f6 28 20 45 54 af 3a 98 61 8a ea 7b 8a 4e 1b 52 99 4b d1 69 43 6a 73 29 ba cb 90 ea 5c 8a 0a 2b 52 9f 4b 31 8d 0c 48 1d d5 ab ee 96 3e aa 57 dd 2d 85 94 56 7d 8e ee b0 a4 4e 37 47 17 2c a9 d4 cd d1 05 4b 6a 75 73 74 c1 92 6a dd 1c 5d b0 a4 5e 37 47 bd 1b a4 5e 97 61 0b 16 48 2f d5 ab 0e 7e 9d ea 7b 86 69 95 40 9a a9 5e 75 28 ed 07 a9 d7 65 98 52 0a a4 9b ea 55 87 d2 7f 90 7a 5d 86 89 0b 20 ed 54 af 3a 94 06 84 d4 eb 32 4c ab 04 d2 4f f5 aa 83 79 a4 58 7d 07 13 42 91 7a 5d 86 a9 85 40 2a aa 5e 75 68 ce 93 7a 5d 86 ae 38 52 af cb 30 41 Data Ascii: O')z9OjpSL3LAoS}a[\7C,Gr3tHM.( ET:a{NRKiCjs)\+RK1H>W-V}N7G,Kjustj]^7G^aH/~{i@^u(eRUz] T:2LOyX}Bz]@^uhz]8R0A
2023-08-10 21:18:56 UTC	1018	IN	Data Raw: 7c 5f dd 8d af b6 e7 d3 f6 6f 5a 76 a7 09 52 be c9 ca d6 a9 71 8a 7d a2 a9 62 af 18 f5 2a 6a 05 ed ad 3b 0d fd 69 d4 ff a0 5e cf fe b1 7e bf 2c 75 80 fe 4d 42 7f 06 55 27 1a ec 33 ea 01 0d 3e 0d f9 75 c9 2e 57 bf 1b 49 83 e4 68 45 88 75 5a c5 9a b6 85 ae e4 cd 55 5c 9b af 8a fc 49 18 38 eb 8e 85 d6 18 16 e3 47 04 7c 55 d7 04 80 3f 54 9b 20 d5 6f 85 c1 dc ad b0 4f e7 ab fc 51 f5 e7 48 fc 58 de 40 10 a5 f2 a3 26 7f 59 1e b6 e5 61 fe 49 b3 f9 e4 c2 38 fe 5e e8 db 99 d6 20 c8 b0 6c 4a 7a a7 f2 4f 79 73 38 ff d4 18 4f e3 f1 1f c0 32 2a a4 b9 b6 bd 46 f3 cd 7e bf b9 6c 14 63 61 be 15 8b 47 e6 6f 8e f6 98 0a 82 fe dd ef 1e 19 24 c3 9f 4a 97 a2 b5 8e 5f 3a 1d 8b 09 06 7e ab 31 b9 47 f2 8e c3 68 22 33 be b5 a4 4a eb 96 b0 f9 aa 32 a7 eb bc 0e 66 96 e9 ea ea 5a ba Data Ascii: \|_oZvRq}bj;i^~,uMBU'3>u.WIhEuZU\I8G\|U?T oOQHX@&YaI8^ lJzOys8O2F~lcaGo$J_:~1Gh"3J2fZ
2023-08-10 21:18:56 UTC	1022	IN	Data Raw: 83 5b 2c c4 36 d8 e2 a7 1b 6f bd d9 7b 62 6c bd 75 7e ad 35 fa 22 17 ad 3e ac 57 79 59 ca f6 de 54 bd 58 16 bb b2 2a 2c a9 db 74 fb d1 f4 5f 30 b8 93 c1 96 9b 65 55 a0 95 0f 27 d5 5f 77 9b 95 68 91 18 65 f1 fb a5 8c 1c b9 be c8 d7 de c5 66 57 7c 94 05 57 ab 1b 4f 4c b8 8d b0 fa 44 3f 6a bc 2a 29 eb ec c4 7b 50 ee ae 1e 88 f1 16 6b fd c1 a5 18 d5 e6 af cd e3 56 65 56 96 2d 83 eb f4 ea c1 3b ed 1f 23 99 87 fc 54 16 91 98 a7 da 6f de bd ab db a1 c9 b1 4f f7 3c f1 9f 7a 52 79 95 d1 56 fd a0 9d b5 5e bb 81 df fb ed 9e 6c e0 b1 6a d3 e7 c6 07 ab b7 7f 12 dd 59 07 ba 2d 57 12 c6 d3 c5 8e f9 9b 4a f8 54 3f d2 ec 7e 4f 33 fc 75 0a 6a 8f 78 f5 93 63 f4 95 fe d3 46 42 69 5c 69 a2 47 45 3a d5 bf b0 e8 20 5e e3 a2 af 7e 8f fd ce 94 7d 9e b2 70 aa df 75 45 a0 67 da 39 Data Ascii: [,6o{blu~5">WyYTX,t_0eU'_whefW\|WOLD?j){PkVeV-;#ToO<zRyV^ljY-WJT?~O3ujxcFBi\iGE: ^~}puEg9
2023-08-10 21:18:56 UTC	1031	IN	Data Raw: b2 44 18 4d 46 76 93 c3 fd 8a b4 b9 5d d2 52 1b 7a c3 e1 18 6e 69 36 72 da 7c 20 9b 01 8c 56 ba a3 b1 96 66 23 07 fc d5 f2 40 58 b4 d1 a8 70 47 b2 5b 00 88 32 1a e4 1a 9e d4 3e d2 bd 61 76 25 f9 85 66 9a 15 fa e4 f5 ab d9 92 fe c7 fe f6 74 2b de b0 5f 2d e6 f4 3f ea 3b cd a1 c1 1b 71 f3 f6 ab f2 92 fe e7 46 c4 63 73 13 c0 ed b6 79 ba 7d a8 17 ab c7 87 eb 31 a3 00 49 80 6d d0 f6 f5 57 df 1d 08 27 ec fd f3 9e dc d2 cd bb af 06 fc 6f f5 67 53 6d e8 4b e8 7e b5 24 5f 76 bb 75 dd fb 9e 05 59 fe d3 c3 f6 3f 57 a4 f5 8f f5 dd b6 ee fd f5 07 f7 87 1f 59 6c e6 57 f2 04 32 3d 20 fe 7e 6d 9d ab f9 5d 74 03 fe aa 0f 7e db 5a 96 e2 b9 a9 63 3b 33 98 53 75 a0 57 24 bb 3c b4 86 d9 92 4c 42 58 55 82 b0 c0 dc 02 08 c5 16 7c 19 64 a0 0f f4 df 2d 0f 62 3c c2 90 2d 04 80 b6 Data Ascii: DMFv]Rzni6r\| Vf#@XpG[2>av%ft+_-?;qFcsy}1ImW'ogSmK~$_vuY?WYlW2= ~m]t~Zc;3SuW$<LBXU\|d-b<-
2023-08-10 21:18:56 UTC	1047	IN	Data Raw: 2a 9c 17 f6 c6 1c 3c b7 06 59 12 4d 2a a6 3a a1 c9 59 89 6e e9 b0 55 f6 95 7c 80 a0 7c 6b 2c 57 8e 25 2c 01 e4 7f ba e4 a8 f7 cc 10 72 ce a4 cd 84 43 13 4f a2 ac 94 3e e5 d9 1c 2c de 57 f6 7b 9a ba 62 81 24 3c 9c ce 5f 43 42 ec 62 a0 f8 c3 a8 f7 4d 0f ff ea 20 d0 cd 57 1d 58 fb 08 1e e1 ed d7 7a 2e ec 81 af c9 0f 2a 73 b9 b7 d9 8f 74 6b 81 0c e7 28 68 2d 5c bf c7 78 09 a8 3b 7c 29 da 37 e8 81 1d a1 4c df 32 96 d5 4f 23 93 d2 46 d7 c0 fc 33 6b 1e 67 dc a1 fd dc a6 ae 18 f3 c0 27 04 98 d0 0d 98 6c ef e8 50 55 c5 3e e8 92 5e 39 d1 25 52 ea bf d4 6b 22 56 fc 25 7a 6d 5f 0a ad 9e 4a a4 61 46 03 22 29 cb 44 11 33 08 5b 50 7d 33 bb 7b f3 c8 f2 b4 83 bc 81 7f f2 76 af da 3a 4b f6 a7 55 f3 c3 e6 3d 39 16 a0 0f b3 2b c3 b8 23 93 03 f5 67 8a a9 a3 16 60 c1 6e 2e b8 Data Ascii: <YM:YnU\|\|k,W%,rCO>,W{b$<_CBbM WXz.*stk(h-\x;\|)7L2O#F3kg'lPU>^9%Rk"V%zm_JaF")D3[P}3{v:KU=9+#g`n.
2023-08-10 21:18:56 UTC	1063	IN	Data Raw: a6 39 4b 9d 9f 31 61 82 2c cd 22 7c 1d 3d c9 3c 3c cb eb 44 5f 79 e6 15 5b 3b d9 2d 51 6f a6 f0 f0 80 77 4e 46 ba 87 7a 14 86 7e 58 85 6f b8 bd db 33 d6 f3 90 19 06 01 6d 49 20 e6 c2 f9 68 08 d2 8d 7e 2d 8c 25 79 fa 46 fe 94 ee b7 c0 2b 1b fb ba 07 66 85 32 fc 37 58 78 0c 55 cc 0a c2 2d 9e d3 d9 8b d6 26 d7 43 da 8d dd b3 b4 d1 d6 32 59 83 2a 06 57 6f d0 92 1d 5a d0 c1 1b 8a 67 5b 13 a3 70 b1 c7 de 7f 23 76 21 4c ea 04 38 a8 cc 2b 8a f2 06 1d b7 f4 f9 1b 20 2f 91 00 54 b3 3a fd 8c dd 17 07 32 f0 e2 4b 67 b7 cf ff ca 84 2d a5 1c 82 3a 10 ec 12 ca 36 bb 83 4c b5 82 c3 31 06 95 23 cb 9f b0 e7 66 d2 a5 e2 2f bd 49 fb a9 01 24 17 96 76 0e bc f8 54 9e 9d 9a bc 31 34 60 91 a5 fb d9 93 1c d7 4c bb d3 77 f5 13 0e 69 d4 0f ae f3 e0 81 b9 16 7b a6 65 75 2a e8 56 b9 Data Ascii: 9K1a,"\|=<<D_y[;-QowNFz~Xo3mI h~-%yF+f27XxU-&C2YWoZg[p#v!L8+ /T:2Kg-:6L1#f/I$vT14`Lwi{euV
2023-08-10 21:18:56 UTC	1079	IN	Data Raw: 3c 35 9d 51 d9 4f 87 fd 6a 0a 91 ec b4 3f 6a ca cd 01 a5 c1 e7 f9 93 93 e9 d7 4e c1 80 72 8e 19 66 88 be 9d 63 ac 8b 93 ff 70 77 ea 90 93 02 69 57 0b da 79 90 81 46 86 8e 96 76 99 fc 78 68 b1 d3 6c 7c f0 98 65 9e d8 e6 b8 0b 5f ed 86 e6 ed 59 89 b8 ae 85 66 94 9e 03 c7 ee 11 44 f5 a2 8f 2a a5 53 bb 57 13 f9 a0 df 1b 1f a6 19 40 11 bb e2 f3 4f 00 f3 a5 08 af ca 17 0b e9 93 6a e4 20 f3 8f ae 2c 0b 72 c0 b6 64 ac ea 99 4f 99 3e 55 59 26 65 99 2a d7 15 ad 9b 65 9a 33 28 5d 86 0d 0a 95 9a 32 69 21 fa c7 3e b8 d0 03 9c 70 21 05 d6 8d 9b 81 c8 b5 a1 a1 e8 9e 82 41 c8 3e 76 6e 09 bb 9a 9a 66 4c 16 55 f3 74 8d 9a a4 38 c7 f3 44 9d 79 6a 46 fa 88 2a 0c 93 ce 14 fc 36 88 3b 5c 37 80 1d 54 b5 37 30 f3 26 2f 40 0b ac fe d0 66 dc f3 09 32 2e a4 9b d8 b1 c8 be 46 08 ce Data Ascii: <5QOj?jNrfcpwiWyFvxhl\|e_YfDSW@Oj ,rdO>UY&ee3(]2i!>p!A>vnfLUt8DyjF*6;\7T70&/@f2.F

