Edit tour

Windows Analysis Report
https://aka.ms/LearnAboutSenderIdentification

Overview

General Information

Sample URL:	https://aka.ms/LearnAboutSenderIdentification
Analysis ID:	1467975
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2700 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2280,i,5128880978760814452,2696330715248247459,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/LearnAboutSenderIdentification" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=432ece6dcac6428aa4d7ff4ce502936a&version=2.4.0 HTTP/1.1Host: target.microsoft.comConnection: keep-aliveContent-Length: 1279sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.microsoft.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; ak_bmsc=17701768D2288A18C404A699826805F5~000000000000000000000000000000~YAAQvI4UArUvanSQAQAA/BB2gRi78VWk02BMQWOBsmx+5x1B57V3ydaBqRo7Bve6bSHZ4ScI7UriMlESGemf+2OAbi70bwWhYdSwqlW/ZFF4Zt7P4K3F+oT8Cv4I+LXEdzO2jBn34aDGLLxyuYYmM4JrXK4jjGncocFZs04HEIcyJpRT6/AVHBtbNTdPXYrfsqIN1KY3uKTCJo9ODgcnYEhy1Mh/KEwnkhfUduQsQ56uwDXsFu5ANdXozVBH/t7IzK4Nsv67pKcez1rjiH+hGOPbKcqbX7+HGLky+xSAik81x+eY5d4OytyUQ+cyRqcA6yE/oPecfwoSmCqQM+d8a+hHQJSOXheY/ouSA++zDp6rjbTE0D/+w9zff5Q=; MS0=203ae4f83d6245fd92ff0d1112d881f2; bm_sv=8285EBDF91693D0D2DFAF2259D7EDF3D~YAAQvI4UAqgwanSQAQAAQ312gRhy4k2O1CRrb6JbIQY5hDPsgRsW0bFlXqhqH2+FQePmdH0xkflwK4e5J0sYX6vnxBqQPCJjVca7xe3qqO8cGLbSQk5JYZkjk0Ru7VhElIJA/KPAZteHxs/p2PK7Urs3SUoOIuefS7l/jwtR2Xdq7ZNIpcQLo3SBQcBhLTM8elDl/huDtjzWxpLzGFw89q/N4Ele5HMtVpFfZEvzYd6sfDvRha73fP/2gmPw0sxtVwIj~1; fptctx2=H3ihr9e92IdW6yd1ZgQ9S6iHaRiejIdk0aIJJ5j7uH7CWNo7dqr52PwJZry1cbhygyB%252brABH3rQfTxQrePXgCMJtVZae4n1cMVZZkjV7EpUXcuG5pOCTM5fZgYff49gOubTYh%252f0AGkKTPtoA6LfpgborG1KTZ%252b3rCfGcAk6mrIX2pLuSmIQrQYVTgjyhZv6lll%252fPX7y26SUXG0EQpXhuzUMWF55c15oidRJ6VylCMQ6QXBB5SKaT1YwfpcSSK4F3J8%252bkdF3HbB4PB%252fgxTzr5k6oyZWPEwvGZtcnhfdihGPP2KMDEtbWyblHcU191LNnxErtOMHs4ttPxrkM0leB1TQ%253d%253d; MSCC=NR; at_check=true; mbox=session#432ece6dcac6428aa4d7ff4ce502936a#1720160843; IR_gbd=microsoft.com; IR_7593=1720158983322%7C0%7C1720158983322%7C%7C; AMCVS_EA76ADE95776D2EC7F000101%40AdobeOrg=1; AMCV_EA76ADE95776D2EC7F000101%40AdobeOrg=1585540135%7CMCIDTS%7C19910%7CMCMID%7C69033594961269014164161478179349221869%7CMCAAMLH-1720763784%7C6%7CMCAAMB-1720763784%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCCIDH%7C443854560%7CMCOPTOUT-1720166184s%7CNONE%7CvVersion%7C4.4.0; _uetsid=500865003a9311efa3157de28562dd34; _uetvid=500894403a9311ef82442739606a71aa

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 05 Jul 2024 05:56:34 GMTContent-Type: text/plain; charset=UTF-8Content-Length: 42Connection: close

Source: chromecache_464.2.dr	String found in binary or memory: http://aka.ms/corebenefits
Source: chromecache_421.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_369.2.dr	String found in binary or memory: http://github.com/aFarkas/lazysizes
Source: chromecache_315.2.dr, chromecache_513.2.dr, chromecache_501.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_486.2.dr	String found in binary or memory: http://github.com/requirejs/domReady
Source: chromecache_486.2.dr	String found in binary or memory: http://github.com/requirejs/requirejs/LICENSE
Source: chromecache_423.2.dr	String found in binary or memory: http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3
Source: chromecache_535.2.dr	String found in binary or memory: http://img-prod-cms-rt-microsoft-com.akamaized.net/launch/store/launch-ENf7805d09fd1b455883333cdf34e
Source: chromecache_549.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_364.2.dr, chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_278.2.dr, chromecache_453.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_421.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_549.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_504.2.dr	String found in binary or memory: https://MicrosoftAdvertising.com/support
Source: chromecache_364.2.dr	String found in binary or memory: https://accdn.lpsnmedia.net
Source: chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Source: chromecache_504.2.dr	String found in binary or memory: https://aka.ms/28808
Source: chromecache_464.2.dr	String found in binary or memory: https://aka.ms/SVAFAQ
Source: chromecache_504.2.dr	String found in binary or memory: https://aka.ms/educationsales
Source: chromecache_364.2.dr	String found in binary or memory: https://aka.ms/edusupport
Source: chromecache_364.2.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_364.2.dr	String found in binary or memory: https://analytics.tiktok.com
Source: chromecache_306.2.dr	String found in binary or memory: https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b
Source: chromecache_367.2.dr, chromecache_514.2.dr, chromecache_425.2.dr, chromecache_406.2.dr, chromecache_479.2.dr, chromecache_457.2.dr	String found in binary or memory: https://assets.onestore.ms
Source: chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c
Source: chromecache_462.2.dr	String found in binary or memory: https://axios-http.com
Source: chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: https://az725175.vo.msecnd.net/scripts/jsll-4.js
Source: chromecache_438.2.dr	String found in binary or memory: https://breeze.aimon.applicationinsights.io
Source: chromecache_398.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=12681
Source: chromecache_398.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_398.2.dr	String found in binary or memory: https://bugzil.la/548397
Source: chromecache_398.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=277178
Source: chromecache_398.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=308064
Source: chromecache_424.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_364.2.dr	String found in binary or memory: https://cdnssl.clicktale.net
Source: chromecache_364.2.dr	String found in binary or memory: https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js
Source: chromecache_504.2.dr	String found in binary or memory: https://checkout.office.com/acquire/purchase
Source: chromecache_504.2.dr	String found in binary or memory: https://checkout.office.com/acquire/purchase/
Source: chromecache_364.2.dr	String found in binary or memory: https://d.impactradius-event.com
Source: chromecache_438.2.dr	String found in binary or memory: https://dc-int.services.visualstudio.com
Source: chromecache_438.2.dr	String found in binary or memory: https://dc.services.visualstudio.com
Source: chromecache_398.2.dr	String found in binary or memory: https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494
Source: chromecache_398.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values
Source: chromecache_464.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Accessibility/ARIA/Roles/Alert_Role
Source: chromecache_398.2.dr	String found in binary or memory: https://elad.medium.com/css-position-sticky-how-it-really-works-54cd01dc2d46
Source: chromecache_423.2.dr	String found in binary or memory: https://eus-streaming-video-rt-microsoft-com.akamaized.net/0f937af8-d731-4ff2-a223-053a9189b20e/91f6
Source: chromecache_516.2.dr, chromecache_423.2.dr	String found in binary or memory: https://eus-streaming-video-rt-microsoft-com.akamaized.net/7070043d-58fb-4f43-b0cf-89f6dbf4bb38/91f6
Source: chromecache_462.2.dr	String found in binary or memory: https://github.com/axios/axios.git
Source: chromecache_462.2.dr	String found in binary or memory: https://github.com/axios/axios/issues
Source: chromecache_287.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_549.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/es-shims/es5-shim/issues/150
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/kitcambridge/es5-shim/commit/4f738ac066346
Source: chromecache_397.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/tc39/proposal-array-filtering
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/w3c/aria-practices/pull/1757
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.27.2/LICENSE
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1128
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1130
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/475
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/677
Source: chromecache_398.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_364.2.dr, chromecache_514.2.dr, chromecache_425.2.dr, chromecache_406.2.dr, chromecache_479.2.dr, chromecache_457.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net
Source: chromecache_364.2.dr, chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: chromecache_543.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIiW?ver=c095
Source: chromecache_434.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIj6?ver=98df
Source: chromecache_542.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dNAQ?ver=5ff6
Source: chromecache_371.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dQ5q?ver=8edc
Source: chromecache_520.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1ljxA?ver=f018
Source: chromecache_398.2.dr	String found in binary or memory: https://javascript.info/size-and-scroll-window#width-height-of-the-document
Source: chromecache_569.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_569.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_569.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_364.2.dr	String found in binary or memory: https://js.monitor.azure.com
Source: chromecache_504.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js
Source: chromecache_398.2.dr	String found in binary or memory: https://keycode.info/table-of-all-keycodes
Source: chromecache_385.2.dr	String found in binary or memory: https://login.live.com/Me.srf?wa
Source: chromecache_364.2.dr	String found in binary or memory: https://login.live.com/me.srf?wa=wsignin1.0
Source: chromecache_288.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_385.2.dr	String found in binary or memory: https://login.microsoftonline.com/forgetuser
Source: chromecache_385.2.dr	String found in binary or memory: https://login.microsoftonline.com/savedusers?appid
Source: chromecache_385.2.dr	String found in binary or memory: https://login.microsoftonline.com/uxlogout?appid
Source: chromecache_288.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_364.2.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net
Source: chromecache_567.2.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net/le/apps/campaigns/1.15.0-release_1226688692/img/engagementWindow/no-imag
Source: chromecache_504.2.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net/le_unified_window/10.13.0.5-release_5314/resources/icons/desktop/sprites
Source: chromecache_504.2.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7
Source: chromecache_364.2.dr	String found in binary or memory: https://lptag.liveperson.net
Source: chromecache_504.2.dr	String found in binary or memory: https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailabili
Source: chromecache_364.2.dr, chromecache_514.2.dr, chromecache_425.2.dr, chromecache_406.2.dr, chromecache_479.2.dr, chromecache_457.2.dr	String found in binary or memory: https://mem.gfx.ms
Source: chromecache_462.2.dr	String found in binary or memory: https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/
Source: chromecache_367.2.dr, chromecache_514.2.dr, chromecache_425.2.dr, chromecache_406.2.dr, chromecache_479.2.dr, chromecache_457.2.dr	String found in binary or memory: https://microsoftwindows.112.2o7.net
Source: chromecache_364.2.dr	String found in binary or memory: https://office.com/systemrequirements
Source: chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: https://onedrive.live.com/about/en-us/
Source: chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: https://outlook.live.com/owa/
Source: chromecache_424.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_424.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_516.2.dr, chromecache_423.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-enus?ver=e63f
Source: chromecache_516.2.dr, chromecache_423.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-tscriptenus?v
Source: chromecache_508.2.dr, chromecache_542.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dIiN-enus?ver=918b
Source: chromecache_508.2.dr, chromecache_542.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dIiN-tscriptenus?v
Source: chromecache_452.2.dr, chromecache_371.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dNAH-enus?ver=6d43
Source: chromecache_452.2.dr, chromecache_371.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dNAH-tscriptenus?v
Source: chromecache_401.2.dr, chromecache_434.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5E-enus?ver=77bf
Source: chromecache_401.2.dr, chromecache_434.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5E-tscriptenus?v
Source: chromecache_523.2.dr, chromecache_543.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5z-enus?ver=2419
Source: chromecache_523.2.dr, chromecache_543.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5z-tscriptenus?v
Source: chromecache_498.2.dr, chromecache_520.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1gt0F-enus?ver=0b82
Source: chromecache_498.2.dr, chromecache_520.2.dr	String found in binary or memory: https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1gt0F-tscriptenus?v
Source: chromecache_364.2.dr	String found in binary or memory: https://products.office.com/en-us/free-productivity-apps
Source: chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: https://products.office.com/en-us/home
Source: chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: https://products.office.com/en-us/microsoft-teams/free?icid=SSM_AS_Promo_Apps_MicrosoftTeams
Source: chromecache_364.2.dr	String found in binary or memory: https://products.office.com/microsoft-office-for-home-and-school-faq#cd6f27d6-3bb0-22a8-9228-1385af8
Source: chromecache_364.2.dr	String found in binary or memory: https://publisher.liveperson.net
Source: chromecache_364.2.dr	String found in binary or memory: https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-m3
Source: chromecache_364.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_504.2.dr	String found in binary or memory: https://signup-local.azure.com/
Source: chromecache_504.2.dr	String found in binary or memory: https://signup-staging.azure.com/
Source: chromecache_504.2.dr	String found in binary or memory: https://signup.azure.com/
Source: chromecache_569.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_464.2.dr	String found in binary or memory: https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.css
Source: chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: https://statics-marketingsites-wcus-ms-com.akamaized.net/statics/override.css?c=7
Source: chromecache_504.2.dr	String found in binary or memory: https://stores.office.com/
Source: chromecache_504.2.dr	String found in binary or memory: https://stores.office.com/subscription/acquire
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/ar-sa/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/cs-cz/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/da-dk/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/de-ch/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/de-de/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/en-ae/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/en-ca/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/en-gb/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/en-ie/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/en-in/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/en-ng/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_364.2.dr	String found in binary or memory: https://support.office.com/en-us/article/accounts-in-office-628ea040-f265-49de-b986-be09c3ebf8a9
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/en-us/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_364.2.dr	String found in binary or memory: https://support.office.com/en-us/article/what-s-new-in-office-365-95c8d81d-08ba-42c1-914f-bca4603e14
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/en-za/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/es-cl/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/es-co/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/es-es/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/es-mx/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/fi-fi/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/fr-ch/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/fr-fr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/he-il/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/hu-hu/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/id-id/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/it-it/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/ja-jp/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/ko-kr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/nb-no/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/nl-nl/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/pl-pl/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/pt-br/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/pt-pt/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/ru-ru/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/sk-sk/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/sv-se/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/th-th/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/tr-tr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/vi-vn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/zh-cn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/zh-hk/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.office.com/zh-tw/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655
Source: chromecache_464.2.dr	String found in binary or memory: https://support.xbox.com
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype-
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.every
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.filter
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.find
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.findIndex
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.foreach
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.map
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.push
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.some
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.splice
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-arrayspeciescreate
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isarray
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isconstructor
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isregexp
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.create
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperties
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.entries
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.keys
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.tostring
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.values
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-parseint-string-radix
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.includes
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trim
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimend
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimstart
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_398.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey
Source: chromecache_424.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_364.2.dr	String found in binary or memory: https://templates.office.com
Source: chromecache_389.2.dr	String found in binary or memory: https://ussearchprod.trafficmanager.net/services/api/v1.0/store/categories
Source: chromecache_504.2.dr	String found in binary or memory: https://va.idp.liveperson.net
Source: chromecache_504.2.dr	String found in binary or memory: https://va.msg.liveperson.net
Source: chromecache_520.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/0cbe2c53-0003-4d1e-9525-0e16f60ade36/090e
Source: chromecache_543.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/183eadcc-f9fc-4452-9819-10034235660b/bb1f
Source: chromecache_498.2.dr, chromecache_520.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/1b44d7e6-13b9-467b-ad7c-03533be2c5fb/090e
Source: chromecache_371.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/1ebdc0bd-611c-4adf-aa3b-46e3ab48d080/2103
Source: chromecache_523.2.dr, chromecache_543.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/3a18a532-88da-4d8d-8540-d8fb7e1fcafd/bb1f
Source: chromecache_434.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/3ccef210-b6ef-4e48-950d-5c21a0c9cb8c/50ff
Source: chromecache_520.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/4ef3f98b-6e2d-4ee8-95bc-2dc15cfaacec/090e
Source: chromecache_452.2.dr, chromecache_371.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/9e3ad847-da3d-4ac4-9723-9044fe5f42c4/2103
Source: chromecache_542.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/bb5a48a6-b5b9-4fc7-a1d7-e032f3077253/d61b
Source: chromecache_401.2.dr, chromecache_434.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/eebb33d0-226f-4448-8435-eea66f35c952/50ff
Source: chromecache_508.2.dr, chromecache_542.2.dr	String found in binary or memory: https://wus-streaming-video-rt-microsoft-com.akamaized.net/fb44ea7d-f2c8-487c-a2e4-29388f950997/d61b
Source: chromecache_464.2.dr	String found in binary or memory: https://www.21vbluecloud.com/dynamics365/
Source: chromecache_364.2.dr	String found in binary or memory: https://www.clarity.ms
Source: chromecache_433.2.dr	String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_424.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_424.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_424.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_464.2.dr	String found in binary or memory: https://www.microsoftestore.com.hk/partner?locale=zh_HK
Source: chromecache_504.2.dr	String found in binary or memory: https://www.microsoftstore.com.cn/
Source: chromecache_364.2.dr	String found in binary or memory: https://www.office.com/?auth=1
Source: chromecache_364.2.dr	String found in binary or memory: https://www.office.com/?auth=2
Source: chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.onenote.com/
Source: chromecache_364.2.dr, chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	String found in binary or memory: https://www.skype.com/en/
Source: chromecache_317.2.dr	String found in binary or memory: https://www.xbox.com/
Source: chromecache_364.2.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/pc-game-pass/cfq7ttc0kgq8?icid=CNavAllPCGamePass
Source: chromecache_364.2.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50406
Source: unknown	Network traffic detected: HTTP traffic on port 50297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 50358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 50231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 50351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 50261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 50361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 50228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50344 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@33/557@199/56

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2280,i,5128880978760814452,2696330715248247459,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/LearnAboutSenderIdentification"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2280,i,5128880978760814452,2696330715248247459,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://aka.ms/LearnAboutSenderIdentification	0%	Avira URL Cloud	safe
https://aka.ms/LearnAboutSenderIdentification	0%	Virustotal		Browse

