Edit tour

Windows Analysis Report
https://1drv.ms/w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF

Overview

General Information

Sample URL:	https://1drv.ms/w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF
Analysis ID:	1426075
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2032,i,10596633853863410946,5765538601192012558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://1drv.ms/w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=23&ct=1713185775&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fonedrive.live.com%2Fredir%3Fresid%3D5954E8D152D2525D%25211377%26authkey%3D%2521AA4RSUvm3y4GL5A%26page%3DView&lc=1033&id=281053&cbcxt=sky&lw=1&fl=easi2	HTTP Parser: Title: Sign in to your Microsoft account does not match URL

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=23&ct=1713185775&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fonedrive.live.com%2Fredir%3Fresid%3D5954E8D152D2525D%25211377%26authkey%3D%2521AA4RSUvm3y4GL5A%26page%3DView&lc=1033&id=281053&cbcxt=sky&lw=1&fl=easi2	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=23&ct=1713185775&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fonedrive.live.com%2Fredir%3Fresid%3D5954E8D152D2525D%25211377%26authkey%3D%2521AA4RSUvm3y4GL5A%26page%3DView&lc=1033&id=281053&cbcxt=sky&lw=1&fl=easi2	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.microsoft365.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638487826042757074.MDQxZDdmZmEtMmRhYy00M2RiLWExOGYtNjE0ZDlhYmIxNjFjMzRkZTc3MmMtNzU0ZC00NjNhLWEwM2QtMDI4YzEyNjRmYzdj&ui_locales=en-US&mkt=en-US&client-request-id=363b1b3c-c287-4714-ac6e-d714793447c8&state=ahd6l4K3eLmiQ39CTGn9T3yu2FecC0qELBH93p5Br-oEOLFE082wgyMa8C5pCni1lOTDtI2IZvGSGJpGS4LUz3czRi65tYyWaeUxuJPvll__H7aQ32ZmFrKjzzmUmO4I_hOZZsTUbpGm_D-v_Ce7OCFTTkNDO01OMUtqd1nK1-3XV8yMKL6QNd1xSVS_0hXp0kKzYX1szDJJMkdzyroNsAwdX5KByEPpZJswI4gZ6ttA30YbBpLjMmPul-UQnjzC3P355HSOo9vH4x_vec8BMU_nbyJQZaVIoeDnHbmxhG2ojEgZkv2Sy4yirXUrcCSInF9BmgGHOuHA6HGA8EBH_w&x-client-SKU=ID_NET6_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=23&ct=1713185775&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fonedrive.live.com%2Fredir%3Fresid%3D5954E8D152D2525D%25211377%26authkey%3D%2521AA4RSUvm3y4GL5A%26page%3DView&lc=1033&id=281053&cbcxt=sky&lw=1&fl=easi2	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=23&ct=1713185775&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fonedrive.live.com%2Fredir%3Fresid%3D5954E8D152D2525D%25211377%26authkey%3D%2521AA4RSUvm3y4GL5A%26page%3DView&lc=1033&id=281053&cbcxt=sky&lw=1&fl=easi2	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.221.246.93:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.246.93:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.4:49893 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.246.93
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103

Source: global traffic	HTTP traffic detected: GET /w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF HTTP/1.1Host: 1drv.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir?resid=5954E8D152D2525D!1377&authkey=!AA4RSUvm3y4GL5A&ithint=file%2cdocx&e=HWRoDF HTTP/1.1Host: onedrive.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /edit?id=5954E8D152D2525D!1377&resid=5954E8D152D2525D!1377&ithint=file%2cdocx&authkey=!AA4RSUvm3y4GL5A&wdo=2&cid=5954e8d152d2525d HTTP/1.1Host: onedrive.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: E=P:Dw58Z0td3Ig=:GPh6D94JpY96zyLvpq8vYhnEQvTQqW+AqY2MXpU92V8=:F; xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; xidseq=1
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /view.aspx?resid=5954E8D152D2525D%211377&authkey=!AA4RSUvm3y4GL5A HTTP/1.1Host: onedrive.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; E=P:2pXVZ0td3Ig=:RiOaXR6bWPo74l1FbVTWCNJMEg+8iCLQm4ns4czja+I=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/100/manifest.js HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://onedrive.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://onedrive.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cXwXgbe8zTHMstt&MD=p8yDpKxa HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.slim.b110dc4a414c0968d6d0.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://onedrive.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://onedrive.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise/owl/word.boot.b6d914f9c52088f2a597.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onedrive.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&v=00000000-0000-0000-0000-000000000802&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&splashscreen=1&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1Host: word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&v=00000000-0000-0000-0000-000000000802&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&splashscreen=1&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1Host: word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /wv/docdatahandler.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&type=png&o15=1&ui=en-US HTTP/1.1Host: word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"haep: 6X-WacFrontEnd: DM3PEPF00014EA7X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242csec-ch-ua-mobile: ?0X-OfficeVersion: 16.0.17609.41003X-Key: fOrlPPhmf0/WlZFESZRxB33PqQotUFM6xrNn+D1TBxY=;vNxXA4UecP3qHQu2Uvikk48PL7ZoGH+04BSGa8YRTRs=,638487825749138613User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-With: XMLHttpRequestX-UserType: WOPIX-xhr: 1X-WacCluster: PUS1sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1Host: word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&v=00000000-0000-0000-0000-000000000802&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&splashscreen=1&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1Host: word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /wv/docdatahandler.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&type=png&o15=1&ui=en-US HTTP/1.1Host: word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /wv/skydriveuploadhandler.ashx?cpfsi=1 HTTP/1.1Host: word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"haep: 6X-AccessToken: 4wAqNFFDWJJFaunDfDtKpXSGchWXQ_d4NZs2LWPwb9AsMaotT5kfYyd8yiWDw_orbuFgX7rHja3pdVsiOkzd-teDaAFRX6XEbL_a2-I4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5gX-WacFrontEnd: DM3PEPF00014EA7X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242cX-AccessTokenTtl: 1713617766976sec-ch-ua-mobile: ?0X-OfficeVersion: 16.0.17609.41003X-Key: fOrlPPhmf0/WlZFESZRxB33PqQotUFM6xrNn+D1TBxY=;vNxXA4UecP3qHQu2Uvikk48PL7ZoGH+04BSGa8YRTRs=,638487825749138613User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-With: XMLHttpRequestX-UserType: WOPIX-xhr: 1X-WacCluster: PUS1sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1Host: word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /wv/skydriveuploadhandler.ashx?cpfsi=1 HTTP/1.1Host: word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /wv/AppSettingsHandler.ashx?app=Word&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=20240409.7 HTTP/1.1Host: word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://onedrive.live.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://onedrive.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wv/AppSettingsHandler.ashx?app=Word&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=20240409.7 HTTP/1.1Host: word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1713185783595_0.06185014442162462
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_3b4rnVNi70Sso4_c42_ImQ2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_xtPRDEy3EhlAdpju-Ah7qw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pxjdzrjcwtmbr-ntjn_f8q2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4d4b76a02ae121e3b20c.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/login_en_R9cd1P-sU5i6N1WyJUoyQA2.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cXwXgbe8zTHMstt&MD=p8yDpKxa HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/signin_options_4e48046ce74f4b89d450.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/signin_options_4e48046ce74f4b89d450.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000.30171.7/images/favicon.ico HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /16.000.30171.7/images/favicon.ico HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: 1drv.ms

Source: unknown

HTTP traffic detected: POST /suite/RemoteUls.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&officeserverversion=20240409.7 HTTP/1.1Host: common.online.office.comConnection: keep-aliveContent-Length: 620sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://onedrive.live.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://onedrive.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: no-cachePragma: no-cacheContent-Length: 1245Content-Type: text/htmlExpires: -1P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: c945623e-b194-4258-94b4-82530ee969eaX-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242cStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: DM3PEPF00014A72X-OfficeVersion: 16.0.17609.41003X-OfficeCluster: PUS1X-Partitioning-Enabled: trueX-Content-Type-Options: nosniffX-Download-Options: noopenContent-Disposition: attachmentX-OFFICEFD: DM3PEPF00014A72X-WacFrontEnd: DM3PEPF00014A72X-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_controlX-MSEdge-Features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_controlX-MSEdge-Ref: Ref A: 2732C943A10743DBB677A72A60512C45 Ref B: CH1AA2020613037 Ref C: 2024-04-15T12:56:16ZDate: Mon, 15 Apr 2024 12:56:16 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: no-cachePragma: no-cacheContent-Length: 1245Content-Type: text/htmlExpires: -1P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: 69193291-5f96-416a-9bc3-dc24dfbfafc8X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242cStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: DM3PEPF00014A9FX-OfficeVersion: 16.0.17609.41003X-OfficeCluster: PUS1X-Partitioning-Enabled: trueX-Content-Type-Options: nosniffX-Download-Options: noopenContent-Disposition: attachmentX-OFFICEFD: DM3PEPF00014A9FX-WacFrontEnd: DM3PEPF00014A9FX-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetestX-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetestX-MSEdge-Ref: Ref A: F515D77F3324411DA5B63DA9A3DF07D9 Ref B: CH1AA2020616019 Ref C: 2024-04-15T12:56:17ZDate: Mon, 15 Apr 2024 12:56:18 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: no-cachePragma: no-cacheContent-Length: 1245Content-Type: text/htmlExpires: -1P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: 93e4e148-3d7b-4ca4-95f6-ff9463ebbdacX-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242cStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: DM3PEPF00014A9FX-OfficeVersion: 16.0.17609.41003X-OfficeCluster: PUS1X-Partitioning-Enabled: trueX-Content-Type-Options: nosniffX-Download-Options: noopenContent-Disposition: attachmentX-OFFICEFD: DM3PEPF00014A9FX-WacFrontEnd: DM3PEPF00014A9FX-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_controlX-MSEdge-Features: afd_waccluster,afd_visioslice,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_controlX-MSEdge-Ref: Ref A: A02A011B5DD0450BAEF3E34F476E73DC Ref B: CH1AA2020616019 Ref C: 2024-04-15T12:56:19ZDate: Mon, 15 Apr 2024 12:56:19 GMTConnection: close

Source: chromecache_175.1.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_171.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_147.1.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_156.1.dr	String found in binary or memory: http://projects.nikhilk.net
Source: chromecache_175.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_147.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_146.1.dr	String found in binary or memory: https://feross.org
Source: chromecache_146.1.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_147.1.dr, chromecache_171.1.dr, chromecache_153.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_117.1.dr, chromecache_132.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_117.1.dr, chromecache_132.1.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_141.1.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: chromecache_141.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_183.1.dr, chromecache_159.1.dr	String found in binary or memory: https://word-telemetry.officeapps.live.com/wt/RemoteUls.ashx

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.221.246.93:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.246.93:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.4:49893 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@22/149@38/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2032,i,10596633853863410946,5765538601192012558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://1drv.ms/w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2032,i,10596633853863410946,5765538601192012558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_114.1.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_114.1.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://1drv.ms/w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF	2%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://my.microsoftpersonalcontent.com	0%	URL Reputation	safe
https://my.microsoftpersonalcontent.com	0%	URL Reputation	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	0%	URL Reputation	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	URL Reputation	safe
http://projects.nikhilk.net	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_xtPRDEy3EhlAdpju-Ah7qw2.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pxjdzrjcwtmbr-ntjn_f8q2.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4d4b76a02ae121e3b20c.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spov-0006.spov-msedge.net	13.107.137.11	true	false	unknown
wac-0003.wac-msedge.net	52.108.9.12	true	false	unknown
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
sni1gl.wpc.alphacdn.net	152.195.19.97	true	false	unknown
www.google.com	172.217.4.68	true	false	high
part-0023.t-0009.t-msedge.net	13.107.213.51	true	false	unknown
cs1227.wpc.alphacdn.net	192.229.211.199	true	false	unknown
wac-0003.wac-dc-msedge.net	52.108.10.12	true	false	unknown
1drv.ms	13.107.42.12	true	false	high
sni1gl.wpc.sigmacdn.net	152.195.19.97	true	false	unknown
word.office.com	unknown	unknown	false	high
www.microsoft365.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
js.live.net	unknown	unknown	false	unknown
storage.live.com	unknown	unknown	false	high
m365cdn.nel.measure.office.net	unknown	unknown	false	high
wordonline.nel.measure.office.net	unknown	unknown	false	high
common.online.office.com	unknown	unknown	false	high
onedrive.live.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high
acctcdn.msftauth.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://common.online.office.com/suite/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js	false	0%, Virustotal, Browse	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4d4b76a02ae121e3b20c.js	false	0%, Virustotal, Browse	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	false	URL Reputation: safe URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js	false	0%, Virustotal, Browse	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	URL Reputation: safe URL Reputation: safe	unknown
https://onedrive.live.com/edit?id=5954E8D152D2525D!1377&resid=5954E8D152D2525D!1377&ithint=file%2cdocx&authkey=!AA4RSUvm3y4GL5A&wdo=2&cid=5954e8d152d2525d	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_xtPRDEy3EhlAdpju-Ah7qw2.js	false	0%, Virustotal, Browse	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	URL Reputation: safe	unknown
https://common.online.office.com/suite/RemoteUls.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&officeserverversion=20240409.7	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	URL Reputation: safe	unknown
https://onedrive.live.com/redir?resid=5954E8D152D2525D!1377&authkey=!AA4RSUvm3y4GL5A&ithint=file%2cdocx&e=HWRoDF	false		high
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pxjdzrjcwtmbr-ntjn_f8q2.js	false	0%, Virustotal, Browse	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	URL Reputation: safe	unknown
https://1drv.ms/w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF	false		high
https://onedrive.live.com/view.aspx?resid=5954E8D152D2525D%211377&authkey=!AA4RSUvm3y4GL5A	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://my.microsoftpersonalcontent.com	chromecache_141.1.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://knockoutjs.com/	chromecache_147.1.dr	false		high
https://github.com/douglascrockford/JSON-js	chromecache_147.1.dr, chromecache_171.1.dr, chromecache_153.1.dr, chromecache_193.1.dr	false		high
https://login.windows-ppe.net	chromecache_117.1.dr, chromecache_132.1.dr	false		high
http://fb.me/use-check-prop-types	chromecache_175.1.dr	false		high
https://reactjs.org/link/react-polyfills	chromecache_141.1.dr	false		high
https://feross.org	chromecache_146.1.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_175.1.dr	false		high
https://login.microsoftonline.com	chromecache_117.1.dr, chromecache_132.1.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_147.1.dr	false		high
https://feross.org/opensource	chromecache_146.1.dr	false		high
http://projects.nikhilk.net	chromecache_156.1.dr	false	0%, Virustotal, Browse	unknown
http://feross.org	chromecache_171.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
152.195.19.97	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
52.108.9.12	wac-0003.wac-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.108.10.12	wac-0003.wac-dc-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.137.11	dual-spov-0006.spov-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.51	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
52.108.8.12	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.42.12	1drv.ms	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.107.213.51	part-0023.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.217.4.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1426075
Start date and time:	2024-04-15 14:55:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://1drv.ms/w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@22/149@38/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://word.office.com/ Browse: https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=23&ct=1713185775&rver=7.5.2146.0&wp=MBI_SSL&wreply=https:%2F%2Fonedrive.live.com%2Fredir%3Fresid%3D5954E8D152D2525D%25211377%26authkey%3D%2521AA4RSUvm3y4GL5A%26page%3DView&lc=1033&id=281053&cbcxt=sky&lw=1&fl=easi2

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.1.99, 142.250.190.14, 142.251.4.84, 34.104.35.123, 23.45.46.231, 23.45.46.230, 23.45.46.236, 23.45.46.240, 23.45.46.233, 23.45.46.242, 199.232.214.172, 192.229.211.108, 20.3.187.198, 20.42.73.24, 52.108.186.5, 23.48.94.114, 23.48.94.154, 20.52.64.200, 23.45.46.228, 23.45.46.243, 23.45.46.238, 23.45.46.241, 23.45.46.229, 23.45.46.239, 20.241.67.65, 52.113.194.132, 13.95.31.18, 20.135.4.173, 40.126.29.12, 40.126.29.6, 20.190.157.11, 40.126.29.13, 40.126.29.15, 40.126.29.5, 40.126.29.9, 40.126.29.14, 40.126.29.8, 40.126.29.11, 13.107.6.156, 40.126.28.21, 40.126.28.12, 40.126.28.23, 40.126.28.11, 40.126.7.32, 40.126.28.19, 40.126.28.14, 40.126.28.18, 40.126.7.35, 40.126.28.22, 40.126.29.10, 142.250.191.170, 142.250.191.106, 172.217.0.170, 142.250.191.202, 142.251.32.10, 142.250.191.138, 142.250.191.234, 172.217.4.42, 142.250.190.3, 104.102.249.49, 104.102.249.11, 184.25.119.188, 184.25.119.184, 184.25.119.149, 184.25.119.181, 184.25.119.178
Excluded domains from analysis (whitelisted): odwebp.trafficmanager.net, lgincdnmsftuswe2.azureedge.net, slscr.update.microsoft.com, onedscolprdeus03.eastus.cloudapp.azure.com, clientservices.googleapis.com, res-1.cdn.office.net, browser.events.data.trafficmanager.net, ak.privatelink.msidentity.com, clients2.google.com, ocsp.digicert.com, login.live.com, update.googleapis.com, word-view.officeapps.live.com, acctcdnvzeuno.azureedge.net, acctcdnvzeuno.ec.azureedge.net, pgtus3-word-telemetry-vip.officeapps.live.com, ecs.office.com, fs.microsoft.com, acctcdnmsftuswe2.azureedge.net, wise.public.cdn.office.net, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, lgincdnvzeuno.ec.azureedge.net, aadcdn.msauth.net, cdn-office.ec.azureedge.net, s-0005-office.config.skype.com, edgedl.me.gvt1.com, res-prod.trafficmanager.net, nel.measure.office.net.edgesuite.net, s-0005.s-msedge.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, res-1.cdn.office.net-c.edgekey.net,
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65466)
Category:	downloaded
Size (bytes):	1914883
Entropy (8bit):	5.538632144408367
Encrypted:	false
SSDEEP:	49152:e9kxy738XwjWF70LB9OYA1HsWbJTLet1IN+49n9XIuuN:sWLa
MD5:	2A9EA4EF1EE56FDFE31A192C87AA456E
SHA1:	BA3AF8136718B2E19FDC7B477FF63BB6D5D246E8
SHA-256:	5E1DAB216D185EB760D75762064FA03286D51F7870B5C30D1348DF631F765D9C
SHA-512:	2CC47CCAB93B70FFE18FA0B9BC6FA214D58EE563D5479DABB2403B42D047B6D5E6AEFB8317456DA8249B73AC9433D4FCCEF67CD36860AAFE8E5EE21F95439D4D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h5E1DAB216D185EB7_App_Scripts/wp5/common50.min.js
Preview:	/! For license information please see common50.min.js.LICENSE.txt /.(self.wordOnlineChunks=self.wordOnlineChunks\|\|[]).push([[54503],{70669:function(e,t,n){var r={"./af-ZA/UiStrings.json":[76745,8129],"./am-ET/UiStrings.json":[98467,67769],"./ar-SA/UiStrings.json":[60899,29459],"./as-IN/UiStrings.json":[69687,37780],"./az-Latn-AZ/UiStrings.json":[5998,64109],"./bg-BG/UiStrings.json":[95842,44137],"./bn-IN/UiStrings.json":[37203,23952],"./bs-Latn-BA/UiStrings.json":[19642,91823],"./ca-ES/UiStrings.json":[58054,73817],"./ca-Es-VALENCIA/UiStrings.json":[73809,28935],"./cs-CZ/UiStrings.json":[96269,33323],"./cy-GB/UiStrings.json":[39681,55207],"./da-DK/UiStrings.json":[74613,33554],"./de-DE/UiStrings.json":[89011,58114],"./el-GR/UiStrings.json":[26025,56710],"./en-GB/UiStrings.json":[84569,52444],"./en-US/UiStrings.json":[37684],"./es-ES/UiStrings.json":[64178,64885],"./es-MX/UiStrings.json":[4865,6937],"./et-EE/UiStrings.json":[22942,283],"./eu-ES/UiStrings.json":[17359,21600],"./fa-IR/U

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1505
Entropy (8bit):	5.315674199324367
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqxXPOa7JZRGNeHX+AYcvP2wk1APSdgpsTTqGvHLiXFVjguk5:lmIAq1UqNOiJZ+eHX+AdP22yllivjguU
MD5:	59372A1A3FB09A27594093F0BF524613
SHA1:	DD44CDA08F082DAC06E0D0FBFA662830B9989926
SHA-256:	4D16C45DF3C3EDB6B0A3E8937DADB5AE95BF8737A728EEDB397E0C964F16B396
SHA-512:	2BC00587DD316A697D87B68937A8A34D330E11568DD7A531980C901978FD2EC3C2A6A513856171A7D10C32922EDE46EEC1E5E17459D046091D413A7947E957AE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>412 - Precondition set by the client failed when evaluated on the Web server.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1>

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (359)
Category:	downloaded
Size (bytes):	891
Entropy (8bit):	5.004867544386675
Encrypted:	false
SSDEEP:	12:+yrNYyZevX0Bg+lBg0zRrmNJiN0vm5XqcBgcrwkQfFBTxKzLEkQfFMxvTdO+kQf4:FBYKeMBg+lBgIUJQXpBgc0hF4TdO2/sX
MD5:	482E55E59DC6AD1E843DC741534DDAEF
SHA1:	A9275283F5AF71302184C350D37FA882E33B0E93
SHA-256:	6B53AF28D50D2BF082C23E8BD2A1428DAC2AAF540012D79C595118EFCED27FF6
SHA-512:	836B0BE6811C0B43B4877C6503599B529A1BC5EF6585D03CF22DBD651E4DB254313F7CB77B93414A14BBF871E0D59EA58A6A99ADC1032F19543FF15EA5570E38
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-03-29.005/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["initial.resx"],{220:function(e){e.exports=JSON.parse('{"a":"My files"}')}.,214:function(e){e.exports=JSON.parse('{"m":"Open in Word","h":"Open in Project","b":"Open in Excel","g":"Open in PowerPoint","e":"Open in OneNote","k":"Open in Visio","i":"Open in Publisher","c":"Open in InfoPath","l":"Open in Word Online","f":"Open in PowerPoint Online","a":"Open in Excel Online","d":"Open in OneNote Online","j":"Open in Visio Online"}')}.,235:function(e){e.exports=JSON.parse('{"c":"Still here?","a":"For your security, Personal Vault will automatically lock in 1 minute.","b":"Keep unlocked","f":"Personal Vault didn\\u0027t lock","d":"There was a problem locking your Personal Vault. If this happens again, you can sign out of OneDrive to lock your Personal Vault","e":"Retry"}')}.}]),define("initial.resx",[],{});

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/16.000.30171.7/images/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5825)
Category:	downloaded
Size (bytes):	5826
Entropy (8bit):	5.919904693730025
Encrypted:	false
SSDEEP:	96:Kroy4/gFRrfZ1Zq/IO9a0z6ARCBjCeBEfgp5AanDiBqV146tHfV14XtfuzvFkKFw:0+uRzTYwO/2XJNCg7AaDiYV1RV1FdC9j
MD5:	FE3DDA4E9949A0A0CACE37135554238B
SHA1:	02F72CC05393C66B7FA0CFB3F723AB078D446290
SHA-256:	A6D1E6EC2A4E3A1F13E876701C3B7C54E1125503BA8BB3E03DA0F3EB68E777CB
SHA-512:	6C5754646EC3469CF7CFCEB7DAF133E8B486726F890841323E4A11C278F77A3BE6471E822957127B886E67AB1CF1F489A2F0AD3E947326E141EF18CAC213F161
Malicious:	false
Reputation:	low
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/100/manifest.js
Preview:	(()=>{var f={clientVersion:"20240409.7",files:{"owl.js":["owl.04519b1162e1e138a1ac.js","sha384-oRbEtkEmf6KQLBMt6jFA9Dx0o9V9fscFi5Tzz7t7uYe6XD4lmmhfKXhlsPxnhpWm"],"owl.slim.js":["owl.slim.b110dc4a414c0968d6d0.js","sha384-kcp1D7KOarRakIpywMi8xxlSX/Gz6ht+cTI+fEht+JyoYVQ1K4N+Ntk3Q2R8Pak4"],"owlnest.js":["owlnest.8c724c00281567e9b60f.js","sha384-rD1EJW66KGjPx3ftnRaJQh6iKNBIGufaParAGeomqylLWccgPOi8LPEQChv6kFVH"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.26cb9578168752513719.js","sha384-g4jspff7/I6XV4ejC38i+Rdp13z2WtgsOAII1MsmKiSi3g9uIFOd3wPzSCe0QfR6"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.0f49da612393c23883de.js","sha384-N0EwvLi949K1YNjrmTrfPBL4iqTzBXPSMPK0lLeHBSp7+QDorGirybt5tgyoCRXR"],"sharedauthclientmsal.js":["sharedauthclientmsal.14b25ce1ae5d4f9b7569.js","sha384-glt5Kelx7TXL5357zo2QYJ0ypq274cgCeBG5C5dbxGndB5UgjLIscstVmNIAUa0L"],"s

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	347
Entropy (8bit):	5.4091356644523465
Encrypted:	false
SSDEEP:	6:Yq0qjbQr6pjLpsSFHWD7XvZPP7BA02Jh5FL84sxp8zrpHqYw8Ve0pcVlhIvY:Yq0+0mtiSFH4137BA0ch5SbxparpHuSa
MD5:	DB1E1D40588E9837DA20DB8071206655
SHA1:	9CD3A9F4FFD827FB71129311AB3109DC728988BD
SHA-256:	F512AA156E25B2F9118E107BB1B7C87732250AA511AB79E8F1631861734CEDAC
SHA-512:	535EE1868A2385ACD53E601F0B4E3E3F9444AB69CE0D9BEF9A28BD222F9F8C0A05817F799CF536CCCF7CEC91E1E8467D541B91CC79F232B1CE593D1D788F2E66
Malicious:	false
Reputation:	low
Preview:	{"OneShell":{"UpdatedConsumerAppList":true,"M365StartEnabled":true,"DisableM365StartIntentsModule":false,"default":true},"Headers":{"ETag":"\"8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0=\"","Expires":"Mon, 15 Apr 2024 13:56:27 GMT","CountryCode":"US","StatusCode":"200"},"ConfigIDs":{"OneShell":"P-R-1157040-4-8,P-R-1131228-4-17,P-D-1117449-1-4"}}

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56400)
Category:	downloaded
Size (bytes):	197359
Entropy (8bit):	5.094035514552856
Encrypted:	false
SSDEEP:	6144:Vz5uezWHXz2toK5fMOKkvBoKrpQmK4Zbwmk29X9vvNCYzRtz:Oe1oK5fMOKkvBoKrpQmK4Zbwmk29X9vz
MD5:	A6A51D1DB0614A039EE2E52F75CCCFA9
SHA1:	AD27C04528AA3AFC6704B1BA03ABBC92D0B91EBC
SHA-256:	EE2A24D0B979B6F0DF96D2C89A5AE1578D0FCB7CEF1F56BF4760F47E98F449E1
SHA-512:	49953180EE20B25F503EE827CF852E0E3E1123F5F9F02135493BCE7EDC208B2693F783A5C45382764E6B56E02C909343ACBAE6586195DA34F70CFB56DC36AF73
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/hEE2A24D0B979B6F0_App_Scripts/1033/common-intl.min.js
Preview:	var CommonStringsEnum,CommonStringsArray,CommonStrings={qpsPloc_Name:"Pseudo",qpsPloca_Name:"Pseudo (Pseudo Asia)",qpsPlocm_Name:"Pseudo (Pseudo Mirrored)",afrikaans:"Afrikaans",albanian:"Albanian",alsatian:"Alsatian",amharic:"Amharic",arabic:"Arabic",arabic_Algeria:"Arabic (Algeria)",arabic_Bahrain:"Arabic (Bahrain)",arabic_Egypt:"Arabic (Egypt)",arabic_Iraq:"Arabic (Iraq)",arabic_Jordan:"Arabic (Jordan)",arabic_Kuwait:"Arabic (Kuwait)",arabic_Lebanon:"Arabic (Lebanon)",arabic_Libya:"Arabic (Libya)",arabic_Morocco:"Arabic (Morocco)",arabic_Oman:"Arabic (Oman)",arabic_Qatar:"Arabic (Qatar)",arabic_Saudi_Arabia:"Arabic (Saudi Arabia)",arabic_Syria:"Arabic (Syria)",arabic_Tunisia:"Arabic (Tunisia)",arabic_UAE:"Arabic (U.A.E.)",arabic_Yemen:"Arabic (Yemen)",armenian:"Armenian",assamese:"Assamese",azerbaijani:"Azerbaijani",azerbaijani_Cyrillic:"Azerbaijani (Cyrillic)",azerbaijani_Latin:"Azerbaijani (Latin)",bangla_Bangladesh:"Bangla (Bangladesh)",bangla_India:"Bangla (India)",bashkir:"Bash

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	274166
Entropy (8bit):	5.208524971711723
Encrypted:	false
SSDEEP:	6144:cw3Ba0fzERgBkgA5uqyuQD6EPxm6aI0R6ZuE++q3QR97uKEQ2:cw3Ba0fzegBkl5uqyuQD6ZI0RzE++q35
MD5:	12C3677104D5E68BCDB42215877F29A7
SHA1:	23FC8ACDFF394E916FACE9E969DDA8594BB7E7FA
SHA-256:	2E092244DA992FE0453907F2A33492A987E244B6EE95B56AD3E1C9CE64241DB3
SHA-512:	7686163C07BB8703D9E52E885457749DAA775F389058D90F35D1931433679166241268D1014E0A29A6780AAA4D51345921A2FBCCE1398506D41E813DC8B33868
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h2E092244DA992FE0_resources/1033/WordViewer.css
Preview:	.headBrand {. cursor: default;. line-height: 48px;. font-size: 22px;. margin-left: 20px;. margin-right: 20px;. font-family: 'SegoeUI-SemiLight-final', 'Segoe UI SemiLight', 'Segoe UI WPC Semilight', 'Segoe UI', Segoe, Tahoma, Helvetica, Arial, sans-serif;.}..cui-topBar1-transistionalHeaderUI .headBrand {. width: auto !important;. height: 24px !important;. line-height: normal !important;. padding-bottom: 12px;. padding-top: 12px;. display: inline-block;. font-size: 17px;. font-family: inherit;. margin-left: 17px;. margin-right: 17px;. font-family: 'Segoe UI', 'Segoe UI Web', Arial, Verdana, sans-serif;.}..cui-topBar1-transitionalReactHeaderUI .headBrand {. width: auto !important;. line-height: 48px !important;. padding: 0 6px;. display: inline-block;. font-size: 16px;. font-weight: 600;. font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;.}.@font-face {. font-family: "Segoe

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141320
Category:	downloaded
Size (bytes):	49617
Entropy (8bit):	7.995534454154058
Encrypted:	true
SSDEEP:	1536:IohTdtbswK1RfDDUDXsbGSKtnbiR+fU6I/dUG:PywkRLDwXSG2R+PI/qG
MD5:	97A274B38A866C3FEFFF29003D3511D1
SHA1:	0752DA49A4F7E374C76D0573AFD9CD1A074FBF00
SHA-256:	6B1FF2587733BD9F44BC787C319AF8C23D01C14ED633DC8CB6F5DF55B5178E9B
SHA-512:	62C400A3013A96A9B1AB5FEB2ADFF64CD3FA219C407B10F028AB04A96863F925D8D8D9AAF937ACDAF9091AC1B1DC262AAB92C2DD483C3B8715C71F3F1EC6D401
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_3b4rnVNi70Sso4_c42_ImQ2.js
Preview:	...........m[.8.0........'&..hp.'.t73@...g.X.'V......4.9...d.C..}....K...,..JU.......T~.l..?...w>..?T.....g..g.?<.?..z.....+...w....A%.~0..Y....+.....2...Jr'.(.".I\..q..Fb.>V.P].U..(y....u._@m...@.q8{.....?..7.)......OD..;.\|W9..Q..........#....n$.H.0J.....!e.1}....84......u.~..~.M...X&..Ou..ie..\|.IXy...Y....x...;..U.M....f,..l.tZ..<...bl{E\|..@<}..Fn.(W...so#!.E.X.<AEGO..~....Y..'.l&.8.T.....".J.K......Rm5.;...F..$.......G.qx.....C.._.s../.......3....\|.-.......o...?.a.La...W...7.?.O.....6..clXU....T.x.....".w.......;.k.\^w.~}.....jf......!..a..0y........@.L.1..0.......2.^_..g..../.........$@.....]+...2.v\.1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F... [..y....K5qzQ.>i.1.......0..P...@...L.".n.x..!.0..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.T...n "..km..3..T..]......paJV.(J...g....!.\|.].......;.zN...%}....DZ..i.....j .a".i=O.R Q2..."....

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 894764
Category:	downloaded
Size (bytes):	226968
Entropy (8bit):	7.998441094198768
Encrypted:	true
SSDEEP:	6144:LW7rBmCOBE9qTjsAvhyOlqgvGusVOwG6TnfYIGK:LarpV9ijsKYOltv16OVZbK
MD5:	BC13E0C76B18F21D53012B2C675F19F5
SHA1:	61EE6CBA5A557144A5F93AF887BCA440B46B4237
SHA-256:	5C41DBB0C1A68FA71699983C44C4C29E09EF68ED8103D6FF67D4B93145E18CDB
SHA-512:	FE2DBB2041019F584D235BBC8E59BE80C156A5F4F5B9D861A98B11AF52BCD27CC7D28ED01BDD588503BD488F9C451057F46D75CEBAA239085D5C56659B50420F
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/js/login_en_R9cd1P-sU5i6N1WyJUoyQA2.js
Preview:	............w.8. ...+l.....V$;+..&..Ig.,.N.....l1.H...8...W.V.r....orN,...B..T.....c}. /..Hf.\K...%U.gk.L ..rm........g.....w.o.......O.......yR.IQ.L."........{z.^u.XiU...3./.8...<...7.I:...Y%.U./..{bd.k..z,O..zS.s~N..4.\|......j%(.H...].T..g.E..+..f.4..........i\|..V.2;.&.h.W..d:..IQ^R.-f2.J~H.K.,..n....S..l...':...4.Z..`......Y-.l...K9.!k.D.C....]_...a....H..[yz.CU.l..........<....Q....U].%.$V"..R,t>...L.c.....\|w9;..8m..'.Q....s...=J.O..7C7.].m..U....(=.JO...tv.Y..5k.e....y...\|c#_....4.O..6...v...$q....%U0..0..t...4...3..B1.{....D6..pC'qr89.@..Azx..Wll...ml.(1..B"./... .'...F.......h...WK....Z.E...7.k...&s.+.;:..k.. mltJJ._t.J.....fT%.2jy)....ID/@..A.q...u..c>.E.A.--y...U...,i..>..B&@Wrq.w..^...u....[2U...z.V.H....<o+.#t<..R.\| ..V..4.5.....b..X..=...VL..2X.ZK%.e6r...a...n.(`....v..u\.SUr..v+z...7@Ul.&.M..i......Vv....8i-2M._."..ek..i>..Z...n..q.4...._\..,d9.33j...]{?G.V.2..~...W...G ..'..F..Na.I^S... .."..V..r.y.2$.."*....).$.S....

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	101803
Entropy (8bit):	5.333052740426743
Encrypted:	false
SSDEEP:	1536:uRJ1IIdEgIamTvRJSRk9UUezt4C34zcsSClhev:uRRYamTvRJsUezt4w4ztlhev
MD5:	2F1D74149F052D3354358E9856375219
SHA1:	8019F7A2EA824930F91C3EC375D926B650FB1CFF
SHA-256:	66C70312DE6CA4E1D7EF1E858307764C241A80E7411CEE686EA2FC2D74152749
SHA-512:	2B1C4E057DBF59E89C3AA9C5DAB1FE8F512ED400088B13592E493B3D48AA334544A7999CA2DDEFA34C23D2F96A2F98B93DD0AAC80C3CF7C37D85B49C5A85A6E6
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h66C70312DE6CA4E1_App_Scripts/otel.worker.min.js
Preview:	var otelWorker=function(e){var n={};function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(r,i,function(n){return e[n]}.bind(null,i));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=7)}([function(e,n,t){"use strict";t.d(n,"h",(function(){return r})),t.d(

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65462)
Category:	downloaded
Size (bytes):	1703849
Entropy (8bit):	5.474716212141318
Encrypted:	false
SSDEEP:	12288:2gi9Z2NWI2MFeEKA8R83yLTSue5905Y9NjpA27hH1EHjKqOQPrrlfC+P:xijeFiR81x027hH1EHlOQPrrl3
MD5:	84D8745FD90E3EE46F34F16EFD52CE10
SHA1:	A7A0DFA6BF763ABA3B1AB41CB415DEF815B5047A
SHA-256:	5AF8C94A60C02C8121732D46DE2E4B7E653A40E86D9F9C61AF2A1B4FE0AB0514
SHA-512:	83C26ACB2BA8EF781EE3EFF3AAC04016EBBD55874C5E6C8918B0054F89B1D7A5ECB499B227F2FA980AE0BDE3DAD36186EBB5CD5DAFF84A0DE0E718E2ACD3BA06
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h5AF8C94A60C02C81_App_Scripts/wp5/uiSlice20.min.js
Preview:	/! For license information please see uiSlice20.min.js.LICENSE.txt /.(self.wordOnlineChunks=self.wordOnlineChunks\|\|[]).push([[80732],{38136:function(e,t,n){var o=n(70090),r=n(83738);"string"==typeof o&&(o=[[e.id,o]]);for(var i=0;i<o.length;i++)r.loadStyles(o[i][1],!1);o.locals&&(e.exports=o.locals)},70090:function(e,t,n){var o=n(93556),r=n(78267)(o);r.push([e.id,'/* Copyright 2014 Mozilla Foundation\n \n Licensed under the Apache License, Version 2.0 (the "License");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n \n http://www.apache.org/licenses/LICENSE-2.0\n \n Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an "AS IS" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n.annotationLayer

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	30746
Entropy (8bit):	5.174905786210689
Encrypted:	false
SSDEEP:	384:/iL+oQA/1DynNjr67VY/6NY/gHWOf49498vxVxjq:/iL+orVynNaBYbyv9uxzq
MD5:	5A78A202280EA3F090F96D1D18C2FD8A
SHA1:	3FA062D1D16FD1E618596EAE11DC1C09DF4DF2E2
SHA-256:	64DB03A5BAB93200DF23F652F90AE440563D6C0FA1B724ADE0DB9766786D7A48
SHA-512:	6B3CE7ED8715C7251737B0C62CE21DE877B081A40E4C43B4DDC1F2DD40243894FAB950E7042E1BB82772BCDF304EFE26A26C0DC8CF4AF6DD1DD926D2BAB61094
Malicious:	false
Reputation:	low
Preview:	{"Architecture":1,"Audience":0,"Resources":{"Version":"1.20240413.3.0","CatalogXml":"<ResourceCatalog>\r\n <Resources>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.js</LTRPath>\r\n </Resource>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d.b8d635a632aa976770cd.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-we

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35371)
Category:	downloaded
Size (bytes):	35429
Entropy (8bit):	5.296457486761157
Encrypted:	false
SSDEEP:	768:TVsEfzcHhW2kU+O9NEuTy5F9Iz07Y0Qtev+a0HPgg:TDnL0r
MD5:	BE73523C970F0BFA1C8F0A8C51F80BFC
SHA1:	B3BC3FD464E0A5766F27F84CA8D0C30993A26275
SHA-256:	494AE42932343D70F747F5937271E4BC7B020D53A1A2973876B15AF26DB7B1DC
SHA-512:	2069733C8CF8963223B4AA7945F9C21E6025113D8F7972605D92C4D67F0B3C909FE78DC75E0207E4DFBC9022E404B8363BF7C495C44FA4487F98B87FB3105E22
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js
Preview:	!function(e){var t={};function i(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,i),o.l=!0,o.exports}i.m=e,i.c=t,i.d=function(e,t,r){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(i.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)i.d(r,o,function(t){return e[t]}.bind(null,o));return r},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=0)}([function(e,t,i){"use strict";i.r(t);var r=function(){return(r=Object.assign\|\|function(e)

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (396), with no line terminators
Category:	downloaded
Size (bytes):	399
Entropy (8bit):	5.113534455083485
Encrypted:	false
SSDEEP:	12:MMHdpmwNmCt/M8ok4FCFHzPLG2bXPEHNBUPjV:JdnR/nok4KEu
MD5:	9A0C2141E570C54409BD779D228102F3
SHA1:	6F35C6B8E7BB1C21573D53DE8A1BAB5D308ADC80
SHA-256:	43B0580F3FCDC39BDB6CF0456D6C21CD10FA44FF457F2B209FC341072AA44E21
SHA-512:	CFCB13BDA0682F5BBD12C78DC3F8B8F72612CB470B4B570BA1B332C86CD7762229D15D2BD9645F40A2A6236BF5A7DF0AAE9CE103A50EF30A77E0D42DE9BF3D89
Malicious:	false
Reputation:	low
URL:	https://word-view.officeapps.live.com/wv/docdatahandler.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&type=png&o15=1&ui=en-US
Preview:	.<?xml version="1.0" encoding="utf-8"?><docdata><status>CantFindSourceDocument</status><dialog><title>{webappfull}</title><description>Sorry, {webappshort} ran into a problem opening this {doctype} in a browser. To view this {doctype} please open it in the desktop version of {richclientfull}.</description><errorId>be374265-5d14-464d-beac-f7869be41675, 20240415055618</errorId></dialog></docdata>

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11364), with no line terminators
Category:	downloaded
Size (bytes):	11364
Entropy (8bit):	5.439199400331917
Encrypted:	false
SSDEEP:	192:MFiBre+1RPmTJ87GAmP3juCfBpnhcpxqK95hJdCZhbhobcm/+fhpl02pML1DaLCX:eiBre+1Zy+7Ih2xqGJdCZhlo4mWfDlRA
MD5:	2C2C801465DBAAF14138902D66429585
SHA1:	7C774DD4F3E56898AD89222570943618960DE856
SHA-256:	0F22F9965801B0F5B9D88BC79A90887CC49C19D2D8664C5FEE8D6AF3482A1E0A
SHA-512:	40A9C8575DA4EBBF7754E3130F880D39B1F655BEE8CA6F238CF2872055A2B961EEB669FDAB76729693DECD22E1F6785E2AF55082230485A1815E21F2D6C9CD5C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/161760941003_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_consappdata_start"),(self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]=self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]\|\|[]).push([["consappdata"],{9227:function(e,o,t){t.r(o),t.d(o,{loadConsumerAppData:function(){return _}});var l=t(6968);const n="auth=1";function s(e,o,t,l,s,r){const i=encodeURIComponent(o),a=s?encodeURIComponent(s):"",h=s?"login_hint="+a:void 0,m="https://www.microsoft365.com",u="https://outlook.com";let p=h?u+"?"+h:u;const f="https://outlook.live.com/calendar/";let d=h?f+"?"+h:f;const S="https://onedrive.live.com";let g=h?S+"?"+h:S;const w=m+"/launch/word?"+["username="+i,n].join("&");let C=h?w+"&"+h:w;const _=m+"/launch/excel?"+["username="+i,n].join("&");let O=h?_+"&"+h:_;const P=m+"/launch/powerpoint?"+["username="+i,n].join("&");let y=h?P+"&"+h:P;let E="https:/

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	4.017181282010039
Encrypted:	false
SSDEEP:	96:ARRRRRRRRRRRRqRRRRRRRRRRRRRRDRRRRRRRRRRRRRRRRRRRRRRRRRRRRDRRRRR8:NUEG3333gvruTTTxkSSQ
MD5:	760F69985C44556F90D31CDB278286BE
SHA1:	98632D39E3CA24FDD974AC98BF187963A065CE8A
SHA-256:	4FBD8CC4075E1795215327AF5E43E8CA3339677802700D19AEFC57BA1713A12D
SHA-512:	8A36D389ED4D868ECB3CE6AC282FCCF8C3FA4D969D1475B350ADE63BD56D33B8004BF0B89B2D9CD4831D3B1F11DC6CE1F4F3F526F5D99B235D458BB4BD910759
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h4FBD8CC4075E1795_resources/1033/FavIcon_Word.ico
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................?..?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...................................?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...................................?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?..................................t2..t2..t2..t2..t2..t2..t2..t2..y4...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?..................................h...h...h...h...h...h...h...h...h....:...?...?...?...?...?...?...?...?...?...?...?...?...?...?............

