Edit tour

Windows Analysis Report
Service Desk - Please verify your Account!.eml

Overview

General Information

Sample name:	Service Desk - Please verify your Account!.eml
Analysis ID:	1467097
MD5:	2ee1512b75a6eb7d0cfec26e59498a87
SHA1:	fcf3bfb4cdd0fe0632fcfd8cd5f6179bacf1befc
SHA256:	af32d2f5c0a94a306690a1aec136243fc3d9a525b20632d68101f1dda92a551b
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish57

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

OUTLOOK.EXE (PID: 5980 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\Service Desk - Please verify your Account!.eml" MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 6376 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "4DB382AA-9CF7-4B0F-B694-AFE8613678B8" "DCFA8FFF-E2DF-40B9-8F92-B340B9B00730" "5980" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 6888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1964,i,16825308507331499111,4604762926170312255,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 2132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1876,i,4678980704979854347,7524290499172280703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_119	JoeSecurity_HtmlPhish_57	Yara detected HtmlPhish_57	Joe Security

HTML

Source	Rule	Description	Author
0.6.pages.csv	JoeSecurity_HtmlPhish_57	Yara detected HtmlPhish_57	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_57	Yara detected HtmlPhish_57	Joe Security
0.8.pages.csv	JoeSecurity_HtmlPhish_57	Yara detected HtmlPhish_57	Joe Security

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 1, EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 5980, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\SearchToolbarsDisabled

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://certified-domain.cloudsurveillance.net/js/external/vimeo.min.js	Avira URL Cloud: Label: phishing
Source: https://certified-domain.cloudsurveillance.net/js/external/popper.min.js	Avira URL Cloud: Label: phishing
Source: https://certified-domain.cloudsurveillance.net/c361b6b574eaf9adb2fe8b6265ab571605542f7f	Avira URL Cloud: Label: phishing
Source: https://certified-domain.cloudsurveillance.net	Avira URL Cloud: Label: phishing
Source: https://certified-domain.cloudsurveillance.net/js/external/bootstrap.min.js	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://certified-domain.cloudsurveillance.net	LLM: Score: 8 brands: Reasons: The URL 'https://certified-domain.cloudsurveillance.net' is suspicious due to the use of a subdomain and a non-standard top-level domain (TLD) which is often used in phishing attacks. The webpage prominently features a login form asking for email and password without any branding or additional context, which is a common tactic in phishing sites. The lack of a CAPTCHA further raises suspicion as legitimate sites often use CAPTCHA to prevent automated attacks. The domain 'cloudsurveillance.net' does not correspond to any well-known brand, and the use of 'certified-domain' as a subdomain is a social engineering technique to mislead users into thinking the site is legitimate. Therefore, based on these observations, the site is likely a phishing site. DOM: 0.0.pages.csv
Source: https://player.vimeo.com	LLM: Score: 7 brands: Vimeo Reasons: The URL 'https://player.vimeo.com' appears to be a legitimate subdomain of Vimeo, a well-known video hosting platform. However, the login form displayed in the image does not match the typical design and branding of Vimeo's login pages. The form is generic and lacks any branding or logos that would typically be present on a legitimate Vimeo login page. This discrepancy, combined with the presence of a prominent login form, suggests the use of social engineering techniques to mislead users into entering their credentials. Therefore, despite the legitimate-looking URL, the site is likely a phishing site. DOM: 3.4.pages.csv

Yara detected HtmlPhish57

Source: Yara match	File source: 0.6.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.8.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_119, type: DROPPED

Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: Iframe src: https://player.vimeo.com/video/316118722
Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: Iframe src: https://player.vimeo.com/video/316118722
Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: Iframe src: https://player.vimeo.com/video/316118722

Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c

HTTP Parser: Number of links: 0

Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normal

HTTP Parser: Base64 decoded: http://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normal

Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c

HTTP Parser: Title: does not match URL

Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c

HTTP Parser: <input type="password" .../> found

Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: No favicon
Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: No favicon
Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/316118722	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/316118722	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/316118722	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/316118722	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normal	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/316118722?turnstile=0.SJVdzMrLaabawR3LwkQcMFBdws1IqH9TUW6LAxmmUhiAzDAN2NBo4WA3s5fGmqvZMy3P759dFHUU3sMvJYkaxhqWzcQU1Gib00f3OHMPcriqHoy7Q128TT5qX7e5BN-5dk-he7loIfjJBhkjnspfgt5RBH6GN5kATZi_cb3PXWm0KRcguMLh1BbzWkl9ykRWhKXTsRTPyP18Z99ivlUVbGWPbtUC2AnUzXLbEpJmGmsbU4Lkk-yIRHbu5jSgvy0iT0mEEo4WWtXNbONSBvVf1OmeUGqG--c0Z9YTm45wyWKsOJ1rpBy1A80SUZMHfEsDnyNDNmR-ufXnZg1iIQmFWzmUHcb1v8j_N_QMO6dS_Jwpgysx_gUuRoj1xu15ghRmE_eRzutDoD13bmy68at8IvIw0Uzz27xqQyCRNmF9xiJlWBmwR2Lk6J_xiJe81HuO.mVvw1ehDSsmIDXRjI9a-Lw.3028c9a87836b37535db85194ef6b8126bb688016e416d791d2b9baf785e7629&ref=https%253A%252F%252Fcertified-domain.cloudsurveillance.net%252F	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/316118722?turnstile=0.SJVdzMrLaabawR3LwkQcMFBdws1IqH9TUW6LAxmmUhiAzDAN2NBo4WA3s5fGmqvZMy3P759dFHUU3sMvJYkaxhqWzcQU1Gib00f3OHMPcriqHoy7Q128TT5qX7e5BN-5dk-he7loIfjJBhkjnspfgt5RBH6GN5kATZi_cb3PXWm0KRcguMLh1BbzWkl9ykRWhKXTsRTPyP18Z99ivlUVbGWPbtUC2AnUzXLbEpJmGmsbU4Lkk-yIRHbu5jSgvy0iT0mEEo4WWtXNbONSBvVf1OmeUGqG--c0Z9YTm45wyWKsOJ1rpBy1A80SUZMHfEsDnyNDNmR-ufXnZg1iIQmFWzmUHcb1v8j_N_QMO6dS_Jwpgysx_gUuRoj1xu15ghRmE_eRzutDoD13bmy68at8IvIw0Uzz27xqQyCRNmF9xiJlWBmwR2Lk6J_xiJe81HuO.mVvw1ehDSsmIDXRjI9a-Lw.3028c9a87836b37535db85194ef6b8126bb688016e416d791d2b9baf785e7629&ref=https%253A%252F%252Fcertified-domain.cloudsurveillance.net%252F	HTTP Parser: No favicon

Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: No <meta name="author".. found
Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: No <meta name="author".. found
Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: No <meta name="author".. found

Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: No <meta name="copyright".. found
Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: No <meta name="copyright".. found
Source: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.17:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.136:443 -> 192.168.2.17:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.136:443 -> 192.168.2.17:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.144:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.17:49778 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.17:49717 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: Joe Sandbox View	IP Address: 151.101.64.217 151.101.64.217
Source: Joe Sandbox View	IP Address: 146.75.118.109 146.75.118.109
Source: Joe Sandbox View	IP Address: 151.101.192.217 151.101.192.217
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SbBg58W+xeamAoo&MD=W21fK6dr HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /c361b6b574eaf9adb2fe8b6265ab571605542f7f HTTP/1.1Host: service-noreply.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9eeaa59b-909b-44da-89eb-fd0d929d008c HTTP/1.1Host: certified-domain.cloudsurveillance.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /js/external/jquery-3.3.1.min.js HTTP/1.1Host: certified-domain.cloudsurveillance.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008cAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlpsWElxcGhidHNxWTVmRUFrRFlIZFE9PSIsInZhbHVlIjoiS0pkQVJIMmpRT0RBS3FML1JGRytZZ3ZVR0RxaFV6QWpPcTZQWUptVTRqUC9sK2dzVGVwaVp3aS9YYnRRUkNobjF4MW5mVFVkR0ZCemE4NHFYU2k0cFhyeDZ3WklLQWZNQTJ6THNwNVpSV1o5QldKbW1HbDJwTFRReEVZRXZmdDQiLCJtYWMiOiJhNjdlMGEyNzMxMGZiMzU1ZTE5ZDIyNmFjODQ2YWE4YmNlNGU0NGMwMjU5NDYyNmU1ZTBjNmZhZGI5ZTFjNjFhIiwidGFnIjoiIn0%3D; bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA
Source: global traffic	HTTP traffic detected: GET /js/external/popper.min.js HTTP/1.1Host: certified-domain.cloudsurveillance.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008cAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlpsWElxcGhidHNxWTVmRUFrRFlIZFE9PSIsInZhbHVlIjoiS0pkQVJIMmpRT0RBS3FML1JGRytZZ3ZVR0RxaFV6QWpPcTZQWUptVTRqUC9sK2dzVGVwaVp3aS9YYnRRUkNobjF4MW5mVFVkR0ZCemE4NHFYU2k0cFhyeDZ3WklLQWZNQTJ6THNwNVpSV1o5QldKbW1HbDJwTFRReEVZRXZmdDQiLCJtYWMiOiJhNjdlMGEyNzMxMGZiMzU1ZTE5ZDIyNmFjODQ2YWE4YmNlNGU0NGMwMjU5NDYyNmU1ZTBjNmZhZGI5ZTFjNjFhIiwidGFnIjoiIn0%3D; bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA
Source: global traffic	HTTP traffic detected: GET /js/external/bootstrap.min.js HTTP/1.1Host: certified-domain.cloudsurveillance.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008cAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlpsWElxcGhidHNxWTVmRUFrRFlIZFE9PSIsInZhbHVlIjoiS0pkQVJIMmpRT0RBS3FML1JGRytZZ3ZVR0RxaFV6QWpPcTZQWUptVTRqUC9sK2dzVGVwaVp3aS9YYnRRUkNobjF4MW5mVFVkR0ZCemE4NHFYU2k0cFhyeDZ3WklLQWZNQTJ6THNwNVpSV1o5QldKbW1HbDJwTFRReEVZRXZmdDQiLCJtYWMiOiJhNjdlMGEyNzMxMGZiMzU1ZTE5ZDIyNmFjODQ2YWE4YmNlNGU0NGMwMjU5NDYyNmU1ZTBjNmZhZGI5ZTFjNjFhIiwidGFnIjoiIn0%3D; bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA
Source: global traffic	HTTP traffic detected: GET /js/external/vimeo.min.js HTTP/1.1Host: certified-domain.cloudsurveillance.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008cAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlpsWElxcGhidHNxWTVmRUFrRFlIZFE9PSIsInZhbHVlIjoiS0pkQVJIMmpRT0RBS3FML1JGRytZZ3ZVR0RxaFV6QWpPcTZQWUptVTRqUC9sK2dzVGVwaVp3aS9YYnRRUkNobjF4MW5mVFVkR0ZCemE4NHFYU2k0cFhyeDZ3WklLQWZNQTJ6THNwNVpSV1o5QldKbW1HbDJwTFRReEVZRXZmdDQiLCJtYWMiOiJhNjdlMGEyNzMxMGZiMzU1ZTE5ZDIyNmFjODQ2YWE4YmNlNGU0NGMwMjU5NDYyNmU1ZTBjNmZhZGI5ZTFjNjFhIiwidGFnIjoiIn0%3D; bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAad2EE00hv9%2B3VQIdgEwOqPMsv2tiH5XFm1vo0DuND9DV8CE3tcN%2BRx0YrnYEWh6fMXQAbAQSTBvbLxMCIHIK87MAgFwjuPzELp9r5dSz2/%2BY9K0DMk6NLGaj3LQs%2BqyfvkLNp3%2BCqSyeClXAsNFO%2BPTsETB8LAMT3ar5ImhYwYqWtc5EI%2BkWYy7BadA2W5XJ2EO2gwhA9TKiLkCjYwMvjxcHGNoGmPK/EA6bbfRfddOnoSGk0v43%2BdYQWMd3tTrjRDw97scwXbTZRfzpG2Lki1yW3W1xeVIkE/ELDnc3OtWjRHti0Z2IiFg3DuvW5y/aYwn94n4biQ2ocQeehFmNFQDZgAACKQMqZ0DB8saqAESC62n9WbS9l2iIhCan%2B4kLlErxXGttsAr0EGOZq2FzrPLG4mVPC1GVwlRYiAM6RJhYHE0bsgdLMPrbCBIcwf7EEs9SO36XeFcMwNPhFA6w7sJuJOnBGfNeg4te8ML49TqQnuub3n2LsHQwa6zGTCjqqC9DaxMaw6%2BkRVB9zHgorLPfbNFfjljk616OKEiOTLE%2Br0QJ%2BhhRRyS8qIdGbuMF3jE7vvBYV3BM9%2B0IeApMhPqY3KtM2csTmw8ljJVm3%2Bq%2B1QlWMSdvt3VxmQgP9tfyjGju/IH6WoEYenR4rZO4hs6M6P8jyTwttK/eiMt5KMETBsZibLkXyHO7o2DhfCYeSDTMpaYshctVbZmCi2u45mNgyN7pa/eEndVKrxrJGPTdjOy2%2B0Lga/WKHjDer9S/nBSdb7jusdy2xYBnpUsJgtCmy7NN0HdqSVXypfHOrBQTgNOzaXAnSqBDE0oPvTC/6IIRHqFhISVInJLZ7vdO7kymee7SYUFxmxymb6R7D%2BqczwSvMgQ8Hh4mFCwQYayUII3ovq%2B7WhhSvMRyM9VJMfIceGL6pbd1wE%3D%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1720020886User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 1FDCDDA7E56743DEB8C9199704826469X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=turnstileLoad HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/d2a97f6b6ec9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/ck50f/0x4AAAAAAAbaszMygKLnGbeo/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89d7f12a3b46330c HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/ck50f/0x4AAAAAAAbaszMygKLnGbeo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/ck50f/0x4AAAAAAAbaszMygKLnGbeo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89d7f1342b040f83 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: certified-domain.cloudsurveillance.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008cAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; XSRF-TOKEN=eyJpdiI6IjJUV2RrdWhySlJyRlZvZ014VGsxamc9PSIsInZhbHVlIjoiNm0za1l0dWVxcUduWVlUOGVOc21kdGxhRzhQU3pwVXhldFJacHRJK3BtMGlDa3hUM1NmQW9McnRJeDVQS2tvUUhkcTE0MHg2WjJDTm54Wkd2ME40bVdGdDZqU0tjazJ5bmRIb3JyanA2dXR4UjIrbHJQQ29CZnREREVvMnE5VTkiLCJtYWMiOiJlMmM3ZDc0ZDlmYmM1NjgzODJhOTM0NTkzZjcxYTE0MTE1NjU2OWM0NGVhMmJiNTk4MDRjNzkxNmRmM2I2OTY5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: certified-domain.cloudsurveillance.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; XSRF-TOKEN=eyJpdiI6IjJUV2RrdWhySlJyRlZvZ014VGsxamc9PSIsInZhbHVlIjoiNm0za1l0dWVxcUduWVlUOGVOc21kdGxhRzhQU3pwVXhldFJacHRJK3BtMGlDa3hUM1NmQW9McnRJeDVQS2tvUUhkcTE0MHg2WjJDTm54Wkd2ME40bVdGdDZqU0tjazJ5bmRIb3JyanA2dXR4UjIrbHJQQ29CZnREREVvMnE5VTkiLCJtYWMiOiJlMmM3ZDc0ZDlmYmM1NjgzODJhOTM0NTkzZjcxYTE0MTE1NjU2OWM0NGVhMmJiNTk4MDRjNzkxNmRmM2I2OTY5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/241012880:1720015859:kkF0OCqmMSLGEktS3D8RisR-2HYCyCkcz2JvdKGWaV4/89d7f1342b040f83/cb9c1cbf7db5b2d HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/89d7f1342b040f83/1720020894751/ZkI2jQcLRdkWedY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/89d7f1342b040f83/1720020894751/ZkI2jQcLRdkWedY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/89d7f1342b040f83/1720020894753/ea1770138270f94d94067ed79291a2ddd5bbccbd6cd6051a50b978c42caaa22b/ft-3sMJRFkk54_n HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/241012880:1720015859:kkF0OCqmMSLGEktS3D8RisR-2HYCyCkcz2JvdKGWaV4/89d7f1342b040f83/cb9c1cbf7db5b2d HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/4.34.4/js/player.module.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://player.vimeo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/4.34.4/js/vendor.module.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://player.vimeo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=80&q=85 HTTP/1.1Host: i.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/4.34.4/css/player.css HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=80&q=85 HTTP/1.1Host: i.vimeocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js_opt/modules/utils/vuid.min.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d HTTP/1.1Host: i.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d HTTP/1.1Host: i.vimeocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9eeaa59b-909b-44da-89eb-fd0d929d008c HTTP/1.1Host: certified-domain.cloudsurveillance.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; XSRF-TOKEN=eyJpdiI6IjJUV2RrdWhySlJyRlZvZ014VGsxamc9PSIsInZhbHVlIjoiNm0za1l0dWVxcUduWVlUOGVOc21kdGxhRzhQU3pwVXhldFJacHRJK3BtMGlDa3hUM1NmQW9McnRJeDVQS2tvUUhkcTE0MHg2WjJDTm54Wkd2ME40bVdGdDZqU0tjazJ5bmRIb3JyanA2dXR4UjIrbHJQQ29CZnREREVvMnE5VTkiLCJtYWMiOiJlMmM3ZDc0ZDlmYmM1NjgzODJhOTM0NTkzZjcxYTE0MTE1NjU2OWM0NGVhMmJiNTk4MDRjNzkxNmRmM2I2OTY5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SbBg58W+xeamAoo&MD=W21fK6dr HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=700&mh=394 HTTP/1.1Host: i.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=700&mh=394 HTTP/1.1Host: i.vimeocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /submit/c361b6b574eaf9adb2fe8b6265ab571605542f7f HTTP/1.1Host: certified-domain.cloudsurveillance.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; XSRF-TOKEN=eyJpdiI6InI1dDJkNERybk41bFlSSDcwcGFML2c9PSIsInZhbHVlIjoiTWhnbENUWnVqQ09qN3F5THlWY25XQ2F1YWgzejRhdlBRZFNlMzVJTnozZm9VeWRzVEI1UG5ZZEtnQklxeTZWd2tjVjlZTC8xbmxGTi9XeEUvVE54YXRYU1RhNExEbVdvVVVTZUFBRXJxV2lrWk9pSnJ4aG1rZTVOcWhUVEQramEiLCJtYWMiOiI2ZjYzYmNmMGFjYTkzNTBmYmYwNDc4NDI4MmVkZDllNDM1MTdiNTk1ZjEzYzJjYTRkN2IxMGFlZThlNWFjMDQyIiwidGFnIjoiIn0%3D

Source: global traffic	DNS traffic detected: DNS query: service-noreply.info
Source: global traffic	DNS traffic detected: DNS query: certified-domain.cloudsurveillance.net
Source: global traffic	DNS traffic detected: DNS query: player.vimeo.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: fresnel.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: i.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: f.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: vimeo.com
Source: global traffic	DNS traffic detected: DNS query: vod-adaptive-ak.vimeocdn.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4722Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 03 Jul 2024 15:34:55 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: rbI9sZfX92KrwstTtX79zA==$5NzBFdJ4SLjsgfoGxIkhRg==Server: cloudflareCF-RAY: 89d7f146094943f7-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 03 Jul 2024 15:35:00 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: aEEiJGD4oamRbGAbXirc9g==$iU9xeC5Nj3LnhqsGZ1TzJw==Server: cloudflareCF-RAY: 89d7f1612eab8c1d-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 03 Jul 2024 15:35:32 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closeServer: nginxCache-Control: no-cache, privateSet-Cookie: XSRF-TOKEN=eyJpdiI6IklMSmNKV21xa3dIdDZvU2JQODVGbXc9PSIsInZhbHVlIjoicEhkM2hGcVlOSUQ5R21xVEs1NXdQTmRORFpUZ2RjaitWWnVZUVBiQklYNUZ5emZGN1ZFMUE5ZmhRQmduMFBvSytnYjY3Q2haN0VDTkpXQkMrbFdNblJrQ0JHbVcwQWt3b04ydTNaOHovQ3dpSW9RR09BUngyNWptWW5ydFZvRXciLCJtYWMiOiI3YjZkYzE0NTljZGNjYTRmOGE4NTE1ZjYxMTg0Yzg5NzE0MTFjOGJhZjU0NTRmYTcyZjE1NTBlYzFmZDJlZjRhIiwidGFnIjoiIn0%3D; expires=Wed, 03 Jul 2024 17:35:32 GMT; Max-Age=7200; path=/; samesite=laxSet-Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; expires=Wed, 03 Jul 2024 17:35:32 GMT; Max-Age=7200; path=/; httponly; samesite=lax

Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.aadrm.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.aadrm.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.cortana.ai
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.microsoftstream.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.office.net
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.onedrive.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/imports
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://api.scheduler.
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://app.powerbi.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://augloop.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://augloop.office.com/v2
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://cdn.entity.
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: chromecache_119.8.dr	String found in binary or memory: https://certified-domain.cloudsurveillance.net
Source: chromecache_119.8.dr	String found in binary or memory: https://certified-domain.cloudsurveillance.net/js/external/bootstrap.min.js
Source: chromecache_119.8.dr	String found in binary or memory: https://certified-domain.cloudsurveillance.net/js/external/jquery-3.3.1.min.js
Source: chromecache_119.8.dr	String found in binary or memory: https://certified-domain.cloudsurveillance.net/js/external/popper.min.js
Source: chromecache_119.8.dr	String found in binary or memory: https://certified-domain.cloudsurveillance.net/js/external/vimeo.min.js
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://clients.config.office.net
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://clients.config.office.net/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://config.edge.skype.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://cortana.ai
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://cortana.ai/api
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://cr.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://d.docs.live.net
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://designerapp.officeapps.live.com/designerapp
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://dev.cortana.ai
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://devnull.onenote.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://directory.services.
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://ecs.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://edge.skype.com/rps
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/v2.1601652342626
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/%s
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/firstpartyapp/addins.xml
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://graph.windows.net
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://graph.windows.net/
Source: chromecache_113.8.dr	String found in binary or memory: https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://ic3.teams.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://invites.office.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://lifecycle.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://login.microsoftonline.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://login.microsoftonline.com/organizations
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://login.windows.local
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://make.powerautomate.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://management.azure.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://management.azure.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://messaging.action.office.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://messaging.office.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://ncus.contentsync.
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://officeapps.live.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://officepyservice.office.net/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://onedrive.live.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://outlook.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://outlook.office.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://outlook.office365.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://outlook.office365.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: chromecache_113.8.dr, chromecache_114.8.dr	String found in binary or memory: https://player.vimeo.com/NOTICE.txt
Source: chromecache_119.8.dr	String found in binary or memory: https://player.vimeo.com/video/316118722
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://powerlift.acompli.net
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://res.cdn.office.net
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.40
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: Service Desk - Please verify your Account!.eml	String found in binary or memory: https://service-noreply.info/c361b6b574eaf9adb2fe8b6265a=
Source: ~WRS{EAD067EE-9D7C-4A6D-9437-94F317187D02}.tmp.0.dr	String found in binary or memory: https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f
Source: Service Desk - Please verify your Account!.eml	String found in binary or memory: https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f=
Source: Service Desk - Please verify your Account!.eml	String found in binary or memory: https://service-noreply.info/image/c361b6b574eaf9adb2fe8b6265ab=
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://service.powerapps.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://settings.outlook.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://staging.cortana.ai
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://substrate.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: Service Desk - Please verify your Account!.eml	String found in binary or memory: https://support.zendesk1.com/auth/v2/login/signin?retu=
Source: ~WRS{EAD067EE-9D7C-4A6D-9437-94F317187D02}.tmp.0.dr	String found in binary or memory: https://support.zendesk1.com/auth/v2/login/signin?return_to=https%3A%2F%2Fsupport.zendesk.com%2F&the
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://tasks.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: chromecache_105.8.dr	String found in binary or memory: https://vimeo.com/
Source: chromecache_117.8.dr	String found in binary or memory: https://vimeo.com/ablincoln/vuid
Source: chromecache_105.8.dr	String found in binary or memory: https://vimeo.com/api/oembed.json?url=
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://webshell.suite.office.com
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://wus2.contentsync.
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	String found in binary or memory: https://www.yammer.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.17:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.136:443 -> 192.168.2.17:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.136:443 -> 192.168.2.17:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.144:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.17:49778 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.winEML@29/68@30/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240703T1134240707-5980.etl

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\Service Desk - Please verify your Account!.eml"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "4DB382AA-9CF7-4B0F-B694-AFE8613678B8" "DCFA8FFF-E2DF-40B9-8F92-B340B9B00730" "5980" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1964,i,16825308507331499111,4604762926170312255,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1876,i,4678980704979854347,7524290499172280703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "4DB382AA-9CF7-4B0F-B694-AFE8613678B8" "DCFA8FFF-E2DF-40B9-8F92-B340B9B00730" "5980" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1964,i,16825308507331499111,4604762926170312255,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1876,i,4678980704979854347,7524290499172280703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.6.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.6.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.6.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.6.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.6.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.6.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window found: window name: SysTabControl32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File opened: C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\MSVCR100.dll

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File Volume queried: C:\Windows\SysWOW64 FullSizeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Queries volume information: C:\Program Files (x86)\Microsoft Office\root\Office16\AI\WordCombinedFloatieLreOnline.onnx VolumeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	3 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	1 Process Injection	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Security Account Manager	13 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://shell.suite.office.com:1443	0%	URL Reputation	safe
https://autodiscover-s.outlook.com/	0%	URL Reputation	safe
https://useraudit.o365auditrealtimeingestion.manage.office.com	0%	URL Reputation	safe
https://outlook.office365.com/connectors	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	0%	URL Reputation	safe
https://cdn.entity.	0%	URL Reputation	safe
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	0%	URL Reputation	safe
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://lookup.onenote.com/lookup/geolocation/v1	0%	URL Reputation	safe
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	0%	URL Reputation	safe
https://api.aadrm.com/	0%	URL Reputation	safe
https://www.yammer.com	0%	URL Reputation	safe
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	0%	URL Reputation	safe
https://api.microsoftstream.com/api/	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	0%	URL Reputation	safe
https://cr.office.com	0%	URL Reputation	safe
https://messagebroker.mobile.m365.svc.cloud.microsoft	0%	URL Reputation	safe
https://otelrules.svc.static.microsoft	0%	URL Reputation	safe
https://edge.skype.com/registrar/prod	0%	URL Reputation	safe
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
https://tasks.office.com	0%	URL Reputation	safe
https://officeci.azurewebsites.net/api/	0%	URL Reputation	safe
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/ck50f/0x4AAAAAAAbaszMygKLnGbeo/auto/normal	0%	Avira URL Cloud	safe
https://edge.skype.com/rps	0%	URL Reputation	safe
https://messaging.engagement.office.com/	0%	URL Reputation	safe
https://f.vimeocdn.com/p/4.34.4/js/vendor.module.js	0%	Avira URL Cloud	safe
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	URL Reputation	safe
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://api.powerbi.com/v1.0/myorg/groups	0%	URL Reputation	safe
https://f.vimeocdn.com/p/4.34.4/css/player.css	0%	Avira URL Cloud	safe
https://web.microsoftstream.com/video/	0%	URL Reputation	safe
https://certified-domain.cloudsurveillance.net/js/external/vimeo.min.js	100%	Avira URL Cloud	phishing
https://api.addins.store.officeppe.com/addinstemplate	0%	URL Reputation	safe
https://graph.windows.net	0%	URL Reputation	safe
https://consent.config.office.com/consentcheckin/v1.0/consents	0%	URL Reputation	safe
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	0%	URL Reputation	safe
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	0%	URL Reputation	safe
https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f	0%	Avira URL Cloud	safe
https://safelinks.protection.outlook.com/api/GetPolicy	0%	URL Reputation	safe
https://ncus.contentsync.	0%	URL Reputation	safe
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	0%	URL Reputation	safe
http://weather.service.msn.com/data.aspx	0%	URL Reputation	safe
https://my.microsoftpersonalcontent.com	0%	Avira URL Cloud	safe
https://vimeo.com/	0%	Avira URL Cloud	safe
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	0%	URL Reputation	safe
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=turnstileLoad	0%	Avira URL Cloud	safe
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	0%	URL Reputation	safe
https://pushchannel.1drv.ms	0%	URL Reputation	safe
https://wus2.contentsync.	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/ios	0%	URL Reputation	safe
https://api.addins.omex.office.net/api/addins/search	0%	URL Reputation	safe
https://outlook.office365.com/api/v1.0/me/Activities	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/android/policies	0%	URL Reputation	safe
https://entitlement.diagnostics.office.com	0%	URL Reputation	safe
https://d.docs.live.net	0%	Avira URL Cloud	safe
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	0%	URL Reputation	safe
https://outlook.office.com/	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://substrate.office.com/search/api/v1/SearchHistory	0%	URL Reputation	safe
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation	0%	URL Reputation	safe
https://service.powerapps.com	0%	URL Reputation	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	0%	URL Reputation	safe
https://graph.windows.net/	0%	URL Reputation	safe
https://certified-domain.cloudsurveillance.net/js/external/popper.min.js	100%	Avira URL Cloud	phishing
https://devnull.onenote.com	0%	URL Reputation	safe
https://storage.live.com/clientlogs/uploadlocation	0%	Avira URL Cloud	safe
https://messaging.office.com/	0%	URL Reputation	safe
https://i.vimeocdn.com/video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=700&mh=394	0%	Avira URL Cloud	safe
https://certified-domain.cloudsurveillance.net/c361b6b574eaf9adb2fe8b6265ab571605542f7f	100%	Avira URL Cloud	phishing
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	0%	URL Reputation	safe
https://skyapi.live.net/Activity/	0%	URL Reputation	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/89d7f1342b040f83/1720020894751/ZkI2jQcLRdkWedY	0%	Avira URL Cloud	safe
https://fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=f97555e92db49319d4f7d300d8a8277c8aa00ec11720020900	0%	Avira URL Cloud	safe
https://messaging.action.office.com/setcampaignaction	0%	URL Reputation	safe
https://visio.uservoice.com/forums/368202-visio-on-devices	0%	URL Reputation	safe
https://staging.cortana.ai	0%	URL Reputation	safe
https://augloop.office.com	0%	URL Reputation	safe
https://api.diagnosticssdf.office.com/v2/file	0%	URL Reputation	safe
https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory	0%	URL Reputation	safe
https://officepyservice.office.net/	0%	URL Reputation	safe
https://api.diagnostics.office.com	0%	URL Reputation	safe
https://store.office.de/addinstemplate	0%	URL Reputation	safe
https://certified-domain.cloudsurveillance.net	100%	Avira URL Cloud	phishing
https://wus2.pagecontentsync.	0%	URL Reputation	safe
https://api.powerbi.com/v1.0/myorg/datasets	0%	URL Reputation	safe
https://cortana.ai/api	0%	URL Reputation	safe
https://api.diagnosticssdf.office.com	0%	URL Reputation	safe
https://login.microsoftonline.com/	0%	URL Reputation	safe
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	0%	URL Reputation	safe
https://player.vimeo.com/NOTICE.txt	0%	Avira URL Cloud	safe
https://api.cortana.ai	0%	Avira URL Cloud	safe
https://support.zendesk1.com/auth/v2/login/signin?return_to=https%3A%2F%2Fsupport.zendesk.com%2F&the	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89d7f12a3b46330c	0%	Avira URL Cloud	safe
https://certified-domain.cloudsurveillance.net/js/external/bootstrap.min.js	100%	Avira URL Cloud	phishing
https://onedrive.live.com/embed?	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89d7f1342b040f83	0%	Avira URL Cloud	safe
https://vimeo.com/ablincoln/vuid	0%	Avira URL Cloud	safe
https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
vimeo.map.fastly.net	151.101.192.217	true	false	unknown
fresnel.vimeocdn.com	34.120.202.204	true	false	unknown
certified-domain.cloudsurveillance.net	34.225.136.154	true	true	unknown
challenges.cloudflare.com	104.17.2.184	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
service-noreply.info	18.208.118.114	true	false	unknown
vimeo.com	162.159.138.60	true	true	unknown
vimeo-video.map.fastly.net	146.75.118.109	true	false	unknown
vod-adaptive-ak.vimeocdn.com	unknown	unknown	false	unknown
f.vimeocdn.com	unknown	unknown	false	unknown
player.vimeo.com	unknown	unknown	true	unknown
i.vimeocdn.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/ck50f/0x4AAAAAAAbaszMygKLnGbeo/auto/normal	false	Avira URL Cloud: safe	unknown
https://f.vimeocdn.com/p/4.34.4/js/vendor.module.js	false	Avira URL Cloud: safe	unknown
https://f.vimeocdn.com/p/4.34.4/css/player.css	false	Avira URL Cloud: safe	unknown
https://certified-domain.cloudsurveillance.net/js/external/vimeo.min.js	true	Avira URL Cloud: phishing	unknown
https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=turnstileLoad	false	Avira URL Cloud: safe	unknown
https://certified-domain.cloudsurveillance.net/js/external/popper.min.js	true	Avira URL Cloud: phishing	unknown
https://certified-domain.cloudsurveillance.net/c361b6b574eaf9adb2fe8b6265ab571605542f7f	true	Avira URL Cloud: phishing	unknown
https://i.vimeocdn.com/video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=700&mh=394	false	Avira URL Cloud: safe	unknown
https://fresnel.vimeocdn.com/add/player-stats?beacon=1&session-id=f97555e92db49319d4f7d300d8a8277c8aa00ec11720020900	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	URL Reputation: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/89d7f1342b040f83/1720020894751/ZkI2jQcLRdkWedY	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normal	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89d7f12a3b46330c	false	Avira URL Cloud: safe	unknown
https://certified-domain.cloudsurveillance.net/js/external/bootstrap.min.js	true	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89d7f1342b040f83	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://shell.suite.office.com:1443	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://autodiscover-s.outlook.com/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://useraudit.o365auditrealtimeingestion.manage.office.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://outlook.office365.com/connectors	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://cdn.entity.	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://rpsticket.partnerservices.getmicrosoftkey.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://lookup.onenote.com/lookup/geolocation/v1	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://api.aadrm.com/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://www.yammer.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://api.microsoftstream.com/api/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://cr.office.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://messagebroker.mobile.m365.svc.cloud.microsoft	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://otelrules.svc.static.microsoft	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://edge.skype.com/registrar/prod	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://res.getmicrosoftkey.com/api/redemptionevents	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://tasks.office.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://officeci.azurewebsites.net/api/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://my.microsoftpersonalcontent.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	Avira URL Cloud: safe	unknown
https://store.office.cn/addinstemplate	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://vimeo.com/	chromecache_105.8.dr	false	Avira URL Cloud: safe	unknown
https://edge.skype.com/rps	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://messaging.engagement.office.com/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://www.odwebp.svc.ms	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://api.powerbi.com/v1.0/myorg/groups	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://web.microsoftstream.com/video/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://api.addins.store.officeppe.com/addinstemplate	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://graph.windows.net	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://consent.config.office.com/consentcheckin/v1.0/consents	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://d.docs.live.net	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	Avira URL Cloud: safe	unknown
https://safelinks.protection.outlook.com/api/GetPolicy	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://ncus.contentsync.	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
http://weather.service.msn.com/data.aspx	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://pushchannel.1drv.ms	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://wus2.contentsync.	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/ios	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://api.addins.omex.office.net/api/addins/search	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://outlook.office365.com/api/v1.0/me/Activities	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/android/policies	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://entitlement.diagnostics.office.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://outlook.office.com/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://storage.live.com/clientlogs/uploadlocation	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://substrate.office.com/search/api/v1/SearchHistory	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/c2r/v1.0/InteractiveInstallation	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://service.powerapps.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://graph.windows.net/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://devnull.onenote.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://messaging.office.com/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://certified-domain.cloudsurveillance.net	chromecache_119.8.dr	true	Avira URL Cloud: phishing	unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://skyapi.live.net/Activity/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://player.vimeo.com/NOTICE.txt	chromecache_113.8.dr, chromecache_114.8.dr	true	Avira URL Cloud: safe	unknown
https://api.cortana.ai	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	Avira URL Cloud: safe	unknown
https://messaging.action.office.com/setcampaignaction	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://visio.uservoice.com/forums/368202-visio-on-devices	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://staging.cortana.ai	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://onedrive.live.com/embed?	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	Avira URL Cloud: safe	unknown
https://augloop.office.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://api.diagnosticssdf.office.com/v2/file	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://officepyservice.office.net/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://api.diagnostics.office.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://store.office.de/addinstemplate	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://support.zendesk1.com/auth/v2/login/signin?return_to=https%3A%2F%2Fsupport.zendesk.com%2F&the	~WRS{EAD067EE-9D7C-4A6D-9437-94F317187D02}.tmp.0.dr	false	Avira URL Cloud: safe	unknown
https://wus2.pagecontentsync.	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://api.powerbi.com/v1.0/myorg/datasets	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages	chromecache_113.8.dr	false	Avira URL Cloud: safe	unknown
https://cortana.ai/api	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://vimeo.com/ablincoln/vuid	chromecache_117.8.dr	false	Avira URL Cloud: safe	unknown
https://api.diagnosticssdf.office.com	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://login.microsoftonline.com/	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown
https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize	B526F1CD-9D11-4AF3-B061-3462913F8AB4.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.208.118.114	service-noreply.info	United States	14618	AMAZON-AESUS	false
151.101.64.217	unknown	United States	54113	FASTLYUS	false
146.75.118.109	vimeo-video.map.fastly.net	Sweden	30051	SCCGOVUS	false
151.101.192.217	vimeo.map.fastly.net	United States	54113	FASTLYUS	false
34.120.202.204	fresnel.vimeocdn.com	United States	15169	GOOGLEUS	false
44.193.44.29	unknown	United States	14618	AMAZON-AESUS	false
34.225.136.154	certified-domain.cloudsurveillance.net	United States	14618	AMAZON-AESUS	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467097
Start date and time:	2024-07-03 17:33:53 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Service Desk - Please verify your Account!.eml
Detection:	MAL
Classification:	mal64.phis.winEML@29/68@30/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .eml

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, backgroundTaskHost.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.32.97, 52.113.194.132, 2.19.126.151, 2.19.126.160, 192.229.221.95, 20.189.173.6, 216.58.212.131, 142.250.186.142, 108.177.15.84, 34.104.35.123, 162.159.138.60, 162.159.128.61, 142.250.184.234, 142.250.186.170, 142.250.181.234, 172.217.16.138, 216.58.212.138, 142.250.74.202, 216.58.206.74, 142.250.186.106, 142.250.184.202, 142.250.186.74, 172.217.16.202, 142.250.186.42, 172.217.18.106, 142.250.186.138, 172.217.18.10, 142.250.185.74, 172.217.23.99, 142.250.186.174, 142.250.181.238, 2.16.238.149, 2.16.238.145, 2.16.62.27, 2.16.62.73, 216.58.206.42, 216.58.212.170, 142.250.185.131, 172.217.18.14
Excluded domains from analysis (whitelisted): omex.cdn.office.net, slscr.update.microsoft.com, clientservices.googleapis.com, mobile.events.data.microsoft.com, ecs-office.s-0005.s-msedge.net, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, update.googleapis.com, officeclient.microsoft.com, www.gstatic.com, ukw-azsc-config.officeapps.live.com, a1792.dscc.akamai.net, a1864.dscd.akamai.net, www.bing.com, clients1.google.com, ecs.office.com, fs.microsoft.com, accounts.google.com, player.vimeo.com.cdn.cloudflare.net, content-autofill.googleapis.com, prod.configsvc1.live.com.akadns.net, www.googleapis.com, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, s-0005.s-msedge.net, config.officeapps.live.com, evoke-windowsservices-tas.msedge.net, vod-adaptive.akamaized.net, ecs.office.trafficmanager.net, clients.l.google.com, omex.cdn.office.net.akamaized.net, europe.configsvc1.live.com.akadns.net, mobile.events.data.trafficmanager.net, onedscolprdwus05.westus.cloudapp.azur
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Service Desk - Please verify your Account!.eml

Input	Output
URL: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a 'Sign In' button, which is a common element of a login form.","The text 'Set Password' also suggests the presence of a login form, as setting a password is often a step in creating a new account or resetting a forgotten password."]}
Title: certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c OCR: Sign In Service Desk Email Set Password Sign in
URL: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title and text of the webpage do not contain a login form requesting sensitive information.","The title and text do not create a sense of urgency, as they clearly state that the message is part of a training and awareness campaign.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage.","The title and text are informative and educational, aiming to help users identify phishing scams and protect their sensitive data."]}
Title: It's only a Test. OCR: This is only a test! This was not a REAL phishing e-mail. You received this message as a part of a training and awareness campaign which simulates phishing attacks you may encounter. Phishing aims to deceive you by impersonating trusted sources through email. Watch the video below to sharpen your skills in spotting phishing scams and protecting your sensitive data, because knowledge [s your best defense. How to Avoid Phishing Scams This message was generated by BullPhish ID Phishing Simulation Training Platform NOT the organization named in the message above, and has no assfation with, nor endorse the Training and Awareness services provided by the 3uIIPhish ID platform. The sole purpose of this message is to simulate actual phishing threats that employees encounter to strengthen awareness regarding the methods of deception used by malicious actors who pose as legitimate and reputable businesses and organizations.
URL: https://certified-domain.cloudsurveillance.net Model: gpt-4o	```json{ "phishing_score": 8, "brands": null, "phishing": true, "suspicious_domain": true, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "unknown", "reasons": "The URL 'https://certified-domain.cloudsurveillance.net' is suspicious due to the use of a subdomain and a non-standard top-level domain (TLD) which is often used in phishing attacks. The webpage prominently features a login form asking for email and password without any branding or additional context, which is a common tactic in phishing sites. The lack of a CAPTCHA further raises suspicion as legitimate sites often use CAPTCHA to prevent automated attacks. The domain 'cloudsurveillance.net' does not correspond to any well-known brand, and the use of 'certified-domain' as a subdomain is a social engineering technique to mislead users into thinking the site is legitimate. Therefore, based on these observations, the site is likely a phishing site."}

URL: https://player.vimeo.com/video/316118722?turnstile=0.SJVdzMrLaabawR3LwkQcMFBdws1IqH9TUW6LAxmmUhiAzDAN2NBo4WA3s5fGmqvZMy3P759dFHUU3sMvJYkaxhqWzcQU1Gib00f3OHMPcriqHoy7Q128TT5qX7e5BN-5dk-he7loIfjJBhkjnspfgt5RBH6GN5kATZi_cb3PXWm0KRcguMLh1BbzWkl9ykRWhKXTsRTPyP Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a 'Sign In' button, which is a common element of a login form.","The webpage also contains input fields for 'Service Desk Email' and 'Set Password', which are used to request sensitive information.","There is no evidence of a CAPTCHA or anti-robot detection mechanism on the webpage."]}
Title: certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c OCR: Sign In Service Desk Email Set Password Sign in
URL: https://player.vimeo.com Model: gpt-4o	```json{ "phishing_score": 7, "brands": "Vimeo", "phishing": true, "suspicious_domain": false, "has_prominent_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": false, "legitmate_domain": "vimeo.com", "reasons": "The URL 'https://player.vimeo.com' appears to be a legitimate subdomain of Vimeo, a well-known video hosting platform. However, the login form displayed in the image does not match the typical design and branding of Vimeo's login pages. The form is generic and lacks any branding or logos that would typically be present on a legitimate Vimeo login page. This discrepancy, combined with the presence of a prominent login form, suggests the use of social engineering techniques to mislead users into entering their credentials. Therefore, despite the legitimate-looking URL, the site is likely a phishing site."}