Source	Detection	Scanner	Link
s.tribalfusion.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
eu-eb2.3lift.com	0%	Virustotal	Browse
sni1gl.wpc.alphacdn.net	0%	Virustotal	Browse
s-part-0014.t-0009.t-msedge.net	0%	Virustotal	Browse
bttrack.com	0%	Virustotal	Browse
idsync.rlcdn.com	0%	Virustotal	Browse
c.ba.contentsquare.net	0%	Virustotal	Browse
global.px.quantserve.com	0%	Virustotal	Browse
sync.crwdcntrl.net	0%	Virustotal	Browse
dco-ats-00-1379651868.us-west-2.elb.amazonaws.com	0%	Virustotal	Browse
adobetarget.data.adobedc.net	0%	Virustotal	Browse
sni1gl.wpc.omegacdn.net	0%	Virustotal	Browse
cm.g.doubleclick.net	0%	Virustotal	Browse
d.impactradius-event.com	0%	Virustotal	Browse
rtb.adentifi.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	0%	Virustotal	Browse
dualstack.tls13.taboola.map.fastly.net	0%	Virustotal	Browse
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	0%	Virustotal	Browse
msftenterprise.sc.omtrdc.net	0%	Virustotal	Browse
us-u.openx.net	0%	Virustotal	Browse
match.adsrvr.org	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
sync.srv.stackadapt.com	0%	Virustotal	Browse
microsoftwindows.112.2o7.net	0%	Virustotal	Browse
aka.ms	0%	Virustotal	Browse
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse
srm.bf.contentsquare.net	0%	Virustotal	Browse
k.bf.contentsquare.net	NaN%	Virustotal	Browse
aragorn-prod-uk-acai-lb.inbake.com	0%	Virustotal	Browse
googleads.g.doubleclick.net	0%	Virustotal	Browse
s.twitter.com	0%	Virustotal	Browse
q-aus1.contentsquare.net	0%	Virustotal	Browse
a.tribalfusion.com	0%	Virustotal	Browse
pug-ams-bc.pubmnet.com	0%	Virustotal	Browse
d1xbuscas8tetl.cloudfront.net	0%	Virustotal	Browse
dh1y47vf5ttia.cloudfront.net	0%	Virustotal	Browse
ib.anycast.adnxs.com	1%	Virustotal	Browse
dsum-sec.casalemedia.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://login.microsoftonline.com/uxlogout?appid	0%	Avira URL Cloud	safe
https://ats.everesttech.net/ats/ats?cmd=RT&AdvertiserID=4249&platform=TUMRI&ActionID=20114&ActionName=Microsoft_Store_RT_Pixel&ut1=&ut2=en&ut3=us&cachebuster=922783656	0%	Avira URL Cloud	safe
https://github.com/mozilla/rhino/issues/346	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-object.prototype.tostring	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-arrayspeciescreate	0%	Avira URL Cloud	safe
https://outlook.live.com/owa/	0%	Avira URL Cloud	safe
https://aka.ms/educationsales	0%	Avira URL Cloud	safe
https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=ZoeLCQAAANwNIAN6	0%	Avira URL Cloud	safe
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZoeLCQAAANwNIAN6&C=1	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js	0%	Avira URL Cloud	safe
https://assets.onestore.ms	0%	Avira URL Cloud	safe
https://dmpsync.3lift.com/getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D	0%	Avira URL Cloud	safe
https://support.office.com/tr-tr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://cdnssl.clicktale.net/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	0%	Avira URL Cloud	safe
https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-array.prototype.push	0%	Avira URL Cloud	safe
https://cdnssl.clicktale.net/www/bridge-WR110.js	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://bugs.chromium.org/p/v8/issues/detail?id=12681	0%	Avira URL Cloud	safe
https://lptag.liveperson.net	0%	Avira URL Cloud	safe
https://github.com/tc39/proposal-array-filtering	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=477&dpuuid=3f70fdc17f2be172a9c39a131e721f634f7c24732ad6d96ed30f06f467d8c964b0da87c991749652	0%	Avira URL Cloud	safe
https://c.clicktale.net/pageEvent?value=H4sIAAAAAAAAAwsIcVZwD%2FV0UahRMDBNMTYyNjPWTTE1NtE1SbE01rVMMjPVTU5JNTM3MTc3TTU3BAC5OujJLwAAAA%3D%3D&ct=2&isETR=false&isCustomHashId=false&v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6&r=733361	0%	Avira URL Cloud	safe
https://www.facebook.com/tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1720158983054	0%	Avira URL Cloud	safe
https://support.office.com/ar-sa/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-tointegerorinfinity	0%	Avira URL Cloud	safe
https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	0%	Avira URL Cloud	safe
https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b	0%	Avira URL Cloud	safe
https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=68751917230853503114135629145946568930&gdpr=0&gdpr_consent=&uid=68751917230853503114135629145946568930&verify=true	0%	Avira URL Cloud	safe
https://github.com/es-shims/es5-shim/issues/150	0%	Avira URL Cloud	safe
https://github.com/w3c/aria-practices/pull/1757	0%	Avira URL Cloud	safe
https://axios-http.com	0%	Avira URL Cloud	safe
https://d.impactradius-event.com	0%	Avira URL Cloud	safe
https://github.com/microsoft/clarity	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=390122&dpuuid=RO9hsv43VjtJegiqx3XZlggueyE	0%	Avira URL Cloud	safe
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	0%	Avira URL Cloud	safe
https://keycode.info/table-of-all-keycodes	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-getmethod	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/Accessibility/ARIA/Roles/Alert_Role	0%	Avira URL Cloud	safe
https://support.office.com/en-ie/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZoeLCQAAANwNIAN6	0%	Avira URL Cloud	safe
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meCore.min.js	0%	Avira URL Cloud	safe
https://support.office.com/en-ae/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://mscom.demdex.net/dest5.html?d_nsid=0	0%	Avira URL Cloud	safe
https://cms.quantserve.com/pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://www.skype.com/en/	0%	Avira URL Cloud	safe
https://support.office.com/zh-cn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	0%	Avira URL Cloud	safe
https://s.tribalfusion.com/z/i.match?p=b13&u=68751917230853503114135629145946568930&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$	0%	Avira URL Cloud	safe
https://support.office.com/th-th/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=992&dpuuid=1u83iowz6j9oz	0%	Avira URL Cloud	safe
https://sync.srv.stackadapt.com/sync?nid=adobe	0%	Avira URL Cloud	safe
https://rtb.adentifi.com/CookieSyncAdobe	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=53196&dpuuid=Q7734453881467559336	0%	Avira URL Cloud	safe
https://www.office.com/?auth=2	0%	Avira URL Cloud	safe
https://products.office.com/microsoft-office-for-home-and-school-faq#cd6f27d6-3bb0-22a8-9228-1385af8	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-parseint-string-radix	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-string.prototype.includes	0%	Avira URL Cloud	safe
https://www.onenote.com/	0%	Avira URL Cloud	safe
https://www.office.com/?auth=1	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js/issues/1130	0%	Avira URL Cloud	safe
https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-array.prototype.map	0%	Avira URL Cloud	safe
https://support.office.com/he-il/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://stores.office.com/subscription/acquire	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-tolength	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-array.prototype-	0%	Avira URL Cloud	safe
https://ag.innovid.com/dv/sync?tid=6	0%	Avira URL Cloud	safe
https://signup.azure.com/	0%	Avira URL Cloud	safe
https://support.office.com/it-it/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
http://github.com/aFarkas/lazysizes	0%	Avira URL Cloud	safe
https://breeze.aimon.applicationinsights.io	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-array.prototype.foreach	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-string.prototype.trimstart	0%	Avira URL Cloud	safe
https://ib.adnxs.com/setuid?entity=158&code=ZoeLCQAAANwNIAN6	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js/issues/677	0%	Avira URL Cloud	safe
https://dmpsync.3lift.com/getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://support.office.com/de-de/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://a.tribalfusion.com/i.match?p=b13&u=68751917230853503114135629145946568930&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$	0%	Avira URL Cloud	safe
https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass	0%	Avira URL Cloud	safe
https://bugzil.la/548397	0%	Avira URL Cloud	safe
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js	0%	Avira URL Cloud	safe
https://support.office.com/es-co/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	0%	Avira URL Cloud	safe
https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailabili	0%	Avira URL Cloud	safe
https://support.office.com/en-us/article/accounts-in-office-628ea040-f265-49de-b986-be09c3ebf8a9	0%	Avira URL Cloud	safe
https://dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1720158982869	0%	Avira URL Cloud	safe
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID	0%	Avira URL Cloud	safe
https://github.com/zloirock/core-js/issues/1128	0%	Avira URL Cloud	safe
https://signup-local.azure.com/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
s.tribalfusion.com	104.18.25.173	true	false	0%, Virustotal, Browse	unknown
global.px.quantserve.com	91.228.74.244	true	false	0%, Virustotal, Browse	unknown
sni1gl.wpc.alphacdn.net	152.199.21.175	true	false	0%, Virustotal, Browse	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
bttrack.com	192.132.33.67	true	false	0%, Virustotal, Browse	unknown
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	0%, Virustotal, Browse	unknown
adobetarget.data.adobedc.net	66.235.152.225	true	false	0%, Virustotal, Browse	unknown
idsync.rlcdn.com	35.244.174.68	true	false	0%, Virustotal, Browse	unknown
c.ba.contentsquare.net	54.194.186.155	true	false	0%, Virustotal, Browse	unknown
dualstack.tls13.taboola.map.fastly.net	151.101.193.44	true	false	0%, Virustotal, Browse	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false	0%, Virustotal, Browse	unknown
sync.crwdcntrl.net	52.16.78.59	true	false	0%, Virustotal, Browse	unknown
cm.g.doubleclick.net	142.250.184.226	true	false	0%, Virustotal, Browse	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	0%, Virustotal, Browse	unknown
dco-ats-00-1379651868.us-west-2.elb.amazonaws.com	52.34.170.192	true	false	0%, Virustotal, Browse	unknown
rtb.adentifi.com	23.20.216.210	true	false	0%, Virustotal, Browse	unknown
www.google.com	216.58.206.36	true	false	0%, Virustotal, Browse	unknown
d.impactradius-event.com	35.186.249.72	true	false	0%, Virustotal, Browse	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	18.200.174.228	true	false	0%, Virustotal, Browse	unknown
sync.srv.stackadapt.com	54.144.178.48	true	false	0%, Virustotal, Browse	unknown
msftenterprise.sc.omtrdc.net	63.140.62.222	true	false	0%, Virustotal, Browse	unknown
match.adsrvr.org	52.223.40.198	true	false	0%, Virustotal, Browse	unknown
aragorn-prod-uk-acai-lb.inbake.com	18.130.29.255	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	0%, Virustotal, Browse	unknown
us-u.openx.net	35.244.159.8	true	false	0%, Virustotal, Browse	unknown
s.twitter.com	104.244.42.195	true	false	0%, Virustotal, Browse	unknown
microsoftwindows.112.2o7.net	63.140.62.17	true	false	0%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
k.bf.contentsquare.net	52.4.178.162	true	false	NaN%, Virustotal, Browse	unknown
aka.ms	23.214.40.215	true	false	0%, Virustotal, Browse	unknown
q-aus1.contentsquare.net	18.214.123.106	true	false	0%, Virustotal, Browse	unknown
srm.bf.contentsquare.net	3.209.6.182	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	172.217.16.130	true	false	0%, Virustotal, Browse	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	0%, Virustotal, Browse	unknown
a.tribalfusion.com	104.18.24.173	true	false	0%, Virustotal, Browse	unknown
dh1y47vf5ttia.cloudfront.net	18.66.147.58	true	false	0%, Virustotal, Browse	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	0%, Virustotal, Browse	unknown
ib.anycast.adnxs.com	37.252.171.52	true	false	1%, Virustotal, Browse	unknown
d1xbuscas8tetl.cloudfront.net	108.138.7.18	true	false	0%, Virustotal, Browse	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false		unknown
js.monitor.azure.com	unknown	unknown	false		unknown
ats.everesttech.net	unknown	unknown	false		unknown
ag.innovid.com	unknown	unknown	false		unknown
t.clarity.ms	unknown	unknown	false		unknown
idpix.media6degrees.com	unknown	unknown	false		unknown
va.v.liveperson.net	unknown	unknown	false		unknown
px.owneriq.net	unknown	unknown	false		unknown
cm.everesttech.net	unknown	unknown	false		unknown
static-assets.fs.liveperson.com	unknown	unknown	false		unknown
jadserve.postrelease.com	unknown	unknown	false		unknown
dmpsync.3lift.com	unknown	unknown	false		unknown
accdn.lpsnmedia.net	unknown	unknown	false		unknown
rtd.tubemogul.com	unknown	unknown	false		unknown
aadcdn.msftauth.net	unknown	unknown	false		unknown
pixel.rubiconproject.com	unknown	unknown	false		unknown
logincdn.msftauth.net	unknown	unknown	false		unknown
trc.taboola.com	unknown	unknown	false		unknown
px.ads.linkedin.com	unknown	unknown	false		unknown
cms.analytics.yahoo.com	unknown	unknown	false		unknown
amp.azure.net	unknown	unknown	false		unknown
sync-tm.everesttech.net	unknown	unknown	false		unknown
lpcdn.lpsnmedia.net	unknown	unknown	false		unknown
c.clicktale.net	unknown	unknown	false		unknown
ds.reson8.com	unknown	unknown	false		unknown
assets.onestore.ms	unknown	unknown	false		unknown
ups.analytics.yahoo.com	unknown	unknown	false		unknown
ajax.aspnetcdn.com	unknown	unknown	false		unknown
q-aus1.clicktale.net	unknown	unknown	false		unknown
image2.pubmatic.com	unknown	unknown	false		unknown
publisher.liveperson.net	unknown	unknown	false		unknown
cdnssl.clicktale.net	unknown	unknown	false		unknown
dpm.demdex.net	unknown	unknown	false		unknown
rtd-tm.everesttech.net	unknown	unknown	false		unknown
servedby.flashtalking.com	unknown	unknown	false		unknown
www.facebook.com	unknown	unknown	false		unknown
k-aus1.clicktale.net	unknown	unknown	false		unknown
www.clarity.ms	unknown	unknown	false		unknown
www.linkedin.com	unknown	unknown	false		unknown
mscom.demdex.net	unknown	unknown	false		unknown
mem.gfx.ms	unknown	unknown	false		unknown
analytics.twitter.com	unknown	unknown	false		unknown
c.s-microsoft.com	unknown	unknown	false		unknown
cms.quantserve.com	unknown	unknown	false		unknown
support.content.office.net	unknown	unknown	false		unknown
analytics.tiktok.com	unknown	unknown	false		unknown
ib.adnxs.com	unknown	unknown	false		unknown
sync.search.spotxchange.com	unknown	unknown	false		unknown
login.microsoftonline.com	unknown	unknown	false		unknown
lptag.liveperson.net	unknown	unknown	false		unknown
acctcdn.msftauth.net	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ats.everesttech.net/ats/ats?cmd=RT&AdvertiserID=4249&platform=TUMRI&ActionID=20114&ActionName=Microsoft_Store_RT_Pixel&ut1=&ut2=en&ut3=us&cachebuster=922783656	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=ZoeLCQAAANwNIAN6	false	Avira URL Cloud: safe	unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZoeLCQAAANwNIAN6&C=1	false	Avira URL Cloud: safe	unknown
https://dmpsync.3lift.com/getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D	false	Avira URL Cloud: safe	unknown
https://cdnssl.clicktale.net/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	false	Avira URL Cloud: safe	unknown
https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js	false	Avira URL Cloud: safe	unknown
https://cdnssl.clicktale.net/www/bridge-WR110.js	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=477&dpuuid=3f70fdc17f2be172a9c39a131e721f634f7c24732ad6d96ed30f06f467d8c964b0da87c991749652	false	Avira URL Cloud: safe	unknown
https://c.clicktale.net/pageEvent?value=H4sIAAAAAAAAAwsIcVZwD%2FV0UahRMDBNMTYyNjPWTTE1NtE1SbE01rVMMjPVTU5JNTM3MTc3TTU3BAC5OujJLwAAAA%3D%3D&ct=2&isETR=false&isCustomHashId=false&v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6&r=733361	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1720158983054	false	Avira URL Cloud: safe	unknown
https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	false	Avira URL Cloud: safe	unknown
https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=68751917230853503114135629145946568930&gdpr=0&gdpr_consent=&uid=68751917230853503114135629145946568930&verify=true	false	Avira URL Cloud: safe	unknown
https://lpcdn.lpsnmedia.net/le_secure_storage/3.28.1-release_1349276690/storage.secure.min.html?loc=https%3A%2F%2Fpublisher.liveperson.net&site=60270350&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net	false		unknown
https://dpm.demdex.net/ibs:dpid=390122&dpuuid=RO9hsv43VjtJegiqx3XZlggueyE	false	Avira URL Cloud: safe	unknown
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	false	Avira URL Cloud: safe	unknown
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZoeLCQAAANwNIAN6	false	Avira URL Cloud: safe	unknown
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meCore.min.js	false	Avira URL Cloud: safe	unknown
https://mscom.demdex.net/dest5.html?d_nsid=0	false	Avira URL Cloud: safe	unknown
https://cms.quantserve.com/pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://s.tribalfusion.com/z/i.match?p=b13&u=68751917230853503114135629145946568930&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=992&dpuuid=1u83iowz6j9oz	false	Avira URL Cloud: safe	unknown
https://sync.srv.stackadapt.com/sync?nid=adobe	false	Avira URL Cloud: safe	unknown
https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-m365-en-us&buttons=lpChatSales	false		unknown
https://rtb.adentifi.com/CookieSyncAdobe	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=53196&dpuuid=Q7734453881467559336	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE	false	Avira URL Cloud: safe	unknown
https://ag.innovid.com/dv/sync?tid=6	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/setuid?entity=158&code=ZoeLCQAAANwNIAN6	false	Avira URL Cloud: safe	unknown
https://dmpsync.3lift.com/getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://a.tribalfusion.com/i.match?p=b13&u=68751917230853503114135629145946568930&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$	false	Avira URL Cloud: safe	unknown
https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1720158982869	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/uxlogout?appid	chromecache_385.2.dr	false	Avira URL Cloud: safe	unknown
https://outlook.live.com/owa/	chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-object.prototype.tostring	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://aka.ms/educationsales	chromecache_504.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.onestore.ms	chromecache_367.2.dr, chromecache_514.2.dr, chromecache_425.2.dr, chromecache_406.2.dr, chromecache_479.2.dr, chromecache_457.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/tr-tr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.push	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/v8/issues/detail?id=12681	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://lptag.liveperson.net	chromecache_364.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/tc39/proposal-array-filtering	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_421.2.dr	false	URL Reputation: safe	unknown
https://support.office.com/ar-sa/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b	chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/es-shims/es5-shim/issues/150	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/w3c/aria-practices/pull/1757	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://axios-http.com	chromecache_462.2.dr	false	Avira URL Cloud: safe	unknown
https://d.impactradius-event.com	chromecache_364.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/microsoft/clarity	chromecache_397.2.dr	false	Avira URL Cloud: safe	unknown
https://keycode.info/table-of-all-keycodes	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-getmethod	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Accessibility/ARIA/Roles/Alert_Role	chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/en-ie/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/en-ae/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
https://www.skype.com/en/	chromecache_364.2.dr, chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/zh-cn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/th-th/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_549.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_364.2.dr	false	URL Reputation: safe	unknown
https://www.office.com/?auth=2	chromecache_364.2.dr	false	Avira URL Cloud: safe	unknown
https://products.office.com/microsoft-office-for-home-and-school-faq#cd6f27d6-3bb0-22a8-9228-1385af8	chromecache_364.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-parseint-string-radix	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-string.prototype.includes	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/	chromecache_384.2.dr, chromecache_551.2.dr, chromecache_317.2.dr	false	Avira URL Cloud: safe	unknown
https://www.office.com/?auth=1	chromecache_364.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_549.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js/issues/1130	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7	chromecache_504.2.dr	false	Avira URL Cloud: safe	unknown
https://jquery.com/	chromecache_569.2.dr	false	URL Reputation: safe	unknown
https://support.office.com/he-il/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://stores.office.com/subscription/acquire	chromecache_504.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-tolength	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype-	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://signup.azure.com/	chromecache_504.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/it-it/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
http://github.com/aFarkas/lazysizes	chromecache_369.2.dr	false	Avira URL Cloud: safe	unknown
https://breeze.aimon.applicationinsights.io	chromecache_438.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.foreach	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-string.prototype.trimstart	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js/issues/677	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://sizzlejs.com/	chromecache_569.2.dr	false	URL Reputation: safe	unknown
https://support.office.com/de-de/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass	chromecache_364.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzil.la/548397	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/es-co/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false	Avira URL Cloud: safe	unknown
https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailabili	chromecache_504.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/en-us/article/accounts-in-office-628ea040-f265-49de-b986-be09c3ebf8a9	chromecache_364.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js/issues/1128	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://signup-local.azure.com/	chromecache_504.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.24.173	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
23.20.216.210	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
66.235.152.225	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
37.252.171.52	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
54.216.96.15	unknown	United States	16509	AMAZON-02US	false
151.101.193.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
63.32.136.28	unknown	United States	16509	AMAZON-02US	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
18.130.29.255	aragorn-prod-uk-acai-lb.inbake.com	United States	16509	AMAZON-02US	false
63.140.62.17	microsoftwindows.112.2o7.net	United States	15224	OMNITUREUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.89.211.84	unknown	Germany	29990	ASN-APPNEXUS	false
152.199.21.175	sni1gl.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
108.138.7.18	d1xbuscas8tetl.cloudfront.net	United States	16509	AMAZON-02US	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
157.240.252.35	unknown	United States	32934	FACEBOOKUS	false
18.66.147.58	dh1y47vf5ttia.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.244.42.195	s.twitter.com	United States	13414	TWITTERUS	false
3.209.6.182	srm.bf.contentsquare.net	United States	14618	AMAZON-AESUS	false
23.214.40.215	aka.ms	United States	16625	AKAMAI-ASUS	false
172.217.16.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
44.214.131.22	unknown	United States	14618	AMAZON-AESUS	false
44.232.230.158	unknown	United States	16509	AMAZON-02US	false
91.228.74.244	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
104.18.25.173	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
63.140.62.222	msftenterprise.sc.omtrdc.net	United States	15224	OMNITUREUS	false
142.250.184.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
3.75.62.37	unknown	United States	16509	AMAZON-02US	false
104.244.42.131	unknown	United States	13414	TWITTERUS	false
66.235.152.156	unknown	United States	15224	OMNITUREUS	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
172.217.16.194	unknown	United States	15169	GOOGLEUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
18.214.123.106	q-aus1.contentsquare.net	United States	14618	AMAZON-AESUS	false
52.16.78.59	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
54.194.186.155	c.ba.contentsquare.net	United States	16509	AMAZON-02US	false
52.34.170.192	dco-ats-00-1379651868.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
3.71.149.231	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
63.140.62.27	unknown	United States	15224	OMNITUREUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
52.4.178.162	k.bf.contentsquare.net	United States	14618	AMAZON-AESUS	false
192.132.33.67	bttrack.com	United States	18568	BIDTELLECTUS	false
76.223.111.18	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
54.144.178.48	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
34.98.64.218	unknown	United States	15169	GOOGLEUS	false
35.186.249.72	d.impactradius-event.com	United States	15169	GOOGLEUS	false
18.200.174.228	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467975
Start date and time:	2024-07-05 07:54:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://aka.ms/LearnAboutSenderIdentification
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@33/557@199/56
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.microsoft.com/ Browse: https://support.microsoft.com/en-us Browse: https://www.microsoft.com/microsoft-365?ocid=cmmttvzgpuy Browse: https://www.microsoft.com/microsoft-365/microsoft-office?ocid=cmml7tr0rib Browse: https://go.microsoft.com/fwlink/?linkid=849747

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 142.250.181.238, 74.125.133.84, 34.104.35.123, 72.246.168.117, 51.104.15.252, 23.211.9.92, 95.101.149.131, 20.190.160.17, 20.190.160.20, 40.126.32.68, 40.126.32.134, 20.190.160.14, 40.126.32.136, 40.126.32.138, 40.126.32.74, 20.190.159.64, 20.190.159.71, 20.190.159.68, 40.126.31.67, 20.190.159.0, 40.126.31.73, 20.190.159.23, 40.126.31.71, 88.221.110.176, 88.221.110.179, 2.16.202.122, 95.101.54.112, 2.23.70.177, 104.79.88.37, 23.192.249.186, 40.126.32.72, 40.126.32.140, 40.126.32.76, 142.250.185.234, 216.58.206.42, 216.58.206.74, 142.250.181.234, 142.250.186.42, 216.58.212.170, 172.217.16.138, 142.250.184.202, 172.217.23.106, 172.217.18.10, 142.250.185.74, 142.250.186.170, 142.250.186.138, 142.250.186.106, 172.217.16.202, 142.250.184.234, 51.104.15.253, 104.102.37.192, 20.12.23.50, 20.190.159.2, 20.190.159.73, 93.184.221.240, 20.242.39.171, 192.229.221.95, 95.101.54.200, 95.101.54.137, 20.199.58.43, 93.184.221.200, 104.79.89.142, 20.223.35.26, 152.199.19
Excluded domains from analysis (whitelisted): greenid-prod-pme.eastus2.cloudapp.azure.com, aijscdn2.afd.azureedge.net, assets.onestore.ms.edgekey.net, lgincdnmsftuswe2.azureedge.net, pme-greenid-prod.trafficmanager.net, clientservices.googleapis.com, publisher.livepersonk.akadns.net, e3359.dscb.akamaiedge.net, ak.privatelink.msidentity.com, publisher.liveperson.net.edgekey.net, l-0005.l-msedge.net, clients2.google.com, acctcdnvzeuno.azureedge.net, acctcdnvzeuno.ec.azureedge.net, acctcdnmsftuswe2.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, cm.everesttech.net.akadns.net, lgincdnvzeuno.ec.azureedge.net, assets.onestore.ms.akadns.net, c-s.cms.ms.akadns.net, edgedl.me.gvt1.com, c.bing.com, c.s-microsoft.com-c.edgekey.net, clients.l.google.com, iris-de-prod-azsc-v2-neu.northeurope.cloudapp.azure.com, wildcard.owneriq.net.edgekey.net, h2.shared.global.fastly.net, logincdn.msauth.net, a1985.g2.akamai.net, bat-bing-com.dual-a-0034.a-msedge.net, e11294.g.akamaiedge.net, support.microsoft.com, acctcdn.msauth.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44 Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form requesting sensitive information.","The text does not create a sense of urgency or interest to click on any link.","The webpage does not contain a CAPTCHA or any anti-robot detection mechanism."]}
Title: Protect yourself from phishing - Microsoft Support OCR: Microsoft Support Microsoft 365 Office Products Devices Account & billing Buy Microsoft 365 All Microsoft More Protect yourself from phishing Phishing (pronounced: fishing) is an attack that attempts to steal your money, or your identity, by getting you to reveal personal information such as credit card numbers, bank information, or passwords on websites that pretend to be legitimate. Cybercriminals typically pretend to be reputable companies, friends, or acquaintances in a fake message, which contains a link to a phishing website. Select the headings below for more information Learn to spot a phishing message If you get a phishing email or message in Teams
URL: https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44 Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which explicitly requests sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV) for signing in or creating an account.","The text does not create a sense of urgency or interest as it is informative in nature and aims to educate users about phishing attacks."]}
Title: Protect yourself from phishing - Microsoft Support OCR: Microsoft Support Microsoft 365 Office Products Devices Account & billing Buy Microsoft 365 All Microsoft More Sign in with Microsoft Protect yourself from phishing Sign in or create an account. Phishing (pronounced: fishing) is an attack that attempts to steal your money, or your identity, by getting you to reveal personal information such as credit card numbers, bank information, or passwords on websites that pretend to be legitimate. Cybercriminals typically pretend to be reputable companies, friends, or acquaintances in a fake message, which contains a link to a phishing website. Select the headings below for more information Learn to spot a phishing message If you get a phishing email or message in Teams
URL: https://support.microsoft.com Model: gpt-4o	```json{ "phishing_score": 0, "brands": "Microsoft", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": true, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "microsoft.com", "reasons": "The URL 'https://support.microsoft.com' is a legitimate domain associated with Microsoft. The webpage content, design, and branding elements match those of Microsoft's official support site. There are no indications of social engineering techniques, suspicious links, or other common phishing indicators. The presence of a prominent login form is typical for a support page where users may need to sign in for personalized support. Therefore, this site appears to be legitimate."}

URL: https://support.microsoft.com/en-us Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which explicitly requests sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV).","The text does not create a sense of urgency or interest as it is a general welcome message and does not contain any calls to action such as 'Click here to view document' or 'To view secured document click here'.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: Microsoft Support OCR: i Microsoft Support Microsoft 365 Office Products Devices Account & billing Buy Microsoft 365 All Microsoft More Welcome to Microsoft Support Please sign in so we may serve you better Sign in How can we help you? Microsoft 365 Outlook Microsoft Store OneDrive Windows rf Microsoft Teams Microsoft Edge Gaming MORE MICROSOFT PRODUCTS Trending topics Microsoft 365 Microsoft account & storage Activation Windows & devices Install Microsoft 365 Sign in to your Microsoft account Activate Office Windows 1 1 system requirements Manage your subscriptions Change your Microsoft account Activate Windows Windows 8.1 end of support password Manage payment and billing Find your Windows product key Find your hardware warranty How does Microsoft storage work?
URL: https://support.microsoft.com/en-us Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a login form which requests sensitive information such as email addresses and passwords.","The text does not create a sense of urgency.","There is no CAPTCHA or anti-robot detection mechanism on the webpage."]}
Title: Microsoft Support OCR: You're invited to try Microsoft 365 for free Ur&k Microsoft Support Microsoft 365 Office Products Devices Account & billing Buy Microsoft 365 All Microsoft More Sign in with Microsoft Sign in or create an account. Welcome to Microsoft Suppor Please sign in so we may serve you better Sign in How can we help you? Eti OneDrive Windows Microsoft Teams Microsoft 365 Microsoft Store Microsoft Edge Gaming MORE MICROSOFT PRODUCTS > Trending topics Microsoft 365 Microsoft account & storage Activation Windows & devices Install Microsoft 365 Sign in to your Microsoft account Activate Office Windows 11 system requirements Manage your subscriptions Change your Microsoft account Activate Windows Windows 8.1 end of support password Manage payment and billing Find your Windows product key Find your hardware warranty How does Microsoft storage work?
URL: https://support.microsoft.com Model: gpt-4o	```json{ "phishing_score": 0, "brands": "Microsoft", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": true, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "microsoft.com", "reasons": "The URL 'https://support.microsoft.com' is a legitimate domain owned by Microsoft. The webpage design, branding, and content are consistent with Microsoft's official support page. There are no signs of social engineering techniques or suspicious links. The login form is prominent, but this is typical for a support page where users need to sign in for personalized assistance. There is no captcha present, which is also common for legitimate support pages. Overall, there is no evidence suggesting that this is a phishing site."}

URL: https://support.microsoft.com Model: gpt-4o	```json{ "phishing_score": 0, "brands": "Microsoft", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": true, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "microsoft.com", "reasons": "The URL 'https://support.microsoft.com' is a legitimate domain associated with Microsoft. The webpage design and content are consistent with Microsoft's branding and style. There are no suspicious elements, such as misleading links or social engineering techniques, present on the page. The login form is prominently displayed, which is typical for support pages requiring user authentication. There is no CAPTCHA present, and no suspicious links were identified. Therefore, this site appears to be legitimate."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	265
Entropy (8bit):	5.010357189900872
Encrypted:	false
SSDEEP:	6:Qdp5RbDRW6AH/wS14f9wv/wQV19wvmQyDlKI5H1tg5SW:uBDRWH7if9s/19sgZq5SW
MD5:	F834ECC43DF9754FBCD8A6BB1078E89E
SHA1:	BDB8F34B27006C6CD969BDA5D7159BF6AD5E4113
SHA-256:	2978D1A6BCBD1D32C4EBCEC4003539E6C232E35C9F30DC4C3393859ED1C5914C
SHA-512:	843CD4BD51A133C5335FA380652C66DA1A39A64BA19FC1C8BC6E4783A0649B495A7237CD1E9E51258FAEDADE756CE23242796EA032C47F6E43A484E7357DEA2F
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/dynamic-feature/v1/dynamic-feature/clientlibs/site.min.ACSHASHf834ecc43df9754fbcd8a6bb1078e89e.js
Preview:	'use strict';window.onload=function(){var a=document.getElementsByClassName("dynamic-feature")[0];a&&(a=a.querySelectorAll(".dynamic-feature-component")[0])&&(a=a.querySelectorAll(".btn")[0])&&a.classList.contains("my-0")&&a.classList.remove("my-0","px-4","mr-4")};