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16264)
Category:	downloaded
Size (bytes):	941883
Entropy (8bit):	5.352674576515038
Encrypted:	false
SSDEEP:	12288:BDeutXg9zn8xpGFHG5qIdEs8qUMCaJNq6VWoWP:lwJYpGFHG5qIdX8qUMNNq6VnWP
MD5:	A61EA4B7E8B1372317302BDE3E94204E
SHA1:	B2A5F2D2FB3D2C5B3FFBB1B05EA97033D6D79F6A
SHA-256:	4E4508ECC9C891DAC87C4D6A1AAC4DB4E3E9FC8A110E89D7483290609E214CB1
SHA-512:	F1026FEA2E6ABC190A5929F7053FD2989D5F2F1E9D57FD756A990D66A375BC1AE5686A3BD72445DD61390A2A169DE9931C4E772E3CCD2069DF327DC99DAA649B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-03-29.005/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
Preview:	/! For license information please see wacodcowlhostwebpack.js.LICENSE.txt /.var __webpack_result__;!function(){var e=[function(e,t,n){"use strict";n.d(t,{a:function(){return r},b:function(){return c},c:function(){return s},d:function(){return i},e:function(){return d},f:function(){return o},g:function(){return l}});var a=function(e,t){return a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},a(e,t)};function i(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}a(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var r=function(){return r=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},r.apply(this,arguments)};function o(e,t){v

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 292, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35196
Entropy (8bit):	7.969075478403727
Encrypted:	false
SSDEEP:	768:MpF1zZWLaZh+iQS8AzP/hcBO8OeUkpp/2Z285hLg9wioY2T2Dwia/yHI:MpFLzZ5QFKhccteUkpR20AhLg9BY2DpI
MD5:	3096E4177EE360B47697F35F60976EFA
SHA1:	0E056034BDFB2E0870D766E2CE26BF3E37798A1E
SHA-256:	4C76F832E1B589C931CED2C770F35CE4CD595CA941C18C5893B23F27EF587EC4
SHA-512:	391437C11C60099221BEBCAED87C50484852678DAEBDDD2CB830F48157D1A08443834865C2AC685CD63514209418B75B65E17FC2318F1D104A07AD39F32091BE
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/161760941003_resources/1033/wv.png
Preview:	.PNG........IHDR.......$......6.Z...CIDATx^..x.U....W....XV.EY...(6.(%D..R....5.:R..PB..@...N...B.IHHBh......o....5...<.3sO.w...\|.9G.........z3u...zW..^w]...Z....U..P.....K..[#==..'\.X1_...k.I..(...l.A.s..%............b....0.].{.r...";7..pi...Y9..hC.....c.n...>c..c0Vn...k...\|1\Z.h..Q..._S ......&.....7..i......... ..6.a...yX.kY...]./.....f...9.....K..@DN.d.\..g....F...XH ....Y...`t.E.j..,]..^s..R..`,.A.5..&...";.u.......X/2..........w+..@.f.E..0...c.`Q..8f..F.`.ty........K.s.....[$Z.#RO.1.W.5..XG.25...."g.p..B...%.W..=2..fK.k...m.....@C+`........2.WbXeee..O...../@.!S.....\.......w...q.),...........c/.J......"...J.b.qL&..@..2../@.!S.....)z...7h..bm.a..$.L.K..dydH...sl.!)D...1V.....0.......s92..R5....0..h.....Q.....dy@.q......]<C_w..Iq..).T..._\|..0Q].w..$._DEyy..H..M!./=xC.o.....G.[.0.U.0....Y.2.c0_UZ.......?zW.......o6........W...0P\|....0.i1..].>......2..C.6/...1..bMy.hW9.\.t...A.l?.K....:`......]...h..w.;......./...+..7

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	4.017181282010039
Encrypted:	false
SSDEEP:	96:ARRRRRRRRRRRRqRRRRRRRRRRRRRRDRRRRRRRRRRRRRRRRRRRRRRRRRRRRDRRRRR8:NUEG3333gvruTTTxkSSQ
MD5:	760F69985C44556F90D31CDB278286BE
SHA1:	98632D39E3CA24FDD974AC98BF187963A065CE8A
SHA-256:	4FBD8CC4075E1795215327AF5E43E8CA3339677802700D19AEFC57BA1713A12D
SHA-512:	8A36D389ED4D868ECB3CE6AC282FCCF8C3FA4D969D1475B350ADE63BD56D33B8004BF0B89B2D9CD4831D3B1F11DC6CE1F4F3F526F5D99B235D458BB4BD910759
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................?..?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...................................?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...................................?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?..................................t2..t2..t2..t2..t2..t2..t2..t2..y4...?...?...?...?...?...?...?...?...?...?...?...?...?...?...?..................................h...h...h...h...h...h...h...h...h....:...?...?...?...?...?...?...?...?...?...?...?...?...?...?............

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12986), with no line terminators
Category:	downloaded
Size (bytes):	12986
Entropy (8bit):	5.884946123242003
Encrypted:	false
SSDEEP:	384:194HLNhIluhzyv9aN7xSn8SXWea4ix7Ctd:L7nwxiBWeat4
MD5:	38213098C37E56369089DDB7E378491E
SHA1:	33FF3155B53B47210D82257AB1B07118CE0AFF56
SHA-256:	237D4A096D3820C9EDA69EE3DF11D180B9C1B7EC20807CCBC405593E010B4EBE
SHA-512:	A33C56F82AE0597AE4F382D25FC00361B65D93EC478F41F3188C453E0C52D849971E8A6B69A21F73AE0E12CBD674C67798DC6ED82F09FBB73111F3EAD3F0714A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h237D4A096D3820C9_resources/en-US/clientManifest.exp.js
Preview:	var ResourceHashJson={'app_scripts/1033/common-intl.min.js':'7iok0Ll5tvDfltLImlrhV40Py3zvH1a/R2D0fpj0SeE=','app_scripts/1033/common-strings.min.js':'XzKcHw8EvPsAdLfIEGVw3xx4bfvKK7zS6b8VB8jCXdY=','app_scripts/1033/common-ui-strings.min.js':'4YjvH1JO9yzoJdIQGVXK3ffMdNYKB8VM6X3PeqP+v18=','app_scripts/1033/commonintl.js':'vwwNhYTWz//95+mkVV8yjaysY9SpIAsasqBB24RRbHI=','app_scripts/1033/emoji-strings.min.js':'tBG86YhD31paS6oUuwf441S2PD4T5htP6KNRbzFXFoc=','app_scripts/1033/mworda-string.min.js':'szXA1SZis262D6Yl+vKwPgCkoxq7rE6ZmYrysmggG/Y=','app_scripts/1033/wac-wordviewer-strings.min.js':'XydJhD/SBTwo/xA5PODbljigqCG8OV5OT4RlDZ4Ynl0=','app_scripts/1033/word-app-intl-lazy.min.js':'xUpbqfvdUGwA7fom75b7Wu2jqEZkYKlKG/s1bAGVArI=','app_scripts/1033/word-app-intl.min.js':'co27OBAoyT+MFW/lbePL1I40zd8wkHFVbWz74oNwd8Y=','app_scripts/compat.js':'peNgYPbqucKyPcJyTzdY7cLTinM2phm9tGPDs6gQd88=','app_scripts/compatparentelementfix.js':'peNgYPbqucKyPcJyTzdY7cLTinM2phm9tGPDs6gQd88=','app_scripts/es6-promise.au

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33299)
Category:	downloaded
Size (bytes):	2744955
Entropy (8bit):	5.370262982033014
Encrypted:	false
SSDEEP:	49152:F8WEk1cQ8BaJPlpwdbRe1WW1nD6SZ12lNxhunLx5gfYGcVnBybQ/U8u8/zr4z8Jg:Yr
MD5:	7ECDB7697FE25D152DBCC03E45D8012C
SHA1:	4BBCD9626020605DA03ED0210154B3C78040870D
SHA-256:	142E5BD90AD139DE8DF56903EE1FBFD69414DF97E83A179313191DA7DCC4991B
SHA-512:	B1AC005C98776A86AF7F6D7B7C4D8AB27DED9920515AB19B0C5A842526FB22D30BCFA7EF9242EDFA5C41851AF9A37400CFEC7FAFEABFA55BBB10177B98A12B01
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h142E5BD90AD139DE_App_Scripts/WordViewerDS.js
Preview:	(function(){var __webpack_modules__={4218:function(e,t,n){"use strict";n.d(t,{a:function(){return d},b:function(){return p},c:function(){return l},d:function(){return u}});var a=n(1399);function i(e,t){return e?e+"."+t:t}function o(e,t,n,o,r){void 0===r&&(r=4),o&&e.push((0,a.d)("".concat(i(t,n)),o,r))}function r(e,t,n,o){"boolean"==typeof o&&e.push((0,a.a)("".concat(i(t,n)),o))}function s(e,t,n,o){"number"==typeof o&&e.push((0,a.c)("".concat(i(t,n)),o))}var l,c=function(e){var t="Activity.Result",n=[];return s(n,t,"Code",e.code),o(n,t,"Type",e.type),s(n,t,"Tag",e.tag),r(n,t,"IsExpected",e.isExpected),n.push((0,a.d)("zC.Activity.Result","Office.System.Result")),n},d={contractName:"Office.System.Activity",getFields:function(e){var t="Activity",n=[];return o(n,t,"CV",e.cV),s(n,t,"Duration",e.duration),s(n,t,"Count",e.count),s(n,t,"AggMode",e.aggMode),r(n,t,"Success",e.success),e.result&&n.push.apply(n,c(e.result)),n.push((0,a.d)("zC.Activity",this.contractName)),n}},u={getFields:function(

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	443943
Entropy (8bit):	5.4497506035235626
Encrypted:	false
SSDEEP:	6144:e17tl9prEilRPqNfFXQpgcNspF18AfJ9Oxb4QZE0HfNX4TJ:e1rsFXQpFSpX8z4QO1
MD5:	C6D3D10C4CB71219407698EEF8087BAB
SHA1:	3240590749D7276B00DCF485B72FA78F4F7F3D2E
SHA-256:	F142A844212962C2D1A2CE2ED38B74D60063B52FBF92BAC48FA3C8979E2E6052
SHA-512:	C06F649CED30739E23DD7A0ABAF27521BF7ADD6F6C3332515BA361BCC6761676EC0E165D1081075C35842F7C45FE08D58318A5CF116ACD6F98D5DB0DF7324A74
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_xtPRDEy3EhlAdpju-Ah7qw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.8464393446710154
Encrypted:	false
SSDEEP:	3:Sic/Cm:Sic/Cm
MD5:	FFDF36EA8BC44BB187C17DE113EE5C5F
SHA1:	315CCB39356B97B40797BB2AF89A7397B66D7EFE
SHA-256:	B0613ED71834B726DC1241F28B12071A64B0CC19D99B33D834F1C06062BFE280
SHA-512:	12D8B8487AEC51A95D945F8E2819DC7151D019DB09A8C1F76D463C63AA40CE3ABDBA08DA3FC4B0C20A311691C1AA24384C6B06EF5EC267F3240AF2FFB3F780E9
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlCt3QpV_m2AhIFDdFbUVI=?alt=proto
Preview:	Cg0KCw3RW1FSGgQIZBgC

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 90690
Category:	downloaded
Size (bytes):	32821
Entropy (8bit):	7.9923193975519835
Encrypted:	true
SSDEEP:	768:jxXBhY4WmilRjxYkiWDmKof6HfXHFjL4DSSsv8dBQMk:jk6kiWDmfyNj0DSSI8daN
MD5:	1E5B765B32C5F65973D835E9EE3EBF20
SHA1:	2AE4B7B8E6303DBB2424730062C2FB1D752219B5
SHA-256:	D443B4A9F2542CAAD44E23D0D3917456E781BAB47CD000CDAB5A2AA571395379
SHA-512:	0EC798C3379D4724F5168A51E2BD8EBA221F629AE41749B444CB1487B5B16A01E220857E181C710BABD86C0201593AEF9F8C21291F57BF14D5EBB72246958665
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js
Preview:	...........iw.8.?.~>....%."9Kw.0:..t....Y..>...l.BR^b.O...A.N...yq.t,b!.....BU.....4kM.Lr..I.]DE.&..TF..K.J.9.7.$....(..7?~.....h.;.>..'....L:..;[....;.u........J.......N:W.d........E..eR...q..sJG.O.Z,....l.......{G..A...G..<.a.~".(....2.Eg.Kq.l6.I......L....L..,i}M..j.P...vC....x.}..a.............9....n....8i.9..bk...M........M.x.-..yI..P..^~.G.I...MOOe.PM.K.}I ~..2..4T.#.U.dF..jM...T._..(..r..P)m..+..NR.p....j.MG.%..(9%...K...4..L={.'[gQ...^..Yc._..........i.O4.......Ts.@.?.n...,...e~'..QC...Ta_.y.....!..[)...h.vL..d.H.%06..5..S4..7q.._...L)M.;...........4.?59J..X>...it2mj...T.;...Dl..&.%K...,j...\.\F.4....a.l..7...(d...rCw..g..../N.1...NKfT.'.l..s...}.M\|...w......{.S....4i..y.\...(ke.g.=..^z.$....'c9...OD...y.ufYZ...L..."....q.I....zS...1..(.JL..\|.5...l:..C\|#...o.N.....C.....EE....6.k&.~CaBm......).........s....[.~P`\K..2L..i9...p...V...N.I...a...!^._..9_,\|.....iz.M...\|....~Y...."C'S....Y..BV.P.RzG.v~..WDH.Z.*.iCgp+..E....8/!%.C

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 2944, version 4.30147
Category:	downloaded
Size (bytes):	2944
Entropy (8bit):	7.701609844461153
Encrypted:	false
SSDEEP:	48:3bH18jve96elI+0EqyTxBd9iAfZ5bu5oopTBvuF0nYwH22sn8feoKs:LVuvKLlIQqi9iAPNo72e2fnuIs
MD5:	569A610DF4FD269FAA528A2197DFAA9A
SHA1:	CFC7596B939A341C5DDFFC53CFD607745AF18E8F
SHA-256:	09A1411BF361D3D649F4FF5098E0197510232477BF099872F58F5D1EC483E9AF
SHA-512:	EBD67AFCF7779E4700A5441548E3090FF2B17D4D6176160A21C0BB7F72605B6C082294A2A4CED484945685EBF33210FC883AF2AFC18948F7A8C2E62C1A53E242
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
Preview:	wOFF..................u.....................OS/2...D...H...`1Y{.cmap.......N...j.F.@cvt ....... .......fpgm...........Y...gasp................glyf.......]...0\.+Hhead...X...2...6.c..hhea...........$....hmtx..............Eloca................maxp........... .%..name...............Spost........... .Q.~prep............x...x.c`a..8.....u..1...4.f...$..........@ ...........<...!$.X............x.c```f.`..F..H....\|... ........\......./..<....../.N..z.....jPs..#.......L....x.c.b.e(`h`X.......x............x.]..N.@..s$..'@:!.uC....K$.%%...J.......n..b.........\|.s...\|v..G)V.7........!O.6eaL.yV.e.j..kN..M.h....Lm....-b....p.N.m.v.....U<..#...O.}.K..,V..&...^...L.c.x.....?ug..l9e..Ns.D....D...K........m..A.M....a.....g.P..`....d.............x..SML.Q...?..,.P-..I..=...4.R....`j4-Q.F...5...h.?$......z.Gc.h.r3.D=..n\|.RR..a....L.{.f..I...w......iu;..I2.}.<.......[l.......(,..g`...`u....q..."G.yW.."nQ.P(...[....p@..P...-b.CA.z8.zD..CW=/x..... U...F.$..%"...(aURI.UNE

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with very long lines (396), with no line terminators
Category:	dropped
Size (bytes):	399
Entropy (8bit):	5.11046307926658
Encrypted:	false
SSDEEP:	12:MMHdpmwNmCt/M8ok4FCFHzPLG2bXPINpV:JdnR/nok4KIl
MD5:	BCA41E5F5750E0764286B598AAA5F39F
SHA1:	EA60EAE55FB5BAD8EC1374878BF994D2E5E8D272
SHA-256:	C8C5BD6F7ADBD2871D6C1C88C1E62866D030AC549F8810C392D92DF7C86FA187
SHA-512:	A84B9080C725011D2E3CF6757004C5B44C9C85244D6A60E0255B798006F76E0F43BD8AD9104B4553CDEB7AD2B1B5A66836289FFCA66C757903F2332D76564B35
Malicious:	false
Reputation:	low
Preview:	.<?xml version="1.0" encoding="utf-8"?><docdata><status>CantFindSourceDocument</status><dialog><title>{webappfull}</title><description>Sorry, {webappshort} ran into a problem opening this {doctype} in a browser. To view this {doctype} please open it in the desktop version of {richclientfull}.</description><errorId>5875678c-a4e4-4cf1-9ac7-644522a8846b, 20240415055620</errorId></dialog></docdata>

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113657
Entropy (8bit):	5.491599164368304
Encrypted:	false
SSDEEP:	1536:PKq+7j8gIRPY0+r5qnWiseKVeOIXYx15CevgbSvzNXteFN50Xu:bgDTMnWcdOswvgbmp8Fbiu
MD5:	5B0E3778C74235B06DA49808DD8DF90A
SHA1:	AD25897B0870B81568412F55B19898E406CC11B3
SHA-256:	7530B843A86F3155CE07CDA787A40DA87052664B09C22F3D4DB5E9238664DBE0
SHA-512:	EE1FB8F232311A45A10D2CC2A8F19B6C8F86ECE52688F909B0928C0F65AE0953EB2176D0ADEA893A371300D0E3FEE7AF046865D48FFC2812B3440D01ADAEB727
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{487:function(e,t,r

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5962)
Category:	downloaded
Size (bytes):	6092
Entropy (8bit):	5.032264743816216
Encrypted:	false
SSDEEP:	96:JjFXDp63WI12uAx+XWiiBF08YVxRkRErWvetEuSp:JRt63WIG+fiqRkREivetEug
MD5:	DE83A7B3BC0A43A5F4E6BF8E71F5413C
SHA1:	BC3274E5C413EDFA65FB6333E63D7FBEFE1A12A8
SHA-256:	A5E36060F6EAB9C2B23DC2724F3758EDC2D38A7336A619BDB463C3B3A81077CF
SHA-512:	23EE201ED9392B9A846992DC3E9E071F219E75641DC907946CB7A5DEDF01F7AD6CCF9A5CA5ABD7B33C5CC77B408BDCEB2C74D3BBBD4F1B70B41183A280C38155
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/hA5E36060F6EAB9C2_App_Scripts/CompatParentElementFix.js
Preview:	//! Script# Mozilla Compat Layer.//! Copyright (c) 2006, Nikhil Kothari. All Rights Reserved..//! http://projects.nikhilk.net.//!.var selectNodes=function(e,t,n){n=n\|\|e;for(var o=(new XPathEvaluator).evaluate(t,n,e.createNSResolver(e.documentElement),XPathResult.ORDERED_NODE_SNAPSHOT_TYPE,null),r=new Array(o.snapshotLength),i=0;i<o.snapshotLength;i++)r[i]=o.snapshotItem(i);return r},selectSingleNode=function(e,t,n){var o=selectNodes(e,t+="[1]",n);if(0!=o.length)for(var r=0;r<o.length;r++)if(o[r])return o[r];return null};function __loadCompat(e){e.Debug=function(){},e.Debug._fail=function(e){throw new Error(e)},e.Debug.writeln=function(e){window.console&&window.console.debug(e)},e.__getNonTextNode=function(e){try{for(;e&&1!=e.nodeType;)e=e.parentNode}catch(t){e=null}return e}}function _loadSafariCompat(e){Node.prototype.__defineGetter__("text",(function(){return this.textContent})),Node.prototype.__defineSetter__("text",(function(e){this.textContent=e})),Node.prototype.selectNodes=funct

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65418), with no line terminators
Category:	downloaded
Size (bytes):	857353
Entropy (8bit):	5.2855577406671435
Encrypted:	false
SSDEEP:	24576:lNKC8drz9ARgO1bwimGOKVghs6yRrgezeCzwdF7+sMJl3TvLBA0:lJ8drz9ARgO1bwimGOKVghs6yRrgeztX
MD5:	0DA54E60449330E9939767D994E13ECD
SHA1:	EC11E71E78BDEF35E363F9E455A15FDF43624616
SHA-256:	C9A32966326A4EE3B562DEB0E02E7B55C74585F1F17283BF07E37A72085D0B1C
SHA-512:	C88B11DE2C5611124A1295A940E5C2016A7416FB0800232DB2DFD6EA8D625427329DC8E0E226DD7F6CBBCB634C2635710363039677CFC7D8D28563E80E989839
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/hC9A32966326A4EE3_App_Scripts/WordViewerDS.dll1.js
Preview:	"use strict";(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[1],{5132:function(e,t,i){i.d(t,{a:function(){return g}});var a=i(5317),n=i(8055),s=i(7237),r=i(8554),o=i(6876),l=i(1295),c=i(3382);class d{constructor(e,t,i,a,n,s){this._box=e,this._style=t,this._id=i,this._page=a,this._domElem=document.createElement("div"),this._domElem.id=i,this._zoom=1,this._isRtl=n,this._documentDataUtils=s,this.addStyle(t)}get left(){return this._box.left}set left(e){this._box.left=e}get top(){return this._box.top}set top(e){this._box.top=e}get width(){return this._box.width}set width(e){this._box.width=e}get height(){return this._box.height}set height(e){this._box.height=e}get box(){return this._box}set box(e){this._box=e}get style(){return this._style}set style(e){this._style=e}get id(){return this._id}set id(e){this._id=e}get page(){return this._page}set page(e){this._page=e}get domElem(){return this._domElem}set domElem(e){this._domElem=e}addStyle(e){switch(this._styl

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14506), with no line terminators
Category:	downloaded
Size (bytes):	14506
Entropy (8bit):	4.960894903457182
Encrypted:	false
SSDEEP:	192:jsuXIwnLZHu24JtIblyl2Q3h3lN4QRkSJmPzNO5ng35JgaBV:4uXIGhbt41NZRzJmPzNO5ngjrH
MD5:	06E79D4A7993EC3E22C6B4088FD45745
SHA1:	7C0F8E1B33FF1207E94F9C302A79748174C84350
SHA-256:	5F2749843FD2053C28FF10393CE0DB9638A0A821BC395E4E4F84650D9E189E5D
SHA-512:	E688C3BB2AE0E117768FA150693A7C22720BE28A89D5AE06918E1747A4301C16DE39F4F70F078133CFF2402B5ADAE370466C448AE3ADC6A19D5BEB4017B36A6D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h5F2749843FD2053C_App_Scripts/1033/wac-wordviewer-strings.min.js
Preview:	var WacWordviewerStringsEnum,WacWordviewerStringsArray,WacWordviewerStrings={HeaderText:"Find",NumberOfSearchedPages:"(in {0} of {1} pages)",ProgressTextManyResults:"{0} matches",ProgressTextNoResults:"No matches",ProgressTextOneResult:"1 match",ProgressTextSearching:"Searching...",ResultsInfoText:"(in 0 of {0} pages)",ResultToolTip:"[Page {0}]",SearchBoxValue:"Search for...",SearchButtonTitleBegin:"Search options",SearchButtonTitleEnd:"Clear search and other search options",NextButtonTitle:"Next Search Result",PrevButtonTitle:"Previous Search Result",SearchText:"Use the search box above to find text in your document.",SearchTextV2:"Search for a word or phrase in your document.",ReplaceText:"Search for a term in your document and enter the term that you would like to replace it with.",FindFilterLabelText:"({0})",FindMultipleFiltersLabelText:"({0}, {1})",SelectedSearchOption:"Selected search option: {0}",SelectedSearchOptions:"Selected search options: {0} and {1}",FindPlaceholderTooltip

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3581
Entropy (8bit):	4.495446498182572
Encrypted:	false
SSDEEP:	96:E/fG1SxPHM1Rh7lE2FQUBTmhI4X3owG39VoKiA:E/+1kH+PVqSTMGVF
MD5:	BD8B4DB5AFE3F2E0AD0A5123111B02B7
SHA1:	F0DE98DBE0DA22C0288290F6C18CEAA4C83A09B9
SHA-256:	EB47EAB894D41F5534A66C82B248446B1C25F6300205BB285ED809867B0810F6
SHA-512:	D46C3CA48C894E4430D9E7097244336B85055722767B867F8CFC1668CF1DBF09D7FB4883DC8FF3E5D42F8450CEB5E408BD06333424DFC8FAB648EFF43E8AF74B
Malicious:	false
Reputation:	low
URL:	https://word-view.officeapps.live.com/wv/AppSettingsHandler.ashx?app=Word&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=20240409.7
Preview:	{"timestamp":1713185805193,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"5F47FEA12278A67265C91B71CA60D7486F12491F","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113084
Entropy (8bit):	5.285180915082997
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmchSeC2Jzc6VUWG:xkNh06VUT
MD5:	D62B4EDEB512B07ABEF4688E27ECDDE3
SHA1:	981A7825DA5E29938AB6FE0CBFE2DB622F7B8333
SHA-256:	4B01A0A34CE8ED4BC8A8713BE0442D49DA6A756236B7B4424622CA3DEE820F41
SHA-512:	6E91B285BEA8566EBB7829F592744A6706CF6498E6D5DC1C5A0EBDD0A685D767AA215B275A88568B957E6BE824AEE60521ED1D77D92A697A3CE0F446ECDCDDB9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	124426
Entropy (8bit):	5.305133634377139
Encrypted:	false
SSDEEP:	1536:7GcYamNziXSDZ+w5uE2Bg9cFegKF1TA0So4RNRduCzEdb4u0xG1hlHpw:ycYamNOw5Kg9+z0GRNRdunNrvw
MD5:	9ABDF1AF6CECCDC2ABBF114766B1FC12
SHA1:	DB73D1174C47C9BCA61F14007DCA32D0B167215F
SHA-256:	892E3D437217BF722C9BCC7C7BDEBEDFB4A367815D885C88E0F581D056869F3B
SHA-512:	A420273E8D84EA3835A18BA992E5216A75C97B90EE0E71665430C63D8322F9EBC58FD13845B984D40A2E15EFD888CA530C89FE665FFDE36269250B3DFD1ED86E
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
Preview:	(function(){function getAugmentedNamespace(e){if(e.__esModule)return e;var t=e.default;if("function"==typeof t){var r=function e(){if(this instanceof e){var r=[null];return r.push.apply(r,arguments),new(Function.bind.apply(t,r))}return t.apply(this,arguments)};r.prototype=t.prototype}else r={};return Object.defineProperty(r,"__esModule",{value:!0}),Object.keys(e).forEach((function(t){var n=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(r,t,n.get?n:{enumerable:!0,get:function(){return e[t]}})})),r}var lib={},extendStatics=function(e,t){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},extendStatics(e,t)};function __extends(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function r(){this.constructor=e}extendStatics(e,t),e.prototype=null===t?Object.create(t):(r.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	337205
Entropy (8bit):	5.485362186466582
Encrypted:	false
SSDEEP:	6144:CwprCq0MEyrJwSiZD4+HAiUjTeosnEr7mujwQpj:CwIq0krriZs+HA9uEZj
MD5:	CC82C671B341A1CF1CFFF37C01443EE7
SHA1:	A783C2DE909F3602B7208C6C063F8D483771A86B
SHA-256:	A0F1CC81ADC10CDEF7AB9B7DDFA12686B39F452F5ABC9DA78A46D3A1148462AC
SHA-512:	9288827DC73F66EE377E87712447B68EEDCB54BE8DFB7E7BD1CE525836008C6F923E1E46CF5A0257B4A847A2461F34C351611F31E77B7A7BBB9BA23995FF31E8
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/hA0F1CC81ADC10CDE_App_Scripts/wp5/appChrome.min.js
Preview:	(self.wordOnlineChunks=self.wordOnlineChunks\|\|[]).push([[57640],{3409:function(e,n,o){var t=o(57204),r=o(83738);"string"==typeof t&&(t=[[e.id,t]]);for(var i=0;i<t.length;i++)r.loadStyles(t[i][1],!1);t.locals&&(e.exports=t.locals)},57204:function(e,n,o){var t=o(93556),r=o(78267)(t);r.push([e.id,'svg>path.OfficeIconColors_m20 {\r\n fill: #FAFAFAFF;\r\n}\r\nsvg>path.OfficeIconColors_m21 {\r\n fill: #C8C6C4FF;\r\n}\r\nsvg>path.OfficeIconColors_m22 {\r\n fill: #3A3A38FF;\r\n}\r\nsvg>path.OfficeIconColors_m23 {\r\n fill: #797774FF;\r\n}\r\nsvg>path.OfficeIconColors_m24 {\r\n fill: #1E8BCDFF;\r\n}\r\nsvg>path.OfficeIconColors_m25 {\r\n fill: #0063B1FF;\r\n}\r\nsvg>path.OfficeIconColors_m26 {\r\n fill: #83BEECFF;\r\n}\r\nsvg>path.OfficeIconColors_m27 {\r\n fill: #379E4EFF;\r\n}\r\nsvg>path.OfficeIconColors_m28 {\r\n fill: #309048FF;\r\n}\r\nsvg>path.OfficeIconColors_m29 {\r\n fill: #A1DDAAFF;\r\n}\r\nsvg>path.OfficeIconColors_m210 {\r\n fill: #DE6C00FF;\r\n}\r\

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	985054
Entropy (8bit):	4.392797373948824
Encrypted:	false
SSDEEP:	6144:ixGeGxNRPxOd+AzCA/8mK7wKcS44eFRoczSHHRbyoWzAC5RTMu:aGeGU+0LKl44rHA
MD5:	F8EEE995BC5C9B2ADE1BA8B9F91E5EDA
SHA1:	AC531D18AA864AD8C1B3A5350EB46FFB44AC0466
SHA-256:	C54A5BA9FBDD506C00EDFA26EF96FB5AEDA3A8466460A94A1BFB356C019502B2
SHA-512:	9F62B615EB4E150F19136214CAF5C256D626A0AD675BBF8294C3B5204C5F2CCD18EC6BFA28979B890BFC96D36E153719A8087B31975E7F9D39F924AC1A6391AE
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/hC54A5BA9FBDD506C_App_Scripts/1033/word-app-intl-lazy.min.js
Preview:	window.wordCommonSpriteLazy={icons:[{type:"svg",id:"MathZone_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1434 307 v 1048 q 0 65 13 117 q 12 53 38 90 q 25 37 63 56 q 38 20 89 20 q 17 0 93 -14 l 34 96 q -59 21 -128 21 q -75 0 -132 -26 q -57 -26 -95 -76 q -39 -49 -58 -119 q -20 -70 -20 -159 v -1054 h -614 v 1033 q 0 225 -34 383 h -104 q 18 -73 27 -168 q 8 -95 8 -215 v -1033 q -44 2 -97 9 q -53 7 -108 19 q -55 13 -108 31 q -53 18 -96 42 v -122 q 162 -81 351 -81 h 1287 v 102 z"},{type:"path",className:"OfficeIconColors_m22",d:"M 1434 307 v 1048 q 0 65 13 117 q 12 53 38 90 q 25 37 63 56 q 38 20 89 20 q 17 0 93 -14 l 34 96 q -59 21 -128 21 q -75 0 -132 -26 q -57 -26 -95 -76 q -39 -49 -58 -119 q -20 -70 -20 -159 v -1054 h -614 v 1033 q 0 225 -34 383 h -104 q 18 -73 27 -168 q 8 -95 8 -215 v -1033 q -44 2 -97 9 q -53 7 -108 19 q -55 13 -108 31 q -53 18 -96 42 v -122 q 162 -81 351 -81 h 1287 v 102 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"PageMarginsLandscapeCust

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
Reputation:	low
URL:	https://word-view.officeapps.live.com/wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&v=00000000-0000-0000-0000-000000000802&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&splashscreen=1&build=16.0.17609.41003&waccluster=PUS1
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42919)
Category:	downloaded
Size (bytes):	211303
Entropy (8bit):	5.526883999517092
Encrypted:	false
SSDEEP:	3072:srxHuD2JFay3kNANlSCWdhVJbdE1qtPEjHSmKo8tVv:CuDOX3kefShzVNGymKo8/
MD5:	D8153FBC27E90B6B135F4E052387C0A3
SHA1:	5FD83AB87C1BBC01E5EB9D3F2756F4514E98DF89
SHA-256:	2CABF7F8AC4B1F1A8309A72B060939FD95FEE987A3304C1CF505D62CD1DEB87A
SHA-512:	53D375BAA4096BA4974EC4ACB8983949087CC6AB24B5C4E72B51EAC9339FC864533DD008416C614AE5E8912929ED23E4B3E1E6A38E309C727A684E0877B57E83
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/161760941003_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_plus_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["plus"],{43545:function(e,t,n){(t=e.exports=n(19780)(!1)).push([e.id,'.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={display:-ms-flexbox;display:flex;-ms-flex-direction:row;flex-direction:row;border:1px solid hsla(0,0%,100%,0);box-shadow:0 1px 2px 0 rgba(0,0,0,.1);box-sizing:border-box;width:276px;padding-left:0;align-items:flex-start;margin:0 0 17px 16px}html[dir=rtl] .o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={margin-left:0;margin-right:16px}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=:hover{-webkit-box-shadow:0 8px 16px 0 rgba(0,0,0,.1);box-shadow:0 8px 16px 0 rgba(0,0,0,.1)}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=>button{min-width:30px;width:30px;height:36px;paddi

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43896)
Category:	downloaded
Size (bytes):	223759
Entropy (8bit):	5.257227710687157
Encrypted:	false
SSDEEP:	3072:KO0fqoBmncEhWcjYcB6UpO2jrksurdPvsiQj:UmcKrpO7surRve
MD5:	5252837FFA272234E1CBF2D3D83EF32C
SHA1:	CAA4E48A54A2B1CA09327E42F24F6031FDF21CDA
SHA-256:	DF2E852C347ECF82F70A0C8A4B91713FBB0914D58F2CBAB01316BFE646ABEE7C
SHA-512:	523C59BC0D2861B8F35A8D46E52C935A26001B2A2EF8197F7F6DBFC38E8F0D51A5D3753FD4F0DCCD68DA08505D3313AFCFA7CB236E0363EDA4856D41F05A233A
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{528:function(e,t,r)

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43338), with no line terminators
Category:	downloaded
Size (bytes):	43338
Entropy (8bit):	5.419234481326313
Encrypted:	false
SSDEEP:	768:hNM+dWKnjqyF+V+vHpg8227UF5gNgmPZoOGeSFr6xuNQo:hN9+PoHa8X7KkZnGeqrdNQo
MD5:	C6BA4D44D3740688E6BDF01DACE5B7EB
SHA1:	389A1825B6AAD7CD758E2488AE1FCB3DE2205DBB
SHA-256:	D4C9BD86A5465D8414B7A10438D28110836126B387990D492FE545A5E701904A
SHA-512:	4E7A4756C8068DA56FD213E94C323B13415A25831FEBE11ED85E81AF46CF8DF9A149FD58A0E66FECF0C272A0F415082E86BDA7F2DBE90D6C4A0940678635542C
Malicious:	false
Reputation:	low
URL:	https://js.live.net/v5.0/wl.ms.js
Preview:	(function(){if(!window.WL&&!window.OneDrive){window.OneDrive={};OneDrive.Constants={WebViewLink:Z,DownloadLink:xb};OneDrive.open=function(c){var b=i(c),a=new f(b,ue);try{a.initialize();a.validateOpenParameters();a.executeOpenOperation()}catch(d){a.processError(d,W)}};OneDrive.save=function(c){var b=i(c),a=new f(b,ve);try{a.initialize();a.validateSaveParameters();a.executeSaveOperation()}catch(d){a.processError(d,W)}};OneDrive.createOpenButton=function(d){var c=i(d),a=new f(c,hc);try{a.initialize();a.validateOpenParameters();a.validateButtonParameters();var b=a.createButtonElement();e(b,O,function(){a.executeOpenOperation()});return b}catch(g){a.processError(g,W);return null}};OneDrive.createSaveButton=function(d){var c=i(d),a=new f(c,Ad);try{a.initialize();a.validateSaveParameters();a.validateButtonParameters();var b=a.createButtonElement();e(b,O,function(){a.executeSaveOperation()});return b}catch(g){a.processError(g,W);return null}};function f(d,e){var b=this,c=d[fe];b._internalApp=W

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30298)
Category:	downloaded
Size (bytes):	105772
Entropy (8bit):	5.391782897512056
Encrypted:	false
SSDEEP:	1536:tnPDmh5cMFNj1rdW3b3hiiE0a8f7ylAbCqMPv:Jrmh5cMFN1ra3hZy8OQCt
MD5:	89A218DDAB054DDC4C43D08ECC0A2D25
SHA1:	2BB4F01C5CD8DAE82AFCCC5A9F5CE35C0F94927F
SHA-256:	BD8C3E57A02276353EBA9FED640873F0FDB73AB6D582C4B732A53C5F44CC26CF
SHA-512:	1E95D7E2D338B99C33D270F81DB88ABCA59013B8AF6CB2E0D50ADE69CB35CE3A6E09ED24BD7E4232A5B6A51F076DC9EC2BD18260E377652C639EBD859CB7A98B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/161760941003_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_otellogging_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["otellogging"],{69691:function(n,t,e){var r=e(92855),i=e(41230),o=e(54800),u=e(59177),a=e(68128),c=e(78939),s=e(85788),f=e(69988),l=e(25855),d=function(n){function t(){var e=n.call(this)\|\|this;return e.pluginVersionStringArr=[],(0,i.A)(t,e,(function(n,t){n.logger&&n.logger.queue\|\|(n.logger=new o.wq({loggingLevelConsole:1})),n.initialize=function(e,r,i,s){(0,u.r2)(n,(function(){return"AppInsightsCore.initialize"}),(function(){var u=n.pluginVersionStringArr;if(e){e.endpointUrl\|\|(e.endpointUrl=f.S);var l=e.propertyStorageOverride;!l\|\|l.getProperty&&l.setProperty\|\|(0,a.$8)("Invalid property storage override passed."),e.channels&&(0,a.Iu)(e.channels,(function(n){n&&(0,a.Iu)(n,

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
Category:	downloaded
Size (bytes):	269875
Entropy (8bit):	5.708090765851907
Encrypted:	false
SSDEEP:	6144:uyNQCvqC+7yY7jS3wiQRA33vZkDV8kdfMCItxc7:JQKyyY7jG2Re3vZfkdfMCItxc7
MD5:	79ED514099F72D58FB94C36103C1C042
SHA1:	EFD455F22075EAF6A4D2B31E817982F16736CC8A
SHA-256:	DC666FD19C8B4BCEC16E659B552F5B8AE7B9696DBB302140986CB3EFAE27146F
SHA-512:	70A0FEEBC9459C1CA8C786A0B8C9DD2D21A7E09EE6B83842FEA04CF266FD3565F856736378C9E5994238CE89CA6258F9C4F67676FE468D29E56ACAF72FC94E03
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/161760941003_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_core_start"),function(){var e,t,n,o,r,i={65777:function(e,t,n){"use strict";var o;n.d(t,{f:function(){return o}}),function(e){e.depth0="0 0 0 0 transparent",e.depth4="0 1.6px 3.6px 0 rgba(0, 0, 0, 0.132), 0 0.3px 0.9px 0 rgba(0, 0, 0, 0.108)",e.depth8="0 3.2px 7.2px 0 rgba(0, 0, 0, 0.132), 0 0.6px 1.8px 0 rgba(0, 0, 0, 0.108)",e.depth16="0 6.4px 14.4px 0 rgba(0, 0, 0, 0.132), 0 1.2px 3.6px 0 rgba(0, 0, 0, 0.108)",e.depth64="0 25.6px 57.6px 0 rgba(0, 0, 0, 0.22), 0 4.8px 14.4px 0 rgba(0, 0, 0, 0.18)"}(o\|\|(o={}))},27930:function(e,t,n){"use strict";n.d(t,{I:function(){return c}});var o=/[$\[\{\<][^$\]\}\>][\)\]\}\>]/g,r=/[\0-\u001F\!-/:-@\[-`\{-\u00BF\u0250-\u036F\uD800-\uFFFF]/g,i=/^\d+[\d\s](:?ext\|x\|)\s*\d+$/i,s=/\s+/g,a=/[\u0600-\u06FF\u0750-\u077F\u08A0-\u08FF\u1100-\u11FF\u3130-\u318F\uA960-

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	4.9043448045924025
Encrypted:	false
SSDEEP:	3:YgbEvrZ1yZEtECA9253fZwPrhKGde8o/J7FJWC2un:YggvrLyZEtCiB21d/oBBJWDun
MD5:	F77535334E854F148576B2A87AB01F12
SHA1:	018E1047606FDBF3F3F364C69CA6E29CEF9E3111
SHA-256:	DE8926CE4D4FF778D822F45A1F93B12DA18364A2E9E6163F557079C766A1437C
SHA-512:	09442EEBCCFE6820082B203A53CBDD69CC39E31CFBE9288734AB96D617D5700998405F6E6F8BDFF3DD09147E801E8C3474C0751190AFD174B95FBC315D1B05B9
Malicious:	false
Reputation:	low
URL:	https://word-view.officeapps.live.com/wv/skydriveuploadhandler.ashx?cpfsi=1
Preview:	{"ExtraInfo":"CheckPersonalFileStorageInfoForMSAUser: invalid Cid","NewDocumentUrl":null,"SetByHost":false,"State":1,"StatusCode":400}

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	796831
Entropy (8bit):	5.479796693288098
Encrypted:	false
SSDEEP:	12288:V6Q0gIjCftnx+Ov5QbVcaXJSFoVFoUoYChAq6Iom6M5RTVTMA:Vf08tnx/v5QbVcaYFoVFoUor2M5RpTMA
MD5:	E62CB90C1DF610376927CA85B591CDDE
SHA1:	E96D779543E970325FCF4C3A04A08823A333A39C
SHA-256:	2D8F8C33A8C370B0DA82B4437E1EC82382708520C5C1833C0FD4DF78BD95E577
SHA-512:	5C5EF60759189394B8EFE5D11251E93D0EDAAC6FDB7962BCB4496985B8D1AC25C354808986D7BA3EBE1CE77FCF0A2C9B7B2D93B7C303CDCB081DE5AB42FCF589
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h2D8F8C33A8C370B0_App_Scripts/wp5/appChromeLazy.min.js
Preview:	(self.wordOnlineChunks=self.wordOnlineChunks\|\|[]).push([[89743],{82474:function(e,t,n){"use strict";n.r(t),n.d(t,{KeytipLayer:function(){return o.v},KeytipLayerBase:function(){return r.s}});var o=n(24420),r=n(29477)},59378:function(){var e=window.performance,t=!!e&&"function"==typeof e.mark;t&&e.mark("shell_bootstrapper_start"),function(){var e,t,n,o,r={9610:function(e){e.exports="data:font/woff;charset=utf-8;base64,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

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	30746
Entropy (8bit):	5.174905786210689
Encrypted:	false
SSDEEP:	384:/iL+oQA/1DynNjr67VY/6NY/gHWOf49498vxVxjq:/iL+orVynNaBYbyv9uxzq
MD5:	5A78A202280EA3F090F96D1D18C2FD8A
SHA1:	3FA062D1D16FD1E618596EAE11DC1C09DF4DF2E2
SHA-256:	64DB03A5BAB93200DF23F652F90AE440563D6C0FA1B724ADE0DB9766786D7A48
SHA-512:	6B3CE7ED8715C7251737B0C62CE21DE877B081A40E4C43B4DDC1F2DD40243894FAB950E7042E1BB82772BCDF304EFE26A26C0DC8CF4AF6DD1DD926D2BAB61094
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
Preview:	{"Architecture":1,"Audience":0,"Resources":{"Version":"1.20240413.3.0","CatalogXml":"<ResourceCatalog>\r\n <Resources>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.js</LTRPath>\r\n </Resource>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d.b8d635a632aa976770cd.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-we

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46689), with no line terminators
Category:	downloaded
Size (bytes):	46689
Entropy (8bit):	5.295715214726445
Encrypted:	false
SSDEEP:	384:dqjrVXsBiHOMpRhWKVts1ZgchlLina2vSllpQ7dgWOfbrM5PoyfIk:dqjrVYiHOMpPWKVO3LinanC7ROfbrM9
MD5:	9BAAAF4D89E3B888BC9E400611D61B68
SHA1:	E4BDF6FEEDBA53DB1365F3E37F70FB6073B868AF
SHA-256:	095762FEE3E77525953B8C3091A4F83F80F50FE5AB31499C403B3ED442806974
SHA-512:	79DEAB67C3E6316A9CDA6B9FDDDA62FEA91A7A95CC4C546F7393DCD85045D66F84DC74F317425D5CE1261007D63F8B0AB4534CA9240A8AA914220230425CDC78
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h095762FEE3E77525_App_Scripts/wacairspaceanimationlibrary.js
Preview:	var WacAnimation={};function WacCurve(ID,type,x1,y1,x2,y2){this.ID=ID,this.type=type,this.x1=x1,this.y1=y1,this.x2=x2,this.y2=y2}var WacCurveType={Instant:0,Hold:1,Linear:2,CubicBezier:3},WacCurveID={Instant:0,Hold:1,Linear:2,ShotgunToPillowLanding:3,ReverseShotgunToPillowLanding:4,ShotgunToLinear:5,EaseIn:6,EaseOut:7,EaseInOut:8,Exponential:9,ShotgunToPillowLanding_VisualRefresh:10,Cxe_ShowHintBar:11,Cxe_HideHintBar:12,Cxe_ColorWheel:13,Cxe_SpinnerDot1:14,Cxe_SpinnerDot2:15,Cxe_SpinnerDot4:16,Cxe_SpinnerDot5:17,Cxe_SpinnerDot7:18,InOutSine:19,PresenceUI_Standard:20,Fluent_Standard:21},g_AnimationCurves=new Array(22);function WacIntWrapper(value,contextId){this.value=value,this.contextId=contextId}function WacKeyFrame(type,curveID,startTime,endTime,startVal,endVal,relativeTo,operationType){this.type=type,this.curveID=curveID,this.startTime=null==startTime\|\|null==startTime.value?new WacIntWrapper(startTime,null):startTime,this.endTime=null==endTime\|\|null==endTime.value?new WacIntWrapper