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.3	49870	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:02 UTC	4011	OUT	GET /static/webpack/production/b12f522ce0ee55757f5e.2dcJbNyH591tHPSv0DWyEHi4jMDBGtqFibbP5rsRf_I.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:02 UTC	4143	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 4574 Connection: close Date: Thu, 10 Aug 2023 21:19:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 12 Jul 2023 17:21:18 GMT ETag: "2e87ef19236c2ee364fcf6d7e3dffc35" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 cb0d3a2bdc5300e2d139e111e94efe5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: r_XWX6VMXaIPgvoYGUBVzf6eUGsgUPTWBRLWd_5NurWMmcAHcM6Qig==
2023-08-10 21:19:02 UTC	4144	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 5c eb 72 db c8 8e fe cf a7 a0 74 aa 5c 64 0d 45 cb 4e 9c 38 f2 70 a6 14 5b 89 3d e3 db 5a f6 c9 39 93 e3 52 b5 c8 96 c4 98 22 39 64 cb b6 46 d2 d6 3e c4 3e e1 3e c9 02 dd a4 c4 bb 24 3b d9 da 93 3f 26 d9 dd 00 fa 02 e0 43 03 8a f2 64 bb 96 f7 a4 f7 7a e7 57 ed 93 f6 c7 f3 0e 7f e8 9c f4 8e 4f ef 2e 7f ef f6 7a c6 da 1e f3 f9 d7 7b 55 f7 27 e1 48 f9 fa b5 ee 13 9f 06 bd 3e 0c a2 c1 7f 46 2f 13 d7 72 68 f4 62 3a de c4 ea 59 9e 19 46 1f be 91 70 6c bb b4 c7 68 c8 e2 6f be 3d 88 1f 1f 6d fa d4 f3 5c 67 5a bf d7 66 ef f6 0f 5a 83 89 6b 32 db 73 15 aa 31 cd 55 67 d2 55 ff 1b 35 99 6e d1 01 90 b9 0e 3c 18 c5 a6 0a d3 ea bd 1e 0d 2f 3c 6b e2 d0 ba 36 7b 24 ce 84 b6 6a cd 85 7a c4 f4 0b 4a 99 ed 0e 2f 3d 60 7a e6 9e 78 e6 b9 ed 3e Data Ascii: \rt\dEN8p[=Z9R"9dF>>>$;?&CdzWO.z{U'H>F/rhb:YFplho=m\gZfZk2s1UgU5n</<k6{$jzJ/=`zx>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.3	49871	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:02 UTC	4088	OUT	GET /static/webpack/production/e3ad0fb7614fb0e8f4d7.ncHbqhUuy1SleHCSwfD-nlmwizFCTHYjxzH_SMRfhlc.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:02 UTC	4157	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 47292 Connection: close Date: Thu, 10 Aug 2023 21:19:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:35:54 GMT ETag: "3f760bd5b5793f56077232523dc4878c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 df9ce120cad525bdb160f75cd7b807c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: jXvk-lJhd8NPS54G5Dl6fj0tQX8ycXtger4jPcj0R-rf5UCo2-aDdQ==
2023-08-10 21:19:02 UTC	4158	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd db 72 db 48 b6 28 f8 ce af 80 d8 27 7c c8 31 48 93 92 6d d9 d4 66 7b cb 92 5c 56 95 65 a9 2c b9 dc 6e 87 43 1b 22 92 24 4a 24 c0 22 40 c9 2c 99 13 fd 11 e7 e1 ec 88 99 88 f9 96 f9 94 fe 92 59 6b 65 26 90 99 48 90 a0 24 bb 6a 7a ef 17 5b 04 12 79 5d b9 ee 97 da 75 10 fa d1 75 f3 fc fc cd f1 ee fe ee cb 37 07 f4 c7 c1 fe f9 de eb f7 6f 7f 3a 3d 3f ef ae 6c f1 f5 eb a7 cf f5 e6 64 16 0f 6b 9f 3e 55 27 de 84 4d cf 2f e0 23 36 fd 3f c5 8f 59 e8 8f 98 f8 d1 1b 45 33 ff dc 8f 7a b1 78 30 09 fa f2 cf ab 80 5d 9f 47 e1 68 5e fd ec de b4 9f 6e 3e eb f4 67 61 2f 09 a2 b0 c6 dc c4 0d eb 37 95 e3 8b 5f 59 2f 69 fa ac 1f 84 ec 64 1a c1 67 c9 bc 96 b8 d5 f3 73 16 1f 45 fe 6c c4 aa ee cd 95 37 9a b1 ce 46 6b 51 af ec 5c 79 53 c7 eb 86 Data Ascii: rH('\|1Hmf{\Ve,nC"$J$"@,Yke&H$jz[y]uu7o:=?ldk>U'M/#6?YE3zx0]Gh^n>ga/7_Y/idgsEl7FkQ\yS
2023-08-10 21:19:02 UTC	4159	IN	Data Raw: 8d c9 94 c5 d0 4b d5 2d 6a 0c 58 ae 31 8e a6 ac 71 31 4b 92 28 c4 86 59 17 f8 32 9e 5d 24 41 32 62 69 eb 7e 34 82 77 a5 1b 3e 54 9a c9 26 0d 3f 4a 1a 31 9b 78 70 b2 11 76 f5 17 68 93 78 f1 65 ac 4f 03 7b 41 2c 04 6d 47 70 7c d1 b4 71 e1 c9 91 e3 a1 37 05 18 92 5d f7 a2 c9 7c 14 84 97 f8 16 6e c0 00 d6 1d 07 57 30 12 df af 19 ae 90 58 e2 06 6c c7 74 0e d7 3f 80 cd ad 7e c6 7d ed 09 da 78 f0 85 8d 27 c9 7e fa 45 8c 7b fc dd 77 e3 33 ce 88 63 45 79 c3 60 22 be 71 dd 3e b0 11 b0 35 ec 08 96 09 a8 25 a6 75 5c 7b a3 cb 64 38 8d 66 83 e1 b2 2f b3 56 3f cc 02 9f b9 66 83 13 14 05 e8 d5 1e b0 49 d1 2c c1 19 45 00 32 a7 09 6e f1 a0 7b 83 24 22 88 05 ca 06 50 dc 68 c3 03 6f 34 45 66 e0 75 e0 fb 2c 3c 84 15 c4 af a2 e9 19 80 ee 29 1e 45 14 f2 56 78 08 d0 84 1d 87 bb Data Ascii: K-jX1q1K(Y2]$A2bi~4w>T&?J1xpvhxeO{A,mGp\|q7]\|nW0Xlt?~}x'~E{w3cEy`"q>5%u\{d8f/V?fI,E2n{$"Pho4Efu,<)EVx
2023-08-10 21:19:02 UTC	4175	IN	Data Raw: f9 fb c8 f2 c9 3a 8e 41 7c 88 40 84 dd 73 7c 5f ab 1b 75 c0 95 ab b4 02 04 d1 71 3e 9d 6b 38 1b 43 a3 5f 02 76 cd fc bf b6 be 7e 1d d9 a4 f2 6e 5b 64 73 2d 27 da 6f 50 16 b3 9e 58 44 fc fe cb 41 48 ae cc f5 72 f2 8d 62 f2 35 84 8f 41 2a 7c 7c 9a 05 9f cf 09 55 9f f3 fd 38 17 04 b0 5a 68 af ac 14 90 4a 9e 90 7b e9 40 d8 b4 f4 38 d6 61 5a 8b 7c b5 71 eb f1 2c 83 be bb 40 94 31 4c 6e 2a 06 78 59 e2 cf 12 ce 25 98 9e 0e a2 24 87 76 c5 8a 9c 1e bc 64 48 c8 34 4a 65 3a 62 bc 83 ee 5e ed a0 99 b2 aa 59 6e 92 36 96 6b 19 b1 70 90 0c 35 2c 11 7d 6a 7d d6 6e bf 1c 43 93 70 ea dd 6e f0 f5 eb 46 06 d1 b0 e1 6c 1a 63 b2 e0 fd 68 ec 05 21 7a c5 3e 78 b0 69 1d 24 cc 0d a2 70 2a fa 20 d9 00 32 a1 99 d2 8f 07 fd b4 3f 17 f0 31 c6 64 2b f7 61 43 97 a5 55 bc 69 cc 40 ac a8 Data Ascii: :A\|@s\|_uq>k8C_v~n[ds-'oPXDAHrb5A\|\|U8ZhJ{@8aZ\|q,@1LnxY%$vdH4Je:b^Yn6kp5,}j}nCpnFlch!z>xi$p* 2?1d+aCUi@
2023-08-10 21:19:02 UTC	4262	IN	Data Raw: 7f 51 e2 2d 9e a7 eb 40 e4 e9 3a c7 4f 5a d0 f8 52 b0 f5 a7 9c ad 3f c3 76 75 f7 a4 fb 69 6e 0a 70 29 8a c1 1b 01 83 15 a2 20 fb fb 3d fd fd 67 f7 2d 89 0e 67 05 72 c3 75 81 e1 30 e5 a6 5b 7f ff 3d 9e fc 6c 61 d2 91 87 76 c7 e9 b9 9c 61 ca 01 11 f9 d8 fe fb 34 18 e6 3f f9 77 71 8a 4e 0c 02 6e 14 32 ed 7b 44 06 a2 9c f6 87 93 87 93 a7 16 cb 1e 3a dd 38 37 5e 72 0a b0 b4 40 3b de 58 ef 0f b3 22 23 2a c0 fa 00 94 c3 00 c5 83 7e 0a 4f ca 0c 9f 9d 3e f9 e1 f2 c0 52 cc 88 94 c7 94 b1 d3 89 83 df 59 fe fb 57 22 a5 2e ef e7 e0 1d 6b 85 6f 6d 16 51 9f 52 98 79 94 cc 8c 42 8a b3 7e b2 95 1e 01 e5 df 9c e7 a7 91 e5 0e bd 8e a6 7e 4c 81 95 5c fe 79 dd c6 c5 bd de 24 23 e4 08 71 3a 4f 1e ca fc 60 36 16 83 c5 cd dc 70 c6 ac 9f fd f6 db e4 6c 65 ce 52 db b0 98 f1 db f7 Data Ascii: Q-@:OZR?vuinp) =g-gru0[=lava4?wqNn2{D:87^r@;X"#*~O>RYW".komQRyB~~L\y$#q:O`6pleR
2023-08-10 21:19:02 UTC	4278	IN	Data Raw: 04 51 c3 fb a1 fd cf 5d 7c b1 3a 79 d6 6b 54 c8 7a 29 30 98 64 1e 05 4e 67 8e 4b 41 86 f9 cc 0a 0e f9 23 d5 d3 68 a7 c5 d5 6d bf 99 e7 05 8b fd 38 e0 7d ca cf 9f 2f ac a1 75 e1 1e 14 fb 83 00 3d c1 40 78 72 09 21 aa f9 2c 1f c0 ae c6 e9 1b 38 60 41 66 f4 2a a1 2a c9 21 1f a9 e2 72 93 c1 13 4d ce 30 37 41 23 73 05 4c 53 9a 57 95 69 8a 74 32 a6 20 61 de a3 ce 28 be 25 cb 99 95 5f 79 ce 74 93 ad cc 4f ea e9 ca b6 eb 0c 39 d2 96 bb d3 71 7c da 7d 03 54 ad 13 2d c4 a4 5b 9f e0 22 38 b5 18 05 bd 4e f3 af 89 82 17 a3 5d 04 91 be ba 12 9c 45 8d 7c 4a e0 4f e8 1b ba 9d bf 7e b6 cc d5 15 55 16 ff 69 38 fc 59 91 e1 5c 86 51 70 ff 4b b1 f7 a6 b4 ca cb f2 f3 86 e2 05 59 06 3e cb bf e7 88 96 e4 e0 4b 8b 99 b4 8b fa 3f 75 19 c5 45 ca ae ef b3 13 cd d6 13 19 b8 ff 1c 1e Data Ascii: Q]\|:ykTz)0dNgKA#hm8}/u=@xr!,8`Af**!rM07A#sLSWit2 a(%_ytO9q\|}T-["8N]E\|JO~Ui8Y\QpKY>K?uE