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	https://mail.pfl.fyi/v1/messages/0190749a-2f6a-7c9f-b37a-88f0ae969ede/click?link_id=0190749a-2ffa-7f41-ad16-3ecda235df51&signature=3e892faf1c0137166fda82e5ff5c6a3150c2cec9	Get hash	malicious	HTMLPhisher	Browse
	http://beetrootculture.com	Get hash	malicious	Unknown	Browse
	https://url.us.m.mimecastprotect.com/s/GSubCpYn1pC4mvoJtD-hLP?domain=brileyfinancial-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse
	https://link.mail.beehiiv.com/ls/click?upn=u001.DTQiLe1mLQCNek4IXPrb3cd8am3-2BtbSaRRShUhZCbhF1FE2NDum-2B9YeqhMivZ-2FcIJGKdOjfqgyCSTZimAiOiNKkJG3N5vgYBNDNlk5YkmOU2XPb-2FKTFlF-2Fc7jFH7Nb8Q0JW6uJclJabjCcGs0cWdzdydwDpcxzScPZQBex7SofyQj6MGdYzEG8hbxGGqYt2bpR0NjPAx6JIYz6GJiSrQNg-3D-3DNN1n_VW5ZEdFpCuXmC2nf4fwMfiBmdui0O95PSMmp4s-2F2oS3jvSHISWr6XQl8RtHpD7TWmHpRBlT8NsCamUZaroeFibjayeskXeuNnFhPFOon1-2FD6SmbcpIEUC7jghzzXsggajKIODB16RJEeGNz4SFHe6mT-2Bn59v08ju13fD9NtKJQcr97qiQNjiGiaoQJcvN3gUurUBqLZp9I4f9bNW54ZUVVCzpwaogbLaWcL9oScbt8r4Ku34t9zOqlF27gTqXVf6T2MbNMKkoCYnb-2BuL8kIZdyoRM3EFOIuktrG5gMH3OTa1K2klBhmxFOQ2d7plqd5asAi8Ofl9YcYOh-2FL4f45riCQtSdd7jru06EkHcBuJahi-2BD3xm-2F7PbjpIpmn-2Bu7KYdjQeOSKE-2FSiD6UNxc7JQNRWkdnK1RTC7eoEMZms82uCa8fJQIoMgqBt91NrcdZIDONaGhhpHXRhQ1VbYp5h6Cow-3D-3D#?email=dmFsZXJpZS5jaHJ1c2NpZWxAb3Zlcmxha2Vob3NwaXRhbC5vcmc=	Get hash	malicious	HTMLPhisher	Browse
	NSLC_Billing_Document_No_0240255100.html	Get hash	malicious	CVE-2024-21412	Browse
	https://isothermcx-my.sharepoint.com/:o:/p/m_chiasson/EldSmlva1OBFixvWpubo0mgB0DZQ4Do42riWb9YO1XmP-g?e=5%3av4rvfI&at=9	Get hash	malicious	HTMLPhisher	Browse
	http://www.evernote.com/shard/s371/sh/f041cc04-2eb8-11e1-1279-c0c24914207a/LWhD3rgdQ5xR5t--iDOJ7P-MUkYVUhgRq62dC8LVzLZOnctWRKJm5hEzqg	Get hash	malicious	HTMLPhisher	Browse
	http://booking.extnnehotteir.com/admin/o2shi1bka89	Get hash	malicious	Unknown	Browse
	Vertex Business Services_SKM_C950633210_650106.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://www.filemail.com/t/RuKZYfeB	Get hash	malicious	HTMLPhisher	Browse
151.101.64.217	http://purple683606.studio.site/	Get hash	malicious	Unknown	Browse
	https://mg1bfngm.r.us-west-2.awstrack.me/L0/https:%2F%2Frevvitysignals.flexnetoperations.com/1/010101902cdaddd1-d5baf378-d6a1-494e-93fe-7e5b5c9ac2af-000000/Z7a4stK-RPA_fgx2tetLRX9SKSU=379	Get hash	malicious	Unknown	Browse
	https://kibro.com/	Get hash	malicious	Unknown	Browse
	http://selliliar.live	Get hash	malicious	Unknown	Browse
	GPPONGMHJKPFNBHAGPMJFKANNFBLLAMG_6_10_69_0.crx	Get hash	malicious	Coinhive	Browse
	http://heritageconsultants.com	Get hash	malicious	Unknown	Browse
	https://vk.com/away.php?to=https://www.sigtn.com////////utils/emt.cfm?client_id=9195153%26campaign_id=73466%26link=neoparts.com.br%25E3%2580%2582/dayo/oe51/amdvbEBib3JsYW5kZ3Jvb3Zlci5jb20=$	Get hash	malicious	Unknown	Browse
	https://vk.com/away.php?to=https://sigtn.com////////utils/emt.cfm?client_id=9195153%26campaign_id=73466%26link=neoparts.com.br/dayo/ovu5/ZGVlbWEuYW1tYXJAYmVpbi5jb20=$	Get hash	malicious	Unknown	Browse
	https://sigtn.com////utils/emt.cfm?client_id=9195153&campaign_id=73466&link=tracker.club-os.com////campaign/click?msgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=neoparts%E3%80%82com.br/dayo/e6d2/c3RlZmFuQHJlbmNvcmUuY29t$	Get hash	malicious	Unknown	Browse
	https://www.sigtn.com/utils/emt.cfm?client_id=9195153&campaign_id=73466&link=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	Get hash	malicious	Unknown	Browse
151.101.192.217	http://www.splendidcare.sa.com/Juwqdh/xacwk5957irfeugd/FW2HGOqFbIVQssWaWxsuPFbxoA78Qv8umKJQmKBGMM0/enpkwYwNDdxjXCgjy64rbJkHYw5eTv2C-VSAAV3Fufzkb2cfb573zE5R9OTtHCML20yl9BXVgVz_5eGAS31RGQ	Get hash	malicious	Unknown	Browse
	http://terri.com	Get hash	malicious	Unknown	Browse
	https://kibro.com/	Get hash	malicious	Unknown	Browse
	https://info.virtualhealth.com/e3t/Ctc/GB+113/cmmfD04/VWRD9T8N6WzjN8MJTHvTlRp-W842MfZ5g9NL_N6-TN-l3qgyTW7Y8-PT6lZ3mfW56Rjx787zhFxW4_YPND6r6flrW4BlJlg1DphdCVWC28Z4PpMbRW6GGMRN2bfpFdW7hSWPP6KFbcRW4PBy7c6n3dRqN7ztR5NtV-d9W1y6F6Z799h-lN1ZbvtmQ73TLW5ShFj48-W2NPW1L2f016vN6bSW45yp6K7Xp_V9W1fy0nl6xLNR_N5n9x3txmtWFN2nZ6w9QgWwJW1rlxcq4rmPQZW2D31f_3FjFXjN7D51x8lx574V_S2G96X3V3rW3xJHsh5zkBZjW6M_Gg24KcjVwW2wm07P9jh6znVyVtyJ6VBB3ZW80wlHc6H0YX2W1stJK56XtGc2f45z9Cx04	Get hash	malicious	Unknown	Browse
	http://tan112131.studio.site/	Get hash	malicious	Unknown	Browse
	https://u32291210.ct.sendgrid.net/ls/click?upn=u001.zoYnZnzT1aNmxJyDpkt5-2F7ByDXhgHLoQINYxAMxqgpvOMLVzh2duB66JhsxmyNA-2B2oB29Sr-2BzUY3wsjUhL2w9w-3D-3DzLYR_E9PZ-2BNd-2BL-2FR-2FOsoqChC9LPbvFaV0s1njwxE0n9wyiNepBnXObnHyQf0Ox16EAtw0HITpr4QufWYHU-2FMF-2FYtG-2FUx1lneU2A8oshW8vQCDJT7V1aDwmGHrGPEUfNk-2BL7E29MeLQRurIdmGI6J2wW-2FHEHY-2FH2k1w8pcozxtLO-2FQcWd1Z75RHd6z6Rz-2FnYMpLiQR-2Ba6Xi9bSq62ph-2Fx4Wy5rEk14P2SsQkC1xAglbpMaIkGPriUiu1i-2B2SPtsxmQMUBDZ0yuyPlCYenGmrBDISDo28mqVRcU7H9gbpI-2BGBc7gVvsoFobGAujAwtvMDY6syXbecDgXgdAVZExexA5-2F-2BFj7hlD0KLoX1l18-2BMJWP6EQm4PLE1aaEf0CHd6Mv-2BtQe6ZVAV5UWiNWin1lJTOw7s646pCT7jQ-2BhEQUnqUx0NFHFw-2Bmufqblk5fJLT3I406XkF5yEDer67L0oXESfK4NfFP-2BSZQvG4M7Tdk7ilnyg4drSCxHDQjMQAiPuXIU-2F2jNL8okF8RQHSnGCCGSV-2FVhyiLxgTtwXulPsS2Pfu3VxcWTGee78ZvvJoPAMjUdELlc4orywF-2FtAFJFvQt1NfXJsHy53Ndf0bsLTzh5WDP36wbQGeqd29Fs7BRhhcsd7mwtzgDqbZIMmTLITIpAaSwSNsjJHx9DSMOeCo7pD2ZqTLCQ3vBDZPdARAZD3UIFbhBFKI-2FbBs-2FupWBBB7aPI45C-2BdGElT5AypObmE5PKEgXVuF3lxA5Y2t6mEIsVXGmQpPfKtAJaHYluOvTRB9DW7q9KOyI4Pcsi3FxeuuIe-2FTG0c9MAyO2HO1TSdYaqyoLpLsqtTsqyQMnFO0Yl8NPB6XwEOt9-2Bu9Rp-2F4LbHJTfJDyJ3Sh7-2FZwLkAx6u6SdyfnvRSGc93MbM37LnWS7aV-2F77ZN4aNVDIeDxxgTg34QEKNiFOrZiwODBLc0alaLuPjMMmsuwyWIiooz6VWDGfL0TJ-2FAMbeLtjov46V1xT-2Fg9WWXArp-2FAn7hYl6g1dGriic0McSexm	Get hash	malicious	Unknown	Browse
	https://patriotbarbie.com/	Get hash	malicious	Unknown	Browse
	Welcome to the Niskayuna Soccer Club 3 (003).docx	Get hash	malicious	Unknown	Browse
	http://heritageconsultants.com	Get hash	malicious	Unknown	Browse
	https://portal.h-isac.org/s/store#/store/checkout/a1J7V00000aRurx	Get hash	malicious	Unknown	Browse
146.75.118.109	http://www6.parrish.com	Get hash	malicious	Unknown	Browse
	http://diversey.com.pl	Get hash	malicious	Unknown	Browse
	http://terri.com	Get hash	malicious	Unknown	Browse
	http://purple683606.studio.site/	Get hash	malicious	Unknown	Browse
	https://mg1bfngm.r.us-west-2.awstrack.me/L0/https:%2F%2Frevvitysignals.flexnetoperations.com/1/010101902cdaddd1-d5baf378-d6a1-494e-93fe-7e5b5c9ac2af-000000/Z7a4stK-RPA_fgx2tetLRX9SKSU=379	Get hash	malicious	Unknown	Browse
	https://kibro.com/	Get hash	malicious	Unknown	Browse
	http://abriga.cl/	Get hash	malicious	Unknown	Browse
	https://info.virtualhealth.com/e3t/Ctc/GB+113/cmmfD04/VWRD9T8N6WzjN8MJTHvTlRp-W842MfZ5g9NL_N6-TN-l3qgyTW7Y8-PT6lZ3mfW56Rjx787zhFxW4_YPND6r6flrW4BlJlg1DphdCVWC28Z4PpMbRW6GGMRN2bfpFdW7hSWPP6KFbcRW4PBy7c6n3dRqN7ztR5NtV-d9W1y6F6Z799h-lN1ZbvtmQ73TLW5ShFj48-W2NPW1L2f016vN6bSW45yp6K7Xp_V9W1fy0nl6xLNR_N5n9x3txmtWFN2nZ6w9QgWwJW1rlxcq4rmPQZW2D31f_3FjFXjN7D51x8lx574V_S2G96X3V3rW3xJHsh5zkBZjW6M_Gg24KcjVwW2wm07P9jh6znVyVtyJ6VBB3ZW80wlHc6H0YX2W1stJK56XtGc2f45z9Cx04	Get hash	malicious	Unknown	Browse
	http://blogue.corim.qc.ca	Get hash	malicious	Unknown	Browse
	https://trewin-design.co.uk/	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
challenges.cloudflare.com	https://mail.pfl.fyi/v1/messages/0190749a-2f6a-7c9f-b37a-88f0ae969ede/click?link_id=0190749a-2ffa-7f41-ad16-3ecda235df51&signature=3e892faf1c0137166fda82e5ff5c6a3150c2cec9	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://link.mail.beehiiv.com/ls/click?upn=u001.DTQiLe1mLQCNek4IXPrb3cd8am3-2BtbSaRRShUhZCbhF1FE2NDum-2B9YeqhMivZ-2FcIJGKdOjfqgyCSTZimAiOiNKkJG3N5vgYBNDNlk5YkmOU2XPb-2FKTFlF-2Fc7jFH7Nb8Q0JW6uJclJabjCcGs0cWdzdydwDpcxzScPZQBex7SofyQj6MGdYzEG8hbxGGqYt2bpR0NjPAx6JIYz6GJiSrQNg-3D-3DNN1n_VW5ZEdFpCuXmC2nf4fwMfiBmdui0O95PSMmp4s-2F2oS3jvSHISWr6XQl8RtHpD7TWmHpRBlT8NsCamUZaroeFibjayeskXeuNnFhPFOon1-2FD6SmbcpIEUC7jghzzXsggajKIODB16RJEeGNz4SFHe6mT-2Bn59v08ju13fD9NtKJQcr97qiQNjiGiaoQJcvN3gUurUBqLZp9I4f9bNW54ZUVVCzpwaogbLaWcL9oScbt8r4Ku34t9zOqlF27gTqXVf6T2MbNMKkoCYnb-2BuL8kIZdyoRM3EFOIuktrG5gMH3OTa1K2klBhmxFOQ2d7plqd5asAi8Ofl9YcYOh-2FL4f45riCQtSdd7jru06EkHcBuJahi-2BD3xm-2F7PbjpIpmn-2Bu7KYdjQeOSKE-2FSiD6UNxc7JQNRWkdnK1RTC7eoEMZms82uCa8fJQIoMgqBt91NrcdZIDONaGhhpHXRhQ1VbYp5h6Cow-3D-3D#?email=dmFsZXJpZS5jaHJ1c2NpZWxAb3Zlcmxha2Vob3NwaXRhbC5vcmc=	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	Vertex Business Services_SKM_C950633210_650106.pdf	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://m.exactag.com/ai.aspx?tc=d9177038bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Atheannapolis250.org%2Fwinner%2F14136%2F%2FYnJhbndlbGwubW9mZmF0QGtwcy5jb20=	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://link.mail.beehiiv.com/ls/click?upn=u001.I67xw9O-2FCIng4d3bGWl4wF1gb7u7ov5hHZyE-2Bbx9UTzw17nXfIKdJcwxuwzDNoy2zqPLSJo-2BNEQCUif7aqDwom-2FNyeTx4oiB0wLXwXnzsK4D0yrlxIKEkPM7Cj-2FHMmK1N5sLNWwmlbyGbHeuv6ehAEECnEs6fFQOqqwD-2FKToPwl8ZCnBHVdQ3QU8RWhloPcfXcxa_hzdxOAnI3B-2BYhj5tgQXSRCdoGEcuM88dXETG-2BahO6Uvd8cr2jZPTzAVk72oAubAHPgVJjhCdU6bjbXnflniNIkDzPhLxyvQL1dSWfR-2BUbH1DS3LUwJipSkZoP8d1ryYR0TIdt5CyNutkaFy6gLHYcR4kl-2Fz1ezOldYW2WX0ghZl4CCdgYPK2Cj3fM7MmBqLOIY-2B5u5WgDkBzfdFRbwHzvpAejc0JJJ7tYmz-2BUzjH-2BoYmk-2F0HGjFVUaYNWyGnhGX4EhZzw6qOcJEaxZhVjnDpWPL3U5gs5ZetaaeYkMX5whQyh7U-2B0b4Qj0LqFla1tJlWVR4EZMTu40FIJ9BSbWnjEcc9JxuCrqAu48-2BpVmjPzA43qg6bd2x0AWoed1RbQeWVzBT648qZJ7L-2FqgKPY6ysg2U7IBuGeVI7oxhhKCbXSZln5jVQGdCxXpADLZSMla5T1Id6eeDoJeYo7zr6VqE6vw-3D-3D#aGFydG11dC5zY2htaWR0QGtwcy1jb25zdWx0aW5nLmNvbQ==	Get hash	malicious	Unknown	Browse	104.17.3.184
	Quarantined Messages (1).zip	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://uglb4.roperelo.com/caGPey/	Get hash	malicious	Unknown	Browse	104.17.3.184
	https://hr.economictimes.indiatimes.com/etl.php?url=https://hr.economictimes.indiatimes.com/etl.php?url=//maansaa.com/new/auth//xp8tpwsulfhjn/%2F/YW5keS5ncmVmcmF0aEBrcHMuY29t	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://url7304.disco-mailer.net/ls/click?upn=u001.DWLeRfOXStcSaUNphm6ZnGquuezyvOF0FIuLMCSCrIQ9t3e8n3fjexKHJjVTV-2BQUFT1dnxR3BcyXaxz-2BblhjX71zswvTIlAGm31luuFhJgeOGXb3dn9Itq74-2Fe-2BlKg-2Bs0-2F4odRns7kSdvfqBhyqSbrYsnPmx4SeDwlRdlhHbM3UucitnipcwJ1gR7h8DzOIUWsvEslHUA8FsNTNWtsq3Q-2FU-2FPeBtGbo-2Fx3kgcXxAZuE-3DPmkq_5KlZmZKASPtIpYbHU6HHQmxS-2FHe3g010GX01BBBmlalJnMdBClXoEYQADKPWInqgHw-2B5921oa-2Fum9DxIHV8wgOarlsOnYJwzp6I2lNDfeCQdFcL55956QetBM0U9iihLLCXzc7MWVFcQDUwnaU8PUgQFrTwK63nQhJu8ngVllYSJR-2BUamfX7Ej8Gpp4vMWsL8t65JTtpjdFVQ36IgP-2B2LxLYSj9SfdmLAt97TCVXHWn7xANKqYpl-2BYx09SetkszDOjJuUV9L9bqZ-2FbmClOsUrPLylG74RJ8zQAREr7-2BUktmlWKoc8C7oqqTOKv340mZnTc-2FztCVjFgPMm1Bz5lR5AptUVEvvSBboXVGluKKoNkkMFkS-2BmNybyD3Aa-2BX8UZ5s	Get hash	malicious	HTMLPhisher	Browse	104.17.3.184
	https://inpzk.useringimportdulcimer.ink/?=vxkncwole9	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
certified-domain.cloudsurveillance.net	https://service-noreply.info/bb6b5f24b671e8b5cc24d3b4419c04b4ed608655	Get hash	malicious	Unknown	Browse	100.26.95.146
certified-domain.cloudsurveillance.net	https://service-noreply.info/aa7a8069e8716654d955dbde1194c883ea98f69d	Get hash	malicious	Unknown	Browse	34.197.219.91
vimeo.map.fastly.net	http://diversey.com.pl	Get hash	malicious	Unknown	Browse	151.101.0.217
	http://terri.com	Get hash	malicious	Unknown	Browse	151.101.0.217
	http://purple683606.studio.site/	Get hash	malicious	Unknown	Browse	151.101.128.217
	https://mg1bfngm.r.us-west-2.awstrack.me/L0/https:%2F%2Frevvitysignals.flexnetoperations.com/1/010101902cdaddd1-d5baf378-d6a1-494e-93fe-7e5b5c9ac2af-000000/Z7a4stK-RPA_fgx2tetLRX9SKSU=379	Get hash	malicious	Unknown	Browse	151.101.128.217
	https://kibro.com/	Get hash	malicious	Unknown	Browse	151.101.192.217
	https://info.virtualhealth.com/e3t/Ctc/GB+113/cmmfD04/VWRD9T8N6WzjN8MJTHvTlRp-W842MfZ5g9NL_N6-TN-l3qgyTW7Y8-PT6lZ3mfW56Rjx787zhFxW4_YPND6r6flrW4BlJlg1DphdCVWC28Z4PpMbRW6GGMRN2bfpFdW7hSWPP6KFbcRW4PBy7c6n3dRqN7ztR5NtV-d9W1y6F6Z799h-lN1ZbvtmQ73TLW5ShFj48-W2NPW1L2f016vN6bSW45yp6K7Xp_V9W1fy0nl6xLNR_N5n9x3txmtWFN2nZ6w9QgWwJW1rlxcq4rmPQZW2D31f_3FjFXjN7D51x8lx574V_S2G96X3V3rW3xJHsh5zkBZjW6M_Gg24KcjVwW2wm07P9jh6znVyVtyJ6VBB3ZW80wlHc6H0YX2W1stJK56XtGc2f45z9Cx04	Get hash	malicious	Unknown	Browse	151.101.192.217
	http://blogue.corim.qc.ca	Get hash	malicious	Unknown	Browse	151.101.0.217
	https://trewin-design.co.uk/	Get hash	malicious	Unknown	Browse	151.101.0.217
	http://microsoftsatutalenta.vfairs.com/en/registration-form/	Get hash	malicious	Unknown	Browse	151.101.128.217
	https://cloudflare-ipfs.com/ipfs/bafybeiednkg7mskmgebvruwmsljawflur7qqufp2o2d46sflvbdpukc77y#Jean-sebastien.Thibault@chantiers-atlantique.com	Get hash	malicious	HTMLPhisher	Browse	151.101.0.217
service-noreply.info	https://service-noreply.info/bb6b5f24b671e8b5cc24d3b4419c04b4ed608655	Get hash	malicious	Unknown	Browse	34.197.219.91
	https://service-noreply.info/aa7a8069e8716654d955dbde1194c883ea98f69d	Get hash	malicious	Unknown	Browse	34.197.219.91
	https://service-noreply.info/af8c20c323ee910c8373febc2db11ef0b678906c	Get hash	malicious	Unknown	Browse	34.230.243.219
	https://service-noreply.info/e8f6a9bc300a5ae228f61d830e628dd84eb4807e	Get hash	malicious	HTMLPhisher	Browse	3.232.49.28
	https://service-noreply.info/ff7367836943c74d393306580066981e6f1ad869	Get hash	malicious	HTMLPhisher	Browse	52.72.226.75
	https://service-noreply.info/c2308b52212e2ef9d751a67886d6b60283e66ed0	Get hash	malicious	HTMLPhisher	Browse	3.231.194.142
	https://service-noreply.info/e4a337ff2ad671d883042fe1d81d1fc130c94daa	Get hash	malicious	HTMLPhisher	Browse	52.5.192.209
	https://service-noreply.info/e4a337ff2ad671d883042fe1d81d1fc130c94daa	Get hash	malicious	HTMLPhisher	Browse	52.203.32.133
vimeo.com	https://mg1bfngm.r.us-west-2.awstrack.me/L0/https:%2F%2Frevvitysignals.flexnetoperations.com/1/010101902cdaddd1-d5baf378-d6a1-494e-93fe-7e5b5c9ac2af-000000/Z7a4stK-RPA_fgx2tetLRX9SKSU=379	Get hash	malicious	Unknown	Browse	162.159.138.60
vimeo-video.map.fastly.net	http://www6.parrish.com	Get hash	malicious	Unknown	Browse	146.75.118.109
	http://diversey.com.pl	Get hash	malicious	Unknown	Browse	146.75.118.109
	http://terri.com	Get hash	malicious	Unknown	Browse	146.75.118.109
	http://purple683606.studio.site/	Get hash	malicious	Unknown	Browse	146.75.118.109
	https://mg1bfngm.r.us-west-2.awstrack.me/L0/https:%2F%2Frevvitysignals.flexnetoperations.com/1/010101902cdaddd1-d5baf378-d6a1-494e-93fe-7e5b5c9ac2af-000000/Z7a4stK-RPA_fgx2tetLRX9SKSU=379	Get hash	malicious	Unknown	Browse	146.75.118.109
	https://kibro.com/	Get hash	malicious	Unknown	Browse	146.75.118.109
	http://abriga.cl/	Get hash	malicious	Unknown	Browse	146.75.118.109
	https://info.virtualhealth.com/e3t/Ctc/GB+113/cmmfD04/VWRD9T8N6WzjN8MJTHvTlRp-W842MfZ5g9NL_N6-TN-l3qgyTW7Y8-PT6lZ3mfW56Rjx787zhFxW4_YPND6r6flrW4BlJlg1DphdCVWC28Z4PpMbRW6GGMRN2bfpFdW7hSWPP6KFbcRW4PBy7c6n3dRqN7ztR5NtV-d9W1y6F6Z799h-lN1ZbvtmQ73TLW5ShFj48-W2NPW1L2f016vN6bSW45yp6K7Xp_V9W1fy0nl6xLNR_N5n9x3txmtWFN2nZ6w9QgWwJW1rlxcq4rmPQZW2D31f_3FjFXjN7D51x8lx574V_S2G96X3V3rW3xJHsh5zkBZjW6M_Gg24KcjVwW2wm07P9jh6znVyVtyJ6VBB3ZW80wlHc6H0YX2W1stJK56XtGc2f45z9Cx04	Get hash	malicious	Unknown	Browse	146.75.118.109
	http://blogue.corim.qc.ca	Get hash	malicious	Unknown	Browse	146.75.118.109
	https://trewin-design.co.uk/	Get hash	malicious	Unknown	Browse	146.75.118.109

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://mail.pfl.fyi/v1/messages/0190749a-2f6a-7c9f-b37a-88f0ae969ede/click?link_id=0190749a-2ffa-7f41-ad16-3ecda235df51&signature=3e892faf1c0137166fda82e5ff5c6a3150c2cec9	Get hash	malicious	HTMLPhisher	Browse	185.199.108.133
	https://link.mail.beehiiv.com/ls/click?upn=u001.DTQiLe1mLQCNek4IXPrb3cd8am3-2BtbSaRRShUhZCbhF1FE2NDum-2B9YeqhMivZ-2FcIJGKdOjfqgyCSTZimAiOiNKkJG3N5vgYBNDNlk5YkmOU2XPb-2FKTFlF-2Fc7jFH7Nb8Q0JW6uJclJabjCcGs0cWdzdydwDpcxzScPZQBex7SofyQj6MGdYzEG8hbxGGqYt2bpR0NjPAx6JIYz6GJiSrQNg-3D-3DNN1n_VW5ZEdFpCuXmC2nf4fwMfiBmdui0O95PSMmp4s-2F2oS3jvSHISWr6XQl8RtHpD7TWmHpRBlT8NsCamUZaroeFibjayeskXeuNnFhPFOon1-2FD6SmbcpIEUC7jghzzXsggajKIODB16RJEeGNz4SFHe6mT-2Bn59v08ju13fD9NtKJQcr97qiQNjiGiaoQJcvN3gUurUBqLZp9I4f9bNW54ZUVVCzpwaogbLaWcL9oScbt8r4Ku34t9zOqlF27gTqXVf6T2MbNMKkoCYnb-2BuL8kIZdyoRM3EFOIuktrG5gMH3OTa1K2klBhmxFOQ2d7plqd5asAi8Ofl9YcYOh-2FL4f45riCQtSdd7jru06EkHcBuJahi-2BD3xm-2F7PbjpIpmn-2Bu7KYdjQeOSKE-2FSiD6UNxc7JQNRWkdnK1RTC7eoEMZms82uCa8fJQIoMgqBt91NrcdZIDONaGhhpHXRhQ1VbYp5h6Cow-3D-3D#?email=dmFsZXJpZS5jaHJ1c2NpZWxAb3Zlcmxha2Vob3NwaXRhbC5vcmc=	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	http://www.evernote.com/shard/s371/sh/f041cc04-2eb8-11e1-1279-c0c24914207a/LWhD3rgdQ5xR5t--iDOJ7P-MUkYVUhgRq62dC8LVzLZOnctWRKJm5hEzqg	Get hash	malicious	HTMLPhisher	Browse	151.101.2.132
	http://booking.extnnehotteir.com/admin/o2shi1bka89	Get hash	malicious	Unknown	Browse	151.101.0.114
	Vertex Business Services_SKM_C950633210_650106.pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://www.filemail.com/t/RuKZYfeB	Get hash	malicious	HTMLPhisher	Browse	151.101.65.46
	Quarantined Messages (1).zip	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://uglb4.roperelo.com/caGPey/	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://hr.economictimes.indiatimes.com/etl.php?url=https://hr.economictimes.indiatimes.com/etl.php?url=//maansaa.com/new/auth//xp8tpwsulfhjn/%2F/YW5keS5ncmVmcmF0aEBrcHMuY29t	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://url7304.disco-mailer.net/ls/click?upn=u001.DWLeRfOXStcSaUNphm6ZnGquuezyvOF0FIuLMCSCrIQ9t3e8n3fjexKHJjVTV-2BQUFT1dnxR3BcyXaxz-2BblhjX71zswvTIlAGm31luuFhJgeOGXb3dn9Itq74-2Fe-2BlKg-2Bs0-2F4odRns7kSdvfqBhyqSbrYsnPmx4SeDwlRdlhHbM3UucitnipcwJ1gR7h8DzOIUWsvEslHUA8FsNTNWtsq3Q-2FU-2FPeBtGbo-2Fx3kgcXxAZuE-3DPmkq_5KlZmZKASPtIpYbHU6HHQmxS-2FHe3g010GX01BBBmlalJnMdBClXoEYQADKPWInqgHw-2B5921oa-2Fum9DxIHV8wgOarlsOnYJwzp6I2lNDfeCQdFcL55956QetBM0U9iihLLCXzc7MWVFcQDUwnaU8PUgQFrTwK63nQhJu8ngVllYSJR-2BUamfX7Ej8Gpp4vMWsL8t65JTtpjdFVQ36IgP-2B2LxLYSj9SfdmLAt97TCVXHWn7xANKqYpl-2BYx09SetkszDOjJuUV9L9bqZ-2FbmClOsUrPLylG74RJ8zQAREr7-2BUktmlWKoc8C7oqqTOKv340mZnTc-2FztCVjFgPMm1Bz5lR5AptUVEvvSBboXVGluKKoNkkMFkS-2BmNybyD3Aa-2BX8UZ5s	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
SCCGOVUS	https://u6071375.ct.sendgrid.net/ls/click?upn=u001.jNebCYco-2BJgBMGJDj1kJWP39IKixFvDeSBij1PLovvXT0hkMSWjEhuIEgwQ-2F309CwGFmoY6-2Bl45VLW7K9Sd8-2Fg-3D-3Dm1D8_bgsmQmhs-2BDkrnAcljUiGIti1-2F3303-2FliL2Lyr586-2FN9rAlBFKILfRyjObk6Iz5-2FtMSxC-2FhiWOZXbqnmzeZXBiy3CSpPIYxz2-2BTcFMtFX6z-2FFKaL9cuMNNsd9H8Soth9M-2BiGwIhw5kRyphke6a8RYyV0rtdDONsX7lNk6Cr796v-2FIJZ8nzBJ39o6b-2FDySakEM-2B9nvScrgUWzDogJp7LxfPQ-3D-3D	Get hash	malicious	HTMLPhisher	Browse	146.75.120.157
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFhSZp6GshBFVdVLEzBsru52fhlDAZ8Q3OfCA-2F-2Bk2qB9l25yp_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZM3qYZS8WARR8FVyg-2FqvoINWytiD-2FheyMDzu6v-2BoRt5KWyPoztbWkeGPmxB3DyZYTb9a0dAMPLFunr2Ay3ayAFAAvKLYcNXJh5TbSbsyQLthHxBhJhxiFX8keWC7AD3Hw3SgmU-2Be6lkIQuq7tgnHL9CbCr8GEaIyKgtaL1D3uFR7kdAbCakzZIHLBzzIP6uu3b9lr3L70N6m-2FPL5vz2WpJ-2B4Z2WkXjdKV6CAWTeZlidHHDlZecGQIcrIqiWGF6jpeY-3D#Dsonya.buzzard@aggregate.com	Get hash	malicious	Unknown	Browse	146.75.120.84
	http://www.splendidcare.sa.com/Juwqdh/xacwk5957irfeugd/FW2HGOqFbIVQssWaWxsuPFbxoA78Qv8umKJQmKBGMM0/enpkwYwNDdxjXCgjy64rbJkHYw5eTv2C-VSAAV3Fufzkb2cfb573zE5R9OTtHCML20yl9BXVgVz_5eGAS31RGQ	Get hash	malicious	Unknown	Browse	146.75.82.109
	http://url2530.tvsmotor.com/ls/click?upn=u001.smInq0-2BkNc5oRshkzMLE7U6zcio2-2F9zwu1ZIXUanV0NJI-2BOrcqj0f4SCu-2B-2BWZYRJ5WulbQ5i5mBsK1zXEak-2FiMRG64aR-2FUGiDgoHteplEfqii9y-2FZm8OviJTU1sjmz7jpaYlxIO-2FZqsCEMZLobIAuBKqKOl6jqYqSAHVwBkUZuGRzhvuesvLIb-2BOJaFEug0CnemcJJ-2FkU8Glr1M3HQvGDXPIOyf8nkQbVJt7YovOZkAEhuJOuEH4Ph5MiX9jsYgicGN-2FPvxMb8qP3PNxydat9K4xALqN5Q554s0jqmG18yyE0AoEP3aqsetKiEetfLRlyIoY9Go3GDyKCGByc1bkwA-3D-3D_hiB_k8wtFa9etD1KMa1MmHXW-2FwYg06wo9cWiDvHqiPmYOGRytNUZst79UpJomtryxKKrh0AV18bTw1Uxa1j3-2B-2BWgpNF6-2FluKqUVQIq65eqgwBcBWQ5CQR9M5cCIHc1cOAH-2BE24H4P7fEAYeqsitSa9ibB8GYFVo8FSHDcQGWJdcDhc6qRVYNNoOHnXmlwvjC9umLA7lBgfKuIFPk0wTmv1npRA3-2BeNSYEECh53hnx2Ya-2Bv8-3D	Get hash	malicious	HTMLPhisher	Browse	146.75.120.157
	https://swans-muffin-1id4964-7304421.netlify.app/form	Get hash	malicious	Unknown	Browse	146.75.120.157
	https://reg1a-g4ad23-269fe50-lqng5s.netlify.app/dev.html/	Get hash	malicious	Unknown	Browse	146.75.120.157
	http://kocofoto.com/src/richa.storm$yogiproducts.com	Get hash	malicious	HTMLPhisher	Browse	146.75.120.84
	https://equifax.secure.virtru.com/start/?c=experiment&t=emailtemplate2019-09&s=dcsdataquality%40equifax.com&p=dd344d89-e9f0-4ad2-b235-09d9246d1e0f#v=3.0.0&d=https%3A%2F%2Fapi.virtru.com%2Fstorage%2Fapi%2Fpolicies%2Fdd344d89-e9f0-4ad2-b235-09d9246d1e0f%2Fdata%2Fmetadata&dk=6iPNYDhOZu4bgqt2whRHwXK7U%2FAD3%2BLSMPIUpzwYeKw%3D	Get hash	malicious	Unknown	Browse	146.75.120.157
	https://t.ly/HfK6Y	Get hash	malicious	Unknown	Browse	146.75.120.84
	FiddlerSetup.5.0.20243.10853-latest.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	146.75.120.157
AMAZON-AESUS	https://link.mail.beehiiv.com/ls/click?upn=u001.DTQiLe1mLQCNek4IXPrb3cd8am3-2BtbSaRRShUhZCbhF1FE2NDum-2B9YeqhMivZ-2FcIJGKdOjfqgyCSTZimAiOiNKkJG3N5vgYBNDNlk5YkmOU2XPb-2FKTFlF-2Fc7jFH7Nb8Q0JW6uJclJabjCcGs0cWdzdydwDpcxzScPZQBex7SofyQj6MGdYzEG8hbxGGqYt2bpR0NjPAx6JIYz6GJiSrQNg-3D-3DNN1n_VW5ZEdFpCuXmC2nf4fwMfiBmdui0O95PSMmp4s-2F2oS3jvSHISWr6XQl8RtHpD7TWmHpRBlT8NsCamUZaroeFibjayeskXeuNnFhPFOon1-2FD6SmbcpIEUC7jghzzXsggajKIODB16RJEeGNz4SFHe6mT-2Bn59v08ju13fD9NtKJQcr97qiQNjiGiaoQJcvN3gUurUBqLZp9I4f9bNW54ZUVVCzpwaogbLaWcL9oScbt8r4Ku34t9zOqlF27gTqXVf6T2MbNMKkoCYnb-2BuL8kIZdyoRM3EFOIuktrG5gMH3OTa1K2klBhmxFOQ2d7plqd5asAi8Ofl9YcYOh-2FL4f45riCQtSdd7jru06EkHcBuJahi-2BD3xm-2F7PbjpIpmn-2Bu7KYdjQeOSKE-2FSiD6UNxc7JQNRWkdnK1RTC7eoEMZms82uCa8fJQIoMgqBt91NrcdZIDONaGhhpHXRhQ1VbYp5h6Cow-3D-3D#?email=dmFsZXJpZS5jaHJ1c2NpZWxAb3Zlcmxha2Vob3NwaXRhbC5vcmc=	Get hash	malicious	HTMLPhisher	Browse	3.227.135.8
	http://www.evernote.com/shard/s371/sh/f041cc04-2eb8-11e1-1279-c0c24914207a/LWhD3rgdQ5xR5t--iDOJ7P-MUkYVUhgRq62dC8LVzLZOnctWRKJm5hEzqg	Get hash	malicious	HTMLPhisher	Browse	44.197.227.46
	7sAylAXBOb.exe	Get hash	malicious	Unknown	Browse	44.221.84.105
	7sAylAXBOb.exe	Get hash	malicious	Unknown	Browse	44.221.84.105
	5a5O0c0oJP.exe	Get hash	malicious	Unknown	Browse	44.221.84.105
	https://www.filemail.com/t/RuKZYfeB	Get hash	malicious	HTMLPhisher	Browse	52.204.220.16
	5a5O0c0oJP.exe	Get hash	malicious	Unknown	Browse	44.221.84.105
	d8gZVaN0ms.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, RedLine, Stealc, Vidar	Browse	3.5.29.31
	8bwKawHg0Z.exe	Get hash	malicious	FormBook	Browse	3.81.197.107
	https://hr.economictimes.indiatimes.com/etl.php?url=https://hr.economictimes.indiatimes.com/etl.php?url=//maansaa.com/new/auth//xp8tpwsulfhjn/%2F/YW5keS5ncmVmcmF0aEBrcHMuY29t	Get hash	malicious	HTMLPhisher	Browse	3.227.135.8
FASTLYUS	https://mail.pfl.fyi/v1/messages/0190749a-2f6a-7c9f-b37a-88f0ae969ede/click?link_id=0190749a-2ffa-7f41-ad16-3ecda235df51&signature=3e892faf1c0137166fda82e5ff5c6a3150c2cec9	Get hash	malicious	HTMLPhisher	Browse	185.199.108.133
	https://link.mail.beehiiv.com/ls/click?upn=u001.DTQiLe1mLQCNek4IXPrb3cd8am3-2BtbSaRRShUhZCbhF1FE2NDum-2B9YeqhMivZ-2FcIJGKdOjfqgyCSTZimAiOiNKkJG3N5vgYBNDNlk5YkmOU2XPb-2FKTFlF-2Fc7jFH7Nb8Q0JW6uJclJabjCcGs0cWdzdydwDpcxzScPZQBex7SofyQj6MGdYzEG8hbxGGqYt2bpR0NjPAx6JIYz6GJiSrQNg-3D-3DNN1n_VW5ZEdFpCuXmC2nf4fwMfiBmdui0O95PSMmp4s-2F2oS3jvSHISWr6XQl8RtHpD7TWmHpRBlT8NsCamUZaroeFibjayeskXeuNnFhPFOon1-2FD6SmbcpIEUC7jghzzXsggajKIODB16RJEeGNz4SFHe6mT-2Bn59v08ju13fD9NtKJQcr97qiQNjiGiaoQJcvN3gUurUBqLZp9I4f9bNW54ZUVVCzpwaogbLaWcL9oScbt8r4Ku34t9zOqlF27gTqXVf6T2MbNMKkoCYnb-2BuL8kIZdyoRM3EFOIuktrG5gMH3OTa1K2klBhmxFOQ2d7plqd5asAi8Ofl9YcYOh-2FL4f45riCQtSdd7jru06EkHcBuJahi-2BD3xm-2F7PbjpIpmn-2Bu7KYdjQeOSKE-2FSiD6UNxc7JQNRWkdnK1RTC7eoEMZms82uCa8fJQIoMgqBt91NrcdZIDONaGhhpHXRhQ1VbYp5h6Cow-3D-3D#?email=dmFsZXJpZS5jaHJ1c2NpZWxAb3Zlcmxha2Vob3NwaXRhbC5vcmc=	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	http://www.evernote.com/shard/s371/sh/f041cc04-2eb8-11e1-1279-c0c24914207a/LWhD3rgdQ5xR5t--iDOJ7P-MUkYVUhgRq62dC8LVzLZOnctWRKJm5hEzqg	Get hash	malicious	HTMLPhisher	Browse	151.101.2.132
	http://booking.extnnehotteir.com/admin/o2shi1bka89	Get hash	malicious	Unknown	Browse	151.101.0.114
	Vertex Business Services_SKM_C950633210_650106.pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://www.filemail.com/t/RuKZYfeB	Get hash	malicious	HTMLPhisher	Browse	151.101.65.46
	Quarantined Messages (1).zip	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://uglb4.roperelo.com/caGPey/	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://hr.economictimes.indiatimes.com/etl.php?url=https://hr.economictimes.indiatimes.com/etl.php?url=//maansaa.com/new/auth//xp8tpwsulfhjn/%2F/YW5keS5ncmVmcmF0aEBrcHMuY29t	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://url7304.disco-mailer.net/ls/click?upn=u001.DWLeRfOXStcSaUNphm6ZnGquuezyvOF0FIuLMCSCrIQ9t3e8n3fjexKHJjVTV-2BQUFT1dnxR3BcyXaxz-2BblhjX71zswvTIlAGm31luuFhJgeOGXb3dn9Itq74-2Fe-2BlKg-2Bs0-2F4odRns7kSdvfqBhyqSbrYsnPmx4SeDwlRdlhHbM3UucitnipcwJ1gR7h8DzOIUWsvEslHUA8FsNTNWtsq3Q-2FU-2FPeBtGbo-2Fx3kgcXxAZuE-3DPmkq_5KlZmZKASPtIpYbHU6HHQmxS-2FHe3g010GX01BBBmlalJnMdBClXoEYQADKPWInqgHw-2B5921oa-2Fum9DxIHV8wgOarlsOnYJwzp6I2lNDfeCQdFcL55956QetBM0U9iihLLCXzc7MWVFcQDUwnaU8PUgQFrTwK63nQhJu8ngVllYSJR-2BUamfX7Ej8Gpp4vMWsL8t65JTtpjdFVQ36IgP-2B2LxLYSj9SfdmLAt97TCVXHWn7xANKqYpl-2BYx09SetkszDOjJuUV9L9bqZ-2FbmClOsUrPLylG74RJ8zQAREr7-2BUktmlWKoc8C7oqqTOKv340mZnTc-2FztCVjFgPMm1Bz5lR5AptUVEvvSBboXVGluKKoNkkMFkS-2BmNybyD3Aa-2BX8UZ5s	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	http://beetrootculture.com	Get hash	malicious	Unknown	Browse	184.28.90.27 40.126.32.136 52.165.165.26
	https://url.us.m.mimecastprotect.com/s/GSubCpYn1pC4mvoJtD-hLP?domain=brileyfinancial-my.sharepoint.com	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 40.126.32.136 52.165.165.26
	NSLC_Billing_Document_No_0240255100.html	Get hash	malicious	CVE-2024-21412	Browse	184.28.90.27 40.126.32.136 52.165.165.26
	https://isothermcx-my.sharepoint.com/:o:/p/m_chiasson/EldSmlva1OBFixvWpubo0mgB0DZQ4Do42riWb9YO1XmP-g?e=5%3av4rvfI&at=9	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 40.126.32.136 52.165.165.26
	http://booking.extnnehotteir.com/admin/o2shi1bka89	Get hash	malicious	Unknown	Browse	184.28.90.27 40.126.32.136 52.165.165.26
	Vertex Business Services_SKM_C950633210_650106.pdf	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 40.126.32.136 52.165.165.26
	https://www.filemail.com/t/RuKZYfeB	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 40.126.32.136 52.165.165.26
	https://m.exactag.com/ai.aspx?tc=d9177038bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253Atheannapolis250.org%2Fwinner%2F14136%2F%2FYnJhbndlbGwubW9mZmF0QGtwcy5jb20=	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 40.126.32.136 52.165.165.26
	https://link.mail.beehiiv.com/ls/click?upn=u001.I67xw9O-2FCIng4d3bGWl4wF1gb7u7ov5hHZyE-2Bbx9UTzw17nXfIKdJcwxuwzDNoy2zqPLSJo-2BNEQCUif7aqDwom-2FNyeTx4oiB0wLXwXnzsK4D0yrlxIKEkPM7Cj-2FHMmK1N5sLNWwmlbyGbHeuv6ehAEECnEs6fFQOqqwD-2FKToPwl8ZCnBHVdQ3QU8RWhloPcfXcxa_hzdxOAnI3B-2BYhj5tgQXSRCdoGEcuM88dXETG-2BahO6Uvd8cr2jZPTzAVk72oAubAHPgVJjhCdU6bjbXnflniNIkDzPhLxyvQL1dSWfR-2BUbH1DS3LUwJipSkZoP8d1ryYR0TIdt5CyNutkaFy6gLHYcR4kl-2Fz1ezOldYW2WX0ghZl4CCdgYPK2Cj3fM7MmBqLOIY-2B5u5WgDkBzfdFRbwHzvpAejc0JJJ7tYmz-2BUzjH-2BoYmk-2F0HGjFVUaYNWyGnhGX4EhZzw6qOcJEaxZhVjnDpWPL3U5gs5ZetaaeYkMX5whQyh7U-2B0b4Qj0LqFla1tJlWVR4EZMTu40FIJ9BSbWnjEcc9JxuCrqAu48-2BpVmjPzA43qg6bd2x0AWoed1RbQeWVzBT648qZJ7L-2FqgKPY6ysg2U7IBuGeVI7oxhhKCbXSZln5jVQGdCxXpADLZSMla5T1Id6eeDoJeYo7zr6VqE6vw-3D-3D#aGFydG11dC5zY2htaWR0QGtwcy1jb25zdWx0aW5nLmNvbQ==	Get hash	malicious	Unknown	Browse	184.28.90.27 40.126.32.136 52.165.165.26
	osr730ky3m.exe	Get hash	malicious	Unknown	Browse	184.28.90.27 40.126.32.136 52.165.165.26
6271f898ce5be7dd52b0fc260d0662b3	https://lnkd.in/exwPeXjc	Get hash	malicious	HTMLPhisher	Browse	2.23.209.144
	https://hr.economictimes.indiatimes.com/etl.php?url=https://hr.economictimes.indiatimes.com/etl.php?url=//bgvhdjcbjfdhjkbgfddgfghgfd.pages.dev/#?email=dGVzdEB0ZXN0by5jb20=	Get hash	malicious	Unknown	Browse	2.23.209.144
	https://suntecconcrete-my.sharepoint.com/:o:/p/louiel/EvAIlfcY0VJAhmYu1wrnsIYBxgyJqsm392N8z6oQdweM2w?e=5%3aCfZt5T&at=9	Get hash	malicious	HTMLPhisher	Browse	2.23.209.144
	Informational-severity alert_ Creation of forwarding_redirect rule Case ID_FqJxoz8.eml	Get hash	malicious	Unknown	Browse	2.23.209.144
	INVOICE [UNPAID ] ref-E8K18.html	Get hash	malicious	HTMLPhisher	Browse	2.23.209.144
	http://d.sogouad.vip/txt/black.txt	Get hash	malicious	Unknown	Browse	2.23.209.144
	https://www.asarco.com/	Get hash	malicious	Unknown	Browse	2.23.209.144
	https://www.aspcp.uk	Get hash	malicious	Unknown	Browse	2.23.209.144
	http://wiki.hoeron.com/doku.php?id=hoeron:kb:hardware:fortinet:2023-11-29-1701246124	Get hash	malicious	Unknown	Browse	2.23.209.144
	http://url2530.tvsmotor.com/ls/click?upn=u001.smInq0-2BkNc5oRshkzMLE7U6zcio2-2F9zwu1ZIXUanV0NJI-2BOrcqj0f4SCu-2B-2BWZYRJ5WulbQ5i5mBsK1zXEak-2FiMRG64aR-2FUGiDgoHteplEfqii9y-2FZm8OviJTU1sjmz7jpaYlxIO-2FZqsCEMZLobIAuBKqKOl6jqYqSAHVwBkUZuGRzhvuesvLIb-2BOJaFEug0CnemcJJ-2FkU8Glr1M3HQvGDd8ji5dO-2BtGjFwdkKxtwV-2BT-2FIDZLBFuspWHIOxNeRRYzjnPYwPcANsM7g6bBF5Eb-2FtBeYO84se-2BxM2-2FftOX61g3tKjw4-2BmFTEe65zPmmIV01t1qMegNLN27WQA4-2BWSzp8Exonts6yxo7jLDqmXJMwdw-3DSDkl_fylF09WDx4VRLHs1TE6by-2Fm24mY0V6PaWh-2BQeqn0Ay-2FMm-2FGvFUfwxkNWNqnFtCc1bg3RDtukBd6YTikFNr9njJPj8fPjtMTy7wESEphTN1Xt33p1RcATr-2Faa6esQ5neBHfE9PchIfWN2pGu-2FDyTo9jBl7IxKpEon9SyD5nvMkxE22jB5lqUsSt3NSAbiAi6xLdjPQNgUE2zZRGhN5aAjyw-3D-3D	Get hash	malicious	HTMLPhisher	Browse	2.23.209.144
3b5074b1b5d032e5620f69f9f700ff0e	q86onx3LvU.exe	Get hash	malicious	PureLog Stealer	Browse	13.107.5.88
	6Ek4nfs2y1.exe	Get hash	malicious	PhoenixKeylogger, PureLog Stealer	Browse	13.107.5.88
	q86onx3LvU.exe	Get hash	malicious	PureLog Stealer	Browse	13.107.5.88
	tgBNtoWqIp.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	13.107.5.88
	19808bS58f.exe	Get hash	malicious	AgentTesla	Browse	13.107.5.88
	SecuriteInfo.com.TrojanLoader.MSIL.DaVinci.Heur.6737.3783.exe	Get hash	malicious	AgentTesla	Browse	13.107.5.88
	dhl_awb_shipping_doc_03072024224782020031808174CN18030724000000324(991KB).vbs	Get hash	malicious	Unknown	Browse	13.107.5.88
	http://beonlineboo.com	Get hash	malicious	Unknown	Browse	13.107.5.88
	9691e6dc404680cc6648726c8d124a6d4fc637bb6b4a092661308012438623b2_dump.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	13.107.5.88
	0VcrCVxnMP.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	13.107.5.88

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	245980
Entropy (8bit):	4.20285513212273
Encrypted:	false
SSDEEP:	1536:D31gGYL2gsm0nNtgsyNcAz79ysQqt2LqoQlrcm0FvWyU18gNKVDJueup:7S2g8Ntg5miGu2LqoQlrt0FvtUqgNaS
MD5:	CFEC923501FF3792FA2322636CEE9282
SHA1:	7A9D0419B73ACF699C59570CBEBB610CD9B947AD
SHA-256:	3489613CACEB0386624EEC4F2809161AF822E8621B363CA68A66D9A219EE4A19
SHA-512:	F536F0D362582306D30644E9FE18AB26BB860D01040ED7CDFD4F5BCE86E07E4BD691519C75E96FED4AE01968CA595A31AB99C68661992B1063223BAC5169F20E
Malicious:	false
Reputation:	low
Preview:	TH02...... ...#.^.......SM01........p.Rq^...........IPM.TaskRequest.Decline........h...............h............H..h$..............h........@...H..h\tor ...AppD...h8...0..........h...............h........_`.k...h4...H...I.+w...h....P...8..k...0....\...............l.........2h...............kdard.......F..!h.............. h.v............#h....8.........$h@.......@....."h.6......@3....'h..............1h..............0h..........k../h...........kH..h.... ...$.....-h ...0........+hp...4.............$h....... ..............FS..............FIPM.TaskRequest.Decline.Form.d.dStandard.tanTask Decline.PM.IPM.Microsoft.FolderDesign.FormsDescription................F.k..........1111110000000000.icrMicrosoft.isThis form is used to decline a task request.........kf...... ..........&...........(.......(... ...@...............................................................................................................................D@..............D@x.............DG...p..........DH..www.wwp.....

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	322260
Entropy (8bit):	4.000299760592446
Encrypted:	false
SSDEEP:	6144:dztCFLNyoAHq5Rv2SCtUTnRe4N2+A/3oKBL37GZbTSB+pMZIrh:HMLgvKz9CtgRemO3oUHi3SBSMZIl
MD5:	CC90D669144261B198DEAD45AA266572
SHA1:	EF164048A8BC8BD3A015CF63E78BDAC720071305
SHA-256:	89C701EEFF939A44F28921FD85365ECD87041935DCD0FE0BAF04957DA12C9899
SHA-512:	16F8A8A6DCBAEAEFB88C7CFF910BCCC71B76A723CF808B810F500E28E543112C2FAE2491D4D209569BD810490EDFF564A2B084709B02963BCAF6FDF1AEEC59AC
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	51253fe60063c31af0d295afb42228b0:v2:2:1:1590:2:8479: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

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.4464393446710155
Encrypted:	false
SSDEEP:	3:LFVSQn:pVSQ
MD5:	1249CA201A85CD5F011BAD91FAC3483C
SHA1:	01920BDAFD0AF80D607C9D3EF238AD9028078147
SHA-256:	3D56A36D17929E662CCA6FC03A8CF7D9131320C80C7E2D0FD054347D1427885C
SHA-512:	A0B64083DBBF42E9D7A8700600C1BDFE504B758E7C465956996F34B7B56390FB14B7AF478132A573B992859B10344409B0BE219951999C6F401CC215E59A6907
Malicious:	false
Reputation:	low
Preview:	1720020875

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\B526F1CD-9D11-4AF3-B061-3462913F8AB4

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	174490
Entropy (8bit):	5.28961832795081
Encrypted:	false
SSDEEP:	1536:Fi2JfRAqcbH41gwEOLe7HWaM/o//MRcAZl1p5ihs7EXXmEAD2OdaB:qce7HWaM/o/7XDk2
MD5:	22CCAC486121FBACAD05988A5FD1BC06
SHA1:	2481A64F23B48500E6C178B14F9FF79329D39D66
SHA-256:	E2A4B692770DA1BFCDFCB0DBADD07B369420DDEB16E838D50BA9006CC8C758E7
SHA-512:	6ED0F985516505D271FBBBAA47F0A369488797A20499D77B80E881F6FA41BDB19E62BB309F9150CADCDF9BA356D2ECED7BC3CD2CAE5CA84A45BA700E9885F684
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2024-07-03T15:34:33">.. Build: 16.0.17812.40128-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.04599539242052959
Encrypted:	false
SSDEEP:	3:Gtlxtjln5iJ41lxtjln5iJvl1R9//8l1lvlll1lllwlvlllglbelDbllAlldl+l:GtZm4ZmV9X01PH4l942wU
MD5:	575A3A6BD8B59FB805B734F109D495AF
SHA1:	9EC36646B9FCB29E40D6A90DFB950096394C9276
SHA-256:	DF89FEEBC64643FCEFE869F3CABA3900FAD8BD46F8DEEC4C2DD5A4225900A28D
SHA-512:	F8C9117ABC9CFB273B60381247F6727633B86098FC7B90BE15192DAC76811DB965D679C14557ADB86624A59EF5877C54777D5316DBDFBBDF11CF384F733F58D3
Malicious:	false
Reputation:	low
Preview:	..-...........................c...).e...K.!...@..-...........................c...).e...K.!...@........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	modified
Size (bytes):	49472
Entropy (8bit):	0.48381442995713897
Encrypted:	false
SSDEEP:	48:t98XQ15gUll7DYM7zO8VFDYMjzBO8VFDYML:kAjzll4sjVGKjVGC
MD5:	B748E2E639F417FEB8964D9E5B73331C
SHA1:	CBA9B0FD08327F37BCBC46068455FBF37EA4FBF3
SHA-256:	4EF9F2B170C26ED643C909E7E96AC4125B44347E412FDFDF4885443224665524
SHA-512:	4FED28EF7DEEDBEAAEA53E4299B749EE3678C194C23426F00E00047CD14A41EB26D3F065FF5DDBFD3839F81A6D4754C3800DCCA8AA51CC0F6E25D070810C1B1D
Malicious:	false
Reputation:	low
Preview:	7....-............).e.....*F..4..........).e........SQLite format 3......@ .......................................................................... .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{8A767E77-70E3-446B-AA49-E5C8A08C1C63}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	2048
Entropy (8bit):	1.7614195226466036
Encrypted:	false
SSDEEP:	12:YHwYIOLWhBnzDnz3zDenz4nzkunz0nzS0zxOlG:YYXDDY2kIaSExOlG
MD5:	512547758B9AD18E774019D85AA750EE
SHA1:	3E28C96D42BE221E7A69AD54F12E5DDC0AAF90B6
SHA-256:	EDF6BEB391D9D85723E648D9A4D7B2E2E469B2F34E73719D86759EF530C78755
SHA-512:	DEDB4A0705BBBDB6E5EDD5AAE0D5BFA59F1FDFD1627C7B1E067C20DBD9A0883DD7D01ED862A1946D3A52C7272A034C49E9A6FB3764917245AADFB6AE74C645C0
Malicious:	false
Reputation:	low
Preview:	....1.2.....1.....1.2.....1.2.....1.2.....1.2.....1.2.....1.2.....1.2.....1.2.....1.....1.....1.2.....1.2.....1.2.....1.2.....(.....(.....(.....(.....(...t.o.r.r.e.s...t........................................................................................................................................................................................................................................................................................................................................................................................... ..."...(...*...0...2...8...:...@...B...H...J...P...R...V...X...\...^...d...f...l...................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{EAD067EE-9D7C-4A6D-9437-94F317187D02}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	3144
Entropy (8bit):	2.4564221222302063
Encrypted:	false
SSDEEP:	48:iU0r+J6HKttwKcVALa/Zuq/5PSwO7HLa/Z:J0r+EqttBcVZd/5xdZ
MD5:	99159DDD34E59F9DCFFA073B42ACC5DC
SHA1:	46DDCD8784E3C225D990D4498F60854F88FC4849
SHA-256:	E18E6FF74F38A9616562CE7F8736B14AC0102854BBF90743D461B34EA6D9F4EF
SHA-512:	1334D45C53B986A52F87AE1E8B5F0DC0044EBD4E7A0CF485DE4C07CCE34DEFA71B16A4E840802672AACDA455AAF74DE20C16C45F17CEF142F5C9D738420C4C9B
Malicious:	false
Preview:	............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................H...v.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................&.

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1720020872003612300_788488EE-0110-416F-BC2C-501233654F4B.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (28799), with CRLF line terminators
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.15937936490781177
Encrypted:	false
SSDEEP:	1536:wWlkxk7LTX+DylfyOQbp81ewy+FVw8jIIBY2ZW3E6BPBd:Ok3aDytmNRe
MD5:	7EED36601E359207FD677C3D1222620C
SHA1:	6AEEA8377C63340A355E4324136FDD82783046FB
SHA-256:	8A57D428AEFB6097FDA85505C0AEB32D3E2C83F173903EFA9CFBF4B0E542F110
SHA-512:	7FF71BC698A46CDA60AE6DCF0111941FEF0733E27FD6B12AB3631AA9F4F2228EB0F0E1913222DF48B0DBFDC20E85AE6F3AA03903BDA88DDEC21E8596C6B36341
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..07/03/2024 15:34:32.043.OUTLOOK (0x175C).0xFFC.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.GDIAssistant.HandleCallback","Flags":30962256044949761,"InternalSequenceNumber":23,"Time":"2024-07-03T15:34:32.043Z","Contract":"Office.System.Activity","Activity.CV":"7oiEeBABb0G8LFASM2VPSw.4.9","Activity.Duration":14,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.GdiFamilyName":"","Data.CloudFontStatus":6,"Data.CloudFontTypes":256}...07/03/2024 15:34:32.059.OUTLOOK (0x175C).0xFFC.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.ResourceClient.Deserialize","Flags":30962256044949761,"InternalSequenceNumber":25,"Time":"2024-07-03T15:34:32.059Z","Contract":"Office.System.Activity","Activity.CV":"7oiEeBABb0G8LFASM2VPSw.4.10","Activity.Duration":13916,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.JsonFileMajorVer

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1720020872004348200_788488EE-0110-416F-BC2C-501233654F4B.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	8F4E33F3DC3E414FF94E5FB6905CBA8C
SHA1:	9674344C90C2F0646F0B78026E127C9B86E3AD77
SHA-256:	CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC
SHA-512:	7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240703T1134240707-5980.etl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	102400
Entropy (8bit):	4.490582282243299
Encrypted:	false
SSDEEP:	1536:EWZC+eo+QWuc8nSgWu+yJZncEvn9GSnQ7bGEEetp8G5ekrTxwgh4f09CWtCEw0Xu:eb4f00WsE9Xu
MD5:	6345C416B311C6BD4D5B851ED111823D
SHA1:	B3ED6B2E16D0B48AFA4A9BE2CDCDF0AB11664C16
SHA-256:	FC70F93946736AC01522C54CE71CF2C52103BD7E41CA3A8603277D96D8C8BC52
SHA-512:	54F933B6FB820884D447559A96665B93ACB3E70566D7630ECAD5573C313AD2CA3B42C732680DA71A0EA15A28BEE6BC945C022F297C1C9F3931933EEF86F1BFC2
Malicious:	false
Preview:	............................................................................d.......\...<".{^...................eJ..............Zb..2...................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1...........................................................0$.d.Y..........<".{^...........v.2._.O.U.T.L.O.O.K.:.1.7.5.c.:.3.8.7.3.6.9.d.2.5.6.7.9.4.6.6.0.a.f.e.4.a.5.3.5.f.c.4.2.e.f.7.6...C.:.\.U.s.e.r.s.\.t.o.r.r.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.O.u.t.l.o.o.k. .L.o.g.g.i.n.g.\.O.U.T.L.O.O.K._.1.6._.0._.1.6.8.2.7._.2.0.1.3.0.-.2.0.2.4.0.7.0.3.T.1.1.3.4.2.4.0.7.0.7.-.5.9.8.0...e.t.l...........P.P.....\...<".{^...................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\msoB5DD.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	GIF image data, version 89a, 15 x 15
Category:	dropped
Size (bytes):	663
Entropy (8bit):	5.949125862393289
Encrypted:	false
SSDEEP:	12:PlrojAxh4bxdtT/CS3wkxWHMGBJg8E8gKVYQezuYEecp:trPsTTaWKbBCgVqSF
MD5:	ED3C1C40B68BA4F40DB15529D5443DEC
SHA1:	831AF99BB64A04617E0A42EA898756F9E0E0BCCA
SHA-256:	039FE79B74E6D3D561E32D4AF570E6CA70DB6BB3718395BE2BF278B9E601279A
SHA-512:	C7B765B9AFBB9810B6674DBC5C5064ED96A2682E78D5DFFAB384D81EDBC77D01E0004F230D4207F2B7D89CEE9008D79D5FBADC5CB486DA4BC43293B7AA878041
Malicious:	false
Preview:	GIF89a....w..!..MSOFFICE9.0.....sRGB......!..MSOFFICE9.0.....msOPMSOFFICE9.0Dn&P3.!..MSOFFICE9.0.....cmPPJCmp0712.........!.......,....................'..;..b...RQ.xx..................,+................................yy..;..b.........................qp.bb..........uv.ZZ.LL.......xw.jj.NN.A@....zz.mm.^_.........yw........yx.xw.RR.,.++............................................................................................................................................................................................................8....>.......................4567...=..../0123.....<9:.()+,-.B.@...."#$%&'....... !............C.?....A;<...HT(..;

C:\Users\user\AppData\Local\Temp\~DF03D252FC0DEF7077.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.3613836054883338
Encrypted:	false
SSDEEP:	3:YmsalTlLPltl2N81HRQjlORGt7RQ//W1XR9//3R9//3R9//:rl912N0xs+CFQXCB9Xh9Xh9X
MD5:	679672A5004E0AF50529F33DB5469699
SHA1:	427A4EC3281C9C4FAEB47A22FFBE7CA3E928AFB0
SHA-256:	205D000AA762F3A96AC3AD4B25D791B5F7FC8EFB9056B78F299F671A02B9FD21
SHA-512:	F8615C5E5CF768A94E06961C7C8BEF99BEB43E004A882A4E384F5DD56E047CA59B963A59971F78DCF4C35D1BB92D3A9BC7055BFA3A0D597635DE1A9CE06A3476
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF062704B4AE1E5121.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	1.2389205950315936
Encrypted:	false
SSDEEP:	3:lQkJlt:Kql
MD5:	048E2AB7D582E3738CD56124F419D66E
SHA1:	AEDCF8D507CC62E16DC9525F4F48163D67D9F14F
SHA-256:	A2239FD340394DE29429DB758C975F2C5824B7E1D080C62E5E98BCB3DBD86091
SHA-512:	5AA87251AADF3FC09CEF3C3BF21D0AD517A702FAEA5D23840E47730932AC2B488F41D54B485ABFF5A0A8E0C4E0D1A6B3181ED1B1A17783C4B2986155334F3C5A
Malicious:	false
Preview:	..............................