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3581
Entropy (8bit):	4.495366776446026
Encrypted:	false
SSDEEP:	96:a/fG1SxPHM1Rh7lE2FQUBTmhI4X3owG39VoKiA:a/+1kH+PVqSTMGVF
MD5:	C88A434C9E78F35624A34370E500A916
SHA1:	D9E2D78C125550F2725E978223C1E4B6C446119F
SHA-256:	9F6333AC532160BEE9D2B0439A0D827DD01A223EFE7A95DA0088AD5F58D912DA
SHA-512:	BE93E4085366BEEDE0F13024075D08C73F345B8658B66A4AEE8BFED04986264533CFBB0795CCEF53C03F4810ECBFC66FF9FE7BFBF571641887067E4813ADF502
Malicious:	false
Reputation:	low
Preview:	{"timestamp":1713185805713,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"5F47FEA12278A67265C91B71CA60D7486F12491F","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/5/images/signin_options_4e48046ce74f4b89d450.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, Unicode text, UTF-8 text, with very long lines (62188)
Category:	downloaded
Size (bytes):	62195
Entropy (8bit):	5.346371358658023
Encrypted:	false
SSDEEP:	768:dPAiBURRfuD6BcoQ5S3UVrK/xPK/HjQ/aBjm4k3uGP/R2KOx0BeBTJh2wjZvqjmY:hBUHjIbcnuXJTJwwjZvqjmLxketW
MD5:	26EDC5C9115F94AFCC38F273C0B4D073
SHA1:	48FEB2627345E9F869A68C04D4553ED774D88E67
SHA-256:	5D769A9D16DBF96AC76030961ABCB90D4BFF0C2E5D961BA3B1EBC5FFF54E3496
SHA-512:	0D88176DEE45522001A66E3698A757D3BC425CA81E13B4F11982D7B66D32129C9C258C341CD1A618154B6D071C3C7811D045366C1EA268954E5E2FDE93332D63
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-03-29.005/wacodcowlhostwebpack.manifest/13.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[13],{254:function(e,t,n){n.r(t),n.d(t,{_InMemoryPropertyStorage:function(){return zt},_OneDSLogger:function(){return Vt}});var a,i=n(0),r=n(238),o=n(242),s=n(161),c=n(51),d=n(162),l=n(3),u=n(104),f=n(240),p="locale",m="ver",_="name",h=(0,f.b)({UserExt:[0,"user"],DeviceExt:[1,"device"],TraceExt:[2,"trace"],WebExt:[3,"web"],AppExt:[4,"app"],OSExt:[5,"os"],SdkExt:[6,"sdk"],IntWebExt:[7,"intweb"],UtcExt:[8,"utc"],LocExt:[9,"loc"],CloudExt:[10,"cloud"],DtExt:[11,"dt"]}),b=(0,f.b)({id:[0,"id"],ver:[1,m],appName:[2,_],locale:[3,p],expId:[4,"expId"],env:[5,"env"]}),g=(0,f.b)({domain:[0,"domain"],browser:[1,"browser"],browserVer:[2,"browserVer"],screenRes:[3,"screenRes"],userConsent:[4,"userConsent"],consentDetails:[5,"consentDetails"]}),v=(0,f.b)({locale:[0,p],localId:[1,"localId"],id:[2,"id"]}),y=(0,f.b)({osName:[0,_],ver:[1,m]}),S=(0,f.b)({ver:[0,m],seq:[1,"seq"],installId:[2,"installId"],epoch:[3,"epoch"]}),D=(0,f

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32153)
Category:	downloaded
Size (bytes):	55052
Entropy (8bit):	5.379588990855403
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3/ym+d/Px2g+0wtwGixnqTPRUbx3VDg/MB+k:ABrkF7IyJvym+d/Pog+0wtwGiUig/Mt
MD5:	3D725DCEB242C2D99BAFE9D3267FC5F1
SHA1:	CF1BD2E8790F3875DDC2316EF8B055BA15447C35
SHA-256:	33CEA1C907E3D621EAFE2BD781DF9EEE3A2A96E7CE8375B01E103D0533DB8C09
SHA-512:	AEA7B103B1CFCC0EFD0151993874AFCDC2F52F0397A1500BF190E4F622E7E1115B4EA32965F9E0432066689847A2C2EAB9E3CDE0B0B0B343F0FFA8390773AC10
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pxjdzrjcwtmbr-ntjn_f8q2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65514), with no line terminators
Category:	downloaded
Size (bytes):	654618
Entropy (8bit):	5.017347519199341
Encrypted:	false
SSDEEP:	6144:iVXjzrflL9er9eunUNF6CsO4GD+AVa/IbyoWzpGpLtVYkmZN0kVLGW:iqCsO4rLGFv2GW
MD5:	5B0EADA41D0364F69F9592344F321BB8
SHA1:	D263A43FE1CCBEB425A8BD2087941EBE2BE3EEFA
SHA-256:	728DBB381028C93F8C156FE56DE3CBD48E34CDDF309071556D6CFBE2837077C6
SHA-512:	5B77EBAC92B79418ABAD38788AED4B61DB8CA3AEE4EB922E6E03795D6CE67CE6D564D0B7FC424884542ECB945D31268755856888EBE1C56E4D86794E419F6055
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h728DBB381028C93F_App_Scripts/1033/word-app-intl.min.js
Preview:	var WordRibbonStringsEnum,WordRibbonStringsArray,WordRibbonStrings={About:"About",AboutFollowUps:"about Follow-ups",AboutFollowUpsLearnMore:"Learn more",AboutKeytip:"D",Above:"Above",AcceptAllChanges:"Accept All Changes",AcceptAllChangesKeytip:"B",AcceptChange:"Accept",AcceptChangeKeytip:"A2",AcceptChangeAndMoveToNext:"Accept And Move To Next",AcceptChangeAndMoveToNextKeytip:"A",Accessibility:"Accessibility",AccessibilityHelp:"Accessibility Help (Alt+Shift+A)",AccessibilityHelpDescription:"Find out about accessibility features in Word Online.",AccessibilityHelpKeytip:"A",AccessibilityMode:"Accessibility Mode",AccessibilityTab:"Accessibility",AccessibilityTabKeyTip:"A",Acronyms:"Acronyms",AcronymsKeytip:"AC",AppHomeButtonAriaLabel:"Word, click to open Word home page",AppHomeButtonTooltip:"Word home",Citation:"Citations",CitationAndBibliography:"Citation & Bibliography",CitationKeytip:"C",Activity:"Edit Activity",ActivityContextMenuLabel:"Show new changes",AdaptiveGroupTitle:"Current Sel

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	347
Entropy (8bit):	5.408085151551481
Encrypted:	false
SSDEEP:	6:Yq0qjbQr6pjLpsSFHWD7XvZPP7BA02Jh5FL84FpH8zrpHqYw8Ve0pcVlhIvY:Yq0+0mtiSFH4137BA0ch5SgpHarpHuSa
MD5:	23956ABA465C4FA161E6480E6B4D467B
SHA1:	252A9AD59E03FEF815EB7E0D75349A654F04DCB1
SHA-256:	02BACCF6A634CD1E8A2A6FB39F18FB06B9E6546DB56255A41764FF85017E816D
SHA-512:	A888C4E8D1E991086B15B0FF086C7FA860B12D4702708845DA7017A0C4E716A4C0E50FC101D33E765456019E668F61A82958329818D4A1DD62FB428EFBA37E5A
Malicious:	false
Reputation:	low
URL:	https://ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=WordOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
Preview:	{"OneShell":{"UpdatedConsumerAppList":true,"M365StartEnabled":true,"DisableM365StartIntentsModule":false,"default":true},"Headers":{"ETag":"\"8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0=\"","Expires":"Mon, 15 Apr 2024 13:56:26 GMT","CountryCode":"US","StatusCode":"200"},"ConfigIDs":{"OneShell":"P-R-1157040-4-8,P-R-1131228-4-17,P-D-1117449-1-4"}}

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65449)
Category:	downloaded
Size (bytes):	188302
Entropy (8bit):	5.4943188006948045
Encrypted:	false
SSDEEP:	3072:PTAOBaKA8OlAAAWNNHOVcmkb3ayvvILb4ASQei4hbuL0fKHDhUy6fhhJbQ8MAAdr:r2X8gAAAWN4VcmkbLbuL0fKHDhUFfhh+
MD5:	FE79363FFE8C0009091A9C42CEF6D144
SHA1:	3B19D146390116E0727DD4C6A65A75A62999A587
SHA-256:	0B85659BBAC607F8C9BE6D1AD0D487D77CB3E27BB4FE92E723219DCC789EC5F0
SHA-512:	456C60FA7F17460DD77D93360FDFB863207EB6A6767B3AFF033ADC06D0AB3A1341326476BE0869498809B15A708B54952972BCD746F09E8FDC43BEEFB19B5D65
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.slim.b110dc4a414c0968d6d0.js
Preview:	/! For license information please see owl.slim.b110dc4a414c0968d6d0.js.LICENSE.txt /.var Microsoft;!function(){"use strict";var n,t,e,o,i={9323:function(n,t,e){e.d(t,{X:function(){return u}});var o=e(4401),i=e(857),r=e(765),u=function(n){function t(t){var e=n.call(this)\|\|this;return e.H=t,e}return o.ZT(t,n),Object.defineProperty(t.prototype,"value",{get:function(){return this.getValue()},enumerable:!0,configurable:!0}),t.prototype.A=function(t){var e=n.prototype.A.call(this,t);return e&&!e.closed&&t.next(this.H),e},t.prototype.getValue=function(){if(this.hasError)throw this.thrownError;if(this.closed)throw new r.N;return this.H},t.prototype.next=function(t){n.prototype.next.call(this,this.H=t)},t}(i.xQ)},4813:function(n,t,e){e.d(t,{y:function(){return l}});var o=e(7191),i=e(3066),r=e(2055),u=e(3140);function s(n){return n}var a=e(4505),l=function(){function n(n){this.F=!1,n&&(this.A=n)}return n.prototype.lift=function(t){var e=new n;return e.source=this,e.operator=t,e},n.prototype.su

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38234)
Category:	downloaded
Size (bytes):	38284
Entropy (8bit):	5.3532018108388195
Encrypted:	false
SSDEEP:	384:CHKV3HvJbZWiPDoCunDqzwmzRJcpGrzgbcUgJW9hUkxkt3NEcwM:CHoRZWiboC+DqcmzRJcAnTgUkxAtd
MD5:	A673BBAE8C2518ED7693D246C3F0EA17
SHA1:	AD16D8D02DC58CED9A4BA1018DD0511637257CD8
SHA-256:	73F317F45EF494FA81E4F8F6FD2D1A7F4AE3673E9AFEEFC4FA5BA6150855F2C2
SHA-512:	A07658CBBB31109F100D655BFF875FD57E5FB600D89005148C0C7F7404B1D660320A8BDCE5996508F55F82CCDA8BB2766824A7D2B02DBD2BDBD5E366B641D33C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/h73F317F45EF494FA_App_Scripts/wp5/appResourceLoader.min.js
Preview:	var appResourceLoader;!function(){var o,t,i,n,a={26698:function(o){var t=function(o){"use strict";var t,i=Object.prototype,n=i.hasOwnProperty,a=Object.defineProperty\|\|function(o,t,i){o[t]=i.value},e="function"==typeof Symbol?Symbol:{},l=e.iterator\|\|"@@iterator",s=e.asyncIterator\|\|"@@asyncIterator",r=e.toStringTag\|\|"@@toStringTag";function c(o,t,i){return Object.defineProperty(o,t,{value:i,enumerable:!0,configurable:!0,writable:!0}),o[t]}try{c({},"")}catch(o){c=function(o,t,i){return o[t]=i}}function p(o,t,i,n){var e=t&&t.prototype instanceof m?t:m,l=Object.create(e.prototype),s=new I(n\|\|[]);return a(l,"_invoke",{value:U(o,i,s)}),l}function g(o,t,i){try{return{type:"normal",arg:o.call(t,i)}}catch(o){return{type:"throw",arg:o}}}o.wrap=p;var u="suspendedStart",z="suspendedYield",f="executing",d="completed",h={};function m(){}function v(){}function j(){}var y={};c(y,l,(function(){return this}));var S=Object.getPrototypeOf,x=S&&S(S(P([])));x&&x!==i&&n.call(x,l)&&(y=x);var b=j.prototype=m.pr

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 292, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35196
Entropy (8bit):	7.969075478403727
Encrypted:	false
SSDEEP:	768:MpF1zZWLaZh+iQS8AzP/hcBO8OeUkpp/2Z285hLg9wioY2T2Dwia/yHI:MpFLzZ5QFKhccteUkpR20AhLg9BY2DpI
MD5:	3096E4177EE360B47697F35F60976EFA
SHA1:	0E056034BDFB2E0870D766E2CE26BF3E37798A1E
SHA-256:	4C76F832E1B589C931CED2C770F35CE4CD595CA941C18C5893B23F27EF587EC4
SHA-512:	391437C11C60099221BEBCAED87C50484852678DAEBDDD2CB830F48157D1A08443834865C2AC685CD63514209418B75B65E17FC2318F1D104A07AD39F32091BE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......$......6.Z...CIDATx^..x.U....W....XV.EY...(6.(%D..R....5.:R..PB..@...N...B.IHHBh......o....5...<.3sO.w...\|.9G.........z3u...zW..^w]...Z....U..P.....K..[#==..'\.X1_...k.I..(...l.A.s..%............b....0.].{.r...";7..pi...Y9..hC.....c.n...>c..c0Vn...k...\|1\Z.h..Q..._S ......&.....7..i......... ..6.a...yX.kY...]./.....f...9.....K..@DN.d.\..g....F...XH ....Y...`t.E.j..,]..^s..R..`,.A.5..&...";.u.......X/2..........w+..@.f.E..0...c.`Q..8f..F.`.ty........K.s.....[$Z.#RO.1.W.5..XG.25...."g.p..B...%.W..=2..fK.k...m.....@C+`........2.WbXeee..O...../@.!S.....\.......w...q.),...........c/.J......"...J.b.qL&..@..2../@.!S.....)z...7h..bm.a..$.L.K..dydH...sl.!)D...1V.....0.......s92..R5....0..h.....Q.....dy@.q......]<C_w..Iq..).T..._\|..0Q].w..$._DEyy..H..M!./=xC.o.....G.[.0.U.0....Y.2.c0_UZ.......?zW.......o6........W...0P\|....0.i1..].>......2..C.6/...1..bMy.hW9.\.t...A.l?.K....:`......]...h..w.;......./...+..7

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14735)
Category:	downloaded
Size (bytes):	15708
Entropy (8bit):	5.364262866906095
Encrypted:	false
SSDEEP:	384:DueX/4OSgcJ2Ze2CvfeXOh+rF3ls8DZDWzfXdv79zmR:D/jIH571mR
MD5:	82B3E71D28044021BF3BBA30A8B1B613
SHA1:	508FD0047F49E7965707F0B58708A59D6A62C528
SHA-256:	49BD3382F2D2C171947474FC65B701DED717BF69A6E88505B84DA1D69B3C2F1E
SHA-512:	5393810DAE66111F7CFCE77BF46CAE3EE3D4153B5FDBA12AB9B1D8A7095A5DD883C7EE09E0A177D6E1BE3DA2D53A0A64798A51EEE6DAC1D54FB42A8F23C9B553
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4d4b76a02ae121e3b20c.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{514:function(e,n,s

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	downloaded
Size (bytes):	2210711
Entropy (8bit):	5.447688610406791
Encrypted:	false
SSDEEP:	49152:TqVbCPBfIguAlDDvpttZwJbhTJrSK4VxjPHRYOI+AmOkmMOkx4YFQ/Mjh5RRHkJz:9TUUdJW
MD5:	41490245CABB3D25A76D2A1D0311E116
SHA1:	D00F6E99B8AA2D5948EC17105E55678AF93512A4
SHA-256:	A6C98EA6CD3E7700119065059FBC7A6025BE3BFD2DD989A11D0909EEA96D4F03
SHA-512:	0DA35B543D58BC655F050EE3710FAAEA4D4D1F3E45DA2A7CF6F1C30DCD814ADE4C748B5E89F245ABA193E57DC48429D1A0F8F2D9C3ECA30F7FFE80554E28AC6D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/hA6C98EA6CD3E7700_App_Scripts/wp5/common.min.js
Preview:	/! For license information please see common.min.js.LICENSE.txt /.(self.wordOnlineChunks=self.wordOnlineChunks\|\|[]).push([[68592],{60473:function(e,t,n){"use strict";n.d(t,{Bg7:function(){return f},Ce2:function(){return r},Cj2:function(){return c},K5e:function(){return a},L1R:function(){return g},OK9:function(){return i},SK8:function(){return d},TaI:function(){return o},XdH:function(){return l},a2Z:function(){return s},eNZ:function(){return p},olP:function(){return u}});var r="Enter",o=" ",i="Tab",a="ArrowDown",l="ArrowLeft",u="ArrowRight",s="ArrowUp",c="End",d="Home",f="PageDown",p="PageUp",g="Escape"},46327:function(e,t,n){"use strict";n.d(t,{BO:function(){return l},Th:function(){return u},e2:function(){return s}});var r=n(26410),o=function(){},i={controller:{active:o,blur:o,find:o,first:o,focus:o,last:o,next:o,prev:o,showAttributes:o,hideAttributes:o}},a=r.createContext(void 0),l=a.Provider,u=function(){var e;return null!==(e=r.useContext(a))&&void 0!==e?e:i},s=function(){return!!

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	158082
Entropy (8bit):	5.346343801389788
Encrypted:	false
SSDEEP:	1536:F4CHeUWcHvNfzAGYBLlT2KMHD01FSmBrkbpNSmjmA8P2IXTYKA:THeOHvNfz3YBLgHHULkn2rPPXUKA
MD5:	79464846A3DCF81A3BE4EC69AF24E867
SHA1:	ABDDF7FC04E4B6F9F3E3AB93320BCC608BE4B4E9
SHA-256:	E0E62960E169E1C9540AE81B3BB0FB23110A935F6E2B01B85C1CE499C78B60C5
SHA-512:	742FD243B8C569FBC6B18D94117CC90956A19E0A0FE309FE60A43011E359060FF3A1F0E3FD1F105D4BDC1C9562FAB8815456274C0D856D196400CC5F86EEFA7B
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/word.boot.b6d914f9c52088f2a597.js
Preview:	var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.Word=function(e){var t={};function n(i){if(t[i])return t[i].exports;var o=t[i]={i:i,l:!1,exports:{}};return e[i].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(i,o,function(t){return e[t]}.bind(null,o));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProper

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17049
Entropy (8bit):	4.928084398979707
Encrypted:	false
SSDEEP:	384:r3Ghr6oaSwSaPQsPq3Qf3/U/8vFwoJbr2wKodV3vzJ9YaikHcL2MQk7:rQzwSkQWjU/8BlOaikMKu
MD5:	52AF792134B43BB66AC6FB020EC0B324
SHA1:	7B8A12118EE106DAA8FCECE7625D1DE871835A21
SHA-256:	E08CA1BE8ADF907921F594F700E9267582333BA0A4337C820E8C937989301574
SHA-512:	18DFBEA096D821FB1E82C9D01AEB1569AD600FE8E3CDCA6F735DFB7960D26F2E45BFF587C8D9F8A210E12D03BDD6CCE6246011CB83009599D11FA0D6327E788A
Malicious:	false
Reputation:	low
Preview:	{. "Microsoft": "Microsoft",. "FlexpaneCloseButton": "Close pane",. "Me_Header": "My account",. "MePhotoAriaLabel": "{0} {1} Current account's user photo",. "ChangePhotoAriaLabel": "{0} {1} Change the photo that appears in IM. This may open a new window.",. "MePhotoTitle": "Current account's user photo",. "ChangePhotoTitle": "Change the photo that appears in IM. This may open a new window.",. "AppLauncherAriaLabel": "App launcher opened",. "AppLauncherCloseAriaLabel": "Close the app launcher",. "AppLauncherHomeAriaLabel": "Microsoft 365, will be open in new tab",. "AppsModuleHeading": "Apps",. "Microsoft365": "Microsoft 365",. "AppsModuleAllApps": "All apps",. "AppsModuleAllAppsTooltip": "Open all apps",. "AllViewGroupShowMore": "Show More",. "AllViewGroupShowLess": "Show Less",. "AllViewBack": "Back",. "AllViewNewGroupHeading": "New",. "AllViewAdminSelectedGroupHeading": "Admin selected apps",. "AllViewMoreFirstPartyGroupHeading": "More from Microsoft",. "AllViewT

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17049
Entropy (8bit):	4.928084398979707
Encrypted:	false
SSDEEP:	384:r3Ghr6oaSwSaPQsPq3Qf3/U/8vFwoJbr2wKodV3vzJ9YaikHcL2MQk7:rQzwSkQWjU/8BlOaikMKu
MD5:	52AF792134B43BB66AC6FB020EC0B324
SHA1:	7B8A12118EE106DAA8FCECE7625D1DE871835A21
SHA-256:	E08CA1BE8ADF907921F594F700E9267582333BA0A4337C820E8C937989301574
SHA-512:	18DFBEA096D821FB1E82C9D01AEB1569AD600FE8E3CDCA6F735DFB7960D26F2E45BFF587C8D9F8A210E12D03BDD6CCE6246011CB83009599D11FA0D6327E788A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/wv/s/161760941003_App_Scripts/suiteux-shell/strings/en/shellstrings.json
Preview:	{. "Microsoft": "Microsoft",. "FlexpaneCloseButton": "Close pane",. "Me_Header": "My account",. "MePhotoAriaLabel": "{0} {1} Current account's user photo",. "ChangePhotoAriaLabel": "{0} {1} Change the photo that appears in IM. This may open a new window.",. "MePhotoTitle": "Current account's user photo",. "ChangePhotoTitle": "Change the photo that appears in IM. This may open a new window.",. "AppLauncherAriaLabel": "App launcher opened",. "AppLauncherCloseAriaLabel": "Close the app launcher",. "AppLauncherHomeAriaLabel": "Microsoft 365, will be open in new tab",. "AppsModuleHeading": "Apps",. "Microsoft365": "Microsoft 365",. "AppsModuleAllApps": "All apps",. "AppsModuleAllAppsTooltip": "Open all apps",. "AllViewGroupShowMore": "Show More",. "AllViewGroupShowLess": "Show Less",. "AllViewBack": "Back",. "AllViewNewGroupHeading": "New",. "AllViewAdminSelectedGroupHeading": "Admin selected apps",. "AllViewMoreFirstPartyGroupHeading": "More from Microsoft",. "AllViewT