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.3	49872	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:02 UTC	4089	OUT	GET /static/webpack/production/f86dc7c73976519634fe.u7wxnX1c69kWdR8C87ycEdr8hwUX3Duf9i9JSrzjAlI.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:02 UTC	4254	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 7055 Connection: close Date: Thu, 10 Aug 2023 21:19:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:36:08 GMT ETag: "955ffb05052a297436dffbeabe3c571a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 3c2af29a416fc74eb3d104df3f808fdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: CkcZmDTOicjZdhnBeeRDrwQUhUHGG8tXh-gvRPxN6R2K_lE7tWbBMw==
2023-08-10 21:19:02 UTC	4255	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 3c 69 73 db b8 92 df f5 2b 64 ce ae 8b ac c0 b4 7c 8c 93 d0 ab e7 f2 99 68 26 89 fd 7c 24 6f d6 e5 a7 82 49 48 e2 84 22 38 20 68 d9 51 b4 bf 7d bb 01 50 e2 25 d9 99 99 dd aa cc 88 26 c1 46 a3 ef 6e 34 68 4f c2 38 e0 13 b7 df ff 70 7e 78 72 78 f4 e1 54 5d 9c 9e f4 8f df df 7c fa f5 aa df ef 3e 3b e2 fb f7 db 3b c7 4d b2 74 64 df de 5a 09 4d 98 e8 fb 11 cf 82 7e c0 fd f4 7f f4 8d 24 1c a4 d6 1d 99 6e 75 3a 5b de 20 8b 7d 19 f2 d8 66 44 12 ea 4c cf ef 7f 67 be 74 03 36 08 63 76 21 38 bc 20 9f 6c 49 ac 7e 9f a5 1f 79 90 45 cc 22 d3 07 1a 65 cc 5b eb cc 9c d6 fe 03 15 ed b8 4b ed ad 9f 1d 22 e0 77 d7 21 1c 7e 3a 0e 49 f1 ee 9e 43 a2 ee 62 16 67 8a e3 65 97 b9 34 49 08 ed 72 d7 17 8c 4a 76 1a b1 31 8b a5 9d ba 37 bd 9e cf 63 32 Data Ascii: <is+d\|h&\|$oIH"8 hQ}P%&Fn4hO8p~xrxT]\|>;;MtdZM~$nu:[ }fDLgt6cv!8 lI~yE"e[K"w!~:ICbge4IrJv17c2

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.3	49873	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:02 UTC	4090	OUT	GET /static/webpack/production/9172aa6f8832526ab19b.LOASUGzMoQPJ1DBffC3eNU1eLNzsOhspn7RROHtBrrw.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:02 UTC	4202	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 11108 Connection: close Date: Thu, 10 Aug 2023 21:19:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 03 Aug 2023 17:36:04 GMT ETag: "92a29031f7e95831d14114e94e6ae377" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 8f2341b304c32ec6530aa5361edb2fe4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: JA1L7-IXw5xhWsVX3GG52pkeurcN4disnC6sisL6EvxJIvLkloFLKg==
2023-08-10 21:19:02 UTC	4203	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 3d 69 6f db 4a 92 df f5 2b 64 2e 60 88 3b 14 23 f9 b6 04 4e e0 2b 13 cf d8 b1 37 b6 27 58 04 86 40 91 2d 8b 31 45 6a 78 d8 d1 b3 95 df be 55 7d 90 dd 3c 24 f9 48 16 98 37 b1 c8 66 1f d5 d5 75 57 75 eb d1 0b dc f0 d1 1c 0c ce 2e 0e 8e 0f 0e cf 4e e8 1f 27 c7 83 a3 cf 37 5f fe 75 35 18 58 4b 5b 3c 3f 7f bf d5 cd 69 1a 8f 5b df bf 6b 53 7b 4a a2 81 e3 87 a9 3b 70 43 27 d6 6e 8d a7 2e d9 ec 8d d2 c0 49 bc 30 68 11 23 d1 9f 2e 86 3f 88 93 98 2e 19 79 01 b9 8c 42 f8 26 99 b5 12 43 1b 0c 48 7c 1e ba a9 4f 34 e3 e9 c1 f6 53 d2 5b eb cc f5 fe 83 1d 35 c3 fe 5a de 8b fe d4 20 e6 e5 c1 b1 a5 11 d7 4b c2 48 eb 13 f3 e4 eb d7 8b af f0 20 8a e0 f7 bc 15 3e 3f b7 42 eb 69 ae eb 7d 3a 94 9d fa 89 15 ce 8d 6e a7 a3 ce c7 08 5f 3e a3 06 9d Data Ascii: =ioJ+d.`;#N+7'X@-1EjxU}<$H7fuWu.N'7_u5XK[<?i[kS{J;pC'n.I0h#.?.yB&CH\|O4S[5Z KH >?Bi}:n_>
2023-08-10 21:19:02 UTC	4228	IN	Data Raw: d5 11 5f e5 6e 29 16 dc 9b b0 f9 d7 d2 53 d4 e4 95 56 ea 47 78 6a 32 27 0a 3b 38 6a 03 a9 a6 f9 1c 91 41 79 87 2e 09 87 ca 9c 85 8c cf 72 af b8 6a 3d 5f f8 bc c8 1c 85 eb 5e b1 0d 97 53 49 6a bd 25 b9 7d b4 7f 51 e7 fb ce fc ab cd 52 57 cd 21 68 25 01 5e 58 2c 82 00 bf 92 11 c5 e6 83 78 16 38 8a 27 fc da 74 90 16 71 6b 33 ba c3 d1 25 f5 17 8d 83 69 f4 0f 4c 2f fe 42 43 04 59 3c 0b 92 11 9d fb 3d b1 4f 7e 20 58 02 2b da 14 e1 41 db a7 21 58 55 69 b3 98 30 4b af 01 8e f8 d5 c3 e2 1e 45 06 5d db 54 7e e3 15 60 6e 18 f8 33 44 10 8c 03 20 52 74 13 25 68 05 1a c2 d2 78 5f 05 31 16 44 50 f0 31 c8 83 29 b4 75 85 21 94 8f b3 0d 11 34 4e de 97 fa eb 26 c3 fa 76 34 39 9b 66 04 89 5c 83 fa 72 02 95 5a 6a 2b a0 19 cf 55 b2 d9 c3 92 aa 0d ac ca ea 13 de 0c 81 b8 02 8c Data Ascii: _n)SVGxj2';8jAy.rj=_^SIj%}QRW!h%^X,x8'tqk3%iL/BCY<=O~ X+A!XUi0KE]T~`n3D Rt%hx_1DP1)u!4N&v49f\rZj+U

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.3	49874	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:03 UTC	4290	OUT	GET /paper/get-link-tracking-token?localPadId=zjo2KktWLcVGFokm1yeoE&trafficSource=paper_address_bar&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-app-time: 1691634844000 notes-pad-id: zjo2KktWLcVGFokm1yeoE notes-tab-id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:04 UTC	4344	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:04 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:04 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: fb9bf9e6-2593-4f64-873f-1044bb34ecf5 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 8368a32ac741486cb5aa67e729a59dfe Connection: close
2023-08-10 21:19:04 UTC	4346	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.3	49875	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:03 UTC	4291	OUT	GET /paper/emoji/preferences?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:04 UTC	4299	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:03 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:03 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/preferences X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 350978ec-d2dd-4688-ae6b-e48d2f888c5d X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 85 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: e12e925cc528415ebfb4b293fff0db3f Connection: close
2023-08-10 21:19:04 UTC	4301	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 70 72 65 66 65 72 65 6e 63 65 73 22 3a 7b 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 30 2e 31 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 7d 7d Data Ascii: {"success":true,"preferences":{"fitzpatrick":"base","version":"7.0.1","locale":"en"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.3	49879	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:03 UTC	4292	OUT	GET /static/webpack/production/3ca391fb196a76f06afb.Sf-O5SKhNZ9n5HaOYmICg0jW_NKUQqCqe-cbrqaYptA.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:04 UTC	4303	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 29248 Connection: close Date: Thu, 10 Aug 2023 21:19:05 GMT Last-Modified: Wed, 12 Jul 2023 17:21:16 GMT ETag: "f5fa5413a58f2ed2efc40f2f4ee098b6" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a9717fb92179a05f5da85fabc586e750.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: l9SmxyH_ILlBMv9g_PagmMivWFBN25Rf8EezXvrvyPwlPuz1lpmu-g==
2023-08-10 21:19:04 UTC	4303	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd 7b 7f db c6 95 30 fc 3f 3f 05 c5 a7 cb 12 e5 88 21 dd a4 e9 02 82 b8 8e 9c 34 de 5a b1 6b 29 4d 5b af 5e fd 20 72 24 a2 81 00 16 00 75 31 c9 f7 b3 3f e7 cc 7d 80 01 48 c9 4e db 67 bb 1b 8b 18 0c e6 72 e6 cc 99 33 e7 3a b8 8f d3 79 76 3f ba bc 7c f3 f6 e5 ab 97 df bc f9 96 fd f8 f6 d5 e5 c9 f7 3f fe f0 c7 b3 cb cb 70 67 8d cd e6 c3 85 37 5a ae 8a c5 e0 c3 87 de 1d 85 ea 79 f1 ff e7 34 9a 95 97 77 71 5e ae a2 24 fe 48 e7 bd 0b b2 7e f1 e5 f8 2b ff 7a 95 ce ca 38 4b 07 94 94 de 9a 8e e8 c3 32 cb cb 22 b4 cb 3b f1 f5 e0 60 40 bb 71 5a 94 51 3a a3 d9 75 b7 f4 bc 72 91 67 f7 dd 94 de 77 cf 1f 97 f4 db 3c cf f2 41 ef 24 4a d3 ac ec ce a2 24 e9 46 dd 59 12 15 45 37 82 ff ef ca 16 7b de 96 a8 7e 60 26 b4 38 cd e6 ab 84 86 07 63 Data Ascii: {0??!4Zk)M[^ r$u1?}HNgr3:yv?\|?pg7Zy4wq^$H~+z8K2";`@qZQ:urgw<A$J$FYE7{~`&8c
2023-08-10 21:19:04 UTC	4319	IN	Data Raw: ac f1 f4 0d 56 87 45 93 62 3d bc 8d 3f 30 72 f4 68 19 db b1 7d 21 ac 3e 05 cb ca 0d 43 85 9e f6 21 4c c5 b1 f1 a8 cc 89 98 21 d5 69 b4 d4 c6 20 82 ca 84 1f 2e 94 25 0e db 5a d1 9c f1 bc 22 22 4a 33 25 89 79 9c 7a 25 3a 91 3d a0 3a 69 5d 2b 52 d2 10 d9 2f 53 8b a1 9a cf b4 64 10 1d e3 7b d7 75 cd d2 36 8a 76 d4 e7 65 76 56 e6 ee a4 30 55 55 23 87 12 e9 11 43 df c8 c0 45 7a dd 4a 11 5f 89 de 43 a5 78 21 a2 52 57 b4 9c e4 bd b5 ce 1d 63 a1 1b 0d 99 f6 b3 b7 9c 8c c7 75 1c 00 d2 cf 9a 67 f2 28 33 1f 81 8c f0 8b d9 18 ad 9a 88 9c f6 72 57 a1 de 68 2d a1 ae 97 59 a8 ad a7 e9 88 07 0c 79 04 64 95 98 85 32 7e d1 9b ba 41 94 d2 87 94 a0 51 ec 23 ca a5 1c 8a 40 15 32 b3 cb 02 d4 1a e3 1a 34 54 4f 3f d0 0b a6 31 61 32 7c 5b 4f cb 14 c4 a9 07 77 a2 a5 b3 0f fc d6 8c Data Ascii: VEb=?0rh}!>C!L!i .%Z""J3%yz%:=:i]+R/Sd{u6vevV0UU#CEzJ_Cx!RWcug(3rWh-Yyd2~AQ#@24TO?1a2\|[Ow
2023-08-10 21:19:04 UTC	4324	IN	Data Raw: 31 7b 45 17 3f fe e2 14 28 65 8c bf ba 72 cd ba 51 4e bb c5 6a b9 cc 72 68 61 d4 53 ce 46 36 ba 84 b4 e3 7e f1 24 f4 6a d7 30 bd 76 10 8e 53 16 d9 e8 eb 17 63 8f bc 43 43 f7 74 70 4a 3d f2 f6 b9 e4 a4 b3 1f 3d 49 b2 68 7e 9a e5 f4 7d 76 5f 48 35 73 f8 f3 80 89 26 32 4c 4b 51 c8 03 35 ac 95 d4 64 19 9f 81 38 b1 ec 7e 6f 8c 41 b9 33 1e 6b ab a7 a6 f1 eb f8 62 d9 59 b9 ba 76 d9 67 19 f1 c0 5d 2f 45 2c ef 3d 68 05 9f cb 60 4c 3a 26 63 2e d0 ce c3 20 d5 26 d8 94 79 8a 59 f8 b4 4d 86 b3 fe 31 c5 7f e9 9c a5 5c 69 89 22 2e f8 50 63 64 26 cc 3a 01 75 8b 28 45 f4 00 e6 8e 06 54 7a 54 2e 68 6a 5b 62 64 e1 da 0d 4d 0c 47 d0 00 67 27 84 eb f5 65 e0 76 9d 1c c4 b7 32 85 74 54 9a 10 df 48 19 b2 65 86 b2 0d 3d e7 b5 57 b2 93 94 7b 7e a8 21 b2 47 f5 f2 38 df 6c 92 a3 d8 Data Ascii: 1{E?(erQNjrhaSF6~$j0vScCCtpJ==Ih~}v_H5s&2LKQ5d8~oA3kbYvg]/E,=h`L:&c. &yYM1\i".Pcd&:u(ETzT.hj[bdMGg'ev2tTHe=W{~!G8l