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15396)
Category:	downloaded
Size (bytes):	15441
Entropy (8bit):	5.11317096226596
Encrypted:	false
SSDEEP:	384:pcdYt6g5LhlvLlbbbxGd7GIpaexhvWHt/YVc8:pcy3vLlbZnIpaexhv6RKb
MD5:	F92C3CD31AC3F23E9256DBC2A7DB7454
SHA1:	FF753C1D040C5CB370C9C4770D1FD967C9D5FA6C
SHA-256:	80A45B8AB3685DD11B1193D214BE8695389409BE7D5C795561A4395E286FA06D
SHA-512:	CB2DD870F1C26F3B2B88EEB932096A512C3B2442E42190703DB0624EC6A950CA6DCD2195D3C5160A6C602C76EF933C45F4BA1781D5F7CA787EB43F9300B4F877
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/Article.Main.min.js?v=gKRbirNoXdEbEZPSFL6GlTiUCb59XHlVYaQ5XihvoG0
Preview:	!function(){"use strict";var t,e="click",n="ocHidden",o="collapsed",i=function(){function t(){var t=this;this.collapsed=!0,this.container=$("#supAppliesToList"),this.collapseButton=$(".appliesToOverflowControl.collapse").click((function(){return t.collapse()})),this.expandButton=$(".appliesToOverflowControl.expand").click((function(){return t.expand()})),this.reversedItems=this.expandButton.prevAll(".appliesToItem"),this.reversedItems.length>0&&(this.collapse(),$(window).on("resize",(function(){return t.handleResize()})))}return t.prototype.expand=function(){this.collapsed=!1,this.container.removeClass(o),this.reversedItems.removeClass(n),this.collapseButton.toggleClass(n,this.reversedItems.offset().top<=this.container.offset().top),this.expandButton.addClass(n)},t.prototype.collapse=function(){var t=this;this.collapsed=!0,this.container.addClass(o),this.reversedItems.removeClass(n),this.collapseButton.addClass(n),this.expandButton.addClass(n),this.reversedItems.each((function(e,n){ret

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (615)
Category:	downloaded
Size (bytes):	8095
Entropy (8bit):	5.140694821574468
Encrypted:	false
SSDEEP:	96:u6nAgcXkCYT5oCge9OALf96ALo6SCOMkNC6Mkf+tPedRCF/C2T1:HnRhoiOe15o0OLs034F//
MD5:	21085BCEBA2FD9A512FDE6160CAA5450
SHA1:	520E687E473AE2B064974CED4B94D0D70DB2C6EC
SHA-256:	8929EB74CD48E0B078432E5B179ED9E6F23570B6763670DD140E4F65C685F371
SHA-512:	6EBD2026A6BDC046F9B15194583398DF31026D6609AE91F7435E8F2CCF85B93EFB1B68855D8B603508705657C13ED79152C0F9C5BDD0ED9ADDD3DF4B02F87D3D
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/comparechartcomponent/comparechart/v2/comparechart/clientlibs/sites/compare-chart.min.ACSHASH21085bceba2fd9a512fde6160caa5450.js
Preview:	'use strict';var foundElm=document.querySelector("div.content-card-v2-component");.if(foundElm){var compareChartDiscountText=foundElm.querySelector(".cc-discounted-price-text"),ccWdp=compareChartDiscountText.dataset.wdp;if("object"==typeof msauth&&"true"==ccWdp){var productcompareUrl=document.querySelector(".product-compare-url").value;$(".cc-original-price").removeClass("hideText");$(".cc-discounted-price-text").addClass("hideText");if(productcompareUrl){var productsIds=productcompareUrl.split("productIds\x3d")[1].split("\x26")[0].split("%2C"),productsLength=productsIds.length;.for(let a=0;a<productsLength;a++)$(".content-card-v2-component .col")[a].classList.add(productsIds[a]),$(".content-card-v2-component .material-backdrop.container.compare-chart-sticky-content.sticky-show-stuck .link-group")[a].classList.add(productsIds[a])}$.ajax({url:productcompareUrl,type:"GET",headers:{compactticket:msauth.AuthTicket},data:{},dataType:"json",success:function(a){for(var c=JSON.stringify(a.prod

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	downloaded
Size (bytes):	980
Entropy (8bit):	5.221020544248936
Encrypted:	false
SSDEEP:	24:ckGytSvuT/y67L/nV9jViHwukcglwYVTYVu:catwuby67pLRuxmwCTCu
MD5:	EC8AED9DF755A7B27E52317DCF532DF8
SHA1:	60F03B5BF43D1682D1CDB7DAF5A5A37FCD29D4E8
SHA-256:	C152DD3ED8493299EA2712FFC15A0043F417FEDCF4159B2C993A006501D82AC4
SHA-512:	16890D243CE2236AA2CD01C3C85D7B0AA1DB3DC8BF8B9CFE97AD18889F4030A0B6511C9F82C62F2BDA5F1029AFF4E12A9E35B0E182FC3B2B8B677618A589F5CF
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/socialfollow/v1/socialfollow/clientlibs/site.min.ACSHASHec8aed9df755a7b27e52317dcf532df8.js
Preview:	'use strict';$(document).ready(function(){var a=window.matchMedia("(prefers-color-scheme: dark)");a.addEventListener("change",function(k){{const d=document.querySelectorAll(".socialfollow .socialfollow-li img");if(d)for(var e=0;e<d.length;e++){var b=d[e].getAttribute("src"),g=d[e].getAttribute("data-src");b&&(k.matches?(-1<b.indexOf("\x26fmt\x3dpng-alpha")&&(b=b.replace("\x26fmt\x3dpng-alpha",""),d[e].setAttribute("src",b)),-1<b.indexOf("?fmt\x3dpng-alpha")&&(b=b.replace("?fmt\x3dpng-alpha",""),d[e].setAttribute("src",.b))):g&&d[e].setAttribute("src",g))}}});if(a.matches&&(a=document.querySelectorAll(".socialfollow .socialfollow-li img")))for(var f=0;f<a.length;f++){var c=a[f].getAttribute("src"),h=a[f].getAttribute("data-src");c&&(-1<c.indexOf("\x26fmt\x3dpng-alpha")?(c=c.replace("\x26fmt\x3dpng-alpha",""),a[f].setAttribute("src",c)):-1<c.indexOf("?fmt\x3dpng-alpha")?(c=c.replace("?fmt\x3dpng-alpha",""),a[f].setAttribute("src",c)):h&&a[f].setAttribute("src",h))}});

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 40x40, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	360
Entropy (8bit):	7.334002053768874
Encrypted:	false
SSDEEP:	6:zZCdClQ5lN62mazX6ducrRt1p+vq5cPIvGEpGc4xtk6Xu4lOZFK45U:455XtBL41bQvq5cPejobI6XOm45U
MD5:	E5C8F8637544A519558371B774E355DF
SHA1:	71BFB49D52B3D1B99DF598BB366DB193D8762194
SHA-256:	26C9CD908137A3768118AE5F587B66643ED94206D8FB2C3813D06C3376BA0431
SHA-512:	FDC7E17B35F0D013FAFB8557DD8E57D87F3C46552DBECFE38B1E187C5FABACBAAF334EA22F272E4C93C4296C224B53E6F5FE55B9AA40E30B97EA2BA0BB2F7961
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Linkedin_noBG?scl=1
Preview:	RIFF`...WEBPVP8 T........(.(.>E..D"...:..(.D...g..).... :5....?.L...])..6YW...{}9......2l\|...c/.0...!..y....S.h....?.;..^....._.....l..].8......O)......./Z..U........j.......1.Hz.\X...._..._...d`.^.....~.5...%....7..{..^.b......(..........9.w."`}H..u[M.M$E.z.?U`.n.M..5.....q...~...?@..8k.._...%..>.X.y-,[......~XV.~.$fG.r.k./k.G.bCu..v U.(....p....

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1290
Entropy (8bit):	7.827004131478698
Encrypted:	false
SSDEEP:	24:z9jyIMrqKGApQFTcZEDEFRxOARxcql4P/GeB35gyE54K03G+jU7Dc:ZGICqKdQKzFRxOARxvlk++y54KwjUfc
MD5:	DD8559857F58FCD27DF2454F49D7AF4F
SHA1:	DC9650CAEF227D59CCE9C0A5FFA12EDD408B31EC
SHA-256:	E891499624C6E4EACA7629AF380D94459F96B44FC759A632062F7ECC1DB6C3D5
SHA-512:	22AF9FF1674D56C1B53A02BF7922CC20DF7BEC12E98931D344DFBC67FFF13ABAA27C5CB6C5F99338827BD2A0C7F417021EABAB6BE943A1476BF2AE4DAAB203C6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........n..n..ALPH.....W. .$E....._..<h.....@..3....Mj.0s.h...=..l....m.v....'.FD.'..y..-.._N...q...,.Tx^.u2.4.W.....l.l..dl,9..J.......D.L.`............M....f.............X..I..G.$^.r.B...S.I....k.Z.ZK...).Z.].N..i.F2j..:.VP8 ....0....o.o.>Q".E.....].8....jV..:.}.......z..._3.._.. .....o^...........~..=j.....g..=G.I...'._.......[..2.<&.].oN....w...;.~...'...T7R@\|g9..[...`c...T..,.9q...F...DJ..d.B....G..A]..m........W.....N....F.....S......L#uD..f.c..<.c...'........{mW....Ld^:..>..yq..S.....9..g.CD.$k.O...m.M.7%r.v.9.@..2Cp....].ie..zt.....-......3...&8...'..h....(S.....T..'.A....Vq..R..^p.)-.N.J...TTz'X.~MeL...^...a...G.r).\....@.]c......O:.Cw...a....z......o....)..!...l7Bd.~\......... ).....Kh6"U..~...h6...j..AEu...a..^...._.$....s......a......Z..tA..EO...l?..zz....H....w.$/..\6.!z:).'..Y....D)u.X.^.%...."...q.as 2.W....Bgg.POf>l5..$..._......L..D{....j..L#....h..R...3..6..Vh.X..b......`...K@..(.c..'_.v.R3V...

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	916
Entropy (8bit):	7.720438442767581
Encrypted:	false
SSDEEP:	24:Yuoux1JrA90Wghgc24eKyHjpw3RI87lNi+uu5IGslN9pPySu:rvWghdBeee8BNi+15I9/fPySu
MD5:	BDE473695CDC46B3D6810A1F561FC99A
SHA1:	94F9B012FD1F881078446BBE05A7B1DA78CE25EE
SHA-256:	ED0EC0568B39A870748767E2515077EDEE489EBF64B8EDC64DF1B6615FC9B9D4
SHA-512:	47E0EA293636E61F8CB90F42E16F7D31ECA40713A5B07DC1DB8494C6E9250CC07F14F75D7FE408FB9352C132F2ED8C8B4C3D0E31A8526C3EB410E56D63A2C5DD
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Microsoft-Excel-75x75
Preview:	RIFF....WEBPVP8 .........K.K.>Q".E.......8...................<8..?P?c...:[...-.L.Y..$...#...].?.....I...V.y.g.P.P..;.34f.5.g...l.1..:.vS0......).....=.{../e.>.K..s...d.......2.Jt....&.9Wn.{.W. .5O..!...c.o.P....C7..@.N5.../..._.W.r......d......I. .`N._..".$.;.-p....kHBI..../x....]b....&...:D.....>.\..A(K.....>...*...t%..."U..\R....C..G.....u.I...o.....(..V../+5EV..S\|...@Q..:.....V.Rz..qCjz.....C<mQc...>x%...O<J............5..m7;.R.....b{4...q?.l.r...i?s.=.uw...C.jU...D..9..-.I...{..).(.0....LIE..@....-.0.v........H9.....:.&.....3..J...v.j...s...$c..........}...J.Y,F3...'....\|$..,..~.u.....v....u..MY..W.jJ.F.Iu..[..\|./.}^E..i..#&....\..<.A.. 0a.4].^.\|\"....1s...>...K[..c$.DU...j.........2.......2.z..!k..W..(..?.Y..A...B.vd.....z..j...B.:fD.A....k.......+to.&......q..B8$..s.....#.........FQ*P%..Q..b.2.^.."`...,e+.7.......P.. P..EU...e....=V..[\.i~.!.z.M.....\$.8J......

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1214
Entropy (8bit):	7.8269014191467186
Encrypted:	false
SSDEEP:	24:gfKzILi+tEeoBxc6moBTwwX4GMkgIPD5LOgr1dnAVucTp5hQbHupMfLUxl2/:bcW0EeoByoBTHMwDDBhAXTp5CuX2/
MD5:	93B4DB64705AD4AC6578A68E87F78A8F
SHA1:	230CE6B9DABB89A32240BDB14C28F24BA34F2DF9
SHA-256:	BCFA60E1354A5F8DC1151183CFF259E5954EFCDB7D3D6FBA5FB120F1BDE1710C
SHA-512:	F1122EAE13D5E5097829DA6222660E8FFAAF90AE0A8C9AF19F6A42F3BE41B44F9CB407EF7842FB3C4355F2D3FCE0662362451CF791921E741F1FFB834EF363D6
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Powerpoint-75x75
Preview:	RIFF....WEBPVP8 ....0....K.K.>E..D"...<..(.D..^P.l./~..!..r~..o...Bw...G....\.C..=@?...z.ym..\|%..~.{^4k[..4......?.}..@z ~...\..w...5.H..n..T..C.X..v3.f.m..1.C...CJ.G...#_...1...%.....\(.K......;...=...d.K .8X%?..x......l...+...va..._.S..M+.._=..........$"3...Vi.\|%.......wV..S.....c.j....5..cb.....F}6..r..G.[.4j.........]....w."...Z..Z.....J..S#...E.....m.....uz..Iko.\..\.r....7.....>.;..>.5....t..i.K.#..1..rw6t...o.....o TT.v`).?.....k`..Kq.....3F...r&.>..28_T...=..].f.^..J......V........B......K.(.r..y.d...&.Dt...9....X..wi0ob...;.........i.2E...Th......?....i..^.-~....N.x..V"...B..K...W.U..5\......n...0}.v...C.....{...fE..7.D\..?....N;?.5L1...x7yc..v.Bb..8W.g{....T\|..#eV.....g'&d.x..CM..A.e...y..x.<...j...j...&..GZ....-.>.}.JOzuU....].{.."L.1.V.`\|."..f...7...8%H.em....s3..(.k....6.+{.c..H.z..0..@.O...}.-].......<........z..\|...YA...k.}.3.....a...m.hBj...^..i$....Gh2....S.%....i"np9.B<..4.p..C..q./.u.e.t..I,..>.i~\|....o mh2VK...,.e.U..b...)

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (32681), with CRLF line terminators
Category:	downloaded
Size (bytes):	217242
Entropy (8bit):	3.8595135714192796
Encrypted:	false
SSDEEP:	3072:7mWTl90STteLRFmnt81yi1oONt+jVh5Fp3f5rc7WGceLysIe3XQP8eVH2JMZJ973:JWUxC6hbhY1dL4
MD5:	5E6D4F6AE324C9E1E90FB0BC7DC5E812
SHA1:	284E6B07B12E2E6194C3C081997BAA4A57D03AF7
SHA-256:	C8CD5EE68E599B7D4427D0712378F26781A11B9DCE53720A60047F4F60EE3242
SHA-512:	1816E970576207DDF4AEA29646594C7D91D11AA9DD0DDE67CD6CC4EB9B81B2F5FC02F81F25683FE47E898325558DE87BE9579D21050DAFAA407B7F1ABC7553C5
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/onerfstatics/onerfjquery-3.5.1.js
Preview:	../..!. .j.Q.u.e.r.y. .v.3...5...1. .\|. .(.c.). .J.S. .F.o.u.n.d.a.t.i.o.n. .a.n.d. .o.t.h.e.r. .c.o.n.t.r.i.b.u.t.o.r.s. .\|. .j.q.u.e.r.y...o.r.g./.l.i.c.e.n.s.e. ../.....!.f.u.n.c.t.i.o.n.(.e.,.t.).{.".u.s.e. .s.t.r.i.c.t.".;.".o.b.j.e.c.t.".=.=.t.y.p.e.o.f. .m.o.d.u.l.e.&.&.".o.b.j.e.c.t.".=.=.t.y.p.e.o.f. .m.o.d.u.l.e...e.x.p.o.r.t.s.?.m.o.d.u.l.e...e.x.p.o.r.t.s.=.e...d.o.c.u.m.e.n.t.?.t.(.e.,.!.0.).:.f.u.n.c.t.i.o.n.(.e.).{.i.f.(.!.e...d.o.c.u.m.e.n.t.).t.h.r.o.w. .n.e.w. .E.r.r.o.r.(.".j.Q.u.e.r.y. .r.e.q.u.i.r.e.s. .a. .w.i.n.d.o.w. .w.i.t.h. .a. .d.o.c.u.m.e.n.t.".).;.r.e.t.u.r.n. .t.(.e.).}.:.t.(.e.).}.(.".u.n.d.e.f.i.n.e.d.".!.=.t.y.p.e.o.f. .w.i.n.d.o.w.?.w.i.n.d.o.w.:.t.h.i.s.,.f.u.n.c.t.i.o.n.(.C.,.e.).{.".u.s.e. .s.t.r.i.c.t.".;.v.a.r. .t.=.[.].,.r.=.O.b.j.e.c.t...g.e.t.P.r.o.t.o.t.y.p.e.O.f.,.s.=.t...s.l.i.c.e.,.g.=.t...f.l.a.t.?.f.u.n.c.t.i.o.n.(.e.).{.r.e.t.u.r.n. .t...f.l.a.t...c.a.l.l.(.e.).}.:.f.u.n.c.t.i.o.n.(.e.).{.r.e.t.u.r.n. .t...c.o.n.c.a.t...a.p.p.l.y.(.[.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (578)
Category:	downloaded
Size (bytes):	3369
Entropy (8bit):	5.407239613237824
Encrypted:	false
SSDEEP:	96:yjXZ9sAK618PFA5H12sy1sv29sfsTYxYwd9Tf:yjXPT2S1Y1sv0axYwd9z
MD5:	C343DFB005AC8C14AE0DD22DD17FB2FC
SHA1:	6C3C4F71156EBD4549E4A461BF5B995B3287D7E8
SHA-256:	C3BFBD629D284635AD35313D8C90449964A470186B876CC5BA6C9FE201C6FDA7
SHA-512:	7983CFC7AF069704C6F10E89905142F86023753A12834459A1BC714257B540B315F1B1EBEB250E706284A1ACC7567FB4EAD4F1C3B6F40EEE4C1E873C11CDDC9F
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/exp-cookiecomp/v1.min.ACSHASHc343dfb005ac8c14ae0dd22dd17fb2fc.js
Preview:	'use strict';window.ExpConsentUtils=window.ExpConsentUtils\|\|{};window.ExpConsentUtils=function(){return{waitForObj:function(f){return new Promise(function(d,c){var h=0,k=setInterval(function(){100>h?"visitor"==f&&"object"===typeof visitor&&visitor\|\|"consent"==f&&"undefined"!==typeof WcpConsent&&WcpConsent&&"undefined"!==typeof WcpConsent.siteConsent&&WcpConsent.siteConsent&&"undefined"!==typeof GPC_DataSharingOptIn&&null!=GPC_DataSharingOptIn?(clearInterval(k),d()):h++:(clearInterval(k),c())},50)})}}}();.var ExpConsentHandler=function(){function f(){window.ExpConsentUtils.waitForObj("visitor").then(function(){visitor.getVisitorValues(function(a){adobe.target.trackEvent({mbox:"personalizationConsent"})})}).catch(function(a){console.log(a)})}function d(){return WcpConsent&&WcpConsent.siteConsent&&void 0!==WcpConsent.siteConsent.isConsentRequired&&null!==WcpConsent.siteConsent.isConsentRequired?WcpConsent.siteConsent.isConsentRequired:!0}function c(){var a=WcpConsent&&WcpConsent.siteConse

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	631
Entropy (8bit):	6.391875872958697
Encrypted:	false
SSDEEP:	12:6v/7s6UVprYe6IZeuLgou+/CAztgbbvCR00aJzS4VQIjXuYEMwoQIjXuHBOLPMdo:hX7rRkf+/rMcCJzAIjNEMwNIj8Efl9
MD5:	FB2ED9313C602F40B7A2762ACC15FF89
SHA1:	8A390D07A8401D40CBC1A16D873911FA4CB463F5
SHA-256:	B241D02FAB4B17291AF37993EB249F9303EB5897610ABAFAC4C9F6AA6A878369
SHA-512:	9CBCF5C7B8409494F6D543434ECAFF42DE8A2D0632A17931062D7D1CC130D43E61162EEDB0965B545E65E0687DED4D4B51E29631568AF34B157A7D02A3852508
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...{PLTE.P".J$x......P".P".J$x.........K..K..K..D.o..w..w..w.........................................................P"...................$tRNS.DD...CC..DEC..CEDDEC..CED...CC...DD.c,8....bKGD(........pHYs...........~.....tIME....."4...4...QIDAT8...G.. ...Q..s....?......s.f..a`.A... .bA!..,/dYQ.....a.((j^.m?4..Q.?.....2>.........%tEXtdate:create.2020-05-28T22:34:52+02:00.t.....%tEXtdate:modify.2020-05-28T22:34:52+02:00.)<'...WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	111789
Entropy (8bit):	4.901702120768548
Encrypted:	false
SSDEEP:	1536:zQOHl+WFYhiYgT1zq3EDmJFiSxj61PDKhn+Kg+zsjXrZknCYQQqZKfvB1YMKI:zQOFLY9icj0KF+Kg+zs7C5bvnYk
MD5:	CEC26DBEF7B47E5FA6F370B0A0BB2147
SHA1:	4E9973D7B00940671C95E66BEB6DAD8DA135316D
SHA-256:	257EA472927C42475E063424040113BA32FABABA2590042C3ED2C6F2FA06EA09
SHA-512:	3343432E3915F4DB1416BBA22ACB66F3A042519E2E51793143833697FDF12A16CD8A8343E86C7B10339CAC89E178A1EC92E65C1796774D9CD59EEEC0B2050BC6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/mwf/slider.js
Preview:	// vid team slider.js..define("observableComponent", ["require", "exports", "htmlExtensions"], function(n, t, i) {.. "use strict";.. Object.defineProperty(t, "__esModule", {.. value: !0.. });.. var r = function() {.. function n(t, i) {.. i === void 0 && (i = null);.. this.element = t;.. this.ignoreNextDOMChange = !1;.. this.observing = !1;.. n.shouldInitializeAsClass(t, i) && this.setObserver().. }.. return n.prototype.detach = function() {.. this.unObserve();.. this.teardown().. }.. ,.. n.prototype.isObserving = function() {.. return this.observing.. }.. ,.. n.prototype.unObserve = function() {.. this.observing = !1;.. this.modernObserver && this.modernObserver.disconnect();.. i.removeEvent(this.element, i.eventTypes.DOMNodeInserted, this.obsoleteNodeInsertedEventHander);..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	149973
Entropy (8bit):	5.600075316899329
Encrypted:	false
SSDEEP:	1536:pnxELzwdVX9OU0tNo455wjdrm/bK+OTRMWMrvBDJTcitj+wf2EAeilYkLWNmjTuV:pnxELkhOU03o4PwjhIBVT39FknurfJ
MD5:	7F5C51691BB26A0CD04D23BA28D6CE93
SHA1:	3439345E9A9486C3CB524D39741D9EFCD97C0D5B
SHA-256:	D891E16DBAF81B89F017B6516AFDEFFE602F8DF1D5E269429E7B6EAF63726A03
SHA-512:	019B32ED02F9BC39EF2920375925DB8A188ADC5FD1041069E75299E8535917F7FF854FADC58080AE08EFC3DC1C9C9916432FC8DDC9A4FB29BD8E8EC809FD9DF3
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/identify_ce1d8843.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},d=Object.prototype,n=d.hasOwnProperty,r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",i=r.asyncIterator\|\|"@@asyncIterator",a=r.toStringTag\|\|"@@toStringTag";function $(t,e,d){return Object.defineProperty(t,e,{value:d,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{$({},"")}catch(t){$=function(t,e,d){return t[e]=d}}function u(t,e,d,n){var r=e&&e.prototype instanceof s?e:s,o=Object.create(r.prototype),i=new N(n\|\|[]);return o._invoke=function(t,e,d){var n="suspendedStart";return function(r,o){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===r)throw o;return E()}for(d.method=r,d.arg=o;;){var i=d.delegate;if(i){var a=_(i,d);if(a){if(a===c)continue;return a}}if("next"===d.method)d.sent=d._sent=d.arg;else if("throw"===d.method){if("suspendedStart"===n)throw n="completed",d.arg;d.dispatchException(d.arg)}else"return"===d.method&&d.abrupt("return",d.arg);