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 15, 2024 14:55:49.847923040 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 15, 2024 14:55:49.847946882 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 15, 2024 14:55:59.487162113 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 15, 2024 14:56:00.885252953 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:00.885286093 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:00.885380983 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:00.885688066 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:00.885703087 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:00.890166998 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:00.890249014 CEST	443	49737	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:00.890340090 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:00.890640974 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:00.890680075 CEST	443	49737	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.270967007 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.271409988 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.271435976 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.271868944 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.271949053 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.272584915 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.272660017 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.273922920 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.273987055 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.274111032 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.274120092 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.280443907 CEST	443	49737	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.280735970 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.280756950 CEST	443	49737	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.281518936 CEST	443	49737	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.281631947 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.282565117 CEST	443	49737	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.282644033 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.283535004 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.283626080 CEST	443	49737	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.316660881 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.333045959 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.333065987 CEST	443	49737	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.379570961 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.440068007 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.440309048 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.440392017 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.440799952 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:01.440815926 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:01.548729897 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:01.548763037 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:01.548845053 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:01.549017906 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:01.549029112 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:01.559308052 CEST	49741	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:56:01.559336901 CEST	443	49741	172.217.4.68	192.168.2.4
Apr 15, 2024 14:56:01.559503078 CEST	49741	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:56:01.559681892 CEST	49741	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:56:01.559691906 CEST	443	49741	172.217.4.68	192.168.2.4
Apr 15, 2024 14:56:01.790091991 CEST	443	49741	172.217.4.68	192.168.2.4
Apr 15, 2024 14:56:01.790376902 CEST	49741	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:56:01.790433884 CEST	443	49741	172.217.4.68	192.168.2.4
Apr 15, 2024 14:56:01.792074919 CEST	443	49741	172.217.4.68	192.168.2.4
Apr 15, 2024 14:56:01.792186975 CEST	49741	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:56:01.793544054 CEST	49741	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:56:01.793644905 CEST	443	49741	172.217.4.68	192.168.2.4
Apr 15, 2024 14:56:01.834057093 CEST	49741	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:56:01.834090948 CEST	443	49741	172.217.4.68	192.168.2.4
Apr 15, 2024 14:56:01.880667925 CEST	49741	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:56:01.929882050 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:01.930181980 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:01.930197954 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:01.931195974 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:01.931286097 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:01.932421923 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:01.932485104 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:01.932595015 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:01.932605982 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:01.976788998 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:02.069776058 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:02.069865942 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:02.070020914 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:02.124078035 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:02.124103069 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:02.127404928 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:02.127450943 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:02.127528906 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:02.128117085 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:02.128137112 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:02.508279085 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:02.508989096 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:02.509049892 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:02.510236025 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:02.511135101 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:02.511320114 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:02.511383057 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:02.551594019 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:02.551651001 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:03.618489981 CEST	49743	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:03.618545055 CEST	443	49743	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:03.618648052 CEST	49743	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:03.624360085 CEST	49743	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:03.624399900 CEST	443	49743	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:03.836072922 CEST	443	49743	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:03.836136103 CEST	49743	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:03.841451883 CEST	49743	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:03.841465950 CEST	443	49743	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:03.841809988 CEST	443	49743	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:03.893136978 CEST	49743	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:03.945811033 CEST	49743	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:03.986119032 CEST	443	49743	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.048959970 CEST	443	49743	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.049027920 CEST	443	49743	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.049144983 CEST	49743	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.049689054 CEST	49743	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.049726009 CEST	443	49743	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.049762964 CEST	49743	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.049778938 CEST	443	49743	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.090040922 CEST	49744	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.090075016 CEST	443	49744	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.090136051 CEST	49744	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.090533972 CEST	49744	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.090544939 CEST	443	49744	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.266376972 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:04.266474962 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:04.266650915 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:04.268254995 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:04.268294096 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:04.272872925 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:04.272912979 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:04.272998095 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:04.273351908 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:04.273365974 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:04.297801971 CEST	443	49744	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.297904968 CEST	49744	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.299952030 CEST	49744	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.299961090 CEST	443	49744	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.300328016 CEST	443	49744	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.304229021 CEST	49744	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.346090078 CEST	443	49744	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.498991013 CEST	443	49744	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.499054909 CEST	443	49744	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.499136925 CEST	49744	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.500701904 CEST	49744	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.500713110 CEST	443	49744	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.500726938 CEST	49744	443	192.168.2.4	23.221.246.93
Apr 15, 2024 14:56:04.500731945 CEST	443	49744	23.221.246.93	192.168.2.4
Apr 15, 2024 14:56:04.672987938 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:04.673266888 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:04.673285007 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:04.674453974 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:04.674768925 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:04.674946070 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:04.674973011 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:04.721108913 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:04.721131086 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.107383013 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.107440948 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.107497931 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.107532024 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.107558012 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.107578039 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.107645988 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.107645988 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.107661963 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.107702017 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.107758999 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.107767105 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.107785940 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.107845068 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.107853889 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.157151937 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.232378960 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.232415915 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.232495070 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.232536077 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.232547045 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.232646942 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.232705116 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.232718945 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.232727051 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.232753992 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.232754946 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.232786894 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.232789993 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.232815027 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.232954025 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.233016968 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:07.233026028 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.233138084 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:07.233201981 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:08.056102037 CEST	49745	443	192.168.2.4	13.107.137.11
Apr 15, 2024 14:56:08.056134939 CEST	443	49745	13.107.137.11	192.168.2.4
Apr 15, 2024 14:56:11.227982998 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:11.228065968 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:11.228188992 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:11.229739904 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:11.229775906 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:11.764089108 CEST	443	49741	172.217.4.68	192.168.2.4
Apr 15, 2024 14:56:11.764281034 CEST	443	49741	172.217.4.68	192.168.2.4
Apr 15, 2024 14:56:11.764576912 CEST	49741	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:56:11.814563036 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:11.814781904 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:11.922020912 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:11.922049999 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:11.922329903 CEST	49741	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:56:11.922338963 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:11.922349930 CEST	443	49741	172.217.4.68	192.168.2.4
Apr 15, 2024 14:56:11.970577002 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:11.981580019 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:11.981596947 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:11.982090950 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:11.982090950 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:11.982111931 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.038587093 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.038630009 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.038727045 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.039526939 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.039556980 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.313195944 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.322084904 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.322097063 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.323627949 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.323698044 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.326299906 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.326385975 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.347141981 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.349359035 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.349399090 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.350887060 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.350959063 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.357469082 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.357559919 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.358134031 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.358151913 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.379260063 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.379266024 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.410170078 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.425750017 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.483889103 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:12.530082941 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:12.550121069 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.550242901 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.550255060 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.550302982 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.550340891 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.550364971 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.550370932 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.550395012 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.550626993 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.552201986 CEST	49751	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.552222967 CEST	443	49751	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.865108013 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:12.865142107 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:12.865171909 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:12.865236998 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:12.865256071 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:12.865267992 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:12.865317106 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:12.865370989 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:12.865381956 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:12.865420103 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:12.865436077 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:12.865441084 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:12.865537882 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:12.873368025 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.918095112 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.978430986 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.978743076 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.978774071 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.978794098 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.978838921 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.978858948 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.978867054 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.978890896 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.978899002 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.978919029 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.978933096 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.978980064 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.979291916 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.979341030 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.979383945 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.979394913 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.979403973 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:12.979425907 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:12.979654074 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.022138119 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.079591990 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.079622984 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.079658985 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.079710960 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.079720020 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.079726934 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.079837084 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.079912901 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.079961061 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.080003023 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.080008984 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.080038071 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.080498934 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.080504894 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.081912041 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.081963062 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.082015038 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.082020998 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.082056046 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.136746883 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.136754990 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.180363894 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.180423021 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.180515051 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.180525064 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.180583954 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.180625916 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.180646896 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.180668116 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.180668116 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.180679083 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.180686951 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.180717945 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.180746078 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.180932045 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.180938005 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.181014061 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.181056976 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.181217909 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.181217909 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.181226015 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.182915926 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.182965040 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.183083057 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.183099031 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.183135986 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.183212996 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.183254004 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.183367014 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.183373928 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.183404922 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.183455944 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.183501005 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.183562040 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.183568954 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.183599949 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.183757067 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.183794022 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.183794022 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.185623884 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.185645103 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.185657024 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.218106985 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.218123913 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.222099066 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.224205971 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.224219084 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.280898094 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:13.280910969 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:13.280946016 CEST	49748	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:13.280951977 CEST	443	49748	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:13.362458944 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:13.362499952 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:13.362879038 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:13.363603115 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:13.363625050 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:13.536165953 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.546104908 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.546127081 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.548170090 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.549000025 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.549000025 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.549171925 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.549331903 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.594094038 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.595454931 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.595463037 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.642745972 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.743596077 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.743763924 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.743791103 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.743808985 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.743849993 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.743869066 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.743885994 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.743886948 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.743917942 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.743952036 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.743956089 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.743956089 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.743978024 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.744066954 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.744117022 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.744153023 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.744175911 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.744175911 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.744187117 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.744201899 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.750848055 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:13.751104116 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:13.751132965 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:13.752784014 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:13.752912998 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:13.752929926 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:13.753248930 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:13.790076971 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.844474077 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.844501972 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.844541073 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.844594002 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.844607115 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.844660997 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.844660997 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.844669104 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.844697952 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.844744921 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.844788074 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.844788074 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.844798088 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.844854116 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.845113039 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.879973888 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.880043030 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.880106926 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.880106926 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.880115032 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.880187035 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.931202888 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.931251049 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.931315899 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.931315899 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.931325912 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.931372881 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.945494890 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.945563078 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.945586920 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.945594072 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.945651054 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.945651054 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.981025934 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981091976 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981143951 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.981152058 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981175900 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.981230974 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981241941 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.981261015 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981301069 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.981312990 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981334925 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.981342077 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981410027 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.981410027 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.981422901 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981447935 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981482983 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981522083 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.981522083 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.981532097 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981642962 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:13.981669903 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.981762886 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.982101917 CEST	49756	443	192.168.2.4	152.195.19.97
Apr 15, 2024 14:56:13.982115030 CEST	443	49756	152.195.19.97	192.168.2.4
Apr 15, 2024 14:56:14.139924049 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:14.140300035 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:14.140405893 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:14.140433073 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:14.183681965 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:14.318990946 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.319041014 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.319432020 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.319623947 CEST	49760	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.319709063 CEST	443	49760	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.319789886 CEST	49760	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.320251942 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.320281029 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.320671082 CEST	49760	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.320703983 CEST	443	49760	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.349025011 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.349076033 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.349198103 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.350095987 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.350117922 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.403899908 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:14.403954029 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:14.404027939 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:14.404052973 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:14.404113054 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:14.404125929 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:14.404185057 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:14.405400038 CEST	49757	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:14.405421019 CEST	443	49757	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:14.699224949 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.699757099 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.699773073 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.700325966 CEST	443	49760	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.702306986 CEST	49760	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.702364922 CEST	443	49760	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.703344107 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.703416109 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.703433990 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.703481913 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.703905106 CEST	443	49760	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.703963995 CEST	49760	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.703983068 CEST	443	49760	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.704027891 CEST	49760	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.706149101 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.706321001 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.706403971 CEST	49760	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.706515074 CEST	443	49760	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.707041025 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.707058907 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.707117081 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.707123995 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.707272053 CEST	49760	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.707285881 CEST	443	49760	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.719568014 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.720220089 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.720235109 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.721668005 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.721759081 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.721767902 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.722095966 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.722389936 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.722477913 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.722636938 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.722636938 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.722651958 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.722683907 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.752702951 CEST	49760	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.769961119 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.985244989 CEST	443	49760	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.985349894 CEST	443	49760	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.985409975 CEST	49760	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.986363888 CEST	49760	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.986403942 CEST	443	49760	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.990350008 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.990427017 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:14.990451097 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.990473986 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.992480993 CEST	49761	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:14.992500067 CEST	443	49761	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.002616882 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.002747059 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.002762079 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.002784014 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.002811909 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.002820969 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.002882004 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.002882004 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.002888918 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.002919912 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.002969980 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.008687019 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.010097027 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.010104895 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.049462080 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.123385906 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.123420000 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.123553991 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.123648882 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.123706102 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.123706102 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.123706102 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.123739004 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.170101881 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.278466940 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.278621912 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.278738022 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.278745890 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.278745890 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.278764963 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.278851032 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.278907061 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.278907061 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.278907061 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.278915882 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.278956890 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.278970957 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.279000998 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.279118061 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.279202938 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.279305935 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.279305935 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.279305935 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.279305935 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.279315948 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.280808926 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.399388075 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.399485111 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.399496078 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.399600029 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.399698019 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.399703979 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.399781942 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.399888039 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.399893999 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.399938107 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.399991035 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.400003910 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.400134087 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.400249004 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.400262117 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.400274992 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.400366068 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.400372028 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.400412083 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.400541067 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.400573015 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.400578976 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.400661945 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.400712967 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.400712967 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.400721073 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.400768995 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.400954008 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.400960922 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.403244019 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.403389931 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.403395891 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.405548096 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.405637980 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.405643940 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.405966997 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.406060934 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.406269073 CEST	49759	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.406280041 CEST	443	49759	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.567341089 CEST	49770	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.567428112 CEST	443	49770	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.567610025 CEST	49770	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.569737911 CEST	49770	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:15.569773912 CEST	443	49770	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:15.955562115 CEST	443	49770	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:16.010289907 CEST	49770	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:16.053584099 CEST	49770	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:16.053601027 CEST	443	49770	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:16.055166006 CEST	443	49770	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:16.056649923 CEST	49770	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:16.056847095 CEST	49770	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:16.056854963 CEST	443	49770	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:16.056962013 CEST	443	49770	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:16.102849007 CEST	49770	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:16.888953924 CEST	443	49770	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:16.888993979 CEST	443	49770	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:16.889040947 CEST	443	49770	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:16.889234066 CEST	49770	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:16.890830040 CEST	49770	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:16.890871048 CEST	443	49770	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:17.397908926 CEST	49785	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.397957087 CEST	443	49785	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:17.398056984 CEST	49785	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.398426056 CEST	49785	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.398444891 CEST	443	49785	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:17.785917044 CEST	443	49785	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:17.786343098 CEST	49785	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.786354065 CEST	443	49785	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:17.786869049 CEST	443	49785	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:17.787194014 CEST	49785	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.787276983 CEST	443	49785	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:17.787329912 CEST	49785	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.787363052 CEST	443	49785	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:17.788877964 CEST	49788	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.788888931 CEST	443	49788	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:17.789036989 CEST	49788	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.789484024 CEST	49788	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.789498091 CEST	443	49788	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:17.832408905 CEST	49785	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.848109007 CEST	49789	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.848135948 CEST	443	49789	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:17.848213911 CEST	49789	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.848431110 CEST	49789	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:17.848444939 CEST	443	49789	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.171310902 CEST	443	49788	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.171508074 CEST	49788	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.171524048 CEST	443	49788	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.173657894 CEST	443	49788	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.174078941 CEST	49788	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.174201965 CEST	49788	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.174307108 CEST	443	49788	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.174402952 CEST	49788	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.174942970 CEST	443	49788	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.219082117 CEST	49788	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.233536959 CEST	443	49789	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.233844042 CEST	49789	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.233867884 CEST	443	49789	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.234405994 CEST	443	49789	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.235173941 CEST	49789	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.235261917 CEST	443	49789	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.235475063 CEST	49789	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.235508919 CEST	443	49789	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.281301975 CEST	443	49785	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.281591892 CEST	443	49785	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.281650066 CEST	49785	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.285476923 CEST	49785	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.285504103 CEST	443	49785	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.437849045 CEST	443	49788	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.437942028 CEST	443	49788	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.437999010 CEST	49788	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.438285112 CEST	49788	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.438292027 CEST	443	49788	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.523068905 CEST	443	49789	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.523181915 CEST	443	49789	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.523782015 CEST	49789	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.525921106 CEST	49789	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.525934935 CEST	443	49789	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.541306019 CEST	49796	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.541320086 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.541523933 CEST	49796	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.541857958 CEST	49796	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.541870117 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.543528080 CEST	49797	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.543545961 CEST	443	49797	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.543714046 CEST	49797	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.544244051 CEST	49797	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.544260979 CEST	443	49797	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.547051907 CEST	49798	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.547069073 CEST	443	49798	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.547347069 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.547373056 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.547379017 CEST	49798	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.547656059 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.547751904 CEST	49798	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.547766924 CEST	443	49798	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.548006058 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.548021078 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.553535938 CEST	49800	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.553569078 CEST	443	49800	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.554008961 CEST	49800	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.554378033 CEST	49801	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.554387093 CEST	443	49801	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.554802895 CEST	49801	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.555042982 CEST	49800	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.555063009 CEST	443	49800	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.555355072 CEST	49801	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.555370092 CEST	443	49801	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.791179895 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.791208982 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.791469097 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.791708946 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.791721106 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.918369055 CEST	443	49798	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.918678999 CEST	49798	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.918697119 CEST	443	49798	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.921736956 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.922044039 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.922074080 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.922297955 CEST	443	49798	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.922373056 CEST	49798	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.922379017 CEST	443	49798	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.922418118 CEST	49798	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.922801971 CEST	49798	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.922971010 CEST	443	49798	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.923160076 CEST	49798	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.923172951 CEST	443	49798	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.923921108 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.924115896 CEST	49796	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.924127102 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.925038099 CEST	443	49797	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.925322056 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.925364971 CEST	49797	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.925400972 CEST	443	49797	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.925677061 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.925842047 CEST	49796	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.925846100 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.925857067 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.925915003 CEST	443	49797	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.925966024 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.926026106 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.926222086 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.926390886 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.926659107 CEST	49797	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.926740885 CEST	443	49797	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.926863909 CEST	49796	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.926924944 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.926964045 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.926974058 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.927086115 CEST	49797	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.927099943 CEST	49797	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.927115917 CEST	443	49797	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:18.931144953 CEST	443	49800	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.931422949 CEST	49800	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.931449890 CEST	443	49800	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.932589054 CEST	443	49800	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.932900906 CEST	49800	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.933022022 CEST	49800	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:18.933032990 CEST	443	49800	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.933079958 CEST	443	49800	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:18.971990108 CEST	49798	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.971992970 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:18.987138033 CEST	49800	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.004513025 CEST	443	49801	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.004748106 CEST	49801	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.004756927 CEST	443	49801	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.005449057 CEST	443	49801	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.005789995 CEST	49801	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.005861998 CEST	443	49801	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.005904913 CEST	49801	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.005927086 CEST	49801	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.005938053 CEST	443	49801	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.058984995 CEST	443	49798	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.059386015 CEST	443	49798	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.059449911 CEST	49798	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.060070038 CEST	49798	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.060080051 CEST	443	49798	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.172458887 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.172681093 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.172693968 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.173726082 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.173796892 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.173805952 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.173854113 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.174175024 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.174243927 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.174355984 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.174362898 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.174422979 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.174460888 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.192019939 CEST	443	49797	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.192095995 CEST	443	49797	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.192157984 CEST	49797	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.192383051 CEST	49797	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.192410946 CEST	443	49797	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.204104900 CEST	443	49800	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.204121113 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.204229116 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.204260111 CEST	443	49800	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.204287052 CEST	49796	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.204298973 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.204324961 CEST	49800	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.204349995 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.204410076 CEST	49796	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.204576969 CEST	49800	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.204587936 CEST	443	49800	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.211030960 CEST	49796	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.211045027 CEST	443	49796	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.223228931 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.392832994 CEST	443	49801	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.392904997 CEST	49801	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.392929077 CEST	443	49801	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.393043041 CEST	443	49801	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.393075943 CEST	49801	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.393099070 CEST	49801	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.394381046 CEST	49801	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:19.394392014 CEST	443	49801	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:19.446053028 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.446127892 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.446140051 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.446166039 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.446182966 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.446207047 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.447138071 CEST	49803	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.447149038 CEST	443	49803	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.681710958 CEST	49808	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.681749105 CEST	443	49808	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.681827068 CEST	49808	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.682749033 CEST	49808	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.682768106 CEST	443	49808	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.797339916 CEST	49809	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.797377110 CEST	443	49809	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:19.797447920 CEST	49809	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.802638054 CEST	49809	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:19.802658081 CEST	443	49809	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.060508966 CEST	443	49808	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.076811075 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:20.077014923 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:20.077089071 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:20.109154940 CEST	49808	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.127327919 CEST	49808	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.127332926 CEST	443	49808	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.128727913 CEST	443	49808	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.130223989 CEST	49814	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.130273104 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.130336046 CEST	49814	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.131289959 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.131311893 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.131414890 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.132179976 CEST	49816	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.132185936 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.132333994 CEST	49816	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.132760048 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.132780075 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.132853031 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.134242058 CEST	49808	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.134407997 CEST	49814	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.134434938 CEST	443	49808	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.134438038 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.135200024 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.135210991 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.135379076 CEST	49816	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.135386944 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.135576963 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.135602951 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.136298895 CEST	49808	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.136311054 CEST	443	49808	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.136338949 CEST	49808	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.136368036 CEST	443	49808	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.172605038 CEST	443	49809	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.173124075 CEST	49809	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.173132896 CEST	443	49809	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.173614979 CEST	443	49809	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.173892021 CEST	49809	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.173971891 CEST	443	49809	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.174143076 CEST	49809	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.174175024 CEST	443	49809	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.400399923 CEST	443	49808	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.400603056 CEST	443	49808	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.400652885 CEST	49808	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.439315081 CEST	443	49809	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.440114975 CEST	443	49809	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.440188885 CEST	49809	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.444881916 CEST	49808	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.444900036 CEST	443	49808	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.490458012 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:20.490463972 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:20.492111921 CEST	49809	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.492115021 CEST	443	49809	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.502121925 CEST	49820	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.502173901 CEST	443	49820	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.502238035 CEST	49820	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.502644062 CEST	49820	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.502679110 CEST	443	49820	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.510827065 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.512137890 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.512154102 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.516139984 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.516156912 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.516221046 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.516233921 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.516288042 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.516417980 CEST	49814	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.516428947 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.516555071 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.516957998 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.517112017 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.517123938 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.517144918 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.517265081 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.517297983 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.517436981 CEST	49816	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.517445087 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.518135071 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.518218040 CEST	49814	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.518229961 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.518464088 CEST	49814	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.520998955 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.521023989 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.521059990 CEST	49816	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.521064997 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.521111965 CEST	49816	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.529498100 CEST	49814	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.529709101 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.530524969 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.530531883 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.531569004 CEST	49816	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.531752110 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.531773090 CEST	49814	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.531800985 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.532196045 CEST	49814	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.532310009 CEST	49816	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.532315016 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.533081055 CEST	49816	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.534235954 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.534291983 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.534297943 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.534332991 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.565354109 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.574100018 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.574120045 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.593370914 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.593556881 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.603348970 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.603363991 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.603404999 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.643486023 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.646102905 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.773341894 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.773442984 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.773498058 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.773942947 CEST	49817	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.773967028 CEST	443	49817	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.789623022 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.789644003 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.789696932 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.789810896 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.789829016 CEST	49816	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.790015936 CEST	49814	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.790280104 CEST	49816	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.790285110 CEST	443	49816	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.792594910 CEST	49814	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.792608023 CEST	443	49814	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.864547968 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.864763975 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.864825964 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.881901026 CEST	443	49820	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.885967970 CEST	49820	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.885983944 CEST	443	49820	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.886358023 CEST	443	49820	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.886794090 CEST	49815	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.886809111 CEST	443	49815	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.888731003 CEST	49820	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.888801098 CEST	443	49820	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.889349937 CEST	49820	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.889377117 CEST	443	49820	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:20.889403105 CEST	49820	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:20.930085897 CEST	443	49820	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:21.150618076 CEST	443	49820	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:21.150670052 CEST	443	49820	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:21.150734901 CEST	49820	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:21.151021957 CEST	49820	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:21.151034117 CEST	443	49820	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:21.965543032 CEST	49826	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:21.965617895 CEST	443	49826	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:21.965883017 CEST	49826	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:21.966258049 CEST	49826	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:21.966293097 CEST	443	49826	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:22.007956982 CEST	49832	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.007986069 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.008863926 CEST	49832	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.009886026 CEST	49832	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.009902000 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.011387110 CEST	49833	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.011410952 CEST	443	49833	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.011502028 CEST	49833	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.011996984 CEST	49833	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.012012959 CEST	443	49833	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.341260910 CEST	443	49826	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:22.341698885 CEST	49826	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:22.341706991 CEST	443	49826	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:22.342042923 CEST	443	49826	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:22.343940020 CEST	49826	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:22.343998909 CEST	443	49826	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:22.344360113 CEST	49826	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:22.344373941 CEST	443	49826	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:22.344382048 CEST	49826	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:22.390088081 CEST	443	49826	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:22.390542984 CEST	443	49833	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.390790939 CEST	49833	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.390808105 CEST	443	49833	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.391957045 CEST	443	49833	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.392257929 CEST	49833	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.392441988 CEST	443	49833	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.392555952 CEST	49833	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.430887938 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.431103945 CEST	49832	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.431140900 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.432290077 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.432584047 CEST	49832	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.432662010 CEST	49832	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.432676077 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.432766914 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.438096046 CEST	443	49833	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.440531015 CEST	49833	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.486998081 CEST	49832	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.528146029 CEST	443	49833	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.530227900 CEST	443	49833	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.530349016 CEST	49833	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.530797005 CEST	49833	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.530807972 CEST	443	49833	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.601980925 CEST	443	49826	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:22.602041006 CEST	443	49826	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:22.602116108 CEST	49826	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:22.602365017 CEST	49826	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:22.602396965 CEST	443	49826	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:22.735987902 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.736325026 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.736402988 CEST	49832	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.736426115 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.736599922 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:22.736984968 CEST	49832	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.737756968 CEST	49832	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:22.737766027 CEST	443	49832	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:43.084933043 CEST	49858	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:43.085012913 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:43.085098982 CEST	49858	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:43.085256100 CEST	49858	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:43.085294008 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:43.471108913 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:43.471683025 CEST	49858	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:43.471744061 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:43.472930908 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:43.473350048 CEST	49858	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:43.473499060 CEST	49858	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:43.473519087 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:43.473543882 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:43.473543882 CEST	49858	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:43.518089056 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:43.526091099 CEST	49858	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:43.752568007 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:43.752598047 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:43.752787113 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:43.752813101 CEST	49858	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:43.752846956 CEST	49858	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:43.753479958 CEST	49858	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:43.753515959 CEST	443	49858	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:44.757144928 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:44.757227898 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:44.757334948 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:44.757620096 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:44.757658005 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.136629105 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.138777018 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:45.138839006 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.142455101 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.142556906 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:45.142579079 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.142760992 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:45.143336058 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:45.143512964 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.143551111 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:45.190093040 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.196635008 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:45.196692944 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.237214088 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:45.277894020 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.278126001 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.278239012 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:45.278294086 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.278331041 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.278368950 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:45.278400898 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:45.279143095 CEST	49863	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:45.279172897 CEST	443	49863	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:45.281985044 CEST	49864	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:45.282068014 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.282326937 CEST	49864	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:45.282526016 CEST	49864	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:45.282562017 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.373296976 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:45.373332977 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:45.373410940 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:45.373817921 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:45.373837948 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:45.655308962 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.655591965 CEST	49864	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:45.655649900 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.656007051 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.656294107 CEST	49864	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:45.656363964 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.656434059 CEST	49864	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:45.702092886 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.747920990 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:45.748261929 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:45.748284101 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:45.749191046 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:45.749257088 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:45.750233889 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:45.750294924 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:45.750461102 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:45.750469923 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:45.792876959 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.792897940 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.792962074 CEST	49864	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:45.792988062 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.793015957 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.793061018 CEST	49864	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:45.793766022 CEST	49864	443	192.168.2.4	52.108.9.12
Apr 15, 2024 14:56:45.793793917 CEST	443	49864	52.108.9.12	192.168.2.4
Apr 15, 2024 14:56:45.803318024 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.110039949 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.110064030 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.110080957 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.110151052 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.110157967 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.110202074 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.110234022 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.110274076 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.110306978 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.110306978 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.110306978 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.110313892 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.110325098 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.110338926 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.110351086 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.110354900 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.110363007 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.110409021 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.230515957 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.230540991 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.230604887 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.230643034 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.230669022 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.230670929 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.230698109 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.230720043 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.231595993 CEST	49865	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.231623888 CEST	443	49865	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.344420910 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:56:46.344429016 CEST	443	49737	13.107.42.12	192.168.2.4
Apr 15, 2024 14:56:46.389811039 CEST	49868	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.389866114 CEST	443	49868	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.389930964 CEST	49868	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.390140057 CEST	49868	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.390160084 CEST	443	49868	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.764235973 CEST	443	49868	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.764499903 CEST	49868	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.764512062 CEST	443	49868	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.766021967 CEST	443	49868	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.766086102 CEST	49868	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.766381025 CEST	49868	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.766436100 CEST	443	49868	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.815501928 CEST	49868	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:46.815525055 CEST	443	49868	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:46.864371061 CEST	49868	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:47.165807962 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.165894032 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.165977001 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.166208982 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.166230917 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.303939104 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.303976059 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.304236889 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.304568052 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.304605007 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.304658890 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.304677963 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.304686069 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.304893970 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.304908991 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.490084887 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.490333080 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.490375042 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.492008924 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.492089987 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.492930889 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.493026018 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.493124008 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.493139982 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.536406040 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.610989094 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.611242056 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.611269951 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.612399101 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.612493992 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.613076925 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.613174915 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.613219976 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.615741014 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.615946054 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.615973949 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.617396116 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.617490053 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.617813110 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.617893934 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.617974997 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.654109001 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.658126116 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.660172939 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.660197020 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.660262108 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.660289049 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.681377888 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.681576014 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.681596041 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.681633949 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.681648970 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.681670904 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.681725025 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.681760073 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.681766033 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.681766033 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.681766033 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.681802988 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.681821108 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.681823969 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.681854963 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.681898117 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.681921005 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.706785917 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.706964970 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.782530069 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.782598972 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.782632113 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.782701969 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.782741070 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.782764912 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.782856941 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.782900095 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.782926083 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.782938004 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.782965899 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.782983065 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.814661026 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814796925 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814806938 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814831018 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814838886 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814847946 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814861059 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.814896107 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814914942 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814922094 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814923048 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.814938068 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.814944029 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814951897 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814960003 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.814975023 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.814981937 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.814985991 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.815021038 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.818675041 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.818806887 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.818816900 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.818862915 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.818900108 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.818919897 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.818984032 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.818984032 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.818984032 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.818984032 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.818984032 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.819061995 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.819098949 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.819123030 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.819158077 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.819186926 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.819207907 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.819241047 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.819293976 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.819293976 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.819293976 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.819293976 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.819293976 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.819293976 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.819802999 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.819852114 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.819880009 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.819895983 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.819924116 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.819945097 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.820110083 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.820152044 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.820171118 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.820182085 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.820219040 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.820219040 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.884135008 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.884224892 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.884249926 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.884314060 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.884337902 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.884521961 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.884656906 CEST	49870	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.884687901 CEST	443	49870	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.917350054 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.917382002 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.917429924 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.917460918 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.917470932 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.917778969 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.917803049 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.917831898 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.917840004 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.917855978 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.917867899 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.917877913 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.917882919 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.917905092 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.917911053 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.917937040 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.919976950 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.920001030 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.920046091 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.920120001 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.920191050 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.920191050 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.920345068 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.920756102 CEST	49872	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.920798063 CEST	443	49872	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.956979990 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.956998110 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.957051992 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:47.957078934 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:47.957212925 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.018090010 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.018106937 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.018197060 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.018224955 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.018604994 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.018959999 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.018973112 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.019030094 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.019038916 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.019103050 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.019335985 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.019371986 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.019396067 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.019403934 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.019421101 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.019443989 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.019557953 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.019573927 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.019608021 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.019617081 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.020014048 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.020049095 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.020071983 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.020080090 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.020095110 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.020118952 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.020276070 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.020288944 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.020322084 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.020328999 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.020344973 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.020365000 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.020423889 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.020453930 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.020467043 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.020473957 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.020493031 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.020514011 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.021434069 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.021446943 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.021500111 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.021508932 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.021596909 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.223076105 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.223104954 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.223145962 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.223176956 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.223196030 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.223285913 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.223411083 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.223432064 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.223474026 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.223484039 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.223623991 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224559069 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224580050 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224601984 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224626064 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224634886 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224663973 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224677086 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224689960 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224695921 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224711895 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224724054 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224745989 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224754095 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224769115 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224785089 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224807978 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224814892 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224828959 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224850893 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224857092 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224869013 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224884033 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224905968 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224922895 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224925041 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224935055 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224950075 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224972963 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.224981070 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.224993944 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225007057 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225034952 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.225043058 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225059986 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.225092888 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225110054 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225132942 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.225135088 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225147009 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225156069 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.225194931 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.225202084 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225214958 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225236893 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225261927 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.225263119 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225276947 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225284100 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.225317955 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.225321054 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225333929 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225394964 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.225402117 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225431919 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.225466967 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.226671934 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.230941057 CEST	49871	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.230951071 CEST	443	49871	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.272224903 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.272258043 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.272377968 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.272711992 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.272730112 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.294048071 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.294069052 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.294233084 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.294394970 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.294409037 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.582405090 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.582617998 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.582633018 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.584064960 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.584146023 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.584561110 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.584641933 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.584712982 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.584722042 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.606297016 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.606487989 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.606504917 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.607534885 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.607589006 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.608097076 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.608159065 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.608237982 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.629445076 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.654087067 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.660022020 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.660029888 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.706212044 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.786019087 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.786091089 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.786103010 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.786120892 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.786161900 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.786185026 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.786204100 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.786223888 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.786247969 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.786252975 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.786290884 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.786299944 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.786340952 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.787769079 CEST	49874	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.787784100 CEST	443	49874	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.808954000 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.809010983 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.809020042 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.809061050 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.809082985 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.809098959 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.809123993 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.809144020 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.809149981 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.809158087 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.809171915 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.809197903 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.809216976 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.809236050 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.809283018 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.809292078 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.809303999 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.856019020 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.910156965 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.910173893 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.910214901 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.910238981 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.910279989 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.910300970 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.910325050 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.910348892 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.910475969 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.910495043 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.910541058 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.910561085 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.910587072 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.910604954 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.910815954 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.910861015 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.910887957 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.910901070 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.910931110 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.910950899 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.935076952 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.935133934 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.935204983 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.935431004 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.935447931 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.995250940 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.995284081 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.995333910 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.995357037 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:48.995387077 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:48.995433092 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.012727976 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.012777090 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.012818098 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.012842894 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.012868881 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.012891054 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.012979031 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.013022900 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.013061047 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.013072014 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.013107061 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.013128042 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.013446093 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.013492107 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.013524055 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.013536930 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.013562918 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.013582945 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.013827085 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.013866901 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.013897896 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.013910055 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.013936996 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014111042 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014130116 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014168978 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014169931 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014221907 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014300108 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014313936 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014363050 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014374971 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014400005 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014439106 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014440060 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014456987 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014468908 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014497995 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014514923 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014620066 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014659882 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014683008 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014694929 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014722109 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014723063 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014755011 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014772892 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014800072 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014822006 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.014826059 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.014872074 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.015593052 CEST	49875	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.015621901 CEST	443	49875	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.038570881 CEST	49877	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.038665056 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.038764954 CEST	49877	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.038971901 CEST	49877	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.039006948 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.040132999 CEST	49878	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.040175915 CEST	443	49878	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.040371895 CEST	49878	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.040601015 CEST	49879	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.040638924 CEST	443	49879	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.040767908 CEST	49879	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.040801048 CEST	49878	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.040829897 CEST	443	49878	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.040930033 CEST	49879	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.040946007 CEST	443	49879	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.249715090 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.249970913 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.250010014 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.254607916 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.254708052 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.255425930 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.255520105 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.255563021 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.302093029 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.303348064 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.303363085 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.349128962 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.357424974 CEST	443	49878	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.357433081 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.357574940 CEST	443	49879	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.357667923 CEST	49877	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.357728004 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.357759953 CEST	49878	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.357774019 CEST	443	49878	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.358045101 CEST	49879	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.358067989 CEST	443	49879	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.358480930 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.358517885 CEST	443	49878	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.358916998 CEST	49877	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.359014988 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.359038115 CEST	443	49879	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.359111071 CEST	49879	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.359303951 CEST	49878	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.359391928 CEST	443	49878	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.359639883 CEST	49879	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.359704018 CEST	443	49879	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.359807014 CEST	49877	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.359874964 CEST	49878	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.359952927 CEST	49879	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.359962940 CEST	443	49879	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.402112007 CEST	443	49878	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.402148962 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.411894083 CEST	49879	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.452234030 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.452392101 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.452408075 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.452435017 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.452454090 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.452454090 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.452465057 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.452528000 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.452570915 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.452572107 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.452570915 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.452606916 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.452636003 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.452811956 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.454711914 CEST	49876	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.454742908 CEST	443	49876	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.560177088 CEST	443	49879	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.560224056 CEST	443	49879	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.560280085 CEST	49879	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.560292959 CEST	443	49879	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.560342073 CEST	49879	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.560894966 CEST	49879	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.560909033 CEST	443	49879	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.561820984 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.562009096 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.562052011 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.562134027 CEST	49877	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.562134027 CEST	49877	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.562197924 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.562237024 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.562259912 CEST	49877	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.562283993 CEST	49877	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.562371016 CEST	443	49878	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.562490940 CEST	443	49878	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.562633038 CEST	443	49878	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.562639952 CEST	49878	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.562705994 CEST	49878	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.567181110 CEST	49882	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.567238092 CEST	443	49882	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.567399025 CEST	49882	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.567698002 CEST	49882	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.567730904 CEST	443	49882	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.567797899 CEST	49877	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.567819118 CEST	443	49877	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.568154097 CEST	49878	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.568171978 CEST	443	49878	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.570990086 CEST	49883	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.571049929 CEST	443	49883	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.571124077 CEST	49883	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.571305990 CEST	49883	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.571337938 CEST	443	49883	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.600277901 CEST	49884	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.600353956 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.600440025 CEST	49884	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.600831032 CEST	49884	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.600851059 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.601747036 CEST	49885	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.601773024 CEST	443	49885	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.601856947 CEST	49885	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.602078915 CEST	49885	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.602093935 CEST	443	49885	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.763479948 CEST	49887	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:49.763592958 CEST	443	49887	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:49.763694048 CEST	49887	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:49.764028072 CEST	49887	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:49.764062881 CEST	443	49887	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:49.874731064 CEST	443	49882	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.874962091 CEST	49882	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.874982119 CEST	443	49882	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.875273943 CEST	443	49882	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.875559092 CEST	49882	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.875624895 CEST	443	49882	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.875667095 CEST	49882	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.885741949 CEST	443	49883	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.885951042 CEST	49883	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.886008024 CEST	443	49883	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.886532068 CEST	443	49883	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.886811972 CEST	49883	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.886903048 CEST	49883	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.886907101 CEST	443	49883	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.918003082 CEST	443	49885	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.918092012 CEST	443	49882	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.918312073 CEST	49885	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.918330908 CEST	443	49885	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.918351889 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.918519020 CEST	49884	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.918545961 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.918670893 CEST	443	49885	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.919095993 CEST	49885	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.919095993 CEST	49885	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.919127941 CEST	443	49885	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.919177055 CEST	443	49885	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.919234991 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.919584990 CEST	49884	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.919671059 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.919754982 CEST	49884	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.925158024 CEST	49882	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.929364920 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:49.929383993 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:49.929450035 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:49.930094957 CEST	443	49883	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:49.930128098 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:49.930143118 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:49.931543112 CEST	49889	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:49.931570053 CEST	443	49889	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:49.931730986 CEST	49889	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:49.932142019 CEST	49889	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:49.932142973 CEST	49890	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:49.932158947 CEST	443	49889	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:49.932172060 CEST	443	49890	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:49.932962894 CEST	49890	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:49.933201075 CEST	49890	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:49.933213949 CEST	443	49890	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:49.939718008 CEST	49883	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.959494114 CEST	49885	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:49.962141037 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.079400063 CEST	443	49882	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.079459906 CEST	443	49882	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.079520941 CEST	443	49882	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.079710960 CEST	49882	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.080286026 CEST	49882	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.080327034 CEST	443	49882	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.089576006 CEST	443	49883	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.089700937 CEST	443	49883	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.089860916 CEST	443	49883	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.090023994 CEST	49883	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.090337992 CEST	49883	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.090358019 CEST	443	49883	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.122298002 CEST	443	49885	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.122446060 CEST	443	49885	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.122601986 CEST	443	49885	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.122755051 CEST	49885	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.125515938 CEST	49885	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.125530005 CEST	443	49885	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.125540972 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.125667095 CEST	49891	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.125673056 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.125690937 CEST	443	49891	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.125758886 CEST	49891	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.125760078 CEST	49884	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.125772953 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.125833035 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.125962019 CEST	49884	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.125966072 CEST	49891	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.125983953 CEST	443	49891	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.126405001 CEST	49884	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.126420021 CEST	443	49884	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.133146048 CEST	49892	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.133239985 CEST	443	49892	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.134272099 CEST	49892	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.135344982 CEST	49892	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.135384083 CEST	443	49892	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.136650085 CEST	443	49887	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:50.136965036 CEST	49887	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:50.136985064 CEST	443	49887	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:50.137532949 CEST	443	49887	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:50.139018059 CEST	49887	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:50.139110088 CEST	443	49887	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:50.139154911 CEST	49887	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:50.139154911 CEST	49887	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:50.139193058 CEST	443	49887	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:50.182215929 CEST	49887	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:50.311862946 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.312386036 CEST	443	49889	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.313602924 CEST	443	49890	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:50.319479942 CEST	49889	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.319483042 CEST	49890	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:50.319494009 CEST	443	49889	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.319508076 CEST	443	49890	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:50.319984913 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.319999933 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.320417881 CEST	443	49889	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.320573092 CEST	49889	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.321050882 CEST	443	49890	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:50.321194887 CEST	49890	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:50.321531057 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.322618008 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.323699951 CEST	49889	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.323702097 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.323790073 CEST	443	49889	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.323796988 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.324568033 CEST	49890	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:50.324570894 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.324578047 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.324656010 CEST	443	49890	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:50.365554094 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.366101027 CEST	49890	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:50.366111994 CEST	443	49890	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:50.366698027 CEST	49889	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.366712093 CEST	443	49889	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.400801897 CEST	443	49887	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:50.401021004 CEST	443	49887	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:50.401468039 CEST	49887	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:50.401741982 CEST	49887	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:56:50.401781082 CEST	443	49887	52.108.10.12	192.168.2.4
Apr 15, 2024 14:56:50.406658888 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:50.406686068 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:50.406908035 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:50.407303095 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:50.407318115 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:50.412465096 CEST	49889	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.412642956 CEST	49890	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:50.437823057 CEST	443	49891	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.438101053 CEST	49891	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.438112020 CEST	443	49891	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.438579082 CEST	443	49891	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.438947916 CEST	49891	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.439028025 CEST	443	49891	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.439115047 CEST	49891	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.449280977 CEST	443	49892	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.449655056 CEST	49892	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.449717045 CEST	443	49892	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.450902939 CEST	443	49892	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.451271057 CEST	49892	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.451316118 CEST	49892	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.451457024 CEST	443	49892	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.486087084 CEST	443	49891	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.489964008 CEST	49891	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.505254030 CEST	49892	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.640822887 CEST	443	49891	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.640882015 CEST	443	49891	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.640954971 CEST	443	49891	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.641237020 CEST	49891	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.646100044 CEST	49891	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.646109104 CEST	443	49891	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.652347088 CEST	443	49892	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.652390003 CEST	443	49892	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.652443886 CEST	443	49892	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.652483940 CEST	49892	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.654298067 CEST	49892	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.654483080 CEST	49892	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:50.654522896 CEST	443	49892	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:50.705328941 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.705364943 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.705387115 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.705420017 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.705429077 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.705456972 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.705463886 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.705470085 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.705481052 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.705554008 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.705581903 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.705630064 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.705668926 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.705673933 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.705740929 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.706187010 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.826251984 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.826304913 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.826349020 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.826366901 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.826407909 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.826656103 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.826692104 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.826706886 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.826736927 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.826751947 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.826785088 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.826785088 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.832779884 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.832822084 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.832920074 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.832920074 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.832926989 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.833920002 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.949019909 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949043036 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949094057 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.949105024 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949132919 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949170113 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949193954 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.949197054 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949203968 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.949239016 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.949475050 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949493885 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949506044 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.949510098 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949522018 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.949565887 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.949871063 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949894905 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949932098 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.949935913 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.949961901 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.950103998 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.950196028 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.950217009 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.950247049 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.950251102 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.950290918 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.950323105 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.954206944 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.954226017 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.954307079 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.954312086 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.954391956 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.954539061 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.954559088 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.954596996 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.954602003 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:50.954633951 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.954655886 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:50.995595932 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:50.995718002 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:50.999133110 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:50.999162912 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:50.999582052 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.012207985 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:51.054107904 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.069880962 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.069933891 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.069953918 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.069958925 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.069996119 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.070039988 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.070070982 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.070075035 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.070092916 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.070106030 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.070132971 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.070287943 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.070327997 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.070600033 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.071188927 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.071188927 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.071196079 CEST	443	49888	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.071248055 CEST	49888	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.119345903 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.119375944 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.119427919 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.119637966 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.119657993 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.181266069 CEST	49895	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.181370974 CEST	443	49895	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.181488037 CEST	49895	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.181706905 CEST	49895	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.181746960 CEST	443	49895	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.182255030 CEST	49896	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.182276011 CEST	443	49896	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.182785988 CEST	49896	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.182930946 CEST	49896	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.182955980 CEST	443	49896	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.503045082 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.505142927 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.505172014 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.505924940 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.506539106 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.506613970 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.506671906 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.550117016 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.551630974 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.558151960 CEST	443	49895	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.558507919 CEST	49895	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.558568001 CEST	443	49895	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.559451103 CEST	443	49895	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.559518099 CEST	49895	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.563978910 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.564014912 CEST	49895	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.564018011 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.564064026 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.564085007 CEST	443	49895	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.564115047 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:51.564115047 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:51.564116001 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:51.564189911 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.564238071 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:51.564239979 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.564268112 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.564296961 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.564304113 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:51.564332008 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:51.564347982 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.564464092 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.564522982 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:51.564748049 CEST	49895	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.564768076 CEST	443	49895	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.564821005 CEST	443	49896	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.566502094 CEST	49896	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.566518068 CEST	443	49896	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.567380905 CEST	443	49896	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.567445040 CEST	49896	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.570028067 CEST	49896	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.570097923 CEST	443	49896	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.570283890 CEST	49896	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.570298910 CEST	443	49896	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.577506065 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:51.577545881 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.577572107 CEST	49893	443	192.168.2.4	40.127.169.103
Apr 15, 2024 14:56:51.577586889 CEST	443	49893	40.127.169.103	192.168.2.4
Apr 15, 2024 14:56:51.590226889 CEST	49897	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.590291977 CEST	443	49897	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.590362072 CEST	49897	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.590656042 CEST	49897	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.590693951 CEST	443	49897	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.613929033 CEST	49896	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.613929033 CEST	49895	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.636744022 CEST	443	49868	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:51.636836052 CEST	443	49868	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:51.637017012 CEST	49868	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:51.806806087 CEST	443	49895	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.806871891 CEST	443	49895	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.806998968 CEST	443	49895	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.807051897 CEST	49895	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.807192087 CEST	49895	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.820486069 CEST	49895	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.820518017 CEST	443	49895	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.828501940 CEST	49868	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:51.828514099 CEST	443	49868	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:51.831828117 CEST	443	49896	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.831991911 CEST	443	49896	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.832065105 CEST	49896	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.864835024 CEST	49896	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.864856005 CEST	443	49896	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.903932095 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.903955936 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.903964043 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.903995037 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.904012918 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.904021978 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.904037952 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.904050112 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.904063940 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.904083014 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.904083967 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.904097080 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.904104948 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.904129982 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.904143095 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.904306889 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.904704094 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.905473948 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.905486107 CEST	443	49894	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.905493975 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.905529976 CEST	49894	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.931512117 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:51.931545019 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:51.931623936 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:51.931674004 CEST	49900	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:51.931752920 CEST	443	49900	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:51.931818962 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:51.931842089 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:51.931932926 CEST	49900	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:51.932012081 CEST	49900	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:51.932032108 CEST	443	49900	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:51.983572006 CEST	443	49897	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.983876944 CEST	49897	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.983922005 CEST	443	49897	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.985060930 CEST	443	49897	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.985445976 CEST	49897	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:51.985536098 CEST	443	49897	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:51.985573053 CEST	49897	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:52.030080080 CEST	443	49897	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:52.034547091 CEST	49897	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:52.238759041 CEST	443	49897	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:52.238919973 CEST	443	49897	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:52.239006996 CEST	49897	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:52.239584923 CEST	49897	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:52.239614964 CEST	443	49897	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:52.243510008 CEST	49901	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.243541956 CEST	443	49901	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.243670940 CEST	49901	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.243925095 CEST	49901	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.243944883 CEST	443	49901	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.248877048 CEST	49902	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:52.248894930 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:52.248944044 CEST	49902	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:52.249182940 CEST	49902	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:52.249197006 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:52.303433895 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.303747892 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.303776979 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.307246923 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.307332993 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.307589054 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.307647943 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.307687998 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.315131903 CEST	443	49900	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.315440893 CEST	49900	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.315500021 CEST	443	49900	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.316956997 CEST	443	49900	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.317037106 CEST	49900	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.317348003 CEST	49900	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.317436934 CEST	443	49900	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.317451954 CEST	49900	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.350092888 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.355302095 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.355329990 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.362091064 CEST	443	49900	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.370165110 CEST	49900	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.370220900 CEST	443	49900	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.400326014 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.415771008 CEST	49900	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.548278093 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.548317909 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.548374891 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.548388004 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.548424959 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.551490068 CEST	49899	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.551506042 CEST	443	49899	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.564866066 CEST	443	49900	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.565047026 CEST	443	49900	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.565115929 CEST	49900	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.565525055 CEST	49900	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.565562010 CEST	443	49900	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.620440006 CEST	443	49901	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.622102976 CEST	49901	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.622116089 CEST	443	49901	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.623142004 CEST	443	49901	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.623492956 CEST	49901	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.623492956 CEST	49901	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.623569965 CEST	443	49901	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.623632908 CEST	49901	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.635298014 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:52.635487080 CEST	49902	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:52.635503054 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:52.635968924 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:52.636240959 CEST	49902	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:52.636316061 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:52.636394978 CEST	49902	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:52.666105032 CEST	443	49901	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.678100109 CEST	49901	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.678107977 CEST	443	49901	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.682128906 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:52.721961975 CEST	49901	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.877209902 CEST	443	49901	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.877293110 CEST	443	49901	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:52.877366066 CEST	49901	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.881982088 CEST	49901	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:52.881998062 CEST	443	49901	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.007761955 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:53.007824898 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:53.007868052 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:53.007944107 CEST	49902	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:53.007944107 CEST	49902	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:53.007967949 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:53.007994890 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:53.008140087 CEST	49902	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:53.008147001 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:53.008162975 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:53.008272886 CEST	49902	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:53.008502960 CEST	49902	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:53.008512974 CEST	443	49902	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:53.013031960 CEST	49903	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:53.013117075 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.013210058 CEST	49903	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:53.013411045 CEST	49903	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:53.013436079 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.395390987 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.395674944 CEST	49903	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:53.395734072 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.396235943 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.396574974 CEST	49903	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:53.396661043 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.396696091 CEST	49903	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:53.438119888 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.439287901 CEST	49903	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:53.765924931 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.765959024 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.765969038 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.766028881 CEST	49903	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:53.766055107 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.766068935 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.766120911 CEST	49903	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:53.766128063 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.766145945 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.766187906 CEST	49903	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:53.788633108 CEST	49903	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:53.788670063 CEST	443	49903	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:53.790008068 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:53.790050030 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:53.790304899 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:53.790569067 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:53.790586948 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:53.912482023 CEST	49907	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:53.912560940 CEST	443	49907	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:53.912683010 CEST	49907	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:53.913172007 CEST	49907	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:53.913212061 CEST	443	49907	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.103835106 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.104059935 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.104079008 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.105178118 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.105600119 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.105600119 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.105621099 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.105706930 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.158998013 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.226130962 CEST	443	49907	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.230472088 CEST	49907	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.230499983 CEST	443	49907	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.230966091 CEST	443	49907	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.231605053 CEST	49907	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.231678009 CEST	443	49907	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.231821060 CEST	49907	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.278085947 CEST	443	49907	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.305844069 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.306029081 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.306056023 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.306118965 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.306132078 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.306132078 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.306149960 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.306166887 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.306202888 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.306210995 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.306233883 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.306242943 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.306277037 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.306309938 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.306360006 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.306379080 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.306387901 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.306575060 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.406433105 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.406462908 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.406501055 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.406512022 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.406681061 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.406708956 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.406749964 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.406769991 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.406800032 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.406812906 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.406858921 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.406858921 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.429043055 CEST	443	49907	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.429080963 CEST	443	49907	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.429126024 CEST	443	49907	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.429438114 CEST	49907	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.430144072 CEST	49907	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.430181980 CEST	443	49907	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.432164907 CEST	49910	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.432207108 CEST	443	49910	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.432476044 CEST	49910	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.432476044 CEST	49910	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.432548046 CEST	443	49910	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.451865911 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.451931000 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.451968908 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.451987028 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.452063084 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.452105999 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.452322006 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.452327967 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.453304052 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.507689953 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.507756948 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.507805109 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.507831097 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.507862091 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.507921934 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.508766890 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.508780003 CEST	443	49905	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.508812904 CEST	49905	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.740066051 CEST	443	49910	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.741359949 CEST	49910	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.741417885 CEST	443	49910	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.741955042 CEST	443	49910	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.742470980 CEST	49910	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.742470980 CEST	49910	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.742599964 CEST	443	49910	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.785419941 CEST	49910	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.942362070 CEST	443	49910	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.942399025 CEST	443	49910	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.942456007 CEST	443	49910	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:54.942521095 CEST	49910	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.943044901 CEST	49910	443	192.168.2.4	152.199.4.44
Apr 15, 2024 14:56:54.943084955 CEST	443	49910	152.199.4.44	192.168.2.4
Apr 15, 2024 14:56:55.174101114 CEST	443	49890	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:55.174288988 CEST	443	49890	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:55.174341917 CEST	49890	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:55.183151960 CEST	443	49889	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:55.183352947 CEST	443	49889	13.107.246.51	192.168.2.4
Apr 15, 2024 14:56:55.183407068 CEST	49889	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:57.053282022 CEST	49890	443	192.168.2.4	13.107.213.51
Apr 15, 2024 14:56:57.053316116 CEST	443	49890	13.107.213.51	192.168.2.4
Apr 15, 2024 14:56:57.053354979 CEST	49889	443	192.168.2.4	13.107.246.51
Apr 15, 2024 14:56:57.053371906 CEST	443	49889	13.107.246.51	192.168.2.4
Apr 15, 2024 14:57:01.521275997 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:57:01.521442890 CEST	443	49737	13.107.42.12	192.168.2.4
Apr 15, 2024 14:57:01.521852970 CEST	443	49737	13.107.42.12	192.168.2.4
Apr 15, 2024 14:57:01.522020102 CEST	49912	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:57:01.522058964 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:57:01.522058964 CEST	49737	443	192.168.2.4	13.107.42.12
Apr 15, 2024 14:57:01.522102118 CEST	443	49912	172.217.4.68	192.168.2.4
Apr 15, 2024 14:57:01.526570082 CEST	49912	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:57:01.549484968 CEST	49912	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:57:01.549563885 CEST	443	49912	172.217.4.68	192.168.2.4
Apr 15, 2024 14:57:01.772461891 CEST	443	49912	172.217.4.68	192.168.2.4
Apr 15, 2024 14:57:01.772754908 CEST	49912	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:57:01.772813082 CEST	443	49912	172.217.4.68	192.168.2.4
Apr 15, 2024 14:57:01.773910046 CEST	443	49912	172.217.4.68	192.168.2.4
Apr 15, 2024 14:57:01.774658918 CEST	49912	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:57:01.774847984 CEST	443	49912	172.217.4.68	192.168.2.4
Apr 15, 2024 14:57:01.826232910 CEST	49912	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:57:11.778292894 CEST	443	49912	172.217.4.68	192.168.2.4
Apr 15, 2024 14:57:11.778378010 CEST	443	49912	172.217.4.68	192.168.2.4
Apr 15, 2024 14:57:11.778558969 CEST	49912	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:57:13.052175045 CEST	49912	443	192.168.2.4	172.217.4.68
Apr 15, 2024 14:57:13.052208900 CEST	443	49912	172.217.4.68	192.168.2.4
Apr 15, 2024 14:57:14.121835947 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.121918917 CEST	443	49916	52.108.10.12	192.168.2.4
Apr 15, 2024 14:57:14.122015953 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.122832060 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.122870922 CEST	443	49916	52.108.10.12	192.168.2.4
Apr 15, 2024 14:57:14.514827967 CEST	443	49916	52.108.10.12	192.168.2.4
Apr 15, 2024 14:57:14.515240908 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.515300989 CEST	443	49916	52.108.10.12	192.168.2.4
Apr 15, 2024 14:57:14.516489983 CEST	443	49916	52.108.10.12	192.168.2.4
Apr 15, 2024 14:57:14.517169952 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.517266035 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.517266035 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.517296076 CEST	443	49916	52.108.10.12	192.168.2.4
Apr 15, 2024 14:57:14.517388105 CEST	443	49916	52.108.10.12	192.168.2.4
Apr 15, 2024 14:57:14.564944029 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.777873993 CEST	443	49916	52.108.10.12	192.168.2.4
Apr 15, 2024 14:57:14.778006077 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.778064966 CEST	443	49916	52.108.10.12	192.168.2.4
Apr 15, 2024 14:57:14.778111935 CEST	443	49916	52.108.10.12	192.168.2.4
Apr 15, 2024 14:57:14.778126955 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.778168917 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.826726913 CEST	49916	443	192.168.2.4	52.108.10.12
Apr 15, 2024 14:57:14.826788902 CEST	443	49916	52.108.10.12	192.168.2.4
Apr 15, 2024 14:57:21.242913961 CEST	49927	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.242948055 CEST	443	49927	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.243019104 CEST	49927	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.243051052 CEST	49928	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.243060112 CEST	443	49928	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.243112087 CEST	49928	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.243428946 CEST	49929	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.243447065 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.243768930 CEST	49929	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.243829012 CEST	49930	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.243871927 CEST	443	49930	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.243932962 CEST	49930	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.244266033 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.244290113 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.244343996 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.245105028 CEST	49932	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.245111942 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.245213032 CEST	49932	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.245382071 CEST	49928	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.245399952 CEST	443	49928	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.245609999 CEST	49927	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.245623112 CEST	443	49927	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.246274948 CEST	49929	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.246288061 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.246639967 CEST	49930	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.246682882 CEST	443	49930	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.247447014 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.247458935 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.247939110 CEST	49932	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.247951031 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.614428043 CEST	443	49928	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.614841938 CEST	49928	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.614866018 CEST	443	49928	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.615238905 CEST	443	49928	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.615942955 CEST	49928	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.616115093 CEST	443	49928	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.617048025 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.617086887 CEST	49928	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.617134094 CEST	49928	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.617144108 CEST	443	49928	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.617307901 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.617316961 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.618212938 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.618277073 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.618283033 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.618324995 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.618660927 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.618711948 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.619220018 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.619225979 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.619385004 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.619415998 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.619478941 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.619486094 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.620775938 CEST	443	49927	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.621318102 CEST	49927	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.621328115 CEST	443	49927	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.622515917 CEST	443	49927	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.623050928 CEST	49927	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.623219967 CEST	443	49927	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.623675108 CEST	49927	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.623729944 CEST	443	49927	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.623759031 CEST	49927	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.634706974 CEST	443	49930	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.635000944 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.635257959 CEST	49930	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.635288954 CEST	443	49930	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.635418892 CEST	49932	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.635430098 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.635793924 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.636168957 CEST	443	49930	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.636244059 CEST	49930	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.636264086 CEST	443	49930	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.636317968 CEST	49930	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.636372089 CEST	49929	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.636382103 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.636881113 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.636945009 CEST	49932	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.636953115 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.637013912 CEST	49932	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.637136936 CEST	49930	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.637197971 CEST	443	49930	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.637811899 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.637885094 CEST	49929	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.637893915 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.638000011 CEST	49929	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.638087988 CEST	49932	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.638161898 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.639267921 CEST	49929	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.639349937 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.639791965 CEST	49930	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.639805079 CEST	443	49930	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.639878988 CEST	49930	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.640024900 CEST	49932	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.640033960 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.640198946 CEST	49932	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.640490055 CEST	49929	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.640497923 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.640654087 CEST	49929	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.640691042 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.658107042 CEST	443	49928	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.666166067 CEST	443	49927	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.682102919 CEST	443	49930	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.686084032 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.871519089 CEST	443	49928	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.871750116 CEST	443	49928	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.871807098 CEST	49928	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.873672009 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.873744965 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.873805046 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.877331018 CEST	443	49927	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.877552986 CEST	443	49927	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.877604008 CEST	49927	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.881997108 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.882019997 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.884457111 CEST	49928	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.884473085 CEST	443	49928	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.892612934 CEST	49927	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.892618895 CEST	443	49927	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.900929928 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.901040077 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.901102066 CEST	49932	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.904321909 CEST	49932	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.904334068 CEST	443	49932	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.905836105 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.906050920 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:21.906116009 CEST	49929	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.907649994 CEST	49929	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:21.907659054 CEST	443	49929	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:22.016680956 CEST	443	49930	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:22.016762018 CEST	443	49930	52.108.8.12	192.168.2.4
Apr 15, 2024 14:57:22.018889904 CEST	49930	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:22.021863937 CEST	49930	443	192.168.2.4	52.108.8.12
Apr 15, 2024 14:57:22.021903992 CEST	443	49930	52.108.8.12	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 15, 2024 14:55:58.576045990 CEST	53	56412	1.1.1.1	192.168.2.4
Apr 15, 2024 14:55:58.813359976 CEST	53	55321	1.1.1.1	192.168.2.4
Apr 15, 2024 14:55:59.421504021 CEST	53	53058	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:00.781059980 CEST	59716	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:00.781378984 CEST	58240	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:00.883248091 CEST	53	59716	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:00.883845091 CEST	53	58240	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:01.444587946 CEST	52428	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:01.444834948 CEST	55106	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:01.456543922 CEST	52722	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:01.456684113 CEST	49617	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:01.558063984 CEST	53	49617	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:01.558657885 CEST	53	52722	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:13.258600950 CEST	65383	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:13.259089947 CEST	51387	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:13.361048937 CEST	53	51387	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:13.361912966 CEST	53	65383	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:15.668301105 CEST	58256	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:15.668551922 CEST	50079	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:16.387698889 CEST	53	56293	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:19.808010101 CEST	53776	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:19.808337927 CEST	64712	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:20.804728031 CEST	138	138	192.168.2.4	192.168.2.255
Apr 15, 2024 14:56:26.764027119 CEST	53485	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:26.764144897 CEST	51248	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:26.865308046 CEST	53	51248	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:35.404249907 CEST	53	65329	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:43.071760893 CEST	50656	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:43.072101116 CEST	60299	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:43.241627932 CEST	53	60299	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:43.721363068 CEST	61722	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:43.721508026 CEST	52250	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:43.823718071 CEST	53	52250	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:44.357093096 CEST	65184	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:44.357224941 CEST	52326	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:46.385799885 CEST	61129	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:46.386025906 CEST	52613	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:46.488465071 CEST	53	52613	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:47.062906027 CEST	57694	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:47.063164949 CEST	50440	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:47.164167881 CEST	53	57694	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:47.165108919 CEST	53	50440	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:48.832566977 CEST	56711	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:48.832937002 CEST	64232	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:48.934171915 CEST	53	56711	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:48.934712887 CEST	53	64232	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:49.826965094 CEST	60072	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:49.827142000 CEST	61429	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:49.933572054 CEST	58157	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:49.933804035 CEST	59209	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:56:50.037401915 CEST	53	58157	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:50.037908077 CEST	53	59209	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:51.691342115 CEST	53	63137	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:54.041510105 CEST	53	49738	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:58.305885077 CEST	53	50682	1.1.1.1	192.168.2.4
Apr 15, 2024 14:56:58.388030052 CEST	53	52407	1.1.1.1	192.168.2.4
Apr 15, 2024 14:57:15.676625013 CEST	52427	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:57:15.676810980 CEST	65312	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:57:15.677432060 CEST	63860	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:57:15.677635908 CEST	50255	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:57:15.678066969 CEST	65470	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:57:15.678251982 CEST	49205	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:57:16.105294943 CEST	49546	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:57:16.105401039 CEST	58638	53	192.168.2.4	1.1.1.1
Apr 15, 2024 14:57:26.340847015 CEST	53	50814	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 15, 2024 14:56:43.241777897 CEST	192.168.2.4	1.1.1.1	c273	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 15, 2024 14:56:00.781059980 CEST	192.168.2.4	1.1.1.1	0x2f1c	Standard query (0)	1drv.ms	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:00.781378984 CEST	192.168.2.4	1.1.1.1	0x456b	Standard query (0)	1drv.ms	65	IN (0x0001)	false
Apr 15, 2024 14:56:01.444587946 CEST	192.168.2.4	1.1.1.1	0x315	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:01.444834948 CEST	192.168.2.4	1.1.1.1	0x9dab	Standard query (0)	onedrive.live.com	65	IN (0x0001)	false
Apr 15, 2024 14:56:01.456543922 CEST	192.168.2.4	1.1.1.1	0x918	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:01.456684113 CEST	192.168.2.4	1.1.1.1	0x19b9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 15, 2024 14:56:13.258600950 CEST	192.168.2.4	1.1.1.1	0x41ec	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:13.259089947 CEST	192.168.2.4	1.1.1.1	0x282f	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Apr 15, 2024 14:56:15.668301105 CEST	192.168.2.4	1.1.1.1	0xc4a2	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:15.668551922 CEST	192.168.2.4	1.1.1.1	0x33a6	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Apr 15, 2024 14:56:19.808010101 CEST	192.168.2.4	1.1.1.1	0xb39e	Standard query (0)	js.live.net	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:19.808337927 CEST	192.168.2.4	1.1.1.1	0x1db4	Standard query (0)	js.live.net	65	IN (0x0001)	false
Apr 15, 2024 14:56:26.764027119 CEST	192.168.2.4	1.1.1.1	0x6d7e	Standard query (0)	storage.live.com	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:26.764144897 CEST	192.168.2.4	1.1.1.1	0xab9d	Standard query (0)	storage.live.com	65	IN (0x0001)	false
Apr 15, 2024 14:56:43.071760893 CEST	192.168.2.4	1.1.1.1	0x4a6	Standard query (0)	word.office.com	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:43.072101116 CEST	192.168.2.4	1.1.1.1	0xba0e	Standard query (0)	word.office.com	65	IN (0x0001)	false
Apr 15, 2024 14:56:43.721363068 CEST	192.168.2.4	1.1.1.1	0x4f9d	Standard query (0)	www.microsoft365.com	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:43.721508026 CEST	192.168.2.4	1.1.1.1	0x8a3d	Standard query (0)	www.microsoft365.com	65	IN (0x0001)	false
Apr 15, 2024 14:56:44.357093096 CEST	192.168.2.4	1.1.1.1	0x4508	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:44.357224941 CEST	192.168.2.4	1.1.1.1	0x8b66	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Apr 15, 2024 14:56:46.385799885 CEST	192.168.2.4	1.1.1.1	0xfc85	Standard query (0)	www.microsoft365.com	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:46.386025906 CEST	192.168.2.4	1.1.1.1	0xa5ce	Standard query (0)	www.microsoft365.com	65	IN (0x0001)	false
Apr 15, 2024 14:56:47.062906027 CEST	192.168.2.4	1.1.1.1	0xb5d2	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:47.063164949 CEST	192.168.2.4	1.1.1.1	0x72fe	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 15, 2024 14:56:48.832566977 CEST	192.168.2.4	1.1.1.1	0xb157	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:48.832937002 CEST	192.168.2.4	1.1.1.1	0xa075	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 15, 2024 14:56:49.826965094 CEST	192.168.2.4	1.1.1.1	0x22b1	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:49.827142000 CEST	192.168.2.4	1.1.1.1	0x628c	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Apr 15, 2024 14:56:49.933572054 CEST	192.168.2.4	1.1.1.1	0x496b	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:49.933804035 CEST	192.168.2.4	1.1.1.1	0xf393	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Apr 15, 2024 14:57:15.676625013 CEST	192.168.2.4	1.1.1.1	0xf75b	Standard query (0)	wordonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:57:15.676810980 CEST	192.168.2.4	1.1.1.1	0x8728	Standard query (0)	wordonline.nel.measure.office.net	65	IN (0x0001)	false
Apr 15, 2024 14:57:15.677432060 CEST	192.168.2.4	1.1.1.1	0x7e69	Standard query (0)	wordonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:57:15.677635908 CEST	192.168.2.4	1.1.1.1	0xc358	Standard query (0)	wordonline.nel.measure.office.net	65	IN (0x0001)	false
Apr 15, 2024 14:57:15.678066969 CEST	192.168.2.4	1.1.1.1	0xba96	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:57:15.678251982 CEST	192.168.2.4	1.1.1.1	0x690e	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Apr 15, 2024 14:57:16.105294943 CEST	192.168.2.4	1.1.1.1	0xf12d	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:57:16.105401039 CEST	192.168.2.4	1.1.1.1	0x1aee	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 15, 2024 14:56:00.883248091 CEST	1.1.1.1	192.168.2.4	0x2f1c	No error (0)	1drv.ms		13.107.42.12	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:01.546484947 CEST	1.1.1.1	192.168.2.4	0x315	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:01.546484947 CEST	1.1.1.1	192.168.2.4	0x315	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:01.546484947 CEST	1.1.1.1	192.168.2.4	0x315	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:01.546484947 CEST	1.1.1.1	192.168.2.4	0x315	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:01.546484947 CEST	1.1.1.1	192.168.2.4	0x315	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:01.548228979 CEST	1.1.1.1	192.168.2.4	0x9dab	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:01.548228979 CEST	1.1.1.1	192.168.2.4	0x9dab	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:01.558063984 CEST	1.1.1.1	192.168.2.4	0x19b9	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 15, 2024 14:56:01.558657885 CEST	1.1.1.1	192.168.2.4	0x918	No error (0)	www.google.com		172.217.4.68	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:11.971887112 CEST	1.1.1.1	192.168.2.4	0x66eb	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:11.972765923 CEST	1.1.1.1	192.168.2.4	0xccf2	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:11.972765923 CEST	1.1.1.1	192.168.2.4	0xccf2	No error (0)	sni1gl.wpc.sigmacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:12.024729967 CEST	1.1.1.1	192.168.2.4	0x1309	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:12.025707960 CEST	1.1.1.1	192.168.2.4	0x9e12	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:12.025707960 CEST	1.1.1.1	192.168.2.4	0x9e12	No error (0)	sni1gl.wpc.sigmacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:13.361048937 CEST	1.1.1.1	192.168.2.4	0x282f	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:13.361912966 CEST	1.1.1.1	192.168.2.4	0x41ec	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:13.361912966 CEST	1.1.1.1	192.168.2.4	0x41ec	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:13.361912966 CEST	1.1.1.1	192.168.2.4	0x41ec	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:13.361912966 CEST	1.1.1.1	192.168.2.4	0x41ec	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:14.267478943 CEST	1.1.1.1	192.168.2.4	0x548	No error (0)	word-view.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	word-view.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:14.267478943 CEST	1.1.1.1	192.168.2.4	0x548	No error (0)	word-view.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net	wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:14.267478943 CEST	1.1.1.1	192.168.2.4	0x548	No error (0)	wac-0003.wac-dc-msedge.net		52.108.10.12	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:14.267478943 CEST	1.1.1.1	192.168.2.4	0x548	No error (0)	wac-0003.wac-dc-msedge.net		52.108.11.12	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:15.770667076 CEST	1.1.1.1	192.168.2.4	0xc4a2	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:15.770685911 CEST	1.1.1.1	192.168.2.4	0x33a6	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:18.544945002 CEST	1.1.1.1	192.168.2.4	0x398a	No error (0)	word-view.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:18.544945002 CEST	1.1.1.1	192.168.2.4	0x398a	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:18.544945002 CEST	1.1.1.1	192.168.2.4	0x398a	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:19.909976006 CEST	1.1.1.1	192.168.2.4	0xb39e	No error (0)	js.live.net	odwebp.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:19.909976006 CEST	1.1.1.1	192.168.2.4	0xb39e	No error (0)	odsp-odweb-webfe-lb.namnorthce659178.odsp-odweb-webfe.northcentralus-prod.cosmic.office.net	cosmic-northcentralus-ns-0428ba904c88.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:19.911170006 CEST	1.1.1.1	192.168.2.4	0x1db4	No error (0)	js.live.net	odwebp.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:19.911170006 CEST	1.1.1.1	192.168.2.4	0x1db4	No error (0)	odsp-odweb-webfe-lb.namnorthce659178.odsp-odweb-webfe.northcentralus-prod.cosmic.office.net	cosmic-northcentralus-ns-0428ba904c88.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:26.865308046 CEST	1.1.1.1	192.168.2.4	0xab9d	No error (0)	storage.live.com	common-geo.ha.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:26.865308046 CEST	1.1.1.1	192.168.2.4	0xab9d	No error (0)	common-geo.ha.1drv.com	common-us.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:26.866461039 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	storage.live.com	common-geo.ha.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:26.866461039 CEST	1.1.1.1	192.168.2.4	0x6d7e	No error (0)	common-geo.ha.1drv.com	common-us.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:43.173921108 CEST	1.1.1.1	192.168.2.4	0x4a6	No error (0)	word.office.com	home-redirects.www.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:43.173921108 CEST	1.1.1.1	192.168.2.4	0x4a6	No error (0)	home-redirects.www.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:43.241627932 CEST	1.1.1.1	192.168.2.4	0xba0e	No error (0)	word.office.com	home-redirects.www.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:43.241627932 CEST	1.1.1.1	192.168.2.4	0xba0e	No error (0)	home-redirects.www.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:43.823718071 CEST	1.1.1.1	192.168.2.4	0x8a3d	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:43.823718071 CEST	1.1.1.1	192.168.2.4	0x8a3d	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:43.823740005 CEST	1.1.1.1	192.168.2.4	0x4f9d	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:43.823740005 CEST	1.1.1.1	192.168.2.4	0x4f9d	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:44.459176064 CEST	1.1.1.1	192.168.2.4	0x8b66	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:44.459419012 CEST	1.1.1.1	192.168.2.4	0x4508	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:45.361707926 CEST	1.1.1.1	192.168.2.4	0x44c9	No error (0)	shed.dual-low.part-0023.t-0009.t-msedge.net	part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:45.361707926 CEST	1.1.1.1	192.168.2.4	0x44c9	No error (0)	part-0023.t-0009.t-msedge.net		13.107.213.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:45.361707926 CEST	1.1.1.1	192.168.2.4	0x44c9	No error (0)	part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:46.488154888 CEST	1.1.1.1	192.168.2.4	0xfc85	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:46.488154888 CEST	1.1.1.1	192.168.2.4	0xfc85	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:46.488465071 CEST	1.1.1.1	192.168.2.4	0xa5ce	No error (0)	www.microsoft365.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:46.488465071 CEST	1.1.1.1	192.168.2.4	0xa5ce	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:47.164167881 CEST	1.1.1.1	192.168.2.4	0xb5d2	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:47.164167881 CEST	1.1.1.1	192.168.2.4	0xb5d2	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:47.165108919 CEST	1.1.1.1	192.168.2.4	0x72fe	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:48.934171915 CEST	1.1.1.1	192.168.2.4	0xb157	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:48.934171915 CEST	1.1.1.1	192.168.2.4	0xb157	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:48.934712887 CEST	1.1.1.1	192.168.2.4	0xa075	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:49.928272009 CEST	1.1.1.1	192.168.2.4	0x3306	No error (0)	shed.dual-low.part-0023.t-0009.t-msedge.net	part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:49.928272009 CEST	1.1.1.1	192.168.2.4	0x3306	No error (0)	part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:49.928272009 CEST	1.1.1.1	192.168.2.4	0x3306	No error (0)	part-0023.t-0009.t-msedge.net		13.107.213.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:49.929686069 CEST	1.1.1.1	192.168.2.4	0x22b1	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:49.929686069 CEST	1.1.1.1	192.168.2.4	0x22b1	No error (0)	shed.dual-low.part-0023.t-0009.t-msedge.net	part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:49.929686069 CEST	1.1.1.1	192.168.2.4	0x22b1	No error (0)	part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:49.929686069 CEST	1.1.1.1	192.168.2.4	0x22b1	No error (0)	part-0023.t-0009.t-msedge.net		13.107.213.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:49.929766893 CEST	1.1.1.1	192.168.2.4	0x963a	No error (0)	shed.dual-low.part-0023.t-0009.t-msedge.net	part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:49.929766893 CEST	1.1.1.1	192.168.2.4	0x963a	No error (0)	part-0023.t-0009.t-msedge.net		13.107.213.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:49.929766893 CEST	1.1.1.1	192.168.2.4	0x963a	No error (0)	part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:49.929815054 CEST	1.1.1.1	192.168.2.4	0x628c	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:50.034486055 CEST	1.1.1.1	192.168.2.4	0x5e1e	No error (0)	shed.dual-low.part-0023.t-0009.t-msedge.net	part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:50.034486055 CEST	1.1.1.1	192.168.2.4	0x5e1e	No error (0)	part-0023.t-0009.t-msedge.net		13.107.213.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:50.034486055 CEST	1.1.1.1	192.168.2.4	0x5e1e	No error (0)	part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:50.036266088 CEST	1.1.1.1	192.168.2.4	0x2947	No error (0)	cs1227.wpc.alphacdn.net		192.229.211.199	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:50.037401915 CEST	1.1.1.1	192.168.2.4	0x496b	No error (0)	logincdn.msftauth.net	cs1227.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:50.037401915 CEST	1.1.1.1	192.168.2.4	0x496b	No error (0)	cs1227.wpc.alphacdn.net		192.229.211.199	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:50.037908077 CEST	1.1.1.1	192.168.2.4	0xf393	No error (0)	logincdn.msftauth.net	cs1227.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:50.139451027 CEST	1.1.1.1	192.168.2.4	0x1edc	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:50.139451027 CEST	1.1.1.1	192.168.2.4	0x1edc	No error (0)	sni1gl.wpc.alphacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:50.139949083 CEST	1.1.1.1	192.168.2.4	0x26a6	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:50.142927885 CEST	1.1.1.1	192.168.2.4	0xafad	No error (0)	shed.dual-low.part-0023.t-0009.t-msedge.net	part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:50.142927885 CEST	1.1.1.1	192.168.2.4	0xafad	No error (0)	part-0023.t-0009.t-msedge.net		13.107.213.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:50.142927885 CEST	1.1.1.1	192.168.2.4	0xafad	No error (0)	part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:51.930984020 CEST	1.1.1.1	192.168.2.4	0x3d80	No error (0)	shed.dual-low.part-0023.t-0009.t-msedge.net	part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:56:51.930984020 CEST	1.1.1.1	192.168.2.4	0x3d80	No error (0)	part-0023.t-0009.t-msedge.net		13.107.213.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:56:51.930984020 CEST	1.1.1.1	192.168.2.4	0x3d80	No error (0)	part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:57:15.779831886 CEST	1.1.1.1	192.168.2.4	0x690e	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:57:15.780813932 CEST	1.1.1.1	192.168.2.4	0x8728	No error (0)	wordonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:57:15.780827045 CEST	1.1.1.1	192.168.2.4	0xba96	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:57:15.780837059 CEST	1.1.1.1	192.168.2.4	0xc358	No error (0)	wordonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:57:15.780848026 CEST	1.1.1.1	192.168.2.4	0x7e69	No error (0)	wordonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:57:15.780858994 CEST	1.1.1.1	192.168.2.4	0xf75b	No error (0)	wordonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:57:16.206789970 CEST	1.1.1.1	192.168.2.4	0xf12d	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:57:16.207499981 CEST	1.1.1.1	192.168.2.4	0x1aee	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:57:21.242305040 CEST	1.1.1.1	192.168.2.4	0x65fc	No error (0)	word-view.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 15, 2024 14:57:21.242305040 CEST	1.1.1.1	192.168.2.4	0x65fc	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 15, 2024 14:57:21.242305040 CEST	1.1.1.1	192.168.2.4	0x65fc	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