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.3	49878	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:03 UTC	4292	OUT	GET /paper/ep/stateless/calendars/calendar-events?padId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:04 UTC	4346	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:04 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:04 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/ep/stateless/calendars/calendar-events X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 837f3d10-69d5-40b7-bda9-b01ac40a0fcb X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: bf0c130a1a6c41249b5277de536e9712 Connection: close
2023-08-10 21:19:04 UTC	4347	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"success":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.3	49880	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:03 UTC	4294	OUT	GET /static/webpack/production/0f87dfdb09fdf4689436.XmWd3ZCjNs5ikVl6X4w5UBoJH0WCva2GW011KNNjeIU.js.gz HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:04 UTC	4322	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 301 Connection: close Date: Thu, 10 Aug 2023 21:19:05 GMT Last-Modified: Wed, 12 Jul 2023 17:21:36 GMT ETag: "6c3194fdc28b6804d557be186d86036e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=43200 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 01c82f5226ffef5f7e654ffdbab24db6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: dfpoJvKlM8ke3GbErnXAFbP9v4NI7eb0CEQHqHxzq0ZpRP1r9Y6yKA==
2023-08-10 21:19:04 UTC	4322	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 85 8d cb 6e 82 40 18 85 f7 3e 85 a5 1b 48 c8 30 2a de 30 2c bc 45 5b 15 9b 36 54 53 63 26 23 f3 53 87 22 43 98 01 db 22 ef 5e 6d 1f a0 ab 73 16 e7 3b 9f 7e e6 09 13 67 44 c8 72 3d 9c 0c 47 cb e9 6f 99 4e c8 78 ee 7b 8b 17 42 dc 7f 17 97 cb 6e 6f a0 34 97 47 7d b7 d3 32 a0 81 22 05 cf 54 4e 63 fe 0d 4c db 9b 65 17 db 4e 98 27 81 e2 22 d1 89 09 26 33 ca f5 21 82 40 21 06 21 4f e0 29 13 29 64 ea 4b 07 53 23 04 e4 4a b0 3c 06 cd 2c 0b 1a e7 e0 dc e1 ca 18 14 34 ab 73 97 e9 cd 3e 6e 1a 03 b8 91 34 8f 95 5b d6 66 19 67 0e 47 b7 a8 aa 6a 6f 0c 6a 35 cb ba af 4b 91 67 01 ac 68 9a f2 e4 dd 7f 5e ba 47 a5 52 e9 58 56 4a af 32 c4 ae ce 83 f8 44 81 38 59 52 51 c5 03 eb 8f 38 d1 d4 c2 61 af cb 42 76 c0 fd 90 85 76 a7 d7 b7 5b 1d b4 3d 6d Data Ascii: n@>H0*0,E[6TSc&#S"C"^ms;~gDr=GoNx{Bno4G}2"TNcLeN'"&3!@!!O))dKS#J<,4s>n4[fgGjoj5Kgh^GRXVJ2D8YRQ8aBvv[=m

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.3	49877	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:03 UTC	4294	OUT	GET /paper/cloud-docs/get-filesystem-info?localPadId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-app-time: 1691634844000 notes-pad-id: zjo2KktWLcVGFokm1yeoE notes-tab-id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:04 UTC	4301	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:04 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:04 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: add33a2d-68cc-46ed-af1e-5da87a81a3ec X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: b8c3eeb8094e4e8791fa756dac46c176 Connection: close
2023-08-10 21:19:04 UTC	4302	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.3	49749	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	555	OUT	GET /static/fonts/AtlasGrotesk-RegularItalic-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:55 UTC	556	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 82560 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:57 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 15:21:35 GMT Cache-Control: max-age=43200 ETag: "3777cf6535db972df634d4cb16895797" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 20e88007b6f5218ef5942bc3581c73b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: Wu9Pv1sb3E664DbRg38BfFWvlffr400iRIXgmlxhR1LYF9KgP2BFVg== Age: 21441
2023-08-10 21:18:55 UTC	556	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 42 80 00 10 00 00 00 04 a4 78 00 01 42 1d 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 b9 68 1c ce 64 06 60 00 8c 02 08 2e 09 82 73 11 0c 0a 86 f0 00 86 8d 12 0b 94 34 00 01 36 02 24 03 a8 64 04 20 05 91 09 07 eb 00 0c 83 6c 5b bf 67 94 a9 53 64 ed 0b 03 be e1 76 a3 46 ff 1c 4f db bf 0a 7a a4 a8 dd c2 29 d0 48 c6 9e 21 a2 b3 d9 59 ea bc 45 d7 25 63 0a 92 00 aa 63 2d 24 bb 17 21 a2 73 6c 99 21 f0 87 85 10 33 fb ff ff ff ff ff ff 95 c9 97 67 4d 93 07 bc e4 1f 1c 5a 2b 82 58 f1 98 56 bb ba da 5d 42 8a 79 88 96 62 92 ac 42 ac 0d 35 6d 07 1c 2f 0a 10 2e 21 5f 56 e0 d5 d7 de 37 bd 7b 40 1b 95 ac 53 83 1a 5d 9b 32 db b6 6d 3b 35 59 76 ea 4d 1a d9 cf 20 ad 9b 3d 49 ce 07 97 15 d5 d1 55 06 4b 93 00 cc Data Ascii: wOF2BxBhd`.s46$d l[gSdvFOz)H!YE%cc-$!sl!3gMZ+XV]BybB5m/.!_V7{@S]2m;5YvM =IUK
2023-08-10 21:18:55 UTC	572	IN	Data Raw: 1f 7f 5e b3 13 39 d2 f1 1e 1f 95 bb 77 06 a9 f7 e5 98 e2 92 c8 92 0d eb 28 92 0c 50 89 20 c5 a3 a2 08 ed 42 a9 ed a4 6e 65 ea 9d 1c aa 9d 6c 16 11 cf a0 e8 a9 a9 11 6d d2 c5 ea ed cf bf 1a fe df 3b 16 7d aa ec 02 28 f8 6c e7 47 ef 55 c0 a6 ed 01 34 1f 45 c2 49 8b 67 6c e7 e4 a9 ae ab af 3d 1a d0 79 d9 3f fd f6 f1 f1 9e 68 69 c9 36 38 eb 3c 0b 32 2a f3 3f 41 cd 3a 19 ee 6b c2 3a 1c 11 88 52 3b b1 08 10 34 84 78 1c 84 7c 2d 07 d5 a1 de 35 35 50 80 17 da e5 7b 95 7d 42 39 26 14 c4 eb a7 26 81 1e a3 c7 6b cd fe a1 bc 0c 56 ef 24 4a ca c6 a6 ba 89 a5 be b2 b7 06 a9 dd 5b 48 11 46 e1 e8 0c 64 f8 e6 0f e4 3c 6d 35 c2 09 bf 0c b7 a8 1f 8d 66 6a 42 64 66 94 9c d1 bc 33 1c 68 61 99 f6 3e 13 14 71 e8 64 ee b1 98 59 28 b5 2e c0 48 4f 91 26 b5 06 6e ce 60 56 8d 11 7e Data Ascii: ^9w(P Bnelm;}(lGU4EIgl=y?hi68<2*?A:k:R;4x\|-55P{}B9&&kV$J[HFd<m5fjBdf3ha>qdY(.HO&n`V~
2023-08-10 21:18:55 UTC	588	IN	Data Raw: a0 d7 66 19 7c 05 d0 81 1d b2 c1 31 10 26 d2 28 f3 12 45 a4 7a 03 19 08 43 76 94 7e 6b c5 88 93 20 59 95 34 c9 aa bd 03 d9 27 8d 63 f6 28 b8 f3 83 38 6f f6 2a 6a 8a a8 fd d9 6f 0d 2d cb 90 95 de 9d 4f 0a 6b 8d 3a f5 cd a1 bc 5b a6 53 02 38 79 0d cb c9 03 00 e4 75 cb 55 e8 1a 67 03 ec 52 aa e4 24 89 40 eb 28 2f 69 bc 87 58 d9 1e 04 68 76 4e b2 48 22 61 3d d5 ab 01 cd b0 bf 2b cd 75 49 6f 8f 31 cd 22 9d 61 9c 66 f5 61 3f db d9 80 16 51 86 89 22 31 ed 1a f8 c4 43 b3 0c 93 0c 71 cd b8 56 38 d1 45 cc 30 28 88 c3 c6 5d f7 4a 28 33 54 09 b8 09 f3 da d5 10 8b 29 15 e2 0a 61 eb fc b9 ab 56 3a 7d 11 9e 4a 4b 4b c3 a3 5a 68 a9 45 92 25 4e b2 3e 89 fa c4 05 0f b8 9f 0a 4d dc 35 e9 26 d7 a4 89 93 95 cc 34 99 14 9b d8 81 eb 94 ed c6 91 60 85 e4 60 74 37 77 70 91 8f 99 Data Ascii: f\|1&(EzCv~k Y4'c(8o*jo-Ok:[S8yuUgR$@(/iXhvNH"a=+uIo1"afa?Q"1CqV8E0(]J(3T)aV:}JKKZhE%N>M5&4``t7wp
2023-08-10 21:18:55 UTC	604	IN	Data Raw: a5 8a 32 8d 98 df 9e fe fc d7 3d 34 3d f6 e3 01 fd e2 32 16 a7 74 b3 71 80 78 c5 5f b4 f8 59 0a 55 9d 82 4c 9c 9c 66 2e 94 3e 90 ca a2 85 8a 7f f3 77 e7 dd a4 e2 96 e2 ba 67 09 7e f1 c6 7b bf 2f 25 a1 7e c9 3b 87 92 dd e2 e4 9f d9 e4 ee 9c cc ff ed e8 4a 7a ae e1 7f 47 e0 9c 76 5d e1 af c9 a4 4b b0 3c 1a f4 51 0c d0 b3 ad 44 b6 2d 09 2a f0 35 6f 81 59 80 7a e6 3f a4 0b b8 cc 68 ed bf 57 86 3f 3a de d6 7f 5f 8b 97 b6 b4 f5 e9 46 48 3d ad 4d d0 b5 2f ef 6d 9f ce 8a 8c b7 6a d1 fb 3b a7 b3 ee b4 b4 6a b1 fb 87 e4 c6 9d a2 5b 54 92 04 44 9f 44 d7 59 00 df 25 cd 36 9a 26 25 a1 d5 84 05 5b 99 a4 98 5a c3 96 4d a8 bc 7b a5 68 af 04 9f f9 49 39 56 b4 5f 24 79 01 f9 8d c2 33 7f f1 52 57 28 b8 4c 9e 1e e0 02 81 0f d5 45 9d 97 d2 2d c8 c7 27 73 31 6d 61 31 6d 16 56 Data Ascii: 2=4=2tqx_YULf.>wg~{/%~;JzGv]K<QD-*5oYz?hW?:_FH=M/mj;j[TDDY%6&%[ZM{hI9V_$y3RW(LE-'s1ma1mV
2023-08-10 21:18:55 UTC	607	IN	Data Raw: c9 59 74 87 de 61 2d d3 bb 15 a7 de e8 65 ab f2 c6 cd 83 25 16 f8 2f cc 77 aa 78 af 4e 03 0c 36 c5 38 2b 40 95 7d 1c b9 bc ea ea 3b ac 2b f5 e4 df 28 f9 38 ee 6b 71 cd 53 f8 f5 53 d6 c1 b9 e3 4f 5a 7c bc ce 81 0d e5 79 86 85 3b f6 21 65 c6 12 46 eb d2 f3 95 77 e0 8e 2f 32 b2 27 d0 56 ad de c8 50 ff b8 3e 69 de d0 06 0b b6 a0 ae bc a7 46 49 d1 ee ad 2b 35 c7 2b 52 20 b7 35 f7 a0 32 07 ed 15 d6 59 38 29 27 b3 89 fb b7 50 7f a0 20 54 aa 0f 70 64 72 79 f3 72 9d 7c 35 65 40 57 53 ad 6d 2e 27 6c 99 fd 9b a3 48 5f 92 2f 0d aa 19 77 67 0f 39 32 35 e5 1b 7e 4e 6c 2c 65 9d 6d de 7c b6 e8 c8 8d ce 02 23 8f 43 32 1d 89 91 35 67 eb e0 ec 4c e6 99 28 a7 8a fc 0a cb 8c cb 9a 11 be ce d8 96 50 98 b5 15 dd 6c 1f 05 2e 82 87 93 8e 39 8f f3 32 a7 6d fa 64 f8 77 b8 e3 c6 44 Data Ascii: Yta-e%/wxN68+@};+(8kqSSOZ\|y;!eFw/2'VP>iFI+5+R 52Y8)'P Tpdryr\|5e@WSm.'lH_/wg925~Nl,em\|#C25gL(Pl.92mdwD
2023-08-10 21:18:55 UTC	623	IN	Data Raw: f1 d7 3d ea 6d c2 a7 e2 05 5e fe 7d fa ca 26 d1 f0 16 86 0f ea b6 ff cf 47 ab 0c 2d 61 37 e3 23 27 26 02 f0 bd 4a 30 f2 d5 03 77 70 97 2a a9 50 99 3c 08 46 d7 a7 90 74 dc 85 41 90 84 ae 99 88 24 ff a1 b3 bb 3a 72 85 e7 a5 82 4a a9 d5 79 e8 bb f3 7c 59 bf ed f9 41 ca 13 2f f0 b2 f6 5e c0 23 ef 7b 7d 2a ef dc 41 31 ac 82 2f 7d 9a 18 dc 1b 17 ea 2e bb 4b a9 59 9e 5c 82 ee d4 e3 38 e1 84 13 4e 74 2a 09 80 13 08 00 0c 27 c8 52 39 81 95 8a bc 83 43 63 9f 82 b1 26 d0 d5 ef 63 b7 b9 1f 8d 3f f3 52 92 1a a5 70 53 91 9b ba 5e 59 6c 06 bb 8c 85 60 83 ea 1b 04 04 04 89 85 04 60 af 95 1c 2a 61 89 04 09 92 90 bc ab 4c d9 60 d1 a9 6d 58 8c 60 f2 ea 24 42 36 3b 43 b9 b3 51 eb 26 ba e8 bb 0f b1 de f5 0b 8c 11 9f 1a 35 28 95 97 6a d1 d1 ff 07 6d a6 b9 ad b5 a5 d5 56 1e c5 Data Ascii: =m^}&G-a7#'&J0wpP<FtA$:rJy\|YA/^#{}A1/}.KY\8Nt'R9Cc&c?RpS^Yl``aL`mX`$B6;CQ&5(jmV