C:\Users\user\AppData\Roaming\Microsoft\Outlook\NoEmail.srs

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.6702282313713843
Encrypted:	false
SSDEEP:	12:rl3baFsy/lsqLKeTy2MyheC8T23BMyhe+S7wzQe9zNMyhe+S7xMyheCC5:rQmnq1Pj961a
MD5:	D86C9DB7D380D78CF82CD611DB9EBB97
SHA1:	BCC3395A7EDAB6DEA0A98234350991737992ACA4
SHA-256:	49CBEACDF9CD8BF02C4D7FDAD54FAD95A21D24ABCBBA5CE9C5CCDF48B3FA48CE
SHA-512:	2911450EFB6121F5D699CFA4605193E8A5735DB53ECDD41675A457B0A18B704FA3E6D4008AAECDE124DBDDBD587A6008B08FEB6E10B2BCCB050439555C2BD682
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 14:34:47 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9984008131080246
Encrypted:	false
SSDEEP:	48:8Q1xdvTc7hqHpidAKZdA1JehwiZUklqehHy+3:8Q1DQwoy
MD5:	72D84F7F0FDBDA1DCD665BF4A1B5EAF3
SHA1:	804821B1A31697F19F8C9BCEBEA7A4A70E9ECE67
SHA-256:	930F45133D2725D5842EFAD274A9B65B6F43FACCC463A704F3CB3CEC39E115FB
SHA-512:	CBCD4D975682E20D76E0D102CC891F44DB5397EC993B2409A76168890C9E9E2762221FC05AD7EB33913E3A63CF33B4CF8449826D4666CCA85399CD2411492BD6
Malicious:	false
Preview:	L..................F.@.. ...$+.,........^.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XD\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XW\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XW\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XW\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XX\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 14:34:47 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.012814135736656
Encrypted:	false
SSDEEP:	48:8S1xdvTc7hqHpidAKZdA10eh/iZUkAQkqehYy+2:8S1DQa9QBy
MD5:	6CD416E1638DDD1B23699107508E4FC7
SHA1:	DE79C7A98257F800B18A1EFDA798F5BCB718B15F
SHA-256:	E4A46019882BB1DA50C5D12A1D617AAF396D48AC8AFAF3BBB3D382270F40150E
SHA-512:	AEE509EE9905B014DB91B10781F900032795274401A0B86330EB409776B07D009237301F1C223627FD0C645D62518FA6F3DD22FFB5CB83912B4F34FEB4C46F41
Malicious:	false
Preview:	L..................F.@.. ...$+.,....B.w.^.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XD\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XW\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XW\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XW\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XX\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.018976143023576
Encrypted:	false
SSDEEP:	48:8exdvTc7hjHpidAKZdA14tIeh7sFiZUkmgqeh7sqy+BX:8eDQRn0y
MD5:	27868772397FE51589498A4EF9252ACA
SHA1:	DBB79EDDDCB9A9FC0E40029F8E6BE83B9D231F02
SHA-256:	AE144FC3166EC387DD275657A97DBCEF878A41B0E7448A8B0AAC2FD14023196A
SHA-512:	CF2590A9746D94BBAAD824909AD727AA50A957883E643E5690FC100F3741C4B414DE402BC132F4413E38084EBD136B8F15BB98CE6885C6E0A9A0263FF029CA7A
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XD\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XW\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XW\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XW\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 14:34:47 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.009720078594111
Encrypted:	false
SSDEEP:	48:8RV1xdvTc7hqHpidAKZdA1behDiZUkwqeh8y+R:8RV1DQRyy
MD5:	F5F1BF359F8D3A186448A5F2D904F1D3
SHA1:	36C3F5D9A740C248D0ACA4D3F15B5CE394A17308
SHA-256:	377532AC6DD9CE0F839AFA7C3741686DC6CD0131E0E5FF65BFB7BB8F5312A8FE
SHA-512:	90A4F82E76C721FCA69785B7E28FC25CDFF5889796C3774498A1615EC032AAC1C55F2CBC96C72C717021EBBC740734392C06FB950F0C2C5CA56093EBE56DF9BC
Malicious:	false
Preview:	L..................F.@.. ...$+.,......q.^.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XD\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XW\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XW\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XW\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XX\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 14:34:47 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9990398958580737
Encrypted:	false
SSDEEP:	48:871xdvTc7hqHpidAKZdA1VehBiZUk1W1qehWy+C:871DQx92y
MD5:	1BDD67C651140924433AE4848EA51917
SHA1:	B384A564DB463C45266BB4473AD3B9D1F8E27284
SHA-256:	110F8BE82D60C46CBE993F8EA56F6C19CDA9F9B917D1DF1AC5B2CA552B955390
SHA-512:	7A6FA6C7B04B752744D4A4FBDB79653973C6E1FD0DDB81287BF2C7C5B793A6F51CFA8EC46FA34839CB61C6CE3E165533D95E6794199CEF3D0BBDF37B1F3D498D
Malicious:	false
Preview:	L..................F.@.. ...$+.,......~.^.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XD\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XW\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XW\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XW\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XX\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 14:34:47 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.009933646071699
Encrypted:	false
SSDEEP:	48:81V1xdvTc7hqHpidAKZdA1duT6ehOuTbbiZUk5OjqehOuTb0y+yT+:81V1DQhTTTbxWOvTb0y7T
MD5:	46B31950ACA64425A26DD8812055571B
SHA1:	BBCA77E18953AD890D3622F8D11D28CD83B04349
SHA-256:	6CE5DF61706AACB0A332803D1B141D8A95615C3D6573366B6CD7E7FDB5C68642
SHA-512:	5D34D89201742396AE93C2B1EC31AAD80EEC2130F86AF5969640AC960230C756524C1CF6B24B31F1E460206D1AAF0B14A816087204F0BFC83A99F8E683BE1E9D
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....Kf.^.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.XD\|....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XW\|....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.XW\|....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.XW\|...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.XX\|...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Microsoft Outlook email folder (>=2003)
Category:	dropped
Size (bytes):	271360
Entropy (8bit):	2.44514985307569
Encrypted:	false
SSDEEP:	1536:5Pj6YF6ZaqH1hXayV2EAqCazIu1qDEpXauIrEuaMPEW53jEpEHP4qQ10PAwrRG/H:ZVkwqdAMp9qRp9
MD5:	64A16C449ACD1F3167831F2D12D4BDA4
SHA1:	8C48F1D98EF80DFE754236DCDD2E772F9F2211BA
SHA-256:	CCFA8100B413D8DC09677877A2B9DD1FBFEB33FAB97472CAC55D747DB3D3444C
SHA-512:	4C69A2F31976748FADC44A8D5FF8848091C242C09169915EB975D4E6B040EFCA26F7161A20D85BE4B008B02DC7BB4DE6A6FCD51E99E064B929260ECAFF19726D
Malicious:	false
Preview:	!BDN...&SM......\...............\|.......T................@...........@...@...................................@...........................................................................$.......D......................u........N......{...........................................................................................................................................................................................................................................................................................8.......A..T<......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	3.171051631744375
Encrypted:	false
SSDEEP:	1536:+9IAwr1c/xF5qoE11hXa9Xau3W53jEpEHP4qQ10PAwrkOmiRWeo:i1p9Je
MD5:	BA5ADBF6CCD2D9CCE681D8BCFD7FAF6B
SHA1:	E9F231F04D429641E3AFD6115C6D1B413610BDB1
SHA-256:	754656CFCD7A3EED0BEFE4B70CC2DE0784F3ED88B078D4A6F29AB027520F9019
SHA-512:	00F0F58575A635EF04346D8C7511E963D3E645340554A5B2376F6C418BD3B295546CB7A6265DCE8D1F0FB4D5AA7D22440E36CD2E6D238BFA3320A21789A949AE
Malicious:	false
Preview:	M.>.0...........\...v..{^........D............#......................................................................~......................................................................?.........................................................................................................................................................................................................................................................................................................................................................................`..D.......ls[0...........\...v..{^........B............#.........................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2717)
Category:	downloaded
Size (bytes):	35946
Entropy (8bit):	5.471620889692367
Encrypted:	false
SSDEEP:	768:6DyNw5wDn4toiuumfztiabrBOWi5uf/J8P2Bcn+irSPMRpk+b/902GwD3DJgiOYA:e3Vuum7tiGrBOWguXTc+irY3Q/902Gwe
MD5:	05345F56355FA8421E88B29947743EF5
SHA1:	C2652FD719B401718457C94BC3292D3204699D00
SHA-256:	A2BDD8CB01353D4ED2A9AB4C7D7C263225F6908AA875614D015A2F39956D9D73
SHA-512:	DB343C949AFF72FA05C45F914A02F874770367153574CB70DC6ECA426D3C7EFBACABD93670C97F715EE71C0037973E6CB6F4A6E9DC61DC91D77F0735C1059D68
Malicious:	false
URL:	https://www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js
Preview:	// Copyright Google Inc. All Rights Reserved..(function() { /.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var h=this\|\|self,aa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ba=function(a){var b=aa(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length},ca=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},da=function(a,b,c){return a.call.apply(a.bind,arguments)},ea=function(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);.Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},k=function(a,b,c){k=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?da:ea;return k.apply(null,arguments)},l=function(a,b){a=a.split(".");var c=h;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.462814895472355
Encrypted:	false
SSDEEP:	3:Vdei3+TsfMS1CYYn:NKsxC
MD5:	3C560E159387506A5D1BC9A088BC017C
SHA1:	AB8A05AB519E9A1DEDC740E540849CE0F3E2202A
SHA-256:	2DD76014791AE57281D085C683F9631BF322513E069F863195A2CF77A962312C
SHA-512:	2188BE78E3527FC4C6F87C2973BABE82ED54226AA672E77B20A4615BE5A29BD4C2392EE7C4037C9DD1BFF099F8F4E9613D23C108FC84D7C5550D3934264FE298
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwnJTSAaNbfenhIFDXhvEhkSBQ3OQUx6?alt=proto
Preview:	ChoKCw14bxIZGgQIVhgCCgsNzkFMehoECEsYAg==

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 87 x 14, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlW/qXBxl/k4E08up:6v/lhP5XB7Tp
MD5:	F690123F7D68AF49314AB4146A4CE5C9
SHA1:	6768A817D39C48FEF83C5ADD0EBBB8B4D9204081
SHA-256:	2B43181C1F539DE5E0122A1EFAA07C1AEB438BBE3A311D0B8020268D5F485748
SHA-512:	49B0542B72EB793C97E785C7FF664E3E7C62399606D0529CF0C377D4B54110FC6BC8D96992600879DA298FD37B369F5D2F15546AE4D6AEC0A3A8546F3B85E653
Malicious:	false
Preview:	.PNG........IHDR...W..........+......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x45, components 3
Category:	dropped
Size (bytes):	699
Entropy (8bit):	6.33619349649479
Encrypted:	false
SSDEEP:	12:Hq+FkS+FkocjXngjkhz9lzjs1q4lrjSeCPgLPtJVTtHm8z73+x0L8:emoungKz9pI1q4lhLPtZHm8zaj
MD5:	03766EB22AD176E272F2D2F6C5DD7F1C
SHA1:	0B241203F5589ACD7F0C79EFC9EC2DD033AF19AE
SHA-256:	A29DF473C01A82F90F7B073809FDF8C387AFBFB76FB6EB9080EDFF21B16990A5
SHA-512:	0FD5488913563AA5D31B3310523541B634175D9A6B981BCF980FD3EFD54BC630A0C8B1BD33F3DA3A8728145F9CC870A26A16D14B0F0182D6CE8E648CD28CF0D4
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......-.P.."................................................u.q..............................................9.a............................................(.......................!...Q@.. "#1Baq........?...t..m..;.A.9.yx.../o]..A.V.H..=.#...5.n.......>..L.&N.#......u.E.9^\....I>5.^.....>R\>..7..5.k...7v....wP....V.Eum..N...-...>.?A...g7V.#Nl..Xo..0<V.`V.)*r...j.<V.....%....................... T...ABSq...........?...........8rj.u....Q......f.x./...'......................... !$ABSTq............?...MiP.tWa.;w.._..1./.Wo?....!^....

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19095)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.133741277456062
Encrypted:	false
SSDEEP:	384:20zvM9Q5UgIT9hGuwVd3Y2GeGP9gi+WqktUouJ00SYRdr:g9Q5UgG9lwVd3ueGl4oRTYRR
MD5:	AB6382B12335C91B31C752FDB4174D5C
SHA1:	EF7F08821F4DD580ADCA4F121F90E6E45EC9C7DD
SHA-256:	BECCBD3E79B2D41BEA5F3A0C7005810415D08F6224E7EAD28913A2F49E8B5125
SHA-512:	690FA7C7FEE5E115F7AA505977E06D171E0036B360B6CE6B0E77739E8E61EB97B39CB977EF246E045582F3681BEBFE3463EE043C9FEB6D1A2C342F91B683D34F
Malicious:	false
URL:	https://certified-domain.cloudsurveillance.net/js/external/vimeo.min.js
Preview:	/! For license information please see vimeo.min.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Vimeo=e.Vimeo\|\|{},e.Vimeo.Player=t())}(this,(function(){"use strict";var e="undefined"!=typeof global&&"[object global]"==={}.toString.call(global);function t(e,t){return 0===e.indexOf(t.toLowerCase())?e:"".concat(t.toLowerCase()).concat(e.substr(0,1).toUpperCase()).concat(e.substr(1))}function n(e){return/^(https?:)?\/\/((player\|www)\.)?vimeo\.com(?=$\|\/)/.test(e)}function r(e){var t,r=0<arguments.length&&void 0!==e?e:{},o=r.id,i=r.url,a=o\|\|i;if(!a)throw new Error("An id or url must be passed, either in an options object or as a data-vimeo-id or data-vimeo-url attribute.");if(t=a,!isNaN(parseFloat(t))&&isFinite(t)&&Math.floor(t)==t)return"https://vimeo.com/".concat(a);if(n(a))return a.replace("http:","https:");if(o)throw new TypeErr

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65460)
Category:	downloaded
Size (bytes):	86881
Entropy (8bit):	5.2868971253842485
Encrypted:	false
SSDEEP:	1536:SLiBecGyW+O2zU4bx60BWb0kWH8oHGuo83hVRNE+0NBp9DuFI17yWGXRIS:/HGuoWUVVu6QRIS
MD5:	9F264566D7DDD23FEF8ED4BEABE1860D
SHA1:	8D328100557AC78C587C60E5C4E8581A77442FD6
SHA-256:	B99285911C88D18E1B2084CE286992FD5A2744C744F74969F8E52AB34FB625A8
SHA-512:	F1B3DDFC38C4C07040D30FE471C4847D9AAECB59B68CDE5616AEDC6F412F210A1BF9E609B6CF38FFB2FAD3A386E25EC60A4E4BC5AF3AAF44541D2E2470A90CFA
Malicious:	false
URL:	https://certified-domain.cloudsurveillance.net/js/external/jquery-3.3.1.min.js
Preview:	/! For license information please see jquery-3.3.1.min.js.LICENSE.txt /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,(function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},v=function(e){return null!=e&&e===e.window},y={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in y)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b=function(e,t){return new b.fn.init(e,t)},w=/^[\s\uFEFF\xA0]+\|[\s\

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42690)
Category:	downloaded
Size (bytes):	42691
Entropy (8bit):	5.373060430099094
Encrypted:	false
SSDEEP:	768:PCoL1znQzlLmx0isMILdD9dBvKBI886ifvO95QPcQ+aoh0aKoS4HRGU5KdF:XQzlyx0ipuvKBb95Q5
MD5:	985094F1486391033426C17505182792
SHA1:	D44FF6BEF2E3D9B2F6DEAA0170458B1AE39350D4
SHA-256:	14B108C7F687C327D6AA759FD1D255A981D5D505B241B5B968B674E3BF50B2B9
SHA-512:	D1A8015658A82AE64F2E93341B8CA15B0057DF298DF36ACB47188B330E0327CFE0392EE1FF94B9D3BE7BC7D689BDD536A86ADB873A7ADEDE10AE45AA9A9415DB
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/g/d2a97f6b6ec9/api.js
Preview:	"use strict";(function(){function Et(e,a,r,o,c,u,g){try{var b=e[u](g),_=b.value}catch(l){r(l);return}b.done?a(_):Promise.resolve(_).then(o,c)}function wt(e){return function(){var a=this,r=arguments;return new Promise(function(o,c){var u=e.apply(a,r);function g(_){Et(u,o,c,g,b,"next",_)}function b(_){Et(u,o,c,g,b,"throw",_)}g(void 0)})}}function M(e,a){return a!=null&&typeof Symbol!="undefined"&&a[Symbol.hasInstance]?!!a[Symbol.hasInstance](e):M(e,a)}function Re(e,a,r){return a in e?Object.defineProperty(e,a,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[a]=r,e}function Be(e){for(var a=1;a<arguments.length;a++){var r=arguments[a]!=null?arguments[a]:{},o=Object.keys(r);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(r).filter(function(c){return Object.getOwnPropertyDescriptor(r,c).enumerable}))),o.forEach(function(c){Re(e,c,r[c])})}return e}function fr(e,a){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	1.8423709931771086
Encrypted:	false
SSDEEP:	3:SaXH:ScH
MD5:	66EEC6BC0DDFE3CF8DDAD7021575856E
SHA1:	19FA6B34961D13B107F0227382FB8487EB985466
SHA-256:	4D01709FCD599118652E3B27BD0CA97C802F832183D01F76A034755F2BC62FA3
SHA-512:	71BAE8FC638B011075C7AEF65C5F47DBF556591B8A30115113009212E3EC211F8E20A8303E15F691DCCDA1B5A7277723DB6D47AE2634F25A03E06A7A2466C2EB
Malicious:	false
Preview:	"error"

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 87 x 14, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlW/qXBxl/k4E08up:6v/lhP5XB7Tp
MD5:	F690123F7D68AF49314AB4146A4CE5C9
SHA1:	6768A817D39C48FEF83C5ADD0EBBB8B4D9204081
SHA-256:	2B43181C1F539DE5E0122A1EFAA07C1AEB438BBE3A311D0B8020268D5F485748
SHA-512:	49B0542B72EB793C97E785C7FF664E3E7C62399606D0529CF0C377D4B54110FC6BC8D96992600879DA298FD37B369F5D2F15546AE4D6AEC0A3A8546F3B85E653
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/89d7f1342b040f83/1720020894751/ZkI2jQcLRdkWedY
Preview:	.PNG........IHDR...W..........+......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65495)
Category:	downloaded
Size (bytes):	215422
Entropy (8bit):	5.117013218465073
Encrypted:	false
SSDEEP:	1536:LYJMoOYWxuY++npUEJAWSnnJFerKz9EQ/b4TvMluvrLv3zRhRHCKfyp+eaIjZQIf:br6/luPVXH5fype+
MD5:	C0659D2D4C3AC9F3300D7D2288C89774
SHA1:	04D39142D242B266813CD627CF7ACD692E323B6F
SHA-256:	B0ED219E2AE68E620709D03151796E52B700BF997815C816EA715CB342C90C94
SHA-512:	EC49D44B06C943A456FB7046D58FE4E240552134B0BF7DD0762554E21D17EFCE86B005AA1485DFC6054D5815B6CCEEBF3BA71D27179BE495E4F04ABB9E6E4E14
Malicious:	false
URL:	https://f.vimeocdn.com/p/4.34.4/css/player.css
Preview:	/* VimeoPlayer - v4.34.4 - 2024-07-03 */.@keyframes buffer{100%{transform:translateX(-10px)}}@-moz-keyframes bufferLeft{0%{left:0}100%{left:-10px}}@keyframes throb{0%,100%{background-color:#555}50%{background-color:#444}}@keyframes wiggle{0%{transform:translateY(10px)}20%{transform:translateY(0)}40%,80%{transform:translateX(8px)}60%{transform:translateX(-8px)}100%{transform:translateX(0)}}@keyframes pulse{50%{transform:scale(.9)}}@keyframes dash{0%{stroke-dasharray:1,200;stroke-dashoffset:0}50%{stroke-dasharray:89,200;stroke-dashoffset:-35px}100%{stroke-dasharray:89,200;stroke-dashoffset:-135px}}@keyframes rotate{100%{transform:rotate(360deg)}}:fullscreen-ancestor>:not(:fullscreen-ancestor):not(:fullscreen){display:none!important}body:not(.showfocus) .player a,body:not(.showfocus) .player button,body:not(.showfocus) .player li,body:not(.showfocus) .player span,body:not(.showfocus) .player svg{outline:0!important}body:not(.showfocus) .player input{outline:0}.vp-center{display:flex;align

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65447)
Category:	downloaded
Size (bytes):	603923
Entropy (8bit):	5.623836390591376
Encrypted:	false
SSDEEP:	6144:yV4Sn+xs7YJrnog8Z5tIENLNbQCFafd8XQwuQVxWUq9BcbcwF:/S2AYlRcNbQCF8pfm8Uq0cq
MD5:	3267B3EB7E0AB720EC7C435C39A8F239
SHA1:	9C2AF26A3AE7B68C9B5DDCCD5CA7DCD721B24990
SHA-256:	6043C3BAB7C8948DA583CFF3791B718FB028D3F0CA2ABB268ADBC2A39E780F2F
SHA-512:	381E2E5C9A25DDB408AF05078CDCAAF25E5A7938C9A0B44161CB06826B3E5A837240EDE4C2B8A404F58877878BBCE1AEB1AD263E4FCE353430AF7C875BDB214B
Malicious:	false
URL:	https://f.vimeocdn.com/p/4.34.4/js/player.module.js
Preview:	/* VimeoPlayer - v4.34.4 - 2024-07-03 - https://player.vimeo.com/NOTICE.txt */.import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,V as v,t as m,j as f,r as h,m as g,p as b,P as E,T as y,k as C,l as T,n as L,o as w,q as A,u as S,G as I,v as P,w as k,F as O,y as R,Q as N,S as D,z as M,A as x,H as B,R as V,B as U,D as F,E as H,I as q,M as G,J as Y,K as W,N as $,O as K,U as j,W as z,X,Y as Z,Z as J,$ as Q,a0 as ee,a1 as te,a2 as ne,a3 as ie,a4 as oe,a5 as re,a6 as ae,a7 as se,a8 as le,a9 as ce,aa as de,ab as ue,ac as pe,ad as _e,ae as ve,af as me,ag as fe,ah as he,ai as ge,aj as be,ak as Ee,al as ye,am as Ce,an as Te,ao as Le,ap as we,aq as Ae,ar as Se,as as Ie,at as Pe,au as ke,av as Oe,aw as Re,ax as Ne,ay as De,az as Me,aA as xe,aB as Be,aC as Ve,aD as Ue,aE as Fe,aF as He,aG as qe,aH as Ge,aI as Ye,aJ as We,aK as $e,aL as Ke,aM as je,aN as ze,aO as Xe,aP as Ze,aQ as Je,aR as Qe,aS as et,aT as tt,aU as nt,aV as it,aW as ot,aX as rt}from".

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	downloaded
Size (bytes):	437503
Entropy (8bit):	5.3720360084584655
Encrypted:	false
SSDEEP:	6144:6K3iEz11IzsxFx6yHo/W9cVxl1ZPYh2fB6F7TDV8kb65Tt634NBb7eUzQO9qXh:MoXIpVxl1ZwPF7TikoTt634NB9ztYXh
MD5:	713D9494703B670C887CCBC43B50716E
SHA1:	71F33A42D305C67519674EC3B4B716886818CC7B
SHA-256:	66D97952F292F372D0E40BBBE4F38DFA583AC509FBF7AC25A26E42F0A8CA476B
SHA-512:	F09534085915CCC336164591FCC9DFFF6F919CE3C42B0BF128404FED1D75DD3C00AB645F8074517D2838502F139AF140AC57CAD965C8408220CAB8143554DD1E
Malicious:	false
URL:	https://f.vimeocdn.com/p/4.34.4/js/vendor.module.js
Preview:	/* VimeoPlayer - v4.34.4 - 2024-07-03 - https://player.vimeo.com/NOTICE.txt */.var e=Object.prototype,t=function(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)},n=function(e,t){return function(n){return e(t(n))}}(Object.keys,Object),r=Object.prototype.hasOwnProperty,i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function o(e,t,n){return e(n={path:t,exports:{},require:function(e,t){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==t&&n.path)}},n.exports),n.exports}var s="object"==typeof i&&i&&i.Object===Object&&i,a="object"==typeof self&&self&&self.Object===Object&&self,u=s\|\|a\|\|Function("return this")(),c=u.Symbol,l=Object.prototype,d=l.hasOwnProperty,h=l.toString,f=c?c.toStringTag:void 0,_=Object.prototype.toString,p=c?c.toStringTag:void 0,m=function(e){return null==e?void 0===e?"[object Undefine

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x394, components 3
Category:	dropped
Size (bytes):	8074
Entropy (8bit):	7.528385857235982
Encrypted:	false
SSDEEP:	96:emqfAVAupSDC0qbfAH8St9dWMEHSz12kxUpbCHXNUn5DjInGK/TQveWBtx75X+vf:r3oqUN2hBCdm5fIjT495XGZsPJgA9g
MD5:	14011415CACDC684EC26224D1046A7AD
SHA1:	4DA802A8ECE94321A2C851F0EE51FE7755AEC92D
SHA-256:	DAE60D705348A7D79E5F588C6E03187C7DDA039908D601FA08FE575E2EE4FD0B
SHA-512:	13B7DA2CAD5F9F8D589A44F5053707CC568C584C0CE02DD3A8310FE4FEE1DF09F8FE33FC99DCBC6F2E14EF211BEAE950ACB76EDBC6E08587145D585CDA8EE9DA
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}..........."...................................................................................................................................................................................................................................................................................................:.>Gj2.....,0.E?.g.;V..&.[.lz.a.4...D....u.....ig.x.....h7...:.F..6M9.l(GN.rO.y.#z.........!9..^.Qs}..]u.......UV..k.H......Q..w..">..l=X.+...{.N..F....<....R.. x......~....,(.......lq)..zmW....q.P.....M..n.i.....se.%.AnH..Z..tk..?.z..Q.k....[[:..2.......j.z.*.]f.T..............v.l...............................................................................................................................................................................................................................................

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47686)
Category:	downloaded
Size (bytes):	47757
Entropy (8bit):	5.222949464273097
Encrypted:	false
SSDEEP:	768:o2RIlMnfHVR8s6cMS6LPrwYjcFsENY+trT6cM1YWbGfVt:oQIBxKJNXt/MOvtt
MD5:	12622C9A5FECE84F5B7EA1C815EA79FC
SHA1:	864786DD754E8890304B795357A019CFD362E0DF
SHA-256:	67A0B97B9A3399B8AEF0EA8FD890D64D4487E84D509FC3F1812B974D61C5328E
SHA-512:	BE30E351DE017E30A8422DB4631AA6E2446D90A4749903E45354ACFC6AF2EEC87416882FE6B1D060B3C90D3A955AFF6A3BCFE9A28F01E44BA6F29E43E539AF04
Malicious:	false
URL:	https://certified-domain.cloudsurveillance.net/js/external/bootstrap.min.js
Preview:	/! For license information please see bootstrap.min.js.LICENSE.txt /.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProperty("default")?n.default:n;var o,a,l,h,c,u,f,d,g,_,m,p,v,E,y,C,T,b,I=function(t){var e=!1,n={TRANSITION_END:"bsTransitionEnd",getUID:function(t){do{t+=~~(1e6*Math.ra

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1839)
Category:	downloaded
Size (bytes):	1862
Entropy (8bit):	5.378704584910478
Encrypted:	false
SSDEEP:	48:kq9vYpOXSCKt9Y67c8ouBCWs3cTPaLGqviMaE8FEbEfESEHZ:kq9vYQiCKt9Y6g8ZBCCra3viHEIEbEfc
MD5:	83583A4061DDC27E8B6EE0DC269519CD
SHA1:	8B1C0ACC28729208F640473EB5D8FB82C4BA3E15
SHA-256:	C051B8B5EB2A0AEF699780F15A449491868FAA6F8B39B684B5AE8F64F345B94A
SHA-512:	3652AB4345C138245677F415607E6447358DC064B8B3AD7820F34BF225A0D70B0820AFD87E5D2235919AFC703248DA54F126DF8F793DFDA529D1FA336FBA22C3
Malicious:	false
URL:	https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js
Preview:	(function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()(t-e+1))+e}function d(t){var e=(new Date).getTime()/1e3,n=parseInt(e,10);return t?e:Math.round((e-n)1e3)/1e3+" "+n}function v(t,e,n){var o,i,r,u;e\|=0;o=Math.pow(10,e);t=o;u=t>0\|-(t<0);r=t%1===.5u;i=Math.floor(t);if(r){t=i+(u>0)}return(r?t:Math.round(t))/o}function h(t){var e=t+"",n=e.charCodeAt(0),o,i;if(55296<=n&&n<=56319){o=n;if(e.length===1){return n}i=e.charCodeAt(1);return(o-55296)1024+(i-56320)+65536}if(56320<=n&&n<=57343){return n}return n}function g(){return v(c()/f()2147483647)}function l(t){var e=t.toString(),n=1,o,i,r;if(typeof e!=="undefined"&&e!==""){n=0;o=e.length-1;for(o;o>=0;o--){i=h(e.charAt(o));n=(n<<6&268435455)+i+(i<<14);r=n&266338304;if(r){n^=r>>21}}}return n}function s(t,e,n,o,i,r,u){var a,f;if(arguments.length>1){if(n){a=new Date;a.s

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18721), with no line terminators
Category:	downloaded
Size (bytes):	18721
Entropy (8bit):	5.199674025653948
Encrypted:	false
SSDEEP:	384:mUQ5qdAMyR63Sfaft9BzzxkvfWwZHAdpwvii93w0IE+W6F5p9Pakh:3NdTys3Sm9zxkvBZHopwvi43w0ItVxaI
MD5:	61CF4CE3640873476C651FD4D5F11D3F
SHA1:	B473495A925E24B74F2A2D882FD34AB52A546A60
SHA-256:	D9EC6C98A544F75A0DFB832DC7109E57FB1283F765741A4FE52D82B0DFD57A71
SHA-512:	F961100657D08AE4EAD2B578ED713D0F9F174E695E6B484F044E9AA17CE0B8718DE91A2D60DC4DA0F5CA56D62E0A835D4D3605E9CBAD5FF04335BE82DFB803C6
Malicious:	false
URL:	https://certified-domain.cloudsurveillance.net/js/external/popper.min.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.Popper=t()}(this,(function(){"use strict";function e(e){return e&&"[object Function]"==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var n=getComputedStyle(e,null);return t?n[t]:n}function n(e){return"HTML"===e.nodeName?e:e.parentNode\|\|e.host}function r(e){if(!e)return document.body;switch(e.nodeName){case"HTML":case"BODY":return e.ownerDocument.body;case"#document":return e.body}var o=t(e),i=o.overflow,f=o.overflowX,s=o.overflowY;return/(auto\|scroll)/.test(i+s+f)?e:r(n(e))}function o(e){var n=e&&e.offsetParent,r=n&&n.nodeName;return r&&"BODY"!==r&&"HTML"!==r?-1!==["TD","TABLE"].indexOf(n.nodeName)&&"static"===t(n,"position")?o(n):n:e?e.ownerDocument.documentElement:document.documentElement}function i(e){return null===e.parentNode?e:i(e.parentNode)}function f(e,t){if(!(e&&e.nodeType&&t&&t.nodeType))return document.documentElement;var

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (523)
Category:	downloaded
Size (bytes):	13439
Entropy (8bit):	4.249120892559939
Encrypted:	false
SSDEEP:	192:rxjis7PY9eFkbBFYFr3t7bJkZ2EZZC1kzXnC+0yk+iXcqwoulzSFgprtHjHzHmmv:vFWFYFroHog+FIhDTdWqYg4+t
MD5:	4777DF9751DAE2C02A65DD76C382C58F
SHA1:	271A83C33D6D84166639D985E80962F4AFF6F25F
SHA-256:	8EAAF8D63814BCC9BE7FE7F47024F99669ABA6343F4CCAF0995908B13007B3AD
SHA-512:	7D6ACF77993B1ECF3D4B3FE6D790EDBC3F938B0C2537E69B609F99F0C2B15328F37B6BF45C282A51511A39774843D07492CDD04FCC8CD2C62E87D7E813E54D9E
Malicious:	false
URL:	https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c
Preview:	<html>..<head>..<title></title>..<meta name="viewport" content="width=device-width, initial-scale=1" />..<style type="text/css">* {. box-sizing: border-box;. }. body,. html {. height: 100%;. width: 100%;. margin: 0px;. font-family: system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto,. Oxygen-Sans, Ubuntu, Cantarell, "Helvetica Neue", Arial, sans-serif;. }.. .hulu-login {. display: block;. margin-left: auto;. margin-right: auto;. max-width: 340px;. width: 95%;. left: 0;. right: 0;. background-color: #fff;. padding-top: 25px;. height: 280px;. border: 6px solid #dfdede;. border-radius: 2%;. }.. .login-text {. display

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	509
Entropy (8bit):	5.971308635162336
Encrypted:	false
SSDEEP:	12:+cK/gj6qW/SaFkrO86l2b1v5LfOHKMIINw0AydfE16Xo:+cKYj6L/C/b7fbQdfkX
MD5:	B46C3918F85536BB3302D42F69FE81A1
SHA1:	87B7B9ACECC198191824E156DD9322ABD6802FCA
SHA-256:	82C7DBB9FEAAC161D1E04FEF5E1629CC97438037AB6982CC89A9571825E4147C
SHA-512:	CE674730F73FBCA5CE5B6226D240871F5DBC0790103E17129A5EE8FE37C765CD27F1174A1972AE7FBC17C984C965C44FF0A77B8FADF767E8A3490E0BCB43C129
Malicious:	false
URL:	https://i.vimeocdn.com/video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=80&q=85
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......P...-....pixi............av1C........colrnclx...........ipma...................mdat......g......2.......b........yd.yu....n..C..;...H}..[..d2...../...]!.+i\VZ..%DP..$B........W..*......a#..'.:..6}.pO..u.l.7...j...q.......2..-T........E...\+......Cs.y...@...a.7...S.2.q~....](T..]m..H)..\|.r....j.&..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	10007
Entropy (8bit):	7.958130493389067
Encrypted:	false
SSDEEP:	192:+WEu5kh3ry5kO6vo44vGwIHKMrCdFawb2A6Ve/WPsmffCZo7Wsdf+aX5aX/Rwwz:/5Tkjvo44OlKMmbvJoeqsmff0IvLJsR3
MD5:	A8DA261C3613D2E047E5C8D8205B99C5
SHA1:	68F66CE794D76C840AE279001069C2057880227B
SHA-256:	AFC922EDE810FEB422DDD666824AAB7BFA5FCFB811622F122350C9192657C9CC
SHA-512:	B941B65A8CEFC08CA14F0DA2C1569944DF541F830AB6BD7608F60CD24A4CF00F0A16899C6D9127B2F89264C72B30BD4AB18072539110ED76E204CBBC73F14C81
Malicious:	false
URL:	https://i.vimeocdn.com/video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............%....(iinf..........infe........av01Color....jiprp...Kipco....ispe...........8....pixi............av1C........colrnclx...........ipma.................&.mdat.......7....R2.K.$....1@.}....o.0........BQ.........eo.n.$...x\.)g&F.a#.%.T,..o\|&:d.Ui..p.\.z..w....G/...U:..o._...............:Us.e...V@#.oE..t..&0.....@R...z..sX.{....0\|....."....w....:...k..+..ur.B....j....V.N.....[l.$...zY......~..(".a..ID/l\|...-.m....~Z....U....5..~.O.Rx....).........Y....G.S....1..T.5.. ..%.?.....mgU}.O...V6B...w.X)...".....'..Z....M.0.K`._O..E..6n,..]5.^.J.m:..*M.v4..+..;.G.n.W...(..g..B."2f.E..iv....aZ.z..+G.......XP.d;.....p.e...#W..f.x..9:.....W!~.Q...!D''a..w...3h.P..^....3\|j......g.y.QM..D.j.....C.....L...G.\|.^C..ZXH%7....%m.8~....Uk...>..^.....iR. t.8.......i....?.H..keu...H!_..z...._.?o'.5,......o....`.4R..OZ..f.#.'.dC.l.b1.....].z.e.6.)

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	30937
Entropy (8bit):	7.133892140534179
Encrypted:	false
SSDEEP:	384:2/CNC6N2XuLyeVPQGMNBOY5rViJ4tkbiPvOZbxJa46X0/+SRNrKvu2J8Ebw:2/stNs0PQpFVHtY6GVJa4dIvu2JHw
MD5:	A56FDF7602DE74B579D41F5F85B96BC1
SHA1:	D347772112D60ECED70B5265AD322D1CE4027A5C
SHA-256:	679A4BD97597318EA98C410BAC837ED943E703AA25ACDFD87489F725A83BDB5A
SHA-512:	25EEDB21B874D0CF3F85886218675AA5D3B34214839906C45624120614B97D689B550A2B00D250FFD19137512DFA545CBE49799F00B8114069DBCC8C71447926
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......8...."..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	4392
Entropy (8bit):	7.879251298014494
Encrypted:	false
SSDEEP:	96:+cLjCtzLdsBa/1R9rV+5xnL+YZBj0XoJAx8+WOAXYTnMrOy3Onmr5:+W+VZR1R9reEYLj04JAx8+rhTMX3OnS
MD5:	5F650A524CF12F89DAC64D4AADC1FF0E
SHA1:	9213B9488F045E2A02F5D28870B3D338F60636EB
SHA-256:	779E0A6A54493671AB5091DED9CD5F5D50180008220C1B23E4B2ECBA473C3905
SHA-512:	6BB04BD6AE8AEBE5737D6516A1D207A5FD51D5FA0A94AADD6ADB4F83FC1B019D7F53DD5BB84CB30B592B40F8DD0F8FE374837B4A8FEDF8533B2BA00A861E874E
Malicious:	false
URL:	https://i.vimeocdn.com/video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=700&mh=394
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma...................mdat.....f+.K..4..2...O..0...b..M..N.dS.i..l..[~.c-s.....k....l.E.......{.!..@...4.a....G.f..E.'.....G..[#o...G9S..O.o........@..j..1...S.c2.Y,.O...]....N;.E.\.J.;c.\......6..@.'...C..x)[...g2.p.K..A...........i#D.O....=..zj....)jFU:...^n./Yy.G...W..D.0`."v.......-1.+.=..~.....f\|....Y...n....u...l+$.6..... ;2....(Bx.].p...._5..h.....Q.Dm.S~V.(e..!..c.$Z@..`..,.....BN.....A.6x..].BTa.@E.\|.hMUo.U.@.<AI..t.F.Z.!....$bi..`.5.S...b..C.f>^..Mq..uBe....N....0c.b.#L.K....3j..3.lo.+4PN..X.5:....o..S...._...U(%..k".).'q.'.....].tn.h.)....eL.T..az.&..V}...2\|Z2...}@).].%.T.N..T.$...L.....u...vT..1..@.E^.....f%.NKR-.W\|..m.M.W?/....7.:........{D..u.f.&:...V....:]%.l.uP.....w.F.o.u.....h.

Static File Info

General

File type:	RFC 822 mail, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Entropy (8bit):	6.04527865740414
TrID:	Text - UTF-8 encoded (3003/1) 100.00%
File name:	Service Desk - Please verify your Account!.eml
File size:	13'155 bytes
MD5:	2ee1512b75a6eb7d0cfec26e59498a87
SHA1:	fcf3bfb4cdd0fe0632fcfd8cd5f6179bacf1befc
SHA256:	af32d2f5c0a94a306690a1aec136243fc3d9a525b20632d68101f1dda92a551b
SHA512:	8c43f6058428ccff69d13a2054c639dda6aa3f5ed036795b5a68db70ecf2b5074f6c4943e38d41034515e021f74d73569401da93600fbd02df634a1791437e3e
SSDEEP:	384:UBuLL0as5hWyPtym54mfDnOja4eeReXgBE:U6+5jPEGfDOja4eeReXgBE
TLSH:	C842E905D6020417CBF605DAF8032E0D1291798CE5B762A13A6F76BF35DB13A7F35A8A
File Content Preview:	...Received: from MN0PR19MB6166.namprd19.prod.outlook.com (2603:10b6:208:3ce::22).. by PH0PR19MB5131.namprd19.prod.outlook.com with HTTPS; Wed, 3 Jul 2024.. 13:40:14 +0000..Received: from SA9P221CA0014.NAMP221.PROD.OUTLOOK.COM (2603:10b6:806:25::19).. by

Static Mail

General

Subject:	Service Desk - Please verify your Account!
From:	Service Support <Support@service-noreply.info>
To:	Stephanie Bennett <sbennett@edgebuildingsolutions.com>
Cc:
BCC:
Date:	Wed, 03 Jul 2024 09:40:07 -0400
Communications:
Attachments:

Headers

Key	Value
Received	from [127.0.0.1] (ip-10-50-12-173.ec2.internal [10.50.12.173]) by mx1.bullphish.com (Postfix) with ESMTPSA id 71E2650817A for <sbennett@edgebuildingsolutions.com>; Wed, 3 Jul 2024 13:40:07 +0000 (UTC)
Authentication-Results	spf=pass (sender IP is 34.237.252.20) smtp.mailfrom=bpid.service-noreply.info; dkim=pass (signature was verified) header.d=service-noreply.info;dmarc=pass action=none header.from=service-noreply.info;compauth=pass reason=100
Received-SPF	Pass (protection.outlook.com: domain of bpid.service-noreply.info designates 34.237.252.20 as permitted sender) receiver=protection.outlook.com; client-ip=34.237.252.20; helo=mx1.bullphish.com; pr=C
DKIM-Signature	v=1; a=rsa-sha256; c=relaxed/simple; d=service-noreply.info; s=bpid; t=1720014007; bh=5D24kFeQV50375P/H0/nD879mhRUhhh9IHdFfZQaITY=; h=From:Subject:To:Date; b=jOJj+j2KY7UBdHztuXFGLQVR6SltFcg4TlOIYDcjFmlzcXRKt9bMz2uP/GvxyLaKK KGdTXWpnUWUan2rnSwty8daWgyjy0Lkvm5BBuWYpnhMB9N/VlwC1GU/CHC5MXGauT0 n5TP9Y0W4Txfv8kVn8hGqrbf2pvnYZ+3k59M4MVM=
From	Service Support <Support@service-noreply.info>
Subject	Service Desk - Please verify your Account!
To	Stephanie Bennett <sbennett@edgebuildingsolutions.com>
X-Mailer	Bullphish
Message-ID	<fc058abd716e4ddb1289a7a462dce792@service-noreply.info>
Date	Wed, 03 Jul 2024 09:40:07 -0400
Content-Type	text/html; charset="utf-8"
Content-Transfer-Encoding	quoted-printable
Return-Path	spf@bpid.service-noreply.info
X-MS-Exchange-Organization-ExpirationStartTime	03 Jul 2024 13:40:08.1039 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason	OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval	1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason	OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id	7e7b3561-21b8-47e8-8731-08dc9b65a753
X-EOPAttributedMessage	0
X-EOPTenantAttributedMessage	b229989b-228e-47d3-849f-0539d987e848:0
X-MS-Exchange-Organization-MessageDirectionality	Incoming
X-MS-PublicTrafficType	Email
X-MS-TrafficTypeDiagnostic	SA2PEPF00003F68:EE_\|MN0PR19MB6166:EE_\|PH0PR19MB5131:EE_
X-MS-Exchange-Organization-AuthSource	SA2PEPF00003F68.namprd04.prod.outlook.com
X-MS-Exchange-Organization-AuthAs	Anonymous
X-MS-Office365-Filtering-Correlation-Id	7e7b3561-21b8-47e8-8731-08dc9b65a753
X-MS-Exchange-AtpMessageProperties	SA\|SL
X-MSExchange-Organization-SkipSafeLinksProcessing	1
X-MS-Exchange-Organization-SCL	-1
X-Microsoft-Antispam	BCL:0;ARA:13230040\|2092899012\|5073199012\|3072899012\|69100299015\|12012899012\|34002699019\|43540500003;
X-Forefront-Antispam-Report	CIP:34.237.252.20;CTRY:US;LANG:en;SCL:-1;SRV:;IPV:NLI;SFV:NSPM;H:mx1.bullphish.com;PTR:mx1.bullphish.com;CAT:NONE;SFS:(13230040)(2092899012)(5073199012)(3072899012)(69100299015)(12012899012)(34002699019)(43540500003);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime	03 Jul 2024 13:40:07.9789 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id	7e7b3561-21b8-47e8-8731-08dc9b65a753
X-MS-Exchange-CrossTenant-Id	b229989b-228e-47d3-849f-0539d987e848
X-MS-Exchange-CrossTenant-AuthSource	SA2PEPF00003F68.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs	Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader	Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped	MN0PR19MB6166
X-MS-Exchange-Transport-EndToEndLatency	00:00:06.1900811
X-MS-Exchange-Processed-By-BccFoldering	15.20.7719.007
X-Microsoft-Antispam-Mailbox-Delivery	ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003);
X-Microsoft-Antispam-Message-Info	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
MIME-Version	1.0