1drv.ms

onedrive.live.com

fs.microsoft.com

https:

wise-m.public.cdn.office.net

wise.public.cdn.office.net

common.online.office.com

word-view.officeapps.live.com

aadcdn.msauth.net

aadcdn.msftauth.net

logincdn.msauth.net

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	13.107.42.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:01 UTC	691	OUT	GET /w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF HTTP/1.1 Host: 1drv.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:01 UTC	530	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=5954E8D152D2525D!1377&authkey=!AA4RSUvm3y4GL5A&ithint=file%2cdocx&e=HWRoDF X-MSNSERVER: BN3PPF1E858A7D3 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: T03t7kOmwU62rzJMClPlXg.0 X-AsmVersion: UNKNOWN; 19.1396.411.2003 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1A2F3E5036734392955B4C40CE67D328 Ref B: CHI30EDGE0210 Ref C: 2024-04-15T12:56:01Z Date: Mon, 15 Apr 2024 12:56:00 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	13.107.137.11	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:01 UTC	746	OUT	GET /redir?resid=5954E8D152D2525D!1377&authkey=!AA4RSUvm3y4GL5A&ithint=file%2cdocx&e=HWRoDF HTTP/1.1 Host: onedrive.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:02 UTC	1130	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 266 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /edit?id=5954E8D152D2525D!1377&resid=5954E8D152D2525D!1377&ithint=file%2cdocx&authkey=!AA4RSUvm3y4GL5A&wdo=2&cid=5954e8d152d2525d Set-Cookie: E=P:Dw58Z0td3Ig=:GPh6D94JpY96zyLvpq8vYhnEQvTQqW+AqY2MXpU92V8=:F; domain=.live.com; path=/ Set-Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Mon, 15-Apr-2024 11:16:01 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 54c95d4bcd-9cdtq X-ODWebServer: namnorthce811498-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 3B0F64F8D18942AEBD6588C49FBDD655 Ref B: CH1EDGE0819 Ref C: 2024-04-15T12:56:01Z Date: Mon, 15 Apr 2024 12:56:01 GMT Connection: close
2024-04-15 12:56:02 UTC	266	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 65 64 69 74 3f 69 64 3d 35 39 35 34 45 38 44 31 35 32 44 32 35 32 35 44 21 31 33 37 37 26 61 6d 70 3b 72 65 73 69 64 3d 35 39 35 34 45 38 44 31 35 32 44 32 35 32 35 44 21 31 33 37 37 26 61 6d 70 3b 69 74 68 69 6e 74 3d 66 69 6c 65 25 32 63 64 6f 63 78 26 61 6d 70 3b 61 75 74 68 6b 65 79 3d 21 41 41 34 52 53 55 76 6d 33 79 34 47 4c 35 41 26 61 6d 70 3b 77 64 6f 3d 32 26 61 6d 70 3b 63 69 64 3d 35 39 35 34 65 38 64 31 35 32 64 32 35 32 35 64 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/edit?id=5954E8D152D2525D!1377&resid=5954E8D152D2525D!1377&ithint=file%2cdocx&authkey=!AA4RSUvm3y4GL5A&wdo=2&cid=5954e8d152d2525d">here</a>.</h2></bod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	13.107.137.11	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:02 UTC	934	OUT	GET /edit?id=5954E8D152D2525D!1377&resid=5954E8D152D2525D!1377&ithint=file%2cdocx&authkey=!AA4RSUvm3y4GL5A&wdo=2&cid=5954e8d152d2525d HTTP/1.1 Host: onedrive.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: E=P:Dw58Z0td3Ig=:GPh6D94JpY96zyLvpq8vYhnEQvTQqW+AqY2MXpU92V8=:F; xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; xidseq=1
2024-04-15 12:56:04 UTC	884	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html Expires: -1 Location: https://onedrive.live.com/view.aspx?resid=5954E8D152D2525D%211377&authkey=!AA4RSUvm3y4GL5A Set-Cookie: E=P:2pXVZ0td3Ig=:RiOaXR6bWPo74l1FbVTWCNJMEg+8iCLQm4ns4czja+I=:F; domain=.live.com; path=/ Set-Cookie: xidseq=2; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Mon, 15-Apr-2024 11:16:02 GMT; path=/ Set-Cookie: wla42=; domain=live.com; expires=Mon, 22-Apr-2024 12:56:04 GMT; path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 54c95d4bcd-tmrl8 X-ODWebServer: namnorthce811498-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B5CD06AB4CFC4B8E890A9D55AD275AE0 Ref B: CH1EDGE1806 Ref C: 2024-04-15T12:56:02Z Date: Mon, 15 Apr 2024 12:56:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	23.221.246.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-15 12:56:04 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=238065 Date: Mon, 15 Apr 2024 12:56:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	23.221.246.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-15 12:56:04 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=238064 Date: Mon, 15 Apr 2024 12:56:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-15 12:56:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	13.107.137.11	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:04 UTC	878	OUT	GET /view.aspx?resid=5954E8D152D2525D%211377&authkey=!AA4RSUvm3y4GL5A HTTP/1.1 Host: onedrive.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; E=P:2pXVZ0td3Ig=:RiOaXR6bWPo74l1FbVTWCNJMEg+8iCLQm4ns4czja+I=:F; xidseq=2; wla42=
2024-04-15 12:56:07 UTC	797	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 54042 Content-Type: text/html; charset=utf-8 Expires: -1 Set-Cookie: E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; domain=.live.com; path=/ Set-Cookie: xidseq=3; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Mon, 15-Apr-2024 11:16:04 GMT; path=/ Set-Cookie: wla42=; domain=live.com; expires=Mon, 22-Apr-2024 12:56:07 GMT; path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 769dcf856-qm7tq X-ODWebServer: namnorthce067722-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 137BA300B6184EF2A664CC08ACB2951F Ref B: CH1EDGE1908 Ref C: 2024-04-15T12:56:04Z Date: Mon, 15 Apr 2024 12:56:06 GMT Connection: close
2024-04-15 12:56:07 UTC	2292	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 20 20 73 64 78 5f 68 74 6d 6c 22 20 73 74 79 6c 65 3d 22 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 26 23 35 39 3b 63 68 61 72 73 65 74 26 23 36 31 3b 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 44 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" class=" responsive sdx_html" style=""> <head> <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><meta name="title" content="D
2024-04-15 12:56:07 UTC	8192	IN	Data Raw: 62 6c 65 57 61 63 55 73 65 4f 70 65 6e 55 72 6c 49 6e 50 6c 61 63 65 4f 66 45 64 69 74 46 6f 72 55 6e 69 66 69 65 64 5f 45 78 63 65 6c 22 3a 31 2c 22 57 61 63 5f 48 6f 73 74 46 6c 69 67 68 74 5f 50 6f 77 65 72 50 6f 69 6e 74 5f 50 6f 77 65 72 50 6f 69 6e 74 4a 73 41 70 69 56 32 4e 6f 57 72 61 70 70 65 72 22 3a 31 2c 22 57 61 63 5f 48 6f 73 74 46 6c 69 67 68 74 5f 50 6f 77 65 72 50 6f 69 6e 74 5f 50 6f 77 65 72 50 6f 69 6e 74 4a 73 41 70 69 56 32 22 3a 31 2c 22 57 61 63 5f 4a 73 41 70 69 5f 50 6f 77 65 72 50 6f 69 6e 74 5f 45 64 69 74 22 3a 31 2c 22 57 61 63 5f 4a 73 41 70 69 5f 50 6f 77 65 72 50 6f 69 6e 74 5f 45 64 69 74 4e 65 77 22 3a 31 2c 22 45 6e 61 62 6c 65 57 61 63 55 73 65 4f 70 65 6e 55 72 6c 49 6e 50 6c 61 63 65 4f 66 45 64 69 74 46 6f 72 55 6e Data Ascii: bleWacUseOpenUrlInPlaceOfEditForUnified_Excel":1,"Wac_HostFlight_PowerPoint_PowerPointJsApiV2NoWrapper":1,"Wac_HostFlight_PowerPoint_PowerPointJsApiV2":1,"Wac_JsApi_PowerPoint_Edit":1,"Wac_JsApi_PowerPoint_EditNew":1,"EnableWacUseOpenUrlInPlaceOfEditForUn
2024-04-15 12:56:07 UTC	5249	IN	Data Raw: 42 2e 65 72 72 6f 72 3d 65 2c 42 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 6e 2c 69 29 7b 71 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 21 31 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 74 72 79 7b 65 2e 63 61 6c 6c 28 74 2c 72 2c 6e 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 7d 28 69 2c 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 7c 7c 28 72 3d 21 30 2c 28 6e 21 3d 3d 65 3f 70 3a 64 29 28 74 2c 65 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 7c 7c 28 72 3d 21 30 2c 68 28 74 2c 65 29 29 7d 2c 74 2e 5f 6c 61 62 65 6c 29 3b 21 72 26 26 65 26 26 28 72 3d 21 30 2c 68 28 74 2c 65 29 29 7d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 2c 72 29 7b 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d Data Ascii: B.error=e,B}}function o(e,n,i){q(function(t){var r=!1,e=function(e,t,r,n){try{e.call(t,r,n)}catch(e){return e}}(i,n,function(e){r\|\|(r=!0,(n!==e?p:d)(t,e))},function(e){r\|\|(r=!0,h(t,e))},t._label);!r&&e&&(r=!0,h(t,e))},e)}function l(e,t,r){t.constructor===
2024-04-15 12:56:07 UTC	8192	IN	Data Raw: 6c 65 20 69 6e 20 74 68 69 73 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 29 7d 76 61 72 20 74 3d 65 2e 50 72 6f 6d 69 73 65 3b 69 66 28 74 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 3b 74 72 79 7b 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 2e 72 65 73 6f 6c 76 65 28 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 22 5b 6f 62 6a 65 63 74 20 50 72 6f 6d 69 73 65 5d 22 3d 3d 3d 72 26 26 21 74 2e 63 61 73 74 29 72 65 74 75 72 6e 7d 65 2e 50 72 6f 6d 69 73 65 3d 4c 7d 2c 28 4c 2e 50 72 6f 6d 69 73 65 3d 4c 29 2e 70 6f 6c 79 66 69 6c 6c 28 29 2c 4c 7d 29 3b 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3b 21 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 7b 76 61 72 20 72 65 Data Ascii: le in this environment")}var t=e.Promise;if(t){var r=null;try{r=Object.prototype.toString.call(t.resolve())}catch(e){}if("[object Promise]"===r&&!t.cast)return}e.Promise=L},(L.Promise=L).polyfill(),L});var requirejs,require,define;!function(global){var re
2024-04-15 12:56:07 UTC	8192	IN	Data Raw: 50 28 29 7b 76 61 72 20 65 2c 6e 2c 74 3d 31 65 33 2a 67 2e 77 61 69 74 53 65 63 6f 6e 64 73 2c 69 3d 74 26 26 64 2e 73 74 61 72 74 54 69 6d 65 2b 74 3c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 6f 3d 5b 5d 2c 73 3d 5b 5d 2c 61 3d 21 31 2c 75 3d 21 30 3b 69 66 28 21 72 29 7b 72 3d 21 30 3b 65 61 63 68 50 72 6f 70 28 70 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 61 70 2c 72 3d 74 2e 69 64 3b 69 66 28 65 2e 65 6e 61 62 6c 65 64 29 7b 74 2e 69 73 44 65 66 69 6e 65 7c 7c 73 2e 70 75 73 68 28 65 29 3b 69 66 28 21 65 2e 65 72 72 6f 72 29 69 66 28 21 65 2e 69 6e 69 74 65 64 26 26 69 29 69 66 28 53 28 72 29 29 61 3d 6e 3d 21 30 3b 65 6c 73 65 7b 6f 2e 70 75 73 68 28 72 29 3b 77 28 72 29 7d 65 6c 73 65 20 69 66 28 21 65 Data Ascii: P(){var e,n,t=1e3*g.waitSeconds,i=t&&d.startTime+t<(new Date).getTime(),o=[],s=[],a=!1,u=!0;if(!r){r=!0;eachProp(p,function(e){var t=e.map,r=t.id;if(e.enabled){t.isDefine\|\|s.push(e);if(!e.error)if(!e.inited&&i)if(S(r))a=n=!0;else{o.push(r);w(r)}else if(!e
2024-04-15 12:56:07 UTC	8192	IN	Data Raw: 65 74 4f 77 6e 28 6c 2c 65 29 3b 69 66 28 21 74 26 26 21 68 61 73 50 72 6f 70 28 6d 2c 65 29 26 26 6e 26 26 21 6e 2e 69 6e 69 74 65 64 29 7b 69 66 28 21 28 21 67 2e 65 6e 66 6f 72 63 65 44 65 66 69 6e 65 7c 7c 6f 26 26 67 65 74 47 6c 6f 62 61 6c 28 6f 29 29 29 72 65 74 75 72 6e 20 53 28 65 29 3f 76 6f 69 64 20 30 3a 6a 28 6d 61 6b 65 45 72 72 6f 72 28 22 6e 6f 64 65 66 69 6e 65 22 2c 22 4e 6f 20 64 65 66 69 6e 65 20 63 61 6c 6c 20 66 6f 72 20 22 2b 65 2c 6e 75 6c 6c 2c 5b 65 5d 29 29 3b 73 28 5b 65 2c 69 2e 64 65 70 73 7c 7c 5b 5d 2c 69 2e 65 78 70 6f 72 74 73 46 6e 5d 29 7d 50 28 29 7d 2c 6e 61 6d 65 54 6f 55 72 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 69 2c 6f 2c 73 2c 61 2c 75 2c 63 3d 67 65 74 4f 77 6e 28 67 2e 70 6b 67 Data Ascii: etOwn(l,e);if(!t&&!hasProp(m,e)&&n&&!n.inited){if(!(!g.enforceDefine\|\|o&&getGlobal(o)))return S(e)?void 0:j(makeError("nodefine","No define call for "+e,null,[e]));s([e,i.deps\|\|[],i.exportsFn])}P()},nameToUrl:function(e,t,r){var n,i,o,s,a,u,c=getOwn(g.pkg
2024-04-15 12:56:07 UTC	8192	IN	Data Raw: 30 37 64 2e 67 72 6f 75 70 73 2e 63 61 6c 65 6e 64 61 72 2e 6c 69 76 65 2e 63 6f 6d 22 2c 22 67 72 6f 75 70 45 6d 61 69 6c 44 6f 6d 61 69 6e 22 3a 22 5c 75 30 30 34 30 67 72 6f 75 70 73 2e 6c 69 76 65 2e 63 6f 6d 22 2c 22 69 73 44 61 73 68 45 6e 61 62 6c 65 64 22 3a 31 2c 22 69 73 48 74 6d 6c 44 61 73 68 45 6e 61 62 6c 65 64 22 3a 31 2c 22 69 73 44 61 73 68 6c 69 6e 67 45 6e 61 62 6c 65 64 22 3a 31 2c 22 69 73 46 6c 61 73 68 44 61 73 68 45 6e 61 62 6c 65 64 22 3a 31 2c 22 69 73 4e 6f 6e 4d 70 34 46 6c 61 73 68 44 61 73 68 45 6e 61 62 6c 65 64 22 3a 31 2c 22 69 73 48 4c 53 45 6e 61 62 6c 65 64 22 3a 31 2c 22 70 75 62 6c 69 73 68 56 69 64 65 6f 45 6e 61 62 6c 65 64 22 3a 31 2c 22 6f 6e 65 55 6e 69 74 55 70 73 65 6c 6c 45 6e 61 62 6c 65 64 22 3a 31 2c 22 75 Data Ascii: 07d.groups.calendar.live.com","groupEmailDomain":"\u0040groups.live.com","isDashEnabled":1,"isHtmlDashEnabled":1,"isDashlingEnabled":1,"isFlashDashEnabled":1,"isNonMp4FlashDashEnabled":1,"isHLSEnabled":1,"publishVideoEnabled":1,"oneUnitUpsellEnabled":1,"u
2024-04-15 12:56:07 UTC	5541	IN	Data Raw: 45 71 45 44 63 55 72 59 64 52 74 44 67 2e 30 5c 75 30 30 32 36 57 4f 50 49 53 72 63 5c 75 30 30 33 64 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 6f 70 69 2e 6f 6e 65 64 72 69 76 65 2e 63 6f 6d 5c 75 30 30 32 35 32 46 77 6f 70 69 5c 75 30 30 32 35 32 46 66 69 6c 65 73 5c 75 30 30 32 35 32 46 35 39 35 34 45 38 44 31 35 32 44 32 35 32 35 44 5c 75 30 30 32 35 32 31 31 33 37 37 5c 75 30 30 32 36 77 64 65 5c 75 30 30 33 64 64 6f 63 78 5c 75 30 30 32 36 73 63 5c 75 30 30 33 64 68 6f 73 74 5c 75 30 30 32 35 33 44 5c 75 30 30 32 35 32 36 71 74 5c 75 30 30 32 35 33 44 44 65 66 61 75 6c 74 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 77 61 63 49 66 72 61 6d 65 45 64 69 74 5c 75 30 30 32 32 5c 75 30 30 33 61 5c 75 30 30 32 32 Data Ascii: EqEDcUrYdRtDg.0\u0026WOPISrc\u003dhttps\u00253A\u00252F\u00252Fwopi.onedrive.com\u00252Fwopi\u00252Ffiles\u00252F5954E8D152D2525D\u0025211377\u0026wde\u003ddocx\u0026sc\u003dhost\u00253D\u002526qt\u00253DDefault\u0022,\u0022wacIframeEdit\u0022\u003a\u0022