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.3	49876	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:04 UTC	4295	OUT	POST /paper/cloud-docs/find-and-resolve-scls?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 59 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-app-time: 1691634844000 notes-pad-id: zjo2KktWLcVGFokm1yeoE notes-tab-id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:04 UTC	4297	OUT	Data Raw: 6c 6f 63 61 6c 50 61 64 49 64 3d 7a 6a 6f 32 4b 6b 74 57 4c 63 56 47 46 6f 6b 6d 31 79 65 6f 45 26 74 3d 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 Data Ascii: localPadId=zjo2KktWLcVGFokm1yeoE&t=50aS4zgW2W1XP95GWz4lmdjP
2023-08-10 21:19:04 UTC	4320	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:04 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:04 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 8b647ac3-bab5-4c4a-b8d4-1bfc2cf313b8 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 263e476b759c4093a481e55d2a82f38c Connection: close
2023-08-10 21:19:04 UTC	4322	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.3	49881	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:04 UTC	4297	OUT	GET /paper/cloud-docs/urls?localPadId=zjo2KktWLcVGFokm1yeoE&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-app-time: 1691634844000 notes-pad-id: zjo2KktWLcVGFokm1yeoE notes-tab-id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:04 UTC	4322	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:04 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:04 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 4ac5c58f-262f-4c7d-870c-0bb6af54c5cd X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: c8a9706df3614b69a6d2061932ac46da Connection: close
2023-08-10 21:19:04 UTC	4324	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.2.3	49884	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:04 UTC	4298	OUT	GET /static/img/ace/emoji/270b.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:04 UTC	4336	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3037 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:35 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:19:05 GMT Cache-Control: max-age=43200 ETag: "c4ce23f7313e8e2319f10e4d8aeb20d1" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c7311454ce938e04f3523616a5b033da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: CFb1FCRqBVz1p7ZZQaAXDazUoD7zdy4j_q6-n-vOCXrEs9vtBADxdw==
2023-08-10 21:19:04 UTC	4336	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0b 6a 49 44 41 54 78 9c cd 9b 5d 88 1c d9 75 c7 7f e7 d6 47 cf 74 8f 46 33 d2 6c 46 d6 46 2b cb 1a ed 7a ad 8f 75 48 08 49 58 87 b5 8d c3 62 9c 97 2c 21 5e 88 0d b6 31 eb 5d ad 16 c7 18 1c 30 18 85 3c f8 c1 24 04 69 45 88 8d 09 ce 22 e3 0f fc 60 30 04 62 96 3c 84 e0 4d ec c5 f6 48 0a 96 64 59 da 95 57 df d2 8c 76 46 fd 51 55 f7 9e 3c 54 f7 4c 57 77 55 75 cf 4c 8f b4 7f e8 a9 9e aa ae 7b ee ff 7f 4f 9d 73 ee bd dd c2 26 e2 fc b1 27 7e 0f e3 8e 8a f0 47 aa 4c 23 72 0e d5 57 22 71 27 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<jIDATx]uGtF3lFF+zuHIXb,!^1]0<$iE"`0b<MHdYWvFQU<TLWwUuL{Os&'~GL#rW"q'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.2.3	49885	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:04 UTC	4299	OUT	GET /static/img/ace/emoji/270b-1f3fb.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:04 UTC	4340	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3275 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:30 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:19:05 GMT Cache-Control: max-age=43200 ETag: "beaa0ed7207b6d54f5bc7a8118f30e9d" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3c2af29a416fc74eb3d104df3f808fdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: vsOHEcotDqYmJMC53CC2IIEJyTOShXHGoYnB_OlSVdO6m4bOt5r6KA==
2023-08-10 21:19:04 UTC	4341	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 58 49 44 41 54 78 9c cd 5b 5b 6c 1c 57 19 fe fe 73 66 f6 e6 7b ec d4 49 43 9a a6 0d 69 84 21 8d 4b b8 2a 45 6d 21 a8 42 f4 85 8a 90 90 0b 2a 55 81 07 2a 55 08 d1 82 d3 6a 21 81 14 2a 78 68 84 10 45 08 41 e2 14 8a fa 50 09 09 a9 50 fa 80 10 85 96 34 a1 2a a2 2d 4d 9b ab 63 3b 8e ef 3b bb 33 73 fe 9f 87 d9 ab 77 67 76 d7 5e 27 f9 e4 f1 ec 7a e6 5c fe ef fc b7 f3 cf 98 b0 8c 38 f1 f4 a3 83 62 24 4d 44 1f 15 96 1e 52 f4 26 20 47 6c db fa e9 c0 8e f4 dc 72 8e dd 28 68 b9 3a 3e 71 6c Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<XIDATx[[lWsf{ICi!KEm!BUUj!xhEAPP4*-Mc;;3swgv^'z\8b$MDR& Glr(h:>ql

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.2.3	49882	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:04 UTC	4339	OUT	GET /static/img/ace/emoji/270b-1f3fc.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:05 UTC	4351	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3361 Connection: close Date: Thu, 10 Aug 2023 21:19:05 GMT Last-Modified: Tue, 19 Jul 2022 19:30:31 GMT ETag: "cd5a34185731b928deaa73d238282ad6" Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f6d3d027dc70c7291c2f685efb187ab2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: QhTv0f85vODVCaSWUvaszZehL8sWkksCuav_dd-r4ApT7LivdEa-pA==
2023-08-10 21:19:05 UTC	4351	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c ae 49 44 41 54 78 9c cd 5b 69 8c 1c 47 15 fe 5e 55 77 cf ce cc da bb 6b af 63 27 c6 31 ce 61 22 20 89 03 88 4b 09 4a 00 23 04 84 60 47 09 89 04 48 d8 0e 42 08 24 40 06 db 41 42 0b 12 ac 03 82 1f 89 b8 4c 62 02 c1 11 04 81 ed 3f 20 01 81 1f 08 71 0b 45 08 44 22 62 af 9d b5 77 7d ec e1 f5 5c 7d d4 7b fc e8 ee 39 bc 5d b3 bb b3 33 76 9e dc 9e 99 ae ae e3 fb ea 5d 55 d5 4b e8 a1 1c 1d dd 79 9b 28 19 21 e8 37 8b f0 10 11 bd 20 2c 4f 05 7e ee 5b f7 8f 7c bb d4 cb be 17 2b d4 ab 86 7f Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[iG^Uwkc'1a" KJ#`GHB$@ABLb? qED"bw}\}{9]3v]UKy(!7 ,O~[\|+

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.2.3	49883	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:04 UTC	4340	OUT	GET /static/img/ace/emoji/270b-1f3fd.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:04 UTC	4347	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3254 Connection: close Date: Thu, 10 Aug 2023 21:19:05 GMT Last-Modified: Tue, 19 Jul 2022 19:30:32 GMT ETag: "f8ab974b28712b004af916d2c01d4e86" Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b03c46754456cd1729ff37c2faafd4ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: Xi-zmFPRe-kxu5eDiLaAdJktN9nRPdAbcCz6_7ijMWx9WAc50Ir0wA==
2023-08-10 21:19:04 UTC	4348	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 43 49 44 41 54 78 9c cd 5b 6b 6c 1c d5 15 fe ce b9 33 b3 de f5 da 9b 4d 9c 07 81 10 c2 2b 29 b4 09 b4 15 af 38 51 84 1a 54 5a f1 48 23 54 a8 4a a5 b6 02 f5 47 29 04 a1 96 aa 12 72 7f 51 4a 0b 85 88 22 d1 1f 6d 85 82 50 29 24 11 42 95 68 a9 42 02 81 02 7d a0 02 25 a1 31 c4 26 c4 89 4d 6c c7 f6 3e e6 71 4f 7f ec ec 7a 76 77 66 76 d7 de 4d fa 49 23 db 73 67 ee bd e7 bb e7 79 ef 98 d0 41 dc bd 75 e3 a5 9e 96 01 45 74 85 86 64 19 38 e8 89 3c e9 18 c6 63 bf 7e 66 cf 74 27 c7 6e 16 d4 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<CIDATx[kl3M+)8QTZH#TJG)rQJ"mP)$BhB}%1&Ml>qOzvwfvMI#sgyAuEtd8<c~ft'n