File Icon


Icon Hash:	46070c0a8e0c67d6

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 17:34:23.476871014 CEST	49676	443	192.168.2.17	204.79.197.200
Jul 3, 2024 17:34:23.478733063 CEST	49678	443	192.168.2.17	204.79.197.200
Jul 3, 2024 17:34:33.977209091 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:33.977236986 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:33.977315903 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:33.979254961 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:33.979269028 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.675431013 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.675606012 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:34.677581072 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:34.677594900 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.677886009 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.724848032 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:34.748476028 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:34.796499968 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.980249882 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.980273962 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.980283022 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.980295897 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.980333090 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.980370998 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:34.980398893 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.980412960 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:34.980446100 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:34.980459929 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.980524063 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:34.980532885 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.980679989 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:34.980725050 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:34.993129969 CEST	49703	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:34:34.993172884 CEST	443	49703	52.165.165.26	192.168.2.17
Jul 3, 2024 17:34:37.453047037 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:37.453088999 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:37.453167915 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:37.453376055 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:37.453391075 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.260128021 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.260207891 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:38.272219896 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:38.272252083 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.272711039 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.273156881 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:38.273185968 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:38.273256063 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.697442055 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.697475910 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.697515011 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.697549105 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:38.697578907 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.697597980 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:38.697798014 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.697805882 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:38.697832108 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.697845936 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:38.697853088 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:38.697865963 CEST	49707	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:38.697870016 CEST	443	49707	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:43.767456055 CEST	49675	443	192.168.2.17	204.79.197.203
Jul 3, 2024 17:34:44.069989920 CEST	49675	443	192.168.2.17	204.79.197.203
Jul 3, 2024 17:34:44.675918102 CEST	49675	443	192.168.2.17	204.79.197.203
Jul 3, 2024 17:34:45.891169071 CEST	49675	443	192.168.2.17	204.79.197.203
Jul 3, 2024 17:34:45.989378929 CEST	49713	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:34:45.989418030 CEST	443	49713	18.208.118.114	192.168.2.17
Jul 3, 2024 17:34:45.989486933 CEST	49713	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:34:45.989881039 CEST	49713	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:34:45.989892006 CEST	443	49713	18.208.118.114	192.168.2.17
Jul 3, 2024 17:34:46.217314005 CEST	49716	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:46.217361927 CEST	443	49716	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:46.217446089 CEST	49716	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:46.218702078 CEST	49716	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:46.218729973 CEST	443	49716	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:46.660151958 CEST	443	49713	18.208.118.114	192.168.2.17
Jul 3, 2024 17:34:46.660517931 CEST	49713	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:34:46.660538912 CEST	443	49713	18.208.118.114	192.168.2.17
Jul 3, 2024 17:34:46.661637068 CEST	443	49713	18.208.118.114	192.168.2.17
Jul 3, 2024 17:34:46.661704063 CEST	49713	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:34:46.662956953 CEST	49713	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:34:46.663067102 CEST	443	49713	18.208.118.114	192.168.2.17
Jul 3, 2024 17:34:46.663144112 CEST	49713	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:34:46.663167000 CEST	443	49713	18.208.118.114	192.168.2.17
Jul 3, 2024 17:34:46.715934992 CEST	49713	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:34:46.879087925 CEST	443	49716	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:46.879168987 CEST	49716	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:46.884919882 CEST	49716	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:46.884960890 CEST	443	49716	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:46.885242939 CEST	443	49716	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:46.902657986 CEST	49690	443	192.168.2.17	204.79.197.200
Jul 3, 2024 17:34:46.907748938 CEST	443	49690	204.79.197.200	192.168.2.17
Jul 3, 2024 17:34:46.939892054 CEST	49716	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:46.943789959 CEST	49716	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:46.984509945 CEST	443	49716	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:47.001344919 CEST	443	49690	204.79.197.200	192.168.2.17
Jul 3, 2024 17:34:47.001450062 CEST	49690	443	192.168.2.17	204.79.197.200
Jul 3, 2024 17:34:47.010144949 CEST	49690	443	192.168.2.17	204.79.197.200
Jul 3, 2024 17:34:47.010227919 CEST	49690	443	192.168.2.17	204.79.197.200
Jul 3, 2024 17:34:47.010324955 CEST	49690	443	192.168.2.17	204.79.197.200
Jul 3, 2024 17:34:47.010340929 CEST	49690	443	192.168.2.17	204.79.197.200
Jul 3, 2024 17:34:47.010813951 CEST	49690	443	192.168.2.17	204.79.197.200
Jul 3, 2024 17:34:47.015012980 CEST	443	49690	204.79.197.200	192.168.2.17
Jul 3, 2024 17:34:47.015073061 CEST	443	49690	204.79.197.200	192.168.2.17
Jul 3, 2024 17:34:47.015197039 CEST	443	49690	204.79.197.200	192.168.2.17
Jul 3, 2024 17:34:47.015207052 CEST	443	49690	204.79.197.200	192.168.2.17
Jul 3, 2024 17:34:47.015214920 CEST	443	49690	204.79.197.200	192.168.2.17
Jul 3, 2024 17:34:47.015738010 CEST	443	49690	204.79.197.200	192.168.2.17
Jul 3, 2024 17:34:47.045730114 CEST	443	49713	18.208.118.114	192.168.2.17
Jul 3, 2024 17:34:47.045849085 CEST	443	49713	18.208.118.114	192.168.2.17
Jul 3, 2024 17:34:47.045912981 CEST	49713	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:34:47.046782970 CEST	49713	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:34:47.046802998 CEST	443	49713	18.208.118.114	192.168.2.17
Jul 3, 2024 17:34:47.057988882 CEST	49717	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:47.062936068 CEST	53	49717	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:47.063024998 CEST	49717	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:47.063098907 CEST	49717	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:47.063117027 CEST	49717	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:47.067945957 CEST	53	49717	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:47.068005085 CEST	53	49717	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:47.086311102 CEST	49717	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:47.086637020 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:47.086678028 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:47.086788893 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:47.087058067 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:47.087076902 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:47.105067015 CEST	443	49690	204.79.197.200	192.168.2.17
Jul 3, 2024 17:34:47.105361938 CEST	49690	443	192.168.2.17	204.79.197.200
Jul 3, 2024 17:34:47.140199900 CEST	53	49717	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:47.162013054 CEST	443	49716	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:47.162081957 CEST	443	49716	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:47.162184000 CEST	49716	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:47.162275076 CEST	49716	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:47.162292957 CEST	443	49716	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:47.162302017 CEST	49716	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:47.162307978 CEST	443	49716	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:47.196125984 CEST	49719	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:47.196185112 CEST	443	49719	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:47.196985006 CEST	49719	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:47.197268009 CEST	49719	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:47.197285891 CEST	443	49719	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:47.198580027 CEST	49720	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:47.198621035 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:47.198812008 CEST	49720	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:47.198859930 CEST	49720	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:47.198868990 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:47.237241030 CEST	443	49690	204.79.197.200	192.168.2.17
Jul 3, 2024 17:34:47.237373114 CEST	49690	443	192.168.2.17	204.79.197.200
Jul 3, 2024 17:34:47.438112974 CEST	53	49717	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:47.438196898 CEST	49717	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:47.674814939 CEST	49721	443	192.168.2.17	13.107.5.88
Jul 3, 2024 17:34:47.674854040 CEST	443	49721	13.107.5.88	192.168.2.17
Jul 3, 2024 17:34:47.674940109 CEST	49721	443	192.168.2.17	13.107.5.88
Jul 3, 2024 17:34:47.707355976 CEST	49721	443	192.168.2.17	13.107.5.88
Jul 3, 2024 17:34:47.707376957 CEST	443	49721	13.107.5.88	192.168.2.17
Jul 3, 2024 17:34:47.805502892 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:47.805780888 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:47.805810928 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:47.806885004 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:47.806967974 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:47.808010101 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:47.808096886 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:47.808192015 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:47.808197975 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:47.861907005 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:47.870384932 CEST	443	49719	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:47.870462894 CEST	49719	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:47.872287989 CEST	49719	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:47.872303009 CEST	443	49719	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:47.872581959 CEST	443	49719	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:47.873677015 CEST	49719	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:47.916507006 CEST	443	49719	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:47.926697016 CEST	49680	443	192.168.2.17	20.189.173.13
Jul 3, 2024 17:34:48.002609015 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:48.002692938 CEST	49720	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:48.004746914 CEST	49720	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:48.004784107 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:48.005136967 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:48.005661011 CEST	49720	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:48.005721092 CEST	49720	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:48.005740881 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:48.151972055 CEST	443	49719	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:48.152060986 CEST	443	49719	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:48.152132988 CEST	49719	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:48.153486967 CEST	49719	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:48.153501987 CEST	443	49719	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:48.153522968 CEST	49719	443	192.168.2.17	184.28.90.27
Jul 3, 2024 17:34:48.153528929 CEST	443	49719	184.28.90.27	192.168.2.17
Jul 3, 2024 17:34:48.227967978 CEST	49680	443	192.168.2.17	20.189.173.13
Jul 3, 2024 17:34:48.287431955 CEST	443	49721	13.107.5.88	192.168.2.17
Jul 3, 2024 17:34:48.287528038 CEST	49721	443	192.168.2.17	13.107.5.88
Jul 3, 2024 17:34:48.290766001 CEST	49721	443	192.168.2.17	13.107.5.88
Jul 3, 2024 17:34:48.290781975 CEST	443	49721	13.107.5.88	192.168.2.17
Jul 3, 2024 17:34:48.291146040 CEST	443	49721	13.107.5.88	192.168.2.17
Jul 3, 2024 17:34:48.291964054 CEST	49675	443	192.168.2.17	204.79.197.203
Jul 3, 2024 17:34:48.338918924 CEST	49721	443	192.168.2.17	13.107.5.88
Jul 3, 2024 17:34:48.347625971 CEST	49721	443	192.168.2.17	13.107.5.88
Jul 3, 2024 17:34:48.379960060 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:48.379991055 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:48.380028963 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:48.380065918 CEST	49720	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:48.380079985 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:48.380140066 CEST	49720	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:48.380440950 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:48.380491972 CEST	49720	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:48.381131887 CEST	49720	443	192.168.2.17	40.126.32.136
Jul 3, 2024 17:34:48.381151915 CEST	443	49720	40.126.32.136	192.168.2.17
Jul 3, 2024 17:34:48.392499924 CEST	443	49721	13.107.5.88	192.168.2.17
Jul 3, 2024 17:34:48.455893993 CEST	443	49721	13.107.5.88	192.168.2.17
Jul 3, 2024 17:34:48.456173897 CEST	443	49721	13.107.5.88	192.168.2.17
Jul 3, 2024 17:34:48.456226110 CEST	49721	443	192.168.2.17	13.107.5.88
Jul 3, 2024 17:34:48.459858894 CEST	49721	443	192.168.2.17	13.107.5.88
Jul 3, 2024 17:34:48.465358019 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:48.465384007 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:48.465471029 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:48.488198042 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:48.488209963 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:48.547514915 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.547547102 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.547554970 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.547579050 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.547622919 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.547646999 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.547674894 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.548270941 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.548326015 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.548331976 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.548367977 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.548368931 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.548851967 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.551409960 CEST	49718	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.551424026 CEST	443	49718	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.585218906 CEST	49724	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.585243940 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.585315943 CEST	49724	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.585500956 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.585536003 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.585622072 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.585905075 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.585913897 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.585922956 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.585932970 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.585968971 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.585998058 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.586558104 CEST	49724	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.586566925 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.586714029 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.586738110 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.586916924 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.586925983 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.587107897 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:48.587116957 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:48.832963943 CEST	49680	443	192.168.2.17	20.189.173.13
Jul 3, 2024 17:34:49.072365999 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.073088884 CEST	49724	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.073116064 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.073122978 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.073333025 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.073339939 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.073487043 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.074376106 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.074430943 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.074743032 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.074794054 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.075141907 CEST	49724	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.075205088 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.075337887 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.075347900 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.075576067 CEST	49724	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.077871084 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.078171968 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.078198910 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.078527927 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.079113960 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.079180002 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.079325914 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.084846973 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.085381985 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.085400105 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.086479902 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.086577892 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.087444067 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.087507010 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.087615013 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.087630033 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.116506100 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.118957043 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.124509096 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.129820108 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:49.129920959 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.134980917 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.190330982 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.190835953 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.192302942 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.192334890 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:49.192663908 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:49.192917109 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.194577932 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.194602013 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:49.196691036 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.196753025 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.196795940 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.196861982 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.196880102 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.196957111 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.205398083 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.231000900 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.231000900 CEST	49724	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.246937990 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.277848005 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.277861118 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.277905941 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.277957916 CEST	49724	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.278003931 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.278059959 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.278073072 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.278074026 CEST	49724	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.278136969 CEST	49724	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.279407978 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.279422045 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.279453039 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.279463053 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.279479027 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.279493093 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.279503107 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.279525995 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.279592991 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.279607058 CEST	49724	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.279620886 CEST	443	49724	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.282228947 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.282253027 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.282315016 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.282320976 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.286709070 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.286735058 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.286787033 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.286824942 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.286860943 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.286945105 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.296716928 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.296730042 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.296757936 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.296772957 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.296787024 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.296899080 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.296925068 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.296937943 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.296984911 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.297071934 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.297560930 CEST	49726	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.297585964 CEST	443	49726	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.325994968 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.351658106 CEST	49729	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.351702929 CEST	443	49729	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:49.351797104 CEST	49729	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.352041006 CEST	49729	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.352058887 CEST	443	49729	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:49.366972923 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.366992950 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.367037058 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.367068052 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.367089987 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.367105007 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.367162943 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.368978977 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.368993998 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.369020939 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.369088888 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.369100094 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.369139910 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.374012947 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.374043941 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.374092102 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.374126911 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.374145985 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.374255896 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.374310017 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.374310017 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.374319077 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.374346018 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.374525070 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.375063896 CEST	49725	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.375087976 CEST	443	49725	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.439604044 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:49.439645052 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:49.439701080 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.439732075 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:49.439745903 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.439779043 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.440144062 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:49.440190077 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.440200090 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:49.440248013 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.442715883 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.442734957 CEST	443	49723	2.23.209.144	192.168.2.17
Jul 3, 2024 17:34:49.442744970 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.442826033 CEST	49723	443	192.168.2.17	2.23.209.144
Jul 3, 2024 17:34:49.454482079 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.454539061 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.454562902 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.454585075 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.454586029 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.454605103 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.454678059 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.454679966 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.454726934 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.455621004 CEST	49727	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.455651999 CEST	443	49727	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.479803085 CEST	49730	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.479862928 CEST	443	49730	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.479942083 CEST	49730	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.480267048 CEST	49730	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:49.480281115 CEST	443	49730	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:49.858691931 CEST	443	49729	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:49.859101057 CEST	49729	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.859122992 CEST	443	49729	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:49.860153913 CEST	443	49729	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:49.860259056 CEST	49729	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.861469030 CEST	49729	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.861532927 CEST	443	49729	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:49.861641884 CEST	49729	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.861651897 CEST	443	49729	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:49.915000916 CEST	49729	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.977819920 CEST	443	49729	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:49.977891922 CEST	443	49729	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:49.978050947 CEST	49729	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.978785992 CEST	49729	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.978801966 CEST	443	49729	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:49.980614901 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.980637074 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:49.980817080 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.980993986 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:49.981005907 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.025296926 CEST	443	49730	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:50.025618076 CEST	49730	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:50.025650978 CEST	443	49730	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:50.026043892 CEST	443	49730	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:50.026423931 CEST	49730	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:50.026503086 CEST	443	49730	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:50.026616096 CEST	49730	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:50.042917967 CEST	49680	443	192.168.2.17	20.189.173.13
Jul 3, 2024 17:34:50.072501898 CEST	443	49730	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:50.388091087 CEST	443	49730	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:50.388195992 CEST	443	49730	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:50.388250113 CEST	49730	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:50.388803959 CEST	49730	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:50.388823032 CEST	443	49730	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:50.453666925 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.454025984 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.454044104 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.454420090 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.454750061 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.454839945 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.454902887 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.500503063 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.504977942 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.592363119 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.592423916 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.592447996 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.592470884 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.592504025 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.592528105 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.592561007 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.592561007 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.592570066 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.592593908 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.592727900 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.592727900 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.592737913 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.596957922 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.597748041 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.597757101 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.646964073 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.646985054 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.679136992 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.679224968 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.679249048 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.679270983 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.679290056 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.679291964 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.679316044 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.679362059 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.679362059 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.679977894 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.680149078 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.680161953 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.680397987 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.680505037 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.680511951 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.680778027 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.680809975 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.680834055 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.680847883 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.680855989 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.681380033 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.681586027 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.681632996 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.681657076 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.681678057 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.681720972 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.681720972 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.681729078 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.681801081 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.684649944 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.684763908 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.685159922 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.685159922 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.696808100 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.696861029 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.697012901 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.697282076 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.697294950 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:50.761655092 CEST	49734	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:34:50.761697054 CEST	443	49734	142.250.186.100	192.168.2.17
Jul 3, 2024 17:34:50.761928082 CEST	49734	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:34:50.762058973 CEST	49734	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:34:50.762073040 CEST	443	49734	142.250.186.100	192.168.2.17
Jul 3, 2024 17:34:50.998965979 CEST	49732	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:50.998996019 CEST	443	49732	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.153254032 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.153570890 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.153594017 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.153919935 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.154333115 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.154382944 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.154508114 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.200505018 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.290059090 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.290124893 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.290148973 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.290174007 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.290194035 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.290215969 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.290239096 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.290515900 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.290576935 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.290597916 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.290618896 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.290630102 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.290635109 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.290656090 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.290673018 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.295319080 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.323368073 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.323435068 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.323860884 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.324117899 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.324140072 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.347939014 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.347954988 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.376966000 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.377017021 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.377039909 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.377059937 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.377063990 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.377075911 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.377115011 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.377183914 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.377432108 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.377454996 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.377471924 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.377475977 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.377485037 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.377517939 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.377538919 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.377580881 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.378336906 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.378371000 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.378403902 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.378424883 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.378424883 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.378433943 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.378473997 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.378479004 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.378561020 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.379240036 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.379275084 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.379308939 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.379312038 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.379317999 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.379353046 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.379358053 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.380961895 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.383106947 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.383114100 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.418632030 CEST	443	49734	142.250.186.100	192.168.2.17
Jul 3, 2024 17:34:51.418931007 CEST	49734	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:34:51.418946981 CEST	443	49734	142.250.186.100	192.168.2.17
Jul 3, 2024 17:34:51.419997931 CEST	443	49734	142.250.186.100	192.168.2.17
Jul 3, 2024 17:34:51.420092106 CEST	49734	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:34:51.421185970 CEST	49734	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:34:51.421257973 CEST	443	49734	142.250.186.100	192.168.2.17
Jul 3, 2024 17:34:51.427959919 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.463757992 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.463812113 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.463840961 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.463865042 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.463907957 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.463908911 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.463921070 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.463951111 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.463973045 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.464020014 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.464067936 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.464785099 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.464844942 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.464854956 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.464925051 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.464966059 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.464971066 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.465097904 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.465400934 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.465455055 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.465554953 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.465610027 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.465635061 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.465642929 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.465689898 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.465749979 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.466238976 CEST	49733	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.466260910 CEST	443	49733	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.470225096 CEST	49736	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.470263958 CEST	443	49736	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.470340014 CEST	49736	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.470598936 CEST	49736	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.470611095 CEST	443	49736	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.480990887 CEST	49734	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:34:51.481003046 CEST	443	49734	142.250.186.100	192.168.2.17
Jul 3, 2024 17:34:51.523066998 CEST	49734	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:34:51.802565098 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.802882910 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.802902937 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.803406954 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.803852081 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.804016113 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.804064035 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.848504066 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.857053041 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.928956985 CEST	443	49736	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.929416895 CEST	49736	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.929431915 CEST	443	49736	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.929470062 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.929514885 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.929543018 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.929616928 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.929625988 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.929688931 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.929701090 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.929709911 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.929749012 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.929764032 CEST	443	49736	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.929774046 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.929780960 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.929827929 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.930402040 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.930440903 CEST	49736	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.930499077 CEST	443	49736	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.930728912 CEST	49736	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.934338093 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.934376001 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.934565067 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.934576988 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:51.934669971 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:51.976492882 CEST	443	49736	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.019932032 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.019985914 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020009041 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020106077 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.020117998 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020174980 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.020194054 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020222902 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020246983 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020277977 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.020286083 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020327091 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.020755053 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020863056 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020886898 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020916939 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020946026 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.020970106 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.020970106 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.020981073 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.021059036 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.021738052 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.021796942 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.021820068 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.021848917 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.021876097 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.021893978 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.021908045 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.021920919 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.021954060 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.022665977 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.022718906 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.022753000 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.022773981 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.022815943 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.022815943 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.022825003 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.064997911 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.074748993 CEST	443	49736	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.074831009 CEST	443	49736	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.074943066 CEST	49736	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.075774908 CEST	49736	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.075803041 CEST	443	49736	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.087946892 CEST	49737	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.087985039 CEST	443	49737	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.088223934 CEST	49737	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.088434935 CEST	49737	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.088445902 CEST	443	49737	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.110513926 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.110582113 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.110611916 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.110635996 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.110671043 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.110671043 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.110687017 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.110846996 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.110941887 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.110949993 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.111078978 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.111227036 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.111382961 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.111390114 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.111449957 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.111644983 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.111718893 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.111756086 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.111871004 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.111952066 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.111958027 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.111974955 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.112653971 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.112713099 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.112720013 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.112734079 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.112801075 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.112808943 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.112863064 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.112972021 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.112978935 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.113086939 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.113625050 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.113656044 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.113692045 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.113711119 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.113723040 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.113753080 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.113753080 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.113760948 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.113856077 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.114422083 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.114490986 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.114496946 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.114541054 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.114567995 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.114586115 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.114603043 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.159002066 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.200998068 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.201097965 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.201246023 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.201280117 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.201307058 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.201327085 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.201350927 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.201571941 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.201598883 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.201632023 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.201642990 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.201666117 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.201879025 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.201961040 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.201972008 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.202022076 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.202188015 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.202290058 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.202299118 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.202310085 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.202322960 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.202338934 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.202363014 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.202368021 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.202421904 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.202476978 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.202605963 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.202625036 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.202632904 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.202677011 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.203176022 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.203296900 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.203298092 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.203308105 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.203347921 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.203351021 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.203361988 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.203407049 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.203407049 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.203493118 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.203550100 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.203953981 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.204024076 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.204088926 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.204088926 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.204113007 CEST	443	49735	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.204137087 CEST	49735	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.236761093 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.236808062 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.236939907 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.237196922 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.237210989 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.443964958 CEST	49680	443	192.168.2.17	20.189.173.13
Jul 3, 2024 17:34:52.611738920 CEST	443	49737	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.612088919 CEST	49737	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.612118959 CEST	443	49737	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.613183022 CEST	443	49737	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.613289118 CEST	49737	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.613831043 CEST	49737	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.613904953 CEST	443	49737	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.614525080 CEST	49737	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.614532948 CEST	443	49737	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.661065102 CEST	49737	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.737725019 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.738065004 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.738079071 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.738394976 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.738810062 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.738872051 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.738971949 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.766355038 CEST	443	49737	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.766427994 CEST	443	49737	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.766508102 CEST	49737	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.767582893 CEST	49737	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.767600060 CEST	443	49737	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.784498930 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.890208006 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.890271902 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.890312910 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.890322924 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.890353918 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.890413046 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.890444994 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.890469074 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.890476942 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.890489101 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.891261101 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.891321898 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.891329050 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.891423941 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.891468048 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.891474009 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.931935072 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:52.931950092 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:52.978964090 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.014875889 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.014936924 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.014962912 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.015067101 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.015098095 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.015109062 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.015124083 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.015141010 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.015160084 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.015162945 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.015170097 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.015199900 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.015952110 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.016012907 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.016048908 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.016074896 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.016096115 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.016103029 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.016129017 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.016892910 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.016921043 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.016944885 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.016948938 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.016957045 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.016984940 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.017625093 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.017677069 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.017684937 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.017712116 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.017740011 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.017749071 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.017754078 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.017787933 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.018462896 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.058990955 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.082828999 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.082895041 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.082923889 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.082954884 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.082959890 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.082988024 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.083004951 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.102279902 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.102349043 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.102405071 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.102430105 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.102458954 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.102475882 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.103009939 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.103071928 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.103079081 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.103085041 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.103135109 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.103842974 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.103890896 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.103925943 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.103931904 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.103955030 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.104005098 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.104078054 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.104085922 CEST	443	49738	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.104099035 CEST	49738	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.106844902 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.106884956 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.106977940 CEST	49675	443	192.168.2.17	204.79.197.203
Jul 3, 2024 17:34:53.107027054 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.107285023 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.107300997 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.582081079 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.582370996 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.582382917 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.582756042 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.583651066 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.583748102 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.584079981 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.628499985 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.714169979 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.714217901 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.714243889 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.714267015 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.714284897 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.714294910 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.714308023 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.714342117 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.714342117 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.714354038 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.714673042 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.714698076 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.714730978 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.714739084 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.716980934 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.718980074 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.759196997 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.759208918 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.807070017 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.830843925 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.831063032 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.831139088 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.831151009 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.831264019 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.831289053 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.831317902 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.831351995 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.831351995 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.831362009 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.832164049 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.832194090 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.832216024 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.832223892 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.832284927 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.832293034 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.833026886 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.833058119 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.833086967 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.833096027 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.833103895 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.833121061 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.834423065 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.834460020 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.834479094 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.834486008 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.834578991 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.834587097 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.834794998 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.834836960 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.834844112 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.870383024 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.870460987 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.870476961 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.918977022 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.921608925 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.921667099 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.921689987 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.921750069 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.921761036 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.921834946 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.921946049 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.921993017 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.922027111 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.922040939 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.922326088 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.922386885 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.922394037 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.922811985 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.922840118 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.922842026 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.922854900 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.922921896 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.922921896 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.923012972 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.923067093 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.923602104 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.923768997 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.923794985 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.923803091 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.923914909 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.924514055 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.924559116 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.924583912 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.924590111 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.925132990 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.925158024 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.925203085 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.925208092 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.925283909 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.925723076 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.925761938 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.925791025 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.925796032 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.925808907 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.925828934 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.925828934 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.925837040 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.925862074 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.960958004 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.961030960 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:53.961045980 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:53.961179972 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.016067982 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016117096 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016141891 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.016159058 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016196012 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.016222954 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.016294003 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016323090 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016350031 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016351938 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.016364098 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016396999 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.016422033 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.016532898 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016567945 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016603947 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.016609907 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016619921 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.016756058 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016787052 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016813040 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.016819000 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.016869068 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.017510891 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.017540932 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.017601967 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.017604113 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.017604113 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.017613888 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.017646074 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.017698050 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.017771959 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.018282890 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.018353939 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.018384933 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.018428087 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.018526077 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.018604040 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.018635035 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.018712997 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.019273043 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.019325018 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.019364119 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.019408941 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.019529104 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.019591093 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.019601107 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.019754887 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.020124912 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.020163059 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.020174980 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.020180941 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.020241022 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.020271063 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.020303965 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.020329952 CEST	49739	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.020344973 CEST	443	49739	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.061893940 CEST	49740	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:54.061942101 CEST	443	49740	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:54.062028885 CEST	49740	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:54.062257051 CEST	49740	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:54.062263966 CEST	443	49740	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:54.166959047 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.167002916 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.167229891 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.167443037 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.167457104 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.556791067 CEST	443	49740	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:54.557200909 CEST	49740	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:54.557234049 CEST	443	49740	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:54.557636976 CEST	443	49740	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:54.557971954 CEST	49740	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:54.558056116 CEST	443	49740	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:54.558299065 CEST	49740	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:54.600517988 CEST	443	49740	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:54.641485929 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.641781092 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.641801119 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.642138958 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.642507076 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.642575979 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.642680883 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.642745972 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.642766953 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.679970026 CEST	443	49740	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:54.680059910 CEST	443	49740	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:54.680118084 CEST	49740	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:54.680659056 CEST	49740	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:54.680694103 CEST	443	49740	34.225.136.154	192.168.2.17
Jul 3, 2024 17:34:54.680711031 CEST	49740	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:54.680742979 CEST	49740	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:34:54.733346939 CEST	49745	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:34:54.733376026 CEST	443	49745	44.193.44.29	192.168.2.17
Jul 3, 2024 17:34:54.733479023 CEST	49745	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:34:54.733819008 CEST	49745	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:34:54.733829021 CEST	443	49745	44.193.44.29	192.168.2.17
Jul 3, 2024 17:34:54.851974010 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852035046 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852063894 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852093935 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852102995 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.852113008 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852149963 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852159977 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.852180958 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852205038 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.852220058 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852257013 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.852262974 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852680922 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852709055 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852727890 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.852735043 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.852781057 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.942433119 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.942600012 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.942625999 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.942650080 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.942701101 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.942701101 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.942712069 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.943351984 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.943377018 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.943420887 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.943448067 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.943465948 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.943465948 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.943474054 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.943486929 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.944202900 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.944209099 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.944230080 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.944262028 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.944268942 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.944308043 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.944401026 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.945035934 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.945065975 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.945079088 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.945089102 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.945101976 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:54.945224047 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.987988949 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:54.988003016 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.033158064 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.033200979 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.033227921 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.033229113 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.033243895 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.033288956 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.033318043 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.033338070 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.033338070 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.033348083 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.033391953 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.033421040 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.033430099 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.033437014 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.033476114 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.036626101 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.036672115 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.036698103 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.036711931 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.036721945 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.036758900 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.036768913 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.036770105 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.036777020 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.036798954 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.036808014 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.036839008 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.036881924 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.036881924 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.036883116 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.036892891 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.036925077 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.036978006 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.036978006 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.036983967 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.037058115 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.037168980 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.037204981 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.037209988 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.037264109 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.083966017 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.123707056 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.123756886 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.123785019 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.123800039 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.123811007 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.123845100 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.123858929 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.123863935 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.124085903 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.124172926 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.124180079 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.124243975 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.124345064 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.124425888 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.124440908 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.124499083 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.124558926 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.124614000 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.124932051 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.125013113 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.125017881 CEST	443	49742	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.125082970 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.125082970 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.125169039 CEST	49742	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.127846956 CEST	49746	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.127898932 CEST	443	49746	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.127975941 CEST	49746	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.128211975 CEST	49746	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.128227949 CEST	443	49746	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.424019098 CEST	443	49745	44.193.44.29	192.168.2.17
Jul 3, 2024 17:34:55.424313068 CEST	49745	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:34:55.424335003 CEST	443	49745	44.193.44.29	192.168.2.17
Jul 3, 2024 17:34:55.425443888 CEST	443	49745	44.193.44.29	192.168.2.17
Jul 3, 2024 17:34:55.425543070 CEST	49745	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:34:55.425853968 CEST	49745	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:34:55.425930977 CEST	443	49745	44.193.44.29	192.168.2.17
Jul 3, 2024 17:34:55.426260948 CEST	49745	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:34:55.426271915 CEST	443	49745	44.193.44.29	192.168.2.17
Jul 3, 2024 17:34:55.485949039 CEST	49745	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:34:55.532185078 CEST	443	49745	44.193.44.29	192.168.2.17
Jul 3, 2024 17:34:55.532262087 CEST	443	49745	44.193.44.29	192.168.2.17
Jul 3, 2024 17:34:55.532319069 CEST	49745	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:34:55.532841921 CEST	49745	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:34:55.532860041 CEST	443	49745	44.193.44.29	192.168.2.17
Jul 3, 2024 17:34:55.602241993 CEST	443	49746	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.603960037 CEST	49746	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.603996038 CEST	443	49746	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.604402065 CEST	443	49746	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.604764938 CEST	49746	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.604836941 CEST	443	49746	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.604949951 CEST	49746	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.652503014 CEST	443	49746	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.659482956 CEST	49747	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.659528017 CEST	443	49747	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.659636974 CEST	49747	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.659898043 CEST	49747	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.659909964 CEST	443	49747	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.740788937 CEST	443	49746	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.740870953 CEST	443	49746	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:55.740962029 CEST	49746	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.741458893 CEST	49746	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:55.741487980 CEST	443	49746	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.149480104 CEST	443	49747	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.149816990 CEST	49747	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.149904966 CEST	443	49747	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.151012897 CEST	443	49747	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.151324987 CEST	49747	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.151468039 CEST	49747	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.151484013 CEST	443	49747	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.151510000 CEST	443	49747	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.192977905 CEST	49747	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.353636026 CEST	443	49747	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.353724957 CEST	443	49747	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.353787899 CEST	49747	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.354477882 CEST	49747	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.354504108 CEST	443	49747	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.356890917 CEST	49748	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.356936932 CEST	443	49748	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.357100010 CEST	49748	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.357361078 CEST	49748	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.357374907 CEST	443	49748	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.385205030 CEST	49682	80	192.168.2.17	192.229.211.108
Jul 3, 2024 17:34:56.685990095 CEST	49682	80	192.168.2.17	192.229.211.108
Jul 3, 2024 17:34:56.897125959 CEST	443	49748	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.897418022 CEST	49748	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.897449017 CEST	443	49748	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.897783041 CEST	443	49748	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.898160934 CEST	49748	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.898221016 CEST	443	49748	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:56.898303986 CEST	49748	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:56.944500923 CEST	443	49748	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:57.048294067 CEST	443	49748	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:57.048393011 CEST	443	49748	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:57.048465967 CEST	49748	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:57.049065113 CEST	49748	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:57.049088955 CEST	443	49748	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:57.245969057 CEST	49680	443	192.168.2.17	20.189.173.13
Jul 3, 2024 17:34:57.293970108 CEST	49682	80	192.168.2.17	192.229.211.108
Jul 3, 2024 17:34:57.978971004 CEST	49749	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:57.979012012 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:57.979154110 CEST	49749	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:57.979441881 CEST	49749	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:57.979458094 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.458260059 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.458688974 CEST	49749	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:58.458728075 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.459121943 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.459462881 CEST	49749	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:58.459552050 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.459645033 CEST	49749	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:58.504318953 CEST	49682	80	192.168.2.17	192.229.211.108
Jul 3, 2024 17:34:58.504503012 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.507975101 CEST	49749	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:58.589550972 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.589643002 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.589710951 CEST	49749	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:58.589744091 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.589761972 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.589811087 CEST	49749	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:58.590600967 CEST	49749	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:58.590621948 CEST	443	49749	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.645570993 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:58.645631075 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:58.645755053 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:58.646025896 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:58.646051884 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.115024090 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.115386009 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.115398884 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.115725040 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.116056919 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.116111040 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.116226912 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.116312981 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.116339922 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.116430044 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.116453886 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.359829903 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.359885931 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.359918118 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.359956026 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.359976053 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.360006094 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.360023022 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.360034943 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.360060930 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.360624075 CEST	49750	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.360640049 CEST	443	49750	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.363416910 CEST	49751	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.363452911 CEST	443	49751	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.364599943 CEST	49751	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.364849091 CEST	49751	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.364860058 CEST	443	49751	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.932831049 CEST	443	49751	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.933290005 CEST	49751	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.933324099 CEST	443	49751	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.933665037 CEST	443	49751	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.934159994 CEST	49751	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.934220076 CEST	443	49751	104.17.2.184	192.168.2.17
Jul 3, 2024 17:34:59.934428930 CEST	49751	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:34:59.980506897 CEST	443	49751	104.17.2.184	192.168.2.17
Jul 3, 2024 17:35:00.087764025 CEST	443	49751	104.17.2.184	192.168.2.17
Jul 3, 2024 17:35:00.087848902 CEST	443	49751	104.17.2.184	192.168.2.17
Jul 3, 2024 17:35:00.087903023 CEST	49751	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:35:00.089107037 CEST	49751	443	192.168.2.17	104.17.2.184
Jul 3, 2024 17:35:00.089131117 CEST	443	49751	104.17.2.184	192.168.2.17
Jul 3, 2024 17:35:00.914021969 CEST	49682	80	192.168.2.17	192.229.211.108
Jul 3, 2024 17:35:00.932900906 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:00.932930946 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:00.932991028 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:00.933058023 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:00.933099031 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:00.933156967 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:00.933451891 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:00.933461905 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:00.933607101 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:00.933624029 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:00.935931921 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:00.935955048 CEST	443	49757	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:00.936139107 CEST	49758	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:00.936167955 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:00.936192989 CEST	443	49758	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:00.936248064 CEST	49758	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:00.936456919 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:00.936469078 CEST	443	49757	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:00.936566114 CEST	49758	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:00.936583996 CEST	443	49758	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:01.319546938 CEST	443	49734	142.250.186.100	192.168.2.17
Jul 3, 2024 17:35:01.319634914 CEST	443	49734	142.250.186.100	192.168.2.17
Jul 3, 2024 17:35:01.319916010 CEST	49734	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:35:01.416553020 CEST	443	49758	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:01.416877985 CEST	49758	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:01.416903973 CEST	443	49758	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:01.417964935 CEST	443	49758	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:01.418031931 CEST	49758	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:01.419750929 CEST	49758	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:01.419857979 CEST	443	49758	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:01.472002983 CEST	49758	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:01.472021103 CEST	443	49758	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:01.498089075 CEST	443	49757	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:01.498475075 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:01.498492002 CEST	443	49757	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:01.499602079 CEST	443	49757	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:01.499675035 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:01.499694109 CEST	443	49757	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:01.499751091 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:01.500771046 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:01.500840902 CEST	443	49757	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:01.519994020 CEST	49758	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:01.552047014 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:01.552064896 CEST	443	49757	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:01.600027084 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:01.798557043 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.798872948 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.798892975 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.800008059 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.800184965 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.800199032 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.800551891 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.800621986 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.801290035 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.801363945 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.801821947 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.801903963 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.802136898 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.802145004 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.802252054 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.802325010 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.802567005 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.802573919 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.854978085 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.854984045 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.992677927 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.993010998 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.993046045 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.993098021 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.993125916 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.993242979 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.993283987 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.993294001 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.993333101 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.993519068 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.993757963 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.993794918 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.993813038 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.993846893 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:01.993966103 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:01.994191885 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014287949 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014362097 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014379978 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014403105 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014425993 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014436007 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014437914 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.014456034 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.014458895 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014461994 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014486074 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014488935 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.014516115 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.014532089 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014568090 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014585018 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.014594078 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.014735937 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.062969923 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.062983036 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.084897995 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.084934950 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.084964037 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.084976912 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.084985971 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.085026979 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.085036039 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.085104942 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.085340023 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.085417032 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.085452080 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.085459948 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.085468054 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.085791111 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.086221933 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.086282015 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.086318970 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.086349964 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.086355925 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.086388111 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.088406086 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.088494062 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.088525057 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.088552952 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.088553905 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.088574886 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.088602066 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.088901997 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.088932991 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.088962078 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.088963032 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.088973999 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.089001894 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.089929104 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.089966059 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.089983940 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.089994907 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.090034008 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.090042114 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.091214895 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.091265917 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.091299057 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.091337919 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.091344118 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.091811895 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.094166040 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.116945982 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.117027998 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.117048025 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.117074966 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.117136002 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.117161989 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.117168903 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.117209911 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.117810011 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.118834972 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.118865967 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.118915081 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.118935108 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.118962049 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.118987083 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.158994913 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.159010887 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.177640915 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.177651882 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.177668095 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.177675962 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.177681923 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.177716017 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.177727938 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.177756071 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.177759886 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.177783012 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.182005882 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.182035923 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.182135105 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.182163954 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.182252884 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.182301044 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.182317019 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.182334900 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.182337999 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.182347059 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.182360888 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.182364941 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.182374001 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.182413101 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.185853958 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.185906887 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.185928106 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.185935020 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.185975075 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.208142996 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.208190918 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.208236933 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.208246946 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.208278894 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.208296061 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.211349010 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.211380959 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.211441994 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.211452007 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.211514950 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.252916098 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.252947092 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.253005028 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.253017902 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.253065109 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.253084898 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.255300999 CEST	49734	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:35:02.255321980 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.255325079 CEST	443	49734	142.250.186.100	192.168.2.17
Jul 3, 2024 17:35:02.255347013 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.255429983 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.255441904 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.255489111 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.268517017 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.268568993 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.268614054 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.268624067 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.268672943 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.268691063 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.273185015 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.273230076 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.273277998 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.273287058 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.273313046 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.273329020 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.273705959 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.273724079 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.273796082 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.273802042 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.273842096 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.276840925 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.276870966 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.276912928 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.276928902 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.276942968 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.276958942 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.277015924 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.277024984 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.277069092 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.278985977 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.279031992 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.279088020 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.279094934 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.279140949 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.299088001 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.299138069 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.299170017 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.299180031 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.299216986 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.299905062 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.299947023 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.300000906 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.300008059 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.300030947 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.300051928 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.305226088 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.305257082 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.305322886 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.305329084 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.305351973 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.305366993 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.305408955 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.305423021 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.305428982 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.305428982 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.305448055 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.305473089 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.305501938 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.346278906 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.346317053 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.346394062 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.346426010 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.346455097 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.346472979 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.359061003 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.359083891 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.359170914 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.359200001 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.359266996 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.359560966 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.359579086 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.359622955 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.359628916 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.359668016 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.359685898 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.360450029 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.360512972 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.360584021 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.360595942 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.360642910 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.364587069 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.364604950 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.364682913 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.364687920 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.364900112 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.364929914 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.364944935 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.364994049 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.365000010 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.365041018 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.365041018 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.367275953 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.367336988 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.367372036 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.367403984 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.367419958 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.367438078 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.367448092 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.367480993 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.367494106 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.367523909 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.367523909 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.367558002 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.367579937 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.367607117 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.367798090 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.367824078 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.367885113 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.367899895 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.367969036 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.368155003 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.368174076 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.368235111 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.368244886 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.368273973 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.368319035 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.373862028 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.373893023 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.373970985 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.373996019 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.374013901 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.374631882 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.390085936 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.390125036 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.390204906 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.390239000 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.390258074 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.390295029 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.391695023 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.391721964 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.391793966 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.391817093 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.391907930 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.396610975 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.396634102 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.396714926 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.396748066 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.396806955 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.397001028 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.397017002 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.397083998 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.397099972 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.397150040 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.437788963 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.437822104 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.437906981 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.437936068 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.437982082 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.438138008 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.438164949 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.438241005 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.438271999 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.438417912 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.451271057 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.451296091 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.451376915 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.451394081 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.451662064 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.451688051 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.451752901 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.451759100 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.452106953 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.452224970 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.452275991 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.452317953 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.452323914 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.452357054 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.452377081 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.458213091 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.458234072 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.458307981 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.458317041 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.458364010 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.458750010 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.458765984 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.458833933 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.458841085 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.458904982 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.459160089 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.459201097 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.459238052 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.459273100 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.459286928 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.459398985 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.459613085 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.459640026 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.459708929 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.459717035 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.459764957 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.460108995 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.460129976 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.460200071 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.460206985 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.460253000 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.460541964 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.460560083 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.460628033 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.460635900 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.460690975 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.466588974 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.466619968 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.466686010 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.466698885 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.466861963 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.480868101 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.480914116 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.480972052 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.480977058 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.481031895 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.481443882 CEST	49755	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.481461048 CEST	443	49755	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.486604929 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.486649036 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.486759901 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.486973047 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.486978054 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.489083052 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.489109993 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.489180088 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.489190102 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.489263058 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.489397049 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.489413977 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.489475965 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.489483118 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.489521027 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.530930996 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.530961037 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.531045914 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.531069040 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.531117916 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.551796913 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.551822901 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.551892042 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.551903963 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.551969051 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.551979065 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.551985979 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.551991940 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.552038908 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.552038908 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.552057981 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.552109003 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.552687883 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.552706957 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.552792072 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.552807093 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.552859068 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.553036928 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.553056955 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.553141117 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.553148031 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.553220987 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.559185028 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.559211969 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.559273005 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.559282064 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.559331894 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.581855059 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.581885099 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.581964016 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.581975937 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.582022905 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.582134962 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.582154036 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.582206011 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.582211971 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.582253933 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.582464933 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.582523108 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.582545042 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.582556963 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.582572937 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.582595110 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.582623959 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.582817078 CEST	49756	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:02.582832098 CEST	443	49756	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:02.590712070 CEST	49760	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:02.590738058 CEST	443	49760	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:02.590795994 CEST	49760	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:02.591073036 CEST	49760	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:02.591093063 CEST	443	49760	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:02.657274008 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:02.657320023 CEST	443	49761	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:02.657407045 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:02.657809019 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:02.657825947 CEST	443	49761	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:02.718010902 CEST	49675	443	192.168.2.17	204.79.197.203
Jul 3, 2024 17:35:03.169003010 CEST	443	49760	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:03.169317007 CEST	49760	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:03.169349909 CEST	443	49760	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:03.170449972 CEST	443	49760	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:03.170536041 CEST	49760	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:03.170547009 CEST	443	49760	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:03.170592070 CEST	49760	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:03.170819998 CEST	49760	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:03.170886040 CEST	443	49760	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:03.170988083 CEST	49760	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:03.170996904 CEST	443	49760	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:03.211996078 CEST	49760	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:03.248831987 CEST	443	49761	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:03.249126911 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:03.249167919 CEST	443	49761	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:03.250236988 CEST	443	49761	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:03.250303984 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:03.250607967 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:03.250678062 CEST	443	49761	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:03.250768900 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:03.250781059 CEST	443	49761	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:03.250797987 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:03.259969950 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.260204077 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.260229111 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.261346102 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.261414051 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.261679888 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.261744022 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.261796951 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.268647909 CEST	443	49760	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:03.268879890 CEST	443	49760	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:03.268959999 CEST	49760	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:03.269562006 CEST	49760	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:03.269581079 CEST	443	49760	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:03.271680117 CEST	49762	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.271728992 CEST	443	49762	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.271814108 CEST	49762	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.272180080 CEST	49762	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.272192955 CEST	443	49762	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.281723022 CEST	49763	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:03.281764984 CEST	443	49763	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:03.281861067 CEST	49763	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:03.282071114 CEST	49763	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:03.282085896 CEST	443	49763	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:03.292013884 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:03.292052031 CEST	443	49761	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:03.304508924 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.308013916 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.308038950 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.355999947 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.369235992 CEST	443	49761	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:03.369638920 CEST	443	49761	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:03.369689941 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:03.369729996 CEST	443	49761	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:03.369745970 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:03.369765043 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:03.369780064 CEST	49761	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:03.542670965 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.542748928 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.542789936 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.542804956 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.542819977 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.542831898 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.542877913 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.542881012 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.542887926 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.542938948 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.542953968 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.543000937 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.547538042 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.595979929 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.595994949 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.633359909 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.633394957 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.633415937 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.633428097 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.633477926 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.634819031 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.634829998 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.634855986 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.634865999 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.634885073 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.634892941 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.634900093 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.634919882 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.634972095 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.723946095 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.723963022 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.723999977 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.724014044 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.724041939 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.724049091 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.724112988 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.725444078 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.725461960 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.725534916 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.725542068 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.725589991 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.727256060 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.727272034 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.727338076 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.727345943 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.727389097 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.817662001 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.817692995 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.817763090 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.817783117 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.817826986 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.818480015 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.818495989 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.818567038 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.818573952 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.818613052 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.821892977 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.821908951 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.821993113 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.821997881 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.822046041 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.822259903 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.822274923 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.822326899 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.822333097 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.822359085 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.822374105 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.822530031 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.822546005 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.822604895 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.822613001 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.822650909 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.833587885 CEST	443	49763	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:03.834029913 CEST	49763	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:03.834054947 CEST	443	49763	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:03.835161924 CEST	443	49763	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:03.835258007 CEST	49763	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:03.835272074 CEST	443	49763	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:03.835319996 CEST	49763	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:03.835697889 CEST	49763	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:03.835768938 CEST	443	49763	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:03.835916042 CEST	49763	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:03.835930109 CEST	443	49763	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:03.882000923 CEST	49763	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:03.904268980 CEST	443	49762	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.904803038 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.904839039 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.904894114 CEST	49762	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.904906034 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.904917002 CEST	443	49762	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.904927015 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.904992104 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.905322075 CEST	443	49762	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.905870914 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.905890942 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.905930042 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.905939102 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.905982971 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.906260967 CEST	49762	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.906339884 CEST	443	49762	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.906459093 CEST	49762	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.907229900 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.907254934 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.907282114 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.907315969 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.907324076 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.907344103 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.907362938 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.907386065 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.907869101 CEST	49759	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.907882929 CEST	443	49759	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.928786039 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:03.928817034 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:03.928901911 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:03.929117918 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:03.929136038 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:03.946783066 CEST	49762	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:03.946809053 CEST	443	49762	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:03.967226028 CEST	443	49763	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:03.967339039 CEST	443	49763	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:03.967418909 CEST	49763	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:03.969985962 CEST	49763	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:03.970014095 CEST	443	49763	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:04.316694975 CEST	443	49762	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:04.316767931 CEST	443	49762	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:04.316837072 CEST	49762	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:04.316847086 CEST	443	49762	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:04.316946030 CEST	49762	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:04.318161011 CEST	49762	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:04.318187952 CEST	443	49762	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:04.554156065 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.557245016 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:04.557275057 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.557679892 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.558760881 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:04.558841944 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.558931112 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:04.600533962 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.658879042 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.659075022 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.659128904 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:04.659146070 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.659188032 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.659244061 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:04.659252882 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.667300940 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.667500973 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.667506933 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:04.667517900 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.667867899 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:04.667875051 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.668725967 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:04.668780088 CEST	443	49764	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:04.668852091 CEST	49764	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:04.671921015 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:04.671964884 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:04.672060013 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:04.672276974 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:04.672288895 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.153528929 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.153788090 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.153800011 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.154167891 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.154738903 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.154800892 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.154932976 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.196507931 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.295789957 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.296241045 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.296322107 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.296350002 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.296593904 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.296669006 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.296679974 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.296762943 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.296864033 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.296870947 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.300968885 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.301001072 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.301075935 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.301095009 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.301142931 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.388555050 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.388710022 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.388746977 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.388787985 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.388787031 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.388813019 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.388834953 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.389065981 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.389110088 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.389127970 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.389133930 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.389158964 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.389185905 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.389190912 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.389265060 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.389460087 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.390024900 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.390062094 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.390089035 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.390096903 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.390141964 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.390141964 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.390217066 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.390249014 CEST	49767	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:05.390261889 CEST	443	49767	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:05.719049931 CEST	49682	80	192.168.2.17	192.229.211.108
Jul 3, 2024 17:35:06.855066061 CEST	49680	443	192.168.2.17	20.189.173.13
Jul 3, 2024 17:35:07.159926891 CEST	49770	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.159970045 CEST	443	49770	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.160042048 CEST	49770	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.160258055 CEST	49771	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.160300016 CEST	443	49771	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.160352945 CEST	49771	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.160700083 CEST	49770	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.160711050 CEST	443	49770	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.160924911 CEST	49771	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.160934925 CEST	443	49771	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.172775984 CEST	49772	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:07.172811985 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:07.173000097 CEST	49772	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:07.173309088 CEST	49772	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:07.173322916 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:07.653976917 CEST	443	49770	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.654604912 CEST	49770	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.654644966 CEST	443	49770	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.655030012 CEST	443	49770	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.655395985 CEST	49770	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.655478954 CEST	443	49770	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.661780119 CEST	443	49771	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.662300110 CEST	49771	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.662333965 CEST	443	49771	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.662693977 CEST	443	49771	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.663042068 CEST	49771	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.663106918 CEST	443	49771	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:07.678253889 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:07.678596973 CEST	49772	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:07.678622961 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:07.678922892 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:07.679317951 CEST	49772	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:07.679414988 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:07.679507017 CEST	49772	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:07.701049089 CEST	49770	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.717015028 CEST	49771	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:07.720537901 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.060220003 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.060244083 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.060261965 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.060338974 CEST	49772	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.060364962 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.060379982 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.060420990 CEST	49772	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.061419010 CEST	49772	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.061434031 CEST	443	49772	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.140319109 CEST	49774	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.140364885 CEST	443	49774	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.140796900 CEST	49774	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.141027927 CEST	49774	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.141041994 CEST	443	49774	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.237458944 CEST	443	49691	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:08.237622976 CEST	443	49691	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:08.237736940 CEST	49691	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:08.652985096 CEST	443	49774	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.653290987 CEST	49774	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.653302908 CEST	443	49774	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.653676987 CEST	443	49774	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.653981924 CEST	49774	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.654040098 CEST	443	49774	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.654159069 CEST	49774	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.696506977 CEST	443	49774	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.869893074 CEST	49775	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:08.869929075 CEST	443	49775	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:08.870028019 CEST	49775	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:08.870275021 CEST	49775	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:08.870296001 CEST	443	49775	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:08.871072054 CEST	443	49774	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.871154070 CEST	443	49774	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.871228933 CEST	49774	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.871637106 CEST	49774	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.871653080 CEST	443	49774	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:08.871664047 CEST	49774	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.871706009 CEST	49774	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:08.993747950 CEST	49776	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:08.993804932 CEST	443	49776	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:08.993895054 CEST	49776	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:08.994144917 CEST	49776	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:08.994160891 CEST	443	49776	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:10.409315109 CEST	443	49775	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:10.410454035 CEST	443	49776	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:10.410823107 CEST	49775	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:10.410854101 CEST	443	49775	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:10.410904884 CEST	49776	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:10.410914898 CEST	443	49776	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:10.411273003 CEST	443	49775	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:10.412444115 CEST	443	49776	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:10.412938118 CEST	49775	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:10.412997961 CEST	443	49775	146.75.118.109	192.168.2.17
Jul 3, 2024 17:35:10.413207054 CEST	49776	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:10.413270950 CEST	443	49776	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:10.413625002 CEST	49776	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:10.413655043 CEST	49776	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:10.413660049 CEST	443	49776	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:10.467175961 CEST	49775	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:10.536048889 CEST	443	49776	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:10.536133051 CEST	443	49776	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:10.536514997 CEST	49776	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:10.536540031 CEST	443	49776	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:10.536555052 CEST	49776	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:10.536602974 CEST	49776	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:11.345552921 CEST	49697	80	192.168.2.17	95.101.54.200
Jul 3, 2024 17:35:11.350991011 CEST	80	49697	95.101.54.200	192.168.2.17
Jul 3, 2024 17:35:11.351103067 CEST	49697	80	192.168.2.17	95.101.54.200
Jul 3, 2024 17:35:11.438204050 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:11.438260078 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:11.438374043 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:11.438769102 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:11.438781977 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.091403008 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.091492891 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:12.092897892 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:12.092909098 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.093162060 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.094466925 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:12.136507034 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.388725042 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.388750076 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.388792038 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.388844967 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:12.388863087 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.388871908 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.388885021 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.388897896 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:12.388941050 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:12.388967991 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:12.391794920 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:12.391835928 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:12.391854048 CEST	49778	443	192.168.2.17	52.165.165.26
Jul 3, 2024 17:35:12.391865969 CEST	443	49778	52.165.165.26	192.168.2.17
Jul 3, 2024 17:35:15.325182915 CEST	49682	80	192.168.2.17	192.229.211.108
Jul 3, 2024 17:35:31.188622952 CEST	49779	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:31.188662052 CEST	443	49779	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:31.188734055 CEST	49779	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:31.189218044 CEST	49779	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:31.189229965 CEST	443	49779	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:31.371318102 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:31.371329069 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:31.371409893 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:31.371630907 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:31.371639013 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:31.705760002 CEST	443	49779	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:31.706175089 CEST	49779	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:31.706190109 CEST	443	49779	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:31.706571102 CEST	443	49779	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:31.706892967 CEST	49779	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:31.707022905 CEST	443	49779	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:31.707046986 CEST	49779	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:31.748502970 CEST	443	49779	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:31.757213116 CEST	49779	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:31.930768013 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:31.931075096 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:31.931104898 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:31.932199001 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:31.932277918 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:31.932288885 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:31.932339907 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:31.932555914 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:31.932614088 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:31.932718039 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:31.932724953 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:31.978245020 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:32.066905022 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:32.066978931 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:32.067047119 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:32.067044973 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:32.067070961 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:32.067111015 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:32.067293882 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:32.067848921 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:32.067900896 CEST	443	49781	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:32.067967892 CEST	49781	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:32.071047068 CEST	49782	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:32.071086884 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:32.071154118 CEST	49782	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:32.071381092 CEST	49782	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:32.071392059 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:32.081221104 CEST	443	49779	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:32.081357002 CEST	443	49779	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:32.081418037 CEST	49779	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:32.081881046 CEST	49779	443	192.168.2.17	34.225.136.154
Jul 3, 2024 17:35:32.081895113 CEST	443	49779	34.225.136.154	192.168.2.17
Jul 3, 2024 17:35:32.106914997 CEST	49783	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:35:32.106944084 CEST	443	49783	44.193.44.29	192.168.2.17
Jul 3, 2024 17:35:32.107033014 CEST	49783	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:35:32.107785940 CEST	49783	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:35:32.107800961 CEST	443	49783	44.193.44.29	192.168.2.17
Jul 3, 2024 17:35:32.466487885 CEST	49784	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:32.466538906 CEST	443	49784	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:32.466619968 CEST	49784	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:32.466877937 CEST	49784	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:32.466892004 CEST	443	49784	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:32.561353922 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:32.561773062 CEST	49782	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:32.561799049 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:32.562361002 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:32.562752962 CEST	49782	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:32.562824011 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:32.562920094 CEST	49782	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:32.602386951 CEST	443	49783	44.193.44.29	192.168.2.17
Jul 3, 2024 17:35:32.602724075 CEST	49783	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:35:32.602735043 CEST	443	49783	44.193.44.29	192.168.2.17
Jul 3, 2024 17:35:32.603111029 CEST	443	49783	44.193.44.29	192.168.2.17
Jul 3, 2024 17:35:32.603456974 CEST	49783	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:35:32.603528023 CEST	443	49783	44.193.44.29	192.168.2.17
Jul 3, 2024 17:35:32.603642941 CEST	49783	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:35:32.608501911 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:32.644505978 CEST	443	49783	44.193.44.29	192.168.2.17
Jul 3, 2024 17:35:32.842000008 CEST	443	49783	44.193.44.29	192.168.2.17
Jul 3, 2024 17:35:32.842133999 CEST	443	49783	44.193.44.29	192.168.2.17
Jul 3, 2024 17:35:32.842227936 CEST	49783	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:35:32.843204975 CEST	49783	443	192.168.2.17	44.193.44.29
Jul 3, 2024 17:35:32.843220949 CEST	443	49783	44.193.44.29	192.168.2.17
Jul 3, 2024 17:35:32.951997995 CEST	443	49784	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:32.953542948 CEST	49784	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:32.953569889 CEST	443	49784	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:32.953937054 CEST	443	49784	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:32.954397917 CEST	49784	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:32.954476118 CEST	443	49784	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:32.954541922 CEST	49784	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:32.954570055 CEST	49784	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:32.954581976 CEST	443	49784	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:33.079308033 CEST	443	49784	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:33.079755068 CEST	49784	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:33.079807043 CEST	443	49784	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:33.079866886 CEST	49784	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:33.548422098 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:33.548532009 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:33.548568010 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:33.548598051 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:33.548631907 CEST	49782	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:33.548659086 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:33.548682928 CEST	49782	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:33.548821926 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:33.548866034 CEST	49782	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:33.548871994 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:33.548885107 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:33.548943043 CEST	49782	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:33.549597979 CEST	49782	443	192.168.2.17	151.101.64.217
Jul 3, 2024 17:35:33.549611092 CEST	443	49782	151.101.64.217	192.168.2.17
Jul 3, 2024 17:35:46.487315893 CEST	49758	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:35:46.487335920 CEST	443	49758	34.120.202.204	192.168.2.17
Jul 3, 2024 17:35:46.567306042 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:35:46.567327976 CEST	443	49757	151.101.192.217	192.168.2.17
Jul 3, 2024 17:35:48.529156923 CEST	49691	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:50.807310104 CEST	49788	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:35:50.807352066 CEST	443	49788	142.250.186.100	192.168.2.17
Jul 3, 2024 17:35:50.807430983 CEST	49788	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:35:50.807641983 CEST	49788	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:35:50.807653904 CEST	443	49788	142.250.186.100	192.168.2.17
Jul 3, 2024 17:35:51.472743034 CEST	443	49788	142.250.186.100	192.168.2.17
Jul 3, 2024 17:35:51.473105907 CEST	49788	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:35:51.473134995 CEST	443	49788	142.250.186.100	192.168.2.17
Jul 3, 2024 17:35:51.473483086 CEST	443	49788	142.250.186.100	192.168.2.17
Jul 3, 2024 17:35:51.473788977 CEST	49788	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:35:51.473849058 CEST	443	49788	142.250.186.100	192.168.2.17
Jul 3, 2024 17:35:51.526324034 CEST	49788	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:35:52.659259081 CEST	49770	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:52.659285069 CEST	443	49770	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:52.675438881 CEST	49771	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:35:52.675450087 CEST	443	49771	18.208.118.114	192.168.2.17
Jul 3, 2024 17:35:55.422286987 CEST	49775	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:35:55.422312975 CEST	443	49775	146.75.118.109	192.168.2.17
Jul 3, 2024 17:36:01.381649971 CEST	443	49788	142.250.186.100	192.168.2.17
Jul 3, 2024 17:36:01.381725073 CEST	443	49788	142.250.186.100	192.168.2.17
Jul 3, 2024 17:36:01.381891966 CEST	49788	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:36:02.256666899 CEST	49758	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:36:02.256772041 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:36:02.256788969 CEST	443	49758	34.120.202.204	192.168.2.17
Jul 3, 2024 17:36:02.256809950 CEST	49788	443	192.168.2.17	142.250.186.100
Jul 3, 2024 17:36:02.256845951 CEST	443	49788	142.250.186.100	192.168.2.17
Jul 3, 2024 17:36:02.256859064 CEST	443	49757	151.101.192.217	192.168.2.17
Jul 3, 2024 17:36:02.256920099 CEST	49758	443	192.168.2.17	34.120.202.204
Jul 3, 2024 17:36:02.257038116 CEST	49757	443	192.168.2.17	151.101.192.217
Jul 3, 2024 17:36:07.563961029 CEST	443	49770	18.208.118.114	192.168.2.17
Jul 3, 2024 17:36:07.564048052 CEST	443	49770	18.208.118.114	192.168.2.17
Jul 3, 2024 17:36:07.564178944 CEST	49770	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:36:07.569838047 CEST	443	49771	18.208.118.114	192.168.2.17
Jul 3, 2024 17:36:07.569921017 CEST	443	49771	18.208.118.114	192.168.2.17
Jul 3, 2024 17:36:07.569988012 CEST	49771	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:36:08.262042046 CEST	49770	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:36:08.262072086 CEST	443	49770	18.208.118.114	192.168.2.17
Jul 3, 2024 17:36:08.262101889 CEST	49771	443	192.168.2.17	18.208.118.114
Jul 3, 2024 17:36:08.262120008 CEST	443	49771	18.208.118.114	192.168.2.17
Jul 3, 2024 17:36:12.259103060 CEST	49775	443	192.168.2.17	146.75.118.109
Jul 3, 2024 17:36:12.259228945 CEST	443	49775	146.75.118.109	192.168.2.17
Jul 3, 2024 17:36:12.259412050 CEST	49775	443	192.168.2.17	146.75.118.109