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49751	152.195.19.97	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:12 UTC	604	OUT	GET /wise-m/owl/5mttl/production/100/manifest.js HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onedrive.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:12 UTC	1180	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 285 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/javascript Date: Mon, 15 Apr 2024 12:56:12 GMT Last-Modified: Fri, 12 Apr 2024 10:22:25 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Chicago&ASN=212238&Country=US&Region=IL&RequestIdentifier=102949758218550250707775240971402850139"}],"include_subdomains ":true} Server: ECAcc (chd/0723) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 62c3582b-401e-0055-2c33-8f788b000000 Content-Length: 5826 Connection: close
2024-04-15 12:56:12 UTC	5826	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 66 3d 7b 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 3a 22 32 30 32 34 30 34 30 39 2e 37 22 2c 66 69 6c 65 73 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 30 34 35 31 39 62 31 31 36 32 65 31 65 31 33 38 61 31 61 63 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 6f 52 62 45 74 6b 45 6d 66 36 4b 51 4c 42 4d 74 36 6a 46 41 39 44 78 30 6f 39 56 39 66 73 63 46 69 35 54 7a 7a 37 74 37 75 59 65 36 58 44 34 6c 6d 6d 68 66 4b 58 68 6c 73 50 78 6e 68 70 57 6d 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 62 31 31 30 64 63 34 61 34 31 34 63 30 39 36 38 64 36 64 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 6b 63 70 31 44 37 4b 4f 61 72 52 61 6b 49 70 79 77 4d 69 38 78 78 6c 53 58 2f 47 7a 36 68 74 2b 63 54 49 Data Ascii: (()=>{var f={clientVersion:"20240409.7",files:{"owl.js":["owl.04519b1162e1e138a1ac.js","sha384-oRbEtkEmf6KQLBMt6jFA9Dx0o9V9fscFi5Tzz7t7uYe6XD4lmmhfKXhlsPxnhpWm"],"owl.slim.js":["owl.slim.b110dc4a414c0968d6d0.js","sha384-kcp1D7KOarRakIpywMi8xxlSX/Gz6ht+cTI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:12 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cXwXgbe8zTHMstt&MD=p8yDpKxa HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-15 12:56:12 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e56afaaa-9b5a-4d3f-bc23-81cf5a8e7afc MS-RequestId: b8242c53-fa27-4563-a825-160058dee48c MS-CV: GDrqhL4Aa06Eu+Od.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 15 Apr 2024 12:56:12 GMT Connection: close Content-Length: 24490
2024-04-15 12:56:12 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-15 12:56:12 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	152.195.19.97	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:12 UTC	600	OUT	GET /wise/owl/owl.slim.b110dc4a414c0968d6d0.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onedrive.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:12 UTC	1190	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 330434 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Mon, 15 Apr 2024 12:56:12 GMT Last-Modified: Thu, 11 Apr 2024 17:04:15 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Chicago&ASN=212238&Country=US&Region=IL&RequestIdentifier=172385788234696562562694426720383833065"}],"include_subdomains ":true} Server: ECAcc (chd/0773) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 70990d78-601e-006d-6332-8cdc4b000000 Content-Length: 188302 Connection: close
2024-04-15 12:56:12 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 77 6c 2e 73 6c 69 6d 2e 62 31 31 30 64 63 34 61 34 31 34 63 30 39 36 38 64 36 64 30 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 74 2c 65 2c 6f 2c 69 3d 7b 39 33 32 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 65 2e 64 28 74 2c 7b 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 76 61 72 20 6f 3d 65 28 34 34 30 31 29 2c 69 3d 65 28 38 35 37 29 2c 72 3d 65 28 37 36 35 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 Data Ascii: /! For license information please see owl.slim.b110dc4a414c0968d6d0.js.LICENSE.txt /var Microsoft;!function(){"use strict";var n,t,e,o,i={9323:function(n,t,e){e.d(t,{X:function(){return u}});var o=e(4401),i=e(857),r=e(765),u=function(n){function t(t){v
2024-04-15 12:56:12 UTC	1	IN	Data Raw: 2e Data Ascii: .
2024-04-15 12:56:12 UTC	16383	IN	Data Raw: 6f 70 65 6e 28 22 50 4f 53 54 22 2c 74 2c 65 29 2c 6f 2e 73 65 6e 64 28 6e 29 29 7d 28 6e 2c 74 2c 65 29 7d 7d 28 28 6f 3d 74 2e 63 6e 2e 73 70 6c 69 63 65 28 30 2c 6e 3f 74 2e 61 6e 3a 74 2e 63 6e 2e 6c 65 6e 67 74 68 29 2c 69 3d 74 2e 76 6e 2c 72 3d 74 2e 6c 6e 2c 75 3d 74 2e 64 6e 2c 61 3d 5b 5d 2c 6c 3d 6f 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 76 61 72 20 6f 3d 7b 7d 3b 69 66 28 6f 2e 47 3d 6e 2e 74 61 67 2c 6f 2e 54 3d 6e 2e 74 69 6d 65 73 74 61 6d 70 2d 74 2c 6f 2e 4d 3d 6e 2e 6d 65 73 73 61 67 65 2c 6f 2e 43 3d 6e 2e 63 61 74 65 67 6f 72 79 2c 6e 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 29 7b 76 61 72 20 69 3d 65 2e 66 69 6e 64 49 6e 64 65 78 28 28 66 75 6e 63 74 Data Ascii: open("POST",t,e),o.send(n))}(n,t,e)}}((o=t.cn.splice(0,n?t.an:t.cn.length),i=t.vn,r=t.ln,u=t.dn,a=[],l=o.map((function(n){return function(n,t,e){var o={};if(o.G=n.tag,o.T=n.timestamp-t,o.M=n.message,o.C=n.category,n.correlationId){var i=e.findIndex((funct
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 69 6e 65 57 6f 72 6b 65 72 46 61 69 6c 65 64 55 70 6c 6f 61 64 22 7d 28 73 7c 7c 28 73 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 48 65 61 6c 74 68 44 69 6d 65 6e 73 69 6f 6e 73 3d 22 64 22 2c 6e 2e 50 61 72 74 43 44 69 6d 65 6e 73 69 6f 6e 73 3d 22 61 22 2c 6e 2e 42 53 71 6d 45 72 72 6f 72 73 3d 22 62 22 2c 6e 2e 51 6f 73 45 72 72 6f 72 73 3d 22 65 22 2c 6e 2e 48 65 61 72 74 62 65 61 74 3d 22 68 22 2c 6e 2e 51 6f 73 50 69 6c 6c 61 72 73 3d 22 71 22 2c 6e 2e 4b 70 69 73 3d 22 6b 22 2c 6e 2e 44 69 61 67 6e 6f 73 74 69 63 4c 6f 67 73 3d 22 6c 22 2c 6e 2e 43 6c 69 65 6e 74 53 65 6e 64 54 69 6d 65 3d 22 74 22 7d 28 61 7c 7c 28 61 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 5b 6e 2e 41 74 74 65 6d 70 74 54 6f 55 73 65 46 75 6e 63 Data Ascii: ineWorkerFailedUpload"}(s\|\|(s={})),function(n){n.HealthDimensions="d",n.PartCDimensions="a",n.BSqmErrors="b",n.QosErrors="e",n.Heartbeat="h",n.QosPillars="q",n.Kpis="k",n.DiagnosticLogs="l",n.ClientSendTime="t"}(a\|\|(a={})),function(n){n[n.AttemptToUseFunc
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 63 2e 61 70 70 6c 69 63 61 74 69 6f 6e 55 72 6c 29 29 7b 76 61 72 20 4b 3d 21 21 4d 2c 47 3d 21 21 28 6e 75 6c 6c 3d 3d 4d 3f 76 6f 69 64 20 30 3a 4d 2e 77 61 63 29 2c 56 3d 6e 65 77 20 4d 61 70 28 5b 5b 22 57 6f 70 69 48 6f 73 74 44 61 74 61 50 72 65 73 65 6e 74 22 2c 22 22 2e 63 6f 6e 63 61 74 28 4b 29 5d 2c 5b 22 57 6f 70 69 57 61 63 44 61 74 61 50 72 65 73 65 6e 74 22 2c 22 22 2e 63 6f 6e 63 61 74 28 47 29 5d 5d 29 2c 4a 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 41 72 72 61 79 2e 66 72 6f 6d 28 56 2e 65 6e 74 72 69 65 73 28 29 29 29 2c 7a 3d 7b 77 61 63 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 41 55 2e 43 6f 2c 71 6f 73 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 44 47 2e 51 6f 73 45 72 72 6f 72 5f 56 72 6f 6f 6d 57 6f 70 69 46 61 69 6c 75 72 65 2c 65 72 72 Data Ascii: c.applicationUrl)){var K=!!M,G=!!(null==M?void 0:M.wac),V=new Map([["WopiHostDataPresent","".concat(K)],["WopiWacDataPresent","".concat(G)]]),J=JSON.stringify(Array.from(V.entries())),z={wacErrorName:c.AU.Co,qosErrorName:c.DG.QosError_VroomWopiFailure,err
2024-04-15 12:56:13 UTC	3	IN	Data Raw: 36 31 32 Data Ascii: 612
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 38 30 32 2c 76 2e 57 2e 63 6f 2c 68 2e 47 2e 49 6e 66 6f 2c 22 55 70 64 61 74 65 64 20 48 65 61 6c 74 68 20 65 6e 64 70 6f 69 6e 74 2e 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 3a 20 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2c 20 44 61 74 61 42 6f 75 6e 64 61 72 79 3a 20 22 29 2e 63 6f 6e 63 61 74 28 72 2e 64 61 74 61 42 6f 75 6e 64 61 72 79 2c 22 2c 20 52 65 67 69 6f 6e 3a 20 22 29 2e 63 6f 6e 63 61 74 28 72 2e 72 65 67 69 6f 6e 29 29 7d 29 29 7d 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 75 6c 6c 3d 3d 65 7c 7c 65 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 30 39 38 37 35 30 34 31 2c 76 2e 57 2e 63 6f 2c 68 2e 47 2e 57 61 72 6e 69 6e 67 2c 22 46 61 69 6c 65 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 64 61 74 61 20 62 6f 75 Data Ascii: 802,v.W.co,h.G.Info,"Updated Health endpoint. Environment: ".concat(t,", DataBoundary: ").concat(r.dataBoundary,", Region: ").concat(r.region))}))}})).catch((function(n){null==e\|\|e.ULS.sendTraceTag(509875041,v.W.co,h.G.Warning,"Failed to identify data bou
2024-04-15 12:56:13 UTC	1	IN	Data Raw: 76 Data Ascii: v
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 6f 69 64 20 30 3a 74 2e 74 69 6d 69 6e 67 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 52 65 64 69 72 65 63 74 43 6f 75 6e 74 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 72 65 64 69 72 65 63 74 43 6f 75 6e 74 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 4e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 6f 7d 7d 76 61 72 20 43 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 65 77 20 55 52 4c 28 6e 29 3b 72 65 74 75 72 6e 20 74 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2e 64 65 6c 65 74 65 28 22 77 6f 70 69 73 72 63 22 29 2c 74 2e 68 72 65 66 7d 3b 66 75 6e 63 74 69 6f 6e 20 49 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 Data Ascii: oid 0:t.timing.domComplete)\|\|0,owlFramePageRedirectCount:(null==t?void 0:t.navigation.redirectCount)\|\|0,owlFramePageNavigationType:o}}var C=function(n){var t=new URL(n);return t.searchParams.delete("wopisrc"),t.href};function I(n){return function(t){var e
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 5f 41 70 70 22 2c 6e 2e 55 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 5f 4a 73 41 70 69 22 2c 6e 2e 49 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 5f 54 69 6d 65 6f 75 74 22 7d 28 73 7c 7c 28 73 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 50 65 72 6d 69 73 73 69 6f 6e 45 72 72 6f 72 3d 22 50 65 72 6d 69 73 73 69 6f 6e 45 72 72 6f 72 22 2c 6e 2e 4e 6f 74 46 6f 75 6e 64 3d 22 4e 6f 74 46 6f 75 6e 64 22 2c 6e 2e 54 68 72 6f 74 74 6c 69 6e 67 3d 22 54 68 72 6f 74 74 6c 69 6e 67 22 2c 6e 2e 4f 66 66 6c 69 6e 65 3d 22 4f 66 66 6c 69 6e 65 22 2c 6e 2e 4f 74 68 65 72 3d 22 4f 74 68 65 72 22 7d 28 61 7c 7c Data Ascii: ="WacDocumentJsApiV2Error_App",n.Uo="WacDocumentJsApiV2Error_JsApi",n.Io="WacDocumentJsApiV2Error_Timeout"}(s\|\|(s={})),function(n){n.PermissionError="PermissionError",n.NotFound="NotFound",n.Throttling="Throttling",n.Offline="Offline",n.Other="Other"}(a\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49756	152.195.19.97	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:13 UTC	569	OUT	GET /wise/owl/word.boot.b6d914f9c52088f2a597.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:13 UTC	1191	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 330427 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Mon, 15 Apr 2024 12:56:13 GMT Last-Modified: Thu, 11 Apr 2024 17:04:13 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Chicago&ASN=212238&Country=US&Region=IL&RequestIdentifier=1300563199529377285810331448048230666540"}],"include_subdomains ":true} Server: ECAcc (chd/07A2) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 807e7cd2-201e-000e-6a32-8c41b0000000 Content-Length: 158082 Connection: close
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4d 69 63 72 6f 73 6f 66 74 3f 4d 69 63 72 6f 73 6f 66 74 3a 7b 7d 3b 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 7c 7c 7b 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c Data Ascii: var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.Word=function(e){var t={};function n(i){if(t[i])return t[i].exports;var o=t[i]={i:i,l:!1,exports:{}};return e[i].call(o.exports,o,o.exports,n),o.l
2024-04-15 12:56:13 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 3a 20 61 63 74 69 76 65 29 22 29 2e 6d 61 74 63 68 65 73 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 73 28 29 3d 3d 3d 69 2e 49 45 26 26 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 28 29 21 3d 3d 69 2e 49 45 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 3e 3d 31 31 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 73 28 29 3d 3d 3d 69 2e 49 45 7d 66 75 6e 63 74 69 6f 6e 20 64 Data Ascii: : active)").matches}catch(e){return!1}}function u(){return s()===i.IE&&!function(){if(s()!==i.IE)return!1;if(null==document.documentMode\|\|void 0===document.documentMode)return!1;return document.documentMode>=11}()}function f(){return s()===i.IE}function d
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 63 6f 28 35 39 36 34 34 34 32 33 38 2c 6f 2e 61 2e 58 2c 72 2e 61 2e 49 6e 66 6f 2c 22 48 6f 73 74 49 6e 69 74 44 69 61 67 6e 6f 73 74 69 63 73 3a 20 22 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 2e 64 69 61 67 6e 6f 73 74 69 63 73 2e 48 6f 73 74 49 6e 69 74 44 69 61 67 6e 6f 73 74 69 63 73 29 29 2c 61 2e 53 65 73 73 69 6f 6e 4f 72 69 67 69 6e 3d 66 2e 65 6e 74 72 79 50 6f 69 6e 74 29 2c 6e 26 26 65 2e 55 4c 53 2e 63 6f 28 35 39 35 39 33 37 33 31 33 2c 6f 2e 61 2e 58 2c 72 2e 61 2e 49 6e 66 6f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 29 3b 76 61 72 20 64 3d 74 2e 77 6f 70 69 49 6e 66 6f 3b 64 26 26 64 2e 41 63 63 65 73 73 54 6f 6b 65 6e 26 26 64 2e 41 63 63 65 73 73 54 6f 6b 65 6e 45 78 70 69 72 79 7c 7c 65 2e 55 4c 53 2e 63 6f 28 35 Data Ascii: co(596444238,o.a.X,r.a.Info,"HostInitDiagnostics: "+JSON.stringify(t.diagnostics.HostInitDiagnostics)),a.SessionOrigin=f.entryPoint),n&&e.ULS.co(595937313,o.a.X,r.a.Info,JSON.stringify(n));var d=t.wopiInfo;d&&d.AccessToken&&d.AccessTokenExpiry\|\|e.ULS.co(5
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 29 7d 7d 2c 74 68 69 73 2e 54 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 68 6f 73 74 4b 65 79 3b 61 2e 4d 6f 2e 55 4c 53 2e 63 6f 28 35 37 34 34 33 33 31 37 33 2c 6f 2e 61 2e 58 2c 72 2e 61 2e 49 6e 66 6f 2c 22 47 65 74 48 6f 73 74 4b 65 79 56 61 6c 75 65 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 28 4c 2e 62 29 28 65 29 3b 6e 75 6c 6c 21 3d 6e 26 26 61 2e 77 72 28 6d 2e 61 2e 53 69 2c 7b 68 6f 73 74 4b 65 79 3a 74 2c 68 6f 73 74 56 61 6c 75 65 3a 6e 7d 29 7d 2c 74 68 69 73 2e 79 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 68 6f 73 74 4b 65 79 2c 6e 3d 65 2e 68 6f 73 74 56 61 6c 75 65 3b 61 2e 4d 6f 2e 55 4c 53 2e 63 6f 28 35 37 34 34 33 33 31 37 34 2c 6f 2e 61 2e 58 2c 72 2e Data Ascii: )}},this.Tr=function(e){var t=e.hostKey;a.Mo.ULS.co(574433173,o.a.X,r.a.Info,"GetHostKeyValue ".concat(t));var n=Object(L.b)(e);null!=n&&a.wr(m.a.Si,{hostKey:t,hostValue:n})},this.yr=function(e){var t=e.hostKey,n=e.hostValue;a.Mo.ULS.co(574433174,o.a.X,r.
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 6f 28 35 39 36 31 32 30 37 37 31 2c 6f 2e 61 2e 48 2c 72 2e 61 2e 57 61 72 6e 69 6e 67 2c 65 29 7d 7d 2c 74 68 69 73 2e 75 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 70 61 67 65 43 6f 75 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 76 61 6c 75 65 73 3a 20 50 61 67 65 43 6f 75 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 22 29 3b 75 2e 59 73 3d 65 2e 70 61 67 65 43 6f 75 6e 74 2c 75 2e 77 72 28 6d 2e 61 2e 58 69 2c 7b 7d 29 2c 75 2e 58 73 28 29 7d 2c 74 68 69 73 2e 66 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 65 77 50 61 67 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f Data Ascii: o(596120771,o.a.H,r.a.Warning,e)}},this.uc=function(e){if(!e\|\|"number"!=typeof e.pageCount)throw new TypeError("values: PageCount not found");u.Ys=e.pageCount,u.wr(m.a.Xi,{}),u.Xs()},this.fc=function(e){if(!e\|\|"number"!=typeof e.newPage)throw new TypeErro
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 74 65 6e 74 41 73 73 65 6d 62 6c 79 4d 6f 64 65 7c 7c 4f 62 6a 65 63 74 28 4f 2e 61 29 28 74 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 31 22 29 3b 76 61 72 20 72 3d 65 2e 77 6f 70 69 3b 72 26 26 72 2e 73 6f 75 72 63 65 26 26 4f 62 6a 65 63 74 28 4f 2e 61 29 28 74 2c 22 77 6f 70 69 73 72 63 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 2e 73 6f 75 72 63 65 29 29 3b 76 61 72 20 73 3d 65 2e 62 6f 6f 74 50 61 72 61 6d 73 3b 73 26 26 28 73 2e 64 61 74 61 4c 61 6e 67 75 61 67 65 26 26 4f 62 6a 65 63 74 28 4f 2e 61 29 28 74 2c 22 72 73 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 2e 64 61 74 61 4c 61 6e 67 75 61 67 65 29 29 2c 73 2e 72 65 61 64 4f 6e 6c 79 26 26 4f 62 6a 65 63 74 28 4f 2e 61 29 28 74 2c 22 72 65 61 64 6f 6e Data Ascii: tentAssemblyMode\|\|Object(O.a)(t,"readOnly","1");var r=e.wopi;r&&r.source&&Object(O.a)(t,"wopisrc",encodeURIComponent(r.source));var s=e.bootParams;s&&(s.dataLanguage&&Object(O.a)(t,"rs",encodeURIComponent(s.dataLanguage)),s.readOnly&&Object(O.a)(t,"readon
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 69 76 65 64 29 3b 74 2e 61 70 70 55 6e 6c 6f 61 64 53 74 61 72 74 54 69 6d 65 26 26 21 69 73 4e 61 4e 28 69 29 26 26 28 74 2e 68 6f 73 74 54 6f 41 70 70 50 6f 73 74 4d 65 73 73 61 67 65 4c 61 74 65 6e 63 79 3d 69 2d 74 2e 61 70 70 55 6e 6c 6f 61 64 53 74 61 72 74 54 69 6d 65 29 3b 76 61 72 20 6f 3d 4e 75 6d 62 65 72 28 6e 2e 61 70 70 4d 65 73 73 61 67 65 53 65 6e 74 29 3b 21 69 73 4e 61 4e 28 6f 29 26 26 74 2e 61 70 70 55 6e 6c 6f 61 64 45 6e 64 54 69 6d 65 26 26 28 74 2e 61 70 70 54 6f 48 6f 73 74 50 6f 73 74 4d 65 73 73 61 67 65 4c 61 74 65 6e 63 79 3d 74 2e 61 70 70 55 6e 6c 6f 61 64 45 6e 64 54 69 6d 65 2d 6f 29 3b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 6e 2e 61 70 70 55 6e 6c 6f 61 64 53 74 61 72 74 29 2c 73 3d 4e 75 6d 62 65 72 28 6e 2e 61 70 70 55 Data Ascii: ived);t.appUnloadStartTime&&!isNaN(i)&&(t.hostToAppPostMessageLatency=i-t.appUnloadStartTime);var o=Number(n.appMessageSent);!isNaN(o)&&t.appUnloadEndTime&&(t.appToHostPostMessageLatency=t.appUnloadEndTime-o);var r=Number(n.appUnloadStart),s=Number(n.appU
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 3a 6d 65 2c 62 75 69 6c 64 53 74 61 72 74 53 65 73 73 69 6f 6e 52 65 71 75 65 73 74 50 61 72 61 6d 73 3a 6e 65 7d 2c 74 29 5d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 29 7b 69 66 28 74 29 7b 76 61 72 20 69 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 3b 69 66 28 69 26 26 69 2e 73 65 6e 64 42 65 61 63 6f 6e 29 74 72 79 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 69 2e 73 65 6e 64 42 65 61 63 6f 6e 28 74 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 69 2e 72 65 61 64 79 53 74 61 74 65 21 3d 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 Data Ascii: :me,buildStartSessionRequestParams:ne},t)]}},function(e,t,n){"use strict";function i(e,t,n){if(t){var i=window.navigator;if(i&&i.sendBeacon)try{return void i.sendBeacon(t,e)}catch(e){}!function(e,t,n){var i=new XMLHttpRequest;i.readyState!==XMLHttpRequest
2024-04-15 12:56:13 UTC	16383	IN	Data Raw: 6c 2e 61 2e 62 6f 6f 74 5d 3d 7b 6e 61 3a 64 2e 61 2e 62 6f 6f 74 7d 2c 69 5b 6c 2e 61 2e 63 72 65 61 74 65 4e 65 77 5d 3d 7b 6e 61 3a 64 2e 61 2e 63 72 65 61 74 65 4e 65 77 7d 2c 69 5b 6c 2e 61 2e 64 69 73 70 6f 73 65 5d 3d 7b 6e 61 3a 64 2e 61 2e 64 69 73 70 6f 73 65 7d 2c 69 5b 6c 2e 61 2e 70 6f 73 74 57 61 63 54 6f 6b 65 6e 5d 3d 7b 6e 61 3a 64 2e 61 2e 70 6f 73 74 57 61 63 54 6f 6b 65 6e 7d 2c 69 5b 6c 2e 61 2e 72 65 6e 61 6d 65 5d 3d 7b 6e 61 3a 64 2e 61 2e 72 65 6e 61 6d 65 7d 2c 69 5b 6c 2e 61 2e 73 77 69 74 63 68 4d 6f 64 65 5d 3d 7b 6e 61 3a 64 2e 61 2e 73 77 69 74 63 68 4d 6f 64 65 7d 2c 69 5b 68 2e 61 2e 4a 65 5d 3d 7b 6e 61 3a 64 2e 61 2e 68 61 6e 64 6c 65 42 6f 6f 74 53 74 61 74 65 7d 2c 69 5b 68 2e 61 2e 71 65 5d 3d 7b 6e 61 3a 64 2e 61 2e Data Ascii: l.a.boot]={na:d.a.boot},i[l.a.createNew]={na:d.a.createNew},i[l.a.dispose]={na:d.a.dispose},i[l.a.postWacToken]={na:d.a.postWacToken},i[l.a.rename]={na:d.a.rename},i[l.a.switchMode]={na:d.a.switchMode},i[h.a.Je]={na:d.a.handleBootState},i[h.a.qe]={na:d.a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49757	52.108.9.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:14 UTC	714	OUT	POST /suite/RemoteUls.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&officeserverversion=20240409.7 HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 620 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:14 UTC	620	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 33 31 38 35 37 37 32 34 38 30 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 32 2c 22 4d 22 3a 22 49 73 4f 77 6c 49 46 72 61 6d 65 42 6f 6f 74 54 72 65 61 74 6d 65 6e 74 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 36 35 37 38 35 38 34 2c 22 54 22 3a 33 2c 22 4d 22 3a 22 4c 65 61 6e 20 55 69 20 48 6f 73 74 3a 20 62 6f 6f 74 41 70 70 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 36 31 38 32 30 34 38 2c 22 54 22 3a 34 2c 22 4d 22 3a 22 42 6f 6f 74 41 70 70 3a 20 4c 6f 61 64 20 64 6f 63 75 6d 65 6e 74 20 72 65 74 75 72 6e 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 35 33 37 32 Data Ascii: {"T":1713185772480,"L":[{"G":521164238,"T":2,"M":"IsOwlIFrameBootTreatment: Disabled","C":3027,"D":50},{"G":576578584,"T":3,"M":"Lean Ui Host: bootApp","C":3027,"D":50},{"G":546182048,"T":4,"M":"BootApp: Load document returned","C":3027,"D":50},{"G":55372
2024-04-15 12:56:14 UTC	4222	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS1-ARRAffinity=e1797ab0eca344429b4167286033530dc452b4e65bfc2cb7d8b0cb6cc47478eb;Path=/;Domain=common.online.office.com; samesite=none; secure X-CorrelationId: f7a9d873-434f-44cd-9688-5a70f38a1b46 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 X-OfficeFE: DM3PEPF000149F9 X-OfficeVersion: 16.0.17604.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 5F47FEA12278A67265C91B71CA60D7486F12491F X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524150164,524883107,524883136,524883138,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014671 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_visioslice_control,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: CCECB108FDE3433691F425235538C9BF Ref B: CH1AA2020617039 Ref C: 2024-04-15T12:56:14Z Date: Mon, 15 Apr 2024 12:56:14 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49759	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:14 UTC	1445	OUT	POST /wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 1461 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://onedrive.live.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3
2024-04-15 12:56:14 UTC	1461	OUT	Data Raw: 68 69 67 68 64 70 69 3d 66 61 6c 73 65 26 73 6f 66 74 62 6c 6f 63 6b 65 64 62 72 6f 77 73 65 72 3d 66 61 6c 73 65 26 68 6f 73 74 6e 61 6d 65 3d 6f 6e 65 64 72 69 76 65 63 6f 6d 26 66 65 61 74 75 72 65 5f 73 74 61 74 75 73 3d 25 37 42 25 32 32 4f 66 66 69 63 65 43 6f 6d 45 78 63 65 6c 4a 73 41 70 69 56 32 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 4f 66 66 69 63 65 43 6f 6d 50 70 74 4a 73 41 70 69 56 32 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 4f 66 66 69 63 65 43 6f 6d 57 6f 72 64 4a 73 41 70 69 56 32 25 32 32 25 33 41 25 32 32 31 25 32 32 25 37 44 26 6a 73 61 70 69 62 75 69 6c 64 3d 32 30 32 34 30 34 30 39 2e 37 26 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 34 77 41 71 4e 46 46 44 57 4a 4a 46 61 75 6e 44 66 44 74 4b 70 58 53 47 Data Ascii: highdpi=false&softblockedbrowser=false&hostname=onedrivecom&feature_status=%7B%22OfficeComExcelJsApiV2%22%3A%221%22%2C%22OfficeComPptJsApiV2%22%3A%221%22%2C%22OfficeComWordJsApiV2%22%3A%221%22%7D&jsapibuild=20240409.7&access_token=4wAqNFFDWJJFaunDfDtKpXSG
2024-04-15 12:56:15 UTC	3810	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure X-CorrelationId: e0f38bb6-aa9c-4242-af12-d76f6e72242c X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * Origin-Trial: AiEeevdgKBiq37XjJeDqmaccPhecbEm+bxflC7WOKkv5wnGfbdoVop99b8bLk4oXifN9pukpdcpoR4cipX8rbnEAAABueyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOmZhbHNlLCJmZWF0dXJlIjoiSGFwdGljc0RldmljZSIsImV4cGlyeSI6MTcxMzkxNjgwMH0= Origin-Trial: AhQJUzE5LCv5KHvmQov3fZhTT0W3oRbJWD7uk+pw4EemPcV5dWZzr8wiGtZj/dh81uDAw0I9lZ30j8otVRSRQwYAAABkeyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Origin-Agent-Cluster: ?1 X-OfficeFE: DM3PEPF00014EA7 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff Content-Security-Policy-Report-Only: font-src data: 'self' res-1.cdn.office.net .skype.com .skypeassets.com .msocdn.com sway.com .sway-cdn.com sway-cdn.com .sharepointonline.com spoprod-a.akamaihd.net .azureedge.net fs.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net .growth.office.net .rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com pmservices.cp.microsoft.com paymentinstruments.mp.microsoft.com paymentinstruments-int.mp.microsoft.com edge.payments.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net https:; style-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net sway.com .sway-cdn.com sway-cdn.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net https:; media-src blob: .skype.com .skypeassets.com https:; object-src 'self' blob: https:; child-src blob: ms-word: 'self' https:; worker-src blob: https:; img-src * data: blob: https:; report-uri /wv/reportcsp.ashx Document-Policy: js-profiling Reporting-Endpoints: default="https://word-view.officeapps.live.com/wv/BrowserReportingHandler.ashx" server-timing: prerender;dur=37,render;dur=1,total;dur=38 X-OFFICEFD: DM3PEPF00014EA7 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 4AC3383EEF2042AB9D004E3620AF1D2B Ref B: CH1AA2020614027 Ref C: 2024-04-15T12:56:14Z Date: Mon, 15 Apr 2024 12:56:14 GMT Connection: close
2024-04-15 12:56:15 UTC	880	IN	Data Raw: 33 36 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 20 69 64 3d 22 48 65 61 64 31 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 39 39 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 76 61 72 20 67 5f 66 69 72 73 74 42 79 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 20 66 75 6e 63 74 69 6f 6e 20 68 69 67 68 52 65 73 54 69 6d 65 53 74 61 6d 70 28 29 20 7b Data Ascii: 369<!DOCTYPE html><html><head id="Head1"><meta http-equiv="X-UA-Compatible" content="IE=99" /><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><script type="text/javascript"> var g_firstByte = new Date(); function highResTimeStamp() {
2024-04-15 12:56:15 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 7a 2d 69 6e 64 65 78 3a 31 30 35 31 3b 7d 20 2e 4d 73 4c 6f 67 6f 20 70 61 74 68 2e 63 46 46 46 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 20 2e 4d 73 4c 6f 67 6f 20 70 61 74 68 2e 63 37 34 7b 66 69 6c 6c 3a 23 37 34 37 34 37 34 3b 7d 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 61 63 74 69 76 65 29 7b 2e 4d 73 4c 6f 67 6f 20 70 61 74 68 2e 48 43 7b 66 69 6c 6c 3a 57 69 6e 64 6f 77 54 65 78 74 3b 7d 7d 20 3a 72 6f 6f 74 20 7b 20 2d 2d 61 6e 69 6d 2d 63 6f 6e 74 61 69 6e 65 72 2d 77 69 64 74 68 3a 20 32 32 30 70 78 3b 20 2d 2d 61 6e 69 6d 2d 63 6f 6e 74 61 69 6e 65 72 2d 68 65 69 67 68 74 3a Data Ascii: 2000ems:flex-end;flex-wrap:wrap;z-index:1051;} .MsLogo path.cFFF{fill:#fff;} .MsLogo path.c74{fill:#747474;} @media screen and (-ms-high-contrast: active){.MsLogo path.HC{fill:WindowText;}} :root { --anim-container-width: 220px; --anim-container-height:
2024-04-15 12:56:15 UTC	3794	IN	Data Raw: 65 63 62 0d 0a 26 26 28 5f 62 42 2e 72 53 52 3d 21 30 2c 5f 62 42 2e 73 65 6e 64 42 65 61 63 6f 6e 28 6e 2c 22 52 65 73 6f 75 72 63 65 44 6f 77 6e 6c 6f 61 64 53 75 63 63 65 73 73 22 29 29 7d 3b 5f 62 42 2e 73 65 6e 64 52 65 73 6f 75 72 63 65 46 61 69 6c 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 5f 62 42 2e 72 46 52 3d 3d 3d 21 31 26 26 28 5f 62 42 2e 72 46 52 3d 21 30 2c 5f 62 42 2e 73 65 6e 64 42 65 61 63 6f 6e 28 6e 2c 22 52 65 73 6f 75 72 63 65 44 6f 77 6e 6c 6f 61 64 46 61 69 6c 75 72 65 22 29 29 7d 3b 5f 62 42 2e 73 65 6e 64 52 44 46 4b 70 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 5f 62 42 2e 73 53 3d 21 31 3b 5f 62 42 2e 73 65 6e 64 42 65 61 63 6f 6e 28 6e 2c 22 52 65 73 6f 75 72 63 65 44 6f 77 6e 6c 6f 61 64 46 61 69 6c 75 72 65 22 29 7d 3b Data Ascii: ecb&&(_bB.rSR=!0,_bB.sendBeacon(n,"ResourceDownloadSuccess"))};_bB.sendResourceFailure=function(n){_bB.rFR===!1&&(_bB.rFR=!0,_bB.sendBeacon(n,"ResourceDownloadFailure"))};_bB.sendRDFKpi=function(n){_bB.sS=!1;_bB.sendBeacon(n,"ResourceDownloadFailure")};
2024-04-15 12:56:15 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 3a 34 34 33 2f 6f 66 66 69 63 65 6f 6e 6c 69 6e 65 2f 77 76 2f 73 2f 68 32 45 30 39 32 32 34 34 44 41 39 39 32 46 45 30 5f 72 65 73 6f 75 72 63 65 73 2f 31 30 33 33 2f 57 6f 72 64 56 69 65 77 65 72 2e 63 73 73 27 29 3b 22 20 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 76 61 72 20 72 64 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 7d 72 65 74 75 72 6e 20 6e 2e 61 64 64 53 63 72 69 70 74 54 6f 4c 69 73 74 4f 66 44 6f 77 6e 6c 6f 61 64 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 73 63 72 69 70 74 73 54 6f 44 6f 77 6e 6c 6f 61 64 5b 6e 5d 3d 21 31 3b Data Ascii: 2000n.office.net:443/officeonline/wv/s/h2E092244DA992FE0_resources/1033/WordViewer.css');" /><script type='text/javascript'>var rd;(function(n){var t=function(){function n(){}return n.addScriptToListOfDownloads=function(n){this.scriptsToDownload[n]=!1;
2024-04-15 12:56:15 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 65 67 6f 65 20 55 49 27 2c 27 53 65 67 6f 65 20 55 49 20 57 65 62 20 28 57 65 73 74 20 45 75 72 6f 70 65 61 6e 29 27 2c 27 53 65 67 6f 65 20 55 49 27 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 52 6f 62 6f 74 6f 2c 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 36 31 36 31 36 31 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 23 48 65 61 64 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 2e 4f 6e 65 44 72 69 76 65 48 6f 73 74 20 2e 73 61 76 65 53 74 61 74 75 73 53 74 Data Ascii: 2000ont-family:'Segoe UI','Segoe UI Web (West European)','Segoe UI',-apple-system,BlinkMacSystemFont,Roboto,'Helvetica Neue',sans-serif;color:#616161;white-space:nowrap;text-overflow:ellipsis;overflow:hidden}#HeaderPlaceholder.OneDriveHost .saveStatusSt
2024-04-15 12:56:15 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 3d 22 67 65 6f 6d 65 74 72 69 63 50 72 65 63 69 73 69 6f 6e 22 3e 3c 70 61 74 68 20 64 3d 22 4d 20 35 30 2e 30 35 20 31 33 34 2e 38 39 20 63 20 30 2e 31 34 20 31 2e 31 32 20 30 2e 32 31 20 32 2e 31 37 20 30 2e 32 38 20 33 2e 30 31 20 68 20 30 2e 31 34 20 63 20 30 2e 30 37 20 2d 30 2e 38 34 20 30 2e 32 31 20 2d 31 2e 38 32 20 30 2e 34 32 20 2d 32 2e 39 34 20 73 20 30 2e 33 35 20 2d 32 2e 31 20 30 2e 35 36 20 2d 32 2e 38 37 20 6c 20 37 2e 38 34 20 2d 33 33 2e 37 34 20 68 20 31 30 2e 31 35 20 4c 20 37 37 2e 35 36 20 31 33 31 2e 36 20 63 20 30 2e 34 39 20 32 2e 31 20 30 2e 38 34 20 34 2e 31 33 20 30 2e 39 38 20 36 2e 33 20 68 20 30 2e 31 34 20 63 20 30 2e 31 34 20 2d 32 2e 30 33 20 30 2e 34 32 20 2d 34 2e 30 36 20 30 2e 38 34 20 2d 36 2e 30 Data Ascii: 2000="geometricPrecision"><path d="M 50.05 134.89 c 0.14 1.12 0.21 2.17 0.28 3.01 h 0.14 c 0.07 -0.84 0.21 -1.82 0.42 -2.94 s 0.35 -2.1 0.56 -2.87 l 7.84 -33.74 h 10.15 L 77.56 131.6 c 0.49 2.1 0.84 4.13 0.98 6.3 h 0.14 c 0.14 -2.03 0.42 -4.06 0.84 -6.0
2024-04-15 12:56:15 UTC	4601	IN	Data Raw: 31 31 66 31 0d 0a 6e 79 6d 6f 75 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 67 5f 69 73 44 75 6c 6c 53 63 72 69 70 74 3d 74 72 75 65 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 3a 34 34 33 2f 6f 66 66 69 63 65 6f 6e 6c 69 6e 65 2f 77 76 2f 73 2f 68 45 45 32 41 32 34 44 30 42 39 37 39 42 36 46 30 5f 41 70 70 5f 53 63 72 69 70 74 73 2f 31 30 33 33 2f 63 6f 6d 6d 6f 6e 2d 69 6e 74 6c 2e 6d 69 6e 2e 6a 73 27 20 64 65 66 65 72 20 6f 6e 6c 6f 61 64 3d 27 67 5f 6a 73 4c 54 20 3d 20 6e 65 77 20 44 61 74 Data Ascii: 11f1nymous'></script><script type='text/javascript'>g_isDullScript=true;</script><script type='text/javascript' src='https://res-1.cdn.office.net:443/officeonline/wv/s/hEE2A24D0B979B6F0_App_Scripts/1033/common-intl.min.js' defer onload='g_jsLT = new Dat
2024-04-15 12:56:15 UTC	4046	IN	Data Raw: 66 63 37 0d 0a 3c 64 69 76 20 69 64 3d 22 46 69 72 73 74 50 61 67 65 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 70 78 3b 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 30 30 3b 68 65 69 67 68 74 3a 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 38 38 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 39 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 39 70 78 3b 72 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 22 3e 0d 0a 09 3c 69 6d 67 20 73 72 63 3d 22 52 65 73 52 65 61 64 65 72 2e 61 73 68 78 3f 6e 3d 70 31 2e 69 6d 67 26 57 4f 50 49 73 72 63 3d 68 74 74 70 73 25 33 41 25 Data Ascii: fc7<div id="FirstPageContainer" style="left:0;text-align:center;width:1px;bottom:24px;z-index:900;height:1px;position:absolute;top:88px;padding-right:29px;padding-left:29px;right:0;overflow:hidden;"><img src="ResReader.ashx?n=p1.img&WOPIsrc=https%3A%
2024-04-15 12:56:15 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 72 73 5f 6d 32 31 38 39 22 20 20 64 3d 22 4d 20 31 31 35 32 20 31 36 36 34 20 68 20 2d 31 30 32 34 20 71 20 2d 32 36 20 30 20 2d 34 39 20 2d 31 30 20 71 20 2d 32 34 20 2d 31 30 20 2d 34 31 20 2d 32 38 20 71 20 2d 31 38 20 2d 31 37 20 2d 32 38 20 2d 34 31 20 71 20 2d 31 30 20 2d 32 33 20 2d 31 30 20 2d 34 39 20 76 20 2d 31 30 32 34 20 71 20 30 20 2d 32 36 20 31 30 20 2d 35 30 20 71 20 31 30 20 2d 32 33 20 32 38 20 2d 34 31 20 71 20 31 37 20 2d 31 37 20 34 31 20 2d 32 37 20 71 20 32 33 20 2d 31 30 20 34 39 20 2d 31 30 20 68 20 31 30 32 34 20 71 20 32 36 20 30 20 35 30 20 31 30 20 71 20 32 33 20 31 30 20 34 31 20 32 37 20 71 20 31 37 20 31 38 20 32 37 20 34 31 20 71 20 31 30 20 32 34 20 31 30 20 35 30 20 76 20 31 30 32 34 20 71 20 30 20 32 Data Ascii: 2000rs_m2189" d="M 1152 1664 h -1024 q -26 0 -49 -10 q -24 -10 -41 -28 q -18 -17 -28 -41 q -10 -23 -10 -49 v -1024 q 0 -26 10 -50 q 10 -23 28 -41 q 17 -17 41 -27 q 23 -10 49 -10 h 1024 q 26 0 50 10 q 23 10 41 27 q 17 18 27 41 q 10 24 10 50 v 1024 q 0 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49760	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:14 UTC	844	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 109 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3
2024-04-15 12:56:14 UTC	109	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 57 6f 72 64 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 32 30 32 34 30 34 30 39 2e 37 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 69 6e 69 74 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"Word\",\"build\":\"20240409.7\",\"state\":\"init\"}"}
2024-04-15 12:56:14 UTC	1121	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 55103a6c-0576-49fa-a455-19912d1644d8 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BN3PEPF0000210E X-OfficeVersion: 16.0.17611.41019 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_wordcapacity_control,afd_pptcapacity,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest X-MSEdge-Ref: Ref A: B752FCE0C07340849AAB8BA48700E210 Ref B: CH1AA2020613019 Ref C: 2024-04-15T12:56:14Z Date: Mon, 15 Apr 2024 12:56:13 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49761	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:14 UTC	870	OUT	POST /wv/RemoteUls.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&officeserverversion=20240409.7 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 4867 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3
2024-04-15 12:56:14 UTC	4867	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 33 31 38 35 37 37 33 34 34 31 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 33 35 30 36 38 33 37 2c 22 54 22 3a 2d 35 2c 22 4d 22 3a 22 7b 5c 22 63 72 79 70 74 6f 5c 22 3a 74 72 75 65 2c 5c 22 70 65 72 66 4e 6f 77 5c 22 3a 66 61 6c 73 65 2c 5c 22 65 78 63 65 70 74 69 6f 6e 73 5c 22 3a 5b 5d 7d 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 34 36 35 34 35 34 32 2c 22 54 22 3a 2d 32 2c 22 4d 22 3a 22 52 75 6e 6e 69 6e 67 20 66 6c 6f 77 3a 20 62 6f 6f 74 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 34 36 35 34 35 34 31 2c 22 54 22 3a 2d 31 2c 22 4d 22 3a 22 52 61 69 73 69 6e 67 20 65 76 65 6e 74 3a 20 4d 6f 64 65 53 77 69 74 63 68 65 64 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 Data Ascii: {"T":1713185773441,"L":[{"G":593506837,"T":-5,"M":"{\"crypto\":true,\"perfNow\":false,\"exceptions\":[]}","C":379,"D":50},{"G":574654542,"T":-2,"M":"Running flow: boot","C":379,"D":50},{"G":574654541,"T":-1,"M":"Raising event: ModeSwitched","C":379,"D":50
2024-04-15 12:56:14 UTC	4303	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 2960b1ae-dd31-430d-b814-c4b05c6ec270 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BN3PEPF00004B0B X-OfficeVersion: 16.0.17611.41019 X-OfficeCluster: PUS9 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 5F47FEA12278A67265C91B71CA60D7486F12491F X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524150164,524883107,524883136,524883138,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-CH1r8a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 2CB388DFC0B7468BA03584F4DEA11847 Ref B: CH1AA2020616003 Ref C: 2024-04-15T12:56:14Z Date: Mon, 15 Apr 2024 12:56:14 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49770	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:16 UTC	1846	OUT	GET /wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&v=00000000-0000-0000-0000-000000000802&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&splashscreen=1&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:16 UTC	1101	IN	HTTP/1.1 404 Not Found Cache-Control: no-cache Pragma: no-cache Content-Length: 1245 Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c945623e-b194-4258-94b4-82530ee969ea X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A72 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014A72 X-WacFrontEnd: DM3PEPF00014A72 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 2732C943A10743DBB677A72A60512C45 Ref B: CH1AA2020613037 Ref C: 2024-04-15T12:56:16Z Date: Mon, 15 Apr 2024 12:56:16 GMT Connection: close
2024-04-15 12:56:16 UTC	1245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49785	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:17 UTC	1846	OUT	GET /wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&v=00000000-0000-0000-0000-000000000802&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&splashscreen=1&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:18 UTC	1059	IN	HTTP/1.1 404 Not Found Cache-Control: no-cache Pragma: no-cache Content-Length: 1245 Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 69193291-5f96-416a-9bc3-dc24dfbfafc8 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A9F X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014A9F X-WacFrontEnd: DM3PEPF00014A9F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: F515D77F3324411DA5B63DA9A3DF07D9 Ref B: CH1AA2020616019 Ref C: 2024-04-15T12:56:17Z Date: Mon, 15 Apr 2024 12:56:18 GMT Connection: close
2024-04-15 12:56:18 UTC	279	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil
2024-04-15 12:56:18 UTC	966	IN	Data Raw: 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 7d 0d 0a 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 20 31 30 70 78 20 31 35 70 78 3b 7d 20 0d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f Data Ascii: .</title><style type="text/css">...body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;colo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49788	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:18 UTC	1507	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 9267 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:18 UTC	9267	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:56:18 UTC	1017	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 168702a5-3a3b-4428-b130-e5d39adb671c X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014AAD X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: A808707CBAFE48E498DC91D7487930CE Ref B: CH1AA2020611039 Ref C: 2024-04-15T12:56:18Z Date: Mon, 15 Apr 2024 12:56:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49789	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:18 UTC	1997	OUT	GET /wv/docdatahandler.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&type=png&o15=1&ui=en-US HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" haep: 6 X-WacFrontEnd: DM3PEPF00014EA7 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c sec-ch-ua-mobile: ?0 X-OfficeVersion: 16.0.17609.41003 X-Key: fOrlPPhmf0/WlZFESZRxB33PqQotUFM6xrNn+D1TBxY=;vNxXA4UecP3qHQu2Uvikk48PL7ZoGH+04BSGa8YRTRs=,638487825749138613 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Requested-With: XMLHttpRequest X-UserType: WOPI X-xhr: 1 X-WacCluster: PUS1 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:18 UTC	1403	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 399 Content-Type: text/xml; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-ROUTED-TO-TARGET-SERVER-PATH: WAC_WFE_AFFINITY_TARGET_URL X-CorrelationId: be374265-5d14-464d-beac-f7869be41675 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-CorrelationId: be374265-5d14-464d-beac-f7869be41675 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014EA7 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014EA6 X-WacFrontEnd: DM3PEPF00014EA7 X-Powered-By: ARR/3.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 2D3B7CA067E14F96AF4F9265F93AC0EA Ref B: CH1AA2020611031 Ref C: 2024-04-15T12:56:18Z Date: Mon, 15 Apr 2024 12:56:17 GMT Connection: close
2024-04-15 12:56:18 UTC	399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 64 6f 63 64 61 74 61 3e 3c 73 74 61 74 75 73 3e 43 61 6e 74 46 69 6e 64 53 6f 75 72 63 65 44 6f 63 75 6d 65 6e 74 3c 2f 73 74 61 74 75 73 3e 3c 64 69 61 6c 6f 67 3e 3c 74 69 74 6c 65 3e 7b 77 65 62 61 70 70 66 75 6c 6c 7d 3c 2f 74 69 74 6c 65 3e 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 53 6f 72 72 79 2c 20 7b 77 65 62 61 70 70 73 68 6f 72 74 7d 20 72 61 6e 20 69 6e 74 6f 20 61 20 70 72 6f 62 6c 65 6d 20 6f 70 65 6e 69 6e 67 20 74 68 69 73 20 7b 64 6f 63 74 79 70 65 7d 20 69 6e 20 61 20 62 72 6f 77 73 65 72 2e 20 54 6f 20 76 69 65 77 20 74 68 69 73 20 7b 64 6f 63 74 79 70 65 7d 20 70 6c 65 61 73 65 20 6f 70 65 6e 20 69 74 20 69 6e 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><docdata><status>CantFindSourceDocument</status><dialog><title>{webappfull}</title><description>Sorry, {webappshort} ran into a problem opening this {doctype} in a browser. To view this {doctype} please open it in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49798	52.108.9.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:18 UTC	745	OUT	GET /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:19 UTC	986	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: f347bcf2-991b-4987-b743-4575f35e8790 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014AAC X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: CD418D986C3B4B6BA1F07B3FD9235DFC Ref B: CH1AA2020610053 Ref C: 2024-04-15T12:56:18Z Date: Mon, 15 Apr 2024 12:56:18 GMT Connection: close
2024-04-15 12:56:19 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-04-15 12:56:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49796	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:18 UTC	1846	OUT	GET /wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&v=00000000-0000-0000-0000-000000000802&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&splashscreen=1&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:19 UTC	1157	IN	HTTP/1.1 404 Not Found Cache-Control: no-cache Pragma: no-cache Content-Length: 1245 Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 93e4e148-3d7b-4ca4-95f6-ff9463ebbdac X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A9F X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014A9F X-WacFrontEnd: DM3PEPF00014A9F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control X-MSEdge-Ref: Ref A: A02A011B5DD0450BAEF3E34F476E73DC Ref B: CH1AA2020616019 Ref C: 2024-04-15T12:56:19Z Date: Mon, 15 Apr 2024 12:56:19 GMT Connection: close
2024-04-15 12:56:19 UTC	1245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49799	52.108.9.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:18 UTC	1015	OUT	GET /wv/docdatahandler.ashx?WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffiles%2F5954E8D152D2525D%211377&access_token=4wAqNFFDWJJFaunDfDtKpXSGchWXQ%5Fd4NZs2LWPwb9AsMaotT5kfYyd8yiWDw%5ForbuFgX7rHja3pdVsiOkzd%2DteDaAFRX6XEbL%5Fa2%2DI4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g&access_token_ttl=1713617766976&z=aNTk1NEU4RDE1MkQyNTI1RCExMzc3LjM1&type=png&o15=1&ui=en-US HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:20 UTC	1131	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 399 Content-Type: text/xml; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 5875678c-a4e4-4cf1-9ac7-644522a8846b X-UserSessionId: 5875678c-a4e4-4cf1-9ac7-644522a8846b Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014D11 X-OfficeVersion: 16.0.17611.41019 X-OfficeCluster: PUS10 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014D11 X-WacFrontEnd: DM3PEPF00014D11 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest X-MSEdge-Ref: Ref A: 5F25B33CFC4D475FB74074A16283C78F Ref B: CH1AA2020620023 Ref C: 2024-04-15T12:56:19Z Date: Mon, 15 Apr 2024 12:56:19 GMT Connection: close
2024-04-15 12:56:20 UTC	399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 64 6f 63 64 61 74 61 3e 3c 73 74 61 74 75 73 3e 43 61 6e 74 46 69 6e 64 53 6f 75 72 63 65 44 6f 63 75 6d 65 6e 74 3c 2f 73 74 61 74 75 73 3e 3c 64 69 61 6c 6f 67 3e 3c 74 69 74 6c 65 3e 7b 77 65 62 61 70 70 66 75 6c 6c 7d 3c 2f 74 69 74 6c 65 3e 3c 64 65 73 63 72 69 70 74 69 6f 6e 3e 53 6f 72 72 79 2c 20 7b 77 65 62 61 70 70 73 68 6f 72 74 7d 20 72 61 6e 20 69 6e 74 6f 20 61 20 70 72 6f 62 6c 65 6d 20 6f 70 65 6e 69 6e 67 20 74 68 69 73 20 7b 64 6f 63 74 79 70 65 7d 20 69 6e 20 61 20 62 72 6f 77 73 65 72 2e 20 54 6f 20 76 69 65 77 20 74 68 69 73 20 7b 64 6f 63 74 79 70 65 7d 20 70 6c 65 61 73 65 20 6f 70 65 6e 20 69 74 20 69 6e 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><docdata><status>CantFindSourceDocument</status><dialog><title>{webappfull}</title><description>Sorry, {webappshort} ran into a problem opening this {doctype} in a browser. To view this {doctype} please open it in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49797	52.108.9.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:18 UTC	781	OUT	POST /suite/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 1120 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PUS1-ARRAffinity=e1797ab0eca344429b4167286033530dc452b4e65bfc2cb7d8b0cb6cc47478eb
2024-04-15 12:56:18 UTC	1120	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 63 22 3a 22 55 6e 69 66 69 65 64 55 69 48 6f 73 74 22 2c 22 64 22 3a 22 55 4e 49 46 49 45 44 55 49 48 4f 53 54 22 2c 22 6a 22 3a 22 32 30 32 34 30 34 30 39 2e 37 22 2c 22 72 22 3a 66 61 6c 73 65 2c 22 73 22 3a 22 22 2c 22 77 22 3a 22 65 30 66 33 38 62 62 36 2d 61 61 39 63 2d 34 32 34 32 2d 61 66 31 32 2d 64 37 36 66 36 65 37 32 32 34 32 63 22 2c 22 78 22 3a 22 4f 74 68 65 72 22 2c 22 7a 22 3a 22 6f 6e 65 64 72 69 76 65 63 6f 6d 22 2c 22 61 63 22 3a 22 65 64 69 74 61 73 70 78 22 7d 2c 22 61 22 3a 7b 22 55 55 49 48 54 61 72 67 65 74 41 70 70 22 3a 22 57 6f 72 64 22 2c 22 48 65 61 6c 74 68 53 6f 75 72 63 65 43 6f 6d 70 6f 6e 65 6e 74 22 3a 22 55 6e 69 66 69 65 64 55 69 48 6f 73 74 22 2c 22 57 69 73 65 45 Data Ascii: {"d":{"a":"Word","c":"UnifiedUiHost","d":"UNIFIEDUIHOST","j":"20240409.7","r":false,"s":"","w":"e0f38bb6-aa9c-4242-af12-d76f6e72242c","x":"Other","z":"onedrivecom","ac":"editaspx"},"a":{"UUIHTargetApp":"Word","HealthSourceComponent":"UnifiedUiHost","WiseE
2024-04-15 12:56:19 UTC	1053	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c2f5d1a5-84fe-42ad-9350-222ae4c1ceef X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 X-OfficeFE: DM3PEPF000149F9 X-OfficeVersion: 16.0.17604.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014689 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest X-MSEdge-Ref: Ref A: 7FF58735DF2444C69C6886BE97EF6342 Ref B: CH1AA2020617009 Ref C: 2024-04-15T12:56:18Z Date: Mon, 15 Apr 2024 12:56:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49800	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:18 UTC	978	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 116 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:18 UTC	116	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 57 6f 72 64 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 32 30 32 34 30 34 30 39 2e 37 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 62 6f 6f 74 46 61 69 6c 75 72 65 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"Word\",\"build\":\"20240409.7\",\"state\":\"bootFailure\"}"}
2024-04-15 12:56:19 UTC	999	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 424ab0bd-8f13-4c82-886b-b9b69e7d6f40 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: CY4PEPF00010F19 X-OfficeVersion: 16.0.17611.41019 X-OfficeCluster: PUS5 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 9F1BAE9991194EC5BB03956A99E6EC10 Ref B: CH1AA2020612017 Ref C: 2024-04-15T12:56:19Z Date: Mon, 15 Apr 2024 12:56:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49801	52.108.9.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:19 UTC	806	OUT	POST /suite/RemoteUls.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&officeserverversion=20240409.7 HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 1478 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PUS1-ARRAffinity=e1797ab0eca344429b4167286033530dc452b4e65bfc2cb7d8b0cb6cc47478eb
2024-04-15 12:56:19 UTC	1478	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 33 31 38 35 37 37 32 35 33 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 38 33 34 35 38 32 2c 22 54 22 3a 38 39 36 2c 22 4d 22 3a 22 4a 53 41 50 49 20 66 65 74 63 68 20 73 75 63 63 65 65 64 65 64 20 66 6f 72 20 57 6f 72 64 20 62 6f 6f 74 73 74 72 61 70 70 65 72 2e 20 4f 6e 52 65 74 72 79 3a 20 66 61 6c 73 65 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 32 30 7d 2c 7b 22 47 22 3a 35 35 36 36 31 33 38 39 35 2c 22 54 22 3a 39 30 31 2c 22 4d 22 3a 22 67 65 74 44 69 61 67 6e 6f 73 74 69 63 73 3a 20 5b 53 65 73 73 69 6f 6e 4f 72 69 67 69 6e 3a 20 4f 74 68 65 72 5d 5b 54 61 62 73 43 61 63 68 65 48 69 74 3a 20 75 6e 64 65 66 69 6e 65 64 5d 5b 49 73 54 65 73 74 4d 6f 64 65 3a 20 66 61 6c 73 65 5d 5b 52 69 6e 67 49 64 3a 20 75 6e 64 65 66 69 Data Ascii: {"T":1713185772537,"L":[{"G":507834582,"T":896,"M":"JSAPI fetch succeeded for Word bootstrapper. OnRetry: false","C":3027,"D":20},{"G":556613895,"T":901,"M":"getDiagnostics: [SessionOrigin: Other][TabsCacheHit: undefined][IsTestMode: false][RingId: undefi
2024-04-15 12:56:19 UTC	4019	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 3b5e1446-d8cb-4268-9953-b778c518205d X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 X-OfficeFE: DM3PEPF000149F9 X-OfficeVersion: 16.0.17604.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 5F47FEA12278A67265C91B71CA60D7486F12491F X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524150164,524883107,524883136,524883138,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014661 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 641C668C8AEE4E04992C0FE399B96ED1 Ref B: CH1AA2020620027 Ref C: 2024-04-15T12:56:19Z Date: Mon, 15 Apr 2024 12:56:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49803	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:19 UTC	1004	OUT	POST /wv/RemoteUls.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&officeserverversion=20240409.7 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 5750 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:19 UTC	5750	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 33 31 38 35 37 37 33 34 37 30 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 33 32 33 32 38 35 34 2c 22 54 22 3a 39 31 32 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 3a 20 57 61 63 5f 41 70 70 42 6f 6f 74 53 74 61 74 65 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 75 6e 64 65 66 69 6e 65 64 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 34 36 35 34 35 34 33 2c 22 54 22 3a 39 31 32 2c 22 4d 22 3a 22 52 75 6e 6e 69 6e 67 20 66 6c 6f 77 3a 20 68 61 6e 64 6c 65 42 6f 6f 74 53 74 61 74 65 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 32 38 33 39 37 35 30 2c 22 54 22 3a 39 31 32 2c 22 4d 22 3a 22 42 6f 6f 74 20 73 74 61 74 65 3a 20 5b 53 65 73 73 69 6f 6e 53 74 61 72 Data Ascii: {"T":1713185773470,"L":[{"G":593232854,"T":912,"M":"Received message: Wac_AppBootState, correlation: undefined","C":379,"D":50},{"G":574654543,"T":912,"M":"Running flow: handleBootState","C":379,"D":50},{"G":592839750,"T":912,"M":"Boot state: [SessionStar
2024-04-15 12:56:19 UTC	4328	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 02717881-f1ab-4656-b237-23111caa3162 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0000FAA2 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS8 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 5F47FEA12278A67265C91B71CA60D7486F12491F X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524150164,524883107,524883136,524883138,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-CH1r8c&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 49DE8F6AF910430F9C5D972DF962D89B Ref B: CH1AA2020611051 Ref C: 2024-04-15T12:56:19Z Date: Mon, 15 Apr 2024 12:56:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49808	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:20 UTC	1507	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 4036 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:20 UTC	4036	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:56:20 UTC	1083	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: f033b4dd-ca12-47bc-84d3-615befb2c4f4 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014EA4 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest X-MSEdge-Ref: Ref A: 882823DFF2304096BBDE2AD33C0862B6 Ref B: CH1AA2020611005 Ref C: 2024-04-15T12:56:20Z Date: Mon, 15 Apr 2024 12:56:19 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49809	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:20 UTC	1862	OUT	GET /wv/skydriveuploadhandler.ashx?cpfsi=1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" haep: 6 X-AccessToken: 4wAqNFFDWJJFaunDfDtKpXSGchWXQ_d4NZs2LWPwb9AsMaotT5kfYyd8yiWDw_orbuFgX7rHja3pdVsiOkzd-teDaAFRX6XEbL_a2-I4bfh73KUWFsddT6eV9pnrXZq2MzYorfIUWnO8Q4L3L3VodI5g X-WacFrontEnd: DM3PEPF00014EA7 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c X-AccessTokenTtl: 1713617766976 sec-ch-ua-mobile: ?0 X-OfficeVersion: 16.0.17609.41003 X-Key: fOrlPPhmf0/WlZFESZRxB33PqQotUFM6xrNn+D1TBxY=;vNxXA4UecP3qHQu2Uvikk48PL7ZoGH+04BSGa8YRTRs=,638487825749138613 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Requested-With: XMLHttpRequest X-UserType: WOPI X-xhr: 1 X-WacCluster: PUS1 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:20 UTC	1311	IN	HTTP/1.1 200 OK Cache-Control: private Transfer-Encoding: chunked Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-ROUTED-TO-TARGET-SERVER-PATH: WAC_WFE_AFFINITY_TARGET_URL X-CorrelationId: 9eed4923-6637-4e18-9e3d-4a104abc64c5 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-CorrelationId: 9eed4923-6637-4e18-9e3d-4a104abc64c5 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014EA7 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014A3E X-WacFrontEnd: DM3PEPF00014EA7 X-Powered-By: ARR/3.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 022EF9FA23AF440B94782210ABF48B16 Ref B: CH1AA2020611017 Ref C: 2024-04-15T12:56:20Z Date: Mon, 15 Apr 2024 12:56:20 GMT Connection: close
2024-04-15 12:56:20 UTC	140	IN	Data Raw: 38 36 0d 0a 7b 22 45 78 74 72 61 49 6e 66 6f 22 3a 22 43 68 65 63 6b 50 65 72 73 6f 6e 61 6c 46 69 6c 65 53 74 6f 72 61 67 65 49 6e 66 6f 46 6f 72 4d 53 41 55 73 65 72 3a 20 69 6e 76 61 6c 69 64 20 43 69 64 22 2c 22 4e 65 77 44 6f 63 75 6d 65 6e 74 55 72 6c 22 3a 6e 75 6c 6c 2c 22 53 65 74 42 79 48 6f 73 74 22 3a 66 61 6c 73 65 2c 22 53 74 61 74 65 22 3a 31 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 34 30 30 7d 0d 0a Data Ascii: 86{"ExtraInfo":"CheckPersonalFileStorageInfoForMSAUser: invalid Cid","NewDocumentUrl":null,"SetByHost":false,"State":1,"StatusCode":400}
2024-04-15 12:56:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49817	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:20 UTC	1510	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 9975 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:20 UTC	9975	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:56:20 UTC	1043	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 8d97a5df-e27c-429a-b8ed-9fae679da939 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A80 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_excelslice_control,afd_onenoteslice,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 88C6BB2F23614917855D71DB3CD60DAB Ref B: CH1AA2020616003 Ref C: 2024-04-15T12:56:20Z Date: Mon, 15 Apr 2024 12:56:20 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49814	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:20 UTC	1510	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 1069 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:20 UTC	1069	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:56:20 UTC	1041	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 37386538-c577-4c57-9d44-b6562d4fec06 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A94 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 8B60A5E6BCED4729B6C239CEB6C2A50C Ref B: CH1AA2020612047 Ref C: 2024-04-15T12:56:20Z Date: Mon, 15 Apr 2024 12:56:20 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49816	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:20 UTC	1509	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 959 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:20 UTC	959	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:56:20 UTC	1001	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 87daf952-766e-4736-820a-6565190fae10 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A78 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 1E8C1D990F8347B0B1DA61F2B35B6497 Ref B: CH1AA2020612029 Ref C: 2024-04-15T12:56:20Z Date: Mon, 15 Apr 2024 12:56:20 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49815	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:20 UTC	1510	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 1222 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:20 UTC	1222	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:56:20 UTC	1024	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 33264aa4-9c11-4490-abd3-2f377fdcee16 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A5E X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 06373A7C655D4EE8BC4D8E4974EB221E Ref B: CH1AA2020614035 Ref C: 2024-04-15T12:56:20Z Date: Mon, 15 Apr 2024 12:56:20 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49820	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:20 UTC	1510	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 1185 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:20 UTC	1185	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:56:21 UTC	1028	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 588cb3e0-1c58-4e28-8ea2-ab292e229b39 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014AAD X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest X-MSEdge-Ref: Ref A: 5C9C465668004193B093717274C5640A Ref B: CH1AA2020616033 Ref C: 2024-04-15T12:56:20Z Date: Mon, 15 Apr 2024 12:56:20 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49826	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:22 UTC	1510	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 1134 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:22 UTC	1134	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:56:22 UTC	1000	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: e111858e-4ed7-4af0-b48a-26804e13d29f X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014E9C X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 0E4AEA32E73B4280B1F4B34C6568B8EE Ref B: CH1AA2020615031 Ref C: 2024-04-15T12:56:22Z Date: Mon, 15 Apr 2024 12:56:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49833	52.108.9.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:22 UTC	745	OUT	GET /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:22 UTC	992	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 535d5eb7-649a-4508-8fbf-8efc3a613848 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A39 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: E85C43342DDA4186A9D3EBB59BB4B4E5 Ref B: CH1AA2020620037 Ref C: 2024-04-15T12:56:22Z Date: Mon, 15 Apr 2024 12:56:22 GMT Connection: close
2024-04-15 12:56:22 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-04-15 12:56:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49832	52.108.9.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:22 UTC	678	OUT	GET /wv/skydriveuploadhandler.ashx?cpfsi=1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-15 12:56:22 UTC	1163	IN	HTTP/1.1 412 Precondition Failed Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 2f2c834b-e22e-4114-a9e0-1acd9fdbdb30 X-UserSessionId: 2f2c834b-e22e-4114-a9e0-1acd9fdbdb30 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0000FAA3 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS8 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-NewKey: nU3ZNtcpfklftY8SgNCIAmkWV7ED6k6SseIE84JuZz0=;YiwXVrclDgREfddYksT8ItMcit3c+d2r0+0t7GKKLdw=,638487825826382680 X-OFFICEFD: BL6PEPF0000FAA3 X-WacFrontEnd: BL6PEPF0000FAA3 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 579E56C390C541EF87F2E2C91DE1382B Ref B: CH1AA2020620027 Ref C: 2024-04-15T12:56:22Z Date: Mon, 15 Apr 2024 12:56:21 GMT Connection: close
2024-04-15 12:56:22 UTC	594	IN	Data Raw: 32 34 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 31 32 20 Data Ascii: 24b<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>412
2024-04-15 12:56:22 UTC	925	IN	Data Raw: 33 39 36 0d 0a 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e Data Ascii: 396} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.
2024-04-15 12:56:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49858	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:43 UTC	1052	OUT	POST /wv/RemoteUls.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&officeserverversion=20240409.7 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 783 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1713185783595_0.06185014442162462
2024-04-15 12:56:43 UTC	783	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 33 31 38 35 37 37 37 38 33 32 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 33 32 33 32 38 35 34 2c 22 54 22 3a 39 38 38 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 3a 20 57 61 63 5f 41 70 70 46 61 69 6c 65 64 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 63 30 31 38 64 37 36 30 2d 35 37 65 30 2d 34 38 64 65 2d 61 38 31 39 2d 34 61 33 37 36 37 39 36 65 34 39 30 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 33 32 33 32 38 35 34 2c 22 54 22 3a 31 35 38 36 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 3a 20 53 74 61 74 65 43 68 61 6e 67 65 64 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 31 62 62 34 39 36 30 61 2d 31 30 33 38 2d 34 39 39 64 2d 61 63 32 32 2d 34 64 64 33 65 Data Ascii: {"T":1713185777832,"L":[{"G":593232854,"T":988,"M":"Received message: Wac_AppFailed, correlation: c018d760-57e0-48de-a819-4a376796e490","C":379,"D":50},{"G":593232854,"T":1586,"M":"Received message: StateChanged, correlation: 1bb4960a-1038-499d-ac22-4dd3e
2024-04-15 12:56:43 UTC	4344	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: cda5a18d-6a18-4eba-99d6-b16840d02d7e X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BN3PEPF000020E6 X-OfficeVersion: 16.0.17611.41019 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 5F47FEA12278A67265C91B71CA60D7486F12491F X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524150164,524883107,524883136,524883138,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-CH1r8a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 4869E35D15F34AD68CA35B161AE0DD9D Ref B: CH1AA2020615027 Ref C: 2024-04-15T12:56:43Z Date: Mon, 15 Apr 2024 12:56:43 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49863	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:45 UTC	654	OUT	GET /wv/AppSettingsHandler.ashx?app=Word&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=20240409.7 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:45 UTC	1081	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3581 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 1c0701b0-0c63-41ca-bcf0-862d4a8979c5 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014CB6 X-OfficeVersion: 16.0.17611.41019 X-OfficeCluster: PUS10 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-OFFICEFD: DM3PEPF00014CB6 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 96E3C85BA824487C92019C87D4A61957 Ref B: CH1AA2020612031 Ref C: 2024-04-15T12:56:45Z Date: Mon, 15 Apr 2024 12:56:44 GMT Connection: close
2024-04-15 12:56:45 UTC	322	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 31 38 35 38 30 35 31 39 33 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 48 65 61 72 74 42 65 61 74 49 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 43 6f 6d 6d 6f 6e 48 6f 73 74 44 69 61 67 6e 6f 73 74 69 63 73 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 4c 6f 67 4a 73 41 70 69 4b 70 69 73 46 6f 72 57 6f 72 64 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 46 72 61 6d 65 50 61 67 65 45 72 72 6f 72 52 65 70 6f 72 74 69 6e 67 46 6f 72 57 6f 72 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 54 65 6c 65 6d 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 53 65 74 74 69 6e 67 73 46 65 74 63 Data Ascii: {"timestamp":1713185805193,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetc
2024-04-15 12:56:45 UTC	3259	IN	Data Raw: 70 65 72 4d 61 78 55 6c 73 48 65 61 72 74 62 65 61 74 54 69 6d 65 22 3a 36 30 30 30 30 30 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 4e 6f 43 6f 6d 70 6c 65 74 65 57 61 72 6e 69 6e 67 31 54 69 6d 65 22 3a 31 32 30 30 30 30 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 4e 6f 43 6f 6d 70 6c 65 74 65 57 61 72 6e 69 6e 67 32 54 69 6d 65 22 3a 31 38 30 30 30 30 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 55 70 6c 6f 61 64 43 61 64 65 6e 63 65 4d 73 22 3a 36 30 30 30 30 2c 22 52 65 71 75 65 73 74 65 64 43 61 6c 6c 54 68 72 6f 74 74 6c 69 6e 67 44 65 66 61 75 6c 74 54 6f 56 69 65 77 4d 69 6e 69 6d 75 6d 56 61 6c 75 65 22 3a 22 4d 61 6a 6f 72 22 2c 22 52 65 6d 6f 74 65 55 6c 73 45 54 61 67 22 3a 22 35 46 34 37 46 45 41 31 32 32 37 38 41 36 37 32 36 35 43 39 31 Data Ascii: perMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"5F47FEA12278A67265C91