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.2.3	49890	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:05 UTC	4355	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 699 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:05 UTC	4356	OUT	Data Raw: 1f 8b 08 00 d6 d2 d5 64 00 ff ed 97 5d 4f e3 3a 10 86 ff 4a 94 ab b3 12 a9 f2 d5 a6 c9 1d 82 3d bb 68 41 cb 05 7b b8 40 55 e5 24 d3 e0 25 b5 23 db 41 2a 88 ff ce 9b a6 85 88 2c bb 7c b4 70 90 b6 17 4d 3a 71 c6 33 cf bc 63 bb 67 d7 f6 d4 2c 2a b2 13 9b 2e 49 18 7b 67 75 4d ec 8a cf f4 b4 62 f9 b4 94 f8 d2 86 15 64 9d 91 28 26 16 ab 2a 8b 0b 6e ac 94 0a 2e 34 de a9 94 ac 48 19 4e da 4e ae ed ac 56 0a 3e 4e f8 9c f0 da bc 3a 82 d5 1b c5 5e 14 84 51 e8 87 f1 78 c7 36 78 f6 5d 1c c3 67 f3 30 1e 7b d1 c0 8f d7 9f 31 06 c0 9f 38 c8 11 86 26 75 49 ca 71 d3 28 66 29 4b 9d 90 66 b9 13 c6 b9 ef a4 81 3b 73 d8 2c 0f 22 72 5d 4a 7d 17 81 64 cc 50 21 d5 a2 c9 47 14 30 08 76 c9 0b 66 b8 14 7a aa b9 c8 68 aa 49 6b fc 44 6a 05 2d 73 b3 13 b7 0d a8 1b e5 60 e8 86 2b 16 4d Data Ascii: d]O:J=hA{@U$%#A,\|pM:q3cg,.I{guMbd(&*n.4HNNV>N:^Qx6x]g0{18&uIq(f)Kf;s,"r]J}dP!G0vfzhIkDj-s`+M
2023-08-10 21:19:06 UTC	4372	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:05 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:05 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 1c33bfeb-564c-4c61-adb5-80485f54a7d7 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 92c84ea27cf54ce08910e0b976d22f82 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.2.3	49898	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:05 UTC	4357	OUT	GET /paper/ep/onboarding?productType=1&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:06 UTC	4365	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:05 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:05 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 7eeed7b9-7d1c-41e4-bedf-882a320c1e3d X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 09989e66bd5746799ff9628854d9eb45 Connection: close
2023-08-10 21:19:06 UTC	4367	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.2.3	49887	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:05 UTC	4358	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 670 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:05 UTC	4359	OUT	Data Raw: 1f 8b 08 00 d6 d2 d5 64 00 ff ed 98 5f 6b db 3c 14 c6 bf 8a d1 d5 5e 88 8b 63 7b 75 ec bb 91 ae 5d d9 c2 1b 46 ff 5c 84 62 64 e9 c4 d1 6a 4b 46 92 0b 5d e9 77 ef 91 9d a6 1d 6c 23 65 ce 68 47 72 13 7c 24 9f f3 9c e7 17 1f e1 2c ee 48 6e 6f 1b 20 19 81 1b 90 96 8c d6 df 19 59 80 2c af bc 45 43 79 de d0 12 f2 82 1a b8 f2 4a b0 33 2a e4 07 06 ef fe f3 34 d8 56 4b e0 9e 6c ab 0a 6f 6d b4 6a 40 5b 01 86 64 77 44 b6 f5 b9 01 6d fe 97 73 ca 49 16 8e 5c 64 aa a4 04 66 81 3f 5f 0a 46 44 98 69 a5 5a 7e a4 18 c9 ac 6e 61 44 34 50 a3 24 0a 91 ca a7 0c 7c 6a 2d 65 2b e0 58 47 48 63 a9 64 30 55 ad 93 3a 7e 8a 9c 62 36 77 69 a6 ad d6 d8 c7 1c 95 3f 26 14 66 e6 f6 63 86 75 80 51 0b a5 d2 b7 ae 79 59 f6 fa 79 cb ec 59 6f c8 9c 62 33 18 95 f4 46 94 d4 0a 25 4d 6e 04 16 c9 Data Ascii: d_k<^c{u]F\bdjKF]wl#ehGr\|$,Hno Y,ECyJ3*4VKlomj@[dwDmsI\df?_FDiZ~naD4P$\|j-e+XGHcd0U:~b6wi?&fcuQyYyYob3F%Mn
2023-08-10 21:19:06 UTC	4373	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:05 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:05 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: b4ccf1da-bf86-4ba2-9270-67b9c6a4fa6f X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: be48e7b2dee2408e9ad9600b9746b3b6 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.2.3	49892	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:05 UTC	4359	OUT	GET /static/img/ace/emoji/270b-1f3fe.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:06 UTC	4375	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3319 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:33 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:19:07 GMT Cache-Control: max-age=43200 ETag: "da7f263d7e44eb65e76522941ff95b79" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3a4b7ff21260552f6982d2003fec9c84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: B98J0MkFpbKWK59PcNC8gr7ZWiQrKwCgt5F66RQ7cgEAS9VM5sHb-Q==
2023-08-10 21:19:06 UTC	4375	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 84 49 44 41 54 78 9c d5 5b 5d 6c 5c 47 15 fe ce cc bd 7b d7 eb b5 63 3b 4e 93 26 0d 69 4a 49 9c 04 28 6d 51 a1 8d 8b 02 a2 88 82 e0 01 37 40 25 40 02 54 04 12 0f 08 21 51 09 a9 2a 4f 7d 40 f0 40 85 90 ca 03 a0 92 d2 36 0d a5 42 08 09 54 29 52 dd 52 7e 2a a8 aa b4 4e 68 9a bf 36 a6 8e ff 62 af bd 7b 7f e6 1c 1e e6 de f5 ae 7d ef 5d af bd 4e ca 89 ae d7 d9 b9 73 66 ce 37 e7 6f ce 8c 09 1b 48 23 b7 ef bf 99 14 3f 08 c2 87 49 a8 1f c0 29 21 3c 4a 8e fa d9 d1 e3 27 2a 1b 39 f6 6a 89 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[]l\G{c;N&iJI(mQ7@%@T!QO}@@6BT)RR~Nh6b{}]Nsf7oH#?I)!<J'*9j