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 3, 2024 17:34:45.965627909 CEST	53	49868	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:45.965821981 CEST	54641	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:45.965960026 CEST	61945	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:45.978677988 CEST	53	54641	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:46.019764900 CEST	53	61945	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:46.084656954 CEST	53	54651	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:47.048764944 CEST	59750	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:47.049123049 CEST	58655	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:47.057521105 CEST	53	58655	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:47.079283953 CEST	53	59750	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:47.084753036 CEST	53	63300	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:48.586194038 CEST	52378	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:48.586323977 CEST	55090	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:49.340701103 CEST	59684	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:49.340922117 CEST	50167	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:49.350871086 CEST	53	50167	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:49.351066113 CEST	53	59684	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:49.486675024 CEST	53	53084	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:50.751082897 CEST	61550	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:50.751240015 CEST	53174	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:50.760596037 CEST	53	53174	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:50.760615110 CEST	53	61550	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:52.079868078 CEST	58946	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:52.080018997 CEST	59467	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:52.086970091 CEST	53	58946	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:52.087236881 CEST	53	59467	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:54.684586048 CEST	59866	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:54.684860945 CEST	58209	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:34:54.722636938 CEST	53	59866	1.1.1.1	192.168.2.17
Jul 3, 2024 17:34:54.865092039 CEST	53	58209	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:00.106280088 CEST	53195	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:00.106462955 CEST	63186	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:00.922904968 CEST	50049	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:00.923233986 CEST	63491	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:00.923486948 CEST	51019	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:00.923819065 CEST	58962	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:00.924031973 CEST	52672	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:00.924209118 CEST	56164	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:00.930072069 CEST	53	50049	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:00.931036949 CEST	53	52672	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:00.932341099 CEST	53	51019	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:00.932354927 CEST	53	56164	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:00.935255051 CEST	53	58962	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:00.935709953 CEST	53	63491	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:03.272543907 CEST	60897	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:03.272707939 CEST	52264	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:03.280939102 CEST	53	60897	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:03.281138897 CEST	53	52264	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:03.938860893 CEST	53	64894	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:04.317092896 CEST	53	65415	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:04.322072029 CEST	62225	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:04.322293997 CEST	65527	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:04.329062939 CEST	53	62225	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:04.330806971 CEST	53	65527	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:22.877959967 CEST	53	49829	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:24.302500963 CEST	53	59972	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:31.335680008 CEST	57119	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:31.335813999 CEST	64129	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:32.465156078 CEST	56066	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:32.465332031 CEST	49795	53	192.168.2.17	1.1.1.1
Jul 3, 2024 17:35:35.034343958 CEST	53	53369	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:45.150636911 CEST	138	138	192.168.2.17	192.168.2.255
Jul 3, 2024 17:35:45.344769001 CEST	53	60328	1.1.1.1	192.168.2.17
Jul 3, 2024 17:35:45.972934008 CEST	53	52583	1.1.1.1	192.168.2.17
Jul 3, 2024 17:36:14.525515079 CEST	53	60264	1.1.1.1	192.168.2.17

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 3, 2024 17:34:46.019839048 CEST	192.168.2.17	1.1.1.1	c248	(Port unreachable)	Destination Unreachable
Jul 3, 2024 17:34:54.865165949 CEST	192.168.2.17	1.1.1.1	c260	(Port unreachable)	Destination Unreachable
Jul 3, 2024 17:35:00.935782909 CEST	192.168.2.17	1.1.1.1	c245	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 17:34:45.965821981 CEST	192.168.2.17	1.1.1.1	0xcc0e	Standard query (0)	service-noreply.info	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:45.965960026 CEST	192.168.2.17	1.1.1.1	0x1ef2	Standard query (0)	service-noreply.info	65	IN (0x0001)	false
Jul 3, 2024 17:34:47.048764944 CEST	192.168.2.17	1.1.1.1	0x1fa2	Standard query (0)	certified-domain.cloudsurveillance.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:47.049123049 CEST	192.168.2.17	1.1.1.1	0xe1dd	Standard query (0)	certified-domain.cloudsurveillance.net	65	IN (0x0001)	false
Jul 3, 2024 17:34:48.586194038 CEST	192.168.2.17	1.1.1.1	0x33e1	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:48.586323977 CEST	192.168.2.17	1.1.1.1	0xfa0	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Jul 3, 2024 17:34:49.340701103 CEST	192.168.2.17	1.1.1.1	0x791a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:49.340922117 CEST	192.168.2.17	1.1.1.1	0xf866	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jul 3, 2024 17:34:50.751082897 CEST	192.168.2.17	1.1.1.1	0x1954	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:50.751240015 CEST	192.168.2.17	1.1.1.1	0x803b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 17:34:52.079868078 CEST	192.168.2.17	1.1.1.1	0x5eee	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:52.080018997 CEST	192.168.2.17	1.1.1.1	0xdaaa	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jul 3, 2024 17:34:54.684586048 CEST	192.168.2.17	1.1.1.1	0x3b95	Standard query (0)	certified-domain.cloudsurveillance.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:54.684860945 CEST	192.168.2.17	1.1.1.1	0xcc4a	Standard query (0)	certified-domain.cloudsurveillance.net	65	IN (0x0001)	false
Jul 3, 2024 17:35:00.106280088 CEST	192.168.2.17	1.1.1.1	0xdc92	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:00.106462955 CEST	192.168.2.17	1.1.1.1	0xedda	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Jul 3, 2024 17:35:00.922904968 CEST	192.168.2.17	1.1.1.1	0x2160	Standard query (0)	fresnel.vimeocdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:00.923233986 CEST	192.168.2.17	1.1.1.1	0xc372	Standard query (0)	fresnel.vimeocdn.com	65	IN (0x0001)	false
Jul 3, 2024 17:35:00.923486948 CEST	192.168.2.17	1.1.1.1	0xd6db	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:00.923819065 CEST	192.168.2.17	1.1.1.1	0x2e4d	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Jul 3, 2024 17:35:00.924031973 CEST	192.168.2.17	1.1.1.1	0x9c3f	Standard query (0)	f.vimeocdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:00.924209118 CEST	192.168.2.17	1.1.1.1	0xd9c6	Standard query (0)	f.vimeocdn.com	65	IN (0x0001)	false
Jul 3, 2024 17:35:03.272543907 CEST	192.168.2.17	1.1.1.1	0xfd50	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:03.272707939 CEST	192.168.2.17	1.1.1.1	0x30d4	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Jul 3, 2024 17:35:04.322072029 CEST	192.168.2.17	1.1.1.1	0xab51	Standard query (0)	vimeo.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:04.322293997 CEST	192.168.2.17	1.1.1.1	0x9b95	Standard query (0)	vimeo.com	65	IN (0x0001)	false
Jul 3, 2024 17:35:31.335680008 CEST	192.168.2.17	1.1.1.1	0xc6b4	Standard query (0)	vod-adaptive-ak.vimeocdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:31.335813999 CEST	192.168.2.17	1.1.1.1	0x3331	Standard query (0)	vod-adaptive-ak.vimeocdn.com	65	IN (0x0001)	false
Jul 3, 2024 17:35:32.465156078 CEST	192.168.2.17	1.1.1.1	0x1059	Standard query (0)	vod-adaptive-ak.vimeocdn.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:32.465332031 CEST	192.168.2.17	1.1.1.1	0x92bc	Standard query (0)	vod-adaptive-ak.vimeocdn.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 17:34:45.978677988 CEST	1.1.1.1	192.168.2.17	0xcc0e	No error (0)	service-noreply.info		18.208.118.114	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:45.978677988 CEST	1.1.1.1	192.168.2.17	0xcc0e	No error (0)	service-noreply.info		44.193.44.29	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:45.978677988 CEST	1.1.1.1	192.168.2.17	0xcc0e	No error (0)	service-noreply.info		34.225.136.154	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:47.079283953 CEST	1.1.1.1	192.168.2.17	0x1fa2	No error (0)	certified-domain.cloudsurveillance.net		34.225.136.154	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:47.079283953 CEST	1.1.1.1	192.168.2.17	0x1fa2	No error (0)	certified-domain.cloudsurveillance.net		18.208.118.114	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:47.079283953 CEST	1.1.1.1	192.168.2.17	0x1fa2	No error (0)	certified-domain.cloudsurveillance.net		44.193.44.29	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:48.593297958 CEST	1.1.1.1	192.168.2.17	0xfa0	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:34:48.593436956 CEST	1.1.1.1	192.168.2.17	0x33e1	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:34:49.350871086 CEST	1.1.1.1	192.168.2.17	0xf866	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jul 3, 2024 17:34:49.351066113 CEST	1.1.1.1	192.168.2.17	0x791a	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:49.351066113 CEST	1.1.1.1	192.168.2.17	0x791a	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:50.760596037 CEST	1.1.1.1	192.168.2.17	0x803b	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 17:34:50.760615110 CEST	1.1.1.1	192.168.2.17	0x1954	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:52.086970091 CEST	1.1.1.1	192.168.2.17	0x5eee	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:52.086970091 CEST	1.1.1.1	192.168.2.17	0x5eee	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:52.087236881 CEST	1.1.1.1	192.168.2.17	0xdaaa	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jul 3, 2024 17:34:54.722636938 CEST	1.1.1.1	192.168.2.17	0x3b95	No error (0)	certified-domain.cloudsurveillance.net		44.193.44.29	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:54.722636938 CEST	1.1.1.1	192.168.2.17	0x3b95	No error (0)	certified-domain.cloudsurveillance.net		34.225.136.154	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:34:54.722636938 CEST	1.1.1.1	192.168.2.17	0x3b95	No error (0)	certified-domain.cloudsurveillance.net		18.208.118.114	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:00.113667011 CEST	1.1.1.1	192.168.2.17	0xdc92	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:35:00.115910053 CEST	1.1.1.1	192.168.2.17	0xedda	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:35:00.930072069 CEST	1.1.1.1	192.168.2.17	0x2160	No error (0)	fresnel.vimeocdn.com		34.120.202.204	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:00.931036949 CEST	1.1.1.1	192.168.2.17	0x9c3f	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:35:00.931036949 CEST	1.1.1.1	192.168.2.17	0x9c3f	No error (0)	vimeo-video.map.fastly.net		146.75.118.109	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:00.932341099 CEST	1.1.1.1	192.168.2.17	0xd6db	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:35:00.932341099 CEST	1.1.1.1	192.168.2.17	0xd6db	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:00.932341099 CEST	1.1.1.1	192.168.2.17	0xd6db	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:00.932341099 CEST	1.1.1.1	192.168.2.17	0xd6db	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:00.932341099 CEST	1.1.1.1	192.168.2.17	0xd6db	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:00.932354927 CEST	1.1.1.1	192.168.2.17	0xd9c6	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:35:00.935255051 CEST	1.1.1.1	192.168.2.17	0x2e4d	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:35:03.280939102 CEST	1.1.1.1	192.168.2.17	0xfd50	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:35:03.280939102 CEST	1.1.1.1	192.168.2.17	0xfd50	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:03.280939102 CEST	1.1.1.1	192.168.2.17	0xfd50	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:03.280939102 CEST	1.1.1.1	192.168.2.17	0xfd50	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:03.280939102 CEST	1.1.1.1	192.168.2.17	0xfd50	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:03.281138897 CEST	1.1.1.1	192.168.2.17	0x30d4	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:35:04.329062939 CEST	1.1.1.1	192.168.2.17	0xab51	No error (0)	vimeo.com		162.159.138.60	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:04.329062939 CEST	1.1.1.1	192.168.2.17	0xab51	No error (0)	vimeo.com		162.159.128.61	A (IP address)	IN (0x0001)	false
Jul 3, 2024 17:35:31.342911959 CEST	1.1.1.1	192.168.2.17	0x3331	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:35:31.345256090 CEST	1.1.1.1	192.168.2.17	0xc6b4	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:35:32.472328901 CEST	1.1.1.1	192.168.2.17	0x92bc	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 17:35:32.473819017 CEST	1.1.1.1	192.168.2.17	0x1059	No error (0)	vod-adaptive-ak.vimeocdn.com	vod-adaptive.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

slscr.update.microsoft.com

service-noreply.info

certified-domain.cloudsurveillance.net

fs.microsoft.com

evoke-windowsservices-tas.msedge.net

https:

challenges.cloudflare.com

f.vimeocdn.com

i.vimeocdn.com

fresnel.vimeocdn.com

www.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49703	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:34 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SbBg58W+xeamAoo&MD=W21fK6dr HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-03 15:34:34 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d4908e75-c9ea-4a64-9b8e-0064a22ff887 MS-RequestId: c02667d7-4f13-4cc0-ab33-2415cef7cdc8 MS-CV: trQai0SQiECWrJ8Q.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 03 Jul 2024 15:34:34 GMT Connection: close Content-Length: 24490
2024-07-03 15:34:34 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-07-03 15:34:34 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.17	49707	40.126.32.136	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:38 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4722 Host: login.live.com
2024-07-03 15:34:38 UTC	4722	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-07-03 15:34:38 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 03 Jul 2024 15:33:38 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: bfcd819d-ddbe-40f1-97e7-5a615b55c701 PPServer: PPV: 30 H: PH1PEPF00011E5C V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 03 Jul 2024 15:34:38 GMT Connection: close Content-Length: 10197
2024-07-03 15:34:38 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49713	18.208.118.114	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:46 UTC	703	OUT	GET /c361b6b574eaf9adb2fe8b6265ab571605542f7f HTTP/1.1 Host: service-noreply.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:47 UTC	960	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 03 Jul 2024 15:34:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Location: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik5OTWFEbFExTDhrNlVLMWtPcFFydXc9PSIsInZhbHVlIjoibVpyem13TDBTanRwWXJlc2w0WEs4Wms0UEdXNzNWUmkwbUJGNnhrTmZxWG5OcktVUytraGhSU3FMRXBlcHl4VVo3WldVcXBPWllhU3N2MFJMZncrTWpxemU0NHRlT2pBd1gyQlFxdXQ1RHdzWDJ0Ymg5SUFlY0Zrb3VVV1A4OUYiLCJtYWMiOiJiYWIwMDU3YjExYmFjOGMwYmQxOGEyYjY1MjMyODFlMmI1NjJkOWQ4YTNjM2ViNGQ4Y2ZjZWMxYzIyZmI4MTRhIiwidGFnIjoiIn0%3D; expires=Wed, 03 Jul 2024 17:34:46 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: bpid_lp_session=IjLKziHSWOvmODEc74jSUj4KhjL3q5qgZWXEWTGK; expires=Wed, 03 Jul 2024 17:34:46 GMT; Max-Age=7200; path=/; httponly; samesite=lax X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-07-03 15:34:47 UTC	585	IN	Data Raw: 32 34 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 63 65 72 74 69 66 69 65 64 2d 64 6f 6d 61 69 6e 2e 63 6c 6f 75 64 73 75 72 76 65 69 6c 6c 61 6e 63 65 2e 6e 65 74 2f 39 65 65 61 61 35 39 62 2d 39 30 39 62 2d 34 34 64 61 2d 38 39 65 62 2d 66 64 30 64 39 32 39 64 30 30 38 63 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 63 65 72 74 Data Ascii: 242<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c'" /> <title>Redirecting to https://cert
2024-07-03 15:34:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49716	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 15:34:47 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=88457 Date: Wed, 03 Jul 2024 15:34:47 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49718	34.225.136.154	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:47 UTC	717	OUT	GET /9eeaa59b-909b-44da-89eb-fd0d929d008c HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:48 UTC	884	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IlpsWElxcGhidHNxWTVmRUFrRFlIZFE9PSIsInZhbHVlIjoiS0pkQVJIMmpRT0RBS3FML1JGRytZZ3ZVR0RxaFV6QWpPcTZQWUptVTRqUC9sK2dzVGVwaVp3aS9YYnRRUkNobjF4MW5mVFVkR0ZCemE4NHFYU2k0cFhyeDZ3WklLQWZNQTJ6THNwNVpSV1o5QldKbW1HbDJwTFRReEVZRXZmdDQiLCJtYWMiOiJhNjdlMGEyNzMxMGZiMzU1ZTE5ZDIyNmFjODQ2YWE4YmNlNGU0NGMwMjU5NDYyNmU1ZTBjNmZhZGI5ZTFjNjFhIiwidGFnIjoiIn0%3D; expires=Wed, 03 Jul 2024 17:34:48 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; expires=Wed, 03 Jul 2024 17:34:48 GMT; Max-Age=7200; path=/; httponly; samesite=lax X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-07-03 15:34:48 UTC	7482	IN	Data Raw: 31 64 33 32 0d 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 09 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 2a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 Data Ascii: 1d32<html><head><title></title><meta name="viewport" content="width=device-width, initial-scale=1" /><style type="text/css">* { box-sizing: border-box; } body, html { height: 10
2024-07-03 15:34:48 UTC	5973	IN	Data Raw: 31 37 34 64 0d 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 174d<div style=" width: 100%; max-width: 600px; display: block; margin-left: auto; margin-right: auto;
2024-07-03 15:34:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49719	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:47 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 15:34:48 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=88466 Date: Wed, 03 Jul 2024 15:34:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-03 15:34:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.17	49720	40.126.32.136	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:48 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4788 Host: login.live.com
2024-07-03 15:34:48 UTC	4788	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-07-03 15:34:48 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 03 Jul 2024 15:33:48 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: 37376e25-817e-4bbd-b7ad-575b6cb8bbe1 PPServer: PPV: 30 H: PH1PEPF00011E54 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 03 Jul 2024 15:34:47 GMT Connection: close Content-Length: 11153
2024-07-03 15:34:48 UTC	11153	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.17	49721	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:48 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-07-03 15:34:48 UTC	209	IN	HTTP/1.1 400 Bad Request X-MSEdge-Ref: Ref A: 3A1FBD70CC2446899A8577859E45AD1F Ref B: EWR311000108021 Ref C: 2024-07-03T15:34:48Z Date: Wed, 03 Jul 2024 15:34:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49727	34.225.136.154	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:49 UTC	1049	OUT	GET /js/external/jquery-3.3.1.min.js HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlpsWElxcGhidHNxWTVmRUFrRFlIZFE9PSIsInZhbHVlIjoiS0pkQVJIMmpRT0RBS3FML1JGRytZZ3ZVR0RxaFV6QWpPcTZQWUptVTRqUC9sK2dzVGVwaVp3aS9YYnRRUkNobjF4MW5mVFVkR0ZCemE4NHFYU2k0cFhyeDZ3WklLQWZNQTJ6THNwNVpSV1o5QldKbW1HbDJwTFRReEVZRXZmdDQiLCJtYWMiOiJhNjdlMGEyNzMxMGZiMzU1ZTE5ZDIyNmFjODQ2YWE4YmNlNGU0NGMwMjU5NDYyNmU1ZTBjNmZhZGI5ZTFjNjFhIiwidGFnIjoiIn0%3D; bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA
2024-07-03 15:34:49 UTC	353	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:49 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 86881 Connection: close Server: nginx Last-Modified: Thu, 27 Jun 2024 15:44:15 GMT ETag: "667d88cf-15361" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-07-03 15:34:49 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6a 71 75 65 72 79 2d 33 2e 33 2e 31 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 Data Ascii: /! For license information please see jquery-3.3.1.min.js.LICENSE.txt /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a
2024-07-03 15:34:49 UTC	1514	IN	Data Raw: 67 74 68 3b 73 2d 2d 3b 29 28 6f 3d 61 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 21 28 74 5b 73 5d 3d 6f 29 29 7d 29 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 74 5b 30 5d 3d 65 2c 72 28 74 2c 6e 75 6c 6c 2c 6f 2c 6e 29 2c 74 5b 30 5d 3d 6e 75 6c 6c 2c 21 6e 2e 70 6f 70 28 29 7d 7d 29 29 2c 68 61 73 3a 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 65 28 65 2c 74 29 2e 6c 65 6e 67 74 68 3e 30 7d 7d 29 29 2c 63 6f 6e 74 61 69 6e 73 3a 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 2e 72 65 70 6c 61 63 65 28 5a 2c 65 65 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 Data Ascii: gth;s--;)(o=a[s])&&(e[s]=!(t[s]=o))})):function(e,i,o){return t[0]=e,r(t,null,o,n),t[0]=null,!n.pop()}})),has:se((function(e){return function(t){return oe(e,t).length>0}})),contains:se((function(e){return e=e.replace(Z,ee),function(t){return(t.textContent
2024-07-03 15:34:49 UTC	16384	IN	Data Raw: 2c 66 69 72 73 74 3a 68 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 30 5d 7d 29 29 2c 6c 61 73 74 3a 68 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 74 2d 31 5d 7d 29 29 2c 65 71 3a 68 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 5b 6e 3c 30 3f 6e 2b 74 3a 6e 5d 7d 29 29 2c 65 76 65 6e 3a 68 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 29 2c 6f 64 64 3a 68 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 29 2c 6c 74 3a 68 65 28 28 Data Ascii: ,first:he((function(){return[0]})),last:he((function(e,t){return[t-1]})),eq:he((function(e,t,n){return[n<0?n+t:n]})),even:he((function(e,t){for(var n=0;n<t;n+=2)e.push(n);return e})),odd:he((function(e,t){for(var n=1;n<t;n+=2)e.push(n);return e})),lt:he((
2024-07-03 15:34:49 UTC	16384	IN	Data Raw: 61 72 20 72 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 3d 28 74 7c 7c 22 66 78 22 29 2b 22 71 75 65 75 65 22 2c 72 3d 59 2e 67 65 74 28 65 2c 74 29 2c 6e 26 26 28 21 72 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 72 3d 59 2e 61 63 63 65 73 73 28 65 2c 74 2c 62 2e 6d 61 6b 65 41 72 72 61 79 28 6e 29 29 3a 72 2e 70 75 73 68 28 6e 29 29 2c 72 7c 7c 5b 5d 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 22 66 78 22 3b 76 61 72 20 6e 3d 62 2e 71 75 65 75 65 28 65 2c 74 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 2c 69 3d 6e 2e 73 68 69 66 74 28 29 2c 6f 3d 62 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 65 2c 74 29 3b 22 69 6e 70 72 6f 67 72 65 73 73 22 3d 3d 3d 69 26 26 28 69 3d 6e 2e 73 68 69 66 74 28 29 2c 72 2d 2d 29 2c Data Ascii: ar r;if(e)return t=(t\|\|"fx")+"queue",r=Y.get(e,t),n&&(!r\|\|Array.isArray(n)?r=Y.access(e,t,b.makeArray(n)):r.push(n)),r\|\|[]},dequeue:function(e,t){t=t\|\|"fx";var n=b.queue(e,t),r=n.length,i=n.shift(),o=b._queueHooks(e,t);"inprogress"===i&&(i=n.shift(),r--),
2024-07-03 15:34:49 UTC	16384	IN	Data Raw: 6f 6e 20 24 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 28 29 29 72 65 74 75 72 6e 28 74 68 69 73 2e 67 65 74 3d 74 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 64 65 6c 65 74 65 20 74 68 69 73 2e 67 65 74 7d 7d 7d 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 63 29 7b 6c 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 31 31 31 31 31 70 78 3b 77 69 64 74 68 3a 36 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 22 2c 63 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 70 6f 73 69 74 69 6f 6e 3a 72 65 6c Data Ascii: on $e(e,t){return{get:function(){if(!e())return(this.get=t).apply(this,arguments);delete this.get}}}!function(){function t(){if(c){l.style.cssText="position:absolute;left:-11111px;width:60px;margin-top:1px;padding:0;border:0",c.style.cssText="position:rel
2024-07-03 15:34:49 UTC	13491	IN	Data Raw: 29 2e 69 6e 64 65 78 4f 66 28 74 29 3e 2d 31 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 7d 29 3b 76 61 72 20 68 74 3d 2f 5c 72 2f 67 3b 62 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 74 68 69 73 5b 30 5d 3b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 72 3d 67 28 65 29 2c 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3b 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 69 3d 72 3f 65 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 62 28 74 68 69 73 29 2e 76 61 6c 28 29 29 3a 65 29 3f 69 3d 22 22 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 69 3f 69 2b 3d 22 22 3a 41 72 Data Ascii: ).indexOf(t)>-1)return!0;return!1}});var ht=/\r/g;b.fn.extend({val:function(e){var t,n,r,i=this[0];return arguments.length?(r=g(e),this.each((function(n){var i;1===this.nodeType&&(null==(i=r?e.call(this,n,b(this).val()):e)?i="":"number"==typeof i?i+="":Ar
2024-07-03 15:34:49 UTC	2893	IN	Data Raw: 2d 65 63 6d 61 73 63 72 69 70 74 22 7d 2c 63 6f 6e 74 65 6e 74 73 3a 7b 73 63 72 69 70 74 3a 2f 5c 62 28 3f 3a 6a 61 76 61 7c 65 63 6d 61 29 73 63 72 69 70 74 5c 62 2f 7d 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 74 65 78 74 20 73 63 72 69 70 74 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 62 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 65 29 2c 65 7d 7d 7d 29 2c 62 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 22 73 63 72 69 70 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 2e 63 61 63 68 65 26 26 28 65 2e 63 61 63 68 65 3d 21 31 29 2c 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 26 26 28 65 2e 74 79 70 65 3d 22 47 45 54 22 29 7d 29 29 2c 62 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 22 73 63 72 69 70 74 22 2c 28 66 75 Data Ascii: -ecmascript"},contents:{script:/\b(?:java\|ecma)script\b/},converters:{"text script":function(e){return b.globalEval(e),e}}}),b.ajaxPrefilter("script",(function(e){void 0===e.cache&&(e.cache=!1),e.crossDomain&&(e.type="GET")})),b.ajaxTransport("script",(fu
2024-07-03 15:34:49 UTC	3447	IN	Data Raw: 2e 74 6f 70 26 26 28 66 2e 74 6f 70 3d 74 2e 74 6f 70 2d 73 2e 74 6f 70 2b 61 29 2c 6e 75 6c 6c 21 3d 74 2e 6c 65 66 74 26 26 28 66 2e 6c 65 66 74 3d 74 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2b 69 29 2c 22 75 73 69 6e 67 22 69 6e 20 74 3f 74 2e 75 73 69 6e 67 2e 63 61 6c 6c 28 65 2c 66 29 3a 63 2e 63 73 73 28 66 29 7d 7d 2c 62 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 6f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 3f 74 68 69 73 3a 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 2e 6f 66 66 73 65 74 2e 73 65 74 4f 66 66 73 65 74 28 74 68 69 73 2c 65 2c 74 29 7d 29 29 3b 76 61 72 20 74 2c 6e 2c 72 3d 74 68 69 73 5b 30 5d Data Ascii: .top&&(f.top=t.top-s.top+a),null!=t.left&&(f.left=t.left-s.left+i),"using"in t?t.using.call(e,f):c.css(f)}},b.fn.extend({offset:function(e){if(arguments.length)return void 0===e?this:this.each((function(t){b.offset.setOffset(this,e,t)}));var t,n,r=this[0]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49724	34.225.136.154	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:49 UTC	1043	OUT	GET /js/external/popper.min.js HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlpsWElxcGhidHNxWTVmRUFrRFlIZFE9PSIsInZhbHVlIjoiS0pkQVJIMmpRT0RBS3FML1JGRytZZ3ZVR0RxaFV6QWpPcTZQWUptVTRqUC9sK2dzVGVwaVp3aS9YYnRRUkNobjF4MW5mVFVkR0ZCemE4NHFYU2k0cFhyeDZ3WklLQWZNQTJ6THNwNVpSV1o5QldKbW1HbDJwTFRReEVZRXZmdDQiLCJtYWMiOiJhNjdlMGEyNzMxMGZiMzU1ZTE5ZDIyNmFjODQ2YWE4YmNlNGU0NGMwMjU5NDYyNmU1ZTBjNmZhZGI5ZTFjNjFhIiwidGFnIjoiIn0%3D; bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA
2024-07-03 15:34:49 UTC	352	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:49 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 18721 Connection: close Server: nginx Last-Modified: Thu, 27 Jun 2024 15:44:15 GMT ETag: "667d88cf-4921" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-07-03 15:34:49 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 65 2e 50 6f 70 70 65 72 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.Popper=t()}(this,(function(){"use strict";function e(e){return e&&"[object Function]"==={}.toString.call(e)}function t
2024-07-03 15:34:49 UTC	1514	IN	Data Raw: 22 29 29 7d 29 29 2c 65 7d 2c 62 65 68 61 76 69 6f 72 3a 22 66 6c 69 70 22 2c 70 61 64 64 69 6e 67 3a 35 2c 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 3a 22 76 69 65 77 70 6f 72 74 22 7d 2c 69 6e 6e 65 72 3a 7b 6f 72 64 65 72 3a 37 30 30 2c 65 6e 61 62 6c 65 64 3a 21 31 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2c 6e 3d 74 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 2c 72 3d 65 2e 6f 66 66 73 65 74 73 2c 6f 3d 72 2e 70 6f 70 70 65 72 2c 69 3d 72 2e 72 65 66 65 72 65 6e 63 65 2c 66 3d 2d 31 21 3d 3d 5b 22 6c 65 66 74 22 2c 22 72 69 67 68 74 22 5d 2e 69 6e 64 65 78 4f 66 28 6e 29 2c 73 3d 2d 31 3d 3d 3d 5b 22 74 6f 70 22 2c 22 6c 65 66 74 22 5d 2e 69 6e 64 65 78 4f 66 28 6e 29 3b 72 65 74 75 72 Data Ascii: "))})),e},behavior:"flip",padding:5,boundariesElement:"viewport"},inner:{order:700,enabled:!1,fn:function(e){var t=e.placement,n=t.split("-")[0],r=e.offsets,o=r.popper,i=r.reference,f=-1!==["left","right"].indexOf(n),s=-1===["top","left"].indexOf(n);retur
2024-07-03 15:34:49 UTC	823	IN	Data Raw: 6f 72 6d 22 3b 65 6c 73 65 7b 76 61 72 20 76 3d 22 62 6f 74 74 6f 6d 22 3d 3d 68 3f 2d 31 3a 31 2c 62 3d 22 72 69 67 68 74 22 3d 3d 6d 3f 2d 31 3a 31 3b 75 5b 68 5d 3d 61 2a 76 2c 75 5b 6d 5d 3d 73 2a 62 2c 75 2e 77 69 6c 6c 43 68 61 6e 67 65 3d 68 2b 22 2c 20 22 2b 6d 7d 76 61 72 20 77 3d 7b 22 78 2d 70 6c 61 63 65 6d 65 6e 74 22 3a 65 2e 70 6c 61 63 65 6d 65 6e 74 7d 3b 72 65 74 75 72 6e 20 65 2e 61 74 74 72 69 62 75 74 65 73 3d 51 28 7b 7d 2c 77 2c 65 2e 61 74 74 72 69 62 75 74 65 73 29 2c 65 2e 73 74 79 6c 65 73 3d 51 28 7b 7d 2c 75 2c 65 2e 73 74 79 6c 65 73 29 2c 65 2e 61 72 72 6f 77 53 74 79 6c 65 73 3d 51 28 7b 7d 2c 65 2e 6f 66 66 73 65 74 73 2e 61 72 72 6f 77 2c 65 2e 61 72 72 6f 77 53 74 79 6c 65 73 29 2c 65 7d 2c 67 70 75 41 63 63 65 6c 65 72 Data Ascii: orm";else{var v="bottom"==h?-1:1,b="right"==m?-1:1;u[h]=av,u[m]=sb,u.willChange=h+", "+m}var w={"x-placement":e.placement};return e.attributes=Q({},w,e.attributes),e.styles=Q({},u,e.styles),e.arrowStyles=Q({},e.offsets.arrow,e.arrowStyles),e},gpuAcceler

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49725	34.225.136.154	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:49 UTC	1046	OUT	GET /js/external/bootstrap.min.js HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlpsWElxcGhidHNxWTVmRUFrRFlIZFE9PSIsInZhbHVlIjoiS0pkQVJIMmpRT0RBS3FML1JGRytZZ3ZVR0RxaFV6QWpPcTZQWUptVTRqUC9sK2dzVGVwaVp3aS9YYnRRUkNobjF4MW5mVFVkR0ZCemE4NHFYU2k0cFhyeDZ3WklLQWZNQTJ6THNwNVpSV1o5QldKbW1HbDJwTFRReEVZRXZmdDQiLCJtYWMiOiJhNjdlMGEyNzMxMGZiMzU1ZTE5ZDIyNmFjODQ2YWE4YmNlNGU0NGMwMjU5NDYyNmU1ZTBjNmZhZGI5ZTFjNjFhIiwidGFnIjoiIn0%3D; bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA
2024-07-03 15:34:49 UTC	352	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:49 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 47757 Connection: close Server: nginx Last-Modified: Thu, 27 Jun 2024 15:44:15 GMT ETag: "667d88cf-ba8d" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-07-03 15:34:49 UTC	8949	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 65 28 65 78 70 6f 72 74 73 2c 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 2c 72 65 71 75 69 72 65 28 22 70 6f 70 70 65 72 2e 6a 73 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 Data Ascii: /! For license information please see bootstrap.min.js.LICENSE.txt /!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","
2024-07-03 15:34:49 UTC	16384	IN	Data Raw: 73 73 28 66 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 5d 3b 6e 26 26 74 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 66 29 7d 7d 2c 67 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 2c 73 2c 72 2c 6f 3d 74 68 69 73 2c 61 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 64 29 5b 30 5d 2c 6c 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 61 29 2c 63 3d 6e 7c 7c 61 26 26 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 28 65 2c 61 29 2c 67 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 63 29 2c 5f 3d 42 6f 6f 6c 65 61 6e Data Ascii: ss(f);var n=this._indicatorsElement.children[this._getItemIndex(e)];n&&t(n).addClass(f)}},g._slide=function(e,n){var i,s,r,o=this,a=t(this._element).find(d)[0],l=this._getItemIndex(a),c=n\|\|a&&this._getItemByDirection(e,a),g=this._getItemIndex(c),_=Boolean
2024-07-03 15:34:49 UTC	16384	IN	Data Raw: 64 72 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 26 26 28 74 28 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 29 2e 72 65 6d 6f 76 65 28 29 2c 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 3d 6e 75 6c 6c 29 7d 2c 5f 2e 5f 73 68 6f 77 42 61 63 6b 64 72 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 69 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 63 29 3f 63 3a 22 22 3b 69 66 28 74 68 69 73 2e 5f 69 73 53 68 6f 77 6e 26 26 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 62 61 63 6b 64 72 6f 70 29 7b 76 61 72 20 73 3d 49 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 69 3b 69 66 28 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 3d 64 6f 63 75 Data Ascii: drop=function(){this._backdrop&&(t(this._backdrop).remove(),this._backdrop=null)},_._showBackdrop=function(e){var n=this,i=t(this._element).hasClass(c)?c:"";if(this._isShown&&this._config.backdrop){var s=I.supportsTransitionEnd()&&i;if(this._backdrop=docu
2024-07-03 15:34:49 UTC	6040	IN	Data Raw: 6c 6c 54 6f 70 28 29 3a 30 3b 74 68 69 73 2e 5f 6f 66 66 73 65 74 73 3d 5b 5d 2c 74 68 69 73 2e 5f 74 61 72 67 65 74 73 3d 5b 5d 2c 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 48 65 69 67 68 74 3d 74 68 69 73 2e 5f 67 65 74 53 63 72 6f 6c 6c 48 65 69 67 68 74 28 29 2c 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 74 68 69 73 2e 5f 73 65 6c 65 63 74 6f 72 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 72 3d 49 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 65 29 3b 69 66 28 72 26 26 28 6e 3d 74 28 72 29 5b 30 5d 29 2c 6e 29 7b 76 61 72 20 6f 3d 6e 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 69 66 28 6f 2e 77 69 64 74 68 7c 7c 6f 2e 68 65 69 67 68 74 29 72 65 74 75 72 6e 5b 74 28 6e Data Ascii: llTop():0;this._offsets=[],this._targets=[],this._scrollHeight=this._getScrollHeight(),t.makeArray(t(this._selector)).map((function(e){var n,r=I.getSelectorFromElement(e);if(r&&(n=t(r)[0]),n){var o=n.getBoundingClientRect();if(o.width\|\|o.height)return[t(n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49726	34.225.136.154	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:49 UTC	1042	OUT	GET /js/external/vimeo.min.js HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlpsWElxcGhidHNxWTVmRUFrRFlIZFE9PSIsInZhbHVlIjoiS0pkQVJIMmpRT0RBS3FML1JGRytZZ3ZVR0RxaFV6QWpPcTZQWUptVTRqUC9sK2dzVGVwaVp3aS9YYnRRUkNobjF4MW5mVFVkR0ZCemE4NHFYU2k0cFhyeDZ3WklLQWZNQTJ6THNwNVpSV1o5QldKbW1HbDJwTFRReEVZRXZmdDQiLCJtYWMiOiJhNjdlMGEyNzMxMGZiMzU1ZTE5ZDIyNmFjODQ2YWE4YmNlNGU0NGMwMjU5NDYyNmU1ZTBjNmZhZGI5ZTFjNjFhIiwidGFnIjoiIn0%3D; bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA
2024-07-03 15:34:49 UTC	352	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:49 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 19188 Connection: close Server: nginx Last-Modified: Thu, 27 Jun 2024 15:44:15 GMT ETag: "667d88cf-4af4" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-07-03 15:34:49 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 69 6d 65 6f 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 Data Ascii: /! For license information please see vimeo.min.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):((e="undefined"!=typeof globalThis?globalThis:e\|\|self
2024-07-03 15:34:49 UTC	2804	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 79 2c 72 29 7d 7d 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 65 7d 28 29 3b 72 65 74 75 72 6e 20 65 7c 7c 28 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 5b 5b 22 72 65 71 75 65 73 74 46 75 6c 6c 73 63 72 65 65 6e 22 2c 22 65 78 69 74 46 75 6c 6c 73 63 72 65 65 Data Ascii: nction(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}(e.prototype,o),e}();return e\|\|(M=function(){for(var e,t=[["requestFullscreen","exitFullscree