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	930
Entropy (8bit):	7.753628280164637
Encrypted:	false
SSDEEP:	24:0qhIlp61EXC1aFWXWQpXxwecacgLnjqc+7DYiNNl:3Op61Uj8XWkhwwDXyl
MD5:	B665C2E078EBD73711D1A0CF23B8A717
SHA1:	5E13E0371C4C35A06B23C072AE097A151E8454C5
SHA-256:	CC9F6227E9E58BB888A8EBD2F6671D9E9333CD3FFD1E42A74D726732CCC1CE46
SHA-512:	518A8E1268BB3C10F5196FF0AB0EAFA9B8736459F519CF04883C5E7D572551165B3339C546E54C295AF78E16288AFB7E4041CFE975E242D8E0C9BEAB47DF48E0
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........@.@.>9..C.!.......Z@.x....?.t'.'.../.......g.V.G...)4%.........R.....p.o.M.....~.?................'.....D....D9^I=q.lT9..sV....]]...".....7......)....A......\|P........,9.q....1"R.MG..&.Q5...fx5..+Rwey.aY.&..i..p.1...J..1>}[.%+.B?.P.....KHWl..7..;...(#..A....V...z(...o]Z.$....._.?.^.Z.4.B..Y.+.....j...~.D..Ip.Yg..t^.Q..^S.F...g.k3Hm(F...w..D....."B.....@Q...5.........zUy...;C..6M..:........R.>7k `.....{.?.S%/.?...../d....O.\|l.t...g}..P4.:.1.Ad..4..&q.nW.N....!......f.........X..o.=.2.U..kx.?Y....:....N Z.&i...........x.ME.)..kH'o..an9L,.[.........BHC..8a.....f..........].70...+_e.y.RI.....#p8.....h!....a..".Y.U..9[....[...e....7x....Y.jg...v.~....$....)....[t.Z....8v{.4...*...N...k.>6...+.P..S).q..u....-z.........I..a.........Y..L\|..8W...s.E.BR..th.`.Z1.;1..R,_.V..a>..C...Do./O...yn......H._.p".............Ei.f.h.8...F.b:..-<A_...zs......6.K..P...,(..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9929
Entropy (8bit):	4.655071415941695
Encrypted:	false
SSDEEP:	192:6gKJO7BvvD5X0AU1BId8ExceFMfAgFF2Lnlo+ejx/pZgeawF///D/BoMQa2DL:6gZOD88ExceFMfA42Lnq+ejppueRXTSF
MD5:	F33A2F9C07765AC1B2C58784CEBD718F
SHA1:	B684B33FF0AAA9F983C8A86FC6583C88989C99FE
SHA-256:	220FD8DF68664D3BA41E8B1A308484F20A3E306D7B4AA4060D6E4D42A435AE59
SHA-512:	0AEB1AA65FA5DAEAB3140DD38BA8ED25B16723523C4F9B137C8F888059956246C9ED31D576DFE7FC65BF0A9BEAA58C40B86934F8801FC9D34D0A682A8A3D9B95
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/comparechartcomponent/comparechart/v2/comparechart/clientlibs/sites/compare-chart.min.ACSHASHf33a2f9c07765ac1b2c58784cebd718f.css
Preview:	.table-responsive.compare-chart {. z-index: 1;.}...compare-chart .compare-chart-table a.simple-link {. font-weight: 600;. text-decoration: none;.}...content-card-v2-component .border-bottom {. border-bottom-width: 0.0625rem!important;. border-bottom-style: solid;. border-bottom-color: #d2d2d2;.}...content-card-v2-component .compare-chart .compare-chart-sticky-content.sticky-show-stuck .compare-chart-card .cc-card-flex-grow {. flex: none;.}..@media (min-width: 860px) {. .content-card-v2-component .table.table-first-col-highlight tr td:nth-child(2) {. background-color: #d9e9f5;. }.. .content-card-v2.container .table td, .table th {. padding: 1.5rem 3rem;. }.. .content-card-v2-component .compare-chart-sticky-content .card.compare-chart-card{. padding-left: 2rem!important;. }.}..@media (max-width: 859.98px){. .table td, .table th {. padding: 0;. }.. .content-card-v2-component .material-backdrop.container.compare-ch

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3637)
Category:	downloaded
Size (bytes):	3690
Entropy (8bit):	5.141541571595828
Encrypted:	false
SSDEEP:	96:Af3vI6YmI62HUbHbZbpVuJRDhxwC9jTx+IRcaOs/Z:Af3vI6YmI62HUrllgffOQZ
MD5:	A249B03B72AB5E7B60E7806457B9BE61
SHA1:	FF0B5F4FB91A9DBF147262AD59B292C6C2DFE122
SHA-256:	48FF8C6449BEF199F206C7A1C49403E10DC6341A9D4A1F8946B042DDE66E315F
SHA-512:	29F204E3813972DC76FCE3DD6715093646EB0DA52DEDAC5E7E09B618E5CF8703CDE95D463727EB29F90D461D0C5A73B5701EC39B994A268103A06306144A6F34
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/PromotionBanner.Main.min.js?v=SP-MZEm-8ZnyBsehxJQD4Q3GNBqdSh-JRrBC3eZuMV8
Preview:	!function(){"use strict";var n;!function(n){n.PromotionBanner=".PromotionBanner",n.TopPageBanner=".TopPageBanner",n.AboveUhfBanner=".AboveUhfBanner",n.RailBanner=".RailBanner",n.NpsRailBanner=".NpsRailBanner",n.RailSecondaryCtaBanner=".RailSecondaryCtaBanner"}(n\|\|(n={}));var e=[{dismissSelector:null,clickSelector:"#ucsTopBannerButtonLink",element:n.PromotionBanner},{dismissSelector:"#top-banner-dismiss-button",clickSelector:"#ucsTopBannerButtonLink",element:n.TopPageBanner},{dismissSelector:"#uhf-banner-close",clickSelector:"#upgradeUhfBannerButton",element:n.AboveUhfBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button",element:n.RailBanner},{dismissSelector:"#nps-rail-close",clickSelector:"#nps-rail-link",element:n.NpsRailBanner},{dismissSelector:"#rail-banner-dismiss-button",clickSelector:"#rail-banner-button, #rail-banner-button-secondary",element:n.RailSecondaryCtaBanner}],t=function(){return t=Object.assign\|\|function(n){for(var e,t=1,r=argument

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2659), with CRLF line terminators
Category:	downloaded
Size (bytes):	2780
Entropy (8bit):	5.678130756555945
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd46bGpFQT0SKK4mxkjfypu6S:H9W3iuV96wDrHBZ46bG/QTWrR2pGn/
MD5:	7DA44D2761CADB3424C85FDE21EB5834
SHA1:	01C9E72569AB44D22A09A06EB8D75AD4B9E336AE
SHA-256:	E0D2327602926B06F2C441070EED870E2507395C7206B9883F842B29C65D86B4
SHA-512:	A7A5ABB1156B4B675BD968B6F1E1AD826CCFF371E437D68EF76CAAFA7426014EDB47F2FD49F22B4804B1E46FF45C7BC41B27CFF5F2FBA4BA308E2BDE479F9510
Malicious:	false
Reputation:	low
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=0b93d023-ab43-49bd-b75d-f0cb1e2b3303&id=375e6f2e-0d8f-6b9c-2ceb-7c8e098f6dfe&w=8DC9CB73131E66A&tkt=H3ihr9e92IdW6yd1ZgQ9S6iHaRiejIdk0aIJJ5j7uH7CWNo7dqr52PwJZry1cbhygyB%252brABH3rQfTxQrePXgCKHohFx%252fzOMZTURUYLhno0Fg8hhVZecycqvnr%252fKBz6US%252bRSLKmHEUbnSk3iKaBb20uBbtPV6f1HvPvXCz3JIVPT%252bVo9wHzhX8ltwefg2HFVXpaElnoFHLpvrpwKzmOpWeJ1%252fQIOxPPBjV6xOviemF1th1HBtxVVIlmOEqOOpT3fhHBl%252fGpxv%252bHURt6LcIEg%252bU0hyavj8xzCa43hnCy%252b39xMrVYIABLBybkwJIIilUFR4&CustomerId=02C58649-E822-405B-B6C3-17A7509D2FCC
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65298)
Category:	downloaded
Size (bytes):	372649
Entropy (8bit):	5.092497147126706
Encrypted:	false
SSDEEP:	6144:hkz1b3b99G9gR7N1xf6ilX1b3b99G9gR7N1xf6iPyD1b3b99G9gR7N1xf6ilfsPQ:6YfW1fvh8
MD5:	C34FA6955BE9497F516B1D185D1450D8
SHA1:	C2B45C4572E6B0398E3703CCFC1746D7D6CFC582
SHA-256:	F6895205E6AFDDAB2E56E315FB74F0016F5ECD70F163FA978BB88504E8512398
SHA-512:	56D1919BD4B6E00B43B9DBFE63E8570EDEAB2A4718EFD6A92ED3198835252CB5D817ABE625B166245C49AAD95FD99389680E2AA1BC083053980E6A8A6FFCDC5E
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASHc34fa6955be9497f516b1d185d1450d8.css
Preview:	@charset "UTF-8";/!. MWF (Moray) Extensions v2.15.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */@font-face{font-family:MWF-FLUENT-ICONS;src:url(resources/fonts/MWFFluentIcons.woff2?v=2.15.1) format("woff2"),url(resources/fonts/MWFFluentIcons.woff?v=2.15.1) format("woff"),url(resources/fonts/MWFFluentIcons.ttf?v=2.15.1) format("truetype")}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2) format("woff2"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff) format("woff"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.ttf) format("ttf");font-weight:400}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/light/latest.woff2) format("woff2"),url(//c.s-micros

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14154
Entropy (8bit):	4.708774379332766
Encrypted:	false
SSDEEP:	384:N4KHLpVi0apa4y0VowO25oowi6AT4L69tMIHY:NdLpVi0apa474
MD5:	A6937CD9DC7FBE26ADDDEA2828606853
SHA1:	D7F533226673EAB341AE7D9EDE22B324E671EDD8
SHA-256:	E358E2A97D3FE96EE3DC472D3498A0A078FAFF6CA2C03A5631BB71BA89E97AF9
SHA-512:	BC426CA47EF506129EB2F35F6624841DB8FE9E55FAA004D7BC41395343C9B45D2434AEF5100F252A0B621445DFE2C7E9B5FA0EE6CE4F861A8000C4EF10898F75
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/buy-now/v2/buy-now-v2/clientlibs/site.min.ACSHASHa6937cd9dc7fbe26adddea2828606853.js
Preview:	(function () {. const tabs = document.querySelectorAll('.buy-now-v2 [data-tab-target]');. const tabContents = document.querySelectorAll('.buy-now-v2 [data-tab-content]');. const tabListSection = document.querySelector('.inner-tab-content');. const innerTabs = document.querySelectorAll('.buy-now-v2 [data-inner-tab-target]');..const imageAreaEle = document.querySelectorAll('.buy-now-v2 .LinkNavigation.includes .Imagearea');. const imagePopup = document.querySelectorAll('.buy-now-v2 .LinkNavigation.includes .popoverdialog');. const closeIcon = document.querySelectorAll('.buy-now-v2 .LinkNavigation.includes .closebutton');. const cards = document.querySelectorAll('.buy-now-v2 .ContainerBuy');. let monthlyPriceEleText = cards[0].querySelector('.cc-card-flex-grow .sku1price');. let yearlyPriceEleText = cards[0].querySelector('.cc-card-flex-grow .sku2price');.. if (!yearlyPriceEleText \|\| !monthlyPriceEleText) {. tabListSection.style.display= 'none';. }.. const setActi

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	3.895461844238321
Encrypted:	false
SSDEEP:	3:mSnuZoS8/ZoS8/ZYn:mSnuZoS8/ZoS8/ZYn
MD5:	F8BC0E6A30BE8B892F5675CA35A469CB
SHA1:	1A558296BBA9C20D67FC33098A6AF19511AABD82
SHA-256:	EE7C434C1742F4120B16809CD9FB8C626BEB67A1AA9121D9073F89390BFBBDC1
SHA-512:	DB0081530CEF5CC7F9B7EEAEAEB7AD98883A64F7ED5400508D4163FF07F3EAE4C9C3B4BF60F29ED32609002133399EA36C4C6579A23EB4732CF8070D9D3C5E79
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHglPXFRxhTdsqhIFDZFhlU4SBQ2RYZVOEgUNkWGVTg==?alt=proto
Preview:	ChsKBw2RYZVOGgAKBw2RYZVOGgAKBw2RYZVOGgA=

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	downloaded
Size (bytes):	1418
Entropy (8bit):	5.418786110345074
Encrypted:	false
SSDEEP:	24:gkWndJbDZVHGCGH0199EYCDNQNFHOS91AqCCoW40HJtmz2Xw+mlu4oFU5kveTOwD:gkw9ZVHG3HEuvNQNFv16XW1HJEkmEhUh
MD5:	20AAFDF6904D3DC5DB0E0E33ABBFC1A4
SHA1:	CC1A639FF69FE0D8A8F1EFEE7FCB04941E7B57C8
SHA-256:	EE4E620F350907CE3867454B2BD45984BE949EB46B113183D4B8B403032DA14D
SHA-512:	91B0BD81FCD2D3D040D9FC1DB74F5CA916EF88E7887D2868530BF1319EAF5462CC54421AB80FC97B258B569B9AF40F2B9FD1B6D417C9A4561BBA22EDF785D905
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery-cookie.min.ACSHASH20aafdf6904d3dc5db0e0e33abbfc1a4.js
Preview:	/. jQuery Cookie Plugin v1.4.1. https://github.com/carhartl/jquery-cookie.. Copyright 2013 Klaus Hartl. Released under the MIT license./.'use strict';(function(d){"function"===typeof define&&define.amd?define(["jquery"],d):"object"===typeof exports?d(require("jquery")):d(jQuery)})(function(d){function l(a,c){if(e.raw)var b=a;else a:{0===a.indexOf('"')&&(a=a.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{a=decodeURIComponent(a.replace(m," "));b=e.json?JSON.parse(a):a;break a}catch(h){}b=void 0}return d.isFunction(c)?c(b):b}var m=/\+/g,e=d.cookie=function(a,c,b){if(void 0!==c&&!d.isFunction(c)){b=d.extend({},e.defaults,b);.if("number"===typeof b.expires){var h=b.expires,g=b.expires=new Date;g.setTime(+g+864E5*h)}a=e.raw?a:encodeURIComponent(a);c=e.json?JSON.stringify(c):String(c);c=e.raw?c:encodeURIComponent(c);return document.cookie=[a,"\x3d",c,b.expires?"; expires\x3d"+b.expires.toUTCString():"",b.path?"; path\x3d"+b.path:"",b.domain?"; domain\x3d"+b.domain:"",b.secure?";

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3437), with CRLF line terminators
Category:	downloaded
Size (bytes):	3439
Entropy (8bit):	5.12253249098629
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULMO34UiEBGLosqAsosushswsosry:a2IYz95oTEBac
MD5:	6635D7000669B3B00D3577DB7EE58F5D
SHA1:	7DB793D847EDC78B731185C85AD93BA4761D139B
SHA-256:	4E52043A45804E7CDB6C9D09A0F64A4293082E6F32BB3D689BE4822A6E18BACB
SHA-512:	FE3D01776B8D98E975D4DB6E956196B0D5602563E0252BD960A5A739D591F3AC96F5F2EF48EF6B49286822D80106932C104B324BD355EBE1D2FEFCB124D5866B
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4466
Entropy (8bit):	4.815200143314862
Encrypted:	false
SSDEEP:	96:G9DjiPeS9cXL1V04LCJ3t8Q/sWJMqRhSgVNtHYRq9JNK2zRri4KNpcrgcG8K5VNU:G9DIHeXLToJuQsWJhXSgVNtHWq9JNK2T
MD5:	608ED94DBBE53914E7284F9D0BF56B46
SHA1:	32EC37ED5ABE203EBEB3E552CDECAF2EA9014196
SHA-256:	188B658300213BE394E47A973D27D0FE5FD8F9A150EDEC30091C1F6C409C71D1
SHA-512:	A129758D575C5B3CD577955FCE4EC13454DB2439D0C20586002500C20F07C7FA8CC9D79739C84CA23D92F1F33B7E3E52F705214CAA3A38410FF44A2814163D5F
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/localization/en-us.json
Preview:	{.. "agegate_day": "Day",.. "agegate_enterdate": "Enter your date of birth",.. "agegate_fail": "You may not access this content.",.. "agegate_month": "Month",.. "agegate_submit": "Submit",.. "agegate_year": "Year",.. "audio_tracks": "Audio tracks",.. "agegate_dateorder": "m/d/yyyy",.. "browserunsupported": "We\u0027re sorry, but your browser does not support this video.",.. "browserunsupported_download": "Please download a copy of this video to view on your device:",.. "cc_appearance": "Appearance",.. "cc_color_black": "Black",.. "cc_color_blue": "Blue",.. "cc_color_cyan": "Cyan",.. "cc_color_green": "Green",.. "cc_color_grey": "Grey",.. "cc_color_magenta": "Magenta",.. "cc_color_red": "Red",.. "cc_color_white": "White",.. "cc_color_yellow": "Yellow",.. "cc_customize": "Customize",.. "cc_font_name_casual": "Casual",.. "cc_font_name_cursive": "Cursive",.. "cc_font_name_monospacedsansserif": "Monospaced Sans Serif",.. "cc_font_name_monospacedserif": "Monospaced S

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21576), with no line terminators
Category:	downloaded
Size (bytes):	21576
Entropy (8bit):	4.929076929051309
Encrypted:	false
SSDEEP:	192:WdjjSUaTGkgh1BvhEun6tuckPpE+ziELZZEyGRjZMIKJ56oDwPcQN9CAzy/qNcV9:U5fP/5ozV8gKV
MD5:	31EDF4626937D4B47D973FAFA07A67D3
SHA1:	B47003A3F2C034F993292927B4FF08B0746F62FD
SHA-256:	CDD915EFE5E472BF2238D60E8AA1224C3FC84623AB280DB0EFD84D4FB81B120A
SHA-512:	BE2811B3243077D600EAF6E06D7B1552A0C9F8F1A6202E63431DA59D9279683E21C4C940C64B5F5947A075C1D407391BF39B8ECE12DF351BDF3357827625DFC0
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/60270350/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
Preview:	lpZonesStaticCB([{"id":138781714,"createdDate":"2017-02-28 18:44:28","modifiedDate":"2017-02-28 18:44:28","name":"Right Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":26},{"engagementSubType":17},{"engagementSubType":24},{"engagementSubType":19},{"engagementSubType":18},{"engagementSubType":22},{"engagementSubType":27}],"isDeleted":false},{"id":138781814,"createdDate":"2017-02-28 18:44:28","modifiedDate":"2017-02-28 18:44:28","name":"Offsite","deleted":false,"zoneType":2,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":28},{"engagementSubType":29},{"engagementSubType":30}],"isDeleted":false},{"id":138781914,"createdDate":"2017-02-28 18:44:28","modifiedDate":"2017-02-28 18:44:28","name":"Left Overlay","deleted":false,"zoneType":1,"mainZone":false,"capping":0,"mapping":[{"engagementSubType":23},{"engagementSubType":15},{"engagementSubType":21},{"engagementSubType":16},{"engagementSubType":25},{"engagementSubType":20},{"engag

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x840, components 3
Category:	dropped
Size (bytes):	278435
Entropy (8bit):	7.971643595358909
Encrypted:	false
SSDEEP:	6144:xHu57fDU6/GU1lB84DzUUzeJuTld/+/kPv8Zcq6XDUjDCuAR9xllMD:xSDIOJe/yomldpsZgW0llC
MD5:	A8D825C54E1C1CBAA868BE59B4FD152F
SHA1:	410B1D8A1D49D922C28AE77D315955FA75BF2F73
SHA-256:	92DBFA5CD7CAD52B43502206C9A1F7270FCFB204B6F30FD186F990045778DBEA
SHA-512:	101D3EEE3737AB30BED6A9640CF08D96EA0935D0474FF9BB1A75760B35A74A2DC035A49B926BAFD3C306C5F3A5A9B0A736EE5B71D9578996B938D75050978039
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (31781)
Category:	downloaded
Size (bytes):	353056
Entropy (8bit):	3.54628063061396
Encrypted:	false
SSDEEP:	6144:j2+eueO+ueO+eA5E0s0UU000082SaCCqS6iyKy2P32N8jBzE6xTPyj2jK5m68BaS:C3E8jpP88Ba8n888u
MD5:	B3798F354AF881F8C1E8B35A709AF24A
SHA1:	5F5FD96E90037BF99BB06172FDFEFDC4B9CB7601
SHA-256:	A3834415AF119205CA2080700B3F05C2F648D81CF47F6CB6AA9ABDBC3499B00B
SHA-512:	9CE111C3F4CB4D80B9AC60474C396B1A2CB0008974CCBCF1F3976DDD9EE2D3DB8F896A905B31BC06E418A041EB1C024988D003983BB7381378E947701E351643
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/mwf/slider.css
Preview:	..@.c.h.a.r.s.e.t. .".U.T.F.-.8.".;.../.*.!. .1...5.8...6.-.b.e.t.a. .\|. .C.o.p.y.r.i.g.h.t. .2.0.1.7. .M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n. .\|. .T.h.i.s. .s.o.f.t.w.a.r.e. .i.s. .b.a.s.e.d. .o.n. .o.r. .i.n.c.o.r.p.o.r.a.t.e.s. .m.a.t.e.r.i.a.l. .f.r.o.m. .t.h.e. .f.i.l.e.s. .l.i.s.t.e.d. .b.e.l.o.w. .(.c.o.l.l.e.c.t.i.v.e.l.y.,. .".T.h.i.r.d. .P.a.r.t.y. .C.o.d.e.".)... .M.i.c.r.o.s.o.f.t. .i.s. .n.o.t. .t.h.e. .o.r.i.g.i.n.a.l. .a.u.t.h.o.r. .o.f. .t.h.e. .T.h.i.r.d. .P.a.r.t.y. .C.o.d.e... .T.h.e. .o.r.i.g.i.n.a.l. .c.o.p.y.r.i.g.h.t. .n.o.t.i.c.e. .a.n.d. .t.h.e. .l.i.c.e.n.s.e. .u.n.d.e.r. .w.h.i.c.h. .M.i.c.r.o.s.o.f.t. .r.e.c.e.i.v.e.d. .T.h.i.r.d. .P.a.r.t.y. .C.o.d.e. .a.r.e. .s.e.t. .f.o.r.t.h. .b.e.l.o.w. .t.o.g.e.t.h.e.r. .w.i.t.h. .t.h.e. .f.u.l.l. .t.e.x.t. .o.f. .s.u.c.h. .l.i.c.e.n.s.e... .S.u.c.h. .n.o.t.i.c.e.s. .a.n.d. .l.i.c.e.n.s.e. .a.r.e. .p.r.o.v.i.d.e.d. .s.o.l.e.l.y. .f.o.r. .y.o.u.r. .i.n.f.o.r.m.a.t.i.o.n... .M.i.c.r.o.s.o.f.t.,. .n.o.t. .t.h.e. .t.h.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4246
Entropy (8bit):	7.813402607668727
Encrypted:	false
SSDEEP:	96:p1RGN8ljFYp3fB/rD7bD4XpX7ozIlX9gJBEj748ru0yyRqJsb:HR28lC3pz29owX90ajlYJC
MD5:	B93F7321E326CA5C00D52E5DF0357EFA
SHA1:	5620E44D1318A3FA8C3F3F7685D76706752F4E36
SHA-256:	5B00DFD36987ED6F3F48BA6EAC2F7D177B9EB6526EF82F2CC786549BAD43B5EC
SHA-512:	F6E4751B7741787BC3C04A457288AA722BB73A0FAD31E9802230D55C0616F6434A9E86B83F591680EA9344D3F5F551A545A45F7E8942FDD61A29F6E32BCB1C76
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/d09f346e-3b3f-4bbc-b4cd-ad6f9df1ab6e.png
Preview:	.PNG........IHDR.............k.XT....PLTE...PY.PY.{..V^.qy.Ya.PY.S[.lt.BJ.EM.@G.{..QY.gp.U].OW.MU.mu.MU.W_.S[.y..{..PY.{..PY.{..OX.PY.{..{..{..z..{..PY.{..PY.{..JR.PY.PY.{..PY.QZ.PY.{..PY.PY.PY.{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..z..PY.PY.PY.{..PY.{..{..QZ.PY.PY.PY.PY.PY.{..nv.PY.PY.PY.PY.Ya.PY.GL.R[.{..R[.{..NW.PY.ow.GO.PY.u}.PY.qy.IQ.]e.{..px.NV.QV.Ya.^f.Ya.HP.y..PY.el.nu.nv.FN.ov.Ya.bh.ck.nv.FK.JO.aj.W].GL.Yb.JO.KQ.{..PY....QY.T\.JR.NV.nv.OW.MU.S[.EL.BJ.LT.FK.W_.?F.FN.PX.IQ.GO.DK.V^.HP.AI.@H.X^.=E.8<lbi.<D.PX.Ya.HP.px.JO.;B.:A.cl._e.t\|.MR.LT.v~......bh.:@.9?.ck...9@........cj.8>.Z`.dk.QW.w.....x.....ip.qy.`f.s\|.dl.:>rmv.]e...T\.KR.;A.?D{Zb.SY.<B.LR.8>.8=\|hq...W`.NU.\c.HN.KP.DH.BF~...sx...........tRNS....m.m.m.mmm..............5.;...J?......zi`'...y9)#........bXS0......YM".....jF1...qoSE+.?.......~[..........XS..........o2.w......IDATx...ioLQ....c^LFR.5..2%.........-H,A.!.X........DB....[B..&\|....S.....;c~.@..;.9.6.........4.....=._.N$..'wT

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	914
Entropy (8bit):	7.778446129877769
Encrypted:	false
SSDEEP:	24:09if7X68pSEVy4/NMuckup0y6pDUUK2k2OqDRCW4YAqNTh4yXl:P68MEV9NvcLpUeN2k2gbYtay1
MD5:	82B7921FBF835E1916B10B2A47FC2DA3
SHA1:	FE03BB72D791551459474180FB1206405C010C72
SHA-256:	E65BA28CB5468016142382E888CACA3F4A0FEB9EE8BEE11E561E3F3D9A697CF0
SHA-512:	0E66EE6BF28BC71CE8EF68DABAF252E548C8F4E42670921E4C49B6C59444A05473A0F0D6A75321CE2A99D4449EEFB4856FDF2961E02D7CC00ECC5C8AC5960FDD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ~........K.K.>Q".D..!...8....g....6?......l@0....".o...g......p...@.._M.c..O._l{.R v..a..g[._D.HL.....8.7p..3....?.....+W.(.....j7..#.o..P.(G=...Q.?z..)..d...m.q.o.............y.:V.......]1....5n....z.C.%.......wu.S...).......'.....m....).....&ks.r'.....M.-..=.u...g.\..x.#..S...=iSy.......P.n.u.......n......5.]..U.'.6z.^Bf..7D.{.....'z'....q.P..(...W.....J.2..x..Xd..7...-n...:.......VK..rJ.fbPz..1ON.......4.6.c............y...?.....e.../...A.n.]h..9....<......;I.=>....7Fo...FX.sX...w...6';g<......!.Af.....y......\|..0..D.^..=.U.s.J..:Q.tF...Q4..m\|.N...kU.b.....O~..n04......q......&Wch!..'.....3..........JJ.3>......].p..W..?.$.%..n..$P...C.../.(....{iw....._.mz..p....Ue>i..8_.(.H.s.Ax...\....A+68......;...Zl..Z..9g.}ZR.O<..4.Ej../B>A.3..`u.J.Ei...J._8."...7..f.?S,..8x..g..:.....-jOT..0r..({...s.i.17p...... .Uw..)..._....:^.Dp~.Ou...k.5w.........