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.3	49748	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:18:55 UTC	637	OUT	GET /static/fonts/AtlasGrotesk-Medium-190618-Web.woff2 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" Origin: https://www.dropbox.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:18:55 UTC	637	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 85096 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Sat, 22 Jun 2019 00:34:35 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 19:09:22 GMT Cache-Control: max-age=43200 ETag: "95e97662a93cae50b0dab432df119aea" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 099d4ba9ace3ae96fa2a16ccfeeac6ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: ezOUpynV2IOOpFbw8-YuaMs6mYkvUBZj06aZvj-IWkB9hLaIaGrzJQ== Age: 7774
2023-08-10 21:18:55 UTC	638	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 4c 68 00 10 00 00 00 05 2d e4 00 01 4c 07 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 89 a4 2a 1c ce 64 06 60 00 8c 02 08 3c 09 82 73 11 0c 0a 89 83 38 87 d6 7b 0b a8 68 00 01 36 02 24 03 a8 64 04 20 05 90 4c 07 eb 00 0c 84 5a 5b 29 c2 b4 02 ca c9 f0 8f bc 82 24 6a ed da e1 c0 31 98 ce 21 26 f9 54 90 56 8b b2 e5 1b df e1 fd 8e bd 99 6f 22 a7 74 0e f1 40 ab a0 10 dd 9c 67 ce 48 31 ee 16 7d 0a 61 d7 f0 ee 1b cc 96 40 9f 66 ff ff ff ff ff ff ff ff ff ce 64 12 b6 95 cc 76 93 ec d7 a5 14 4a cb af 88 a8 e0 83 77 9e 47 a2 c0 02 88 4c 12 0c b9 a8 63 72 2f 30 b6 b5 ce 8c ba 79 4f 8b c8 32 cb 8b 18 a8 d4 3e c4 92 28 a5 f9 32 95 81 56 69 ec 52 9a 2c a5 f5 26 e7 c5 7c 95 65 21 60 5c 6d c1 b8 33 4b 68 dd 87 Data Ascii: wOF2Lh-L*d`<s8{h6$d LZ[)$j1!&TVo"t@gH1}a@fdvJwGLcr/0yO2>(2ViR,&\|e!`\m3Kh
2023-08-10 21:18:55 UTC	653	IN	Data Raw: 43 a6 77 ea 70 bc 2d 3a 8b f2 e3 ef 6a 91 c4 3b 51 f5 62 70 69 bf 31 37 4a d7 72 5e 5e 70 35 a9 7f 19 b0 13 cd bc e7 55 43 8a 65 32 f4 8d cd e7 c0 7c 85 a1 e9 87 c9 f4 6a 75 94 6b ac b4 4b 28 6b 2d 46 48 10 8b 6f e2 f9 41 a7 2a 7f 26 63 e8 2f 0a 65 20 91 02 00 c9 3c 85 61 78 84 4d 68 db 84 ce 99 76 c6 8c b1 27 1f 02 75 08 d9 f2 40 aa 69 bf b0 e7 60 74 1e 61 1d 8b ec d9 42 05 89 89 23 89 98 8c a8 45 10 6f 65 81 71 51 f9 7c 9c 43 7d 7e 1a d7 1b 5e 5e e1 66 68 bc 3f e6 74 f0 8c 6e 1d ca 70 af d9 38 fc 77 05 ef 29 66 ac d9 99 b6 51 1e 44 ad f6 36 51 a2 8f f2 fb 60 9d b2 9e 69 7b b0 c5 e1 39 73 7b 2c f1 61 66 ad ed 6d 72 f2 68 fb 31 38 73 2a 9b f5 ce 40 aa 76 e9 79 1e 6f ec f8 d6 66 ea 5f 09 bc 42 b9 42 f2 5e ac 52 9b e4 81 30 0d 9a 35 dd 20 f1 71 77 39 2a 2b Data Ascii: Cwp-:j;Qbpi17Jr^^p5UCe2\|jukK(k-FHoA&c/e <axMhv'u@i`taB#EoeqQ\|C}~^^fh?tnp8w)fQD6Q`i{9s{,afmrh18s@vyof_BB^R05 qw9*+
2023-08-10 21:18:55 UTC	669	IN	Data Raw: 96 50 bb cd 61 17 dc f5 ca 67 52 7e c2 68 65 2b 51 af db 84 e5 b7 da ed 8e b8 e8 9e d7 44 5c f9 0b a7 93 a3 54 83 1e 93 56 de 6a 77 38 ea 92 fb de 70 e6 46 21 82 9e 51 99 46 bd a6 ac be f5 ef 74 cc 65 0f bc f5 85 3b a5 c8 11 d8 5f ae 49 9f 69 6b 42 e0 05 c5 c3 b2 ed f4 ae cd 30 96 95 bc 5b 32 38 9d 23 48 da 4d 8f a9 ae 35 5f 7c aa 92 61 08 e4 33 30 7b ce 20 bc 05 82 43 42 c5 a4 39 8e 3d 5d 19 19 30 0a 95 a8 40 d2 a0 55 97 7e 0c cc c3 b9 ff 9b 16 b3 8c 95 92 79 c1 5d fa 1c 21 e1 74 2c a9 b2 64 a5 ac 05 d1 b1 a0 ad 25 96 85 94 20 4b 21 22 b2 56 bd c6 cc 59 cf 87 ad 6c de 82 e2 44 67 f6 25 82 c4 01 5d 77 d7 63 8a 5e 46 f5 a2 81 ae fe 6c 5d 86 40 3e 03 b3 e7 0c c2 5b 20 38 64 44 2d 77 6d ee ce 4e 92 01 a3 50 89 0a 24 0d 5a 75 e9 c7 58 33 bf b9 4d f6 1c ac d8 Data Ascii: PagR~he+QD\TVjw8pF!QFte;_IikB0[28#HM5_\|a30{ CB9=]0@U~y]!t,d% K!"VYlDg%]wc^Fl]@>[ 8dD-wmNP$ZuX3M
2023-08-10 21:18:55 UTC	685	IN	Data Raw: e1 bf 1b fe a6 fc cd 3e 4f 39 78 5b 30 32 00 05 77 43 35 b7 05 07 16 57 d7 f3 1b 95 cd 9e 75 3c a1 ee 02 98 cd a2 50 fe 97 47 ad 64 f3 ad 70 e4 5d e8 b1 12 19 93 31 80 c4 2b b1 93 d2 18 ef d6 13 09 1e 0f 7c 05 8c 64 10 fd eb ea 9a 3b 5a 23 e9 8c 3a f1 3b 1e ec c7 2d d1 df 7b cc 87 dd 76 13 e0 bc b1 1e 71 d5 af 0a 89 a7 e7 b3 33 38 ec ba ff e5 7a 7f c6 3b f2 fc 5f 68 dd 86 73 b5 35 a3 c3 01 e1 a8 4f b6 4d 96 b7 12 ea f7 b3 ea b6 76 d9 36 16 9b 37 37 57 d1 da 96 ae e3 b7 46 35 af ae 81 3b 6a 32 41 41 5d a3 2d 35 1a 87 30 bb 91 6c 80 ab 5d 9a 45 3a 55 6c b7 c7 92 bd cd 1c a4 43 68 c6 d4 90 d5 25 bf 9f e3 6f ad b1 51 aa c8 a9 ed 78 64 bf 41 84 aa fc d1 61 19 51 79 bf c3 36 21 cc 37 da 6b 48 c3 23 be 52 3c b1 8c 1b 5c cd 2e 8f 7f 9b e9 79 13 0f b1 06 7e 14 44 Data Ascii: >O9x[02wC5Wu<PGdp]1+\|d;Z#:;-{vq38z;_hs5OMv677WF5;j2AA]-50l]E:UlCh%oQxdAaQy6!7kH#R<\.y~D
2023-08-10 21:18:55 UTC	701	IN	Data Raw: 34 2c d6 e1 2c c4 23 ff 5b 15 c6 62 43 ca ff ca 88 f3 d8 7b 8c 04 14 02 11 b2 c7 4c a8 d3 eb 49 3a e2 69 cd dd 8e 5d 2e 26 ed 64 5a 3b 18 95 c2 92 d3 9c c8 eb 0e 75 72 3e b1 1e d4 46 28 f2 89 a5 ad 87 f2 6d 0f c4 8a 53 1c 4d eb 40 22 97 2f f9 1d 71 a1 7c 60 50 1b dc ad dd f1 bc d4 68 1e 28 cc db 37 3e c2 35 21 6d f5 74 ea d7 8f 6f cd 8b 24 f7 44 49 2b d1 a2 48 8d 7c 6c e9 c4 a9 f9 ae 93 75 4d 73 c7 a1 29 61 e0 7c 77 6f 84 32 5c a1 9a e9 eb 0b df e8 97 68 18 a8 a5 b9 dd 75 0d 0a 36 16 13 9f bb 0d 13 ba 2e 16 e0 c7 b6 4e be 56 bc 8d 55 74 a6 95 d7 8f 15 13 4b 20 a8 5a dc 92 4c 3c 3c de 3a d1 b6 e8 c1 2d 04 8b f0 e0 a3 fc fa f1 07 15 ca bc 16 49 15 16 5f 04 62 f1 35 43 81 b6 69 60 c8 ee 48 90 a1 94 71 5b 04 3f 50 5d b7 e1 73 27 23 51 23 d9 8e 6e ee 4d 87 65 Data Ascii: 4,,#[bC{LI:i].&dZ;ur>F(mSM@"/q\|`Ph(7>5!mto$DI+H\|luMs)a\|wo2\hu6.NVUtK ZL<<:-I_b5Ci`Hq[?P]s'#Q#nMe
2023-08-10 21:18:55 UTC	717	IN	Data Raw: f2 2b ec 88 09 ef f8 98 61 ce 8f 3b 82 82 4d 0f 09 3c a1 41 10 55 7c 0e 23 85 44 3e 96 49 2b a2 79 2e 3e 67 d9 67 da 28 a2 5b 5f 88 62 94 22 8a 38 ca 51 89 6a 4b b5 09 49 d0 19 5d d1 dd da cf d7 04 00 21 18 41 73 92 58 6d b1 5c ad 37 5b 45 a4 6f 0a 4e 90 14 cd b0 1c 2f 88 92 ac f4 25 f1 33 d3 30 2d db 71 3d 3f 08 a3 38 49 b3 bc 28 ab ba 69 bb 7e 18 01 10 82 11 14 c3 09 92 a2 19 96 e3 85 02 25 fe 35 ad 6a ba 61 5a b6 e3 7a 7e 10 46 71 92 66 79 51 56 75 d3 76 fd 30 4e f3 b2 6e fb 71 5e 95 4a 70 6b 13 c4 05 42 95 38 7a af af d6 32 ba 72 b0 16 27 ff 5c fc fe fe 00 22 4c 28 e3 42 2a 6d ac f3 22 96 b8 23 63 c9 2f fc 7f 2f ff ac 28 c9 8a 9a d3 74 30 90 50 d3 ca 17 8a a5 32 b3 1d 57 eb e4 90 ea 3c 68 84 51 53 bc 5b 06 dd 8e b9 59 6f 3a 9b b3 62 72 4a ae 92 aa d6 Data Ascii: +a;M<AU\|#D>I+y.>gg([_b"8QjKI]!AsXm\7[EoN/%30-q=?8I(i~%5jaZz~FqfyQVuv0Nnq^JpkB8z2r'\"L(B*m"#c//(t0P2W<hQS[Yo:brJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.2.3	49893	18.165.183.80	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:05 UTC	4360	OUT	GET /static/img/ace/emoji/270b-1f3ff.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:06 UTC	4379	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3352 Connection: close Date: Thu, 10 Aug 2023 21:19:07 GMT Last-Modified: Tue, 19 Jul 2022 19:30:34 GMT ETag: "b735b5f2fd640f4e93bbfa17772e4790" Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 6ea1443d3dc39c2be7c23883fb0bd3e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: kN0dhDDANGeQ6hc9yGh7YGwxgsa9M8CuBSzV6kPBHNlc5jZPzRRxzw==
2023-08-10 21:19:06 UTC	4379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c a5 49 44 41 54 78 9c cd 5b 59 6c 24 c7 79 fe fe aa ee 9e 7b 78 cc 88 a4 78 ec 5a 2b ee 2a d6 ea b0 2d 41 8e 93 75 20 0b 96 60 d8 b0 1f 2c 18 91 80 38 40 10 08 c8 43 1e 94 20 40 f4 24 c8 4f 7e 30 92 87 18 81 01 fb 21 87 a0 20 71 60 04 7a 48 0c d8 30 10 c0 36 7c 09 b6 25 81 3a b8 24 97 bb cb 99 5d 72 97 c7 70 ce be ea f7 43 4f cf f4 70 ba 86 33 bc d6 1f 40 ce b0 7b ba aa fe af be ff a8 aa 21 e1 14 b1 38 7b df c7 41 ea 35 22 fa 43 40 4d 10 c4 b2 02 bf 9e b0 c5 3f 2f dd b9 53 3b cd Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<IDATx[Yl$y{xxZ+*-Au `,8@C @$O~0! q`zH06\|%:$]rpCOp3@{!8{A5"C@M?/S;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.2.3	49886	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:05 UTC	4361	OUT	GET /paper/get-link-tracking-token?localPadId=zjo2KktWLcVGFokm1yeoE&trafficSource=paper_address_bar&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-app-time: 1691634844000 notes-pad-id: zjo2KktWLcVGFokm1yeoE notes-tab-id: 1CKSXqh3ruYB6f22RkOu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:06 UTC	4370	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:05 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:06 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 985d6f7d-0d9e-4a4e-84e2-3bd0d56af3f6 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 26833604a820481ea4ab89b2dd859fca Connection: close
2023-08-10 21:19:06 UTC	4371	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.2.3	49899	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:05 UTC	4362	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 291 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:05 UTC	4363	OUT	Data Raw: 1f 8b 08 00 d7 d2 d5 64 00 ff 4d 90 cf 6e f2 30 10 c4 5f 05 f9 8c 2a 12 10 7c cd 35 f4 9f da aa 1c 4a 39 20 14 b9 f6 ca b8 90 5d cb eb 20 51 c4 bb b3 56 f8 da 9e a2 1d cf 6c 7e b3 eb 93 6a d2 31 80 aa 14 1c 00 93 1a 5e bf 95 5a 03 ba cd 60 1d b4 6d 82 76 d0 7c 6a 86 cd c0 50 1b 08 c5 31 f7 76 19 ac 4e 20 91 10 29 40 4c 1e 58 55 27 85 5d bb 64 88 fc 86 0b 6d 55 55 0e b3 52 13 22 98 04 f6 ef d3 68 a8 3c d7 7b ea ec 9c 8c aa 52 ec 40 14 e4 a4 d1 40 4d 5d e6 28 7e 95 27 89 e4 91 eb 2e 46 41 58 08 d6 4f 8a 5f b3 1f c4 d2 0b 46 d0 1c c5 63 6e 86 ae 87 b4 9d 49 ef 7d db 85 16 62 51 51 1f bc d3 c9 13 72 c3 5e 7e d2 30 30 cb d8 97 de d3 95 33 f9 56 62 c5 f4 b6 98 8d 27 b3 c9 f8 66 54 4e 65 a7 b6 19 4a 7d 7f 51 f9 bc 4b ab 17 f3 f1 70 4f bb b6 38 02 dd fd bf 65 76 Data Ascii: dMn0_*\|5J9 ] QVl~j1^Z`mv\|jP1vN )@LXU']dmUUR"h<{R@@M](~'.FAXO_FcnI}bQQr^~003Vb'fTNeJ}QKpO8ev
2023-08-10 21:19:06 UTC	4367	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:05 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:05 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: f59fb728-190c-435a-ba34-4c5f2cfcd204 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: fda818fce21c4a53aefcd3893e7ef8f8 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.2.3	49888	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:05 UTC	4363	OUT	POST /paper/logging/event-log?t=50aS4zgW2W1XP95GWz4lmdjP&role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 366 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/octet-stream x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:05 UTC	4365	OUT	Data Raw: 1f 8b 08 00 d7 d2 d5 64 00 ff bd 52 41 cf 12 31 10 fd 2b a6 e7 85 7c 2c 2b fb b1 57 14 25 92 c8 01 e5 40 48 53 da c9 6e 65 db ae ed 14 c5 2f fc 77 a6 bb 10 bd a9 07 3d 35 7d 7d f3 e6 cd bc ee 5f 18 c7 4b 07 ac 62 70 06 8b 2c bb 9f 15 db 83 ad 0f af b4 11 35 f0 56 d7 0d 1e dd 77 1e a2 94 10 02 d1 3a ef 3a f0 a8 21 b0 ea 85 d9 68 3e 05 f0 e1 a3 dd 08 c5 aa 3c 4b c8 c2 59 0b 12 41 fd fa f4 94 31 1d 16 ad 8b ea 8d 93 ac 42 1f 21 63 df 44 58 b6 31 34 40 84 01 41 6d 60 eb d6 2e 95 3c 17 f3 54 b4 f1 d0 d2 fd 27 c7 c3 d7 08 01 07 da 96 0a 7a f5 fb 38 ab 64 9c 7c 4a 81 50 3b 7f 49 13 da 7a 30 ae a2 c4 ed 40 db 08 9a 82 50 2b ce ba 16 a8 9d 0d 3c 68 2b 81 07 9a 93 ae bc eb 17 d0 1b 49 ea 7d 9b c9 6c 3e 29 a7 45 59 4c c7 af cb 19 69 0a b5 a2 77 f6 e3 8b cb 3f 9c 70 Data Ascii: dRA1+\|,+W%@HSne/w=5}}_Kbp,5Vw::!h><KYA1B!cDX14@Am`.<T'z8d\|JP;Iz0@P+<h+I}l>)EYLiw?p
2023-08-10 21:19:06 UTC	4368	IN	HTTP/1.1 204 No Content Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: text/html;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:05 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:05 GMT Notes-App-Time: 1691634844000 Notes-App-Version: fe9af606aefd018129cf886d5e3f19606dbbddff Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/logging/event-log X-Notes-Routing-Method: router-config-LOGGER-logger-routing-cookie X-Paper-Request-Id: 9ccbeee3-5295-4446-820f-e11e06577909 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Cache-Control: no-cache, no-store Vary: Accept-Encoding X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 1fdc616a81f840049a679ec94457d05c Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.2.3	49920	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:06 UTC	4382	OUT	GET /static/img/ace/emoji/270b.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:06 UTC	4383	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3037 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:35 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:19:05 GMT Cache-Control: max-age=43200 ETag: "c4ce23f7313e8e2319f10e4d8aeb20d1" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 20e88007b6f5218ef5942bc3581c73b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: QL-JvRO-VRMLVgqstUvXTJMYzrJg3h2xc56EHDttFi211vJgrJfTcw== Age: 2
2023-08-10 21:19:06 UTC	4383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0b 6a 49 44 41 54 78 9c cd 9b 5d 88 1c d9 75 c7 7f e7 d6 47 cf 74 8f 46 33 d2 6c 46 d6 46 2b cb 1a ed 7a ad 8f 75 48 08 49 58 87 b5 8d c3 62 9c 97 2c 21 5e 88 0d b6 31 eb 5d ad 16 c7 18 1c 30 18 85 3c f8 c1 24 04 69 45 88 8d 09 ce 22 e3 0f fc 60 30 04 62 96 3c 84 e0 4d ec c5 f6 48 0a 96 64 59 da 95 57 df d2 8c 76 46 fd 51 55 f7 9e 3c 54 f7 4c 57 77 55 75 cf 4c 8f b4 7f e8 a9 9e aa ae 7b ee ff 7f 4f 9d 73 ee bd dd c2 26 e2 fc b1 27 7e 0f e3 8e 8a f0 47 aa 4c 23 72 0e d5 57 22 71 27 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<jIDATx]uGtF3lFF+zuHIXb,!^1]0<$iE"`0b<MHdYWvFQU<TLWwUuL{Os&'~GL#rW"q'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.2.3	49916	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:06 UTC	4386	OUT	GET /static/img/ace/emoji/270b-1f3fb.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:06 UTC	4387	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3275 Connection: close Last-Modified: Tue, 19 Jul 2022 19:30:30 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 10 Aug 2023 21:19:05 GMT Cache-Control: max-age=43200 ETag: "beaa0ed7207b6d54f5bc7a8118f30e9d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7eb9eadda041aaab1056a6a0f8080462.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: v9w590tQ0RA5U6DonU2yEEGXo14NTNeGLyWHSGpG37wPP1rQKIxDxA== Age: 2
2023-08-10 21:19:06 UTC	4387	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 58 49 44 41 54 78 9c cd 5b 5b 6c 1c 57 19 fe fe 73 66 f6 e6 7b ec d4 49 43 9a a6 0d 69 84 21 8d 4b b8 2a 45 6d 21 a8 42 f4 85 8a 90 90 0b 2a 55 81 07 2a 55 08 d1 82 d3 6a 21 81 14 2a 78 68 84 10 45 08 41 e2 14 8a fa 50 09 09 a9 50 fa 80 10 85 96 34 a1 2a a2 2d 4d 9b ab 63 3b 8e ef 3b bb 33 73 fe 9f 87 d9 ab 77 67 76 d7 5e 27 f9 e4 f1 ec 7a e6 5c fe ef fc b7 f3 cf 98 b0 8c 38 f1 f4 a3 83 62 24 4d 44 1f 15 96 1e 52 f4 26 20 47 6c db fa e9 c0 8e f4 dc 72 8e dd 28 68 b9 3a 3e 71 6c Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<XIDATx[[lWsf{ICi!KEm!BUUj!xhEAPP4*-Mc;;3swgv^'z\8b$MDR& Glr(h:>ql