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49723	2.23.209.144	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:49 UTC	2575	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: -240 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAad2EE00hv9%2B3VQIdgEwOqPMsv2tiH5XFm1vo0DuND9DV8CE3tcN%2BRx0YrnYEWh6fMXQAbAQSTBvbLxMCIHIK87MAgFwjuPzELp9r5dSz2/%2BY9K0DMk6NLGaj3LQs%2BqyfvkLNp3%2BCqSyeClXAsNFO%2BPTsETB8LAMT3ar5ImhYwYqWtc5EI%2BkWYy7BadA2W5XJ2EO2gwhA9TKiLkCjYwMvjxcHGNoGmPK/EA6bbfRfddOnoSGk0v43%2BdYQWMd3tTrjRDw97scwXbTZRfzpG2Lki1yW3W1xeVIkE/ELDnc3OtWjRHti0Z2IiFg3DuvW5y/aYwn94n4biQ2ocQeehFmNFQDZgAACKQMqZ0DB8saqAESC62n9WbS9l2iIhCan%2B4kLlErxXGttsAr0EGOZq2FzrPLG4mVPC1GVwlRYiAM6RJhYHE0bsgdLMPrbCBIcwf7EEs9SO36XeFcMwNPhFA6w7sJuJOnBGfNeg4te8ML49TqQnuub3n2LsHQwa6zGTCjqqC9DaxMaw6%2BkRVB9zHgorLPfbNFfjljk616OKEiOTLE%2Br0QJ%2BhhRRyS8qIdGbuMF3jE7vvBYV3BM9%2B0IeApMhPqY3KtM2csTmw8ljJVm3%2Bq%2B1QlWMSdvt3VxmQgP9tfyjGju/IH6WoEYenR4rZO4hs6M6P8jyTwttK/eiMt5KMETBsZibLkXyHO7o2DhfCYeSDTMpaYshctVbZmCi2u45mNgyN7pa/eEndVKrxrJGPTdjOy2%2B0Lga/WKHjDer9S/nBSdb7jusdy2xYBnpUsJgtCmy7NN0HdqSVXypfHOrBQTgNOzaXAnSqBDE0oPvTC/6IIRHqFhISVInJLZ7vdO7kymee7SYUFxmxymb6R7D%2BqczwSvMgQ8Hh4mFCwQYayUII3ovq%2B7WhhSvMRyM9VJMfIceGL6 [TRUNCATED] X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1720020886 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 1FDCDDA7E56743DEB8C9199704826469 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-07-03 15:34:49 UTC	1147	IN	HTTP/1.1 200 OK Content-Length: 2215 Content-Type: application/json; charset=utf-8 Cache-Control: private X-EventID: 66856f99782d48d5ab827c36379115c9 X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Wed, 03 Jul 2024 15:34:49 GMT Connection: close Set-Cookie: _EDGE_S=SID=09EB06BA829160D13548120B831561F3&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Mon, 28-Jul-2025 15:34:49 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=09EB06BA829160D13548120B831561F3; domain=.bing.com; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.10d01702.1720020889.ca2613e
2024-07-03 15:34:49 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49729	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:49 UTC	565	OUT	GET /turnstile/v0/api.js?onload=turnstileLoad HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:49 UTC	336	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 15:34:49 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/d2a97f6b6ec9/api.js Server: cloudflare CF-RAY: 89d7f121f8061879-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49730	34.225.136.154	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:50 UTC	1229	OUT	POST /c361b6b574eaf9adb2fe8b6265ab571605542f7f HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive Content-Length: 47 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://certified-domain.cloudsurveillance.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlpsWElxcGhidHNxWTVmRUFrRFlIZFE9PSIsInZhbHVlIjoiS0pkQVJIMmpRT0RBS3FML1JGRytZZ3ZVR0RxaFV6QWpPcTZQWUptVTRqUC9sK2dzVGVwaVp3aS9YYnRRUkNobjF4MW5mVFVkR0ZCemE4NHFYU2k0cFhyeDZ3WklLQWZNQTJ6THNwNVpSV1o5QldKbW1HbDJwTFRReEVZRXZmdDQiLCJtYWMiOiJhNjdlMGEyNzMxMGZiMzU1ZTE5ZDIyNmFjODQ2YWE4YmNlNGU0NGMwMjU5NDYyNmU1ZTBjNmZhZGI5ZTFjNjFhIiwidGFnIjoiIn0%3D; bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA
2024-07-03 15:34:50 UTC	47	OUT	Data Raw: 5f 74 6f 6b 65 6e 3d 61 6f 37 52 48 33 79 70 4c 6c 6a 75 7a 44 74 48 33 69 51 69 6c 37 79 63 64 6d 79 69 77 51 69 66 47 69 6b 6b 75 66 53 78 Data Ascii: _token=ao7RH3ypLljuzDtH3iQil7ycdmyiwQifGikkufSx
2024-07-03 15:34:50 UTC	824	IN	HTTP/1.1 204 No Content Date: Wed, 03 Jul 2024 15:34:50 GMT Connection: close Server: nginx Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IjJUV2RrdWhySlJyRlZvZ014VGsxamc9PSIsInZhbHVlIjoiNm0za1l0dWVxcUduWVlUOGVOc21kdGxhRzhQU3pwVXhldFJacHRJK3BtMGlDa3hUM1NmQW9McnRJeDVQS2tvUUhkcTE0MHg2WjJDTm54Wkd2ME40bVdGdDZqU0tjazJ5bmRIb3JyanA2dXR4UjIrbHJQQ29CZnREREVvMnE5VTkiLCJtYWMiOiJlMmM3ZDc0ZDlmYmM1NjgzODJhOTM0NTkzZjcxYTE0MTE1NjU2OWM0NGVhMmJiNTk4MDRjNzkxNmRmM2I2OTY5IiwidGFnIjoiIn0%3D; expires=Wed, 03 Jul 2024 17:34:50 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; expires=Wed, 03 Jul 2024 17:34:50 GMT; Max-Age=7200; path=/; httponly; samesite=lax X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49732	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:50 UTC	559	OUT	GET /turnstile/v0/g/d2a97f6b6ec9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:50 UTC	408	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:50 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42691 Connection: close accept-ranges: bytes last-modified: Thu, 27 Jun 2024 13:08:16 GMT cache-control: max-age=31536000 access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 89d7f125caaa0f68-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 15:34:50 UTC	961	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 2c 61 2c 72 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 75 5d 28 67 29 2c 5f 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 6c 29 7b 72 28 6c 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 61 28 5f 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 5f 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 61 2c 72 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Et(e,a,r,o,c,u,g){try{var b=e[u](g),_=b.value}catch(l){r(l);return}b.done?a(_):Promise.resolve(_).then(o,c)}function wt(e){return function(){var a=this,r=arguments;return new Promise(function(o,c){var u=e.apply(a,r);funct
2024-07-03 15:34:50 UTC	1369	IN	Data Raw: 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 61 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6f 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 61 29 7b 72 65 74 75 72 6e 20 61 3d 61 21 3d 6e 75 6c 6c 3f 61 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 Data Ascii: tySymbols){var o=Object.getOwnPropertySymbols(e);a&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),r.push.apply(r,o)}return r}function Tt(e,a){return a=a!=null?a:{},Object.getOwnPropertyDescriptors?Object.definePropertie
2024-07-03 15:34:50 UTC	1369	IN	Data Raw: 28 65 2c 61 29 7c 7c 52 74 28 65 2c 61 29 7c 7c 41 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 43 65 28 65 2c 61 29 7b 76 61 72 20 72 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 5d 26 31 29 74 68 72 6f 77 20 75 5b 31 5d 3b 72 65 74 75 72 6e 20 75 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 63 2c 75 2c 67 3b 72 65 74 75 72 6e 20 67 3d 7b 6e Data Ascii: (e,a)\|\|Rt(e,a)\|\|At()}function C(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ce(e,a){var r={label:0,sent:function(){if(u[0]&1)throw u[1];return u[1]},trys:[],ops:[]},o,c,u,g;return g={n
2024-07-03 15:34:50 UTC	1369	IN	Data Raw: 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 43 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4e 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 Data Ascii: enges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ct=300020;var Ne=300030;var U;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE
2024-07-03 15:34:50 UTC	1369	IN	Data Raw: 39 5f 2d 5d 7b 30 2c 33 32 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 6d 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 6d 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b Data Ascii: 9_-]{0,32}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}var mr=/^[a-z0-9_\-=]{0,255}$/i;function Ze(e){return e===void 0?!0:typeof e=="string"&&mr.test(e)}function et(e){return N(["normal","compact","invisible"],e)}function tt(e){
2024-07-03 15:34:50 UTC	1369	IN	Data Raw: 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 62 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 5f 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 32 2f 61 76 30 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2e 73 69 7a 65 29 2e 63 6f 6e 63 61 74 28 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c Data Ascii: ";return"".concat(b,"/cdn-cgi/challenge-platform/").concat(_,"turnstile/if/ov2/av0/rcv").concat(o,"/").concat(e,"/").concat(a,"/").concat(r.theme,"/").concat(r.size).concat(l)}function Le(e){if(e===void 0)throw new ReferenceError("this hasn't been initial
2024-07-03 15:34:50 UTC	1369	IN	Data Raw: 65 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 47 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 61 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 61 2e 67 65 74 28 6f 29 3b 61 2e 73 65 74 Data Ascii: e){var a=typeof Map=="function"?new Map:void 0;return Pe=function(o){if(o===null\|\|!Gt(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof a!="undefined"){if(a.has(o))return a.get(o);a.set
2024-07-03 15:34:50 UTC	1369	IN	Data Raw: 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 4b 74 28 29 7b 76 61 72 20 65 3d 73 74 28 29 3b 65 7c 7c 70 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 61 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 61 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 72 3d 65 2e 73 72 63 2c 6f 3d 72 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e Data Ascii: c.src))return c}function Kt(){var e=st();e\|\|p("Could not find Turnstile script tag, some features may not be available",43777);var a={loadedAsync:!1,params:new URLSearchParams};(e.async\|\|e.defer)&&(a.loadedAsync=!0);var r=e.src,o=r.split("?");return o.len
2024-07-03 15:34:50 UTC	1369	IN	Data Raw: 3f 53 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3f 68 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 34 38 30 70 78 22 3a 68 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 34 36 30 70 78 22 2c 68 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 68 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 31 70 78 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 53 74 79 6c 65 3d 22 73 6f 6c 69 64 22 2c 68 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 68 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 Data Ascii: ?S:"nonexistent")?h.style.height="480px":h.style.height="460px",h.style.position="absolute",h.style.zIndex="21474836420",h.style.borderWidth="1px",h.style.borderColor="#000",h.style.borderStyle="solid",h.style.backgroundColor="#ffffff",h.style.borderRadiu
2024-07-03 15:34:50 UTC	1369	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 36 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 31 38 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 31 38 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 32 22 2c Data Ascii: ocument.createElementNS("http://www.w3.org/2000/svg","line");t.setAttribute("stroke-width","3"),t.setAttribute("stroke","#fff"),t.setAttribute("fill","none"),t.setAttribute("x1","6"),t.setAttribute("x2","18"),t.setAttribute("y1","18"),t.setAttribute("y2",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49733	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:51 UTC	789	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/ck50f/0x4AAAAAAAbaszMygKLnGbeo/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:51 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:51 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 79323 Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-embedder-policy: require-corp permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() document-policy: js-profiling cross-origin-resource-policy: cross-origin critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' referrer-policy: same-origin
2024-07-03 15:34:51 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 39 64 37 66 31 32 61 33 62 34 36 33 33 30 63 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 89d7f12a3b46330c-EWRalt-svc: h3=":443"; ma=86400
2024-07-03 15:34:51 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 Data Ascii: 00%; height: 100%; overflow: hidden;}body { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont,
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c Data Ascii: splay: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterl
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 63 62 2d 69 2c 20 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: ext a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .cb-lb .cb-i { border: 2px solid #dadada; background-color: #222;}.theme-dark .cb-lb input:focus ~ .cb-i, .theme-dar
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 0a 2e 74 68 65 Data Ascii: r: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .theme-dark #fr-helper-link:link,.the
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 Data Ascii: #challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:v
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 62 2d 6c 62 2d 74 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 Data Ascii: tion: underline;}.cb-lb input:focus ~ .cb-i { border: 2px solid #c44d0e;}.cb-lb input:focus ~ span.cb-lb-t { text-decoration: underline;}.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; bac
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 31 36 70 78 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 Data Ascii: top: 3px; margin-left: 0;}.size-compact #branding { display: flex; flex-flow: row-reverse wrap; place-content: center flex-start; align-items: center; margin: 5px 16px 0; padding-right: 0; text-align: right;}.size-compact #terms { te
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 66 2d 73 74 61 67 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 34 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 Data Ascii: er;}.rtl .size-compact #branding { padding-right: 0; padding-left: 0; text-align: center;}.rtl .size-compact #terms { text-align: center;}.rtl .size-compact #cf-stage { padding-right: 48px;}.rtl .size-compact #success-icon { left: 86px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49735	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:51 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89d7f12a3b46330c HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/ck50f/0x4AAAAAAAbaszMygKLnGbeo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:51 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:51 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 197272 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 89d7f12e3cb38ca5-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 15:34:51 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 7a 2c 66 46 2c 66 47 2c 66 4e 2c 66 54 2c 66 55 2c 67 6b 2c 67 6f 2c 67 70 2c 67 71 2c 67 75 2c 67 76 2c 67 7a 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6d 2c 68 6e 2c 68 6f 2c 68 70 2c 68 71 2c 68 72 2c 68 73 2c 68 74 2c 68 75 2c 68 76 2c 68 77 2c 68 79 2c Data Ascii: window._cf_chl_opt.uaO=false;~function(iz,fF,fG,fN,fT,fU,gk,go,gp,gq,gu,gv,gz,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hl,hm,hn,ho,hp,hq,hr,hs,ht,hu,hv,hw,hy,
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 2c 6a 45 29 7b 6a 45 3d 6a 44 2c 6a 5e 3d 6c 5b 6a 45 28 31 34 32 31 29 5d 28 73 29 7d 29 2c 66 3d 66 46 5b 6a 44 28 39 39 36 29 5d 28 66 29 2c 6b 3d 5b 5d 2c 69 3d 2d 31 3b 21 69 73 4e 61 4e 28 6d 3d 66 5b 6a 44 28 31 34 32 31 29 5d 28 2b 2b 69 29 29 3b 6b 5b 6a 44 28 39 31 30 29 5d 28 53 74 72 69 6e 67 5b 6a 44 28 32 31 32 30 29 5d 28 68 5b 6a 44 28 31 31 38 31 29 5d 28 68 5b 6a 44 28 32 33 30 36 29 5d 28 28 6d 26 32 35 35 29 2d 6a 2c 69 25 36 35 35 33 35 29 2b 36 35 35 33 35 2c 32 35 35 29 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 6a 44 28 31 38 30 35 29 5d 28 27 27 29 7d 2c 66 46 5b 69 7a 28 31 34 37 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6a 53 2c 65 29 7b 65 3d 28 6a 53 3d 69 7a 2c 7b 27 66 69 69 73 Data Ascii: ./g,function(n,s,jE){jE=jD,j^=l[jE(1421)](s)}),f=fF[jD(996)](f),k=[],i=-1;!isNaN(m=f[jD(1421)](++i));k[jD(910)](String[jD(2120)](h[jD(1181)](h[jD(2306)]((m&255)-j,i%65535)+65535,255))));return k[jD(1805)]('')},fF[iz(1471)]=function(c,jS,e){e=(jS=iz,{'fiis
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6b 54 42 64 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 74 75 56 74 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 79 4d 4f 78 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 48 44 55 52 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 65 71 66 62 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 50 44 61 7a 55 27 3a 6a 54 28 37 32 32 29 2c 27 74 67 64 4d 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4d 44 4d 67 6e 27 3a 66 75 6e 63 74 69 Data Ascii: ){return h<<i},'kTBdE':function(h,i){return h&i},'tuVtM':function(h,i){return i==h},'yMOxW':function(h,i){return h(i)},'HDURa':function(h,i){return h==i},'eqfbf':function(h,i){return i===h},'PDazU':jT(722),'tgdMR':function(h,i){return h(i)},'MDMgn':functi
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 72 6e 20 6a 59 3d 62 2c 64 5b 6a 59 28 31 38 38 36 29 5d 28 4f 2c 50 29 7d 2c 27 44 78 53 6f 68 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 51 2c 6a 5a 29 7b 72 65 74 75 72 6e 20 6a 5a 3d 62 2c 64 5b 6a 5a 28 31 36 30 30 29 5d 28 4f 2c 50 2c 51 29 7d 2c 27 42 46 53 78 55 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 51 29 7b 72 65 74 75 72 6e 20 4f 28 50 2c 51 29 7d 2c 27 52 5a 4c 6d 49 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 6b 30 29 7b 72 65 74 75 72 6e 20 6b 30 3d 62 2c 64 5b 6b 30 28 31 38 38 36 29 5d 28 4f 2c 50 29 7d 2c 27 53 67 4f 72 52 27 3a 6b 31 28 39 39 34 29 2c 27 68 43 58 67 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 50 26 4f 7d 2c 27 66 65 51 46 67 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 Data Ascii: rn jY=b,d[jY(1886)](O,P)},'DxSoh':function(O,P,Q,jZ){return jZ=b,d[jZ(1600)](O,P,Q)},'BFSxU':function(O,P,Q){return O(P,Q)},'RZLmI':function(O,P,k0){return k0=b,d[k0(1886)](O,P)},'SgOrR':k1(994),'hCXgz':function(O,P){return P&O},'feQFg':function(O,P){retu
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 61 37 5b 73 5b 6b 31 28 39 30 39 29 5d 28 73 5b 6b 31 28 31 31 38 32 29 5d 28 73 5b 6b 31 28 39 30 39 29 5d 28 61 38 2c 36 34 29 3e 3e 39 2c 34 29 2c 31 35 29 5d 3d 61 39 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 72 65 74 75 72 6e 20 53 3b 63 61 73 65 27 33 27 3a 61 34 5b 61 35 3e 3e 35 5d 7c 3d 31 32 38 2e 39 36 3c 3c 32 34 2d 61 36 25 33 32 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 66 6f 72 28 55 3d 30 3b 55 3c 61 61 5b 6b 31 28 36 33 34 29 5d 3b 55 2b 3d 31 36 29 66 6f 72 28 57 3d 6b 31 28 35 30 38 29 5b 6b 31 28 31 38 32 36 29 5d 28 27 7c 27 29 2c 58 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 57 5b 58 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 53 5b 33 5d 3d 62 67 Data Ascii: ));continue;case'1':a7[s[k1(909)](s[k1(1182)](s[k1(909)](a8,64)>>9,4),15)]=a9;continue;case'2':return S;case'3':a4[a5>>5]\|=128.96<<24-a6%32;continue;case'4':for(U=0;U<aa[k1(634)];U+=16)for(W=k1(508)[k1(1826)]('\|'),X=0;!![];){switch(W[X++]){case'0':S[3]=bg
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 27 3a 53 5b 35 5d 3d 62 69 28 61 38 2c 53 5b 35 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 33 27 3a 53 5b 34 5d 3d 62 68 28 61 39 2c 53 5b 34 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 34 27 3a 53 5b 31 5d 3d 62 65 28 61 37 2c 53 5b 31 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 35 27 3a 61 4c 3d 53 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 36 27 3a 61 39 3d 53 5b 34 5d 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 4c 3d 69 5b 6b 31 28 31 31 34 37 29 5d 28 4b 29 2c 4f 62 6a 65 63 74 5b 6b 31 28 32 32 39 35 29 5d 5b 6b 31 28 32 30 32 38 29 5d 5b 6b 31 28 31 38 36 32 29 5d 28 42 2c 4c 29 7c 7c 28 42 5b 4c 5d 3d 46 2b 2b 2c 43 5b 4c 5d 3d Data Ascii: ':S[5]=bi(a8,S[5]);continue;case'13':S[4]=bh(a9,S[4]);continue;case'14':S[1]=be(a7,S[1]);continue;case'15':aL=S[0];continue;case'16':a9=S[4];continue}break}continue}break}}else if(L=i[k1(1147)](K),Object[k1(2295)][k1(2028)][k1(1862)](B,L)\|\|(B[L]=F++,C[L]=
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 31 27 3a 62 37 3d 62 38 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 32 27 3a 53 3d 73 5b 6b 31 28 31 39 34 33 29 5d 28 61 52 28 53 2c 36 29 5e 73 5b 6b 31 28 35 36 37 29 5d 28 61 53 2c 53 2c 31 31 29 2c 61 54 28 53 2c 32 35 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 33 27 3a 31 36 3e 61 77 3f 54 3d 61 78 5b 61 79 2b 61 7a 5d 3a 54 3d 28 54 3d 62 46 5b 62 47 2d 32 5d 2c 54 3d 62 48 28 54 2c 31 37 29 5e 62 49 28 54 2c 31 39 29 5e 54 3e 3e 3e 31 30 2e 34 34 2c 54 3d 62 4a 28 54 2c 62 4b 5b 62 4c 2d 37 5d 29 2c 55 3d 62 4d 5b 62 4e 2d 31 35 5d 2c 55 3d 62 4f 28 55 2c 37 29 5e 73 5b 6b 31 28 34 33 39 29 5d 28 62 50 2c 55 2c 31 38 29 5e 55 3e 3e 3e 33 2c 62 51 28 73 5b 6b 31 28 39 37 32 29 5d 28 62 52 Data Ascii: continue;case'11':b7=b8;continue;case'12':S=s[k1(1943)](aR(S,6)^s[k1(567)](aS,S,11),aT(S,25));continue;case'13':16>aw?T=ax[ay+az]:T=(T=bF[bG-2],T=bH(T,17)^bI(T,19)^T>>>10.44,T=bJ(T,bK[bL-7]),U=bM[bN-15],U=bO(U,7)^s[k1(439)](bP,U,18)^U>>>3,bQ(s[k1(972)](bR
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 2e 31 32 29 2c 4a 3d 3d 64 5b 6b 31 28 38 34 36 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 6b 31 28 39 31 30 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 45 2d 2d 2c 45 3d 3d 30 26 26 47 2b 2b 7d 66 6f 72 28 4e 3d 32 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 6b 31 28 32 33 33 39 29 5d 28 64 5b 6b 31 28 31 36 36 37 29 5d 28 49 2c 31 29 2c 64 5b 6b 31 28 36 38 34 29 5d 28 4e 2c 31 29 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 6b 31 28 39 31 30 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 49 3c 3c 3d 31 2c 64 5b 6b 31 28 32 30 38 30 29 5d 28 4a 2c 6a 2d 31 29 29 7b 48 5b 6b 31 28 39 31 30 29 5d 28 64 5b 6b 31 28 32 32 30 33 29 5d 28 6f 2c 49 Data Ascii: .12),J==d[k1(846)](j,1)?(J=0,H[k1(910)](o(I)),I=0):J++,N>>=1,x++);E--,E==0&&G++}for(N=2,x=0;x<G;I=d[k1(2339)](d[k1(1667)](I,1),d[k1(684)](N,1)),J==j-1?(J=0,H[k1(910)](o(I)),I=0):J++,N>>=1,x++);for(;;)if(I<<=1,d[k1(2080)](J,j-1)){H[k1(910)](d[k1(2203)](o,I
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4c 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 6b 35 28 31 35 39 36 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 6b 35 28 31 35 33 36 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 6b 35 28 31 38 30 35 29 5d 28 27 27 29 7d 69 66 28 64 5b 6b 35 28 39 32 33 29 5d 28 30 2c 78 29 26 26 28 78 3d 4d 61 74 68 Data Ascii: ++)),J\|=(0<L?1:0)F,F<<=1);s[B++]=e(J),M=B-1,x--;break;case 1:for(J=0,K=Math[k5(1596)](2,16),F=1;F!=K;L=H&G,H>>=1,H==0&&(H=j,G=o(I++)),J\|=(d[k5(1536)](0,L)?1:0)F,F<<=1);s[B++]=e(J),M=B-1,x--;break;case 2:return D[k5(1805)]('')}if(d[k5(923)](0,x)&&(x=Math
2024-07-03 15:34:51 UTC	1369	IN	Data Raw: 5b 6b 39 28 37 39 38 29 5d 3d 3d 3d 69 2b 44 3f 6f 5b 6b 39 28 32 32 31 38 29 5d 28 73 2c 69 2b 44 2c 45 29 3a 46 7c 7c 6f 5b 6b 39 28 31 36 38 35 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 29 3a 6f 5b 6b 39 28 31 31 33 33 29 5d 28 73 2c 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 6b 61 29 7b 6b 61 3d 6b 39 2c 4f 62 6a 65 63 74 5b 6b 61 28 32 32 39 35 29 5d 5b 6b 61 28 32 30 32 38 29 5d 5b 6b 61 28 31 38 36 32 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 6b 61 28 39 31 30 29 5d 28 47 29 7d 7d 2c 67 75 3d 69 7a 28 31 35 34 31 29 5b 69 7a 28 31 38 32 36 29 5d 28 27 3b 27 29 2c 67 76 3d 67 75 5b 69 7a 28 32 30 35 36 29 5d 5b 69 7a 28 37 30 35 29 5d 28 67 75 29 2c 66 46 Data Ascii: [k9(798)]===i+D?o[k9(2218)](s,i+D,E):F\|\|o[k9(1685)](s,i+D,h[D])):o[k9(1133)](s,i+D,E),C++);return j;function s(G,H,ka){ka=k9,Object[ka(2295)][ka(2028)][ka(1862)](j,H)\|\|(j[H]=[]),j[H][ka(910)](G)}},gu=iz(1541)[iz(1826)](';'),gv=gu[iz(2056)][iz(705)](gu),fF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49736	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:51 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/ck50f/0x4AAAAAAAbaszMygKLnGbeo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:52 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:52 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 89d7f12f186d4358-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 15:34:52 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49737	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:52 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:52 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:52 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 89d7f1336c0142eb-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 15:34:52 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49738	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:52 UTC	789	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:52 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 79323 Connection: close document-policy: js-profiling referrer-policy: same-origin cross-origin-opener-policy: same-origin critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 origin-agent-cluster: ?1 content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-resource-policy: cross-origin permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
2024-07-03 15:34:52 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 39 64 37 66 31 33 34 32 62 30 34 30 66 38 33 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 89d7f1342b040f83-EWRalt-svc: h3=":443"; ma=86400
2024-07-03 15:34:52 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-07-03 15:34:52 UTC	1369	IN	Data Raw: 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 Data Ascii: 00%; height: 100%; overflow: hidden;}body { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont,
2024-07-03 15:34:52 UTC	1369	IN	Data Raw: 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c Data Ascii: splay: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterl
2024-07-03 15:34:52 UTC	1369	IN	Data Raw: 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 63 62 2d 69 2c 20 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: ext a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .cb-lb .cb-i { border: 2px solid #dadada; background-color: #222;}.theme-dark .cb-lb input:focus ~ .cb-i, .theme-dar
2024-07-03 15:34:52 UTC	1369	IN	Data Raw: 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 0a 2e 74 68 65 Data Ascii: r: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .theme-dark #fr-helper-link:link,.the
2024-07-03 15:34:52 UTC	1369	IN	Data Raw: 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 Data Ascii: #challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:v
2024-07-03 15:34:52 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 62 2d 6c 62 2d 74 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 Data Ascii: tion: underline;}.cb-lb input:focus ~ .cb-i { border: 2px solid #c44d0e;}.cb-lb input:focus ~ span.cb-lb-t { text-decoration: underline;}.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; bac
2024-07-03 15:34:52 UTC	1369	IN	Data Raw: 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 31 36 70 78 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 Data Ascii: top: 3px; margin-left: 0;}.size-compact #branding { display: flex; flex-flow: row-reverse wrap; place-content: center flex-start; align-items: center; margin: 5px 16px 0; padding-right: 0; text-align: right;}.size-compact #terms { te
2024-07-03 15:34:52 UTC	1369	IN	Data Raw: 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 66 2d 73 74 61 67 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 34 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 Data Ascii: er;}.rtl .size-compact #branding { padding-right: 0; padding-left: 0; text-align: center;}.rtl .size-compact #terms { text-align: center;}.rtl .size-compact #cf-stage { padding-right: 48px;}.rtl .size-compact #success-icon { left: 86px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49739	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:53 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=89d7f1342b040f83 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:53 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:53 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 198608 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 89d7f1395de94271-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 15:34:53 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 7a 2c 66 46 2c 66 47 2c 66 4e 2c 66 54 2c 66 55 2c 67 6b 2c 67 6c 2c 67 70 2c 67 71 2c 67 75 2c 67 79 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6d 2c 68 6e 2c 68 6f 2c 68 70 2c 68 71 2c 68 72 2c 68 73 2c 68 74 2c 68 75 2c 68 76 2c 68 78 2c 68 4a 2c Data Ascii: window._cf_chl_opt.uaO=false;~function(iz,fF,fG,fN,fT,fU,gk,gl,gp,gq,gu,gy,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hl,hm,hn,ho,hp,hq,hr,hs,ht,hu,hv,hx,hJ,
2024-07-03 15:34:53 UTC	1369	IN	Data Raw: 20 47 28 48 29 7d 2c 27 4b 63 72 6f 43 27 3a 6a 54 28 31 30 33 34 29 2c 27 78 62 6a 47 53 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 75 57 4d 79 61 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 64 4c 54 63 41 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 63 6e 73 53 72 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 2c 4a 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 2c 4a 29 7d 2c 27 4c 76 53 52 66 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 42 6b 42 4a 54 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 7d 2c 68 3d 3d 3d 6e 75 6c 6c 7c 7c 6f 5b Data Ascii: G(H)},'KcroC':jT(1034),'xbjGS':function(G,H){return G+H},'uWMya':function(G,H){return H===G},'dLTcA':function(G,H){return G<H},'cnsSr':function(G,H,I,J){return G(H,I,J)},'LvSRf':function(G,H){return G(H)},'BkBJT':function(G,H){return G===H}},h===null\|\|o[
2024-07-03 15:34:53 UTC	1369	IN	Data Raw: 3d 30 3b 6f 3c 69 5b 6c 5b 6d 5d 5d 5b 6a 58 28 36 30 36 29 5d 3b 6b 5b 6a 58 28 35 38 39 29 5d 28 2d 31 2c 68 5b 6e 5d 5b 6a 58 28 31 37 37 32 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 26 26 28 67 71 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 6a 58 28 31 33 36 31 29 5d 28 27 6f 2e 27 2b 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 6a 58 28 31 33 37 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 2c 6a 59 29 7b 72 65 74 75 72 6e 20 6a 59 3d 6a 58 2c 6b 5b 6a 59 28 31 33 35 35 29 5d 28 27 6f 2e 27 2c 73 29 7d 29 7d 2c 66 46 5b 69 7a 28 38 32 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6b 37 2c 65 29 7b 65 3d 28 6b 37 3d 69 7a 2c 7b 27 6a 72 48 46 51 27 3a 66 75 6e 63 74 69 6f 6e Data Ascii: =0;o<i[l[m]][jX(606)];k[jX(589)](-1,h[n][jX(1772)](i[l[m]][o]))&&(gq(i[l[m]][o])\|\|h[n][jX(1361)]('o.'+i[l[m]][o])),o++);}else h[n]=i[l[m]][jX(1373)](function(s,jY){return jY=jX,k[jY(1355)]('o.',s)})},fF[iz(829)]=function(c,k7,e){e=(k7=iz,{'jrHFQ':function
2024-07-03 15:34:53 UTC	1369	IN	Data Raw: 67 29 7d 2c 66 46 5b 69 7a 28 31 37 35 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 6b 63 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 29 7b 6a 3d 28 6b 63 3d 69 7a 2c 69 3d 7b 7d 2c 69 5b 6b 63 28 31 37 33 34 29 5d 3d 6b 63 28 33 35 33 29 2c 69 5b 6b 63 28 31 31 30 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 7c 7c 44 7d 2c 69 5b 6b 63 28 31 30 37 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6b 63 28 33 30 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6b 63 28 34 34 38 29 5d 3d 6b 63 28 31 34 33 30 29 2c 69 5b 6b 63 28 36 33 39 29 5d 3d 6b 63 28 35 33 36 29 2c 69 5b 6b 63 28 35 37 35 29 5d 3d 6b Data Ascii: g)},fF[iz(1759)]=function(f,g,h,kc,i,j,k,l,m,n,o,s,x,B){j=(kc=iz,i={},i[kc(1734)]=kc(353),i[kc(1104)]=function(C,D){return C\|\|D},i[kc(1078)]=function(C,D){return C+D},i[kc(308)]=function(C,D){return C+D},i[kc(448)]=kc(1430),i[kc(639)]=kc(536),i[kc(575)]=k
2024-07-03 15:34:53 UTC	1369	IN	Data Raw: 66 46 5b 6b 64 28 31 31 33 32 29 5d 5b 6b 64 28 34 35 31 29 5d 28 6b 64 28 31 34 38 32 29 2c 6d 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 67 79 3d 7b 7d 2c 67 79 5b 69 7a 28 39 33 36 29 5d 3d 67 78 2c 66 46 5b 69 7a 28 32 30 37 38 29 5d 3d 67 79 2c 67 41 3d 7b 7d 2c 67 41 5b 69 7a 28 36 36 38 29 5d 3d 69 7a 28 35 39 30 29 2c 67 41 5b 69 7a 28 34 39 36 29 5d 3d 69 7a 28 31 37 37 38 29 2c 67 41 5b 69 7a 28 32 32 32 38 29 5d 3d 69 7a 28 32 35 36 29 2c 67 41 5b 69 7a 28 31 37 30 32 29 5d 3d 69 7a 28 31 35 37 29 2c 67 41 5b 69 7a 28 36 39 38 29 5d 3d 69 7a 28 32 30 35 38 29 2c 67 41 5b 69 7a 28 37 32 39 29 5d 3d 69 7a 28 31 31 35 37 29 2c 67 41 5b 69 7a 28 39 31 38 29 5d 3d 69 7a 28 31 37 33 33 29 2c 67 41 5b 69 7a 28 31 30 33 39 29 5d 3d 69 7a 28 33 32 30 29 Data Ascii: fF[kd(1132)][kd(451)](kd(1482),m));return![]},gy={},gy[iz(936)]=gx,fF[iz(2078)]=gy,gA={},gA[iz(668)]=iz(590),gA[iz(496)]=iz(1778),gA[iz(2228)]=iz(256),gA[iz(1702)]=iz(157),gA[iz(698)]=iz(2058),gA[iz(729)]=iz(1157),gA[iz(918)]=iz(1733),gA[iz(1039)]=iz(320)
2024-07-03 15:34:53 UTC	1369	IN	Data Raw: 29 5d 3d 69 7a 28 31 35 31 31 29 2c 67 44 5b 69 7a 28 34 33 34 29 5d 3d 69 7a 28 36 33 37 29 2c 67 44 5b 69 7a 28 31 31 30 35 29 5d 3d 69 7a 28 31 39 31 33 29 2c 67 44 5b 69 7a 28 38 32 34 29 5d 3d 69 7a 28 31 32 31 39 29 2c 67 44 5b 69 7a 28 33 33 31 29 5d 3d 69 7a 28 33 38 30 29 2c 67 44 5b 69 7a 28 32 37 32 29 5d 3d 69 7a 28 32 32 31 35 29 2c 67 44 5b 69 7a 28 31 35 34 38 29 5d 3d 69 7a 28 38 36 36 29 2c 67 44 5b 69 7a 28 34 39 35 29 5d 3d 69 7a 28 31 36 31 29 2c 67 45 3d 7b 7d 2c 67 45 5b 69 7a 28 36 36 38 29 5d 3d 69 7a 28 31 30 32 37 29 2c 67 45 5b 69 7a 28 34 39 36 29 5d 3d 69 7a 28 31 34 39 32 29 2c 67 45 5b 69 7a 28 32 32 32 38 29 5d 3d 69 7a 28 31 31 38 33 29 2c 67 45 5b 69 7a 28 31 37 30 32 29 5d 3d 69 7a 28 31 34 30 36 29 2c 67 45 5b 69 7a 28 Data Ascii: )]=iz(1511),gD[iz(434)]=iz(637),gD[iz(1105)]=iz(1913),gD[iz(824)]=iz(1219),gD[iz(331)]=iz(380),gD[iz(272)]=iz(2215),gD[iz(1548)]=iz(866),gD[iz(495)]=iz(161),gE={},gE[iz(668)]=iz(1027),gE[iz(496)]=iz(1492),gE[iz(2228)]=iz(1183),gE[iz(1702)]=iz(1406),gE[iz(
2024-07-03 15:34:53 UTC	1369	IN	Data Raw: 36 36 29 2c 67 48 5b 69 7a 28 39 31 38 29 5d 3d 69 7a 28 31 32 35 38 29 2c 67 48 5b 69 7a 28 31 30 33 39 29 5d 3d 69 7a 28 31 35 32 31 29 2c 67 48 5b 69 7a 28 35 37 37 29 5d 3d 69 7a 28 31 31 36 33 29 2c 67 48 5b 69 7a 28 35 34 31 29 5d 3d 69 7a 28 31 31 34 38 29 2c 67 48 5b 69 7a 28 34 33 34 29 5d 3d 69 7a 28 31 39 31 34 29 2c 67 48 5b 69 7a 28 31 31 30 35 29 5d 3d 69 7a 28 31 31 38 39 29 2c 67 48 5b 69 7a 28 38 32 34 29 5d 3d 69 7a 28 36 33 38 29 2c 67 48 5b 69 7a 28 33 33 31 29 5d 3d 69 7a 28 31 31 37 31 29 2c 67 48 5b 69 7a 28 32 37 32 29 5d 3d 69 7a 28 37 39 34 29 2c 67 48 5b 69 7a 28 31 35 34 38 29 5d 3d 69 7a 28 32 31 34 39 29 2c 67 48 5b 69 7a 28 34 39 35 29 5d 3d 69 7a 28 35 39 36 29 2c 67 49 3d 7b 7d 2c 67 49 5b 69 7a 28 36 36 38 29 5d 3d 69 7a Data Ascii: 66),gH[iz(918)]=iz(1258),gH[iz(1039)]=iz(1521),gH[iz(577)]=iz(1163),gH[iz(541)]=iz(1148),gH[iz(434)]=iz(1914),gH[iz(1105)]=iz(1189),gH[iz(824)]=iz(638),gH[iz(331)]=iz(1171),gH[iz(272)]=iz(794),gH[iz(1548)]=iz(2149),gH[iz(495)]=iz(596),gI={},gI[iz(668)]=iz
2024-07-03 15:34:53 UTC	1369	IN	Data Raw: 4c 5b 69 7a 28 32 32 32 38 29 5d 3d 69 7a 28 31 38 36 31 29 2c 67 4c 5b 69 7a 28 31 37 30 32 29 5d 3d 69 7a 28 37 37 36 29 2c 67 4c 5b 69 7a 28 36 39 38 29 5d 3d 69 7a 28 35 36 30 29 2c 67 4c 5b 69 7a 28 37 32 39 29 5d 3d 69 7a 28 32 30 31 35 29 2c 67 4c 5b 69 7a 28 39 31 38 29 5d 3d 69 7a 28 31 32 31 35 29 2c 67 4c 5b 69 7a 28 31 30 33 39 29 5d 3d 69 7a 28 31 37 39 31 29 2c 67 4c 5b 69 7a 28 35 37 37 29 5d 3d 69 7a 28 31 39 39 38 29 2c 67 4c 5b 69 7a 28 35 34 31 29 5d 3d 69 7a 28 39 34 36 29 2c 67 4c 5b 69 7a 28 34 33 34 29 5d 3d 69 7a 28 31 39 33 39 29 2c 67 4c 5b 69 7a 28 31 31 30 35 29 5d 3d 69 7a 28 32 31 36 34 29 2c 67 4c 5b 69 7a 28 38 32 34 29 5d 3d 69 7a 28 38 35 37 29 2c 67 4c 5b 69 7a 28 33 33 31 29 5d 3d 69 7a 28 31 33 31 39 29 2c 67 4c 5b 69 Data Ascii: L[iz(2228)]=iz(1861),gL[iz(1702)]=iz(776),gL[iz(698)]=iz(560),gL[iz(729)]=iz(2015),gL[iz(918)]=iz(1215),gL[iz(1039)]=iz(1791),gL[iz(577)]=iz(1998),gL[iz(541)]=iz(946),gL[iz(434)]=iz(1939),gL[iz(1105)]=iz(2164),gL[iz(824)]=iz(857),gL[iz(331)]=iz(1319),gL[i
2024-07-03 15:34:53 UTC	1369	IN	Data Raw: 28 31 39 36 37 29 2c 67 4f 5b 69 7a 28 34 39 35 29 5d 3d 69 7a 28 31 39 38 34 29 2c 67 50 3d 7b 7d 2c 67 50 5b 69 7a 28 36 36 38 29 5d 3d 69 7a 28 37 34 34 29 2c 67 50 5b 69 7a 28 34 39 36 29 5d 3d 69 7a 28 31 30 38 30 29 2c 67 50 5b 69 7a 28 32 32 32 38 29 5d 3d 69 7a 28 31 39 38 38 29 2c 67 50 5b 69 7a 28 31 37 30 32 29 5d 3d 69 7a 28 31 37 31 34 29 2c 67 50 5b 69 7a 28 36 39 38 29 5d 3d 69 7a 28 31 33 35 34 29 2c 67 50 5b 69 7a 28 37 32 39 29 5d 3d 69 7a 28 36 32 31 29 2c 67 50 5b 69 7a 28 39 31 38 29 5d 3d 69 7a 28 31 34 33 38 29 2c 67 50 5b 69 7a 28 31 30 33 39 29 5d 3d 69 7a 28 33 33 39 29 2c 67 50 5b 69 7a 28 35 37 37 29 5d 3d 69 7a 28 31 37 31 37 29 2c 67 50 5b 69 7a 28 35 34 31 29 5d 3d 69 7a 28 35 36 39 29 2c 67 50 5b 69 7a 28 34 33 34 29 5d 3d Data Ascii: (1967),gO[iz(495)]=iz(1984),gP={},gP[iz(668)]=iz(744),gP[iz(496)]=iz(1080),gP[iz(2228)]=iz(1988),gP[iz(1702)]=iz(1714),gP[iz(698)]=iz(1354),gP[iz(729)]=iz(621),gP[iz(918)]=iz(1438),gP[iz(1039)]=iz(339),gP[iz(577)]=iz(1717),gP[iz(541)]=iz(569),gP[iz(434)]=
2024-07-03 15:34:53 UTC	1369	IN	Data Raw: 67 53 5b 69 7a 28 38 32 34 29 5d 3d 69 7a 28 31 33 35 30 29 2c 67 53 5b 69 7a 28 33 33 31 29 5d 3d 69 7a 28 32 32 34 29 2c 67 53 5b 69 7a 28 32 37 32 29 5d 3d 69 7a 28 34 33 30 29 2c 67 53 5b 69 7a 28 31 35 34 38 29 5d 3d 69 7a 28 37 38 35 29 2c 67 53 5b 69 7a 28 34 39 35 29 5d 3d 69 7a 28 32 31 31 37 29 2c 67 54 3d 7b 7d 2c 67 54 5b 69 7a 28 36 36 38 29 5d 3d 69 7a 28 35 33 32 29 2c 67 54 5b 69 7a 28 34 39 36 29 5d 3d 69 7a 28 32 31 36 29 2c 67 54 5b 69 7a 28 32 32 32 38 29 5d 3d 69 7a 28 31 35 34 31 29 2c 67 54 5b 69 7a 28 31 37 30 32 29 5d 3d 69 7a 28 34 33 39 29 2c 67 54 5b 69 7a 28 36 39 38 29 5d 3d 69 7a 28 31 38 37 38 29 2c 67 54 5b 69 7a 28 37 32 39 29 5d 3d 69 7a 28 31 38 30 33 29 2c 67 54 5b 69 7a 28 39 31 38 29 5d 3d 69 7a 28 31 33 34 34 29 2c Data Ascii: gS[iz(824)]=iz(1350),gS[iz(331)]=iz(224),gS[iz(272)]=iz(430),gS[iz(1548)]=iz(785),gS[iz(495)]=iz(2117),gT={},gT[iz(668)]=iz(532),gT[iz(496)]=iz(216),gT[iz(2228)]=iz(1541),gT[iz(1702)]=iz(439),gT[iz(698)]=iz(1878),gT[iz(729)]=iz(1803),gT[iz(918)]=iz(1344),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49740	34.225.136.154	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:54 UTC	1089	OUT	GET /favicon.ico HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; XSRF-TOKEN=eyJpdiI6IjJUV2RrdWhySlJyRlZvZ014VGsxamc9PSIsInZhbHVlIjoiNm0za1l0dWVxcUduWVlUOGVOc21kdGxhRzhQU3pwVXhldFJacHRJK3BtMGlDa3hUM1NmQW9McnRJeDVQS2tvUUhkcTE0MHg2WjJDTm54Wkd2ME40bVdGdDZqU0tjazJ5bmRIb3JyanA2dXR4UjIrbHJQQ29CZnREREVvMnE5VTkiLCJtYWMiOiJlMmM3ZDc0ZDlmYmM1NjgzODJhOTM0NTkzZjcxYTE0MTE1NjU2OWM0NGVhMmJiNTk4MDRjNzkxNmRmM2I2OTY5IiwidGFnIjoiIn0%3D
2024-07-03 15:34:54 UTC	320	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:54 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close Server: nginx Last-Modified: Thu, 27 Jun 2024 15:42:41 GMT ETag: "667d8871-0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49742	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:54 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/241012880:1720015859:kkF0OCqmMSLGEktS3D8RisR-2HYCyCkcz2JvdKGWaV4/89d7f1342b040f83/cb9c1cbf7db5b2d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2628 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: cb9c1cbf7db5b2d sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:54 UTC	2628	OUT	Data Raw: 76 5f 38 39 64 37 66 31 33 34 32 62 30 34 30 66 38 33 3d 67 76 53 75 62 75 39 75 70 75 51 75 42 75 4a 7a 32 2d 7a 32 77 70 49 77 49 31 38 4d 49 38 32 49 70 64 31 6e 32 6f 53 6c 32 65 7a 32 37 6e 49 6f 38 59 32 6e 70 49 77 43 4b 49 4f 38 7a 32 4e 75 4d 54 32 32 79 32 53 53 49 30 4c 32 64 74 32 6f 59 70 38 4c 32 75 37 53 32 61 32 48 6d 45 32 2d 41 59 4b 32 65 73 75 49 63 49 32 45 4b 75 32 51 71 2d 39 6d 50 65 56 63 32 75 4b 32 4d 32 49 70 74 24 36 39 42 70 45 61 34 32 49 4b 38 6a 32 47 4a 75 56 50 49 4c 68 44 24 25 32 62 53 6a 53 4b 54 71 75 32 56 64 79 63 34 32 2b 6e 4c 32 49 43 32 4f 4e 67 6c 49 65 6d 32 43 4b 49 68 2d 2b 4e 75 62 2b 45 32 46 66 77 74 32 32 6c 32 33 4f 62 62 32 49 64 4d 32 38 6e 52 64 70 43 4d 65 37 74 63 55 53 32 39 55 70 30 45 24 6d 32 Data Ascii: v_89d7f1342b040f83=gvSubu9upuQuBuJz2-z2wpIwI18MI82Ipd1n2oSl2ez27nIo8Y2npIwCKIO8z2NuMT22y2SSI0L2dt2oYp8L2u7S2a2HmE2-AYK2esuIcI2EKu2Qq-9mPeVc2uK2M2Ipt$69BpEa42IK8j2GJuVPILhD$%2bSjSKTqu2Vdyc42+nL2IC2ONglIem2CKIh-+Nub+E2Ffwt22l23Obb2IdM28nRdpCMe7tcUS29Up0E$m2
2024-07-03 15:34:54 UTC	731	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:54 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 125680 Connection: close cf-chl-gen: rCMYC7bFL4OyOE0VpmgUu7EDTw+CowzAF7nS2YIWcAHpwLv2GalSL9cr+n87zQNmaGS6e8LvGq9iVWi0eQJBfeRZb0cK9VeYbCU7LELoHH6Uh86V4heZTwWww/o+5dMXbKVNncgR3iOYTAlswJ378kZtaQoCJYNihHqYH2sANe1iqOJUJc/LlCQqzLKnZ/dT+nYnw+URzMcMgUhe9lCZRo9QQIQawWT2/PfZsbyBL5m0taJe988RqhEeCSoghrDeTHBZY+6bK8J+qfmSkqJ5JyvyCA/v9pAs0eMrQzjurrOhYs48Vi9TZwf60GIbNULd2KqJQnYyx94x5NSleoLWeN71nZ+C5GzOhDH2qHNVlWfBPEsgcBcoaCznOMeFeHu+lSkbm/gvGqEFYEoP8rNImilYdykXsyalIbIGBX6Wl3u9vVMQwrEw0lhiSkGqL+aKVOqurToSvZEcK7SVKQ5llQ==$oSEC5HNSHHybipfbClQWmg== Server: cloudflare CF-RAY: 89d7f13fdfba7d24-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 15:34:54 UTC	638	IN	Data Raw: 71 5a 52 78 75 49 71 50 76 72 43 6b 6b 70 36 70 71 73 71 70 6f 63 33 47 70 63 43 4a 6b 63 4f 75 74 4d 6e 54 78 71 2b 6a 75 74 4f 70 74 39 47 32 73 39 61 34 77 39 6a 6e 6e 64 75 66 6f 4f 7a 73 6f 39 72 4d 36 74 76 4d 73 4d 4c 73 34 65 4f 31 73 66 58 33 36 74 72 72 33 73 6e 50 39 63 7a 61 34 62 30 48 34 2b 54 57 2f 75 54 73 2b 4f 4c 5a 30 65 63 54 46 51 55 4f 44 78 6f 4a 32 66 76 7a 36 66 4c 32 47 66 4c 39 37 79 50 36 41 76 4d 6c 2b 75 6e 32 36 53 67 65 47 69 38 50 41 43 59 7a 45 77 51 7a 4a 67 34 4a 42 51 67 58 2f 67 38 64 45 53 77 69 4a 44 49 38 47 68 49 32 42 52 63 74 44 6b 64 45 52 30 59 63 44 79 68 43 52 44 68 58 4c 30 39 46 4b 44 55 32 54 55 34 73 49 43 52 6b 52 31 74 62 59 31 49 6b 56 46 6c 4f 59 30 55 78 4a 45 46 50 5a 6b 31 42 54 33 68 56 54 57 5a Data Ascii: qZRxuIqPvrCkkp6pqsqpoc3GpcCJkcOutMnTxq+jutOpt9G2s9a4w9jnndufoOzso9rM6tvMsMLs4eO1sfX36trr3snP9cza4b0H4+TW/uTs+OLZ0ecTFQUODxoJ2fvz6fL2GfL97yP6AvMl+un26SgeGi8PACYzEwQzJg4JBQgX/g8dESwiJDI8GhI2BRctDkdER0YcDyhCRDhXL09FKDU2TU4sICRkR1tbY1IkVFlOY0UxJEFPZk1BT3hVTWZ
2024-07-03 15:34:54 UTC	1369	IN	Data Raw: 5a 73 6c 58 39 37 63 59 43 5a 64 32 47 6b 5a 70 47 68 5a 48 2b 74 72 36 6d 72 6d 61 4f 47 6e 49 75 68 6c 58 68 79 64 62 65 50 73 49 61 70 6b 35 4f 2b 77 37 44 42 73 6f 48 48 74 61 4f 64 68 4c 32 32 69 73 2f 4e 69 38 4f 77 30 4a 57 4a 73 4d 54 48 75 74 53 34 75 72 65 78 32 4d 2f 62 78 4e 47 31 77 63 6a 6e 32 37 6e 57 77 61 53 75 36 38 7a 76 79 64 2f 73 36 4f 54 69 37 4d 62 75 79 4c 65 37 39 37 6a 33 7a 74 71 39 42 4c 38 47 77 62 73 48 79 76 34 47 39 67 51 51 44 4e 44 74 30 52 50 4d 30 41 48 6a 37 41 2f 39 33 50 7a 2b 43 76 4d 5a 2f 69 45 67 48 4f 48 67 39 77 73 64 48 43 63 41 34 51 38 4b 35 43 45 4c 38 6a 67 49 39 6a 4d 31 4c 43 77 5a 44 42 73 73 45 67 33 38 45 55 59 30 4f 30 64 44 4f 54 38 37 54 7a 34 6b 4f 69 56 48 4e 53 73 77 4c 7a 59 68 47 6b 77 62 46 Data Ascii: ZslX97cYCZd2GkZpGhZH+tr6mrmaOGnIuhlXhydbePsIapk5O+w7DBsoHHtaOdhL22is/Ni8Ow0JWJsMTHutS4urex2M/bxNG1wcjn27nWwaSu68zvyd/s6OTi7MbuyLe797j3ztq9BL8GwbsHyv4G9gQQDNDt0RPM0AHj7A/93Pz+CvMZ/iEgHOHg9wsdHCcA4Q8K5CEL8jgI9jM1LCwZDBssEg38EUY0O0dDOT87Tz4kOiVHNSswLzYhGkwbF
2024-07-03 15:34:54 UTC	1369	IN	Data Raw: 6b 70 70 39 2b 61 4a 36 6f 66 47 79 41 70 59 4a 77 72 49 52 37 62 47 75 72 6a 34 75 79 68 6f 65 37 74 6e 5a 35 77 62 36 55 6f 4a 43 39 73 62 71 6e 77 37 4f 47 6c 72 75 63 69 37 6d 36 68 4b 75 7a 6c 4a 44 41 6f 4d 6a 45 32 62 6d 6f 32 37 4c 59 31 2b 4b 5a 72 75 43 59 78 64 65 78 30 72 57 65 35 38 79 37 33 2b 66 4f 76 65 4c 76 38 72 62 42 77 64 44 30 2b 39 33 51 75 2b 2f 76 31 2f 6a 30 7a 74 37 66 33 62 38 43 34 73 7a 34 78 66 72 73 2f 50 77 53 43 41 7a 79 37 2f 66 36 43 75 58 31 47 41 66 6f 2f 42 4c 74 42 42 59 5a 34 69 54 7a 36 53 4d 45 47 78 77 62 2b 69 33 6e 4b 52 51 57 4b 43 38 5a 46 69 77 53 43 51 59 57 46 67 77 77 4d 43 51 50 4d 2f 77 69 46 68 45 42 46 69 67 6c 49 69 59 62 51 45 41 6f 48 30 52 49 4a 43 59 68 45 54 49 6e 55 31 34 75 4d 55 35 65 50 32 Data Ascii: kpp9+aJ6ofGyApYJwrIR7bGurj4uyhoe7tnZ5wb6UoJC9sbqnw7OGlruci7m6hKuzlJDAoMjE2bmo27LY1+KZruCYxdex0rWe58y73+fOveLv8rbBwdD0+93Qu+/v1/j0zt7f3b8C4sz4xfrs/PwSCAzy7/f6CuX1GAfo/BLtBBYZ4iTz6SMEGxwb+i3nKRQWKC8ZFiwSCQYWFgwwMCQPM/wiFhEBFiglIiYbQEAoH0RIJCYhETInU14uMU5eP2
2024-07-03 15:34:54 UTC	1369	IN	Data Raw: 6c 4a 69 42 62 49 4e 73 66 6f 46 39 62 4b 53 43 69 35 61 61 68 33 69 71 6a 5a 36 4e 69 4b 47 4f 69 37 69 53 6c 5a 74 2f 70 62 62 4b 67 37 32 47 6f 34 4b 4c 30 38 6d 6e 6a 62 53 6a 71 4a 47 6b 78 4d 66 47 75 2b 43 61 6d 64 50 57 6d 39 66 4f 35 64 72 42 36 65 53 6d 33 4f 76 4b 78 37 2b 38 72 63 58 6f 34 75 4c 7a 7a 37 50 32 35 66 54 31 37 4c 76 39 77 75 54 31 76 38 36 39 35 77 62 37 43 4d 54 2b 78 67 55 4c 41 4d 6f 41 43 65 44 56 35 65 45 45 38 4f 67 4d 45 65 76 39 49 65 44 72 38 78 76 77 35 66 30 53 46 53 63 58 34 77 6b 6d 49 43 77 4b 2b 79 38 6b 46 6a 63 53 46 53 30 6c 46 68 59 70 4b 52 34 66 44 78 30 69 45 52 6f 67 46 51 67 43 46 30 41 6f 44 54 73 5a 55 45 77 37 4e 53 4d 6c 51 44 56 48 45 79 55 36 50 44 42 55 56 7a 4e 4c 4c 47 42 65 50 54 42 69 59 6a 63 Data Ascii: lJiBbINsfoF9bKSCi5aah3iqjZ6NiKGOi7iSlZt/pbbKg72Go4KL08mnjbSjqJGkxMfGu+CamdPWm9fO5drB6eSm3OvKx7+8rcXo4uLzz7P25fT17Lv9wuT1v8695wb7CMT+xgULAMoACeDV5eEE8OgMEev9IeDr8xvw5f0SFScX4wkmICwK+y8kFjcSFS0lFhYpKR4fDx0iERogFQgCF0AoDTsZUEw7NSMlQDVHEyU6PDBUVzNLLGBePTBiYjc
2024-07-03 15:34:54 UTC	1369	IN	Data Raw: 59 61 72 6f 4b 53 76 72 4b 46 32 64 34 69 7a 74 6e 65 55 69 37 6e 44 6f 4b 4b 68 73 62 65 65 6d 4a 71 68 6c 70 61 41 78 37 33 49 6b 63 6d 54 78 61 47 31 71 63 72 48 32 72 53 58 76 4e 43 70 33 62 47 65 74 2b 44 4f 32 63 57 39 77 74 36 6a 76 75 54 6d 78 4d 50 7a 71 73 66 74 73 62 44 68 77 73 33 72 7a 37 6e 55 7a 63 6d 33 31 4c 2f 65 32 62 6a 58 43 73 66 49 32 41 48 72 36 78 45 51 36 68 54 73 41 4f 41 41 42 67 38 5a 37 76 7a 70 38 66 6b 52 48 42 49 6a 44 68 59 64 48 69 49 45 45 67 63 73 48 75 6f 6a 2b 69 73 64 42 67 4c 76 49 52 4d 69 4e 65 76 36 4f 78 72 76 45 52 67 54 47 66 77 31 51 77 59 34 52 41 49 69 49 77 68 42 4f 55 35 4c 4c 6a 4d 4b 53 6b 5a 4a 4c 79 63 34 4b 69 77 35 52 6c 68 58 48 45 4a 51 4d 6b 42 4f 49 42 34 2f 55 79 64 49 4a 6b 63 74 49 54 42 52 Data Ascii: YaroKSvrKF2d4iztneUi7nDoKKhsbeemJqhlpaAx73IkcmTxaG1qcrH2rSXvNCp3bGet+DO2cW9wt6jvuTmxMPzqsftsbDhws3rz7nUzcm31L/e2bjXCsfI2AHr6xEQ6hTsAOAABg8Z7vzp8fkRHBIjDhYdHiIEEgcsHuoj+isdBgLvIRMiNev6OxrvERgTGfw1QwY4RAIiIwhBOU5LLjMKSkZJLyc4Kiw5RlhXHEJQMkBOIB4/UydIJkctITBR
2024-07-03 15:34:54 UTC	1369	IN	Data Raw: 6d 6a 64 34 69 4b 6c 49 75 39 71 61 4b 4d 6c 4a 75 51 77 4b 2b 47 71 4c 6d 69 71 6f 57 5a 6d 36 6d 4d 70 35 32 6c 76 63 6d 58 31 74 54 54 73 70 6a 53 73 4a 66 62 7a 72 75 39 34 65 44 5a 70 63 4c 63 33 63 54 71 77 71 69 6d 32 37 2f 77 35 73 54 47 77 65 2f 51 39 2f 48 4e 74 39 33 66 75 77 4c 41 41 37 76 6b 2f 4f 4c 2b 32 39 55 49 33 65 44 6a 36 65 33 6a 32 2b 6a 75 39 64 48 30 35 51 45 48 47 42 66 71 35 2f 72 66 46 78 44 73 44 65 41 41 45 74 6b 68 43 41 6b 72 36 68 72 71 36 41 6b 51 4b 78 55 73 44 43 45 59 39 67 34 50 43 77 63 56 48 44 45 5a 49 43 48 31 2b 6a 59 46 50 68 34 71 43 68 68 45 53 54 68 42 55 54 39 44 45 51 63 78 55 67 70 56 4f 78 68 51 4f 46 4a 4f 58 52 6f 59 4e 45 41 36 52 7a 6f 31 51 57 63 38 56 6b 55 75 57 32 39 66 4d 45 46 6b 58 54 41 74 64 Data Ascii: mjd4iKlIu9qaKMlJuQwK+GqLmiqoWZm6mMp52lvcmX1tTTspjSsJfbzru94eDZpcLc3cTqwqim27/w5sTGwe/Q9/HNt93fuwLAA7vk/OL+29UI3eDj6e3j2+ju9dH05QEHGBfq5/rfFxDsDeAAEtkhCAkr6hrq6AkQKxUsDCEY9g4PCwcVHDEZICH1+jYFPh4qChhESThBUT9DEQcxUgpVOxhQOFJOXRoYNEA6Rzo1QWc8VkUuW29fMEFkXTAtd
2024-07-03 15:34:54 UTC	1369	IN	Data Raw: 4f 67 4b 4b 71 6c 35 65 75 75 37 7a 47 75 71 72 4d 76 35 2b 66 79 36 72 51 68 4e 43 65 74 74 65 53 6b 36 48 55 32 38 37 56 30 71 66 54 6d 70 37 54 76 4e 4f 38 31 37 36 2b 36 2b 4c 4b 72 61 44 6e 70 38 7a 6a 79 4b 62 43 31 73 61 78 38 75 6e 75 72 74 50 59 75 41 4c 4c 75 4f 37 44 78 41 54 77 34 65 48 4a 38 77 72 33 44 65 6e 4e 44 4e 73 4b 43 76 37 7a 34 42 51 61 36 65 59 59 47 79 44 30 2b 75 45 4e 38 79 59 6a 49 50 41 6e 4a 2b 67 43 49 53 4d 6e 4c 2b 67 6d 4a 79 48 74 39 44 41 5a 4c 76 45 47 44 2f 67 47 46 78 41 55 38 7a 7a 2b 49 52 41 35 4e 41 59 55 51 51 73 67 48 30 52 48 42 7a 41 4c 50 79 55 76 4e 55 5a 45 54 30 64 64 57 53 74 56 55 46 5a 61 4e 6d 55 75 56 6d 51 77 5a 54 4a 46 49 6c 39 50 4f 47 46 76 51 6b 42 54 51 53 35 45 63 47 38 78 5a 7a 52 77 64 48 Data Ascii: OgKKql5euu7zGuqrMv5+fy6rQhNCetteSk6HU287V0qfTmp7TvNO8176+6+LKraDnp8zjyKbC1sax8unurtPYuALLuO7DxATw4eHJ8wr3DenNDNsKCv7z4BQa6eYYGyD0+uEN8yYjIPAnJ+gCISMnL+gmJyHt9DAZLvEGD/gGFxAU8zz+IRA5NAYUQQsgH0RHBzALPyUvNUZET0ddWStVUFZaNmUuVmQwZTJFIl9POGFvQkBTQS5EcG8xZzRwdH
2024-07-03 15:34:54 UTC	1369	IN	Data Raw: 66 49 4f 78 75 73 61 32 70 73 47 76 6e 61 2b 4c 6a 71 62 4f 70 37 61 6c 73 5a 69 59 6c 71 33 47 72 70 33 49 75 70 36 79 34 4d 47 69 6f 61 57 6c 34 62 69 37 77 36 37 4c 7a 4e 2f 4c 33 2f 48 42 37 63 66 69 31 63 6e 6f 39 2b 62 77 37 65 6a 71 7a 37 58 73 32 63 37 61 33 50 50 6d 44 51 54 70 43 66 33 74 42 50 44 53 79 73 38 52 31 66 51 51 44 67 6e 38 31 2f 4c 73 31 76 77 53 2f 69 59 42 49 74 6b 68 35 78 50 70 35 65 59 41 41 53 6b 61 37 76 7a 2b 4d 2f 44 78 4b 77 6f 6d 38 53 30 66 4f 78 55 58 4e 52 67 35 2f 41 55 7a 45 6b 55 56 42 53 6b 71 4a 6b 77 74 41 30 51 66 52 43 52 4b 45 42 56 4b 45 7a 73 32 54 6c 30 2f 48 7a 68 50 4e 44 38 78 4a 55 55 77 57 47 4e 58 61 79 56 49 57 54 34 35 4c 30 31 4f 56 47 74 78 64 58 5a 35 62 31 41 36 55 30 65 42 4e 30 46 36 68 56 64 Data Ascii: fIOxusa2psGvna+LjqbOp7alsZiYlq3Grp3Iup6y4MGioaWl4bi7w67LzN/L3/HB7cfi1cno9+bw7ejqz7Xs2c7a3PPmDQTpCf3tBPDSys8R1fQQDgn81/Ls1vwS/iYBItkh5xPp5eYAASka7vz+M/DxKwom8S0fOxUXNRg5/AUzEkUVBSkqJkwtA0QfRCRKEBVKEzs2Tl0/HzhPND8xJUUwWGNXayVIWT45L01OVGtxdXZ5b1A6U0eBN0F6hVd
2024-07-03 15:34:54 UTC	1369	IN	Data Raw: 6f 61 4b 7a 38 36 76 79 72 54 4c 71 38 43 33 6c 71 32 75 71 71 69 73 75 4e 43 35 6b 38 43 56 6d 72 54 51 73 2b 50 4a 71 62 65 39 36 4c 2f 67 38 4e 37 69 73 4b 62 51 38 61 6e 30 32 72 66 72 2f 66 48 4a 2f 4c 6d 33 36 39 2f 59 42 64 6e 55 34 41 66 62 39 65 58 71 7a 4f 48 49 42 64 38 48 33 2b 2f 6d 31 52 4c 54 39 66 73 50 44 41 73 4d 37 78 72 63 48 42 2f 65 46 67 55 52 41 50 59 6a 47 65 59 6c 47 52 30 4d 2b 69 73 78 37 79 4d 78 38 68 49 34 38 53 63 31 44 68 63 74 49 66 78 42 4a 42 54 39 41 78 59 4a 47 52 73 4e 42 67 63 63 4f 6c 4d 38 4b 67 38 79 46 68 49 6e 49 69 4d 5a 58 55 34 52 45 6c 68 4e 58 45 34 68 4f 6b 56 5a 59 31 68 70 57 47 41 2b 58 44 73 36 63 46 51 6d 51 53 39 49 4d 58 68 59 4f 58 42 7a 56 47 78 31 66 58 46 31 51 44 39 36 51 30 42 68 61 48 39 32 Data Ascii: oaKz86vyrTLq8C3lq2uqqisuNC5k8CVmrTQs+PJqbe96L/g8N7isKbQ8an02rfr/fHJ/Lm369/YBdnU4Afb9eXqzOHIBd8H3+/m1RLT9fsPDAsM7xrcHB/eFgURAPYjGeYlGR0M+isx7yMx8hI48Sc1DhctIfxBJBT9AxYJGRsNBgccOlM8Kg8yFhInIiMZXU4RElhNXE4hOkVZY1hpWGA+XDs6cFQmQS9IMXhYOXBzVGx1fXF1QD96Q0BhaH92