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x840, components 3
Category:	dropped
Size (bytes):	202201
Entropy (8bit):	7.966935042901671
Encrypted:	false
SSDEEP:	6144:xnXNILgypM3yjpbRubeHIQVmo1N5b0W071r:xnXeL+34Nub+8o1n2h
MD5:	75698F41FEB33A226246955EE98DAB87
SHA1:	79336F61F1442C5ECF22A3654E96B4048EEC9C3B
SHA-256:	C60DE8889FE03BDBECDCB77D03DAC94635A1A28BA25D875FE168342DF1B48FC4
SHA-512:	36A31F7CE89B78597425A0C9676397B33C1AEA85EAADF5EDAC9B09357B5884CDA8CFBE95B0820AB8F04FEADE0833D5546F00E04ACC3541A2E66E90649A7D5949
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 960 x 540
Category:	dropped
Size (bytes):	89401
Entropy (8bit):	7.983830870854764
Encrypted:	false
SSDEEP:	1536:O0tlL9HAc5vZfgVMlebvdE3cuj5CZLJdu8tFgmkJVNfaghgZf6zGujvOdXCkKFCG:jfLR7XSdF7VtOmIVzXzn2dXysdKII0k
MD5:	B1F5B34FD4653ECC55A495B7A6A59B51
SHA1:	A3E0E79E99FE0614A67143206A4B91E6811AE61C
SHA-256:	2A38C4E7692EFECBF4B5F6EFD20DDBD3D77D2EDC91F8A76132431C6A068A6E41
SHA-512:	C67F0806499612281C4D03362CC459ACCC5254709FA351B8AFAA5F2C1509F723E465DEEE675ADF154B95A12F66A26C9B7B2D63C86BEF7B321D2C7E9CF41BE5C8
Malicious:	false
Reputation:	low
Preview:	GIF89a............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.........3..3.33.f3..3..3..3+.3+33+f3+.3+.3+.3U.3U33Uf3U.3U.3U.3..3.33.f3..3..3..3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f+.f+3f+ff+.f+.f+.fU.fU3fUffU.fU.fU.f..f.3f.ff..f..f..f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........+..+3.+f.+..+.+..U..U3.Uf.U..U.U......3..f.............3..f.............3..f............3..f.............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U....3.f.........3.f...........3..f.............3..f..............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.....................!.......,............c..Hp.....L.p....J.Hq.../j..q.. ?..Ir..(O.L.r..0_.Is..8o...S.@.1...Jt..H.M.t..P.J.Ju..X.j..u..`...Kv..h.M.v..p..Kw..x....(......<Xp...#^..q..!3..8...+c..3..As..9...K.^..5..

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 450, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	90210
Entropy (8bit):	7.962596672341015
Encrypted:	false
SSDEEP:	1536:dgQo53/pFSkAXaK+K6hEJ/Ld9tRRjB7JIR15Aj/srhd8Ds8Do:453/fOqnERtRR97q152sgO
MD5:	1B12344FB475425C37D0BD59CBF81A07
SHA1:	5D30C64EF3E017778635BE13473DB39FC16BF70D
SHA-256:	F4A555808405A44531FE9EDA29042C611581DF2B3D129144A4AE38703481EEF7
SHA-512:	601859A9AEFB06F6C144DC5DEB2997C1F48C893079FE40509362DCD8AECCB4DE438CE2F278CEA6095A4AFD74DCEDEF98785E8018B58DB74D1F365A6BE0BD07FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ......... .].....PLTE...............................................................................................................................................................................y..................p...................................Ch.......t................Lt....f..e.......r...k.........rYY~..............\.d.....s..cO.........h.....y..:[....vq.fh.....u...w..............W^....]..Zt...............n...........9.2L..j=.u...Z<.....9#.i...o.hX..o..S.:Q....g.......N....$Fu..V...}L...n..9..(.....c...q K...XAc..~.R....)...U....c...o.......bt.....x^...X.v}<..M..e...@6.\|......p.T..P.xA...z.m..X...P...8.k.!...^<#...t:8..M.z[\".r..F?.. m._...2v..8~c..9..uC/.<r..lrw...*..].IDATx...r.F...e.J9.hu....eT.'........1T..1.....%_...2]^........a<....3.Z.[...)K...j.}..\|....S4.~....\|j.'5...E.[E.1...tFN...s.G.J..4_.37.....{(7.;.(..O...)...=.?.PV..CL/.>....<..

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34052, version 0.0
Category:	downloaded
Size (bytes):	34052
Entropy (8bit):	7.994131533337155
Encrypted:	true
SSDEEP:	768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe
MD5:	36397A3BC139C6E9F81D383F060F080A
SHA1:	3F4F86C10920D4ED345F4858B6CDE9F93E1AEB81
SHA-256:	4F7F4AFE26E71FA9CA1DAC4A43B557A554A46F53251D849F07ED08A04829D74B
SHA-512:	7FFF4870E9142E6E1921F8DD78E3B049547EC1D540EFE573C2938F8B855DB61BA908FA9D3C8DA1BB2AAE6D95217A586D256B9EA2BD8A8F706B1DB75BC21F2CB9
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2
Preview:	wOF2.............................................`....."..\.....D..D.6.$........ .. . ..@.S.5x.q..m.5.7Q..2......6..R....v.j.......".c..@.Z.B..G.Y.\S.AtT.iTJt.....l.>..=+z...1.pP..[.+.S..`...c.1.u1...)......`............9.8.......+..4...;..[W.v..p0..qg..=..+...1...\|R..qM..\|/...%..!C.....G:.;7...Z..^P...o..q.B'....a....M.l3k....=&.'.'..8.....K..k........}.?w.i[..q.,...,.0,.....?...o.y..@..U5.:T..E..B..%......YU.....Z..4T..5....m/..,.$.w..`O.s.c.{...;a;..T...9../.......,....BDf.S).ola._e../..z%.:....r..d;.t.....7....jI!-.....{..l.T..H%8.p.*=!.z8.7.k..L...WUW...0.0.....7Q.0.J..Q.\|~P..'Q... m.a..(..p..q...B.:.....e.B...g..<O(..z..o.G...U.x.Tw...^t.._.t..}....q....*K....".UP...Te...<.....f.....{.....I..V...p.+...-<..%.+..?M.A!.ob.9p...7..B. ..R....."4..%M.6..'...!.S.........?.`w.....l@..R.AJ&@..h/H{.(n..I.8..6.4 ..i{..5.I....l...rJ.....N{.^..6..^.V.&..)?Bc.&.u.......fd.H..X.5Fq(c....6...w(O..K...F.......ohh.....Gk...l.2q.t.h..........U9%.n....%...

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513), with no line terminators
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	5.350826451115093
Encrypted:	false
SSDEEP:	12:D0rdkqmKlO30kMWznLPQspwlZpqBijDgrgLCpWRG3a0:exmwOkkMWIvv4ELsWUp
MD5:	602C381194795DFC124FACDF48492EF1
SHA1:	90D594B7B5AF217824F2974514548C95FECFBFA5
SHA-256:	BF450798FB52E2458A1E10749577E5334F3E1D7907A47FDFEA5430CB71FA19E6
SHA-512:	8837F6BD2A11387D31A866D07B66A0FF2E58D2EDC2682A582919A1896CE9B4CB683A795D91968B41FA46C31CE62D34414E1F3318D4F5DDA2999447F4BCA6133D
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/en-us/CMSScripts/script.jsx?k=f65ecb70-094d-0b11-7c9d-7da1bcadfaa7
Preview:	var jsllConfig={useDefaultContentName:!0,syncMuid:!0,authMethod:AUTHMETHOD,isLoggedIn:ISLOGGEDIN===undefined\|\|ISLOGGEDIN!=="True"?!1:!0,muidDomain:MUIDDOMAIN\|\|"microsoft.com",useShortNameForContentBlob:!1,autoCapture:{pageView:!0,onLoad:!0,onUnload:!0,click:!0,scroll:!0,resize:!0,lineage:!0,jsError:!0,addin:!0,perf:!0},coreData:{appId:JSLLAPPID,market:LOCALE,pageName:PAGENAME,pageType:PAYLOADTYPE,referrerUri:document.referrer,requestUri:window.location.href},callback:{pageName:PAGENAME}};awa.init(jsllConfig)

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22904, version 0.0
Category:	downloaded
Size (bytes):	22904
Entropy (8bit):	7.9904849358693575
Encrypted:	true
SSDEEP:	384:evl4zAZ+ssqWqPRSKLA4kM0aQfBn9M2+iW50SIPzp6+NPf72UReN2CtbvejX7Ij:YqW+7qHP8n4L0aYn9jFDSmzp6w72Uyvv
MD5:	C654A623AD90BB3DCD769DBBAC34D863
SHA1:	8719DE38F17D8E4D73E2A5E4E867D63DD3965BAA
SHA-256:	DEEC787CCA1B9436E080478742A0299E0DB1A9712543A72D2CDC8373FC45A432
SHA-512:	B7440CEC44B71BCDBEFCD878A860EE3CC0163DC0905DC688EBCBCD7C6F5CFDFC187EA0C2B6247A362AD462450C34020933DF7825CF6CEAEB3138D65EB944ABAD
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff2
Preview:	wOF2......Yx.......8..Y..........................`..`..8...Y........a.6.$..X..n.. ..[. ..S...u..l.....!......I=...ubpS5 ...o.........c.7<.y...Q..i.n..T`R.......\|h'..f.=4..G..xI&.V1...6...jf....%.y.!.).../Cj....].W%5VIj...(.........'Q.}.+.Jg.L0..$q.......#..d&...tV.".d..,.(!...p.).. ..d[........hdg.....!=..H..y.\..p.Q.O.........`e#.X..`#F..T....p.@.)UO.;85..y..@..)...!..........GNT.W...VV..j...-=+G%.yuK...u.........%c.Z......8%. ...V..P.^t....g.x.Tkw.g.....H..._R._{...u.....\%.L+...S...+).......Y&,......3......... c...v.S.LI6...X..A.....S...f-.f....X.....F.Zfwe<#c#...S......bk.HA...K.{.YG...9..24;._+ad.md..c..%..uo...6.5....../..tv.(.l.6.>.V..Q.[..Mr.O...,.......B.......TI.7..X.V...O_._3~.5..0..".$.(.j.....b.....W.O.F....$.H.I$.L.)..J.i....N..d..c.......".l..!.\r.#.\|.)..B.)..b...$D..J(..2.(...........j...:....h..&.h...Zh..l....i...:.....z.>.....d.!..f..F.e.1..g..&.d.)..f..f.e.....9.g...Xd.%.Xf..VXe.5.X.z6...ld....f....le....vv....d..

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 31516
Category:	downloaded
Size (bytes):	9077
Entropy (8bit):	7.975537408589154
Encrypted:	false
SSDEEP:	192:JkJUqRyomFIPHR7Ot2kgknP1JtmV2wsibF4HNzDRkyz:auqR4IPHR78iItpw6zDRjz
MD5:	D2BA765F9D6C67BA7509D5DA2286BBB7
SHA1:	F203757417D72E22BB7758260AC52E45175821A9
SHA-256:	75C1F0066A69EBD567208842251EEAB6504884E155407838D5D4DE3F58FE195C
SHA-512:	37F19927E72BE24D0A5FFBFB6B618628205BC816DC7A93BA2B1E07E766951180E90E94C9A0A3FE96A7B2F9B27E8CA9BF380332DF5EC900EDE9575E215A451899
Malicious:	false
Reputation:	low
URL:	https://cdnssl.clicktale.net/ptc/05d32363-d534-4d93-9b65-cde674775e71.js
Preview:	...........}k[...g.<.?..w..8N.-]....]...M(...cl%qq.,..d...3..-.r..r>..)..h4..fF.h...p2...(.6...F{..{.....(qMC...N...vJ....?............YZE...}.]n.'I.(cE.J...E....^.-..U.2v"o..f...D.....~..]M..<wH._.:...-..M.8.._....[.M....+..f......7..yM.t...}2........oxb..uF\|b..+.K{...v...6u$.>..N..Z.mh..z.2.#...>..x\.'.z.a.}eln......+ck.x.a...m.U.x..........lt.m...._..h....u...e.(.`... de.Fu.{f8.g.....k..a2..~./......B..$u...7...`....Ys~.:....3.Y..=.f..........?7,..............~....../7.`...5.x.+.N......4.Ym..v\.+n.FH"}.~.[.$.Y5.Q8........JDM/.... I.\..L...N..+....bwj....S...t~th_.?..O.w...........\7......rt~z8.....\........E.k.^L/.......M.lQ...].B!/;..=<.V.vzt8?H..}....NN.'...}.[.N/O..b..E\|qx....v..~..Hj.u4.9<(...^..(.F.SZ..d....9._.._.T...O...........u..\|..x.i~.L./G...G.....;=...<.ut.{..1.K8/..0...L7#..2.D.h..*...;wG..nw..t~0Uq...wA.Wj..6..c.4..(LB'........".L.@..G..0 h<4g.E...B....V...eW......t.v..{..?<L.`..u.f]...M..7..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	918
Entropy (8bit):	7.758631574599825
Encrypted:	false
SSDEEP:	24:7u4rYtBvoHsbJIecLaeIacWoCBu9YGcbyc4Ucp3ll:dY3voMlB+aQOCBuTQleP
MD5:	173D80984367F7B3AA3EA90545A5F255
SHA1:	72CA9D80BC3C47377288807AA4A923806772B3EA
SHA-256:	240180CA94EF88847E2D92CD212ADF48976659B10D8A9B4BEB95F088B2139BC0
SHA-512:	6CE5C4F9EC30584868B88F8596676CD7464495D9A364D19E6FE8A976F70959A07BF74182AB1E63A7ACC9B6510CD60CF4C27A04533D0C9DA044CD35D35D9D80FE
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-OneNote-75x75
Preview:	RIFF....WEBPVP8 ....0....K.K.>Q".E.......8....d.............w........}.g.............._@.-off..a.......e.K...h3..>...\|.ZL.!....S....!..f.{.qOhk.."....L'......q..k..=7.+.r.._`.4.N......?.!.O)...(~.....C.FZs....7.+.v.9..~H..O^.]...`ge...jn.\....L....e...O.t..0.....h.jj.uy..?...&.kQ.....d^.<O...K..=.].T...9.f.$...b..&.j...-.0...V......\|..[.O.....Kv..}...z..b........S....W ..i^..6Q6+.6./].)L%....9..$E..kz.$i.`..P...6..3...vO..b....g...b.4..rm[.R.p..L...v.YB!...}W.7.^z\|7.?...k\.e./PC.Q.F...[;....H..%w..^.,jO.........?.t.t....Sg.'.. :...BO...N.@49.L..2..S.\..S`...z.wLX..{...T.w...V.@y...t..K.).......U_./..............5..0.S.'R'..8...^)x.T..$..jWT..W#...P...j._].....:..A.!.m.#.j....ko...@.D.$..g.{..."j...,#F..y...9w..\|..9]..-....Cv0...fg...;..2A\|"59.......G.X......c.....0.`...r....-..h...1..j..(...e...}g8?.......F...:I.Ne..%.a&...xtW...T{...a.y9.....B.......

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	477
Entropy (8bit):	4.592206338515134
Encrypted:	false
SSDEEP:	12:trV9WpBoNuJl+wrVha1zAxFcRjWjX0RhiUNNUqBOnBRcA:tZ9TuJzVha1zAx4qwdNmBOA
MD5:	3C6E76BCBDCB330437ED61530A2B2BCF
SHA1:	DAA0188C37DF74DE0EB39E2D534283B0C6A73328
SHA-256:	B8333C033E1EB189917B0AC3250B0CDA6EDCBCDFD4533F5AB2D7D559A26542C0
SHA-512:	9CAF3CBA94921BF540DD1278283164387B61A351C0EABC7BF28BE241A133811BD9924F687E1C4B360DCC31240875B087638986FFF5F2B14071817B6601D3FB67
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/images/Fluent-Play.svg
Preview:	<svg width="65" height="65" viewBox="-15 -15 80 80" fill="none" xmlns="http://www.w3.org/2000/svg">..<path d="M16.7501 8.41185L41.1672 21.1167C42.7595 21.9452 43.3786 23.9076 42.5501 25.4999C42.2421 26.0919 41.7592 26.5747 41.1672 26.8828L16.7501 39.5876C15.1579 40.4161 13.1954 39.797 12.3669 38.2047C12.1259 37.7414 12 37.2268 12 36.7045V11.2949C12 9.5 13.4551 8.04492 15.25 8.04492C15.6977 8.04492 16.1397 8.13739 16.5486 8.31562L16.7501 8.41185Z" fill="#212121"/>..</svg>..

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x840, components 3
Category:	dropped
Size (bytes):	271167
Entropy (8bit):	7.977009118022546
Encrypted:	false
SSDEEP:	6144:I0FnL8M+6KdKLLRyhSWM+xHbThcsI93uy1F2n2Buin:I0t81NKnRyYMcFuKFrBuin
MD5:	102ACAD6A1C5E209BF909A6DE48DF4DC
SHA1:	CDE593F314A09FDFC781034EC7E5C601BBDEF558
SHA-256:	0A613408B182592C1E794E821EB43E8477C0539F6A3EC6F43505D05BD11BA907
SHA-512:	50C5A9C51CB13D0F8F032131D1DD8633E46DB883D6EDC9288009A00897066058859805CEB931633CCE481727BCEBEAD7D7D32DEB6366DB139198FBFC8CF73D23
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1877), with no line terminators
Category:	downloaded
Size (bytes):	1877
Entropy (8bit):	5.153325344001414
Encrypted:	false
SSDEEP:	48:HO2ZOQHHW1FtNtykQ1TlHxgGmM+MHM36MkMQ7Jml:HO2ZOQHHO/+kQ1TdkZ2hZ5wl
MD5:	DCD61EE564F0AAA6F4304F2B12FA08B9
SHA1:	114BB27FB0B7127541B5DB9F33ED2CC1EA42C101
SHA-256:	7EDE728A94FE48F55CE32325E302BD3E73135EA85552B5096683D056B6038D42
SHA-512:	82E07C017F22DFC382939FA770540A805CFCEB257627B96002801217104DE36F1BD1A14950CAA0C334C99D577D3092DE782B6D90820391225EEA28ACDAF4E8FA
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/supportbridge/support-bridge.css?v=ft5yipT-SPVc4yMl4wK9PnMTXqhVUrUJZoPQVrYDjUI
Preview:	#supArticleContent>div{font-size:10px}#supArticleContent>div>nav{margin:2em auto 0 auto;max-width:1440px;padding:3em 0;width:90%;text-align:justify}#supArticleContent>div>nav>div{margin:auto;max-width:1440px}#supArticleContent>div>nav>div>div{display:inline-block;margin:2em 0;width:100%}#supArticleContent>div>nav>div>div>div{text-align:start}#supArticleContent>div>nav>div>div>div>div{margin-bottom:5px;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:1.7em;line-height:1.29411765}#supArticleContent>div>nav>div>div>div>div+a{font-family:"Segoe UI Semibold","wf_segoe-ui_semibold","wf_segoe-ui_normal","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif;font-size:13px;font-weight:400;text-decoration:none;letter-spacing:.975px;line-height:1.38461538;text-transform:uppercase;white-space:nowrap;color:#006cac}#supArticleContent>div>nav>div>div>div>div+a>span{font-size:10px}@media screen and (min-width: 767px){#supArticleCo

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59832)
Category:	downloaded
Size (bytes):	99505
Entropy (8bit):	5.20600737523251
Encrypted:	false
SSDEEP:	1536:ixTfTfE8PWCgGDbn5lHij6D4/55p2/y+XlkpttBJjm:ixTfTfE8uCPIJkSm
MD5:	895E2A12062F1EE44D7D72D266904BDE
SHA1:	896B8B40961C524472FB84C4760160267A3B89A6
SHA-256:	D2AEA4BA12C00A853C03EB8EA9575338D1A21D15314B39B9A7AA039016E6FC93
SHA-512:	5673B54ECFF13BB7263EA98A554B8DEB04C5C2151B164F0A3A1411D9BB624C0395147D618C7C3381F263EAF5EECAA0E7EDC479DB9ABDC1A611110C2DC4610D2A
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/experimentation.ACSHASH895e2a12062f1ee44d7d72d266904bde.min.js
Preview:	// *************************************.// config file for at.js lib.//************************************************************************.// SET TARGET PROPERTY HERE:.const at_property = window.cas.exp.target.propertyToken; // Workspace Name.// *************************************************************************.! function () {. window.tt_getCookie = function (t) {. var e = RegExp(t + "[^;]+").exec(document.cookie);. return decodeURIComponent(e ? e.toString().replace(/^[^=]+./, "") : ""). }. var t = tt_getCookie("MC1"),. e = tt_getCookie("MSFPC");. function o(t) {. return t.split("=")[1].slice(0, 32). }. var n = "";. if ("" != t) n = o(t);. else if ("" != e) n = o(e);. if (n.length > 0) var r = n;. if (n.length > 0 && at_property != "") {. window.targetPageParams = function () {. return {. "mbox3rdPartyId": r,. "at_property": at_property,. ...(win

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9385
Entropy (8bit):	7.822881294786196
Encrypted:	false
SSDEEP:	192:9SpS61Y2WHbeo2bgGszi+/gkGa3uDIy71VV2TtLGkLFNx5S:9SpS6a2Ierg59YkxGAFNLS
MD5:	EBD667C89F68BF45837E47001C909015
SHA1:	C258E7EAA89971FF277D22BAD64E71025D3B16F3
SHA-256:	B51CBE1AF99579551B84A0DD4310F2CC763ABA6885F9E302CB164C67C661BC9D
SHA-512:	A3F06B7431E686E0B8E8B357081B07E4AFE3B96871638E7BECDC121187A32F991D3BFC054090CF8915E38AEE2BE6877BF76F0814EF494B94A6CAA898689E49DB
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/d245e220-3337-404c-b0cc-c0684b680f7e.png
Preview:	.PNG........IHDR.............k.XT....PLTE...$..3...]..O..M.C.g.^..z.E.q.N.G.p....{.1...K./...{..{..T..~.6.U<.Y1...N..z.....F..S..I.3..,...I..{.:.Z3...~..~.1..-..'..-..V.p.z.X.n,..[.r9.Z;.+..1.W.m.z..~.M....V.v1.3..7.-....<...........\|.4...y..U.....S..N.0...P./..2...R....,......Q.+..-...L.....K....+..6.S.M.+.....,...J.-.,...~.5.[,..I.M....5.a`.q4.g>.F.[.v.J.-.A.D.P.^.s=.c.oV.{Y.qR.3.p3.u...T.}X.y...<.W4.k.....7.L..G....B.A.Z...@.;.E.P.m...2..{.3.z...4.I.V.q......=.].q5..G.2.~B.hJ.g...9.8.D._.~..y.9.T0..N.iG.b.x.T.vT.nF.mK.t5.@.rX.v1..{..v.P.r.\|.8.1..~......K.m.......n.A.\|Q.{=.`.~.1..r..D....0.O.E.u.x..u..t./.1.0.G.{1.@..z..u.L.{....o....@.K.1.2.O.v.r.F..y.9.<.j.s..n..r.:.:.:.r3.3.;.y/.8.E.7.<.:.d.m..^..Ax...+..%...d.......(..".....!.....1......BtRNS...!b}^/.?H+'o>.TL.<..g..]....................v............In.B..!.IDATx..?K[Q....1.l.. ..,M.V\2...].E,...TEJ.:..@.8..Q:9d8._@]............1..V.>..{.s.X..O..l.7999.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2824)
Category:	downloaded
Size (bytes):	2874
Entropy (8bit):	5.196998647096783
Encrypted:	false
SSDEEP:	48:9gqOZplvxm+DnZAKXJJRfhFSenR0waxOf5S6Yi29fJXWcE0129fJBBnfK5DxZ:ZOZvoknZr1P3tCOfV29v29zpIDxZ
MD5:	78C4311E4D7A1AFDE2EC6FB093FE40A2
SHA1:	FB9A1881E03ADF12A393759606FF384F847A52A8
SHA-256:	2CA909B3DA6E4A4FC7FD3C9DD490C4DB45435C995177AA5D7D154852EFD69E25
SHA-512:	8736EA1BD4C1DB34FEE9C3B71753D986FFD56129C12C3D3B3C41B920936C13DFFA59E887FC50A6D6AF33C74A9CAD1531FCCBD9620AE0C1AE2FA3C8BF455465AE
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/SilentSignIn.Main.min.js?v=LKkJs9puSk_H_Tyd1JDE20VDXJlRd6pdfRVIUu_WniU
Preview:	!function(){"use strict";var t,n,e,o;function i(t,n){var e,o,i,r;"object"==typeof window.top.analytics&&(t.behavior=null===(o=null===(e=window.top)\|\|void 0===e?void 0:e.oneDS)\|\|void 0===o?void 0:o.Behavior[n],null===(r=null===(i=window.top)\|\|void 0===i?void 0:i.analytics)\|\|void 0===r\|\|r.captureContentUpdate(t))}(e=t\|\|(t={})).None="None",e.EU="EU",function(t){t[t.Undefined=0]="Undefined",t[t.MinorWithoutParentalConsent=1]="MinorWithoutParentalConsent",t[t.MinorWithParentalConsent=2]="MinorWithParentalConsent",t[t.Adult=3]="Adult",t[t.NotAdult=4]="NotAdult",t[t.MinorNoParentalConsentRequired=5]="MinorNoParentalConsentRequired"}(n\|\|(n={})),function(t){t.Impression="IMPRESSION",t.SignIn="SIGNIN"}(o\|\|(o={}));var r,l=function(){return l=Object.assign\|\|function(t){for(var n,e=1,o=arguments.length;e<o;e++)for(var i in n=arguments[e])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},l.apply(this,arguments)};function d(){var t=window.top.document.getElementById("iframeOP");return"