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.2.3	49915	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:06 UTC	4390	OUT	GET /paper/emoji/preferences?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:07 UTC	4399	IN	HTTP/1.1 200 OK Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:07 GMT Expires: Sat, 18 Jun 1983 07:07:07 GMT Last-Modified: Thu, 10 Aug 2023 21:19:07 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Normalized-Path: /paper/emoji/preferences X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 18b7f3c6-b2e1-46ec-b90a-42a1961d0100 X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 85 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: f8c16a403f0548fb93742090b5d622e0 Connection: close
2023-08-10 21:19:07 UTC	4401	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 70 72 65 66 65 72 65 6e 63 65 73 22 3a 7b 22 66 69 74 7a 70 61 74 72 69 63 6b 22 3a 22 62 61 73 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 30 2e 31 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 7d 7d Data Ascii: {"success":true,"preferences":{"fitzpatrick":"base","version":"7.0.1","locale":"en"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.2.3	49918	18.165.183.28	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:06 UTC	4391	OUT	GET /static/img/ace/emoji/270b-1f3fd.png?version=7.0.1 HTTP/1.1 Host: paper.dropboxstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-08-10 21:19:06 UTC	4391	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3254 Connection: close Date: Thu, 10 Aug 2023 21:19:05 GMT Last-Modified: Tue, 19 Jul 2022 19:30:32 GMT ETag: "f8ab974b28712b004af916d2c01d4e86" Cache-Control: max-age=43200 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d75d7156b5e1833582c3070298720664.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ZRH55-P1 X-Amz-Cf-Id: ozSJJnOxJMXDPSLipvRYWmhgTaiBfPnzn4amVQaqh4Xeu5veB6biYg== Age: 2
2023-08-10 21:19:06 UTC	4392	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0c 43 49 44 41 54 78 9c cd 5b 6b 6c 1c d5 15 fe ce b9 33 b3 de f5 da 9b 4d 9c 07 81 10 c2 2b 29 b4 09 b4 15 af 38 51 84 1a 54 5a f1 48 23 54 a8 4a a5 b6 02 f5 47 29 04 a1 96 aa 12 72 7f 51 4a 0b 85 88 22 d1 1f 6d 85 82 50 29 24 11 42 95 68 a9 42 02 81 02 7d a0 02 25 a1 31 c4 26 c4 89 4d 6c c7 f6 3e e6 71 4f 7f ec ec 7a 76 77 66 76 d7 de 4d fa 49 23 db 73 67 ee bd e7 bb e7 79 ef 98 d0 41 dc bd 75 e3 a5 9e 96 01 45 74 85 86 64 19 38 e8 89 3c e9 18 c6 63 bf 7e 66 cf 74 27 c7 6e 16 d4 Data Ascii: PNGIHDR@@iqpHYsodtEXtSoftwarewww.inkscape.org<CIDATx[kl3M+)8QTZH#TJG)rQJ"mP)$BhB}%1&Ml>qOzvwfvMI#sgyAuEtd8<c~ft'n
2023-08-10 21:19:06 UTC	4395	IN	Data Raw: 34 80 2e 00 49 00 05 00 79 00 d3 10 e4 40 18 26 d0 61 90 3e 0c e1 b7 6d c7 da f7 e3 a7 5e 38 2d ff 49 fe 3f 59 02 18 c7 d5 82 19 a5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 4.Iy@&a>m^8-I?YIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.2.3	49901	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:06 UTC	4395	OUT	POST /paper/cloud-docs/get-dbx-folder-data-by-pad-id?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 59 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:06 UTC	4396	OUT	Data Raw: 6c 6f 63 61 6c 50 61 64 49 64 3d 7a 6a 6f 32 4b 6b 74 57 4c 63 56 47 46 6f 6b 6d 31 79 65 6f 45 26 74 3d 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 Data Ascii: localPadId=zjo2KktWLcVGFokm1yeoE&t=50aS4zgW2W1XP95GWz4lmdjP
2023-08-10 21:19:07 UTC	4406	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:07 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:07 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: c462fa15-57f0-43db-abe5-316c166260fc X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 21e62353234348f194dca365563272ab Connection: close
2023-08-10 21:19:07 UTC	4408	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.2.3	49902	162.125.69.18	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-08-10 21:19:06 UTC	4396	OUT	POST /paper/cloud-docs/get-dbx-folder-data-by-pad-id?role=work HTTP/1.1 Host: www.dropbox.com Connection: keep-alive Content-Length: 59 sec-ch-ua: "Not/A)Brand";v="99", "Google Chrome";v="115", "Chromium";v="115" notes-app-version: fe9af606aefd018129cf886d5e3f19606dbbddff notes-tab-id: 1CKSXqh3ruYB6f22RkOu notes-app-time: 1691634844000 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 content-type: application/x-www-form-urlencoded; charset=UTF-8 x-paper-client-capabilities: [1] x-requested-with: XMLHttpRequest x-notes-user-id: g.251c56293a96f7e3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.dropbox.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.dropbox.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ET=b66feefb809d9a6d; gvc=MjUxMDEzNjAyMjc3NTI1MDkwNjk0NDA2NzIwOTYwMjQxNDI0MTI2; t=50aS4zgW2W1XP95GWz4lmdjP; __Host-js_csrf=50aS4zgW2W1XP95GWz4lmdjP; __Host-ss=a8WIpcEMas; locale=en; __Host-logged-out-session=ChCNhywBxDc6LmBLvI3Qf5R6EMOo1aYGGi5BSFczWkxfTE9ZRC1xblJxNFpZZjBKd29kT0l0U0xtZ3U2WTJ4aDFtb2lFVkt3
2023-08-10 21:19:06 UTC	4397	OUT	Data Raw: 6c 6f 63 61 6c 50 61 64 49 64 3d 7a 6a 6f 32 4b 6b 74 57 4c 63 56 47 46 6f 6b 6d 31 79 65 6f 45 26 74 3d 35 30 61 53 34 7a 67 57 32 57 31 58 50 39 35 47 57 7a 34 6c 6d 64 6a 50 Data Ascii: localPadId=zjo2KktWLcVGFokm1yeoE&t=50aS4zgW2W1XP95GWz4lmdjP
2023-08-10 21:19:07 UTC	4458	IN	HTTP/1.1 401 Unauthorized Content-Security-Policy: default-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://; media-src 'self' blob: https://paper.dropboxstatic.com https://www.dropbox.com https://aem.dropbox.com https://rebrand.dropboxstatic.com; connect-src https:// wss://* http://* blob: 'self'; object-src 'self'; img-src https: http: data:; frame-ancestors 'self'; child-src 'self' https://* 'unsafe-inline' 'unsafe-eval' data: dbapi-7://* dropbox-paper: dropbox-install: paperusercontent.com; script-src 'self' https://paper.dropboxstatic.com https://www.dropbox.com/pithos/ https://cfl.dropboxstatic.com/static/pithos/ https://cfl.dropboxstatic.com/static/metaserver/static/pithos/ 'unsafe-inline' 'nonce-1bea2575e8dc42f561fab3ac0a95251b5763b740'; Content-Type: application/json;charset=utf-8 Date: Thu, 10 Aug 2023 21:19:07 GMT Expires: Sat, 5 Feb 1983 07:07:07 GMT Last-Modified: 10 Aug 2023 21:19:07 GMT Pragma: no-cache Referrer-Policy: origin Routed-Canary: false Server: envoy Strict-Transport-Security: max-age=31557600; includeSubdomains; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Notes-Routing-Method: router-config-STATELESS X-Paper-Request-Id: 4679bed9-d434-49c4-adea-3423a898c94e X-Permitted-Cross-Domain-Policies: master-only X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 76 Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: remote X-Dropbox-Request-Id: 26ccde5c4feb4cafba10e6507921d612 Connection: close
2023-08-10 21:19:07 UTC	4459	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 34 30 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 2c 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a 65 64 22 7d Data Ascii: {"code":401,"message":"Unauthorized","success":false,"error":"Unauthorized"}

Target ID:	0
Start time:	23:18:47
Start date:	10/08/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff67bb30000
File size:	3'219'224 bytes
MD5 hash:	8D1C4713ACB7CC2AAAEE4477C58A80BA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	23:18:48
Start date:	10/08/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1964 --field-trial-handle=1916,i,12660512941605008625,15748179457569933284,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff67bb30000
File size:	3'219'224 bytes
MD5 hash:	8D1C4713ACB7CC2AAAEE4477C58A80BA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	23:18:50
Start date:	10/08/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0
Imagebase:	0x7ff67bb30000
File size:	3'219'224 bytes
MD5 hash:	8D1C4713ACB7CC2AAAEE4477C58A80BA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\LICENSE

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\_metadata\verified_contents.json

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\keys.json

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\manifest.fingerprint

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_308623878\manifest.json

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\LICENSE

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\_metadata\verified_contents.json

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\crl-set

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\manifest.fingerprint

C:\Program Files\chrome_PuffinComponentUnpacker_BeginUnzipping1452_341770648\manifest.json

Chrome Cache Entry: 441

Chrome Cache Entry: 442

Chrome Cache Entry: 443

Chrome Cache Entry: 444

Chrome Cache Entry: 445

Chrome Cache Entry: 446

Chrome Cache Entry: 447

Chrome Cache Entry: 448

Chrome Cache Entry: 449

Chrome Cache Entry: 450

Chrome Cache Entry: 451

Chrome Cache Entry: 452

Chrome Cache Entry: 453

Chrome Cache Entry: 454

Chrome Cache Entry: 455

Chrome Cache Entry: 456

Chrome Cache Entry: 457

Windows Analysis Report
https://www.dropbox.com/scl/fi/pqbygvalzp823663oio0q/_-My-Paper-doc.paper?rlkey=4u3tbhy3vz5muipmn8jqw4omg&dl=0