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49745	44.193.44.29	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:55 UTC	794	OUT	GET /favicon.ico HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; XSRF-TOKEN=eyJpdiI6IjJUV2RrdWhySlJyRlZvZ014VGsxamc9PSIsInZhbHVlIjoiNm0za1l0dWVxcUduWVlUOGVOc21kdGxhRzhQU3pwVXhldFJacHRJK3BtMGlDa3hUM1NmQW9McnRJeDVQS2tvUUhkcTE0MHg2WjJDTm54Wkd2ME40bVdGdDZqU0tjazJ5bmRIb3JyanA2dXR4UjIrbHJQQ29CZnREREVvMnE5VTkiLCJtYWMiOiJlMmM3ZDc0ZDlmYmM1NjgzODJhOTM0NTkzZjcxYTE0MTE1NjU2OWM0NGVhMmJiNTk4MDRjNzkxNmRmM2I2OTY5IiwidGFnIjoiIn0%3D
2024-07-03 15:34:55 UTC	320	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:55 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close Server: nginx Last-Modified: Thu, 27 Jun 2024 15:42:41 GMT ETag: "667d8871-0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49746	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:55 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/241012880:1720015859:kkF0OCqmMSLGEktS3D8RisR-2HYCyCkcz2JvdKGWaV4/89d7f1342b040f83/cb9c1cbf7db5b2d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:55 UTC	375	IN	HTTP/1.1 404 Not Found Date: Wed, 03 Jul 2024 15:34:55 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: rbI9sZfX92KrwstTtX79zA==$5NzBFdJ4SLjsgfoGxIkhRg== Server: cloudflare CF-RAY: 89d7f146094943f7-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 15:34:55 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49747	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:56 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/g/i/89d7f1342b040f83/1720020894751/ZkI2jQcLRdkWedY HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:56 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:56 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 89d7f149b8d219b2-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 15:34:56 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 57 00 00 00 0e 08 02 00 00 00 d5 2b 17 04 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRW+IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49748	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:56 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/89d7f1342b040f83/1720020894751/ZkI2jQcLRdkWedY HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:57 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:56 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 89d7f14e2c274222-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 15:34:57 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 57 00 00 00 0e 08 02 00 00 00 d5 2b 17 04 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRW+IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49749	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:58 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/89d7f1342b040f83/1720020894753/ea1770138270f94d94067ed79291a2ddd5bbccbd6cd6051a50b978c42caaa22b/ft-3sMJRFkk54_n HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:58 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 03 Jul 2024 15:34:58 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-07-03 15:34:58 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 36 68 64 77 45 34 4a 77 2d 55 32 55 42 6e 37 58 6b 70 47 69 33 64 57 37 7a 4c 31 73 31 67 55 61 55 4c 6c 34 78 43 79 71 6f 69 73 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g6hdwE4Jw-U2UBn7XkpGi3dW7zL1s1gUaULl4xCyqoisAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-07-03 15:34:58 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49750	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:59 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/241012880:1720015859:kkF0OCqmMSLGEktS3D8RisR-2HYCyCkcz2JvdKGWaV4/89d7f1342b040f83/cb9c1cbf7db5b2d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 30245 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: cb9c1cbf7db5b2d sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/nftn9/0x4AAAAAAAbaszMygKLnGbeo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:34:59 UTC	16384	OUT	Data Raw: 76 5f 38 39 64 37 66 31 33 34 32 62 30 34 30 66 38 33 3d 67 76 53 75 58 25 32 62 49 6e 6d 49 77 64 53 71 31 77 71 77 6d 75 59 5a 70 2b 77 71 64 2b 6e 32 30 75 64 70 49 45 32 50 75 4c 6d 2b 73 32 41 2b 32 38 4b 75 2b 42 32 64 75 53 77 38 65 32 35 65 75 33 76 2b 51 32 50 70 77 75 4f 32 59 4b 49 73 32 4a 4b 32 72 32 38 58 4b 6a 32 4d 75 37 6c 4f 4e 47 71 38 38 53 6a 58 32 38 53 42 32 2b 6a 70 34 44 53 24 4a 69 53 38 4f 32 71 35 7a 64 6d 6d 32 32 5a 4b 32 56 6a 32 32 56 78 32 37 77 64 44 4c 64 4b 49 2d 44 56 52 57 32 2b 6e 63 4b 48 5a 78 53 33 38 70 63 68 30 32 75 7a 75 44 64 43 64 59 4c 53 49 6f 38 70 74 32 38 4a 64 32 49 35 77 2b 55 63 42 46 4c 58 33 49 55 63 4e 65 47 48 42 6e 34 6c 2d 6a 78 6a 54 42 42 69 34 62 58 61 76 55 55 67 34 69 68 62 44 65 4e 53 49 Data Ascii: v_89d7f1342b040f83=gvSuX%2bInmIwdSq1wqwmuYZp+wqd+n20udpIE2PuLm+s2A+28Ku+B2duSw8e25eu3v+Q2PpwuO2YKIs2JK2r28XKj2Mu7lONGq88SjX28SB2+jp4DS$JiS8O2q5zdmm22ZK2Vj22Vx27wdDLdKI-DVRW2+ncKHZxS38pch02uzuDdCdYLSIo8pt28Jd2I5w+UcBFLX3IUcNeGHBn4l-jxjTBBi4bXavUUg4ihbDeNSI
2024-07-03 15:34:59 UTC	13861	OUT	Data Raw: 32 44 75 37 70 49 34 68 6a 49 54 32 74 75 4a 4b 38 77 35 43 32 73 32 6d 32 4a 32 59 37 6f 4d 32 4a 75 2b 77 49 51 32 71 75 61 78 45 49 32 6e 32 37 65 38 2d 75 4e 75 61 6d 49 73 53 34 77 63 33 49 4e 57 72 32 64 72 2b 4c 32 4e 67 32 39 32 34 32 50 75 2b 39 30 6e 32 4e 75 2d 32 71 66 4b 44 32 2b 70 32 6c 32 38 6d 71 75 64 76 49 57 52 71 48 49 73 53 77 75 61 79 4e 2d 75 5a 32 44 75 71 4d 32 41 70 53 45 32 6d 75 51 6c 2d 75 65 74 32 6c 75 32 4b 32 43 32 4f 6c 53 70 65 4c 32 4c 75 49 53 49 73 53 51 4b 4c 69 49 71 65 68 53 53 4f 36 71 72 32 4d 34 4f 49 6a 75 46 32 4c 6d 75 75 32 5a 78 31 51 2b 70 32 30 78 68 70 37 53 32 76 74 67 31 70 6d 70 42 4f 67 70 71 6e 32 43 75 4c 78 6f 4c 32 36 78 31 51 32 75 32 32 75 61 79 2b 55 57 31 75 61 57 32 75 32 42 75 37 78 30 51 Data Ascii: 2Du7pI4hjIT2tuJK8w5C2s2m2J2Y7oM2Ju+wIQ2quaxEI2n27e8-uNuamIsS4wc3INWr2dr+L2Ng29242Pu+90n2Nu-2qfKD2+p2l28mqudvIWRqHIsSwuayN-uZ2DuqM2ApSE2muQl-uet2lu2K2C2OlSpeL2LuISIsSQKLiIqehSSO6qr2M4OIjuF2Lmuu2Zx1Q+p20xhp7S2vtg1pmpBOgpqn2CuLxoL26x1Q2u22uay+UW1uaW2u2Bu7x0Q
2024-07-03 15:34:59 UTC	809	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:34:59 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4408 Connection: close cf-chl-out-s: l6UR0MIRq45xFG3HE6/PGf8wmgzEGoZMWHKuffYPvDAU9h4d+XFfUrnXmQV3m8fmz2/StHKYyCRmvla0GK6yX4k2TBt32UcGiL088Qoqc/f9o7ez7iVgvLkzppf/MljtgCq7IIm1Akycx8eV83brusi5kX2DQpzKFmULoCGLFkjI3gy9qXHhdz+/Zutla/EVRSyEm3Fj0ElZT1DCKdeWZHmdy/ltEVdvvFGypCyBjCVVDZH7pn/cwypyUgiikKuwvklKFbh8aBEIF7ckILi2IA+yEENykq3VdvYd0GVH4ZIxlj3kev0egAn29+q0coAkTjHJXG1VScq9fBsWqLi0dbW2zVmff7GV8VHLll/savY+E4YSMdT9AIGHRpcJ9N3m$NTXgp1H0x8WKUOWfT68KYg== cf-chl-out: 7TC8A8pvd/PRtQpBQdDmc6OZv+wEpzm5eMFqUupmoGEK8bpWJwCHGi32ZK9ZK+2kcr9yBukPbwDcEfV7ioPh0fzoLKrgnV5JUVhhKyTox1sKUitXThujOCyq0TXAt7vM$UOswbm30mF/JD0uj8ny1tA== Server: cloudflare CF-RAY: 89d7f15bcb878cca-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 15:34:59 UTC	560	IN	Data Raw: 71 5a 52 78 75 49 6d 32 6a 49 36 66 6f 6f 65 59 71 5a 2b 2b 77 5a 36 75 79 4b 71 49 70 36 4b 79 78 34 36 54 77 63 2b 6c 7a 4e 75 6c 74 4a 57 66 6f 4a 53 62 31 63 4b 69 30 65 69 30 31 2b 43 6a 75 4e 76 6b 6f 71 50 67 72 62 53 78 38 73 6a 79 34 39 53 34 30 4c 66 53 36 4e 4d 44 31 76 7a 74 2f 41 45 44 35 63 6e 30 31 2b 72 6f 32 2b 54 76 38 4f 2f 6d 33 68 51 45 38 67 4d 49 45 74 6a 73 44 4e 72 78 41 65 77 69 37 75 2f 68 4b 41 51 65 2f 68 34 4d 4a 67 45 76 47 6a 41 48 4e 42 33 38 35 7a 41 49 47 42 4c 7a 42 51 6b 58 51 50 73 66 47 77 38 64 48 79 51 55 4d 53 49 43 46 41 56 4e 50 43 30 4e 47 6a 31 49 48 31 4e 4b 4c 77 6f 7a 46 54 55 74 57 44 64 4d 58 56 6b 79 4f 52 34 6a 51 7a 49 68 57 45 6f 6b 52 56 64 62 54 57 4e 65 52 6c 42 79 53 6b 70 4c 53 6c 52 6b 55 6c 31 Data Ascii: qZRxuIm2jI6fooeYqZ++wZ6uyKqIp6Kyx46Twc+lzNultJWfoJSb1cKi0ei01+CjuNvkoqPgrbSx8sjy49S40LfS6NMD1vzt/AED5cn01+ro2+Tv8O/m3hQE8gMIEtjsDNrxAewi7u/hKAQe/h4MJgEvGjAHNB385zAIGBLzBQkXQPsfGw8dHyQUMSICFAVNPC0NGj1IH1NKLwozFTUtWDdMXVkyOR4jQzIhWEokRVdbTWNeRlBySkpLSlRkUl1
2024-07-03 15:34:59 UTC	1369	IN	Data Raw: 48 42 74 45 56 46 78 42 4e 46 4d 34 49 7a 6f 6f 4c 31 38 76 55 6a 46 6c 56 54 5a 4e 61 46 45 79 54 33 30 30 4f 56 43 42 58 45 46 59 64 6c 46 42 58 6d 4e 41 51 57 47 4e 58 55 56 4b 61 48 75 4a 53 6c 46 66 6a 57 35 56 61 6f 2b 53 55 6e 74 62 69 6e 42 36 67 49 36 64 6c 56 79 6a 61 4a 47 66 71 4b 61 48 59 4b 6c 75 69 37 4b 70 64 48 4b 33 68 33 47 44 6a 4a 61 53 6b 4b 36 61 75 61 4c 44 6c 36 4b 77 6c 35 4f 32 67 4b 4f 54 79 73 36 2f 6e 72 2b 78 71 61 47 63 71 61 44 41 7a 70 62 55 75 63 75 63 79 5a 61 5a 7a 71 4b 65 30 71 36 7a 78 72 54 58 6f 37 36 35 72 4f 44 4f 34 63 58 7a 79 4c 2f 4a 37 64 44 4f 31 75 62 4e 31 37 58 4a 31 4e 33 42 34 75 44 50 35 66 33 59 39 4e 37 7a 32 38 51 48 43 4f 67 44 2f 4f 50 51 34 64 48 78 36 51 72 59 30 50 51 65 46 4e 7a 37 49 53 45 Data Ascii: HBtEVFxBNFM4IzooL18vUjFlVTZNaFEyT300OVCBXEFYdlFBXmNAQWGNXUVKaHuJSlFfjW5Vao+SUntbinB6gI6dlVyjaJGfqKaHYKlui7KpdHK3h3GDjJaSkK6auaLDl6Kwl5O2gKOTys6/nr+xqaGcqaDAzpbUucucyZaZzqKe0q6zxrTXo765rODO4cXzyL/J7dDO1ubN17XJ1N3B4uDP5f3Y9N7z28QHCOgD/OPQ4dHx6QrY0PQeFNz7ISE
2024-07-03 15:34:59 UTC	1369	IN	Data Raw: 56 6c 48 4e 31 31 72 51 32 31 62 62 46 51 2f 51 47 67 75 55 47 46 32 61 6e 4e 65 64 6d 64 66 53 7a 74 42 50 34 4f 43 4f 56 68 68 5a 46 65 43 52 47 35 73 61 59 70 73 59 6f 64 6d 61 59 5a 69 6d 70 64 59 69 6e 43 53 58 5a 46 32 6e 5a 32 54 6c 48 79 6a 6d 4b 71 56 67 32 78 71 6c 32 79 5a 67 4b 56 2b 6b 4b 43 76 62 61 57 4e 73 34 75 35 65 4c 53 71 6b 35 32 37 76 72 6d 62 6f 4b 47 6f 67 72 75 47 71 70 57 34 68 73 7a 50 69 61 71 4c 6e 63 71 73 32 63 75 51 72 38 79 35 6c 35 58 52 75 61 43 33 31 61 53 63 76 4e 71 31 70 63 44 6e 36 71 72 4d 72 63 37 75 73 36 37 45 72 63 33 52 73 39 48 46 79 4c 72 6d 32 38 2f 4c 2f 76 76 73 35 4e 34 47 38 50 72 79 42 4e 37 47 42 77 6e 6a 79 2b 49 4e 37 38 38 58 45 4f 37 36 38 75 66 6d 2b 41 6b 57 44 66 63 65 37 74 73 68 39 51 49 47 Data Ascii: VlHN11rQ21bbFQ/QGguUGF2anNedmdfSztBP4OCOVhhZFeCRG5saYpsYodmaYZimpdYinCSXZF2nZ2TlHyjmKqVg2xql2yZgKV+kKCvbaWNs4u5eLSqk527vrmboKGogruGqpW4hszPiaqLncqs2cuQr8y5l5XRuaC31aScvNq1pcDn6qrMrc7us67Erc3Rs9HFyLrm28/L/vvs5N4G8PryBN7GBwnjy+IN788XEO768ufm+AkWDfce7tsh9QIG
2024-07-03 15:34:59 UTC	1110	IN	Data Raw: 39 77 5a 31 35 49 5a 55 68 72 4d 6c 59 73 61 44 5a 4b 66 57 38 38 54 6e 4a 75 50 6a 32 47 63 47 5a 61 65 6e 75 47 52 32 47 50 68 57 36 4b 68 32 56 4e 6c 59 75 4f 55 5a 43 4b 56 35 52 57 68 33 52 66 64 61 4e 67 59 33 69 6f 68 36 57 4a 6e 57 75 70 6c 71 57 46 65 34 71 30 62 57 2b 49 62 70 65 48 6a 72 79 64 6e 6e 32 78 74 37 53 34 65 71 57 30 75 38 65 6e 73 70 79 32 6d 73 6d 34 76 38 57 67 71 4d 69 54 78 71 66 49 71 5a 65 32 30 4e 4c 59 31 73 32 78 33 62 37 51 6e 2b 61 36 31 38 66 55 33 39 76 41 34 63 4c 5a 7a 38 2f 4c 33 4b 2f 6c 31 2b 6a 5a 7a 75 2f 6b 33 50 6e 66 37 4e 2f 39 30 62 72 75 2f 74 6b 49 78 41 76 67 39 4d 58 46 44 77 4c 51 36 2b 38 55 41 4e 2f 6c 44 4f 67 4a 30 51 6e 73 43 51 38 56 37 78 30 67 45 66 58 68 48 42 76 6e 32 2f 6f 57 49 65 73 43 47 Data Ascii: 9wZ15IZUhrMlYsaDZKfW88TnJuPj2GcGZaenuGR2GPhW6Kh2VNlYuOUZCKV5RWh3RfdaNgY3ioh6WJnWuplqWFe4q0bW+IbpeHjrydnn2xt7S4eqW0u8enspy2msm4v8WgqMiTxqfIqZe20NLY1s2x3b7Qn+a618fU39vA4cLZz8/L3K/l1+jZzu/k3Pnf7N/90bru/tkIxAvg9MXFDwLQ6+8UAN/lDOgJ0QnsCQ8V7x0gEfXhHBvn2/oWIesCG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49751	104.17.2.184	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:34:59 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/241012880:1720015859:kkF0OCqmMSLGEktS3D8RisR-2HYCyCkcz2JvdKGWaV4/89d7f1342b040f83/cb9c1cbf7db5b2d HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:00 UTC	375	IN	HTTP/1.1 404 Not Found Date: Wed, 03 Jul 2024 15:35:00 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: aEEiJGD4oamRbGAbXirc9g==$iU9xeC5Nj3LnhqsGZ1TzJw== Server: cloudflare CF-RAY: 89d7f1612eab8c1d-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 15:35:00 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49756	146.75.118.109	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:01 UTC	573	OUT	GET /p/4.34.4/js/player.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://player.vimeo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:01 UTC	454	IN	HTTP/1.1 200 OK Connection: close Content-Length: 603923 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 6365 Date: Wed, 03 Jul 2024 15:35:01 GMT X-Served-By: cache-iad-kjyo7100131-IAD, cache-fra-eddf8230128-FRA X-Cache: HIT, HIT X-Cache-Hits: 4, 0 X-Timer: S1720020902.896339,VS0,VE1 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-07-03 15:35:01 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 33 34 2e 34 20 2d 20 32 30 32 34 2d 30 37 2d 30 33 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 69 6d 70 6f 72 74 7b 5f 20 61 73 20 65 2c 64 20 61 73 20 74 2c 61 20 61 73 20 6e 2c 69 2c 73 20 61 73 20 6f 2c 43 20 61 73 20 72 2c 63 20 61 73 20 61 2c 62 20 61 73 20 73 2c 65 20 61 73 20 6c 2c 4c 20 61 73 20 63 2c 67 20 61 73 20 64 2c 66 20 61 73 20 75 2c 78 20 61 73 20 70 2c 68 20 61 73 20 5f 2c 56 20 61 73 20 76 2c 74 20 61 73 20 6d 2c 6a 20 61 73 20 66 2c 72 20 61 73 20 68 2c 6d 20 61 73 20 67 2c 70 20 61 73 20 62 2c 50 20 61 73 20 45 2c 54 20 61 73 20 79 2c 6b 20 61 73 20 43 2c 6c 20 61 73 20 54 2c 6e 20 61 73 20 4c Data Ascii: /* VimeoPlayer - v4.34.4 - 2024-07-03 - https://player.vimeo.com/NOTICE.txt */import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,V as v,t as m,j as f,r as h,m as g,p as b,P as E,T as y,k as C,l as T,n as L
2024-07-03 15:35:01 UTC	1371	IN	Data Raw: 63 6c 61 73 73 22 2c 6e 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 2c 69 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 3f 3a 5e 7c 5c 5c 73 29 22 2b 74 2b 22 28 3f 21 5c 5c 53 29 22 2c 22 67 22 29 3b 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 69 2c 22 22 29 2e 74 72 69 6d 28 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 6e 29 7d 2c 74 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 73 28 65 29 3f 74 68 69 73 2e 72 65 6d 6f 76 65 28 65 29 3a 74 68 69 73 2e 61 64 64 28 65 29 7d 7d 7d 7d 29 3b 6c 65 74 20 61 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 3d 22 22 2c 74 3d Data Ascii: class",n)},remove:function(t){var n=e.getAttribute("class")\|\|"",i=new RegExp("(?:^\|\\s)"+t+"(?!\\S)","g");n=n.replace(i,"").trim(),e.setAttribute("class",n)},toggle:function(e){this.contains(e)?this.remove(e):this.add(e)}}}});let at={};function st(e="",t=
2024-07-03 15:35:01 UTC	1371	IN	Data Raw: 6d 74 28 65 29 7b 6c 65 74 20 74 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 6d 73 46 75 6c 6c 73 63 72 65 65 6e 45 6c 65 6d 65 6e 74 26 26 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 3d 77 69 6e 64 6f 77 26 26 65 2e 6f 66 66 73 65 74 57 69 64 74 68 3c 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 26 26 28 74 3d 7b 62 6f 74 74 6f 6d 3a 31 30 30 2a 74 2e 62 6f 74 74 6f 6d 2c 6c 65 66 74 3a 31 30 30 2a 74 2e 6c 65 66 74 2c 74 6f 70 3a 31 30 30 2a 74 2e 74 6f 70 2c 72 69 67 68 74 3a 31 30 30 2a 74 2e 72 69 67 68 74 2c 77 69 64 74 68 3a 31 30 30 2a 74 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 31 30 30 2a 74 2e 68 65 69 67 68 74 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 Data Ascii: mt(e){let t=e.getBoundingClientRect();return document.msFullscreenElement&&window.parent!==window&&e.offsetWidth<e.clientWidth&&(t={bottom:100t.bottom,left:100t.left,top:100t.top,right:100t.right,width:100t.width,height:100t.height}),t}function ft(e
2024-07-03 15:35:01 UTC	1371	IN	Data Raw: 3f 3a 29 3f 5c 2f 5c 2f 28 2e 2b 29 5c 2e 28 28 76 69 6d 65 6f 28 77 73 29 3f 7c 76 69 6d 65 6f 2d 28 65 6e 74 65 72 70 72 69 73 65 7c 77 6f 72 6b 29 29 5c 2e 28 63 6f 6d 7c 64 65 76 7c 77 6f 72 6b 29 7c 28 76 69 64 65 6f 6a 69 7c 76 69 64 65 6f 73 68 69 70 69 6e 75 72 6c 29 5c 2e 68 6b 29 5c 2f 76 69 64 65 6f 5c 2f 5c 64 2b 5c 2f 63 6f 6e 66 69 67 28 3f 3d 24 7c 5c 3f 29 2f 2e 74 65 73 74 28 65 29 7d 28 69 29 29 72 65 74 75 72 6e 20 69 3b 63 6f 6e 73 74 20 72 3d 43 74 28 69 29 2c 61 3d 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 2c 73 3d 74 28 60 24 7b 69 7d 60 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2c 73 2c 6f 29 3b 72 65 74 75 72 6e 20 6e 28 60 24 7b 65 7d 2f 76 Data Ascii: ?:)?\/\/(.+)\.((vimeo(ws)?\|vimeo-(enterprise\|work))\.(com\|dev\|work)\|(videoji\|videoshipinurl)\.hk)\/video\/\d+\/config(?=$\|\?)/.test(e)}(i))return i;const r=Ct(i),a=t(window.location.search),s=t(`${i}`.split("?")[1]),l=Object.assign(a,s,o);return n(`${e}/v
2024-07-03 15:35:01 UTC	1371	IN	Data Raw: 28 28 65 2c 74 29 3d 3e 28 2e 2e 2e 6e 29 3d 3e 65 28 74 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 6e 29 29 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 41 72 72 61 79 2e 66 72 6f 6d 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 68 69 6c 64 72 65 6e 29 2e 69 6e 64 65 78 4f 66 28 65 29 3a 2d 31 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 3b 28 6e 75 6c 6c 3d 3d 28 6e 3d 65 29 3f 76 6f 69 64 20 30 3a 6e 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 26 26 21 41 74 28 65 2c 74 29 3b 29 7b 76 61 72 20 6e 3b 65 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 72 65 74 75 72 6e 20 41 74 28 65 2c 74 29 3f 65 3a 6e 75 6c 6c 7d 29 29 3b 6c 65 74 20 4f 74 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 3d 22 70 22 Data Ascii: ((e,t)=>(...n)=>e(t.apply(void 0,n)))}((function(e){return e?Array.from(e.parentNode.children).indexOf(e):-1}),(function(e,t){for(;(null==(n=e)?void 0:n.parentElement)&&!At(e,t);){var n;e=e.parentElement}return At(e,t)?e:null}));let Ot=0;function Rt(e="p"
2024-07-03 15:35:02 UTC	1371	IN	Data Raw: 6d 65 3a 52 74 28 29 2c 5f 61 64 64 43 61 72 64 3a 52 74 28 29 2c 5f 72 65 6d 6f 76 65 43 61 72 64 3a 52 74 28 29 2c 5f 63 68 61 6e 67 65 50 6c 61 79 62 61 63 6b 52 61 74 65 3a 52 74 28 29 2c 5f 64 65 73 74 72 6f 79 3a 52 74 28 29 2c 5f 63 68 61 6e 67 65 41 75 64 69 6f 54 72 61 63 6b 3a 52 74 28 29 2c 5f 72 65 71 75 65 73 74 43 6f 6d 70 6c 65 74 65 4c 69 76 65 53 75 62 74 69 74 6c 65 73 3a 52 74 28 29 2c 5f 6f 70 65 6e 52 65 6d 6f 74 65 43 6f 6d 70 6f 6e 65 6e 74 3a 52 74 28 29 2c 5f 63 6c 6f 73 65 52 65 6d 6f 74 65 43 6f 6d 70 6f 6e 65 6e 74 3a 52 74 28 29 2c 5f 75 70 64 61 74 65 4c 69 76 65 53 75 62 74 69 74 6c 65 52 65 71 75 65 73 74 73 3a 52 74 28 29 7d 2c 78 74 3d 7b 77 69 6c 6c 3a 22 77 69 6c 6c 4c 69 6b 65 56 69 64 65 6f 22 2c 64 69 64 3a 22 64 69 Data Ascii: me:Rt(),_addCard:Rt(),_removeCard:Rt(),_changePlaybackRate:Rt(),_destroy:Rt(),_changeAudioTrack:Rt(),_requestCompleteLiveSubtitles:Rt(),_openRemoteComponent:Rt(),_closeRemoteComponent:Rt(),_updateLiveSubtitleRequests:Rt()},xt={will:"willLikeVideo",did:"di
2024-07-03 15:35:02 UTC	1371	IN	Data Raw: 74 28 29 2c 5f 63 68 61 70 74 65 72 43 68 61 6e 67 65 64 3a 52 74 28 29 2c 5f 73 63 72 75 62 62 69 6e 67 53 74 61 72 74 65 64 3a 52 74 28 29 2c 5f 73 63 72 75 62 62 69 6e 67 45 6e 64 65 64 3a 52 74 28 29 2c 5f 76 6f 6c 75 6d 65 53 63 72 75 62 62 69 6e 67 53 74 61 72 74 65 64 3a 52 74 28 29 2c 5f 76 6f 6c 75 6d 65 53 63 72 75 62 62 69 6e 67 45 6e 64 65 64 3a 52 74 28 29 2c 5f 63 6f 6e 74 72 6f 6c 42 61 72 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 52 74 28 29 2c 5f 74 6f 61 73 74 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 52 74 28 29 2c 5f 73 69 64 65 64 6f 63 6b 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 52 74 28 29 2c 5f 6d 65 6e 75 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 52 74 28 29 2c 5f 63 61 70 74 69 6f Data Ascii: t(),_chapterChanged:Rt(),_scrubbingStarted:Rt(),_scrubbingEnded:Rt(),_volumeScrubbingStarted:Rt(),_volumeScrubbingEnded:Rt(),_controlBarVisibilityChanged:Rt(),_toastVisibilityChanged:Rt(),_sidedockVisibilityChanged:Rt(),_menuVisibilityChanged:Rt(),_captio
2024-07-03 15:35:02 UTC	1371	IN	Data Raw: 73 65 72 4c 6f 67 67 65 64 49 6e 3a 52 74 28 29 2c 5f 75 73 65 72 4c 6f 67 67 65 64 4f 75 74 3a 52 74 28 29 2c 5f 6c 6f 67 69 6e 46 61 69 6c 75 72 65 3a 52 74 28 29 2c 5f 63 6f 6c 6f 72 43 68 61 6e 67 65 64 3a 52 74 28 29 2c 5f 63 6f 6e 66 69 67 43 68 61 6e 67 65 64 3a 52 74 28 29 2c 5f 6c 69 76 65 45 76 65 6e 74 53 65 74 74 69 6e 67 73 43 68 61 6e 67 65 64 3a 52 74 28 29 2c 5f 70 61 73 73 77 6f 72 64 55 6e 6c 6f 63 6b 65 64 3a 52 74 28 29 2c 5f 70 72 69 76 61 74 65 55 6e 6c 6f 63 6b 65 64 3a 52 74 28 29 2c 5f 65 6e 74 65 72 65 64 54 69 6e 79 4d 6f 64 65 3a 52 74 28 29 2c 5f 65 6e 74 65 72 65 64 4d 69 6e 69 4d 6f 64 65 3a 52 74 28 29 2c 5f 65 6e 74 65 72 65 64 4e 6f 72 6d 61 6c 4d 6f 64 65 3a 52 74 28 29 2c 5f 72 65 71 75 65 73 74 43 6f 6e 66 69 67 52 65 Data Ascii: serLoggedIn:Rt(),_userLoggedOut:Rt(),_loginFailure:Rt(),_colorChanged:Rt(),_configChanged:Rt(),_liveEventSettingsChanged:Rt(),_passwordUnlocked:Rt(),_privateUnlocked:Rt(),_enteredTinyMode:Rt(),_enteredMiniMode:Rt(),_enteredNormalMode:Rt(),_requestConfigRe
2024-07-03 15:35:02 UTC	1371	IN	Data Raw: 72 52 65 67 69 73 74 72 61 6e 74 55 6e 62 6c 6f 63 6b 65 64 3a 52 74 28 29 2c 5f 69 6e 74 65 72 61 63 74 69 76 65 52 65 61 64 79 3a 52 74 28 29 2c 5f 69 6e 74 65 72 61 63 74 69 76 65 48 6f 74 73 70 6f 74 43 6c 69 63 6b 65 64 3a 52 74 28 29 2c 5f 69 6e 74 65 72 61 63 74 69 76 65 4f 76 65 72 6c 61 79 50 61 6e 65 6c 43 6c 69 63 6b 65 64 3a 52 74 28 29 2c 5f 69 6e 74 65 72 61 63 74 69 76 65 4d 61 72 6b 65 72 43 6c 69 63 6b 65 64 3a 52 74 28 29 2c 5f 69 6e 74 65 72 61 63 74 69 76 65 53 65 65 6b 43 61 6c 6c 3a 52 74 28 29 2c 5f 74 72 61 6e 73 63 72 69 70 74 43 68 61 6e 67 65 64 3a 52 74 28 29 2c 5f 72 69 67 68 74 43 6f 6e 74 65 6e 74 41 72 65 61 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 3a 52 74 28 29 2c 5f 72 69 67 68 74 43 6f 6e 74 65 6e 74 41 72 65 61 Data Ascii: rRegistrantUnblocked:Rt(),_interactiveReady:Rt(),_interactiveHotspotClicked:Rt(),_interactiveOverlayPanelClicked:Rt(),_interactiveMarkerClicked:Rt(),_interactiveSeekCall:Rt(),_transcriptChanged:Rt(),_rightContentAreaVisibilityChange:Rt(),_rightContentArea
2024-07-03 15:35:02 UTC	1371	IN	Data Raw: 56 49 53 49 42 49 4c 49 54 59 5f 43 48 41 4e 47 45 44 3a 22 63 6f 6e 74 72 6f 6c 62 61 72 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 64 22 2c 54 4f 41 53 54 5f 56 49 53 49 42 49 4c 49 54 59 5f 43 48 41 4e 47 45 44 3a 22 74 6f 61 73 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 64 22 2c 43 55 45 5f 43 48 41 4e 47 45 3a 22 63 75 65 63 68 61 6e 67 65 22 2c 43 55 45 50 4f 49 4e 54 3a 22 63 75 65 70 6f 69 6e 74 22 2c 44 55 52 41 54 49 4f 4e 5f 43 48 41 4e 47 45 3a 22 64 75 72 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 45 4d 41 49 4c 5f 43 41 50 54 55 52 45 5f 46 41 49 4c 45 44 3a 22 65 6d 61 69 6c 63 61 70 74 75 72 65 66 61 69 6c 65 64 22 2c 45 4d 41 49 4c 5f 43 41 50 54 55 52 45 3a 22 65 6d 61 69 6c 63 61 70 74 75 72 65 22 2c 45 4e 44 45 44 3a 22 65 6e Data Ascii: VISIBILITY_CHANGED:"controlbarvisibilitychanged",TOAST_VISIBILITY_CHANGED:"toastvisibilitychanged",CUE_CHANGE:"cuechange",CUEPOINT:"cuepoint",DURATION_CHANGE:"durationchange",EMAIL_CAPTURE_FAILED:"emailcapturefailed",EMAIL_CAPTURE:"emailcapture",ENDED:"en

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49755	146.75.118.109	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:01 UTC	573	OUT	GET /p/4.34.4/js/vendor.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://player.vimeo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:01 UTC	454	IN	HTTP/1.1 200 OK Connection: close Content-Length: 437503 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 6365 Date: Wed, 03 Jul 2024 15:35:01 GMT X-Served-By: cache-iad-kiad7000029-IAD, cache-fra-eddf8230152-FRA X-Cache: HIT, HIT X-Cache-Hits: 6, 0 X-Timer: S1720020902.896774,VS0,VE1 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-07-03 15:35:01 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 33 34 2e 34 20 2d 20 32 30 32 34 2d 30 37 2d 30 33 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 65 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 28 74 28 6e 29 29 7d 7d 28 4f 62 6a 65 63 74 2e 6b 65 79 73 2c 4f Data Ascii: /* VimeoPlayer - v4.34.4 - 2024-07-03 - https://player.vimeo.com/NOTICE.txt */var e=Object.prototype,t=function(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)},n=function(e,t){return function(n){return e(t(n))}}(Object.keys,O
2024-07-03 15:35:01 UTC	1371	IN	Data Raw: 69 6f 6e 5d 22 3d 3d 74 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 73 79 6e 63 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 74 7c 7c 22 5b 6f 62 6a 65 63 74 20 50 72 6f 78 79 5d 22 3d 3d 74 7d 2c 79 3d 75 5b 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 5d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2f 5b 5e 2e 5d 2b 24 2f 2e 65 78 65 63 28 79 26 26 79 2e 6b 65 79 73 26 26 79 2e 6b 65 79 73 2e 49 45 5f 50 52 4f 54 4f 7c 7c 22 22 29 3b 72 65 74 75 72 6e 20 65 3f 22 53 79 6d 62 6f 6c 28 73 72 63 29 5f 31 2e 22 2b 65 3a 22 22 7d 28 29 2c 54 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 54 2e 63 Data Ascii: ion]"==t\|\|"[object AsyncFunction]"==t\|\|"[object Proxy]"==t},y=u["__core-js_shared__"],E=function(){var e=/[^.]+$/.exec(y&&y.keys&&y.keys.IE_PROTO\|\|"");return e?"Symbol(src)_1."+e:""}(),T=Function.prototype.toString,S=function(e){if(null!=e){try{return T.c
2024-07-03 15:35:01 UTC	1371	IN	Data Raw: 65 74 75 72 6e 20 58 28 65 29 26 26 22 5b 6f 62 6a 65 63 74 20 41 72 67 75 6d 65 6e 74 73 5d 22 3d 3d 6d 28 65 29 7d 2c 47 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 57 3d 47 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 4b 3d 47 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 59 3d 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 7d 28 29 29 3f 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 58 28 65 29 26 26 57 2e 63 61 6c 6c 28 65 2c 22 63 61 6c 6c 65 65 22 29 26 26 21 4b 2e 63 61 6c 6c 28 65 2c 22 63 61 6c 6c 65 65 22 29 7d 2c 24 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 Data Ascii: eturn X(e)&&"[object Arguments]"==m(e)},G=Object.prototype,W=G.hasOwnProperty,K=G.propertyIsEnumerable,Y=q(function(){return arguments}())?q:function(e){return X(e)&&W.call(e,"callee")&&!K.call(e,"callee")},$=Array.isArray,z=function(e){return"number"==ty
2024-07-03 15:35:01 UTC	1371	IN	Data Raw: 26 26 21 21 5a 5b 6d 28 65 29 5d 7d 2c 72 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 7a 28 65 2e 6c 65 6e 67 74 68 29 26 26 21 67 28 65 29 7d 28 65 29 26 26 28 24 28 65 29 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 70 6c 69 63 65 7c 7c 4a 28 65 29 7c 7c 6e 65 28 65 29 7c 7c 59 28 65 29 29 29 72 65 74 75 72 6e 21 65 2e 6c 65 6e 67 74 68 3b 76 61 72 20 69 3d 48 28 65 29 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4d 61 70 Data Ascii: &&!!Z[m(e)]},re=Object.prototype.hasOwnProperty,ie=function(e){if(null==e)return!0;if(function(e){return null!=e&&z(e.length)&&!g(e)}(e)&&($(e)\|\|"string"==typeof e\|\|"function"==typeof e.splice\|\|J(e)\|\|ne(e)\|\|Y(e)))return!e.length;var i=H(e);if("[object Map
2024-07-03 15:35:01 UTC	1371	IN	Data Raw: 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 3b 74 25 32 3f 6c 65 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 65 28 65 2c 74 2c 6e 5b 74 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 6e 29 29 3a 6c 65 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?le(Object(n),!0).forEach((function(t){ce(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):le(Object(n)).forEach((function(
2024-07-03 15:35:02 UTC	1371	IN	Data Raw: 6f 6e 22 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 7b 69 66 28 74 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 74 2e 67 65 74 28 65 29 3b 74 2e 73 65 74 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 6d 65 28 65 2c 61 72 67 75 6d 65 6e 74 73 2c 66 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 72 65 74 75 72 6e 20 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 5f 65 28 6e 2c 65 29 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 65 2c Data Ascii: on");if(void 0!==t){if(t.has(e))return t.get(e);t.set(e,n)}function n(){return me(e,arguments,fe(this).constructor)}return n.prototype=Object.create(e.prototype,{constructor:{value:n,enumerable:!1,writable:!0,configurable:!0}}),_e(n,e)})(e)}function ge(e,
2024-07-03 15:35:02 UTC	1371	IN	Data Raw: 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 74 29 7b 76 61 72 20 6e 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 7c 7c 6e 75 6c 6c 3d 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 28 6e 3d 54 65 28 65 29 29 7c 7c 74 26 26 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b Data Ascii: 0}}function Se(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}function be(e,t){var n;if("undefined"==typeof Symbol\|\|null==e[Symbol.iterator]){if(Array.isArray(e)\|\|(n=Te(e))\|\|t&&e&&"number"==typeof e.length){
2024-07-03 15:35:02 UTC	1371	IN	Data Raw: 28 72 29 7d 29 2c 4d 65 3d 65 3d 3e 4d 61 74 68 2e 70 6f 77 28 65 2c 32 29 2c 4e 65 3d 65 3d 3e 4d 61 74 68 2e 73 71 72 74 28 65 29 3b 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 2e 2e 2e 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 64 75 63 65 28 28 65 2c 74 29 3d 3e 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 7c 7c 7b 7d 29 2e 66 6f 72 45 61 63 68 28 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 65 5b 6e 5d 2c 69 3d 74 5b 6e 5d 3b 72 26 26 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 3f 65 5b 6e 5d 3d 28 72 7c 7c 5b 5d 29 2e 63 6f 6e 63 61 74 28 69 29 3a 28 65 3d 3e 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 28 69 29 3f 65 5b 6e 5d 3d 78 65 28 7b 7d 2c 72 2c 69 29 3a 65 5b 6e 5d 3d 69 29 7d 29 2c 65 29 2c Data Ascii: (r)}),Me=e=>Math.pow(e,2),Ne=e=>Math.sqrt(e);function xe(e,...t){return t.reduce((e,t)=>(Object.keys(t\|\|{}).forEach(n=>{const r=e[n],i=t[n];r&&void 0===i\|\|(Array.isArray(i)?e[n]=(r\|\|[]).concat(i):(e=>e&&"object"==typeof e)(i)?e[n]=xe({},r,i):e[n]=i)}),e),
2024-07-03 15:35:02 UTC	1371	IN	Data Raw: 74 69 6f 6e 20 57 65 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 73 70 6c 69 74 28 22 3a 2f 2f 22 29 3b 69 66 28 32 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6e 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 2f 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 31 29 72 65 74 75 72 6e 20 6e 5b 30 5d 3b 63 6f 6e 73 74 20 72 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 3f 22 29 3b 69 66 28 72 2e 6c 65 6e 67 74 68 3e 31 29 72 65 74 75 72 6e 20 72 5b 30 5d 3b 63 6f 6e 73 74 20 69 3d 74 5b 31 5d 2e 73 70 6c 69 74 28 22 23 22 29 3b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 3e 31 3f 69 5b 30 5d 3a 74 5b 31 5d 7d 63 6f 6e 73 74 20 4b 65 3d 28 65 2c 74 29 3d 3e 28 2e 2e 2e 6e 29 3d 3e 7b 5b 60 25 63 24 7b 65 7d 60 2c 74 5d 2e 63 6f 6e Data Ascii: tion We(e){const t=e.split("://");if(2!==t.length)return null;const n=t[1].split("/");if(n.length>1)return n[0];const r=t[1].split("?");if(r.length>1)return r[0];const i=t[1].split("#");return i.length>1?i[0]:t[1]}const Ke=(e,t)=>(...n)=>{[`%c${e}`,t].con
2024-07-03 15:35:02 UTC	1371	IN	Data Raw: 63 2e 74 69 6d 65 6f 75 74 3d 65 2e 74 69 6d 65 6f 75 74 29 2c 63 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 30 3d 3d 3d 63 2e 73 74 61 74 75 73 26 26 28 21 63 2e 72 65 73 70 6f 6e 73 65 55 52 4c 7c 7c 30 21 3d 3d 63 2e 72 65 73 70 6f 6e 73 65 55 52 4c 2e 69 6e 64 65 78 4f 66 28 22 66 69 6c 65 3a 22 29 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 7b 7d 3b 63 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 2e 72 65 70 6c 61 63 65 28 2f 5e 28 2e 2a 3f 29 3a 5b 5e 5c 53 5c 6e 5d 2a 28 5b 5c 73 5c 53 5d 2a 3f 29 24 2f 67 6d 2c 28 74 2c 6e 2c 72 29 3d 3e 7b 65 5b 6e 5d 3d 65 5b 6e 5d 3f 60 24 7b 65 5b 6e 5d 7d 2c 24 7b 72 7d 60 3a 72 7d 29 3b 6c 65 74 20 74 3d 7b 7d 3b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 Data Ascii: c.timeout=e.timeout),c.onload=function(){if(0===c.status&&(!c.responseURL\|\|0!==c.responseURL.indexOf("file:")))return;const e={};c.getAllResponseHeaders().replace(/^(.?):[^\S\n]([\s\S]*?)$/gm,(t,n,r)=>{e[n]=e[n]?`${e[n]},${r}`:r});let t={};if(window.per