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2703
Entropy (8bit):	7.656594803573823
Encrypted:	false
SSDEEP:	48:xeCUAFDwGlVJSe8WcWZTmT30kUT5BvR2Yg3dmHORWj2rt+KTQfo7IES:xHUAGeVJSBWZTrjoYgNmHiO2rt+S6t
MD5:	4EF082AFE9892D1AF2BF56EBBBE43B24
SHA1:	6AF8951AB396523FD8339B2DF591835838D15C42
SHA-256:	664490C5ED805C089F854C1EDF01D005F170730A3614D19C60375EB7C3B08FDF
SHA-512:	AF76B054DE49EE1649F657A48FBA51BE3FF7ADDEF68E67C3E09467B02D77AA75301B8E1E773EC2BBB60A684F6F870DE626E5749761F6B98F8686C13E98F3BF25
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/2c3c0c0c-bcb1-4582-834f-ddd6daf4b1de.png
Preview:	.PNG........IHDR.............k.XT...@PLTE...(.........o..d..d..d..d..d..x..d..d..d..x..d.....x..x.(...x.....d....(..(..(...d.(...x..d.(...d.....x..x.....d.(...x..x.......(..(.....(...d..d.....}..d.(.....(...x..x..x..d..x..x..d........d..x..d.(...x.....d..d..d..d..x.(..(......x.(...x..d..d.(...x..d....(...x..x....(...d.....x.....d..d..x.(..(...d..d.(..(...x........x..x........x.(..(...d.(........(......d........x..d.(...d.(..(..(.....(........(......d....(...x..d....'..%.........v.!....."......l.....~.%......t..r.#...............y..x..o..h..f........{..z..g.................s.....n..j.$.........o..p..j..}........E.d....tRNS.........V.u).....&&#.........pNJD1!................................\|]WNGG@?=;% .............l]VF3.............{zusqgZXPM2.....vliaa^`.i....sIDATx....C.A.....+JJ.A..QT............l........^..............=..!..B.!..B.!..B.!..B.!..B.!....:}...s\|...I..'...3tL.D...5-a. ....k...T=V........C....y9..5OIB;p.Yy>j...p.%..Mc..s..f..R..;f../.P.<..AV.]....r^...nj..P

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	781
Entropy (8bit):	4.778342118734739
Encrypted:	false
SSDEEP:	12:o3hM8BZGEFNshi9Sm24qxfREGm24qHF5wlQm24qBqRU4Vgs6mClzR:y5B7ZvqXEdvql5qvqBq3V2Dl
MD5:	96DDEA96F43B844AD97950D109C49366
SHA1:	5E03C87FFA2D7280EDFB161374B5627BFFB7C84F
SHA-256:	D941285D752E28E91E025F65C8734EE3C79D5D514C6649EE22C07C9AA6FD1308
SHA-512:	2797C9744A7EF774067E96D223225ACF59330CD1F649092A70232AA88CF9468A0E6924CC00CCA5A92487479E43636245FE99E5BADA301E9575C284C83F45B083
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/alert/v1/alert/clientlibs/site.min.ACSHASH96ddea96f43b844ad97950d109c49366.css
Preview:	.cta-font-normal{font-weight:normal !important}..alert-full-bleed[class*="bg-"] .alert-content a{color:#fff;word-break:break-word}..alert.bg-alt-blue .alert-content a,.alert.bg-light-blue .alert-content a{word-break:break-word;color:#000}.@media(min-width:768px){.alert-display-more{display:none}..alert-description-truncated{display:none}..btn.btn-collapse.alert-btn{display:none}.}.@media(max-width:768px){.alert-content.btn-flex-direction{display:flex;flex-direction:row-reverse}..btn.btn-collapse.alert-btn{transform:rotate(180deg);display:block;margin-bottom:auto}..btn.btn-collapse.alert-btn.expanded{transform:rotate(0)}..alert-description-full{display:none}..alert-description-full.active{display:block}..text-truncated{display:none}..text-truncated.active{display:block}.}

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1246
Entropy (8bit):	7.808846010085192
Encrypted:	false
SSDEEP:	24:MTdxpgq3k47p11dMKevQVzC4jdSLCbw8/vSU3wJqcc+Saqpt:yvRbN7dMKf/jdaCdamwJbc+m
MD5:	0B0D324D8294AB9E1C36EFACB6276980
SHA1:	B7599E4CDD88F31A4A56C610D3E86223D95BAAE0
SHA-256:	0FE6AA8A56A4B66BA0B2D23C8AF6F1F94A894E5525C5E193C7FD70EF05A7E5E6
SHA-512:	C08A4BBDB1F2ACB74FAD8B2B51CD0E3343D38959153A62FD5E98B4591548E92344131C9ABFC742B3E51FCAE5D8FE8C98032B9EB5D2039690598B0E825093436B
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Microsoft-Outlook-75x75
Preview:	RIFF....WEBPVP8 .........K.K.>Q..D......\|8....c.....n....K.#.'...s..5y....\|..{&...k....................[...._...>..r.......R..}3...g.....V.5u..V..../...~."...~.>y._...........B{..-kRW.d..=...F.......~. >Jr.pc...]..............gL.v$i.o.T..!P.....z..Go.....GE[......w..^.. ...M..].o....n.+WM.)..4.....?.\|Q3..c.u....2O.N.....`..n,$`? ......P..{.tK..TP.....e.J...X..4..J\.<...7..CU....<g6D..]%......QO.--Q#..\|.fe.&.1U...d.%m?.5...I..@.*E...k<.....,...IP.]T.O..8./...=~..X)......L....U........N.x0.<u.........x.......c._!...GdA<.....F.q..mj... ..O...5,#..".dPTO..9.....+.K2......m....Bl....K.#.>;s....8NG...l..% ...8............\|t=x........&..\|p.....~...G....?.j.Z.30v.m..a...i.N...A./-.....J.2.]zPI..j\|3).PPr!..s....Zv......#/.,z.jM..Kr3...8.H.hH......d.t...........,.!rP.ZQ...N....1.K...v.(...C.%......F-rf.FDW..m....w.....^....M.y...:..u^.. .........,.B..6!D$/.......:>.........ZD.^..l8....[&\.h....'.....#..#......`...s...<....P...Ih.......+\|

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	440
Entropy (8bit):	4.871214925208103
Encrypted:	false
SSDEEP:	6:NqDRMBTolKXxqsgP0KOFMLs9cVNKmV+o/Kr2yqzfMGlP04xNqzGJM9PQQKR2lHoN:gDR4QKhDLUN+MKYMUPjxTC9PIW+
MD5:	1913B28373B6A15EBDF30FEECB53BE9B
SHA1:	3052D7BC1FF3670A286B0DC53AE9C1019814F067
SHA-256:	A6A059D3B6AF6E1C915EF1BE02FACAF63A559CB07E40263C0A0CC29685FE7BC8
SHA-512:	F5A931A3A2CF7E94DEC9322E78D32CB0A9CCDF3AB53EAA355A740BDC9BFA16FE8CB4711ADB268D8DBE4E7ADF1C8803C7974405CFFC36C713F3B9DFB8AE3DA6EF
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/accordion/v1/accordion/clientlibs/site.min.ACSHASH1913b28373b6a15ebdf30feecb53be9b.css
Preview:	.accordion ul{list-style-type:disc !important}..accordion .sr-text{border:0;clip:rect(1px,1px,1px,1px);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal !important}.@media(forced-colors:active){.accordion-component .btn-link:not(.inactive){border:0rem;text-decoration:none}..accordion-component .btn-link.inactive{border:0rem;border-bottom:.125rem solid #0067b8 !important}.}

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 960 x 540
Category:	downloaded
Size (bytes):	89401
Entropy (8bit):	7.983830870854764
Encrypted:	false
SSDEEP:	1536:O0tlL9HAc5vZfgVMlebvdE3cuj5CZLJdu8tFgmkJVNfaghgZf6zGujvOdXCkKFCG:jfLR7XSdF7VtOmIVzXzn2dXysdKII0k
MD5:	B1F5B34FD4653ECC55A495B7A6A59B51
SHA1:	A3E0E79E99FE0614A67143206A4B91E6811AE61C
SHA-256:	2A38C4E7692EFECBF4B5F6EFD20DDBD3D77D2EDC91F8A76132431C6A068A6E41
SHA-512:	C67F0806499612281C4D03362CC459ACCC5254709FA351B8AFAA5F2C1509F723E465DEEE675ADF154B95A12F66A26C9B7B2D63C86BEF7B321D2C7E9CF41BE5C8
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/4873755a-8b1e-497e-bc54-101d1e75d3e7.png
Preview:	GIF89a............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.........3..3.33.f3..3..3..3+.3+33+f3+.3+.3+.3U.3U33Uf3U.3U.3U.3..3.33.f3..3..3..3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f+.f+3f+ff+.f+.f+.fU.fU3fUffU.fU.fU.f..f.3f.ff..f..f..f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........+..+3.+f.+..+.+..U..U3.Uf.U..U.U......3..f.............3..f.............3..f............3..f.............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U....3.f.........3.f...........3..f.............3..f..............3..f..........+..+3.+f.+..+..+..U..U3.Uf.U..U..U......3..f..............3..f..............3..f.............3..f.....................!.......,............c..Hp.....L.p....J.Hq.../j..q.. ?..Ir..(O.L.r..0_.Is..8o...S.@.1...Jt..H.M.t..P.J.Ju..X.j..u..`...Kv..h.M.v..p..Kw..x....(......<Xp...#^..q..!3..8...+c..3..As..9...K.^..5..

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	591216
Entropy (8bit):	4.457159748744365
Encrypted:	false
SSDEEP:	12288:k8/e1j6gGD1sXRxMh2muS4NwejoZXaOrbpKjxagFg1g/oG8o7XdYCohcw9Tp+vKE:hDoYg
MD5:	831D94570D3BFCB11E9007DBC3E71464
SHA1:	38F81B54E32C68370C37C704F838A895A952B17D
SHA-256:	DF3D3F80AAE55064D2DF6F7EC5CB9C1F45F5BD75B4F81758E582FE271842FA47
SHA-512:	592FD31E6825F34AE158E68637E9369B9E62DE86CF82050961A96773591D7202C8D5DB9805A30C7FD7224E5D15EC5AFA9F6F4036F91E6C14E09E663DD9CD4D3B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/onerfstatics/onerfcomponentfactory.js
Preview:	// onerfcomponentFactory.js....define("componentFactory", [.. "require",.. "exports",.. "htmlExtensions",.. "utility",.. "stringExtensions",.. ], function (n, t, i, r, u) {.. "use strict";.. Object.defineProperty(t, "__esModule", {.. value: !0,.. });.. var f = (function () {.. function n() {}.. return (.. (n.create = function (t) {.. for (var i, r = 0, u = t; r < u.length; r++) {.. if (((i = u[r]), !i.c && !i.component)).. throw "factoryInput should has either component or c to tell the factory what component to create.Eg.ComponentFactory.create([{ c: Carousel] or ComponentFactory.create([component: Carousel]))";.. n.createComponent(i.component \|\| i.c, i);.. }.. }),.. (n.createComponent = function (t, r) {.. if (t) {.. var o = r && r.eventToBind ? r.eventToBind : "",.. f = r && r.selector ? r.selector : t.selector,.. s = r &&

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/shell/_scrf/js/themes=default/54-af9f9f/d4-fb1f57/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/f9-a5b2ce/db-bc0148/dc-7e9864/6d-c07ea1/6f-dafe8c/f6-aa5278/73-a24d00/6d-1e7ed0/b7-cadaa7/c4-898cf2/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/d0-e64f3e/92-10345d/79-499886/7e-cda2d3/58-ab4971/ca-108466/e0-3c9860/de-884374/1f-100dea/33-abe4df/2b-8e0ae6?ver=2.0&_cf=02242021_3231&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 528 x 308, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	59686
Entropy (8bit):	7.959336940636541
Encrypted:	false
SSDEEP:	1536:qXgMtwztjmT84J5Vnhw1gyUeg04SmiRdTSRC:Caztjm7fVhw1eeg07b/qC
MD5:	D64E27C255582BFDF91A0031E15098FC
SHA1:	EFD8F560E9959483BF5B3AC2F32D45E706DAAC7C
SHA-256:	9ABA33A3527FF6136556534082C289E8AD7D4428C3B79D3FAE7C31E023A7B967
SHA-512:	CDC6D2656B9734BDE82A2E7EDBDCB4F6BAAE4CB447F0F7052090DA822327AA1324907F2D789C4391CC342CDC483D499C1BE981B8C74BF7322BE05ED3795E5D4D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4.....J.......PLTE..................{.....{.......................................................................................................................................................................................................................................................................................................................................................................................TLd..............'....QDY.R(...{.lhs................\|....==_..._.\|....kKint../n.o.20O..{^...........3$2d........NUw....Y^_....=.G...........ryH%0.<..wl$%B..0Yi..2..q=....B.^..K0G....._04.........dV.R;.]b....l.p.x.Ey.y....aQ<.I.xjx=<...V.b......=BB-U..B7.......}...3.Q...Q.l.$.\|.~...0.JU.n....J..8X"....tRNS...%....Q> .A....IDATx..Kh;U..U\|e.....+..@b.UPc...D.B..4>F....#.....">A%-..RWU..@..].......B..Dp#n....Mnc.u..}.LR...w.SO._..p.....:...O}.P....S.....t....M.......+..Y.\.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (955), with CRLF line terminators
Category:	downloaded
Size (bytes):	201253
Entropy (8bit):	2.661810841903416
Encrypted:	false
SSDEEP:	768:W7nJSq9GinOo20uqxjr3+AKyKEAPNPPn8P9R/3htzAVT+JcYY5WRItsWc7rQ3S01:WHGiOoHuOjr3+AKyKAXS
MD5:	85DE642E1467807F64F7E10807DF3869
SHA1:	C795B490811C0E5A1A8F3C3F620AAB9F00C34F07
SHA-256:	5965B2C5472AACA1CD66EA5B0D07A971B961FEE72FC27EB1F6C760042084B21B
SHA-512:	BF4EC56D6FC54EAAFBD57C4E4D06900D358E39CE15009FB983491B0A83ABB60A0A54F46BE86387AB837B4AE1D1F3FF99156D04207065B0F65F165B54CFAAF47B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/
Preview:	..<!DOCTYPE html><html xmlns:mscom="http://schemas.microsoft.com/CMSvNext".. xmlns:md="http://schemas.microsoft.com/mscom-data" lang="en-us".. xmlns="http://www.w3.org/1999/xhtml"><head><link rel="shortcut icon".. href="//www.microsoft.com/favicon.ico?v2" /><link.. type="text/css" rel="stylesheet".. href="https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css".. /><title>Your request has been blocked. This could be.. due to several reasons.</title><meta name="Title".. content="We are sorry, the page you requested cannot be.. found" /><meta name="CorrelationVector".. content="VbLZYbRlhU2hyedN.1" /><meta name="Description".. content="" /><meta name="MscomContentLocale".. content="en-us" /><meta name="

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30647), with no line terminators
Category:	downloaded
Size (bytes):	30647
Entropy (8bit):	5.389557554734225
Encrypted:	false
SSDEEP:	768:s4tHaTVLfVG+Ies8ZdCDVydmY/MP5ulx7dxrxTyO4D4/R6o5HMv:JtHaTVLfIiXCx2moHrxTyvDiR6oGv
MD5:	EEE640D58B09A4461472719DC7EB973F
SHA1:	EFC06EAC0DB27ED7A8E8D8078FB0568C7E558A58
SHA-256:	5C525027B646BF78EBA749696366D20E8AA5C3603043339EB5AD828175C7238E
SHA-512:	01F42E29528588AC4A12E73E48D30FDB842CC54667F029C813400F7670CFCAF7996728983EC609B28DB0B547A7D3F7E17F19AA7B691E2F74AF8F93E9529EE4F4
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_re/3.60.0.0-release_5218/jsv2/UISuite.js?_v=3.60.0.0-release_5218
Preview:	window.lpTag=window.lpTag\|\|{},lpTag.taglets=lpTag.taglets\|\|{},lpTag.taglets.lpAnimate={_V:"1.2",name:"lpAnimate",elements:{},queue:{},conf:{interval:13,duration:500,easing:"swing"},init:function(a){if(a)for(var b=0;b<a.length;b++)this.conf[a[b].id]=a[b].value},_supported:{opacity:function(){var a=document.createElement("div");a.style.cssText="opacity:.1";var b=/^0.1/.test(a.style.opacity);return b}()},_regExp:{alphaFilter:new RegExp("alpha\$[^)]\$","i"),opacityInAlphaFilter:new RegExp("opacity=([^)])")},_cssPropHooks:{opacity:{get:function(a){if(this._supported.opacity)return parseFloat(a.style.opacity);var b=this._regExp.opacityInAlphaFilter.test(a.style.filter),c=b?.01parseFloat(RegExp.$1):null;return c},set:function(a,b){if(this._supported.opacity)a.style.opacity=b;else{var c=a.style.filter\|\|"",d="alpha(opacity="+100b+")",e=this._regExp.alphaFilter.test(c),f=e?c.replace(this._regExp.alphaFilter,d):c+" "+d;a.style.filter=f}}}},_cssNumber:{zIndex:!0,fontWeight:!0,opacity:!0,zoom

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	204055
Entropy (8bit):	5.557201746049791
Encrypted:	false
SSDEEP:	3072:DismT/mHKxQlVyDqBPAizS7Mzm3NLJa2lQn+SM7qSASyntnh:2smT+X+NLJab+S2qSASyntnh
MD5:	7B3A8EB2DF127E5D0870E11C116A5F8F
SHA1:	3A7EC51120E9EC70911C3B5554DEC5AA5FD61168
SHA-256:	6BFD174274D9ACE1C7E8B7B66F8AE0C33D263AF788ED989561E9E43D46622482
SHA-512:	012FA37875CDDCC7AEF98397E45C4FB339C30E12E4F7929AC81E0076DBB2657A108822C3AD9332A81A4C34682A81F1AFE73A3598AF4403FB13EC68B2B274F441
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js
Preview:	MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.children),delete e.children);u.length;)if((n=u.pop())&&void 0!==n.pop)for(i=n.length;i--;)u.push(n[i]);else"boolean"==typeof n&&(n=null),(o="function"!=typeof t)&&(null==n?n="":"number"==typeof n?n=String(n):"string"!=typeof n&&(o=!1)),o&&r?a[a.length-1]+=n:a===p?a=[n]:a.push(n),r=o;var s=new c;return s.nodeName=t,s.children=a,s.attributes=null==e?void 0:e,s.key=null==e?void 0:e.key,s}function T(t,e){for(var r in e)t[r]=e[r];return t}function d(t,e){t&&("function"==typeof t?t(e):t.current=e)}var e="function"==typeof Promise?Promise.resolve().then.bind(Promise.resolve()):setTimeout;var l=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord/i,r=[];function a(t){!t._dirty&&(t._dirty=!0)&&1==r.push(t)&&e(n)}function n(){for(var t;t=r.pop();)t

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (452), with no line terminators
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	5.024945445284132
Encrypted:	false
SSDEEP:	12:cbIzEIHP6EIHPKO9zN1JT9bEQsNa29ophufdYN:cbIVvQvjh1JBbEBNa29Xli
MD5:	7A250BCCDECEA73EF18C154F9D245CB4
SHA1:	66D39A7FA6188F61258B70B39BB40D71FEFA359D
SHA-256:	3EECFAA9C0EAA7FB61CC255AE97AB887A24B016B1BA0EA14860A8E7C47CFD701
SHA-512:	1B1B7916B07C2B27DCC04CA3B0302E9E3C69E2C1B2BCCA3DCED3360A6219AD27C2965E23889F956480A3F2CEE32A095B30AFC99B53594EBE0913EA38E4F8BC93
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/accordion/v1/accordion/clientlibs/site.min.ACSHASH7a250bccdecea73ef18c154f9d245cb4.js
Preview:	'use strict';$(function(){function b(a){(a=$(a))&&(a.hasClass("collapsed")?a.attr("data-bi-bhvr",7):a.attr("data-bi-bhvr",8))}$(".accordion li .accordion-header .btn-collapse").each(function(){b(this)});$(".accordion-header .btn-collapse").on("click",function(){b(this)});document.querySelectorAll(".accordion sup").forEach(function(a){0==a.children.length&&a.insertAdjacentHTML("afterbegin",'\x3cspan class\x3d"sr-text"\x3eFootnote\x3c/span\x3e')})});

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.269328710078199
Encrypted:	false
SSDEEP:	3:4MR1KgyWFECYDoNsDUln:4MDmCfs6
MD5:	6F083A779B1F1F71387FAA38DFA66F12
SHA1:	D60B5A5FD76B11B8DEF1AD1657738292E59C98CE
SHA-256:	2E8B2387AB049BE1306502B20D4BF3DB940C5E86152BB5927086AAF508E65776
SHA-512:	CC80DAAFFDF01EE35154C4992ED1B7E146EE3A7BC7C8DA2B51E855B29352527FFA6FE2D5672EA9BF92FED0AEBA14A1DD771F904C4255ADF184B75CD2746E0A00
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/modal-component/v1/modal-component/clientlibs/site.min.ACSHASH6f083a779b1f1f71387faa38dfa66f12.css
Preview:	.edit-mode .modal-dialog:before{height:100%}

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	21727
Entropy (8bit):	5.232101618468897
Encrypted:	false
SSDEEP:	384:xYzlQeau9P3TI8NCUiLFv1uP4ZVSc2uQyea+eHbJjaTbz7NiCR6Rv98NOsQzOiL/:xYhQel3TI2ChBt2OVSZuQoJjG7N1R6Rp
MD5:	C49C34EE38F103BCB82F58DED32F57DB
SHA1:	757C8CE6D92102903F636C20B70E414A5E9A2E20
SHA-256:	BDBBDA3BD97031FF5BCB76B427D2ECD9C4617922C3860F662E51FB18AC5CC591
SHA-512:	5C5307784F8B7D3CF479154CADF3525D1D1BF05216D72BB32ABEF6E25183E26FB4D84DB7B14AA2868B11F54E23284D02BFE0309EE4D560AC79A507F762DBC219
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/feedback.js?v=vbvaO9lwMf9by3a0J9Ls2cRheSLDhg9mLlH7GKxcxZE
Preview:	/! Copyright (C) Microsoft. All rights reserved. /....(function ($) {...'use strict';...(function smartFeedback() {....var activatedStarRatingValue = null;....var activatedStarRatingLabel = null;....var userSelectionIsInfoHelpful = null;......var checkBoxSelected = false;....var starRatingSelected = false;....var verbatimEntered = false;....var $spanDisplayElementsForStarCheckbox = $(".translationRatingStar, .checkboxTick");....var $extendedFeedbackStarCheckboxElements = $(".translationRatingStar, .articleExperienceOptionsCheckbox");......var $extendedFeedback = $("#extendedFeedback");....var $extendedFeedbackForm = $("#extendedFeedbackForm");....var $feedbackWrapper = $('#supWrapperToPreventFeedbackFlickering');....var $starRatingDescription = $("#starRatingDescription");....var $supDisableStickyFeedbackButton = $("#supDisableStickyFeedbackButton");....var isEnableStarRating = $feedbackWrapper.data("enableStarRating") ? $feedbackWrapper.data("enableStarRating").toLowerCase() === "tr

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	2860
Entropy (8bit):	7.678555820497896
Encrypted:	false
SSDEEP:	48:+pYjGyYapIHL3+zjm6A+j+U/NmzJg2vecRdhH9epuT+e1P+BLkRGmSI4b:+ajPE3+GCszCgPeuq64qtSLb
MD5:	966A7EEF1A56D28688B50DEF242D3F8B
SHA1:	A5715DC3E4D18468C1E9520B0CBE49FB943F71EF
SHA-256:	7A46A2E31605CED812C80D69077CCDB3EEDDDF98521162923F8B222D4CA048E0
SHA-512:	02C5AC882DB6B194682941A5F21B36233F510F7ECAEE29110D764A8626EFA8527B1DA1963A9D038FEFA96270E13BC05826D54499148EDCFDE94BA57C65514FDE
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Icon-OneDrive-111x111?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D................U.................Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......o...o....pixi............av1C........colrnclx...........ispe.......o...o....pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma.........................kmdat.......niP2......T..yF....L.....}U..tw]....47]....W:...R..]/..~W...].L..+...t.p..s..exKx.#.6"Pk.8..ub.)..?.^.@Gt...+.Y.N...7B...VM/...S....{=.......(...p...c..j.X.vibyl^.WH.7\|.#...~.pNM.S.......Oz.3..\|h/V.t{OC.....M..../4..c.....v&...f........./%..(.......F.....D...(.;]..(.HP.3+.)]..`M.....v"2....t._...)...BD.io.......E.-....o.[.c`.D$,.........=A..'f.\...l...PF...@.A..dt=..Z.f;/...L...[.%..0..70.n.k...w.G.2..R.X.....b.j.K.&!."..Q.tM..8W+2B...A* ....k=....~>e.(....H.n...:.>..K.em>...,..v...h..c..w.q.*.L...