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49864	52.108.9.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:45 UTC	784	OUT	GET /wv/AppSettingsHandler.ashx?app=Word&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=20240409.7 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1713185783595_0.06185014442162462
2024-04-15 12:56:45 UTC	965	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3581 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 16bc79ed-1613-4895-92f4-db83b972a2e8 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A47 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-OFFICEFD: DM3PEPF00014A47 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 40B1C9932CA44249A1C2B15A6F5529C1 Ref B: CH1AA2020603037 Ref C: 2024-04-15T12:56:45Z Date: Mon, 15 Apr 2024 12:56:45 GMT Connection: close
2024-04-15 12:56:45 UTC	2532	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 31 38 35 38 30 35 37 31 33 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 48 65 61 72 74 42 65 61 74 49 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 43 6f 6d 6d 6f 6e 48 6f 73 74 44 69 61 67 6e 6f 73 74 69 63 73 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 4c 6f 67 4a 73 41 70 69 4b 70 69 73 46 6f 72 57 6f 72 64 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 46 72 61 6d 65 50 61 67 65 45 72 72 6f 72 52 65 70 6f 72 74 69 6e 67 46 6f 72 57 6f 72 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 54 65 6c 65 6d 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 53 65 74 74 69 6e 67 73 46 65 74 63 Data Ascii: {"timestamp":1713185805713,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetc
2024-04-15 12:56:45 UTC	1049	IN	Data Raw: 37 30 2c 35 37 30 35 30 37 36 36 32 2c 35 37 31 35 34 39 35 30 37 2c 35 37 31 37 38 36 30 37 33 2c 35 37 31 37 38 36 30 37 34 2c 35 37 32 32 39 38 30 30 38 2c 35 37 32 38 32 33 32 36 34 2c 35 37 33 36 39 31 33 36 32 2c 35 37 34 34 36 38 31 31 36 2c 35 37 35 31 35 37 36 36 33 2c 35 37 35 31 35 37 36 36 34 2c 35 37 35 31 35 37 36 36 35 2c 35 37 35 31 35 37 36 36 36 2c 35 37 35 31 35 37 36 36 37 2c 35 37 35 31 35 37 36 39 36 2c 35 37 35 31 35 37 36 39 37 2c 35 37 35 31 35 37 36 39 38 2c 35 37 35 31 35 37 36 39 39 2c 35 37 35 31 35 37 37 30 30 2c 35 37 35 31 35 37 37 30 31 2c 35 37 35 31 35 37 37 30 32 2c 35 37 37 32 39 35 33 37 36 2c 35 37 37 36 32 36 35 38 31 2c 35 37 37 38 33 31 31 33 38 2c 35 37 38 31 36 34 30 30 30 2c 35 38 37 38 36 32 39 38 35 2c 35 38 Data Ascii: 70,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,58

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49865	13.107.213.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:45 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_3b4rnVNi70Sso4_c42_ImQ2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:46 UTC	797	IN	HTTP/1.1 200 OK Date: Mon, 15 Apr 2024 12:56:45 GMT Content-Type: application/x-javascript Content-Length: 49617 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 14 Mar 2024 23:04:09 GMT ETag: 0x8DC447B0E3A90D2 x-ms-request-id: 0ef321a9-001e-004a-35db-8d389a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240415T125645Z-r1d8d857679mdzbx7hmtnxs5gw00000000r00000000017bq x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-15 12:56:46 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 87 89 27 26 e4 05 68 70 da 9d 27 0d 74 37 33 40 18 12 a6 67 16 58 2e 27 56 c0 dd c1 ce da 0e 34 03 39 bf fd d4 8b 64 cb 8e 43 f7 ec 7d ae f3 e5 cc 4b b0 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 f3 da ff 54 7e ae 6c fc f8 3f 95 c1 b0 77 3e ac f4 3f 54 86 9f 8e ce 0f 2a 67 f0 f6 67 e5 b4 3f 3c da 3f fc f1 7a f0 a3 f8 ff f0 ce 8f 2b 13 7f 2a 2a f0 77 e4 c6 c2 ab 84 41 25 8c 2a 7e 30 0e a3 59 18 b9 89 88 2b f7 f0 1b f9 ee b4 32 89 c2 fb 4a 72 27 2a b3 28 fc 22 c6 49 5c 99 fa 71 02 85 46 62 1a 3e 56 aa 50 5d e4 55 ce dc 28 79 aa 1c 9d 99 75 a8 5f 40 6d fe ad 1f 40 e9 71 38 7b 82 e7 bb a4 12 84 89 3f 16 15 37 f0 a8 b6 29 bc 04 b1 a8 cc 03 4f 44 95 c7 3b 7f 7c 57 39 f1 c7 51 18 87 93 a4 12 89 b1 f0 Data Ascii: m[80'&hp't73@gX.'V49dC}K,JUT~l?w>?Tgg?<?z+wA%~0Y+2Jr'*("I\qFb>VP]U(yu_@m@q8{?7)OD;\|W9Q
2024-04-15 12:56:46 UTC	16384	IN	Data Raw: 2d 5d 04 77 80 5e 40 f9 e1 37 3c bc 02 60 fb 60 8a 7e 61 5a ce 9d 9f 29 2e 0d 3a bd c7 b8 ae 96 9c bf 28 3a 78 3f 22 a0 0a ac 8e 70 c2 47 93 d1 c1 f5 da 41 65 e9 b7 2a f2 bc d6 4a a4 be 64 57 8c 1a 1e 72 18 0b a5 a1 68 1f 31 9f e5 b1 50 0b d3 6a d0 4d 04 80 b8 d2 eb e5 96 ce 7a d3 6e 0f 8b b4 1a 43 cb c7 8b 10 d2 4b e3 aa a6 59 47 d1 49 19 ab 1a 11 e2 61 fd 26 de dd 63 9a af e0 76 db b4 e8 a0 93 06 9e 21 8e 47 7f 59 2e 63 3c 3b 38 32 45 1b 1e 23 8e a7 a0 cc 1d 1f 0f 65 21 0d 9f 4e 3b e6 d3 f5 f9 04 78 6b 4c b7 ce d7 27 cc 1c 6c 94 a3 82 72 8f 6e 4b cc f1 39 0d e4 09 9d 28 63 f1 81 50 d9 07 3d ed ec cd fc 55 76 53 75 74 d7 f4 52 5c cb 33 15 a7 96 1b dd d2 61 58 31 f4 53 5d 6a 78 1c ba 72 e9 18 44 fd 18 af 19 64 ec 3b cb a7 44 21 b6 dd 6a ee 1c 98 f1 fa fa Data Ascii: -]w^@7<``~aZ).:(:x?"pGAe*JdWrh1PjMznCKYGIa&cv!GY.c<;82E#e!N;xkL'lrnK9(cP=UvSutR\3aX1S]jxrDd;D!j
2024-04-15 12:56:46 UTC	16384	IN	Data Raw: 4b 5d 8b 6c 9c ec da 22 a6 62 47 ab 46 ba 85 c4 37 58 97 52 1d 0f 18 dc 56 31 6f 99 71 74 e2 b7 0e a2 fa 41 5f aa d0 ba 8c f5 ac d7 2c 58 8e 74 a6 4d 9d 2b 73 d2 d0 2d b5 9f 06 9c 84 b6 c1 2a 36 cc 8a b2 40 3a 7e d3 40 df fa d7 2a 2d 92 09 47 3a e8 1f ae fd cb 73 8f 4d b1 d6 b4 24 3d 7a 01 ce f9 fc 7b 0c a7 62 47 99 dc 9d 13 89 b1 b1 6e 90 2c 2c e4 3f 48 5c e7 7d 49 74 45 7d c1 1f 4c 57 e0 f3 07 4f 5e 3e 53 84 0b 79 a2 40 f0 40 e1 41 1a ab a6 65 b3 6b 26 c9 b4 0e b1 43 09 b5 0b 3a 32 59 12 bb ae b7 05 08 93 81 a5 ef e6 5b dd c9 fa 01 bf 67 7c 34 ad 8a 48 6c 81 24 8d 50 f5 7c 2e b0 c3 c3 b4 93 d4 a0 6e 08 b7 03 1d d3 e9 33 f5 d7 19 55 2d e2 04 6c 42 64 aa 69 9f 3e ee 8b 88 65 e4 0b 0b f8 71 b4 ca 7a 7a 67 e8 1a 3e a7 c8 8c ab df 78 3e 63 4a 2d a7 6f 4b 6c Data Ascii: K]l"bGF7XRV1oqtA_,XtM+s-6@:~@-G:sM$=z{bGn,,?H\}ItE}LWO^>Sy@@Aek&C:2Y[g\|4Hl$P\|.n3U-lBdi>eqzzg>x>cJ-oKl
2024-04-15 12:56:46 UTC	1262	IN	Data Raw: e1 3e bd 20 b5 1d 42 62 e5 10 22 2e b9 c4 8d 09 9a 16 db 64 7c 76 e2 f5 9a 6e b7 ef 6a ba 72 70 7b eb 46 3d 47 79 f7 1e 80 f7 b8 2f 0e 0e d0 e6 e0 f0 22 c2 e8 28 af 75 31 a0 1f 20 61 a9 ca 51 07 e7 d1 83 f0 8d bb 96 21 0a 7a d7 9d 99 b0 c0 a4 44 d2 83 b2 d9 a8 91 7b 42 e7 ce 41 dd 95 27 ae 64 98 50 4e ee 9c 98 34 bc 19 cd d3 a2 ac 38 b6 6b 9c 8d 3d f0 9e b1 a8 e3 41 54 ee df 77 96 cb 6c 9a 2d 93 7c 71 76 91 ce ce 92 b3 8b e9 c5 f4 e3 e5 f9 82 da 92 2f d3 8f a9 c3 ce f6 78 09 6e 40 74 81 fc 36 e2 b8 26 11 7b 99 d7 fe 0e fb ee 28 f0 7d 7b 56 9c 57 b9 71 cc 69 38 e9 28 77 47 f6 dc 86 ab e1 c8 51 9a 5d e3 cc 62 fb 1a b9 8e 59 b0 23 38 d3 25 ed 39 78 5f d6 13 30 30 65 39 af da 20 c5 22 4d 1a 51 c4 a7 d6 ca fb 37 1d c5 a9 f8 62 e2 36 5b f1 57 e3 e5 a4 77 07 fa Data Ascii: > Bb".d\|vnjrp{F=Gy/"(u1 aQ!zD{BA'dPN48k=ATwl-\|qv/xn@t6&{(}{VWqi8(wGQ]bY#8%9x_00e9 "MQ7b6[Ww