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49760	151.101.192.217	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:03 UTC	667	OUT	GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=80&q=85 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:03 UTC	541	IN	HTTP/1.1 200 OK Connection: close Content-Length: 509 cache-control: max-age=2592000 content-type: image/avif etag: "b46c3918f85536bb3302d42f69fe81a1" Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 1229053 Date: Wed, 03 Jul 2024 15:35:03 GMT X-Served-By: cache-dfw-kdal2120123-DFW, cache-ewr18136-EWR X-Cache: HIT, HIT X-Cache-Hits: 38, 0 X-Timer: S1720020903.222133,VS0,VE1 Vary: Accept
2024-07-03 15:35:03 UTC	509	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 00 e3 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 00 50 00 00 00 2d 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 00 0d 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 01 00 0d 00 06 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD(iinfinfeav01ColorjiprpKipcoispeP-pixiav1Ccolrnclx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49761	34.120.202.204	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:03 UTC	703	OUT	POST /add/player-stats?beacon=1&session-id=f97555e92db49319d4f7d300d8a8277c8aa00ec11720020900 HTTP/1.1 Host: fresnel.vimeocdn.com Connection: keep-alive Content-Length: 1098 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://player.vimeo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:03 UTC	1098	OUT	Data Raw: 5b 7b 22 61 75 74 6f 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 66 61 6c 73 65 2c 22 63 6c 69 70 5f 69 64 22 3a 33 31 36 31 31 38 37 32 32 2c 22 63 6f 6e 74 65 78 74 22 3a 22 65 6d 62 65 64 2e 6d 61 69 6e 22 2c 22 64 65 76 69 63 65 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 31 2c 22 64 72 6d 22 3a 66 61 6c 73 65 2c 22 65 6d 62 65 64 22 3a 74 72 75 65 2c 22 69 73 5f 6d 6f 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 73 70 61 74 69 61 6c 22 3a 66 61 6c 73 65 2c 22 6c 6f 6f 70 69 6e 67 22 3a 66 61 6c 73 65 2c 22 6f 77 6e 65 72 5f 69 64 22 3a 39 31 30 31 38 31 38 38 2c 22 70 72 6f 64 75 63 74 22 3a 22 76 69 6d 65 6f 2d 76 6f 64 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 63 65 72 74 69 66 69 65 64 2d 64 6f 6d 61 Data Ascii: [{"autoplay":false,"background":false,"clip_id":316118722,"context":"embed.main","device_pixel_ratio":1,"drm":false,"embed":true,"is_mod":false,"is_spatial":false,"looping":false,"owner_id":91018188,"product":"vimeo-vod","referrer":"https://certified-doma
2024-07-03 15:35:03 UTC	263	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://player.vimeo.com Date: Wed, 03 Jul 2024 15:35:03 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49759	146.75.118.109	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:03 UTC	551	OUT	GET /p/4.34.4/css/player.css HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:03 UTC	440	IN	HTTP/1.1 200 OK Connection: close Content-Length: 215422 Content-Type: text/css Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 6367 Date: Wed, 03 Jul 2024 15:35:03 GMT X-Served-By: cache-iad-kjyo7100062-IAD, cache-fra-eddf8230058-FRA X-Cache: HIT, HIT X-Cache-Hits: 5, 0 X-Timer: S1720020903.446514,VS0,VE1 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-07-03 15:35:03 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 33 34 2e 34 20 2d 20 32 30 32 34 2d 30 37 2d 30 33 20 2a 2f 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 75 66 66 65 72 7b 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 70 78 29 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 75 66 66 65 72 4c 65 66 74 7b 30 25 7b 6c 65 66 74 3a 30 7d 31 30 30 25 7b 6c 65 66 74 3a 2d 31 30 70 78 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 74 68 72 6f 62 7b 30 25 2c 31 30 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 34 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 77 69 67 67 6c 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 Data Ascii: /* VimeoPlayer - v4.34.4 - 2024-07-03 */@keyframes buffer{100%{transform:translateX(-10px)}}@-moz-keyframes bufferLeft{0%{left:0}100%{left:-10px}}@keyframes throb{0%,100%{background-color:#555}50%{background-color:#444}}@keyframes wiggle{0%{transform:tra
2024-07-03 15:35:03 UTC	1371	IN	Data Raw: 73 69 7a 65 3a 31 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 73 65 70 61 72 61 74 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6d 61 6e 69 70 75 6c 61 74 65 7d 2e 70 6c 61 79 65 72 20 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 61 64 65 66 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 32 70 78 7d 2e 70 6c 61 79 65 72 2c 2e 70 6c 61 79 65 72 20 2a 2c 2e 70 6c 61 79 65 72 20 3a 3a 61 66 74 65 72 2c 2e 70 6c 61 79 65 72 20 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 Data Ascii: size:10px;overflow:visible;border-collapse:separate;user-select:none;touch-action:manipulate}.player :focus{outline:2px solid #00adef;outline-offset:2px}.player,.player *,.player ::after,.player ::before{box-sizing:border-box;-webkit-tap-highlight-color:t
2024-07-03 15:35:03 UTC	1371	IN	Data Raw: 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 34 7d 2e 70 6c 61 79 65 72 2e 70 6c 61 79 65 72 2d 61 64 20 2e 76 70 2d 74 61 72 67 65 74 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 63 6f 6e 74 72 6f 6c 73 2d 77 72 61 70 70 65 72 2c 2e 70 6c 61 79 65 72 20 2e 76 70 2d 76 69 64 65 6f 2d 77 72 61 70 70 65 72 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 32 35 6d 73 20 65 61 73 65 2d 6f 75 74 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 76 69 6d 65 6f 2d 69 6e 74 65 72 61 63 74 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 Data Ascii: 0;width:100%;height:100%;z-index:4}.player.player-ad .vp-target{visibility:hidden}.player .vp-controls-wrapper,.player .vp-video-wrapper{opacity:1;transition:opacity 125ms ease-out}.player .vp-vimeo-interactive-container{position:absolute;height:100%;widt
2024-07-03 15:35:03 UTC	1371	IN	Data Raw: 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 75 70 70 6f 72 74 65 64 3e 2e 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 69 62 6c 69 6e 67 2d 65 6e 61 62 6c 65 64 20 2e 76 70 2d 70 72 65 76 69 65 77 2d 63 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 2e 70 6c 61 79 65 72 2e 72 69 67 68 74 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 75 70 70 6f 72 74 65 64 2e 61 6e 69 6d 61 74 69 6e 67 3e 2e 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 69 62 6c 69 6e 67 2d 65 6e 61 62 6c 65 64 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 72 69 67 68 74 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 70 6c 61 79 65 72 2e 72 69 67 68 74 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 75 Data Ascii: ontent-area-supported>.content-area-sibling-enabled .vp-preview-cover{background-size:contain}.player.right-content-area-supported.animating>.content-area-sibling-enabled{transition:width .4s ease-in-out,right .4s ease-in-out}.player.right-content-area-su
2024-07-03 15:35:03 UTC	1371	IN	Data Raw: 2d 61 72 65 61 2d 73 75 70 70 6f 72 74 65 64 2e 72 69 67 68 74 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 6f 70 65 6e 2e 61 70 70 2d 78 78 6c 3e 2e 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 69 62 6c 69 6e 67 2d 65 6e 61 62 6c 65 64 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 34 38 30 70 78 29 3b 72 69 67 68 74 3a 34 38 30 70 78 7d 2e 70 6c 61 79 65 72 2e 72 69 67 68 74 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 75 70 70 6f 72 74 65 64 2e 72 69 67 68 74 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 6f 70 65 6e 2e 69 73 2d 67 6f 6f 67 6c 65 2d 62 6f 74 3e 2e 63 6f 6e 74 65 6e 74 2d 61 72 65 61 2d 73 69 62 6c 69 6e 67 2d 65 6e 61 62 6c 65 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 72 69 67 68 74 3a 30 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 61 64 73 2d Data Ascii: -area-supported.right-content-area-open.app-xxl>.content-area-sibling-enabled{width:calc(100% - 480px);right:480px}.player.right-content-area-supported.right-content-area-open.is-google-bot>.content-area-sibling-enabled{width:100%;right:0}.player .vp-ads-
2024-07-03 15:35:03 UTC	1371	IN	Data Raw: 6c 61 79 65 72 20 2e 76 70 2d 61 6c 65 72 74 20 2e 63 6c 6f 73 65 3a 61 63 74 69 76 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 70 78 29 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 61 6c 65 72 74 20 2e 77 61 72 6e 69 6e 67 2d 69 63 6f 6e 7b 66 69 6c 6c 3a 23 66 34 34 3b 77 69 64 74 68 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 7d 2e 70 6c 61 79 65 72 20 62 75 74 74 6f 6e 2e 76 70 2d 61 6c 65 72 74 2d 62 75 74 74 6f 6e 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 3a 35 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 70 6c 61 79 65 72 20 2e 76 Data Ascii: layer .vp-alert .close:active{transform:translateY(1px)}.player .vp-alert .warning-icon{fill:#f44;width:15px;height:15px;position:relative;top:3px;margin-right:2px}.player button.vp-alert-button-link{padding:5px 0;background:0 0;font-weight:700}.player .v
2024-07-03 15:35:03 UTC	1371	IN	Data Raw: 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6d 61 72 67 69 6e 3a 2e 32 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 70 6c 61 79 65 72 20 2e 69 6e 74 72 6f 2d 77 72 61 70 20 2e 61 72 72 6f 77 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 35 30 25 3b 74 6f 70 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 7d 2e 70 6c 61 79 65 72 20 2e 69 6e 74 72 6f 2d 77 72 61 70 20 2e 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 38 70 78 3b 68 65 69 67 68 74 3a 38 70 78 3b 62 6f 72 64 65 72 2d 72 Data Ascii: enter;font-size:16px;margin:.2em;position:relative}.player .intro-wrap .arrow{position:absolute;left:50%;top:50%;transform:translate(-50%,-50%)}.player .intro-wrap .arrow::before{box-sizing:border-box;content:"";display:block;width:8px;height:8px;border-r
2024-07-03 15:35:03 UTC	1371	IN	Data Raw: 2c 31 34 2c 2e 32 29 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 2c 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 63 69 72 63 6c 65 2c 74 72 61 6e 73 70 61 72 65 6e 74 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 3b 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 64 61 72 6b 65 6e 7d 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 65 61 72 6c 79 62 69 72 64 5d 20 2e 74 68 75 6d 62 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 65 61 72 6c 79 62 69 72 64 5d 20 2e 76 70 2d 70 72 65 76 69 65 77 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 65 61 72 6c 79 62 69 72 64 5d 20 2e 76 70 2d 76 69 64 65 6f 7b 66 69 6c 74 65 72 3a 62 72 69 67 68 74 6e 65 73 73 28 31 29 20 63 6f 6e 74 72 61 73 74 28 2e 39 29 20 67 72 61 79 73 63 61 6c Data Ascii: ,14,.2),transparent),radial-gradient(circle,transparent,transparent);mix-blend-mode:darken}.player[data-filter=earlybird] .thumb,.player[data-filter=earlybird] .vp-preview,.player[data-filter=earlybird] .vp-video{filter:brightness(1) contrast(.9) grayscal
2024-07-03 15:35:03 UTC	1371	IN	Data Raw: 6b 77 65 6c 6c 5d 20 2e 76 70 2d 76 69 64 65 6f 3a 3a 61 66 74 65 72 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 6d 61 79 66 61 69 72 5d 20 2e 74 68 75 6d 62 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 6d 61 79 66 61 69 72 5d 20 2e 76 70 2d 70 72 65 76 69 65 77 2c 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d 6d 61 79 66 61 69 72 5d 20 2e 76 70 2d 76 69 64 65 6f 7b 66 69 6c 74 65 72 3a 62 72 69 67 68 74 6e 65 73 73 28 31 29 20 63 6f 6e 74 72 61 73 74 28 31 2e 31 29 20 67 72 61 79 73 63 61 6c 65 28 30 29 20 68 75 65 2d 72 6f 74 61 74 65 28 30 29 20 73 61 74 75 72 61 74 65 28 31 2e 31 29 20 73 65 70 69 61 28 30 29 7d 2e 70 6c 61 79 65 72 5b 64 61 74 61 2d 66 69 6c 74 65 72 3d Data Ascii: kwell] .vp-video::after{opacity:0}.player[data-filter=mayfair] .thumb,.player[data-filter=mayfair] .vp-preview,.player[data-filter=mayfair] .vp-video{filter:brightness(1) contrast(1.1) grayscale(0) hue-rotate(0) saturate(1.1) sepia(0)}.player[data-filter=
2024-07-03 15:35:03 UTC	1371	IN	Data Raw: 6e 64 3a 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 30 20 2e 35 65 6d 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 32 36 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 72 61 70 70 65 72 2e 61 6e 69 6d 61 74 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 77 72 61 70 Data Ascii: nd:#000;padding:0 .5em}.player .vp-notification-wrapper{position:absolute;top:0;left:0;width:100%;height:100%;z-index:26;display:table;text-align:center}.player .vp-notification-wrapper.animate{transition:opacity .3s ease-out}.player .vp-notification-wrap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49763	151.101.64.217	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:03 UTC	431	OUT	GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=80&q=85 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:03 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 699 cache-control: max-age=2592000 content-type: image/jpeg etag: "03766eb22ad176e272f2d2f6c5dd7f1c" Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 1396489 Date: Wed, 03 Jul 2024 15:35:03 GMT X-Served-By: cache-dfw-kdal2120123-DFW, cache-ewr18124-EWR X-Cache: HIT, MISS X-Cache-Hits: 31, 0 X-Timer: S1720020904.884309,VS0,VE37 Vary: Accept
2024-07-03 15:35:03 UTC	699	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 2d 00 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 18 00 01 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 05 03 ff da 00 08 01 01 00 00 00 00 c2 00 00 0d d9 75 bc 71 a6 18 13 00 00 00 7f ff c4 00 18 01 01 01 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 02 01 03 07 ff da 00 08 01 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}-P"uq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49762	146.75.118.109	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:03 UTC	546	OUT	GET /js_opt/modules/utils/vuid.min.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:04 UTC	458	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1862 Content-Type: application/javascript Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1754926 Date: Wed, 03 Jul 2024 15:35:04 GMT X-Served-By: cache-iad-kiad7000106-IAD, cache-fra-eddf8230131-FRA X-Cache: HIT, HIT X-Cache-Hits: 1986, 0 X-Timer: S1720020904.092198,VS0,VE1 Vary: Accept-Encoding,x-http-method-override
2024-07-03 15:35:04 UTC	1371	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 61 6c 73 65 2c 6e 2c 6f 2c 69 2c 72 3d 74 79 70 65 6f 66 20 74 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 75 3d 22 68 74 74 70 73 3a 2f 2f 76 69 6d 65 6f 2e 63 6f 6d 2f 61 62 6c 69 6e 63 6f 6c 6e 2f 76 75 69 64 22 2c 61 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 32 31 34 37 34 38 33 36 34 37 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 7b 65 3d 30 3b 74 3d 66 28 29 7d 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 74 2d 65 2b 31 29 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 76 Data Ascii: (function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()*(t-e+1))+e}function d(t){v
2024-07-03 15:35:04 UTC	491	IN	Data Raw: 2b 22 2e 22 2b 28 28 67 28 29 5e 6c 28 74 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 26 32 31 34 37 34 38 33 36 34 37 29 3b 65 3d 74 72 75 65 7d 6f 3d 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 3e 32 29 7b 6f 2e 73 68 69 66 74 28 29 7d 73 28 22 76 75 69 64 22 2c 6e 2e 63 6f 6f 6b 69 65 2c 33 36 35 2a 32 2c 22 2f 22 2c 22 2e 22 2b 6f 2e 6a 6f 69 6e 28 22 2e 22 29 2c 74 72 75 65 2c 22 4e 6f 6e 65 22 29 3b 69 66 28 65 26 26 73 28 22 76 75 69 64 22 29 29 7b 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 76 75 69 64 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 2e 5f 76 75 69 64 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 3d 30 3b 61 3c Data Ascii: +"."+((g()^l(t.navigator.userAgent)).toString()&2147483647);e=true}o=t.location.hostname.split(".");if(o.length>2){o.shift()}s("vuid",n.cookie,365*2,"/","."+o.join("."),true,"None");if(e&&s("vuid")){if(typeof t._vuid==="object"&&t._vuid.length){for(a=0;a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49764	151.101.192.217	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:04 UTC	656	OUT	GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:04 UTC	552	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10007 Cache-Control: max-age=2592000 Content-Type: image/avif Etag: "a8da261c3613d2e047e5c8d8205b99c5" Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 1316143 Date: Wed, 03 Jul 2024 15:35:04 GMT X-Served-By: cache-dfw-kdfw8210131-DFW, cache-nyc-kteb1890065-NYC X-Cache: HIT, HIT X-Cache-Hits: 6805, 0 X-Timer: S1720020905.607918,VS0,VE1 Vary: Accept
2024-07-03 15:35:04 UTC	1379	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 25 fd 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 07 80 00 00 04 38 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 08 0d 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 01 00 0d 00 06 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD%(iinfinfeav01ColorjiprpKipcoispe8pixiav1Ccolrnclx
2024-07-03 15:35:04 UTC	1379	IN	Data Raw: 61 ed 76 57 36 42 8b 1c 23 4f 30 45 c3 8b 50 b4 4e 8e 23 50 d4 3f 3d d8 6e 94 cb 07 55 c5 88 37 25 1f f6 3e 3d 73 12 b7 f9 32 2c 5d 32 9f 56 72 b6 20 fe 7b 50 45 ba c0 63 7f 44 e2 d7 03 d4 a3 ee a0 2d b1 2c 92 cd 18 b2 9d b4 f3 c3 90 1b 4c df 95 a2 c2 6b 57 f1 0b 31 87 b0 14 98 53 83 4b 9e 92 6d 0a 7d 23 4e 77 a9 1b 20 39 ab 87 be 1d ce 56 60 99 85 14 92 95 32 43 2d d9 d3 a8 f3 14 14 36 62 88 46 d7 7a 6f 84 19 85 75 b6 94 40 3f 4a bd f3 4b 97 16 1a 72 30 5e af cd a4 37 7f 03 a8 a3 38 b6 a8 cf f6 c9 90 f7 c2 6c a1 0e 74 ae 25 42 b8 94 21 56 e8 8f 11 f4 6e 90 a9 4b 8f 60 86 04 07 b0 cf e4 c2 2c c4 08 77 6d 62 20 8f 77 bf c1 c3 d2 05 64 0e 0e ae 82 d1 dc ce b4 7c 6f 53 46 8a ae e6 76 fe 06 c2 c3 a1 59 87 ef a3 25 6e b7 14 fc 43 df d7 48 5d a3 ae ed 6e b3 dd Data Ascii: avW6B#O0EPN#P?=nU7%>=s2,]2Vr {PEcD-,LkW1SKm}#Nw 9V`2C-6bFzou@?JKr0^78lt%B!VnK`,wmb wd\|oSFvY%nCH]n
2024-07-03 15:35:04 UTC	1379	IN	Data Raw: d2 4c c7 13 c6 73 fe 1f 29 c9 b5 ac 3c 42 15 b9 d9 b1 a9 c4 7d b9 ba f8 f8 02 0a 83 fc 93 f2 54 db 37 d2 63 fc 61 57 4b b6 59 13 9e 85 71 e9 d4 fd d8 d9 c9 00 ab d4 90 a5 80 7d 17 ee 19 e9 cd f0 7e f1 83 b9 f7 3a 1b 3a 72 d5 e4 dc 74 ef 05 b8 2f 22 38 81 99 1e 1a 0d b8 92 d6 19 49 2c 46 ab b1 89 2e e7 5f fb f2 43 00 20 1a 6b fb f4 fb 02 8f 6f 16 c2 86 3e fd 5d 1c f5 6a b3 e8 d4 36 ee 57 4f 12 3b b5 c8 6a 7d 3d db a2 44 bc 46 69 11 40 fa b0 b8 08 ec ae 97 34 b2 3d e4 0e 1e 64 c5 d4 ee bf 96 15 ef 6f a2 bb eb 5e 11 56 81 0f 39 56 c8 b8 b7 e2 e2 60 81 09 d6 cd bd 11 74 93 fe 45 49 16 00 f9 b3 ed 58 23 34 ba 02 be f0 ef 64 72 42 f0 fc 30 11 47 aa 0b 05 6c a1 9c 5b 19 8c 47 e7 86 65 c7 39 31 64 e5 52 37 f3 12 13 ff bf d7 0e 73 20 5b 38 45 47 5c bd ba dd 5c aa Data Ascii: Ls)<B}T7caWKYq}~::rt/"8I,F._C ko>]j6WO;j}=DFi@4=do^V9V`tEIX#4drB0Gl[Ge91dR7s [8EG\\
2024-07-03 15:35:04 UTC	1379	IN	Data Raw: 3c 44 69 63 b0 14 73 e3 55 aa e8 39 b0 9b 99 ad ce a0 21 14 65 80 95 38 c9 ea 57 80 26 e0 d4 59 6e fa e6 7d 13 e0 d0 7f a8 e1 da 8c be c2 c8 b7 c2 96 13 96 57 5b 40 a0 51 65 d8 12 d3 d3 7e 52 ee 71 35 d5 7f 0f 71 09 32 63 51 71 20 e9 da 4e 7b f2 9a c1 fd 0e 42 5b ec ec 40 4f 2a 4d 31 82 37 fd 91 fe 24 89 fc f2 79 23 3f 6f 7f 92 5f ec e8 df 75 27 77 63 8b 00 e2 c4 f9 c1 7a 30 50 8b 2b 6a 84 36 4c e1 b3 40 ce ae 9a 4a 7f 21 4b 30 93 55 73 db 5f a0 0d 48 ad 50 5f fd 8a 76 02 ab 05 de 0a 48 f8 5a 24 31 10 07 20 33 64 66 33 0a d0 21 64 4e 04 eb 0c 75 18 a5 e7 b0 f2 e1 75 1b 3a 8a 36 8d 1f d7 9d 18 42 81 60 23 40 2d a4 7e 61 f4 e9 24 f7 ca b4 2b 8e 3b 9a 84 1c 6e 2f 19 17 2e ee f0 11 de e0 39 94 a7 a5 14 d7 e1 9f 50 aa ce 27 cf ca ac ed ad 40 85 d1 08 53 e2 96 Data Ascii: <DicsU9!e8W&Yn}W[@Qe~Rq5q2cQq N{B[@O*M17$y#?o_u'wcz0P+j6L@J!K0Us_HP_vHZ$1 3df3!dNuu:6B`#@-~a$+;n/.9P'@S
2024-07-03 15:35:04 UTC	1379	IN	Data Raw: 64 99 90 56 59 71 c4 4a 45 f4 d3 2d 31 7d c0 96 ac a0 07 b4 d5 62 6c 74 d2 35 16 f0 51 1d e0 e0 ad 07 49 be a8 c6 d2 5f f9 40 82 af f2 48 f0 80 ee 91 2b 11 e9 b1 d4 c4 0c 8e 42 07 d2 b6 fa bf 9b 6f 72 4e c1 cc f0 d3 e9 83 c4 0e 4a e0 8b 1a 5c 89 a4 af 03 20 3c 12 eb 5e 1a 00 4f fc 06 96 3d b8 fa 95 62 b3 e9 8e 32 ae b3 2a 07 a4 a0 7a cc 07 86 c8 45 5c d5 f7 6b e7 a1 36 48 81 3c b1 40 5f 3d ee 55 7d c0 cc cd 65 f6 cf 84 74 71 f1 49 6b cc d2 62 29 5b f7 3f 51 7e c9 ae b2 04 c8 62 31 f9 80 65 1e 5e 2e 47 c6 c5 50 6e e9 94 89 7a 30 e8 fd a0 fa f7 4a f9 4b bc ef ab e6 d3 cb d0 17 9d 86 87 d8 01 2c a3 c8 a6 55 f2 13 7f bd 0a 41 0d 16 90 2d 60 01 c6 92 a4 ee 0f 4d ee 18 a5 7d 20 f1 3d 1f ab 66 6f f4 32 7b 82 37 84 9b 10 2b b3 31 6e d9 59 9e 73 bb dc 2f cd b3 67 Data Ascii: dVYqJE-1}blt5QI_@H+BorNJ\ <^O=b2*zE\k6H<@_=U}etqIkb)[?Q~b1e^.GPnz0JK,UA-`M} =fo2{7+1nYs/g
2024-07-03 15:35:04 UTC	1379	IN	Data Raw: d6 ce f9 66 67 d8 29 5a 91 8b 51 b7 58 08 9e c8 56 98 e4 ef a0 c0 5a c2 3f aa ae 72 2b 12 7f 75 98 ef 12 8b 35 13 05 fb 8f 4b fb 8f 6e 66 f8 19 19 1b 40 a1 e7 15 0d c9 a5 6a fd 60 13 05 da 26 39 a2 99 41 77 f3 d0 2e 3b 91 0c 11 37 ae 8b d9 e8 5c 4e ef d0 8d 11 a2 5b 56 f9 4d 95 0f 27 10 63 fa 04 e5 04 5d af ec 90 8c 5a f2 0a f3 ff f6 76 8b 00 4c ca 0c 15 5a 6d 6a 19 79 85 c9 e2 b9 35 21 79 34 92 64 51 ef 9c 6e 01 21 3d fd 84 ab aa 07 28 af 0c 20 4a 09 be 7c 60 b7 bd ce 97 a7 35 32 1b b8 a9 41 c0 a0 62 00 b1 25 5c 27 42 5e 4a 79 c0 de d3 0b 8e f5 b7 96 93 7d 75 45 eb e2 7a cf 1d fc ea 88 81 d8 33 12 c7 e6 e4 b9 26 a6 e8 0d 03 e9 7c 27 b4 69 28 99 74 99 d0 1e 03 7c df 59 b6 f2 31 64 16 fa 3c 4d e0 7c 26 b8 73 e3 64 f5 9c b2 a2 fb 04 b9 1f b5 ac d5 d2 22 de Data Ascii: fg)ZQXVZ?r+u5Knf@j`&9Aw.;7\N[VM'c]ZvLZmjy5!y4dQn!=( J\|`52Ab%\'B^Jy}uEz3&\|'i(t\|Y1d<M\|&sd"
2024-07-03 15:35:04 UTC	1379	IN	Data Raw: 40 42 2f 4b ef 31 36 90 55 b7 13 c4 bf ca e7 db 05 55 eb 48 35 15 6e 3e 63 5d 18 7a e9 c2 2c f9 1d 1a ca 24 80 a0 b0 32 15 92 33 01 df ac 6f 3e 87 ad 60 ab 18 da 3c ed 01 50 95 f1 92 08 3f 52 0d 07 50 ec fb cd c3 0f 4e 90 7f 48 2f 1b 27 d7 16 70 11 5e 1e 66 23 36 bd 22 7b c0 a7 73 bf c8 22 19 8d d7 07 b4 88 9d 28 92 72 ad 8e 57 dd c6 ca 3b 33 d7 bd a6 58 f6 4b 1e ac 05 e5 f8 5e 44 79 39 d2 09 53 5f 7f 25 6b 0d e1 0e ee 95 37 cc df b2 88 e5 cf 6f 4c 23 72 c0 f2 c3 b7 89 04 b1 6d 5e 11 df 1a 1a 9e 4e 27 83 a5 61 b1 3c c8 42 3f f3 be cc 65 3b c2 55 09 51 37 44 5d 85 53 15 ec c5 60 78 0b 3f 9d 6a 69 ec b5 b9 60 bc 8c 01 90 fe 60 8f 1b 97 91 5a ae 52 80 ac f9 19 0c c3 ce c9 ae a5 f7 ce d0 25 71 98 53 45 82 79 04 d6 15 42 91 c6 84 80 96 62 08 76 dd 6d f1 eb 74 Data Ascii: @B/K16UUH5n>c]z,$23o>`<P?RPNH/'p^f#6"{s"(rW;3XK^Dy9S_%k7oL#rm^N'a<B?e;UQ7D]S`x?ji``ZR%qSEyBbvmt
2024-07-03 15:35:04 UTC	354	IN	Data Raw: 9e 18 68 9b 5a 03 e7 f3 be a8 83 d5 52 fa a8 b1 85 d1 1a 53 00 f4 b8 99 6f fc 57 6c a7 42 60 94 ca 40 9c 57 50 3f e2 6c 63 75 ad 39 09 55 fb 63 3b ac 51 82 0c b1 86 06 21 54 6a 5a e7 e2 c1 08 24 34 67 4e 76 f5 28 d6 e9 8c 1c 69 c1 bc 31 30 e1 66 79 71 06 91 22 8c a6 fd b2 75 21 0c 2e b7 77 b9 0e e0 db f5 2b ac 13 53 00 f4 b8 99 6f fc 57 6c a7 42 60 94 ca 40 9c 57 50 3f e2 6c 63 75 ad 39 09 55 fb 63 3b ac 51 82 0c b1 86 06 21 54 6a 5a e7 e2 c1 08 24 34 67 4e 76 f5 28 d6 e9 8c 1c 69 c1 bc 31 30 e1 66 79 71 06 91 22 8c a6 fd b2 75 21 0c 2e b7 77 b9 0e e0 db f5 2b ac 13 53 00 f4 b8 99 6f fc 57 6c a7 42 60 94 ca 40 9c 57 50 3f e2 6c 63 75 ad 39 09 55 fb 63 3b ac 51 82 0c b1 86 06 21 54 6a 5a e7 e2 c1 08 24 34 67 4e 76 f5 28 d6 e9 8c 1c 69 c1 bc 31 30 e1 66 79 Data Ascii: hZRSoWlB`@WP?lcu9Uc;Q!TjZ$4gNv(i10fyq"u!.w+SoWlB`@WP?lcu9Uc;Q!TjZ$4gNv(i10fyq"u!.w+SoWlB`@WP?lcu9Uc;Q!TjZ$4gNv(i10fy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49767	151.101.64.217	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:05 UTC	420	OUT	GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:05 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 30937 cache-control: max-age=2592000 content-type: image/jpeg etag: "a56fdf7602de74b579d41f5f85b96bc1" Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 755582 Date: Wed, 03 Jul 2024 15:35:05 GMT X-Served-By: cache-dfw-kdfw8210131-DFW, cache-ewr18161-EWR X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1720020905.206100,VS0,VE39 Vary: Accept
2024-07-03 15:35:05 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 07 08 05 06 01 03 04 02 ff da 00 08 01 01 00 00 00 00 c1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}8"
2024-07-03 15:35:05 UTC	1379	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-03 15:35:05 UTC	1379	IN	Data Raw: d5 06 42 f7 43 0d 07 fa b6 18 07 80 00 00 00 00 00 00 09 8e c2 fc 0f bf 9a 5d 2a cf 95 f6 1c 59 19 52 ab ef f3 55 39 97 26 4f 06 ab 57 6e 84 7b 5a c7 ba ed 69 15 39 6b 37 ba 7b ad 76 dc 8c 85 27 ea 38 b3 72 65 3f d6 ad 86 e5 4d b0 b6 7e 47 a8 1b 05 a0 af b8 4b 3d 0f 57 84 d9 3e 57 bd 6a d4 43 10 d5 cc d3 ea 43 7c b5 91 9d 63 1b 4d bf d6 a2 4e d9 2b 70 87 ab cd af de 6a 46 9f b7 5b 98 d2 b1 59 79 42 a0 49 33 b4 7b 1f e9 da 77 cd ce c8 d3 1c 6c a9 65 20 e8 22 da ee 14 9f 72 b5 31 9d 63 e6 d5 6f b4 e6 53 9c ab ac 47 c4 e9 3a 57 68 80 64 67 39 27 32 c2 d5 c9 12 7b af 50 e3 3f 80 65 b7 1f 54 8f 28 56 c8 b2 ec 7d d2 df 25 8a 97 ab b4 41 b5 5b e8 e2 b6 5d 2f 14 4d a9 68 b8 c0 00 00 00 00 00 00 04 c7 61 60 38 59 c5 b8 db 29 74 c9 37 d6 18 d5 3c 4d f5 8f 5f b7 b0 Data Ascii: BC]*YRU9&OWn{Zi9k7{v'8re?M~GK=W>WjCC\|cMN+pjF[YyBI3{wle "r1coSG:Whdg9'2{P?eT(V}%A[]/Mha`8Y)t7<M_
2024-07-03 15:35:05 UTC	1379	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-03 15:35:05 UTC	1379	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e4 00 00 00 70 e4 00 00 00 00 1c 00 00 00 00 0e 40 00 00 00 00 00 00 00 1f ff c4 00 1b 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 01 04 07 03 02 ff da Data Ascii: p@
2024-07-03 15:35:05 UTC	1379	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-03 15:35:05 UTC	1379	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-03 15:35:05 UTC	1379	IN	Data Raw: bc a1 b3 d7 8e 78 67 f1 f1 a3 0b b3 07 11 5f 05 a9 ce 5a a2 84 23 2b 6c 86 e9 a9 6b 00 d6 eb f5 b0 13 3d 0d 3c f0 cb 13 ac 81 96 b0 f3 02 97 38 fe 99 2e 76 60 d9 27 c1 6a 33 94 4b 0d d7 b0 80 1f 41 da d7 cf 03 5d 16 89 a9 44 f8 e4 66 1e 00 76 62 4c 19 9f 2f f4 fc e4 6a aa fa 6d 85 a2 81 9a 97 19 97 72 c8 cd b4 ad d4 f5 ca 86 b5 a2 7b 0d c3 a9 69 ec da ad 37 66 e2 78 1c c9 0a a1 9e 09 86 9a 58 66 f0 a2 2a aa 22 68 34 49 49 af 8c c7 d9 9d 0d 60 25 1b 37 1a ed 53 dd c3 68 31 4f 44 7b 7b 2e ed 46 b4 1b 01 90 33 38 98 e0 89 69 b5 45 7c 2e b7 fa f2 85 0b 2a ee a3 2e 0e 9c 4f af c6 54 a7 5a 95 f0 ca dc e4 3b 21 ce d8 a7 84 5d 7b 5b b2 d9 0c 41 83 a2 e3 7d 7a a5 ad 74 f0 8c 38 ed 46 41 24 10 ca d5 6c 97 5c 7f ad 5c c6 ec da 74 eb 3d 5e 7e d3 fd b3 8d a2 8a 6d b4 Data Ascii: xg_Z#+lk=<8.v`'j3KA]DfvbL/jmr{i7fxXf"h4II`%7Sh1OD{{.F38iE\|..OTZ;!]{[A}zt8FA$l\\t=^~m
2024-07-03 15:35:05 UTC	1379	IN	Data Raw: 56 dc 56 c3 6b 58 60 53 91 03 c6 9e 78 1f a7 50 7f 11 5e 0c 23 a1 86 21 e1 8e 18 ac ac 83 aa 12 42 8d 3f 98 a0 64 aa c0 2a f9 7c 29 e6 6c 76 03 12 39 a3 42 48 f9 cc 1e 73 5d e1 e3 9d 82 1b 7a 11 c6 55 cb 8d 52 86 f5 15 4e b0 e1 d0 9e aa e0 2d 38 cb 68 03 da 74 64 8a 40 92 2c 44 66 bb 4b 35 fd b8 60 45 5f 5e 2d 58 70 06 21 c7 89 5a 2c c5 19 63 cc 43 45 33 98 05 37 2d d7 99 3b 21 b1 64 f0 3e 06 4a ce 51 bb d6 cf 11 81 c6 09 93 d7 16 39 63 c9 c8 3a f8 b5 21 58 4e 67 32 cc ae 54 08 4e 64 31 1e 88 65 1d e0 3b 00 11 9a 14 91 b2 46 39 ae dc 69 d9 49 b0 d8 06 c6 fe 4d ca 6f 28 ab e9 b2 6f 54 ba d3 92 12 04 e6 0a 89 65 6b 08 10 b1 8e 1a 12 45 54 5c b2 b4 0e 9c 49 0b 34 9e 61 aa 64 aa d8 35 ad c2 a7 68 8e 4f d2 7d 73 97 e9 d9 ec 57 db c6 00 bf ac 38 41 70 21 20 04 Data Ascii: VVkX`SxP^#!B?d*\|)lv9BHs]zURN-8htd@,DfK5`E_^-Xp!Z,cCE37-;!d>JQ9c:!XNg2TNd1e;F9iIMo(oTekET\I4ad5hO}sW8Ap!
2024-07-03 15:35:05 UTC	1379	IN	Data Raw: 15 26 7f 4c e5 3f 48 11 d3 88 bd 2a 46 7f ce 6e be aa ba c0 4d 2a b8 a8 8a 16 93 97 44 7c 31 c5 70 16 ed ab 1c 8d 58 a0 2c 32 22 47 45 f4 ec b9 c8 9a 68 96 55 c4 da 0d 9a ff 00 91 52 e5 cf 74 ab b1 eb c6 1e af 0b 11 3e 99 cc 7f b4 a6 e9 c7 7e 8d a6 c9 7f d3 76 59 79 89 f9 c6 3e b1 03 a7 32 7e c6 9f af 12 fa 5d f8 bf 65 cd c3 d4 f7 79 c3 64 b3 ff 00 9a 15 7e f9 cb d4 f3 8d 72 3d 8a 74 e1 ea 99 d8 eb 1b 47 e7 31 79 d5 7f 8d 1c ad 5e e9 5f b6 ec 75 8a 9f a6 d2 b9 26 4b a2 a2 ad b4 ed 9c b2 13 26 d7 23 27 38 6e 56 a8 d7 70 e2 7e 39 ca a3 4b 0e ce b2 3b c1 a1 6a c9 b2 da 3b df 8a 20 c1 41 18 e3 5b ec 74 b4 48 d5 b1 4e 50 d3 b2 93 6d a4 d8 a7 9a 1a ec e5 ef 3d 07 1b f9 37 2a 15 3e 07 52 99 b1 f9 0d c7 5e 19 fa 0f 7d d3 94 3b ae db 3f 4d 6f cf aa 71 b9 ca 3e 8e Data Ascii: &L?HFnMD\|1pX,2"GEhURt>~vYy>2~]eyd~r=tG1y^_u&K&#'8nVp~9K;j; A[tHNPm=7*>R^};?Moq>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49772	34.225.136.154	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:07 UTC	1138	OUT	GET /9eeaa59b-909b-44da-89eb-fd0d929d008c HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; XSRF-TOKEN=eyJpdiI6IjJUV2RrdWhySlJyRlZvZ014VGsxamc9PSIsInZhbHVlIjoiNm0za1l0dWVxcUduWVlUOGVOc21kdGxhRzhQU3pwVXhldFJacHRJK3BtMGlDa3hUM1NmQW9McnRJeDVQS2tvUUhkcTE0MHg2WjJDTm54Wkd2ME40bVdGdDZqU0tjazJ5bmRIb3JyanA2dXR4UjIrbHJQQ29CZnREREVvMnE5VTkiLCJtYWMiOiJlMmM3ZDc0ZDlmYmM1NjgzODJhOTM0NTkzZjcxYTE0MTE1NjU2OWM0NGVhMmJiNTk4MDRjNzkxNmRmM2I2OTY5IiwidGFnIjoiIn0%3D
2024-07-03 15:35:08 UTC	884	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:35:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6InE1WnNJb3l5d3Jqai8zR0dDTzZqcHc9PSIsInZhbHVlIjoiVytGd3hnZ2pxZitJQmE0V2trakw4Q1Z3TXowazlCZ01JSEJqOEpzbjFWNmxvRjd1TVBpOVM5OXZPdG9ZcHhOd2NUYWc0eGd2RTVUR21Tc0tjcEJwQkQ5OGcrOXl1Y2NmbjRwSzhneGZSWEQ2RWlMZzV4REFtb1V2ZDNQWlRzWm8iLCJtYWMiOiJiZDdhMmM3MWU3YzJiZjM3NWRkM2IwMGI5OWQxNzE1ZjE1NmFkMjQ1Nzk2NmU3MDY4MjRjZmE5NmRlMjIyYjcwIiwidGFnIjoiIn0%3D; expires=Wed, 03 Jul 2024 17:35:07 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; expires=Wed, 03 Jul 2024 17:35:07 GMT; Max-Age=7200; path=/; httponly; samesite=lax X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-07-03 15:35:08 UTC	13447	IN	Data Raw: 33 34 37 66 0d 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 09 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 2a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 Data Ascii: 347f<html><head><title></title><meta name="viewport" content="width=device-width, initial-scale=1" /><style type="text/css">* { box-sizing: border-box; } body, html { height: 10
2024-07-03 15:35:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49774	34.225.136.154	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:08 UTC	1229	OUT	POST /c361b6b574eaf9adb2fe8b6265ab571605542f7f HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive Content-Length: 47 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://certified-domain.cloudsurveillance.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; XSRF-TOKEN=eyJpdiI6InE1WnNJb3l5d3Jqai8zR0dDTzZqcHc9PSIsInZhbHVlIjoiVytGd3hnZ2pxZitJQmE0V2trakw4Q1Z3TXowazlCZ01JSEJqOEpzbjFWNmxvRjd1TVBpOVM5OXZPdG9ZcHhOd2NUYWc0eGd2RTVUR21Tc0tjcEJwQkQ5OGcrOXl1Y2NmbjRwSzhneGZSWEQ2RWlMZzV4REFtb1V2ZDNQWlRzWm8iLCJtYWMiOiJiZDdhMmM3MWU3YzJiZjM3NWRkM2IwMGI5OWQxNzE1ZjE1NmFkMjQ1Nzk2NmU3MDY4MjRjZmE5NmRlMjIyYjcwIiwidGFnIjoiIn0%3D
2024-07-03 15:35:08 UTC	47	OUT	Data Raw: 5f 74 6f 6b 65 6e 3d 61 6f 37 52 48 33 79 70 4c 6c 6a 75 7a 44 74 48 33 69 51 69 6c 37 79 63 64 6d 79 69 77 51 69 66 47 69 6b 6b 75 66 53 78 Data Ascii: _token=ao7RH3ypLljuzDtH3iQil7ycdmyiwQifGikkufSx
2024-07-03 15:35:08 UTC	824	IN	HTTP/1.1 204 No Content Date: Wed, 03 Jul 2024 15:35:08 GMT Connection: close Server: nginx Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IjNFMG42MThmNHIrdFRXNnozTCtEMUE9PSIsInZhbHVlIjoiam9MVlByMVh1WHJmWWxGWGVlWWdPMk14dlcxK3BzYmtDWnlLVVVzUmN3bnVqT2d0UXozelY1azJxaXBwQmtIUG5mRHlzQWt1d3RrNks4V21BL3pwdDBra0JYUEVMbmxtazZZelVmYWFtcmMrWW84b2szb01VSEtjR1ZPYzNXRmoiLCJtYWMiOiI3NTk0NDMyODVhN2I1MzI4YWZlNzdhMTk2MmY3NzliNDBlYTUwMWFlNjcyYWRjM2M2ZDgyNGViZDM0M2Q1NTJiIiwidGFnIjoiIn0%3D; expires=Wed, 03 Jul 2024 17:35:08 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; expires=Wed, 03 Jul 2024 17:35:08 GMT; Max-Age=7200; path=/; httponly; samesite=lax X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49776	34.120.202.204	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:10 UTC	703	OUT	POST /add/player-stats?beacon=1&session-id=beebcdcdf134139946ea4d5c0c4171137d9c2e671720020908 HTTP/1.1 Host: fresnel.vimeocdn.com Connection: keep-alive Content-Length: 1117 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://player.vimeo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:10 UTC	1117	OUT	Data Raw: 5b 7b 22 61 75 74 6f 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 66 61 6c 73 65 2c 22 63 6c 69 70 5f 69 64 22 3a 33 31 36 31 31 38 37 32 32 2c 22 63 6f 6e 74 65 78 74 22 3a 22 65 6d 62 65 64 2e 6d 61 69 6e 22 2c 22 64 65 76 69 63 65 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 31 2c 22 64 72 6d 22 3a 66 61 6c 73 65 2c 22 65 6d 62 65 64 22 3a 74 72 75 65 2c 22 69 73 5f 6d 6f 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 73 70 61 74 69 61 6c 22 3a 66 61 6c 73 65 2c 22 6c 6f 6f 70 69 6e 67 22 3a 66 61 6c 73 65 2c 22 6f 77 6e 65 72 5f 69 64 22 3a 39 31 30 31 38 31 38 38 2c 22 70 72 6f 64 75 63 74 22 3a 22 76 69 6d 65 6f 2d 76 6f 64 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 63 65 72 74 69 66 69 65 64 2d 64 6f 6d 61 Data Ascii: [{"autoplay":false,"background":false,"clip_id":316118722,"context":"embed.main","device_pixel_ratio":1,"drm":false,"embed":true,"is_mod":false,"is_spatial":false,"looping":false,"owner_id":91018188,"product":"vimeo-vod","referrer":"https://certified-doma
2024-07-03 15:35:10 UTC	263	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://player.vimeo.com Date: Wed, 03 Jul 2024 15:35:10 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49778	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:12 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SbBg58W+xeamAoo&MD=W21fK6dr HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-03 15:35:12 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 282aa63d-3a85-4dc7-8cb2-270a58b84b45 MS-RequestId: 776c5b4f-a113-443d-aa66-b757db81eb9e MS-CV: 307b6cYXhUOsEi94.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 03 Jul 2024 15:35:11 GMT Connection: close Content-Length: 30005
2024-07-03 15:35:12 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-07-03 15:35:12 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49779	34.225.136.154	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:31 UTC	1236	OUT	POST /submit/c361b6b574eaf9adb2fe8b6265ab571605542f7f HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive Content-Length: 47 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://certified-domain.cloudsurveillance.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://certified-domain.cloudsurveillance.net/9eeaa59b-909b-44da-89eb-fd0d929d008c Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; XSRF-TOKEN=eyJpdiI6IjNFMG42MThmNHIrdFRXNnozTCtEMUE9PSIsInZhbHVlIjoiam9MVlByMVh1WHJmWWxGWGVlWWdPMk14dlcxK3BzYmtDWnlLVVVzUmN3bnVqT2d0UXozelY1azJxaXBwQmtIUG5mRHlzQWt1d3RrNks4V21BL3pwdDBra0JYUEVMbmxtazZZelVmYWFtcmMrWW84b2szb01VSEtjR1ZPYzNXRmoiLCJtYWMiOiI3NTk0NDMyODVhN2I1MzI4YWZlNzdhMTk2MmY3NzliNDBlYTUwMWFlNjcyYWRjM2M2ZDgyNGViZDM0M2Q1NTJiIiwidGFnIjoiIn0%3D
2024-07-03 15:35:31 UTC	47	OUT	Data Raw: 5f 74 6f 6b 65 6e 3d 61 6f 37 52 48 33 79 70 4c 6c 6a 75 7a 44 74 48 33 69 51 69 6c 37 79 63 64 6d 79 69 77 51 69 66 47 69 6b 6b 75 66 53 78 Data Ascii: _token=ao7RH3ypLljuzDtH3iQil7ycdmyiwQifGikkufSx
2024-07-03 15:35:32 UTC	876	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 15:35:32 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6InI1dDJkNERybk41bFlSSDcwcGFML2c9PSIsInZhbHVlIjoiTWhnbENUWnVqQ09qN3F5THlWY25XQ2F1YWgzejRhdlBRZFNlMzVJTnozZm9VeWRzVEI1UG5ZZEtnQklxeTZWd2tjVjlZTC8xbmxGTi9XeEUvVE54YXRYU1RhNExEbVdvVVVTZUFBRXJxV2lrWk9pSnJ4aG1rZTVOcWhUVEQramEiLCJtYWMiOiI2ZjYzYmNmMGFjYTkzNTBmYmYwNDc4NDI4MmVkZDllNDM1MTdiNTk1ZjEzYzJjYTRkN2IxMGFlZThlNWFjMDQyIiwidGFnIjoiIn0%3D; expires=Wed, 03 Jul 2024 17:35:32 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; expires=Wed, 03 Jul 2024 17:35:32 GMT; Max-Age=7200; path=/; httponly; samesite=lax X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-07-03 15:35:32 UTC	15	IN	Data Raw: 61 0d 0a 22 72 65 63 6f 72 64 65 64 22 0d 0a Data Ascii: a"recorded"
2024-07-03 15:35:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49781	151.101.192.217	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:31 UTC	670	OUT	GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=700&mh=394 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:32 UTC	544	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4392 Cache-Control: max-age=2592000 Content-Type: image/avif Etag: "5f650a524cf12f89dac64d4aadc1ff0e" Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 1302839 Date: Wed, 03 Jul 2024 15:35:32 GMT X-Served-By: cache-dfw-kdfw8210131-DFW, cache-ewr18161-EWR X-Cache: HIT, MISS X-Cache-Hits: 64, 0 X-Timer: S1720020932.981473,VS0,VE39 Vary: Accept
2024-07-03 15:35:32 UTC	1379	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 10 0e 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 02 bc 00 00 01 8a 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 01 0d 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 01 00 0d 00 06 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD(iinfinfeav01ColorjiprpKipcoispepixiav1Ccolrnclx
2024-07-03 15:35:32 UTC	1379	IN	Data Raw: fb 7d 25 17 de e1 56 a0 13 b3 c3 d6 55 7c 65 85 c7 bf 58 e7 0d ad c6 9f 7c 61 bf c7 94 34 e6 bd 6c 81 26 e9 7e 45 4e de b1 f6 e0 6e 2b 0e ab d0 4b 69 99 b9 6b 6a 9c db 2f 2e f4 cb 44 47 e7 38 4f 14 91 ef e0 73 b8 47 b1 6d 49 90 40 bb 5e 77 ba 77 47 b2 3f 46 0f f1 d8 b5 3a 66 a9 df f8 8b 7b 98 27 be 72 f3 8a 61 54 81 32 78 fa 23 65 b0 04 7b 51 02 4d 66 5b 39 27 37 f8 cf b3 6a 76 f0 f7 06 5f 30 67 13 b0 83 33 9d 0c 43 e6 e3 94 8a 2e fa 2c 51 c0 c1 da aa bf 0c 45 9c 67 04 aa 92 41 8a 48 f0 d5 1c 4b fe 0d 19 3d b0 f1 f2 92 50 86 b3 e1 e8 26 02 57 af cd 6e fc 7d b1 c4 94 c5 6d 49 c4 44 d1 7c 49 16 fc 5e 86 17 c2 aa ef f2 d6 25 a5 ef 75 82 b3 a2 86 f3 56 c1 74 d1 01 43 86 b4 c2 c0 47 ad 00 1d 65 a0 5e f9 1b 8f 89 f4 db be 0c 51 13 eb 93 01 3d e5 cc cb e2 64 63 Data Ascii: }%VU\|eX\|a4l&~ENn+Kikj/.DG8OsGmI@^wwG?F:f{'raT2x#e{QMf[9'7jv_0g3C.,QEgAHK=P&Wn}mID\|I^%uVtCGe^Q=dc
2024-07-03 15:35:32 UTC	1379	IN	Data Raw: 2b 89 ae 15 4b 54 36 a7 d6 eb 35 65 84 82 ce 80 4b db 28 47 0e fd 6f 4a 58 e4 ec b9 12 20 27 c7 e4 6b d6 02 48 ad 50 32 b7 82 cc 1e 7c 53 3d 2d f5 bb 03 6f c8 b6 88 b7 ba e3 02 72 8a 0e 34 ec 2e 1d 08 f4 11 a0 f0 a8 37 a5 0f 48 ef e5 ba 90 d0 fc 1e 6a 1d bb 0b 6c 55 45 5d 34 d7 b3 6d 29 ca 25 41 52 8b 16 20 47 85 e8 e4 90 c5 7e e7 1f bc 93 7a aa 96 2f 66 5c d7 7f e4 e4 4f c1 18 d4 5c a9 b4 36 68 1a f8 e8 6a eb fa e0 04 25 8f 18 1d f0 0b e5 57 03 4d 38 2d d2 37 f3 84 83 53 ce 6a 6a 9e 07 fa d4 2e 4b 5e cf 79 49 1a 6b 5d ff 06 9c c8 e7 d6 a9 a5 f2 d2 cb 12 ac d3 e9 6f c6 ec e7 d9 0b 7b 21 da d9 00 f6 f0 cd a6 1d b8 1d 12 77 2f c1 10 5f f3 f0 d8 83 e1 6a 96 95 de e1 f5 cb 26 62 94 59 78 be b2 50 85 7a cd b3 1d 45 b8 80 a2 1c 49 93 69 4e f9 01 f5 fd 3d 0d f9 Data Ascii: +KT65eK(GoJX 'kHP2\|S=-or4.7HjlUE]4m)%AR G~z/f\O\6hj%WM8-7Sjj.K^yIk]o{!w/_j&bYxPzEIiN=
2024-07-03 15:35:32 UTC	255	IN	Data Raw: f9 a0 fe a9 08 94 5c 98 45 fa 5a 3f a9 7b 27 ee 5d 48 1b e7 ad df 97 b5 b3 ce c6 49 a4 09 f9 fe 09 1f 5f ed 19 9e c3 1d 5f 08 83 29 08 ac fa 0a 43 be 6e 26 14 77 0b 5d 74 72 74 9f 9b d6 2b a2 d8 9b ad 24 b5 ac 34 c4 e0 c5 2a 55 c0 4b 51 5e c3 74 77 df 75 d6 08 7d 92 30 e6 58 40 2e e9 30 fd ef 64 69 92 27 d3 fb f7 b6 72 33 1b 80 64 5b 95 15 cc f8 d2 48 93 33 4e 3c 6d 2f 73 73 07 28 75 7d 2b e5 f4 aa 65 c4 30 eb dc 07 64 20 3d 6f e1 2c 3d 59 87 f0 72 20 f0 bb c0 96 d0 ad 5c b7 78 2b 89 3c 8c c3 e8 8d 70 91 d0 29 df b9 27 22 e1 a8 c4 fe 78 b9 3f bb 10 70 74 cb ab 07 1a 88 b4 f6 5d f4 c4 47 9e 22 7d db 2a 13 aa 01 5d dd 49 83 a6 08 7c 93 4d 25 1f 84 6a b0 81 2a ca 04 09 b0 ad ae 4a 98 2c de 1f c1 f8 0d c0 a0 1c f1 9d 89 c7 af 03 9e 28 32 b5 7c d5 11 f5 c4 1c Data Ascii: \EZ?{']HI__)Cn&w]trt+$4UKQ^twu}0X@.0di'r3d[H3N<m/ss(u}+e0d =o,=Yr \x+<p)'"x?pt]G"}]I\|M%j*J,(2\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49782	151.101.64.217	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:32 UTC	434	OUT	GET /video/758058147-ad00a4029653b8883539aa90d644e62faac0f74c340abd31cf772c80cd07b8af-d?mw=700&mh=394 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:33 UTC	539	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8074 cache-control: max-age=2592000 content-type: image/jpeg etag: "14011415cacdc684ec26224d1046a7ad" Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 0 Date: Wed, 03 Jul 2024 15:35:33 GMT X-Served-By: cache-dfw-kdfw8210131-DFW, cache-ewr18181-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1720020933.614000,VS0,VE889 Vary: Accept
2024-07-03 15:35:33 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 01 8a 02 bc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 06 07 03 04 05 08 02 01 ff da 00 08 01 01 00 00 00 00 e1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}"
2024-07-03 15:35:33 UTC	1379	IN	Data Raw: 21 6d cb 4c a8 9a 61 00 3a 5d 92 71 95 c5 f4 b2 b9 7e 91 81 2b 8e ea 61 2c 95 db f2 d3 9c 2b aa 7b da 7c 2d a9 68 80 00 00 00 16 1a 23 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7f ff c4 00 31 10 00 02 02 03 00 01 01 07 02 03 09 00 00 00 00 00 04 05 03 06 01 02 07 00 13 10 11 12 14 15 16 36 17 20 21 32 40 25 30 33 34 37 50 60 a0 b0 ff da 00 08 01 01 00 01 08 00 ff 00 bc d2 a5 85 b9 60 32 f1 2c 35 66 d5 7d c5 d1 92 e0 08 68 70 80 8d 61 a9 38 ac 6a 2e cc 7f b8 8d 1b 99 44 f9 d8 ff 00 6a d5 e5 36 38 50 04 7d 43 b0 d7 01 c1 c7 7e ea 1d 0a b9 61 41 29 e7 97 14 70 14 54 31 79 55 e7 1f 73 22 dd af 99 c7 bb 39 c7 80 87 33 Data Ascii: !mLa:]q~+a,+{\|-h#16 !2@%0347P``2,5f}hpa8j.Dj68P}C~aA)pT1yUs"93
2024-07-03 15:35:33 UTC	1379	IN	Data Raw: 29 94 3d 81 83 6b f5 c6 3b 33 01 32 bf 52 8a d3 6d 76 d5 ed fa b9 63 aa ee b8 de 77 72 1e a8 59 da 9d d0 ee e1 d9 e3 5e 2a da ad a4 da ab 0c 94 3e dd 07 9d b3 cc 45 b1 ba f4 7d ec 23 6c b5 77 3f be 22 ac a2 24 13 eb f6 52 eb 6e 72 c8 49 ba 27 3f 6f 14 53 33 17 ae d7 36 10 b8 66 cf f1 ce 73 e2 23 21 5c e9 51 b3 f4 6b 9a 5b 48 aa e1 5b e0 53 68 39 a1 cd bf 45 bd 24 b5 2b 04 55 fc f6 c8 ba ae e4 93 4f 7f 63 5a ca ee 33 b1 fa 1d cd 2d a0 45 50 81 0d d7 9c b2 0c 58 59 9b d2 6b 69 d6 4a 15 5f 9d 5d 53 55 c5 69 1b 36 c4 c6 6b 46 45 44 c6 fc 80 ba 26 a8 a3 e7 37 94 95 55 a7 8c c6 a1 64 5c 8e dc 43 72 ef f6 10 2c cf b0 78 1c fe f8 8a b2 8c a0 4f 40 63 88 6c 10 4c 8f 6e aa 50 b8 f4 19 56 dc 32 35 21 2d 1b cd be 25 9a 69 31 5a 73 a5 7d d0 6c f7 de f9 cd dd 6b 89 1a Data Ascii: )=k;32RmvcwrY^*>E}#lw?"$RnrI'?oS36fs#!\Qk[H[Sh9E$+UOcZ3-EPXYkiJ_]SUi6kFED&7Ud\Cr,xO@clLnPV25!-%i1Zs}lk
2024-07-03 15:35:33 UTC	1379	IN	Data Raw: a6 af 0d c5 8b b8 42 24 c0 91 09 f9 85 7d 24 1a 6e a2 12 20 0e 90 27 3e 5f 5b 24 91 5d 59 dd f4 92 81 a4 59 a2 72 3c b5 2e 30 6b 72 34 77 91 25 d3 c3 a9 45 26 ba c4 d0 d8 04 1c 48 e8 ac 5c fa b9 e0 0a ea 0e 25 e0 85 99 c3 c6 eb ea 19 6b ac 4b 2d f9 5c 94 49 52 3f ee a7 26 ae 0c f6 37 04 88 e4 61 86 56 5f 75 ab a9 b5 b4 52 46 b2 68 56 11 84 46 ed ad da be 93 30 36 f0 bc 8d a6 64 9b 85 1e 6b c1 fe ad fb 66 f9 0d 58 43 72 2e 52 46 25 dc ae 34 10 38 c5 74 5b 64 5b 99 d6 22 e2 46 24 6a af d7 b8 ff 00 05 a2 44 62 1b 65 3b 7e 50 71 9a ce b3 70 03 85 f3 8b df cf c3 14 42 dd c3 24 ae 87 cf 08 54 d0 cb bc d0 b1 23 b8 8a e3 87 fe ed 05 58 a7 88 a3 7e 01 8d 10 8f e6 45 47 8b 63 6c 26 8f fe 22 51 a1 a9 b3 0c 4f b1 0f f0 45 c7 b3 fd 59 77 ff 00 b5 01 a7 7f 8f e2 d2 74 Data Ascii: B$}$n '>_[$]YYr<.0kr4w%E&H\%kK-\IR?&7aV_uRFhVF06dkfXCr.RF%48t[d["F$jDbe;~PqpB$T#X~EGcl&"QOEYwt
2024-07-03 15:35:33 UTC	1379	IN	Data Raw: 61 52 7d e2 3b b5 36 f3 4e 4f 89 8d cf 12 86 39 3f 91 ae 8e fe 25 07 1b b6 cb 31 1f 93 0a b3 30 da c5 20 93 76 40 37 09 5e da 47 ba 2a c2 6d 6b a4 b0 55 2e 85 d7 de 42 a4 15 ae 97 71 6b 62 30 55 d1 35 3c ae 7b 96 c9 ad df 06 6e a7 97 85 cb e9 90 10 38 a1 30 48 2d 4c 4f ba 9a 0e ad 59 a1 72 66 7b 97 94 6d 47 a8 60 a8 15 9d 1b fa fe 38 d5 9a 17 22 54 b9 49 0e e4 7a 46 02 91 5f 47 8a 78 68 56 25 26 21 37 61 e4 c3 06 ba 43 09 1f 91 98 f6 e3 d5 ea fe 6d 4d a9 e4 62 ec 7d 4b 1c 93 fe c2 ac 46 55 52 84 48 ba 81 56 ee 2b e8 e0 2e 3c d2 7a b7 4b 2b 49 38 91 51 8b 3c 83 d0 b7 fd 80 4f ff c4 00 27 11 00 03 01 01 00 01 03 03 03 05 00 00 00 00 00 00 02 03 04 01 05 13 00 06 12 11 14 15 16 21 80 22 30 31 32 50 ff da 00 08 01 02 01 01 0c 00 fe 74 d3 d1 62 3b 12 cb a4 02 Data Ascii: aR};6NO9?%10 v@7^G*mkU.Bqkb0U5<{n80H-LOYrf{mG`8"TIzF_GxhV%&!7aCmMb}KFURHV+.<zK+I8Q<O'!"012Ptb;
2024-07-03 15:35:33 UTC	1179	IN	Data Raw: ff c4 00 27 11 00 03 01 01 00 01 03 03 03 05 00 00 00 00 00 00 02 03 04 05 01 13 00 06 12 11 14 15 16 21 80 22 30 31 32 50 ff da 00 08 01 03 01 01 0c 00 fe 74 cd 9c b7 e3 d7 5f 04 c9 e9 cc 0e e4 dd 5b 41 82 d4 61 68 bd 40 d1 58 8f 0f 3e a5 ce c7 98 7d 05 f9 b5 ce 12 9b 17 fb 51 1b a6 a7 b3 33 e3 e4 d2 c2 6c 28 4b 84 be 5c fd 3f a7 e3 f9 f8 87 e5 de 77 9d ef 3b cf a7 60 c4 45 30 89 b5 84 34 84 14 32 6a 28 11 e7 c0 33 6b 62 10 e0 0e 77 94 61 68 4c 93 69 00 17 2b 98 ce 4c 91 5c 20 07 9b ed d6 0d 3d e5 aa 03 5a 00 58 f4 81 7f 87 e7 61 aa ee 40 5f 74 2d 9f 0c 48 36 11 d0 e3 28 7e 55 70 32 62 72 80 c2 cc ca 2a d1 a1 69 91 68 e6 7e 47 07 4e 64 57 c5 b1 75 e1 5d 3a dc ff 00 18 f8 dd 21 3a 3c 80 5c 6b 59 9f b7 74 c0 18 5d 58 77 b1 e4 d9 72 c9 ab 11 15 db 99 5e 78 Data Ascii: '!"012Pt_[Aah@X>}Q3l(K\?w;`E042j(3kbwahLi+L\ =ZXa@_t-H6(~Up2br*ih~GNdWu]:!:<\kYt]Xwr^x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	49783	44.193.44.29	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:32 UTC	830	OUT	GET /submit/c361b6b574eaf9adb2fe8b6265ab571605542f7f HTTP/1.1 Host: certified-domain.cloudsurveillance.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; XSRF-TOKEN=eyJpdiI6InI1dDJkNERybk41bFlSSDcwcGFML2c9PSIsInZhbHVlIjoiTWhnbENUWnVqQ09qN3F5THlWY25XQ2F1YWgzejRhdlBRZFNlMzVJTnozZm9VeWRzVEI1UG5ZZEtnQklxeTZWd2tjVjlZTC8xbmxGTi9XeEUvVE54YXRYU1RhNExEbVdvVVVTZUFBRXJxV2lrWk9pSnJ4aG1rZTVOcWhUVEQramEiLCJtYWMiOiI2ZjYzYmNmMGFjYTkzNTBmYmYwNDc4NDI4MmVkZDllNDM1MTdiNTk1ZjEzYzJjYTRkN2IxMGFlZThlNWFjMDQyIiwidGFnIjoiIn0%3D
2024-07-03 15:35:32 UTC	788	IN	HTTP/1.1 404 Not Found Date: Wed, 03 Jul 2024 15:35:32 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IklMSmNKV21xa3dIdDZvU2JQODVGbXc9PSIsInZhbHVlIjoicEhkM2hGcVlOSUQ5R21xVEs1NXdQTmRORFpUZ2RjaitWWnVZUVBiQklYNUZ5emZGN1ZFMUE5ZmhRQmduMFBvSytnYjY3Q2haN0VDTkpXQkMrbFdNblJrQ0JHbVcwQWt3b04ydTNaOHovQ3dpSW9RR09BUngyNWptWW5ydFZvRXciLCJtYWMiOiI3YjZkYzE0NTljZGNjYTRmOGE4NTE1ZjYxMTg0Yzg5NzE0MTFjOGJhZjU0NTRmYTcyZjE1NTBlYzFmZDJlZjRhIiwidGFnIjoiIn0%3D; expires=Wed, 03 Jul 2024 17:35:32 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: bpid_lp_session=AAP2bipBG5bX1MEkGGNeQZ5AvPb5M2ymIipuSoiA; expires=Wed, 03 Jul 2024 17:35:32 GMT; Max-Age=7200; path=/; httponly; samesite=lax
2024-07-03 15:35:32 UTC	12	IN	Data Raw: 37 0d 0a 22 65 72 72 6f 72 22 0d 0a Data Ascii: 7"error"
2024-07-03 15:35:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	49784	34.120.202.204	443	7116	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-03 15:35:32 UTC	703	OUT	POST /add/player-stats?beacon=1&session-id=beebcdcdf134139946ea4d5c0c4171137d9c2e671720020908 HTTP/1.1 Host: fresnel.vimeocdn.com Connection: keep-alive Content-Length: 1445 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://player.vimeo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 15:35:32 UTC	1445	OUT	Data Raw: 5b 7b 22 61 75 74 6f 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 62 75 66 66 65 72 5f 63 6f 75 6e 74 22 3a 30 2c 22 74 6f 74 61 6c 5f 62 75 66 66 65 72 5f 64 75 72 61 74 69 6f 6e 22 3a 30 2c 22 62 75 66 66 65 72 5f 72 61 74 69 6f 22 3a 30 2c 22 63 6c 69 65 6e 74 5f 74 69 6d 65 22 3a 32 34 33 37 38 2e 31 39 39 39 39 39 39 39 39 39 38 33 2c 22 69 73 5f 62 75 66 66 65 72 69 6e 67 22 3a 66 61 6c 73 65 2c 22 6c 6f 6f 70 69 6e 67 22 3a 66 61 6c 73 65 2c 22 6d 69 6e 75 74 65 73 5f 77 61 74 63 68 65 64 22 3a 30 2c 22 6e 65 74 77 6f 72 6b 5f 73 74 61 74 65 22 3a 30 2c 22 70 6c 61 79 62 61 63 6b 5f 72 61 74 65 22 3a 31 2c 22 70 6c 61 79 65 72 5f 77 69 64 74 68 22 3a 36 34 38 2e 38 37 35 2c 22 70 6c 61 79 65 72 5f 68 65 69 67 68 74 22 3a 33 36 35 2c 22 73 65 73 73 69 6f Data Ascii: [{"autoplay":false,"buffer_count":0,"total_buffer_duration":0,"buffer_ratio":0,"client_time":24378.199999999983,"is_buffering":false,"looping":false,"minutes_watched":0,"network_state":0,"playback_rate":1,"player_width":648.875,"player_height":365,"sessio
2024-07-03 15:35:33 UTC	263	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://player.vimeo.com Date: Wed, 03 Jul 2024 15:35:33 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	11:34:24
Start date:	03/07/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\Service Desk - Please verify your Account!.eml"
Imagebase:	0xe30000
File size:	34'446'744 bytes
MD5 hash:	91A5292942864110ED734005B7E005C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:34:33
Start date:	03/07/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "4DB382AA-9CF7-4B0F-B694-AFE8613678B8" "DCFA8FFF-E2DF-40B9-8F92-B340B9B00730" "5980" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Imagebase:	0x7ff6edc40000
File size:	710'048 bytes
MD5 hash:	EC652BEDD90E089D9406AFED89A8A8BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	11:34:44
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	11:34:45
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1964,i,16825308507331499111,4604762926170312255,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	11:35:06
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://service-noreply.info/c361b6b574eaf9adb2fe8b6265ab571605542f7f
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	11:35:06
Start date:	03/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1876,i,4678980704979854347,7524290499172280703,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Service Desk - Please verify your Account!.eml

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\B526F1CD-9D11-4AF3-B061-3462913F8AB4

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{8A767E77-70E3-446B-AA49-E5C8A08C1C63}.tmp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{EAD067EE-9D7C-4A6D-9437-94F317187D02}.tmp

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1720020872003612300_788488EE-0110-416F-BC2C-501233654F4B.log

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1720020872004348200_788488EE-0110-416F-BC2C-501233654F4B.log

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240703T1134240707-5980.etl

C:\Users\user\AppData\Local\Temp\msoB5DD.tmp

C:\Users\user\AppData\Local\Temp\~DF03D252FC0DEF7077.TMP

C:\Users\user\AppData\Local\Temp\~DF062704B4AE1E5121.TMP

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

C:\Users\user\AppData\Roaming\Microsoft\Outlook\NoEmail.srs

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Windows Analysis Report
Service Desk - Please verify your Account!.eml