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6493
Entropy (8bit):	4.551839647285828
Encrypted:	false
SSDEEP:	192:i5FC2Hc5G5S5QIcYcapz1CIw4AG/ayMJRLQDBRLa3R5WI:i5FZHcAwO6ZP/MRUHeR5WI
MD5:	72BF18B12BFCDCFA8B757E8413CFA263
SHA1:	5D69BCC252CE7D0F985699D36827F84EABE1DB4C
SHA-256:	119C6149B19ECEA8E4EF2C5AB47B20C5FDEAF1546F1C0A4349A345A74CCFEFE8
SHA-512:	9502AD91D78E6EB3C212944A66E2A18A38D26A1E510E278C6F2384E380D182345656F9AA66CF368F5B0AF8C3BB5FBAD7CB8E58EFDF8D66B9055C9C249E36393E
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/alert/v1/alert/clientlibs/site-countdown.min.ACSHASH72bf18b12bfcdcfa8b757e8413cfa263.js
Preview:	$(document).ready(function ().{. 'use strict';.. var translatedCountDownTimerVariables = $(".countdownbanner").data("count-down-timer-variables");.. function getTimeRemaining(endtime) {.. // Set the date we're counting down to. var countDownDate = new Date(endtime).getTime();.. // Get the current client time. var clientDate = new Date().getTime();.. // Find the milliseconds between current server Date and the count down date. var distanceMS = countDownDate - clientDate;.. // Time calculations for days, hours, minutes and seconds. var days = Math.floor(distanceMS / (1000 * 60 * 60 * 24));. var hours = Math.floor((distanceMS % (1000 * 60 * 60 * 24)) / (1000 * 60 * 60));. var minutes = Math.floor((distanceMS % (1000 * 60 * 60)) / (1000 * 60));. var seconds = Math.floor((distanceMS % (1000 * 60)) / 1000);.. return {. 'total': distanceMS,. 'days': days,. 'hours': hou

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	19600
Entropy (8bit):	5.790313764793093
Encrypted:	false
SSDEEP:	384:Ap7zYdCuhywhJiHui2mheS22hZ4JmIBMtbkaprj/42+MXgai:C7zOowCd2mheSlkSdrjP+Mwai
MD5:	D3B052243F835D67AF736C26A359533D
SHA1:	8D6F8CC779FE29A3C5AA41B1EEE41BCCA4DD84A7
SHA-256:	5214C3AC8AEF0E2CBFF68890171B67D42C710C87CDF50C4515B480E3DB570945
SHA-512:	5610327630E8C73595576A79CEEB1CEF014162BCE4237BB300F85C79514C155A2A99E46865BEB0D6E879D3465BB1677F7ED89D00AF7420D4779BA5458A194828
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/load-script.js
Preview:	function loadScript(url, async, defer, crossorigin, type) {.. var script = document.createElement('script');.. script.src = url;.. if (async) {.. script.async = true;.. }.. if (defer) {.. script.defer = true;.. }.. if (crossorigin) {.. script.crossOrigin = 'anonymous';.. }.. if (type === 'head') {.. document.head.appendChild(script);.. } else {.. document.body.appendChild(script);.. }..}..// SIG // Begin signature block..// SIG // MIIr4AYJKoZIhvcNAQcCoIIr0TCCK80CAQExDzANBglg..// SIG // hkgBZQMEAgEFADB3BgorBgEEAYI3AgEEoGkwZzAyBgor..// SIG // BgEEAYI3AgEeMCQCAQEEEBDgyQbOONQRoqMAEEvTUJAC..// SIG // AQACAQACAQACAQACAQAwMTANBglghkgBZQMEAgEFAAQg..// SIG // wICQeL6lBTAvIyDbUlJWb/8FTBOcmun3GMJyJMBUXT6g..// SIG // ghFuMIIIfjCCB2agAwIBAgITNgAAAd9zgZcWvjL9DQAC..// SIG // AAAB3zANBgkqhkiG9w0BAQsFADBBMRMwEQYKCZImiZPy..// SIG // LGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRUw..// SIG // EwYDVQQDEwxBTUUgQ1MgQ0EgMDEwHhcNMjQwMTIwMDEz..//

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20946
Entropy (8bit):	7.93232536946356
Encrypted:	false
SSDEEP:	384:ecpgK1ekapmcRcYDw6SaYAwQTniYPMalqQm6vkoP9njpqNT:eKjUkapAsw6C9ePM2qQm6vkoFnwT
MD5:	68B6034D22E6083CF2592BF4B8B71F0E
SHA1:	0981B22AF5F2BF930794557717FF7C7F4FF563FF
SHA-256:	56E5D47C342207184BE9DE6E3CF06CF26C32B34EE799B3ACC95EBEEEEFA5484A
SHA-512:	3CDA6510769E8EE427103B1D76A0035E2A3E62C4EF0E789DBC28969B12F2DF2C1F7E7652FDF9CC99C7C086CF2764A19520D15A5FED86ECC5CAB9D9F77D534E93
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/9e557d93-f803-44df-a274-1282d542cf63.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...QgIDATx....nEy....j.%bU.X..n^......Im..M."Z...+hU...m.e.....A.FQ.m......D....ELTD...Uo}...>.\|3....v....y..gf.:.?.yf..n.m..a........+.~..J u..}.k.........:;v.P......qM.c;.1.S..j..@v....O...c.@.....5Z.P.E{...P.(.......PvvQ..... .IGj...U.:}.#..Xghj.C.MQ...Kua...)G,4]..?.........#.......w.Ti'.Vy....S....%._).'...J...%.u\.R.Oo.R,p......"Y....N:V.P.R.W......O..Pk...n......Z.....).....HVc.Z.M....H....X......5....$....p......".>...<U...Sc.\|.K...Q.NR...k...k...F...).....H...=.....+.zj(....]/5.\.........).....H...\.@.;.\|.......I.&5.'.(6.cTz^.....c.r...r....k.)s.b..<.#......I.1R....k..6........R.d....r.]...NT].H.....D.#%.N..X.......7.t,..z.;cS.p].f....E-...6.#......IuG...p..c[.g.`..v..R1V...J.9.J... ..HqIw.NS..........3.G..pI.+p.....#.N.......Gp....).....Hf.H..1.#.4..2r.f....t..;.Z.7W........".=1d...^.....M ..I..T...../.t.T................_JLz)......{..hFJ...E..t9.).WaXj&

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1234
Entropy (8bit):	7.814887250980293
Encrypted:	false
SSDEEP:	24:YwOCBa8E7tieBK24EaUHl7LreFmQieSthkhRYFXgjrO7PQaRzek:Ywn3E7ti2nzDtreF+LqMWrO7TRzF
MD5:	38B935C05A3C5F63308B3B7BD4696DF8
SHA1:	9BE7CCA671BCC1E1C07FBFB11FDCEA2E664D989E
SHA-256:	A1F368DFC04A32BBE760A93A4ED4EA6041411759B4B232EE9CB748C9A49B06B8
SHA-512:	D96FEDF47B2A902D96A399D83884C94E97129F576A2CC040A26524CA7DE01069410A20636AA04F86E7D6DD121A9CAB813AC01555BC3AB9422253A63764E45F32
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........n..n..ALPH5......m#G......#"...'.j..G...4.N...,x,........X.m+..q........\.x..".?...{...........3[...Y.+..w.)...q...'.....~R.@<....N6. ....\|......r>.5m.....Jsc..Y.4..2M..qX....bA.....I........y&.Bp...#..`...q......4...CF.4@..t..S..-CZ.sh......C.g.h[..}....ih....@g....j...<..<..j.../.?..`..O,._.......t...;.VP8 n........o.o.>Q".E.......8....j`.......+.W....C...[.._..@.r..=.<.=.=.?G}1...s=.....Z........h..?._.]F...\..~.P.<..#_...@G.&=..v...)&.%..J#.....\.>.y.%Gn%."X.3h.......z.M.qQ6..UQ.........~..d....bf{.....~A]...A....e........{....s.F..d}...{.[v?...i..y\e\|\|3..!..({zq...-.x. .Q.Z.E.2l.wm...)y...w.G.T..h....d8-{N..._Kg.....w........G.....A..;...3.}../..2~.[bH.-......,......._.PwnI...;....75...Q~Cg>.8.8...<.g}.%.4...y....8...dC...1..*.....l.......\2X....c..n[.L..&....d.e.{.U.f".ly...oj..(...oS.s.......-M+Ta.._vpH'7.U.L...8O......dQv...xi...=.V...;.m.]>....X.8%.7..{.R8n.s..K..0.&....e.......RW..I....U.-.....[L.k....

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2674)
Category:	downloaded
Size (bytes):	2728
Entropy (8bit):	5.253272384445131
Encrypted:	false
SSDEEP:	48:M1wQmQqQNrfAI4dz2eLNBxROk2oDZ8nVlnQiOk50NQclnmlnmZ5flnqlnuln5jBN:emQjNj4t2eLNgsdiQj+RacmVYU57vzKO
MD5:	468D4ACC570CFFC7101AC8A63514AD31
SHA1:	6983E89B6EC798B5B8C2B3B76D9311808437B572
SHA-256:	B4B342F2025799CA602A75590B324E7493B0903726720BCE4CA793207C83255C
SHA-512:	9042A219E8511FF281B9F680B3577CE3EAE29E881F24BE1D2B46C89D1F0013E30AA890C1A0181FF83975E125F62C0C6E896D3B8515067221143D9A3290B42865
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/MeControlCallout.Main.min.js?v=tLNC8gJXmcpgKnVZCzJOdJOwkDcmcgvOTKeTIHyDJVw
Preview:	!function(){"use strict";var t,e,n=function(t){try{return sessionStorage.getItem(t)}catch(t){}return null};!function(t){t.EXPANDED="meControlAccountSelectorExpanded",t.COLLAPSED="meControlAccountSelectorCollapsed",t.SWITCHTYPE="meControlSwitchAccountType",t.SWITCHMSA="meControlSwitchMSAAccount",t.SWITCHAAD="meControlSwitchAADAccount"}(t\|\|(t={})),function(t){t.REMOVE="teachingCalloutRemove",t.SHOWN="teachingCalloutShown",t.TIMEOUT="teachingCalloutTimeout"}(e\|\|(e={}));var o,i,a=$("#meControl"),l=$("#smcTeachingCalloutPopover"),c=$("#teachingCalloutDismiss"),r="teachingCalloutShown";function d(t,e){var n,o={isAuto:!1,content:{contentId:e},behavior:t};null===(n=window.analytics)\|\|void 0===n\|\|n.captureContentUpdate(o)}$((function(){l&&l.length>0&&(function(t,e){if(t.length&&e.length){var n=t.offset().top;i=window.setInterval((function(){var o=e.offset().top;t.offset({top:n+o})}),15)}}(l,a),window.document.addEventListener("displayTeachingCallout",(function(t){try{if(null===n(r)&&null!=t.det

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	834
Entropy (8bit):	7.70182419325142
Encrypted:	false
SSDEEP:	24:0zgLDWgZHXJ0ItjEcl6jCMAAj/e85sFcqq:oqDTntQm3AKDcJ
MD5:	3EBE2FB2CECBBF18F636347D5DA15D79
SHA1:	D9331DD930EFBD768F2639FEF3EECE7E9455B562
SHA-256:	353784F288BF22DB4286A6FA29AD5B98C6F618AB7AE6948C983AFDBA5909D91D
SHA-512:	8E182E3C11B1F88F7670E3931C81A0A4FDFA26A6A216F5C5277859C936D475F350FA7B7D64A363D860FC403667EA24841C3838B71A4C85C444BFDDD59ACC67B7
Malicious:	false
Reputation:	low
Preview:	RIFF:...WEBPVP8 .........K.K.>M..D"...:.8(...bL._7..U........1.......=@...@.@.y....].`...#.,.g.....V.D.YY..../VO.{..b.......3..C.)....X2.j..."v.....g...;l...,..{..%....p.k.^...p.1Z.GaV.&7 gh.....b..As.<..........F.x....<...Y.\|N.P.......(jd..E1..R...6....?.J....s.I..........N;I0:5...?.....e......C............E....p.M~y.f...T..=...y...q.(...m......zk.7.g.(.-.<..O._..o........._(....%y.......Z+/\=....m.e.cW.....l..o].r.0.........U^.~...;&(j=}..U.g~E..].-...Q..)F..)S@..b.}p..,.[.......V#....%..6t....f..nM....W.~8j.. .v......3.....s...p...V.....&.i.+U.R>......V.u.].R/o.;...J5>..C.Ybx\.7p>.1.m_&..@h:2t....%x..f...o.>..X7.Q....lF..A..0F._=.'.u".Bs,.9.B+i).....M......p...aC....[.......I.L...K..g.....jR.p'.wY.J&...z.s.jq..2R..r..,DF...!R..z.....z.j....A..n.P*.F..5.{.a0P.K.1,.....X.=^.....i...A3.0........

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (503)
Category:	downloaded
Size (bytes):	558
Entropy (8bit):	4.98634955391743
Encrypted:	false
SSDEEP:	12:c83DOkFYerjD6tD7fgu1M+WqQRxsZAsDFYAWCyQPO:cmZr6t/zpeT/oWCyaO
MD5:	A3BC5418F2834309CE2918B15F3B8EEA
SHA1:	62BA2712C6D4960F1057E103F6E1F3C95F2C701B
SHA-256:	B2B62643A7C4FE4A4E12934AD819F0293CC00181B78D8091AFFFF3617CEB96B1
SHA-512:	460E22E36E93BEC194D00D47754108539D2E54FF59D4293EEC25463BC3D642879C10D9BBFD881BBE5EC244819F325C422B6D7A7504000BBCE432E4D2A08FB58B
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/shimmerExperiment.Main.min.js?v=srYmQ6fE_kpOEpNK2BnwKTzAAYG3jYCRr__zYXzrlrE
Preview:	!function(){"use strict";function e(e){return document.querySelectorAll(e)}function t(e,t){e.remove(),t.style.removeProperty("display")}window.addEventListener("load",(function(){var o,r=e(".ocpSectionLayout .ocpSection"),n=e(".ocpSectionLayout .shimmer-effect");if(r.length===n.length)for(var i=0;i<n.length;i++){var c=(o=n[i],Number(o.getAttribute("shimmer-delay")));setTimeout(t,c,n[i],r[i])}else n.forEach((function(e){e.remove()})),r.forEach((function(e){e.style.removeProperty("display")}))}))}();.//# sourceMappingURL=shimmerExperiment.Main.min.js.map

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25084
Entropy (8bit):	7.954629745011792
Encrypted:	false
SSDEEP:	384:z4b+mWMn+0y7Pg/1ZG7QBkT1ptdZXWVTTaGOKPKb3BZE3SDL0Fkx1qEPNugrtRPI:E+5Mn34PglkT9XICcPKb3Bh0e5tQT
MD5:	9AA997545CAD62F24960E39B773AE81C
SHA1:	3EBF01E3B3630F127309F816F13FF86B94798E07
SHA-256:	BC5E9528086858FD7BFF758A1B0AE0D559A9930E279ECDF4955572B6AD1E53EA
SHA-512:	4B2572DEA6B5C777AF39359095D97EB8078B3B252D4A70191837BF5C641B860CD4AF56719B3D96E45CBEBB13465625FD5DD6E66BC03F009487FEBEAF5D9F7169
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...a.IDATx..y..Eu...u}.@1.....D...IX..0,A..Fc.`.,.D..H .eUX.....E..X.H...1q......(....l...r.!.....rz.....yf......9.{6z.......h....__......r.S.C..F...T.o...<.9.M..$].6.:...9..vSrN.B.2.Ug....x..rU6i>zY..C.lK.._.v.H.......9.S..U.]T.v..Y8..LJ...tl.C....m(...&.(QpAP.x\".._.G..$.L..)T[.."j$...}...@>z.n-..X.U..45&.S.....N.m\...m"I"...\.q.\|M.6#.............Q....."...e..m.6..f.....Sj...cK+DH...+]..".......i..Q.......xS.24@....C".$b.]'Y...<J.$.jY7J........i..0..1..........y./)Db.@_@.m.X\|..u..f..w..C@.\{.mc..u&....5k..`.j.ZO7.L...7.....R..zxp...B...Y....&!#..v...m[.\\|!}....B%-..K!U..cjj..Z...^...(.J....LHYK.'.@r.....d[..Q>..[VJ..b...H5H-....h.9..K.;.1..#.)fy.........r..B.X.L.)..PV$=..:.6!.B..Z.\|...).....%@..IK.G....'ci....(.-.......R.....5W..]..4.......2[..m...9..g...w.....p.4t..... ..(.je...r..R....{E.y.Xhr..U.>.H....5}.,Q.4S.$..I...R..` ....=R.#.-Y.}l......U.W...

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64025)
Category:	downloaded
Size (bytes):	115293
Entropy (8bit):	5.0176960978006475
Encrypted:	false
SSDEEP:	1536:X4Oe44akvx00KwNInaaw+rHm77BH8l99XBEfyyIu7v00K4XCsBGpFi84Y:hNAA
MD5:	5C194A21B75D0B2FD49477FEB3AEC471
SHA1:	B8378641A52562A6C1C99BE0AF2929569DB3B61B
SHA-256:	867A8D468542A30F03D87B25217883D9E8DF0455A6C441FC0FE22D7FA5445E36
SHA-512:	2A25D5D1F05CD057324A909A3EE02D36E371DE0C12AD09C33DAADD498730896CC1D4FF90612D683F819CD20968B8ADC147011960C4298179D65FB406FE98000B
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/landingpage/landing-page.min.css?v=hnqNRoVCow8D2HslIXiD2ejfBFWmxEH8D-Itf6VEXjY
Preview:	#supHomeAndLandingPageSearchBoxForm{margin:auto;max-width:768px;text-align:center}#supHomeAndLandingPageSearchBoxForm>div{position:relative}#supHomeAndLandingPageSearchBoxForm>div>button{background:transparent;border:none;bottom:0;cursor:pointer;height:100%;padding:0;position:absolute;right:0;top:0;width:50px}#supHomeAndLandingPageSearchBoxForm>div>button>span{color:#006dac;display:inline;font-size:1.3em;font-weight:700;line-height:1.55772223}html[dir=rtl] #supHomeAndLandingPageSearchBoxForm>div>button>span :before{content:"."}#supHomeAndLandingPageSearchBoxForm>input{display:none}#supHomeAndLandingPageSearchBoxForm .supSuggestionList{list-style:none;margin:0;padding:0}#supHomeAndLandingPageSearchBoxForm .supAutoSuggestContainer{width:100%}#supHomeAndLandingPageSearchBoxForm .supSuggestionItem{padding-left:18px;text-indent:0}#supHomeAndLandingPageSearchBox{border:1px solid #a9a9a9;font-family:Segoe UI,Segoe UI Web,wf_segoe-ui_normal,Helvetica Neue,BBAlpha Sans,S60 Sans,Arial,sans-ser

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 800 x 450, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	90210
Entropy (8bit):	7.962596672341015
Encrypted:	false
SSDEEP:	1536:dgQo53/pFSkAXaK+K6hEJ/Ld9tRRjB7JIR15Aj/srhd8Ds8Do:453/fOqnERtRR97q152sgO
MD5:	1B12344FB475425C37D0BD59CBF81A07
SHA1:	5D30C64EF3E017778635BE13473DB39FC16BF70D
SHA-256:	F4A555808405A44531FE9EDA29042C611581DF2B3D129144A4AE38703481EEF7
SHA-512:	601859A9AEFB06F6C144DC5DEB2997C1F48C893079FE40509362DCD8AECCB4DE438CE2F278CEA6095A4AFD74DCEDEF98785E8018B58DB74D1F365A6BE0BD07FD
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/88d840a3-0fee-45cf-9ae1-0891e5102f45.png
Preview:	.PNG........IHDR... ......... .].....PLTE...............................................................................................................................................................................y..................p...................................Ch.......t................Lt....f..e.......r...k.........rYY~..............\.d.....s..cO.........h.....y..:[....vq.fh.....u...w..............W^....]..Zt...............n...........9.2L..j=.u...Z<.....9#.i...o.hX..o..S.:Q....g.......N....$Fu..V...}L...n..9..(.....c...q K...XAc..~.R....)...U....c...o.......bt.....x^...X.v}<..M..e...@6.\|......p.T..P.xA...z.m..X...P...8.k.!...^<#...t:8..M.z[\".r..F?.. m._...2v..8~c..9..uC/.<r..lrw...*..].IDATx...r.F...e.J9.hu....eT.'........1T..1.....%_...2]^........a<....3.Z.[...)K...j.}..\|....S4.~....\|j.'5...E.[E.1...tFN...s.G.J..4_.37.....{(7.;.(..O...)...=.?.PV..CL/.>....<..