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49870	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:47 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:47 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831885 Cache-Control: public, max-age=31536000 Content-MD5: kqhA3D0Xczna4D/t8ioitQ== Content-Type: text/css Date: Mon, 15 Apr 2024 12:56:47 GMT Etag: 0x8DC070858CA028D Last-Modified: Wed, 27 Dec 2023 18:19:21 GMT Server: ECAcc (cha/81C9) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 242dda52-401e-00db-4b8b-7e4b57000000 x-ms-version: 2009-09-19 Content-Length: 113084 Connection: close
2024-04-15 12:56:47 UTC	15668	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 73 6d 2d 31 33 2c 2e 63 6f 6c 2d 6d 64 2d 31 33 2c 2e 63 6f 6c 2d 6c 67 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 73 6d 2d 31 34 2c 2e 63 6f 6c 2d 6d 64 2d 31 34 2c 2e 63 6f 6c 2d 6c 67 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 73 6d 2d 31 35 2c 2e 63 6f 6c 2d 6d 64 2d 31 35 2c 2e 63 6f 6c 2d 6c 67 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 Data Ascii: 10,.col-md-10,.col-lg-10,.col-xs-11,.col-sm-11,.col-md-11,.col-lg-11,.col-xs-12,.col-sm-12,.col-md-12,.col-lg-12,.col-xs-13,.col-sm-13,.col-md-13,.col-lg-13,.col-xs-14,.col-sm-14,.col-md-14,.col-lg-14,.col-xs-15,.col-sm-15,.col-md-15,.col-lg-15,.col-xs-16
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 31 36 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 39 2e 31 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 37 2e 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 Data Ascii: 16.66667%}.col-xl-offset-5{margin-left:20.83333%}.col-xl-offset-6{margin-left:25%}.col-xl-offset-7{margin-left:29.16667%}.col-xl-offset-8{margin-left:33.33333%}.col-xl-offset-9{margin-left:37.5%}.col-xl-offset-10{margin-left:41.66667%}.col-xl-offset-11{ma
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 74 61 62 6c 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 7b 76 65 72 74 69 63 61 6c Data Ascii: {background-color:transparent}th{text-align:left}.table{width:100%;max-width:100%}.table>thead>tr>th,.table>thead>tr>td,.table>tbody>tr>th,.table>tbody>tr>td,.table>tfoot>tr>th,.table>tfoot>tr>td{padding:16px;vertical-align:top}.table>thead>tr>th{vertical
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 20 57 65 62 66 6f 6e 74 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 65 67 6f 65 20 55 49 20 53 65 6d 69 6c 69 67 68 74 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 20 57 65 62 66 6f 6e 74 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 65 67 6f 65 20 55 49 20 42 6f 6c 64 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 20 57 65 62 66 6f 6e 74 22 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 53 65 Data Ascii: e{font-family:"Segoe UI Webfont";font-weight:300;src:local("Segoe UI Semilight")}@font-face{font-family:"Segoe UI Webfont";font-weight:700;src:local("Segoe UI Bold")}@font-face{font-family:"Segoe UI Webfont";font-style:italic;font-weight:400;src:local("Se
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 74 6e 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 32 62 32 62 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 7d 2e 62 74 6e 2d 66 6f 63 75 73 2c 2e 62 74 6e 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b Data Ascii: tn:hover,button:hover,input[type="button"]:hover,input[type="submit"]:hover,input[type="reset"]:hover{background-color:#b2b2b2;background-color:rgba(0,0,0,0.3)}.btn-focus,.btn:focus,button:focus,input[type="button"]:focus,input[type="submit"]:focus,input[
2024-04-15 12:56:47 UTC	15501	IN	Data Raw: 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 Data Ascii: margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padding:0;margin-top:16px;margin-bottom:12px;font-family:"Segoe UI","Helveti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49871	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:47 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_xtPRDEy3EhlAdpju-Ah7qw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:47 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831896 Cache-Control: public, max-age=31536000 Content-MD5: Lup68J6qO3zOiKJ926MmYw== Content-Type: application/x-javascript Date: Mon, 15 Apr 2024 12:56:47 GMT Etag: 0x8DC45682EEBF93B Last-Modified: Sat, 16 Mar 2024 03:21:34 GMT Server: ECAcc (cha/063D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2ad3b581-601e-0025-628b-7e4c1f000000 x-ms-version: 2009-09-19 Content-Length: 443943 Connection: close
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-04-15 12:56:47 UTC	1	IN	Data Raw: 55 Data Ascii: U
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 42 5f 42 49 4e 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 Data Ascii: B_BINDING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnaut
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 6e 64 50 61 74 68 7c 7c 22 22 3b 72 65 74 75 72 6e 20 65 2e 71 75 65 72 79 26 26 28 6e 2b 3d 22 3f 22 2b 63 2e 6a 6f 69 6e 28 65 2e 71 75 65 72 79 2c 22 26 22 2c 22 3d 22 29 29 2c 65 2e 66 72 61 67 6d 65 6e 74 26 26 28 6e 2b 3d 22 23 22 2b 63 2e 6a 6f 69 6e 28 65 2e 66 72 61 67 6d 65 6e 74 2c 22 26 22 2c 22 3d 22 29 29 2c 6e 7d 2c 61 70 70 65 6e 64 43 75 72 72 65 6e 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 49 66 4e 6f 74 45 78 69 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 44 2e 70 61 72 73 65 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 63 2e 66 6f 72 45 61 63 68 28 6e 2e 71 75 65 72 79 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 65 3d 44 2e 61 64 64 49 66 4e 6f 74 45 78 69 73 74 28 Data Ascii: ndPath\|\|"";return e.query&&(n+="?"+c.join(e.query,"&","=")),e.fragment&&(n+="#"+c.join(e.fragment,"&","=")),n},appendCurrentQueryParameterIfNotExist:function(e){var n=D.parse(window.location.href);return c.forEach(n.query,(function(n,t){e=D.addIfNotExist(
2024-04-15 12:56:47 UTC	2	IN	Data Raw: 3d 75 Data Ascii: =u
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 28 22 74 72 61 63 65 42 65 67 69 6e 52 65 71 75 65 73 74 22 29 2c 73 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 2c 61 29 7b 6c 3f 6c 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 28 65 2c 6e 2c 74 2c 69 2c 61 29 3a 61 26 26 61 28 29 7d 2c 73 2e 73 65 74 50 61 67 65 56 69 65 77 4d 6f 64 65 6c 3d 75 28 22 73 65 74 50 61 67 65 56 69 65 77 4d 6f 64 65 6c 22 29 2c 73 2e 6c 6f 67 43 6f 6d 70 6f 6e 65 6e 74 45 76 65 6e 74 3d 75 28 22 6c 6f 67 43 6f 6d 70 6f 6e 65 6e 74 45 76 65 6e 74 22 29 2c 73 2e 6c 6f 67 56 69 65 77 53 74 61 74 65 3d 75 28 22 6c 6f 67 56 69 65 77 53 74 61 74 65 22 29 2c 73 2e 73 65 74 56 69 65 77 56 69 65 77 4d 6f 64 65 6c 3d 75 28 22 73 65 74 56 69 65 77 56 69 65 77 4d 6f 64 65 6c 22 Data Ascii: ("traceBeginRequest"),s.traceEndRequest=function(e,n,t,i,a){l?l.traceEndRequest(e,n,t,i,a):a&&a()},s.setPageViewModel=u("setPageViewModel"),s.logComponentEvent=u("logComponentEvent"),s.logViewState=u("logViewState"),s.setViewViewModel=u("setViewViewModel"
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 63 6f 6e 63 61 74 28 6e 3f 5b 5b 22 6d 6b 74 22 2c 6e 5d 5d 3a 5b 5d 2c 74 3f 5b 5b 22 6c 63 69 64 22 2c 74 5d 5d 3a 5b 5d 2c 53 3f 5b 5b 22 69 64 22 2c 53 5d 5d 3a 5b 5d 2c 43 3f 5b 5b 22 63 6c 69 65 6e 74 5f 69 64 22 2c 43 5d 5d 3a 5b 5d 2c 77 3f 5b 5b 22 66 63 69 22 2c 77 5d 5d 3a 5b 5d 2c 78 3f 5b 5b 22 6e 6f 70 61 22 2c 78 5d 5d 3a 5b 5d 29 2c 63 3d 7b 74 61 72 67 65 74 55 72 6c 3a 72 2e 61 64 64 28 22 47 65 74 4f 6e 65 54 69 6d 65 43 6f 64 65 2e 73 72 66 22 2c 61 29 2c 72 65 71 75 65 73 74 54 79 70 65 3a 69 2e 52 65 71 75 65 73 74 54 79 70 65 2e 50 6f 73 74 2c 64 61 74 61 3a 6f 2e 67 65 6e 65 72 61 74 65 52 65 71 75 65 73 74 53 74 72 69 6e 67 28 6d 29 2c 69 73 41 73 79 6e 63 3a 21 30 2c 74 69 6d 65 6f 75 74 3a 5f 2c 73 75 63 63 65 73 73 43 61 6c 6c Data Ascii: concat(n?[["mkt",n]]:[],t?[["lcid",t]]:[],S?[["id",S]]:[],C?[["client_id",C]]:[],w?[["fci",w]]:[],x?[["nopa",x]]:[]),c={targetUrl:r.add("GetOneTimeCode.srf",a),requestType:i.RequestType.Post,data:o.generateRequestString(m),isAsync:!0,timeout:_,successCall
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 6b 74 22 29 29 29 29 2c 65 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 6c 63 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 70 2e 65 78 74 72 61 63 74 28 22 6c 63 22 29 29 29 29 7d 28 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6d 2e 43 6c 6f 75 64 46 65 64 65 72 61 74 69 6f 6e 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 6d 2e 4c 69 6e 6b 65 64 49 6e 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e Data Ascii: kt")))),e=p.appendOrReplace(e,"lc",encodeURIComponent(decodeURIComponent(p.extract("lc"))))}(n.Credentials.FederationRedirectUrl,e);break;case m.CloudFederation:i.idpRedirectUrl=n.Credentials.FederationRedirectUrl;break;case m.LinkedIn:i.idpRedirectUrl=n.
2024-04-15 12:56:48 UTC	16383	IN	Data Raw: 54 79 70 65 7c 7c 6d 2e 50 61 73 73 77 6f 72 64 3b 73 77 69 74 63 68 28 6e 2e 63 72 65 64 4c 69 6e 6b 45 72 72 6f 72 28 22 22 29 2c 65 29 7b 63 61 73 65 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 3a 69 66 28 4f 2e 70 72 6f 6f 66 2e 63 6c 65 61 72 44 69 67 69 74 73 29 6e 2e 6f 6e 53 77 69 74 63 68 56 69 65 77 28 67 2e 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 21 31 2c 4f 29 3b 65 6c 73 65 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 75 73 65 72 6e 61 6d 65 3a 66 2e 63 6c 65 61 6e 73 65 55 73 65 72 6e 61 6d 65 28 61 29 2c 70 72 6f 6f 66 44 61 74 61 3a 4f 2e 70 72 6f 6f 66 2e 64 61 74 61 2c 70 72 6f 6f 66 54 79 70 65 3a 4f 2e 70 72 6f 6f 66 2e 74 79 70 65 2c 70 75 72 70 6f 73 65 3a 4f 2e 70 72 6f 6f 66 2e 69 73 4e 6f Data Ascii: Type\|\|m.Password;switch(n.credLinkError(""),e){case m.OneTimeCode:if(O.proof.clearDigits)n.onSwitchView(g.ProofConfirmation,!1,O);else{var t=function(){var e={username:f.cleanseUsername(a),proofData:O.proof.data,proofType:O.proof.type,purpose:O.proof.isNo
2024-04-15 12:56:48 UTC	16383	IN	Data Raw: 73 68 6f 77 45 72 72 6f 72 50 61 67 65 44 65 62 75 67 44 65 74 61 69 6c 73 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 63 75 72 72 65 6e 74 56 69 65 77 48 61 73 4d 65 74 61 64 61 74 61 28 22 65 78 74 72 61 44 65 62 75 67 44 65 74 61 69 6c 73 22 29 7d 29 29 2c 61 2e 73 68 6f 77 46 6f 6f 74 65 72 43 6f 6e 74 72 6f 6c 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 72 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e Data Ascii: showErrorPageDebugDetails=i.pureComputed((function(){return a.paginationControlMethods()&&a.paginationControlMethods().currentViewHasMetadata("extraDebugDetails")})),a.showFooterControl=i.pureComputed((function(){return!r&&a.paginationControlMethods()&&a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49872	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:47 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pxjdzrjcwtmbr-ntjn_f8q2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:47 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831896 Cache-Control: public, max-age=31536000 Content-MD5: 0RInCIo6BTf5wagqwDD1kA== Content-Type: application/x-javascript Date: Mon, 15 Apr 2024 12:56:47 GMT Etag: 0x8DC4533BD9666BA Last-Modified: Fri, 15 Mar 2024 21:06:10 GMT Server: ECAcc (cha/81E6) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 71e74bc0-a01e-0015-048b-7e6d0e000000 x-ms-version: 2009-09-19 Content-Length: 55052 Connection: close
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-04-15 12:56:47 UTC	2	IN	Data Raw: 6f 74 Data Ascii: ot
2024-04-15 12:56:47 UTC	16383	IN	Data Raw: 50 61 73 73 77 6f 72 64 30 22 20 68 72 65 66 3d 22 23 22 3e 72 65 73 65 74 20 69 74 20 6e 6f 77 2e 3c 2f 61 3e 27 3a 27 59 6f 75 72 20 65 6d 61 69 6c 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 49 66 20 79 6f 75 20 64 6f 6e 5c 27 74 20 72 65 6d 65 6d 62 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2c 20 3c 61 20 69 64 3d 22 69 64 41 5f 49 4c 5f 46 6f 72 67 6f 74 50 61 73 73 77 6f 72 64 30 22 20 68 72 65 66 3d 22 23 22 3e 72 65 73 65 74 20 69 74 20 6e 6f 77 2e 3c 2f 61 3e 27 2c 65 2e 43 54 5f 53 54 52 5f 43 6f 6e 66 69 72 6d 53 65 6e 64 5f 4f 74 63 3d 22 57 65 27 6c 6c 20 73 65 6e 64 20 61 20 63 6f 64 65 20 74 6f 20 7b 30 7d 20 74 6f 20 73 69 67 6e 20 79 6f 75 20 69 6e 2e 22 2c 65 2e 43 54 5f 4f 54 43 5f 53 54 52 5f Data Ascii: Password0" href="#">reset it now.</a>':'Your email or password is incorrect. If you don\'t remember your password, <a id="idA_IL_ForgotPassword0" href="#">reset it now.</a>',e.CT_STR_ConfirmSend_Otc="We'll send a code to {0} to sign you in.",e.CT_OTC_STR_
2024-04-15 12:56:47 UTC	5901	IN	Data Raw: 61 74 69 62 6c 65 41 70 70 56 65 72 73 69 6f 6e 3a 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 41 70 70 56 65 72 73 69 6f 6e 22 2c 46 6c 6f 77 54 6f 6b 65 6e 45 78 70 69 72 65 64 54 66 61 3a 22 46 6c 6f 77 54 6f 6b 65 6e 45 78 70 69 72 65 64 22 2c 41 70 70 6c 69 63 61 74 69 6f 6e 55 73 65 64 49 73 4e 6f 74 41 6e 41 70 70 72 6f 76 65 64 41 70 70 52 65 71 75 69 72 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 3a 22 35 33 30 30 32 31 22 2c 42 6c 6f 63 6b 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 3a 22 35 33 30 30 33 22 2c 42 6c 6f 63 6b 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 46 6f 72 52 65 6d 6f 74 65 44 65 76 69 63 65 46 6c 6f 77 3a 22 35 33 30 30 33 33 22 2c 42 72 6f 6b 65 72 41 70 70 4e 6f 74 49 6e Data Ascii: atibleAppVersion:"IncompatibleAppVersion",FlowTokenExpiredTfa:"FlowTokenExpired",ApplicationUsedIsNotAnApprovedAppRequiredByConditionalAccess:"530021",BlockedByConditionalAccess:"53003",BlockedByConditionalAccessForRemoteDeviceFlow:"530033",BrokerAppNotIn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49874	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:48 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:48 UTC	719	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831904 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Mon, 15 Apr 2024 12:56:48 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (cha/80F4) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c234157a-401e-000b-268b-7e7f31000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-04-15 12:56:48 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-15 12:56:48 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49875	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:48 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:48 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831905 Cache-Control: public, max-age=31536000 Content-MD5: eZ+IAUPxfkfE79uz/zWlTA== Content-Type: application/x-javascript Date: Mon, 15 Apr 2024 12:56:48 GMT Etag: 0x8DC2E5A3BC19A93 Last-Modified: Thu, 15 Feb 2024 19:13:46 GMT Server: ECAcc (cha/80CE) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 760e416b-a01e-006d-628b-7ec71f000000 x-ms-version: 2009-09-19 Content-Length: 223759 Connection: close
2024-04-15 12:56:48 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-04-15 12:56:48 UTC	1	IN	Data Raw: 30 Data Ascii: 0
2024-04-15 12:56:48 UTC	16383	IN	Data Raw: 21 3d 3d 28 6e 3d 65 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 2d 74 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 29 7c 7c 30 21 3d 3d 28 6e 3d 65 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 2d 74 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 29 3f 6e 3a 66 28 65 2e 6e 61 6d 65 2c 74 2e 6e 61 6d 65 29 7d 2c 74 2e 63 6f 6d 70 61 72 65 42 79 47 65 6e 65 72 61 74 65 64 50 6f 73 69 74 69 6f 6e 73 49 6e 66 6c 61 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 2d 74 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 3b 72 65 74 75 72 6e 20 30 21 3d 3d 72 7c 7c 30 21 3d 3d 28 72 3d 65 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 2d 74 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 29 7c 7c 30 21 3d 3d 28 72 Data Ascii: !==(n=e.originalLine-t.originalLine)\|\|0!==(n=e.originalColumn-t.originalColumn)?n:f(e.name,t.name)},t.compareByGeneratedPositionsInflated=function(e,t){var r=e.generatedLine-t.generatedLine;return 0!==r\|\|0!==(r=e.generatedColumn-t.generatedColumn)\|\|0!==(r
2024-04-15 12:56:48 UTC	16383	IN	Data Raw: 74 68 3b 69 2b 3d 32 29 6f 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 5b 69 5d 2b 32 35 36 2a 6e 5b 69 2b 31 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 2c 72 29 7b 69 66 28 65 25 31 21 3d 30 7c 7c 65 3c 30 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 6f 66 66 73 65 74 20 69 73 20 6e 6f 74 20 75 69 6e 74 22 29 3b 69 66 28 65 2b 74 3e 72 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 54 72 79 69 6e 67 20 74 6f 20 61 63 63 65 73 73 20 62 65 79 6f 6e 64 20 62 75 66 66 65 72 20 6c 65 6e 67 74 68 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 74 2c 72 2c 6e 2c 6f 2c 69 29 7b 69 66 28 21 75 2e 69 73 42 75 66 66 65 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 Data Ascii: th;i+=2)o+=String.fromCharCode(n[i]+256*n[i+1]);return o}function R(e,t,r){if(e%1!=0\|\|e<0)throw new RangeError("offset is not uint");if(e+t>r)throw new RangeError("Trying to access beyond buffer length")}function M(e,t,r,n,o,i){if(!u.isBuffer(e))throw new
2024-04-15 12:56:48 UTC	16383	IN	Data Raw: 65 3d 74 68 69 73 3b 65 3d 65 2e 70 61 72 65 6e 74 3b 29 65 5b 68 5d 3d 21 31 7d 7d 7d 2c 7b 6b 65 79 3a 22 6e 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 70 61 72 65 6e 74 29 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 76 61 72 20 65 3d 74 68 69 73 2e 70 61 72 65 6e 74 2e 69 6e 64 65 78 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 2e 6e 6f 64 65 73 5b 65 2b 31 5d 7d 7d 2c 7b 6b 65 79 3a 22 70 6f 73 69 74 69 6f 6e 42 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 73 6f 75 72 63 65 2e 73 74 61 72 74 3b 69 66 28 65 2e 69 6e 64 65 78 29 72 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 49 6e 73 69 64 65 28 65 2e 69 6e 64 65 Data Ascii: e=this;e=e.parent;)e[h]=!1}}},{key:"next",value:function(){if(!this.parent)return undefined;var e=this.parent.index(this);return this.parent.nodes[e+1]}},{key:"positionBy",value:function(e,t){var r=this.source.start;if(e.index)r=this.positionInside(e.inde
2024-04-15 12:56:48 UTC	16383	IN	Data Raw: 61 72 73 65 28 29 7d 63 61 74 63 68 28 73 29 7b 74 68 72 6f 77 20 73 7d 72 65 74 75 72 6e 20 69 2e 72 6f 6f 74 7d 3b 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 74 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 35 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 28 72 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 29 2e 74 79 70 65 3d 22 63 6f 6d 6d 65 6e 74 22 2c 72 7d 72 65 74 75 72 6e 20 72 Data Ascii: arse()}catch(s){throw s}return i.root};t["default"]=s,e.exports=t["default"]},595:function(e,t,r){"use strict";var n;t.__esModule=!0,t["default"]=void 0;var o=function(e){var t,r;function n(t){var r;return(r=e.call(this,t)\|\|this).type="comment",r}return r
2024-04-15 12:56:48 UTC	16383	IN	Data Raw: 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 65 29 7d 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6e 28 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 76 61 72 20 73 3d 72 28 36 33 36 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 65 Data Ascii: eturn a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"==n(t)?t:String(t)}var s=r(636),a=function(){function e(t,r,n){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,e
2024-04-15 12:56:48 UTC	5	IN	Data Raw: 74 69 6f 6e 28 Data Ascii: tion(
2024-04-15 12:56:49 UTC	16383	IN	Data Raw: 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 2e 74 68 65 6e 28 65 2c 65 29 7d 2c 66 2e 68 61 6e 64 6c 65 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 74 68 69 73 2e 65 72 72 6f 72 3d 65 2c 22 43 73 73 53 79 6e 74 61 78 45 72 72 6f 72 22 21 3d 3d 65 2e 6e 61 6d 65 7c 7c 65 2e 70 6c 75 67 69 6e 29 7b 69 66 28 74 2e 70 6f 73 74 63 73 73 56 65 72 73 69 6f 6e 29 3b 7d 65 6c 73 65 20 65 2e 70 6c 75 67 69 6e 3d 74 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 2c 65 2e 73 65 74 4d 65 73 73 61 67 65 28 29 7d 63 61 74 63 68 28 72 29 7b 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 72 29 7d 7d 2c 66 2e 61 73 79 6e 63 54 69 63 6b 3d 66 75 6e 63 74 Data Ascii: e){return this.async().then(e,e)},f.handleError=function(e,t){try{if(this.error=e,"CssSyntaxError"!==e.name\|\|e.plugin){if(t.postcssVersion);}else e.plugin=t.postcssPlugin,e.setMessage()}catch(r){console&&console.error&&console.error(r)}},f.asyncTick=funct
2024-04-15 12:56:49 UTC	16383	IN	Data Raw: 21 3d 74 79 70 65 6f 66 20 65 2e 72 61 77 73 2e 62 65 74 77 65 65 6e 29 72 65 74 75 72 6e 20 74 3d 65 2e 72 61 77 73 2e 62 65 74 77 65 65 6e 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 5c 73 3a 5d 2f 67 2c 22 22 29 2c 21 31 7d 29 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 72 61 77 45 6d 70 74 79 42 6f 64 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 65 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 6e 6f 64 65 73 26 26 30 3d 3d 3d 65 2e 6e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 28 74 3d 65 2e 72 61 77 73 2e 61 66 74 65 72 29 29 72 65 74 75 72 6e 21 31 7d 29 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 72 61 77 49 6e 64 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f Data Ascii: !=typeof e.raws.between)return t=e.raws.between.replace(/[^\s:]/g,""),!1})),t}},{key:"rawEmptyBody",value:function(e){var t;return e.walk((function(e){if(e.nodes&&0===e.nodes.length&&void 0!==(t=e.raws.after))return!1})),t}},{key:"rawIndent",value:functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49876	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:49 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:49 UTC	719	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831905 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Mon, 15 Apr 2024 12:56:49 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (cha/80F4) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c234157a-401e-000b-268b-7e7f31000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-04-15 12:56:49 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-15 12:56:49 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49877	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:49 UTC	622	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4d4b76a02ae121e3b20c.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:49 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831896 Cache-Control: public, max-age=31536000 Content-MD5: mEIb5ok886qSnF9sSgxcZw== Content-Type: application/x-javascript Date: Mon, 15 Apr 2024 12:56:49 GMT Etag: 0x8DC2E5A3BD6B894 Last-Modified: Thu, 15 Feb 2024 19:13:46 GMT Server: ECAcc (cha/061D) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c03809f8-e01e-002d-458b-7e140e000000 x-ms-version: 2009-09-19 Content-Length: 15708 Connection: close
2024-04-15 12:56:49 UTC	15708	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49878	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:49 UTC	670	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:49 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831905 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Mon, 15 Apr 2024 12:56:49 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (cha/80B4) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0ee58caf-401e-000b-3d8b-7e7f31000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-04-15 12:56:49 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49879	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:49 UTC	664	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:49 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831897 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Mon, 15 Apr 2024 12:56:49 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (cha/81A7) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bcb22bd9-001e-00e3-208b-7e3257000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-04-15 12:56:49 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49882	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:49 UTC	419	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:50 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831898 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Mon, 15 Apr 2024 12:56:50 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (cha/81A7) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bcb22bd9-001e-00e3-208b-7e3257000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-04-15 12:56:50 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49883	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:49 UTC	425	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:50 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831906 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Mon, 15 Apr 2024 12:56:50 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (cha/80B4) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0ee58caf-401e-000b-3d8b-7e7f31000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-04-15 12:56:50 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49885	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:49 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:50 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831897 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 15 Apr 2024 12:56:50 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (cha/814C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d48e4e49-c01e-007b-3b8b-7e8d31000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-04-15 12:56:50 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49884	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:49 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:50 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831898 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Mon, 15 Apr 2024 12:56:50 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (cha/80B0) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7f2d1473-201e-0065-478b-7e9f0e000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-04-15 12:56:50 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49887	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:50 UTC	1559	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 1120 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1713185783595_0.06185014442162462
2024-04-15 12:56:50 UTC	1120	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:56:50 UTC	1044	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 2809d53f-0600-4c51-83e5-0064b53a9516 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014EA7 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest X-MSEdge-Ref: Ref A: C23FB1EE0ADD47D2BB3EACEC0C6903B9 Ref B: CH1AA2020616003 Ref C: 2024-04-15T12:56:50Z Date: Mon, 15 Apr 2024 12:56:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49888	13.107.246.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:50 UTC	593	OUT	GET /shared/5/js/login_en_R9cd1P-sU5i6N1WyJUoyQA2.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:50 UTC	813	IN	HTTP/1.1 200 OK Date: Mon, 15 Apr 2024 12:56:50 GMT Content-Type: application/x-javascript Content-Length: 226968 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 03 Apr 2024 11:52:34 GMT ETag: 0x8DC53D48D3EFF7D x-ms-request-id: 866b0c53-e01e-0000-0634-8fe59e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240415T125650Z-r1d8d857679xbfbtvetq7rnr2w00000000ng000000002qdf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-15 12:56:50 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd f9 77 db 38 b3 20 fa fb fb 2b 6c bd 1c 1f f2 1a 56 24 3b 2b 15 b6 26 f1 d2 49 67 ed 2c 9d 4e fb f3 f8 d0 12 6c 31 91 48 85 a4 ec 38 b6 fe f7 57 0b 56 92 72 92 ef ce 9d b9 6f 72 4e 2c 10 04 81 42 a1 00 54 15 aa 0a b7 ff 63 7d ed 20 2f d6 a6 e9 48 66 a5 5c 4b b3 d3 bc 98 25 55 9a 67 6b f3 a9 4c 20 ab 94 72 6d 9a 9f a5 d9 b1 cc ba 9f cb ee 8b 67 bb fb af de ed 77 ab 6f d5 da 7f dc fe 7f d6 4f 17 d9 08 cb 07 e1 d5 79 52 ac 49 51 89 4c 14 22 8f af 1e de df ee dd 8b cc 7b 7a 13 5e 75 16 58 69 55 a4 a3 aa 33 c0 2f 8a 38 0b 1e ee 3c b8 13 e2 37 a3 49 3a 1d ef e6 59 25 bf 55 ef 2f e7 b2 8c d6 7b 62 64 9f 6b 8f f4 7a 2c 4f 93 c5 b4 7a 53 e4 73 7e 4e cb f9 34 b9 7c 95 cc a8 f8 99 ac f6 6a 25 28 ab 48 cf e5 f8 5d 95 54 f2 a0 c8 67 Data Ascii: w8 +lV$;+&Ig,Nl1H8WVrorN,BTc} /Hf\K%UgkL rmgwoOyRIQL"{z^uXiU3/8<7I:Y%U/{bdkz,OzSs~N4\|j%(H]Tg
2024-04-15 12:56:50 UTC	16384	IN	Data Raw: e1 fb 37 18 ed a9 23 b6 7b 11 06 e1 2a 19 92 ed fb 16 69 3b db 84 ae 9d 1d 2c 7b 86 b6 f7 62 e7 0e a7 19 0d 3b 77 b1 45 60 c6 76 a0 bd a7 f9 0c bf b9 ef 61 76 e7 81 83 d9 9d 87 3e 5a ef f4 3c a4 de 81 da 9e 65 a5 44 5b 8b 3b f7 2c 7e fb d8 c7 83 3e 26 00 92 83 6d 4c 00 18 07 3b 98 80 6f 0e ee 60 02 3e 38 b8 8b 09 00 e0 e0 1e 26 a0 e9 83 fb 98 80 66 0f 1e 20 aa a0 bd 83 87 98 e8 63 85 3d 4c 51 d5 58 f7 36 d6 dd c7 ca ef 40 e5 af 16 33 c6 47 1f a1 72 87 6a 7b 1b 5e a3 8a 10 86 25 f1 66 02 50 77 5d 8b 43 24 af e9 3f cf 0f e9 19 3d 59 f0 97 38 3e 6f a0 bd bb 5e d4 32 61 0f 29 ad 12 87 23 ac ca 98 66 57 38 54 a3 1e b5 1d 27 ca da 91 ba d6 e7 5a dd 3e 57 99 2a e0 f0 a3 23 ba 43 de 81 2b ea 40 67 b5 0b e5 bf af 0f 2c 80 e9 4a 94 c6 87 0f 2a 57 eb 09 f5 22 d0 b6 Data Ascii: 7#{i;,{b;wE`vav>Z<eD[;,~>&mL;o`>8&f c=LQX6@3Grj{^%fPw]C$?=Y8>o^2a)#fW8T'Z>W#C+@g,J*W"
2024-04-15 12:56:50 UTC	16384	IN	Data Raw: 62 e5 dd 1c 47 da d1 c3 b9 6b ff b4 f3 ae d4 3b 75 a2 1c 9c ae 61 33 9e db db d5 fe a9 c9 ea 0f 05 f5 e9 d4 3f e6 fb cb 5a c5 08 80 86 22 45 00 37 86 0a 27 ef d2 60 f3 99 b0 d7 b7 b6 62 6d 21 1b 35 ce d5 ae f1 e3 d1 8c 95 2b 8d d9 3f 84 6b 17 23 7d 30 07 c9 c9 1e b6 25 53 d8 e8 83 71 e4 68 02 6a 09 f5 d5 07 5e 78 2b 12 2a f9 93 ca 46 49 07 56 67 64 8b 94 1d 60 70 d2 ae f8 56 f7 2b a9 8f e5 9b c4 68 70 42 51 91 e0 ce e8 6f a9 d2 75 3f a4 83 50 92 a7 2d ae 52 a4 6b bb ac 6a c7 31 d4 33 92 fd 39 99 97 14 94 5a 88 ab 3b de 3d a3 a2 f5 ff 06 9b 8d 58 a5 e9 1c c8 dc e8 b0 9f 99 af 86 ef da d2 c2 5c 14 cf db 34 a8 13 d9 d6 b9 d9 d6 70 95 69 2d 1c 04 d4 73 b3 17 03 f1 6e 47 c5 93 a1 6f 46 63 74 a4 1a 11 58 6a d3 81 d5 d2 52 53 19 9c 61 ee 51 2d 69 a9 7e 82 53 19 Data Ascii: bGk;ua3?Z"E7'`bm!5+?k#}0%Sqhj^x+*FIVgd`pV+hpBQou?P-Rkj139Z;=X\4pi-snGoFctXjRSaQ-i~S
2024-04-15 12:56:50 UTC	16384	IN	Data Raw: e2 56 e6 ec f7 8c 71 83 bc aa c4 07 33 1f c1 ca c7 30 27 4e 02 e6 64 2a 61 3c e8 83 67 f1 91 4d 93 1e 4a 08 ff 1a 87 d8 70 17 51 a0 03 94 40 5d ee a9 12 30 cd 6e 32 ef d9 88 e2 4c 06 32 06 65 c0 7f e4 2f 7e 36 dc 58 15 72 c2 d5 c5 39 f0 a4 94 d6 71 c2 36 1b 8c 6d 36 18 d9 3c 43 fc 52 50 80 c6 35 fe dc 44 6d 01 fc dd 46 6d 01 fc 7d 86 da 47 72 5a 11 67 52 b9 7a 27 9d 09 6f f0 f9 0e ca f8 f0 77 17 05 fc c2 db d9 f4 51 c4 17 07 70 8d 05 72 be e1 5f f8 d4 29 fe 85 be 3f e2 5f f8 d6 6b a9 74 fd 8a bf e1 5b 2f f1 2f 7c eb 13 f6 3d 80 17 81 30 c8 e8 f4 ae f8 12 be 44 d5 ed d1 a7 c3 cf af 3f 7d 3c 14 fb f0 fb 70 ef af 7b af 3f ed 7f fc 70 ba f7 cb de 87 4f e2 1d dc 3b fa fc ea f5 bb 97 47 47 fb 1f 7e 14 6f c2 d7 7d 2d ef 62 89 cf 0f 70 03 47 76 18 7e ed f5 be 5a Data Ascii: Vq30'Nd*a<gMJpQ@]0n2L2e/~6Xr9q6m6<CRP5DmFm}GrZgRz'owQpr_)?_kt[//\|=0D?}<p{?pO;GG~o}-bpGv~Z
2024-04-15 12:56:50 UTC	16384	IN	Data Raw: 4b 5a e6 88 89 a9 51 b3 30 36 87 e5 91 4b ad 12 20 b1 ca b3 e9 14 6c 3e e7 84 af ca 7c 66 65 b5 16 e6 af dc 2c 2b f1 8e 8a 30 74 94 ab 5e c7 51 ea c0 ae 11 f5 b0 4c 19 f2 c1 d4 9b fb e0 56 61 6b a3 f2 b9 6c b0 20 3e 97 87 f7 83 ec f9 15 4f 81 68 4c 6e 12 5e 8f 82 00 78 53 f7 e6 90 5f 95 88 36 59 2e 8f dc 79 05 0d 7e be 84 d6 fa ef 6b 40 99 26 6d ff a9 b5 2e cf 93 7d 56 38 cd 75 9b cf a7 ed 88 c5 a6 bf b0 9c de 97 cf 16 22 be 76 2f 75 5f a5 66 af 67 f0 a5 85 77 6f e4 e8 88 be e8 b6 cd e8 db 3d 83 1d 8d 3c 95 7d 64 89 63 16 1d cb 88 ec 1e 0f a2 95 8b bb 5c 22 2d 20 3d 07 8b d2 b3 d1 61 a6 67 63 51 7a 36 3a a2 f5 6c 2c 2a cb 76 1c 4d 30 27 43 0c 32 2b c4 52 6e 1e 9d 65 67 17 9d 05 25 58 42 be 10 07 5a 65 ac c1 b0 12 e7 80 28 d2 f9 57 1e 6a 22 59 a0 b5 a2 64 Data Ascii: KZQ06K l>\|fe,+0t^QLVakl >OhLn^xS_6Y.y~k@&m.}V8u"v/u_fgwo=<}dc\"- =agcQz6:l,*vM0'C2+Rneg%XBZe(Wj"Yd
2024-04-15 12:56:50 UTC	16384	IN	Data Raw: 49 31 50 92 ab 25 8a d1 3b 7d a1 f5 d7 35 51 28 cc 8c a7 9e f1 12 e7 d5 4b 89 83 e1 54 d6 61 45 0c b3 84 cb 10 07 57 e2 6e d0 72 d4 16 e2 9c c1 e4 89 47 19 c6 6c 68 9b 14 85 ea c9 2c 18 07 75 f5 64 4d 2d 05 89 89 60 d3 64 ce af 9a 76 74 c1 e9 d9 03 b6 06 19 b6 25 14 c6 53 64 73 4c df 22 e2 59 9f 55 68 be 2a 93 60 c9 cb 2e e3 9a 38 11 48 65 a9 5a d5 20 20 56 df 70 a0 ba 2b 5f d6 6a 8c 62 8a 60 9c 55 c4 29 d5 4a fc 5f 41 2b 54 46 c9 c4 15 cd 32 8a 15 84 3b 6a 3f b2 c1 37 65 3a 96 a3 45 f0 a4 18 d8 6b 70 9e 6d d0 69 d6 90 44 cd 74 ce d1 a8 e2 6c d1 d0 16 04 48 55 19 40 90 6e 67 88 05 44 ce b4 25 38 4d 59 7b 96 9e b3 c1 25 7b a6 06 3d 53 e0 4c 8c 34 71 ba f0 63 bf e9 f7 61 33 f0 e6 5e a7 90 86 68 28 1c b1 d0 78 10 a4 0e 5b 91 c7 bb 94 8b 2c de 54 a2 31 73 46 Data Ascii: I1P%;}5Q(KTaEWnrGlh,udM-`dvt%SdsL"YUh*`.8HeZ Vp+_jb`U)J_A+TF2;j?7e:EkpmiDtlHU@ngD%8MY{%{=SL4qca3^h(x[,T1sF
2024-04-15 12:56:50 UTC	16384	IN	Data Raw: 5d f9 c0 b4 bd c0 3b 02 89 9f cd a3 f2 41 69 97 70 b6 c4 3d 25 4e 0e a0 e4 60 88 29 3a be e1 06 6d 5c 04 8e 95 85 30 2c d1 08 b5 05 b4 65 b2 73 6b 00 4a 5c 61 0a 49 24 27 c5 ce 82 09 1f c7 80 ef 14 51 72 16 84 78 fa 72 ce ae 64 16 b9 08 f2 04 78 c7 e5 06 6e 74 f5 11 af 33 79 89 13 93 d3 fc 6c ee a0 79 70 f8 8b 4c 2a 2c c5 dc ed b6 04 02 fc 64 70 e5 c9 0a a6 29 9f b9 f4 c5 26 5a ef 63 dc 4e 2f 8b ab 26 e5 f2 f1 a8 60 99 2c 1c 9a c3 a6 71 14 74 a2 28 65 52 ae a3 4e b6 2a 3d 31 97 17 9f 1c 6e 06 e4 76 99 e7 bb 54 60 79 f4 11 09 72 99 3a 38 14 b1 0f bd d6 08 98 c3 2b 3c 7e b8 d5 36 7a 2e c8 01 19 ae b7 11 5e ae 80 f8 b4 19 ef c0 14 77 19 6e 0e c8 70 23 38 d8 3c 1a 6b a2 8c 6c 55 19 c1 39 7c 46 34 73 a0 2c de 36 7b 1e a5 63 72 60 16 b7 60 d3 dc 8a 92 2d 47 0e Data Ascii: ];Aip=%N`):m\0,eskJ\aI$'Qrxrdxnt3ylypL,dp)&ZcN/&`,qt(eRN=1nvT`yr:8+<~6z.^wnp#8<klU9\|F4s,6{cr``-G
2024-04-15 12:56:50 UTC	16384	IN	Data Raw: 20 38 02 de 60 ea 0e 3c 29 6b 31 08 fb e2 79 33 91 1b 9c f2 e2 78 68 ca 93 71 33 f1 0f 9f 7a 3d 5e 39 ea 3b 9f 49 c8 3b 85 84 3c ec 17 10 f1 e7 71 10 1c 02 52 b9 c2 08 d0 9b 23 0a 89 b3 99 36 02 40 9c a1 d6 19 e9 e8 0a 65 4e 5e 9e 5e 21 63 01 a9 60 22 e9 6c 33 b9 4e eb 31 81 a4 dc e8 bb 80 b2 99 ca b7 39 dd 4e 79 45 b3 fc 62 72 3c f1 ba e8 1c bc 57 ea 4c 93 52 59 0a 68 8d 4b cb de 4b 94 f4 f9 23 af 57 2d fd 1c b4 46 1e 3e aa 81 5b 02 aa 81 f3 03 d4 1d f9 65 6e 40 af 0a 72 85 8a ec 0e 99 72 4c bc 88 4a 04 5d 0f 06 1e 28 54 69 1c 46 28 9a 4d 60 8a 00 54 9e 57 5a a9 4c 19 78 34 06 2f e3 c4 45 eb d2 57 a2 62 9c 15 80 46 e8 06 8c c1 b7 06 93 3b 9f 99 9b 41 ca 4e 23 63 a4 6e 9a a6 6b 83 75 29 e8 86 60 64 08 8b f2 f6 eb 0c d7 23 99 b8 1b 93 9f ec da f7 0d 1b d9 Data Ascii: 8`<)k1y3xhq3z=^9;I;<qR#6@eN^^!c`"l3N19NyEbr<WLRYhKK#W-F>[en@rrLJ](TiF(M`TWZLx4/EWbF;AN#cnku)`d#
2024-04-15 12:56:50 UTC	16384	IN	Data Raw: 29 89 86 b8 b8 95 21 eb c6 8b 64 73 0c 29 37 6e a6 83 80 25 d1 bf 32 ae 01 20 c9 b7 a8 de 06 af 53 c5 7d 91 3c b9 dd dd 21 72 97 bb 5d 20 49 a1 b9 06 32 15 f9 45 8a 77 77 e3 4d 17 e9 70 e3 0d 5a 6c b9 41 8b fc 0d b2 03 a8 a1 1b 3a 95 eb 8b e5 c0 3b 06 9b 5c e7 60 5a 3b d5 5b 04 c0 c7 51 3a 69 9f 74 13 b5 f1 00 15 0b 97 32 e9 d6 ef 3c e5 4a 46 48 d8 ec 11 3c 9a fe 9a dd 36 1e dc 55 3b 2c 78 d1 38 e9 a2 08 4b b2 54 ab 40 1b ea 1e 94 c5 c7 69 23 73 8e f0 19 ba 46 f8 af a7 df a0 db 14 4d 42 ed 6b 12 ea 48 97 46 47 6b 29 5c 0f 0f 61 72 38 bf 35 b2 39 30 78 b4 aa 91 ae 1b a8 bb 28 0e c4 00 1f 82 80 80 18 4a e8 e0 f5 53 b3 de 59 91 d0 3d 37 f3 1d 35 73 04 61 65 29 bc ca bf 9a 00 79 91 4e b9 a4 5e 7e 20 05 b7 48 78 99 5f ff dd 3c 4f 5c 55 ac 41 cb 8c ef 75 4e 5b Data Ascii: )!ds)7n%2 S}<!r] I2EwwMpZlA:;\`Z;[Q:it2<JFH<6U;,x8KT@i#sFMBkHFGk)\ar8590x(JSY=75sae)yN^~ Hx_<O\UAuN[
2024-04-15 12:56:50 UTC	16384	IN	Data Raw: 2b e7 08 95 e0 4e e1 cf fe f5 c1 3b 7a 56 34 c0 7d 4a 4e 55 84 ad b3 b3 23 40 e2 2a 13 4b a6 ce aa 74 67 f3 7a 2c 3b 69 45 7c 85 dd dd d9 ee ee 15 6b 3b 99 93 8a 4c 7d 50 b8 a6 21 0c f6 18 80 86 72 9f db 44 bf e2 30 87 d9 dc d1 7e 1f 6a bf ed 3a c2 e1 13 9c 25 3c af ed 5e 47 46 3d de 2c 76 13 1e 3c 8a f7 b2 42 44 69 a8 6e 80 10 66 49 de 2f 37 0c 83 a8 2d 73 e2 a7 41 bf 8c 5d 76 b4 4d 6f 65 bf 51 13 6b 4a 1e 5a 84 3f 77 75 b0 2c a6 df 76 94 af 6d 9b 73 19 b2 6c 9e 30 7a 82 0d b8 ab da a2 3a 59 d1 81 6d bb e8 c0 36 dc 28 d8 c4 96 25 c8 7c 32 44 98 69 e5 7c 7c 9a c1 69 c5 0c 55 3f 79 c1 e2 e8 96 56 7e 67 9c 4b fd 0f df 8f b7 b9 c4 59 9f 12 af b4 c4 fc 2a e0 76 88 f5 2f ad 45 1e 92 5b 45 5f a5 26 28 af ad cd 42 17 e0 7f 4f 83 bb 56 92 d2 41 6e 94 3f a0 d0 52 Data Ascii: +N;zV4}JNU#@Ktgz,;iE\|k;L}P!rD0~j:%<^GF=,v<BDinfI/7-sA]vMoeQkJZ?wu,vmsl0z:Ym6(%\|2Di\|\|iU?yV~gKYv/E[E_&(BOVAn?R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49891	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:50 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:50 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831897 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 15 Apr 2024 12:56:50 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (cha/814C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d48e4e49-c01e-007b-3b8b-7e8d31000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-04-15 12:56:50 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49892	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:50 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:50 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831898 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Mon, 15 Apr 2024 12:56:50 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (cha/80B0) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7f2d1473-201e-0065-478b-7e9f0e000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-04-15 12:56:50 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49893	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:51 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cXwXgbe8zTHMstt&MD=p8yDpKxa HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-15 12:56:51 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 5fc91d49-a904-43f0-8416-070dd4c8a3d6 MS-RequestId: a77ca89c-d210-4dcf-a99d-5e07b1d675de MS-CV: IHsFqfFqHUyL+KI2.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 15 Apr 2024 12:56:50 GMT Connection: close Content-Length: 25457
2024-04-15 12:56:51 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-15 12:56:51 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49894	13.107.246.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:51 UTC	607	OUT	GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:51 UTC	812	IN	HTTP/1.1 200 OK Date: Mon, 15 Apr 2024 12:56:51 GMT Content-Type: application/x-javascript Content-Length: 32821 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Sat, 30 Mar 2024 01:22:56 GMT ETag: 0x8DC5057EDD0C741 x-ms-request-id: 966e795c-a01e-007c-7f34-8fe387000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240415T125651Z-r1d8d857679rdms7a7mbcvaw9c00000000q0000000002y1c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-15 12:56:51 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dc bd 69 77 db 38 b3 3f f8 7e 3e 85 c4 e9 f1 25 db b0 22 39 4b 77 a4 30 3a 89 e3 74 9c cd ee d8 59 ba dd be 3e b4 04 d9 6c cb a4 42 52 5e 62 e9 bb 4f fd 0a 0b 41 8a 4e f2 9c ff 9d 79 71 fb 74 2c 62 21 08 14 0a 85 aa 42 55 e1 de af ed d6 cb 34 6b 4d e3 91 4c 72 d9 8a 93 49 9a 5d 44 45 9c 26 ad d9 54 46 94 95 4b d9 4a 13 39 ce 37 a2 24 9a de 14 f1 28 df f8 37 3f 7e f8 e0 a4 f7 db e6 83 68 d2 3b e9 3e 94 9b 27 d1 fd f1 c9 b1 4c 3a ff e6 9d b7 3b 5b db ef f7 b7 3b c5 75 d1 fa f5 de ff e5 cd d1 4a 91 c5 a3 c2 1b f8 b9 9c 4e 3a 57 f2 64 16 8d ce b7 ce e6 c9 f9 f1 45 1e 8f 65 52 c4 c5 cd 71 1e e7 73 4a 47 e1 4f d5 5a 2c 0e 8f 82 ce 6c 9e 9f f9 87 87 9b 0f 7b 47 e2 f6 41 ef d1 e3 47 fd c9 3c 19 61 08 7e 22 a4 28 82 db a2 93 f9 32 10 Data Ascii: iw8?~>%"9Kw0:tY>lBR^bOANyqt,b!BU4kMLrI]DE&TFKJ97$(7?~h;>'L:;[;uJN:WdEeRqsJGOZ,l{GAG<a~"(2
2024-04-15 12:56:51 UTC	16384	IN	Data Raw: 9a cf ff a0 97 d4 c3 ff 5f fb 97 38 c7 e0 1a bc c6 7d 7c b5 77 72 dd d3 bd 33 7d 33 7b d2 f0 ef f8 10 27 9e 47 f6 a1 8f bf 95 e6 a9 63 ae bb 8a 8d 23 42 03 78 ba d1 1b d2 6f df c9 3d d6 b9 c7 9e 3a 29 60 36 23 0d 6b 5c 14 6d 03 e9 6c 3e 25 02 be 3b 83 d9 2d 11 cd fd 9b 9c e4 87 9d 64 92 1a 38 f3 86 57 84 26 9c 3e 73 a0 36 2a 0a 4c dd 9c 84 e7 c1 fc b4 cc 41 c0 d2 4a 15 95 a1 ae cf c8 0c f7 e3 f6 aa 7a a9 9a 4c dd 4b d5 cc 2c c2 19 95 27 ad c3 0c ac 02 34 25 6c a8 8d a2 93 aa bb 9b 3b 79 79 35 89 06 0d e5 55 ea b9 33 9a 55 79 2d 12 23 95 ab 71 4a 72 de 25 62 ed a5 b4 e9 a6 10 8e 13 de ea d5 2f 9a 4f 55 8c 92 b8 43 b8 55 e0 0e 4d 8e 1b ab de 76 32 49 62 8c 88 30 da ab e9 9c fb e8 ca b3 7b 75 5a 4d fc 90 b2 ac 4d 7f cc 9d 74 ef e0 4c b4 0d 5d c7 5c 4f af 4f Data Ascii: _8}\|wr3}3{'Gc#Bxo=:)`6#k\ml>%;-d8W&>s6*LAJzLK,'4%l;yy5U3Uy-#qJr%b/OUCUMv2Ib0{uZMMtL]\OO
2024-04-15 12:56:51 UTC	865	IN	Data Raw: cf 1e 40 28 00 0d ee c5 6b b7 ad 8b 69 8d bf c2 f7 ec 36 3a 49 d3 dd 34 b9 92 6d be 29 74 42 8f a0 cd 01 10 b1 97 47 61 82 f0 9e 6f 4a 94 57 7c c0 da 4b 55 1b 7d 62 5b 69 d2 2b ea ce a0 40 8d 76 4d bf 74 c5 37 97 09 0e 26 81 b8 2c 3a 01 94 7d 00 4b 28 57 1a fa 4e 71 e5 8f 38 1f 02 6d cd 49 85 56 9a ce be 5b 39 84 d5 d4 56 8a 3b b4 a1 35 26 78 ed 18 de 60 03 5a 9a d3 6c 64 66 63 c3 12 e7 fc a2 91 90 5c b1 0e 0c 7c 1d 34 53 48 68 85 d6 67 67 60 c6 59 b3 4e 2b e7 24 59 b5 6e 90 03 e2 dd e0 48 72 d5 d7 f0 4a e1 d7 9d e4 32 3d 48 4e e9 57 0c e3 d0 92 70 82 5d 73 6c e4 2a ad 85 ed a3 61 d5 d1 32 1c 27 f1 78 0c f7 b6 9f c5 63 20 44 c2 01 4e 65 9a 01 02 b5 e7 3a 2b 22 42 b7 d2 e2 ab 11 09 47 1b 31 7a 5d f3 e5 f3 eb be d5 7d 8b 7d 96 29 90 b2 5f 6f 14 b0 07 d6 71 Data Ascii: @(ki6:I4m)tBGaoJW\|KU}b[i+@vMt7&,:}K(WNq8mIV[9V;5&x`Zldfc\\|4SHhgg`YN+$YnHrJ2=HNWp]sl*a2'xc DNe:+"BG1z]}})_oq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49895	13.107.246.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:51 UTC	632	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:51 UTC	800	IN	HTTP/1.1 200 OK Date: Mon, 15 Apr 2024 12:56:51 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: 681bd81b-201e-0058-05c0-8ddebc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240415T125651Z-r1d8d857679cdlxxrhx8v2m02s00000000qg000000001x0h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-15 12:56:51 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49896	13.107.246.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:51 UTC	619	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:51 UTC	799	IN	HTTP/1.1 200 OK Date: Mon, 15 Apr 2024 12:56:51 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: 6a7bc8a9-e01e-0078-0d32-8f4f8f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240415T125651Z-r1d8d857679h2n9p514sf42hh000000000w000000000163m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-15 12:56:51 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49897	13.107.246.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:51 UTC	632	OUT	GET /shared/5/images/signin_options_4e48046ce74f4b89d450.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:52 UTC	799	IN	HTTP/1.1 200 OK Date: Mon, 15 Apr 2024 12:56:52 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:30 GMT ETag: 0x8DB772565B93440 x-ms-request-id: 32593151-701e-003d-6734-8f1b94000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240415T125652Z-r1d8d8576798smwqp5t7fp650w00000000pg000000006239 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-15 12:56:52 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49899	13.107.213.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:52 UTC	398	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:52 UTC	800	IN	HTTP/1.1 200 OK Date: Mon, 15 Apr 2024 12:56:52 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:25 GMT ETag: 0x8DB772562988611 x-ms-request-id: 681bd81b-201e-0058-05c0-8ddebc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240415T125652Z-r1d8d857679lkkqxr5nu316cmn00000000pg0000000031g9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-15 12:56:52 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49900	13.107.213.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:52 UTC	385	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:52 UTC	799	IN	HTTP/1.1 200 OK Date: Mon, 15 Apr 2024 12:56:52 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:22 GMT ETag: 0x8DB7725611C3E0C x-ms-request-id: 6a7bc8a9-e01e-0078-0d32-8f4f8f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240415T125652Z-r1d8d857679mxc75y58a0gq7p000000000sg000000002y0n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-15 12:56:52 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49901	13.107.213.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:52 UTC	398	OUT	GET /shared/5/images/signin_options_4e48046ce74f4b89d450.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:52 UTC	799	IN	HTTP/1.1 200 OK Date: Mon, 15 Apr 2024 12:56:52 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Jun 2023 15:44:30 GMT ETag: 0x8DB772565B93440 x-ms-request-id: 32593151-701e-003d-6734-8f1b94000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240415T125652Z-r1d8d857679c8r46ks6af5zhe000000000k0000000005qeq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-15 12:56:52 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49902	13.107.246.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:52 UTC	610	OUT	GET /16.000.30171.7/images/favicon.ico HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:53 UTC	759	IN	HTTP/1.1 200 OK Date: Mon, 15 Apr 2024 12:56:52 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 23:00:50 GMT ETag: 0x8DC54FB128F862F x-ms-request-id: d92915b2-d01e-001b-7e05-8f70ab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240415T125652Z-r1d8d857679xbfbtvetq7rnr2w00000000s00000000014t7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-15 12:56:53 UTC	15625	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-15 12:56:53 UTC	1549	IN	Data Raw: 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49903	13.107.213.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:53 UTC	376	OUT	GET /16.000.30171.7/images/favicon.ico HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:53 UTC	738	IN	HTTP/1.1 200 OK Date: Mon, 15 Apr 2024 12:56:53 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 23:00:50 GMT ETag: 0x8DC54FB128F862F x-ms-request-id: d92915b2-d01e-001b-7e05-8f70ab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240415T125653Z-r1d8d8576798smwqp5t7fp650w00000000sg0000000035a4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-15 12:56:53 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-15 12:56:53 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49905	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:54 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:54 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831908 Cache-Control: public, max-age=31536000 Content-MD5: V5EQEHVskNWHVMke8e4nZQ== Content-Type: application/x-javascript Date: Mon, 15 Apr 2024 12:56:54 GMT Etag: 0x8DC2E5A3CC5D827 Last-Modified: Thu, 15 Feb 2024 19:13:48 GMT Server: ECAcc (cha/0643) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d48e3eb0-c01e-007b-3a8b-7e8d31000000 x-ms-version: 2009-09-19 Content-Length: 113657 Connection: close
2024-04-15 12:56:54 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-04-15 12:56:54 UTC	16383	IN	Data Raw: 69 74 60 20 70 72 65 73 65 74 2c 20 63 61 6e 27 74 20 62 65 20 65 6d 70 74 79 22 29 3b 72 65 74 75 72 6e 20 65 2e 6f 70 74 69 6f 6e 73 26 26 72 2e 73 65 74 28 65 2e 6f 70 74 69 6f 6e 73 29 2c 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 26 26 72 5b 74 5d 2e 72 75 6c 65 72 2e 65 6e 61 62 6c 65 4f 6e 6c 79 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 29 2c 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 32 26 26 72 5b 74 5d 2e 72 75 6c 65 72 32 2e 65 6e 61 62 6c 65 4f 6e 6c 79 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d Data Ascii: it` preset, can't be empty");return e.options&&r.set(e.options),e.components&&Object.keys(e.components).forEach((function(t){e.components[t].rules&&r[t].ruler.enableOnly(e.components[t].rules),e.components[t].rules2&&r[t].ruler2.enableOnly(e.components[t]
2024-04-15 12:56:54 UTC	16383	IN	Data Raw: 75 30 33 66 30 22 2c 22 4b 63 65 64 69 6c 22 3a 22 5c 75 30 31 33 36 22 2c 22 6b 63 65 64 69 6c 22 3a 22 5c 75 30 31 33 37 22 2c 22 4b 63 79 22 3a 22 5c 75 30 34 31 61 22 2c 22 6b 63 79 22 3a 22 5c 75 30 34 33 61 22 2c 22 4b 66 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 30 65 22 2c 22 6b 66 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 32 38 22 2c 22 6b 67 72 65 65 6e 22 3a 22 5c 75 30 31 33 38 22 2c 22 4b 48 63 79 22 3a 22 5c 75 30 34 32 35 22 2c 22 6b 68 63 79 22 3a 22 5c 75 30 34 34 35 22 2c 22 4b 4a 63 79 22 3a 22 5c 75 30 34 30 63 22 2c 22 6b 6a 63 79 22 3a 22 5c 75 30 34 35 63 22 2c 22 4b 6f 70 66 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 34 32 22 2c 22 6b 6f 70 66 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 35 63 22 2c 22 4b 73 63 72 22 3a 22 5c 75 64 38 33 35 Data Ascii: u03f0","Kcedil":"\u0136","kcedil":"\u0137","Kcy":"\u041a","kcy":"\u043a","Kfr":"\ud835\udd0e","kfr":"\ud835\udd28","kgreen":"\u0138","KHcy":"\u0425","khcy":"\u0445","KJcy":"\u040c","kjcy":"\u045c","Kopf":"\ud835\udd42","kopf":"\ud835\udd5c","Kscr":"\ud835
2024-04-15 12:56:54 UTC	3	IN	Data Raw: 53 63 61 Data Ascii: Sca
2024-04-15 12:56:54 UTC	16383	IN	Data Raw: 72 6f 6e 22 3a 22 5c 75 30 31 36 30 22 2c 22 73 63 61 72 6f 6e 22 3a 22 5c 75 30 31 36 31 22 2c 22 53 63 22 3a 22 5c 75 32 61 62 63 22 2c 22 73 63 22 3a 22 5c 75 32 32 37 62 22 2c 22 73 63 63 75 65 22 3a 22 5c 75 32 32 37 64 22 2c 22 73 63 65 22 3a 22 5c 75 32 61 62 30 22 2c 22 73 63 45 22 3a 22 5c 75 32 61 62 34 22 2c 22 53 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 65 22 2c 22 73 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 66 22 2c 22 53 63 69 72 63 22 3a 22 5c 75 30 31 35 63 22 2c 22 73 63 69 72 63 22 3a 22 5c 75 30 31 35 64 22 2c 22 73 63 6e 61 70 22 3a 22 5c 75 32 61 62 61 22 2c 22 73 63 6e 45 22 3a 22 5c 75 32 61 62 36 22 2c 22 73 63 6e 73 69 6d 22 3a 22 5c 75 32 32 65 39 22 2c 22 73 63 70 6f 6c 69 6e 74 22 3a 22 5c 75 32 61 31 33 22 2c 22 73 63 73 69 6d 22 Data Ascii: ron":"\u0160","scaron":"\u0161","Sc":"\u2abc","sc":"\u227b","sccue":"\u227d","sce":"\u2ab0","scE":"\u2ab4","Scedil":"\u015e","scedil":"\u015f","Scirc":"\u015c","scirc":"\u015d","scnap":"\u2aba","scnE":"\u2ab6","scnsim":"\u22e9","scpolint":"\u2a13","scsim"
2024-04-15 12:56:54 UTC	16383	IN	Data Raw: 2c 63 3c 30 3f 6c 2e 70 75 73 68 28 5b 22 63 6c 61 73 73 22 2c 72 2e 6c 61 6e 67 50 72 65 66 69 78 2b 64 5d 29 3a 28 6c 5b 63 5d 3d 6c 5b 63 5d 2e 73 6c 69 63 65 28 29 2c 6c 5b 63 5d 5b 31 5d 2b 3d 22 20 22 2b 72 2e 6c 61 6e 67 50 72 65 66 69 78 2b 64 29 2c 70 3d 7b 61 74 74 72 73 3a 6c 7d 2c 22 3c 70 72 65 3e 3c 63 6f 64 65 22 2b 69 2e 72 65 6e 64 65 72 41 74 74 72 73 28 70 29 2b 22 3e 22 2b 61 2b 22 3c 2f 63 6f 64 65 3e 3c 2f 70 72 65 3e 5c 6e 22 29 3a 22 3c 70 72 65 3e 3c 63 6f 64 65 22 2b 69 2e 72 65 6e 64 65 72 41 74 74 72 73 28 68 29 2b 22 3e 22 2b 61 2b 22 3c 2f 63 6f 64 65 3e 3c 2f 70 72 65 3e 5c 6e 22 7d 2c 69 2e 69 6d 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 2c 73 29 7b 76 61 72 20 6f 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 6f Data Ascii: ,c<0?l.push(["class",r.langPrefix+d]):(l[c]=l[c].slice(),l[c][1]+=" "+r.langPrefix+d),p={attrs:l},"<pre><code"+i.renderAttrs(p)+">"+a+"</code></pre>\n"):"<pre><code"+i.renderAttrs(h)+">"+a+"</code></pre>\n"},i.image=function(e,t,r,n,s){var o=e[t];return o
2024-04-15 12:56:54 UTC	16383	IN	Data Raw: 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 62 72 65 61 6b 3b 66 6f 72 28 4c 3d 21 31 2c 63 3d 30 2c 64 3d 7a 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 63 2b 2b 29 69 66 28 7a 5b 63 5d 28 65 2c 76 2c 72 2c 21 30 29 29 7b 4c 3d 21 30 3b 62 72 65 61 6b 7d 69 66 28 4c 29 62 72 65 61 6b 3b 69 66 28 68 29 7b 69 66 28 28 45 3d 6f 28 65 2c 76 29 29 3c 30 29 62 72 65 61 6b 3b 46 3d 65 2e 62 4d 61 72 6b 73 5b 76 5d 2b 65 2e 74 53 68 69 66 74 5b 76 5d 7d 65 6c 73 65 20 69 66 28 28 45 3d 73 28 65 2c 76 29 29 3c 30 29 62 72 65 61 6b 3b 69 66 28 5f 21 3d 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 45 2d 31 29 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 28 52 3d 68 3f 65 2e 70 75 73 68 28 22 6f 72 64 65 72 65 64 5f 6c 69 73 74 5f 63 6c 6f 73 65 22 2c Data Ascii: nt[t]-e.blkIndent>=4)break;for(L=!1,c=0,d=z.length;c<d;c++)if(z[c](e,v,r,!0)){L=!0;break}if(L)break;if(h){if((E=o(e,v))<0)break;F=e.bMarks[v]+e.tShift[v]}else if((E=s(e,v))<0)break;if(_!==e.src.charCodeAt(E-1))break}return(R=h?e.push("ordered_list_close",
2024-04-15 12:56:54 UTC	15356	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 3d 30 2c 73 3d 65 2e 74 6f 6b 65 6e 73 2c 6f 3d 65 2e 74 6f 6b 65 6e 73 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 74 3d 72 3d 30 3b 74 3c 6f 3b 74 2b 2b 29 73 5b 74 5d 2e 6e 65 73 74 69 6e 67 3c 30 26 26 6e 2d 2d 2c 73 5b 74 5d 2e 6c 65 76 65 6c 3d 6e 2c 73 5b 74 5d 2e 6e 65 73 74 69 6e 67 3e 30 26 26 6e 2b 2b 2c 22 74 65 78 74 22 3d 3d 3d 73 5b 74 5d 2e 74 79 70 65 26 26 74 2b 31 3c 6f 26 26 22 74 65 78 74 22 3d 3d 3d 73 5b 74 2b 31 5d 2e 74 79 70 65 3f 73 5b 74 2b 31 5d 2e 63 6f 6e 74 65 6e 74 3d 73 5b 74 5d 2e 63 6f 6e 74 65 6e 74 2b 73 5b 74 2b 31 5d 2e 63 6f 6e 74 65 6e 74 3a 28 74 21 3d 3d 72 26 26 28 73 5b 72 5d 3d 73 5b 74 5d 29 2c 72 2b 2b 29 3b 74 21 3d 3d 72 26 26 28 73 2e 6c 65 6e 67 74 68 Data Ascii: unction(e){var t,r,n=0,s=e.tokens,o=e.tokens.length;for(t=r=0;t<o;t++)s[t].nesting<0&&n--,s[t].level=n,s[t].nesting>0&&n++,"text"===s[t].type&&t+1<o&&"text"===s[t+1].type?s[t+1].content=s[t].content+s[t+1].content:(t!==r&&(s[r]=s[t]),r++);t!==r&&(s.length

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49907	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:54 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:54 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831899 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Mon, 15 Apr 2024 12:56:54 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (cha/8152) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 08096e23-b01e-0030-638b-7e7b37000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-04-15 12:56:54 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49910	152.199.4.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:56:54 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-15 12:56:54 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1831899 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Mon, 15 Apr 2024 12:56:54 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (cha/8152) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 08096e23-b01e-0030-638b-7e7b37000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-04-15 12:56:54 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49916	52.108.10.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:57:14 UTC	1052	OUT	POST /wv/RemoteUls.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&officeserverversion=20240409.7 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 394 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1713185783595_0.06185014442162462
2024-04-15 12:57:14 UTC	394	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 33 31 38 35 38 30 32 33 36 35 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 33 32 33 32 38 35 34 2c 22 54 22 3a 35 36 37 37 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 3a 20 41 70 70 5f 53 65 74 57 61 63 46 6c 69 67 68 74 56 61 6c 75 65 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 32 33 35 39 66 31 64 35 2d 36 62 66 62 2d 34 34 39 65 2d 61 34 61 38 2d 39 61 35 30 31 62 65 30 64 33 31 64 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 34 36 35 34 35 34 33 2c 22 54 22 3a 35 36 37 37 2c 22 4d 22 3a 22 52 75 6e 6e 69 6e 67 20 66 6c 6f 77 3a 20 73 65 74 57 61 63 46 6c 69 67 68 74 56 61 6c 75 65 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 33 34 33 31 33 34 2c 22 Data Ascii: {"T":1713185802365,"L":[{"G":593232854,"T":5677,"M":"Received message: App_SetWacFlightValue, correlation: 2359f1d5-6bfb-449e-a4a8-9a501be0d31d","C":379,"D":50},{"G":574654543,"T":5677,"M":"Running flow: setWacFlightValue","C":379,"D":50},{"G":507343134,"
2024-04-15 12:57:14 UTC	4378	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 3cdf3607-2e7e-4076-8efe-92b4c88c4f96 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014EA6 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 5F47FEA12278A67265C91B71CA60D7486F12491F X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524150164,524883107,524883136,524883138,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-CH1r8c&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: A9634B6D1AB146AFA65BEA74D9578052 Ref B: CH1AA2020613033 Ref C: 2024-04-15T12:57:14Z Date: Mon, 15 Apr 2024 12:57:13 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49928	52.108.8.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:57:21 UTC	1559	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 1211 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1713185783595_0.06185014442162462
2024-04-15 12:57:21 UTC	1211	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:57:21 UTC	1022	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 1168bb02-fe1a-4b24-a561-b3adfd0ef442 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A38 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 06256447E97B46798CD29D3285CC5FB2 Ref B: CH1AA2020610029 Ref C: 2024-04-15T12:57:21Z Date: Mon, 15 Apr 2024 12:57:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49931	52.108.8.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:57:21 UTC	1560	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 22667 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1713185783595_0.06185014442162462
2024-04-15 12:57:21 UTC	16384	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:57:21 UTC	6283	OUT	Data Raw: 5c 22 77 76 2e 70 6e 67 5c 22 3a 7b 5c 22 73 74 61 72 74 74 69 6d 65 5c 22 3a 35 39 30 36 2c 5c 22 77 6f 72 6b 65 72 73 74 61 72 74 5c 22 3a 30 2c 5c 22 72 65 64 69 72 65 63 74 73 74 61 72 74 5c 22 3a 30 2c 5c 22 72 65 64 69 72 65 63 74 65 6e 64 5c 22 3a 30 2c 5c 22 66 65 74 63 68 73 74 61 72 74 5c 22 3a 35 39 30 36 2c 5c 22 64 6f 6d 61 69 6e 6c 6f 6f 6b 75 70 73 74 61 72 74 5c 22 3a 36 32 39 31 2e 36 39 39 39 39 39 39 39 39 39 38 32 35 2c 5c 22 64 6f 6d 61 69 6e 6c 6f 6f 6b 75 70 65 6e 64 5c 22 3a 36 32 39 31 2e 37 39 39 39 39 39 39 39 39 39 38 38 2c 5c 22 63 6f 6e 6e 65 63 74 73 74 61 72 74 5c 22 3a 36 32 39 31 2e 37 39 39 39 39 39 39 39 39 39 38 38 2c 5c 22 73 65 63 75 72 65 63 6f 6e 6e 65 63 74 69 6f 6e 73 74 61 72 74 5c 22 3a 36 32 39 32 2e 30 39 39 Data Ascii: \"wv.png\":{\"starttime\":5906,\"workerstart\":0,\"redirectstart\":0,\"redirectend\":0,\"fetchstart\":5906,\"domainlookupstart\":6291.6999999999825,\"domainlookupend\":6291.799999999988,\"connectstart\":6291.799999999988,\"secureconnectionstart\":6292.099
2024-04-15 12:57:21 UTC	1001	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: caece3bb-4ea5-4ac1-ab33-ef7a3271c27e X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A77 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 0B437A5A4E3C429693DB764F6CC824D1 Ref B: CH1AA2020610017 Ref C: 2024-04-15T12:57:21Z Date: Mon, 15 Apr 2024 12:57:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49927	52.108.8.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:57:21 UTC	1559	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 1209 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1713185783595_0.06185014442162462
2024-04-15 12:57:21 UTC	1209	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:57:21 UTC	1008	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 17d2d54d-5101-4366-8205-23b08d64a993 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A5C X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: FABA2481DA2E44D0931A47D69FA1CCA2 Ref B: CH1AA2020610017 Ref C: 2024-04-15T12:57:21Z Date: Mon, 15 Apr 2024 12:57:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49930	52.108.8.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:57:21 UTC	1559	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 1221 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1713185783595_0.06185014442162462
2024-04-15 12:57:21 UTC	1221	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:57:22 UTC	1084	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 7109c861-bac2-44e4-a48f-a472be61fc59 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014AB4 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordcapacity,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest_control X-MSEdge-Ref: Ref A: F5A26767CCF4421ABF65BAC2BB6523AE Ref B: CH1AA2020617023 Ref C: 2024-04-15T12:57:21Z Date: Mon, 15 Apr 2024 12:57:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49932	52.108.8.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:57:21 UTC	1559	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 1227 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1713185783595_0.06185014442162462
2024-04-15 12:57:21 UTC	1227	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:57:21 UTC	1044	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 4fa833e0-7eac-4bfc-ba7f-b6984abc9b83 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014AAD X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 5652A8B0C28C4D0B9C97E69302A45CD4 Ref B: CH1AA2020617011 Ref C: 2024-04-15T12:57:21Z Date: Mon, 15 Apr 2024 12:57:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49929	52.108.8.12	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-15 12:57:21 UTC	1560	OUT	POST /wv/RemoteTelemetry.ashx?usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&build=16.0.17609.41003&waccluster=PUS1 HTTP/1.1 Host: word-view.officeapps.live.com Connection: keep-alive Content-Length: 10432 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://word-view.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&hid=hQBZjik%2Fo0GgEOkZLuMRSg.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffiles%2F5954E8D152D2525D!1377&wde=docx&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&jsapi=1&jsapiver=v2&corrid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&usid=e0f38bb6-aa9c-4242-af12-d76f6e72242c&newsession=1&sftc=1&uihit=editaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&dchat=1&wdorigin=Other&wdredirectionreason=Unified_ViewActionUrl Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=2611864d-2d9f-4485-ae4c-3662f1ed9e0c&&ODSP-ODWEB-ODCF&143; wla42=; E=P:0GIeaUtd3Ig=:6QopFvYYiIZNsvTfh18081/baoafkepb9TvGZK4D5SU=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1713185783595_0.06185014442162462
2024-04-15 12:57:21 UTC	10432	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 57 6f 72 64 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 39 2e 34 31 30 30 33 22 2c 22 6b 22 3a 22 50 55 53 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 30 76 55 51 32 79 64 47 44 4d 76 64 51 61 57 2b 32 66 45 50 7a 49 38 48 37 48 33 56 4d 75 5a 48 36 71 38 32 6c 63 65 61 78 43 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 2c 22 70 22 Data Ascii: {"d":{"a":"Word","b":"en-US","c":"View","d":"VIEW","e":"16.0.17609.41003","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17609.41003","k":"PUS1","l":"en-US","m":"\"0vUQ2ydGDMvdQaW+2fEPzI8H7H3VMuZH6q82lceaxCc=\"","n":"OneDriveWOPI","o":true,"p"
2024-04-15 12:57:21 UTC	1033	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: e2768a7f-55d8-4f33-811b-1a42b46e03c5 X-UserSessionId: e0f38bb6-aa9c-4242-af12-d76f6e72242c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014A55 X-OfficeVersion: 16.0.17609.41003 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://word-view.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 0BD85C4A5F9D4F4CA761075784D05252 Ref B: CH1AA2020610031 Ref C: 2024-04-15T12:57:21Z Date: Mon, 15 Apr 2024 12:57:21 GMT Connection: close Content-Length: 0

Target ID:	0
Start time:	14:55:53
Start date:	15/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	14:55:55
Start date:	15/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2032,i,10596633853863410946,5765538601192012558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:55:59
Start date:	15/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://1drv.ms/w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://1drv.ms/w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Windows Analysis Report
https://1drv.ms/w/s!Al1S0lLR6FRZimEOEUlL5t8uBi-Q?e=HWRoDF