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (514)
Category:	downloaded
Size (bytes):	941
Entropy (8bit):	5.237366916956353
Encrypted:	false
SSDEEP:	24:IlxCSV6Pfo4ydsethmnUitaKKklq93+TEDzD:IlQ3sdbtKUitaKHCsEDzD
MD5:	6FC8AFFCA0D3B2C5BDC78E27C9425BCE
SHA1:	1348892B3663F4496C35732DDC4D853452F48054
SHA-256:	531C0795866BF6D1BD0E44A4239CFFB3F0FAC07CC911BEA226ADF84E9C3DDAA7
SHA-512:	B2CD1CFD5711BDF37C435EF0E6764C28A233184CE6BA3AE097441FE2A020B6E172E6DB335F4266DDC98788E86C0CF2145E5B09A125FFA4C166AFCA99DCF2004E
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/areaheading/v1/areaheading/clientlibs/site.min.ACSHASH6fc8affca0d3b2c5bdc78e27c9425bce.js
Preview:	'use strict';(()=>{function c(b){var a=e[b];if(void 0!==a)return a.exports;a=e[b]={exports:{}};return f[b](a,a.exports,c),a.exports}var f={6993:()=>{$(function(){$(".area-heading p a").each(function(b,a){b=$(a).closest("div.row").find("h1,h2,h3,h4,h5,h6");a.dataset.biCn=a.innerText;a.dataset.biEcn=a.innerText;a.dataset.biCompnm="Area Heading";a.dataset.biBhvr="0";a.dataset.biCt="Link";a.dataset.biPa="Body";b=b.first();b.text()&&""!==b.text()&&(a.dataset.biHn=b.text().trim(),a.dataset.biEhn=b.text().trim())});.document.querySelectorAll(".areaheading sup").forEach(function(b){0==b.children.length&&b.insertAdjacentHTML("afterbegin",'\x3cspan class\x3d"sr-text"\x3eFootnote\x3c/span\x3e')})})}},e={};c.n=b=>{var a=b&&b.__esModule?()=>b.default:()=>b;return c.d(a,{a}),a};c.d=(b,a)=>{for(var d in a)c.o(a,d)&&!c.o(b,d)&&Object.defineProperty(b,d,{enumerable:!0,get:a[d]})};c.o=(b,a)=>Object.prototype.hasOwnProperty.call(b,a);c(6993)})();

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/fr/b.php?p=1531105787105294&e=ZoeLCQAAANwNIAN6&t=2592000&o=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32600, version 1.0
Category:	downloaded
Size (bytes):	32600
Entropy (8bit):	7.992324478082099
Encrypted:	true
SSDEEP:	768:DUDXjrIMcH1YcS3IOrOm4VZcd1T5JQ62Fd:IXXjREcnNa6O
MD5:	8EDA29C1ACD384ABB917790DCD92A049
SHA1:	A77A4763CB132C02AD9D2EAE4652F470B66374C8
SHA-256:	E8ED064E3AD6789015C7C3031D57E1A412C80BE1B42D72D06B2631D80F3481BF
SHA-512:	CA8E12B8FA45E5315075CAC8B02A8CAD956341C2D047F126462A5B11E4F20118353ED66971C3901D40A6D4C1F782C1818D12B2E7E5DA30A08C66A75AF25A53DA
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/resources/fonts/MWFFluentIcons.woff2?v=2.15.1
Preview:	wOF2.......X......2...~.........................?FFTM..$.`..<........x.....6.$..h. ..X..t[..Q.<.......B.....H.C.".....&....?'A..&o.S..n...IE..U.RY@,..5.5zB....K.....rU.n.!.f.8...p.q>....;-_."......... ...PO.9.\|....o../.d...0...."0n.N.Kf.E:mvu.SH..R..ECT.U_!(.\.v..0.%.....6.4....Tv.9...T..H(.....<k]"p."...CG.f..B...9?%+.......r.:\z.)...t...[.Z.N._D..g.......^....2Xg...z1......ek8.L6W`.....F.j.U.......0......n..P...t...W..;.0 ..C.$.R.v..mY.0.!.&.PZB.IH!!!@..F...B..B(..u......R..V.uT...,......z.wz^a.s........N{..EZ..(...Jw.'...."..2.(.f."...=.....R....D....".v..].^.5...M......k..j.J.y.I....5..9...R..a.U..S......mR..c.o.....L-S.<....X..d\$.DR...fw.n... .:..%x............y'...\|..rfAw.{.7...K..})..3.f.... S.~(...?U...H....b,:.....\|`..3 ..".Q..+.I&....AK.H...O.b../.\.......n.....#.....-"..A......00p.<$..!_....VG.....ds...BB4w.)C.t..F....#...x\|...\..Xu.T....N...?b....%.QQp.p..D..~....:.[.wQ..P.....{..........o_M...h\|%E.'t9M..w4._.Z..x..7. .t

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	466396
Entropy (8bit):	7.974943801737297
Encrypted:	false
SSDEEP:	6144:kdInv1yi9esnNeCcb6fSZbEq6NiDBvfKrwu0lWyTStQkz1sSslnldFWnZc0TyukR:7Nyi9fMLv/DpKcuiWESWldYnZc0TcJ
MD5:	F563A171994601BEECAFAC94106BC0A4
SHA1:	887FA922B89737BE509EA1712D9136BC88D0F015
SHA-256:	36686571CC18CC8464B4A57330D11C137D45DF5352DF0767AFEDBCF660171D0A
SHA-512:	6BFFF3E2328D17EF8341904F17CB03A18C7B40DC64812E15446F5791FFB45ABB99A21333162BFF19B5EA33E6215E92F1B5E9CB36AFA6252C5AD415C55690FA66
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3" xmpMM:DocumentID="xmp.did:811CDA1A686011EEB25FFF87BA6598B7" xmpMM:InstanceID="xmp.iid:1D29C068686011EEB25FFF87BA6598B7" xmp:CreatorTool="Adobe Photoshop 25.1 (20231006.m.2353 10d5734) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c780726c-110d-4368-9520-476e0e8bd161" stRef:documentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (523)
Category:	downloaded
Size (bytes):	2224
Entropy (8bit):	5.2186345351769665
Encrypted:	false
SSDEEP:	48:eO9EDRt44af4Pq9DB2X0bripiiiv9tzgTLB46OqvebaJYiyqjRqQDrWL:NEDP4Xfiq9Ekbripiii1hgTLDGbaJfP2
MD5:	92BA1CB9DA3DD68605F38095FC34BA98
SHA1:	03A31035B1F2601447E9D8C3ECBB62155F66868F
SHA-256:	16FB8ADD8FA6F36427821A7E6D013288A718D69077340CF398AF551D69F65D0E
SHA-512:	2ABD99A77639812E16F94F058EC836D99DE4320959C4A3C00D6E4E133230D297858BF8265379044507E61D173973ECAB1EE40014A798A3AF07A335A3B008CF78
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/content-card/v1/content-card/clientlibs/site.min.ACSHASH92ba1cb9da3dd68605f38095fc34ba98.js
Preview:	'use strict';(()=>{var f={n:b=>{var a=b&&b.__esModule?()=>b.default:()=>b;return f.d(a,{a}),a},d:(b,a)=>{for(var c in a)f.o(a,c)&&!f.o(b,c)&&Object.defineProperty(b,c,{enumerable:!0,get:a[c]})},o:(b,a)=>Object.prototype.hasOwnProperty.call(b,a)},e=f.n(jQuery);e()(function(){var b;!function(a,c,h){var k=3<arguments.length&&void 0!==arguments[3]?arguments[3]:".aem-Grid";c.forEach(function(g){var m=new MutationObserver(function(n){n.forEach(function(d){d=e()(d.addedNodes).find(".f-play-trigger");if(0<.d.length){if(h){var l=h(d.closest(k)).text().trim();d.attr("data-bi-hN",l);d.attr("data-bi-ehN",l)}d.attr("data-bi-cN","Video Launch");d.attr("data-bi-ecN","Video Launch");d.attr("data-bi-bhvr","240");d.attr("data-bi-cT","Video");d.attr("data-bi-pA","Body");d.attr("data-bi-compNm",a)}});m.disconnect()});m.observe(g,{childList:!0,subtree:!0})})}("Content Card",document.querySelectorAll(".content-card .modal"),function(a){return e()("button[data-target\x3d'#".concat(a.attr("id"),"']")).closest

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2006x426, components 3
Category:	downloaded
Size (bytes):	7199
Entropy (8bit):	7.187747411185682
Encrypted:	false
SSDEEP:	192:qEnB1JvWYMCMvNWochd/T0hysvXzQYe+U+Bn:qEXtdMFpcHoPXzQ90p
MD5:	A1EF536F995A784BBCE0E05691367943
SHA1:	5DD8391D8449D754A6F2360F6AF7E57036A8D2E0
SHA-256:	8E87C96FE3F25AF8A013C7F08BDF5A6D6FFF2CDF031332D5DA87D9F4CE4F1482
SHA-512:	315BB5D736EE46DC50720BBAF8F6D50FE2D29EE3A2E529B0FA068B0CA86D9DD8177CDE3184E32BFBFE88F7EC68DDC6F666FB80185A98B41EB21B1FBEF7D4271E
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/4ee76be2-dfde-4b30-9fd9-94e8aeb0cbf2.jpg
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."..........0...............................................................T.........B.. Q%........8..... X..@..Q`........D...2l... .Qr. .2. .`%K .`....Vm....O..~{$..y....R.".Q......@H.......D...................................f......... R. ....{...r.>...YB......Q`....(..>.R.....Iq.k ... .......\.....D...........Q....9...IQ.Q.@@H.FA @J....eK...`..........................w+.C.}9...2..sR..\.R...#.2z..Q`#6...YB......B....%...p..H..-.~z3...Qr. .2. .b. .b. #.$mq......b.^}....).ID.%......d.... ..f,..@H........................p..r.....g!`2..r...\.R.......Qr..y.,..... ".Q`....j.,.D..,%....\..R...... ...H.".H....X.....Q..3..."....@IR.@f........@@@H.......................p..r...~.r.. ..+(....)R....p....`#.....,. X... E......).. .,..._>.c{.........+ ....4H. U. .z..Z.A.. B....]Q.k.l.....b....

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14377), with CRLF line terminators
Category:	downloaded
Size (bytes):	34954
Entropy (8bit):	5.839886474774234
Encrypted:	false
SSDEEP:	768:YDoPc4JEp0zFt57zOowCdwQeQMv16+0kH/at7O9:1SIt5BunL
MD5:	2EA4A47DD31400F09D1478C420575516
SHA1:	17DF2F7B0BCD843714AED65936833D05D671E559
SHA-256:	01DFF1D188C76E5A68772C75F184D8C926D7AF9A6395558C858AC0E5922D15F9
SHA-512:	63276CCEC95C1396A583DC26142E74F8FF0E7E9C59009E960B802C00EAC0751A92E458002A1D400D25580A9EDFE7C5A82A9411A8901378A0D3623F7803893D20
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/page-bi-tags.js
Preview:	//<![CDATA[.._pageBITags = {.. "pageTags": {.. "uri": window.location.href,.. "mkt": "en-us",.. "referrerUri": document.referrer \|\| '',.. "browserGroup": "uplevel.web.pc.webkit.chrome",.. "enabledFeatures": "cartimagebgcolor:1,sc_helpv2:1,sc_uuid:1,muidfallback:1,sc_promocodecheckout:1,cartnocurrencycodecl:1,crossSellModule:1,noeligibilitycheck:1,sc_pidlnetworkerror:1,sc_autorenewalconsentnarratorfix:1,sc_allowupiforbuynow:1,sc_asyncpurchasefailure:1,sc_showvalidpis:1,RelevanceOverride:1,sc_dimealipaystylingfix:1,coreui_videomodule_useflexsize:1,removedeliverystringforamc:1,newvortexendpoint:1,sc_fincastleui:1,usepdpdcm:1,sc_purchasedblockedby:1,sc_cobrandingidurlparam:1,sc_preparecheckoutperf:1,sc_disablebuynowpmgrouping-storewindowsinapp:1,sc_setbehaviordefaultvalue:1,blockineligibleproduct:1,displayappliedfilter:1,sc_checkoutplaceordermoraybuttons:1,sc_buynowpmgrouping:1,sc_paymentoptionnotfound:1,disablealipayadd:1,pdpproductcompare:1,sc_imagel

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	27286
Entropy (8bit):	5.5452829950673035
Encrypted:	false
SSDEEP:	768:v8seqxYspb9EplD7zOowCdwSpNnf277+OLkH/aVCO:v8seq+c9EpNB+254
MD5:	7E5A23C337DA0B50C4007470ACB0E043
SHA1:	F8DE9B13112FEF399A4A4289545845C1EB4DED06
SHA-256:	8EB73E30842C8D3B95665EE77782C1FE357DE1A65E280F36F011A4519799F033
SHA-512:	4B425A9554F145DCAFD9E8469419D18E4C30821E5267728117FAD8E78831F11242EE6927AAA628FCC673F3F7FEFB61C2014FF7A0D63C43BEF03D08084B3969ED
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/index.js
Preview:	document.addEventListener("DOMContentLoaded", function(event) ..{.. const vpElements = document.getElementsByClassName('c-video-player');.. const vpElement = vpElements && vpElements.length && vpElements.item(0);.... if (!vpElement) {.. console.log('no video player element found').. return;.. }.... function tryParse(value, defaultValue) {.. try {.. return JSON.parse(value);.. }.. catch (e) {.. return defaultValue;.. }.. }.... function removeFirstSlash(string) {.. if (!string \|\| string[0] !== '/') {.. return string;.. }.. return string.substring(1);.. }.... function getPlayerDataFromUrl() {.. const paths = removeFirstSlash(window.location.pathname).split('/');.. const videoId = paths[paths.length - 1];.... const metadata = {.. videoId: videoId.. }.. const options = {.. // default options here. below is where w

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65398)
Category:	downloaded
Size (bytes):	149977
Entropy (8bit):	5.425465014322962
Encrypted:	false
SSDEEP:	3072:ds2R7b4i2VvQ8jDNbSDU6ez/4/fOmToUJdupe:dvJ26Dkw/LT9JduY
MD5:	107489D1ED6BE77BFD69EBE4D7B52B6D
SHA1:	FD56DF206A1DD0223D6D18ADAC841582282A346E
SHA-256:	3BBC0000E28054DDBE38B2E7A21DCA8D66FDA56EA48448BCE4658BC6B518A970
SHA-512:	51C5F6D9D7D10D06777ADE20C7E63CBFA354B830B68D32FEDE4B93C15D80873C501C0CCC4D006FD58C639662D2DCBBA193B61427D30F8938EDA4B9049743BC65
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/oneds/dist/ms.analytics-web-4.0.2.min.js?v=O7wAAOKAVN2-OLLnoh3KjWb9pW6khEi85GWLxrUYqXA
Preview:	/!. 1DS JS SDK Analytics Web, 4.0.2. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t="undefined";if("object"==typeof exports&&typeof module!=t)n(exports);else if("function"==typeof define&&define.amd)define(["exports"],n);else{var r,i,e=typeof globalThis!=t?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_analytics_web_4_0_2={},s="4.0.2",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},g=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},p=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),n(a),a)r="x",f[i]=a[i],g[i]=s,typeof d[i]==t?(r="n",(d[i]=a[i])&&(p[i]=s)):p[i]\|\|(p[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(t){"use strict";var o="object",ye="undefined",c="prototype",u=Object,s=u[c],$=undefined,y=null,l="",f="boolean",d="function",g="number",v="object",m="prototype",T="__proto__",b="string",I="undefined",C="constructor",N="Symbol",S="_polyfill",w="indexOf",P="length",A="done",_="value",D="name",O="sl

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x840, components 3
Category:	downloaded
Size (bytes):	97536
Entropy (8bit):	7.953597803741894
Encrypted:	false
SSDEEP:	1536:4CuCypLSyviufmNmQQ7M8snPm+9Df+ZTk0YfrwV4B4Ub+5uY9zvhnEZrI9:4vlpmy6ufmNB8sPb9DfkTMjBI9zBERK
MD5:	344A5FC05D99098F7E8B209DD35B3390
SHA1:	49D080CF51DB7B113CDC682AF4585DB300480B8D
SHA-256:	FAED8FA7DEB08B868EB0FE4DC723DCCEB08795DB385D3765353E30C4288C460C
SHA-512:	C89F1142C4F8DF30E7E122266C54CBFF1C5857FB68807190A3B35227FF858AAAC6DFBE0A45BE232FC8CFF996D25600B6FB2F7094239DBA19FAA707328DBB2F76
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/6029514c-bffc-46c1-96c6-4432175e47d3.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x840, components 3
Category:	downloaded
Size (bytes):	271167
Entropy (8bit):	7.977009118022546
Encrypted:	false
SSDEEP:	6144:I0FnL8M+6KdKLLRyhSWM+xHbThcsI93uy1F2n2Buin:I0t81NKnRyYMcFuKFrBuin
MD5:	102ACAD6A1C5E209BF909A6DE48DF4DC
SHA1:	CDE593F314A09FDFC781034EC7E5C601BBDEF558
SHA-256:	0A613408B182592C1E794E821EB43E8477C0539F6A3EC6F43505D05BD11BA907
SHA-512:	50C5A9C51CB13D0F8F032131D1DD8633E46DB883D6EDC9288009A00897066058859805CEB931633CCE481727BCEBEAD7D7D32DEB6366DB139198FBFC8CF73D23
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/512943d7-8800-4329-8e6f-883ac2a2ef24.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2986
Entropy (8bit):	5.091749196392858
Encrypted:	false
SSDEEP:	48:/C3MMaVlqSuqRYLINV/JUcxRwOycrCLcd4DfNVwt2V3ci0Aoq+vefQK/ov/0tvIc:66Vl7ROlSR4cuDDT4hsovefQK/M/0FIc
MD5:	6BC698C78C74D43AE7E47AE3BEED9603
SHA1:	238E57D61D40B60BF8204E9F0FFE49850D91FD2A
SHA-256:	9CBA79F04B5D3D5A076B6CBE883E5494CC08E495C60F262B00FFD25A184E89D6
SHA-512:	56C966CFB522134798C6EFA8E9751C6F936F9CF2B27E7A35688C55EA0CFF267E4B1D51A1983C452AF0C9C311C2293A24D2EC36358959FD4B14C57AC9D710EFB8
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/chat/v1/chat/clientlibs/site-performance-enhancement.min.ACSHASH6bc698c78c74d43ae7e47ae3beed9603.css
Preview:	div[data-module-id]{min-height:1px}.div#lp-iframe-container,.lp-iframe-window{border-radius:5px}.div#lp-iframe-container{border:0;bottom:24px;box-shadow:0 5px 15px 0 rgba(0,0,0,.25);height:500px;min-width:300px;max-width:350px;padding:0;position:fixed;top:auto !important;z-index:1031}.html:not([dir=rtl]) div#lp-iframe-container{left:auto !important;right:24px}.html[dir=rtl] div#lp-iframe-container{right:auto !important;left:24px}..lp-live-person .c-flyout[aria-hidden="true"]{display:none}..lp-live-person .c-flyout[aria-hidden="false"]{display:block}..lp-live-person .c-flyout{font-size:15px;position:absolute;background:#fff;min-width:128px;max-width:296px;padding:12px;z-index:1001}..lp-live-person .x-hidden{display:none}..lp-live-person .lp-iframe-window{border:1px solid transparent;height:500px;width:350px}.footer{padding-bottom:25px}..lp-live-person .proactive-chat{top:40%;border:0;box-shadow:0 5px 15px 0 rgba(0,0,0,.25);max-width:359px;padding:0;width:360px;z-index:1001}.html:not([di

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45900)
Category:	downloaded
Size (bytes):	45963
Entropy (8bit):	5.396725281317118
Encrypted:	false
SSDEEP:	768:H/eCtKv79zpXXfoJLjtK8Dx1DieS3i8eqUvdX:W/vXQJJDD27W
MD5:	F00CFBA8F9859DFEFDFE90EA520C6FCF
SHA1:	B32E153588A287DE81050E327EB5BD7A90B04D99
SHA-256:	977CC9882BA50763333DF64E98D26BC3C60A15D6EFA4A2C1FE70579985EDDF84
SHA-512:	DA51FAB6D6A6B05A1730FB97656A496870FE1248616BC3F9DDBE101D1C189B6BEC7CAF63976418F88843AFA64763D25542787116FFE0E43E35BF3DCE61914DAB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/SilentSignInManager.Main.min.js?v=l3zJiCulB2MzPfZOmNJrw8YKFdbvpKLB_nBXmYXt34Q
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),u=Array.prototype;null==u[a]&&i.f(u,a,{configurable:!0,value:o(null)}),t.exports=function(t){u[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),u=n(7065),s=n(1977),c=n(9

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17028
Entropy (8bit):	7.926562320564401
Encrypted:	false
SSDEEP:	384:7wixC+iG9rj5+kgbLPcAmxOkpJIhI9CvaMo05vCf9MRRLMk5K/jk:sifiG2tvXmxHbIhlo05KlGRaY
MD5:	DDCB4FCA39CCADCDF6C1FE2E1F717867
SHA1:	88238D53920F32AF37A802A5E6BFEEC3B1E6F75D
SHA-256:	097DF2DFA3781F1AEDB631C968D04D8152D7C7FA8E92BC91E233B3000E2F34BB
SHA-512:	316574E565EF67B97E13D0BF01CF4AFA8E0E9CF0748768CE4AE6BBB81352685A6E027EADBC083D2B632C412C950E65963E6EA98FE4CE7692C0AE0B6D956D3D37
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/a9241eee-a729-4513-97b4-5b87c381c21b.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...B.IDATx..Y.mWU.W.7.A.e.Z..H.R.F.......$!....iH..4...T@..{i.A.....M..... .XP6eaB..R% ...Bs.o.0N..w...Zkvk..j.>g.}.^...c.1O...?..K.I'..J..<.c..fX!..N.m5...!.O-.=....p/....B.m_..o..........7.{..............]..~...C.....J..g..bI.C.....@&.7.}...u.RYs.J_.P_..j.....J...%..}.{..)}o,....\|...2iil+1.n:.W.b.I@. ......q/........},...K.....b.35f.....@t.C.H..f.....X8...qXA5W\mG..78..E.Wjm..j.C.E.....L.!e...}..... .FKi......!........t.;.s:8.P....9...H@....I! ...lp....`...".#.... .d"......=eN.nNcMUu......=.l......a.@...KY...^.....D..........=..<%&..}...P.HK.CE...0...R1..r..#h.5...)....z.B.....7.DH....KE...ha)....Z.=........)bZH.X.._...)........HK.a.Pn.X1Eh.....o.B......k...2....`..v.O.=...]..Y.!..:R.:......G@jg.q.[b.....)].O.....jm...q.c..*...=B...\|.........%....x.Bc..[.....r.....4......R.}......R...6.I..W..!...8K...:..U.. .3ZH...t.e..f\.(...y>k+.AH"..K.GjI!....J.}...HK..&..%.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517)
Category:	downloaded
Size (bytes):	1602
Entropy (8bit):	5.074626749222841
Encrypted:	false
SSDEEP:	48:cyDvwreaxxzZ77DWqstabe02UqXqsuVAez:TDsD5s826sS
MD5:	2CAB542E06C6FF4B5B3EBD343CCEB9E7
SHA1:	86D7B941DC09149AAF0A5AD96CAA619F75926CFF
SHA-256:	32A2E610B5C62DB33C2ADDD9DF8D9F8AE9FE3B8FA59C0FB22E99C255E6503C46
SHA-512:	076946DBD2CD36715E8A9A5D827D28D492B52140BEB8AAA04BDAE32711043D8826EAE424BF7498195AFA8FBAB1B0038D13133BDE4CE9A9396502514959169467
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/embed-thirdparty.min.ACSHASH2cab542e06c6ff4b5b3ebd343cceb9e7.js
Preview:	'use strict';$(document).ready(function(){function c(){if("undefined"!==typeof window.partnerScripts&&"undefined"!==typeof window.partnerScripts.contentSquare){var a=document.createElement("script");a.type="text/javascript";a.setAttribute("src",window.partnerScripts.contentSquare.entryFile);a.setAttribute("id","content-square");(document.body\|\|document.getElementByTagName("body")[0]).appendChild(a)}}function e(){if(null!=WcpConsent&&"undefined"!=typeof WcpConsent.siteConsent&&null!=WcpConsent.siteConsent){var a=.WcpConsent.siteConsent.getConsent();if(null!=a&&a.Advertising&&a.Analytics&&a.SocialMedia&&GPC_DataSharingOptIn){if("undefined"!==typeof window.partnerScripts&&"undefined"!==typeof window.partnerScripts.meta){a="/etc.clientlibs/microsoft/components/structure/page/clientlibs/embed-partnerscripts."+window.partnerScripts.meta.partnerJsHash+".min.js";var b=document.body\|\|document.getElementByTagName("body")[0];if(0<a.indexOf("ACSHASH")){var d=document.createElement("script");d.type

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	4.661188988961239
Encrypted:	false
SSDEEP:	3:agWqLss4aXD5R20gJYRnd7HtOx1L5HQhLIzseX5LxfYLk21:QqPXD5bDRd7H8L5whLzeJSI21
MD5:	C22EA5B46F3FCAD90DA0ABCC0A3F73D4
SHA1:	2DB789C63AFB63D98932D7B55907DC3508E318B4
SHA-256:	8334DAA260516BB896407461E5F10E8E3041B06C56846BBB9D3435C6E77513AD
SHA-512:	A0359F8C25DC40CEFFD14A41BA81794717B99DABE78CBF8A8678F3E3EC57F317388CA0DC55B1CC6AD2D6C13D2B3CAEB5A64527BB2C646ED2D93775437DA646F1
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/featurecontrol.min.ACSHASHc22ea5b46f3fcad90da0abcc0a3f73d4.js
Preview:	'use strict';function isFeatureEnabled(b){var a=document.getElementById("customFeatureControl").getAttribute("enabledFeatures");return null!=a&&a.includes(b)};

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	4.797025554625103
Encrypted:	false
SSDEEP:	3:1RXfHzRXBMgX/UfVgVISfKxW4qUu5UtgseBWBZ8VNZOjmeJRNnXE1V+o+:1RfzsgP0KOFMLs9cVNKmV+o+
MD5:	C033B611D87D511847501ADE7913431F
SHA1:	00F10AB304A7868DE517E53D013318CF86AFC442
SHA-256:	077F44F97FD72895582436A74517EB4C08A342E8C8EC1D2A672B0F92B32B1C46
SHA-512:	37B560264EE4109A65DDA234D3679A18FA8B7251EE772AD10E8AF98B00B1C8D0A5F7370496CD5BAC26843807D378CE3C6AFD4638C82DA36DAE06E78BDFBC68AD
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/content-card/v1/content-card/clientlibs/site.min.ACSHASHc033b611d87d511847501ade7913431f.css
Preview:	.content-card .card-body .sr-text{border:0;clip:rect(1px,1px,1px,1px);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal !important}

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	544
Entropy (8bit):	5.221040627274746
Encrypted:	false
SSDEEP:	12:Yz+uu8HDeNucEuKEZEuwdaXOVWMsk2lntX2F3/v2d7oyxCJNe:YauZStKa5nltX2Fvege
MD5:	383B23D12DF0D9265D7569A7102C2F96
SHA1:	B78FB17F58484F5CD29B3FE307936181E1B30B57
SHA-256:	BBF608E321107D6C4EEAF31A4A0EEB9DD8A9AB825F645FA963651688FD3D3914
SHA-512:	8CA27D482871CAFF41C2D86CA743F075ED97465C12624B1841396B423229A90AFB7E62211BB02DFC0211C45BBABFD12F82EFF8863E6FD3D176FCD99C84747F60
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-greenid.min.ACSHASH383b23d12df0d9265d7569a7102c2f96.js
Preview:	'use strict';(function(){(function(b){var a=document.createElement("iframe");a.setAttribute("src","https://fpt.microsoft.com/tags?session_id\x3d"+b);a.style.width="100px";a.style.height="100px";a.style.cssText="display: none; color: rgb(0,0,0); float:left; position:absolute; top:-200px; left:-200px; border:0px";a.title="greenID";a.setAttribute("id","greenID");document.body.append(a)})(function(){return"10000000-1000-4000-8000-100000000000".replace(/[018]/g,b=>(b^crypto.getRandomValues(new Uint8Array(1))[0]&.15>>b/4).toString(16))}())})();

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	2620
Entropy (8bit):	7.638635865911561
Encrypted:	false
SSDEEP:	48:+pYjJYaLX5dse88RhfapFxBHxkIRsGRMJMC8FZkFQWEOGpazojzWdTdQH:+ajvHse7hQb/XMJtFQZpaz+zUw
MD5:	1FE70777CC319D0377B6962623FC57D6
SHA1:	8EB8034BDC5CD98C931AC910253BBEA2FF595C67
SHA-256:	196B5C9E52DC3F07FC16631E271777839388BE976146B355649A2E101B8AD6C6
SHA-512:	0E070DC7998CA563E745FD337A08CBB3BC1C152BB86B92DC24FAED16F65BEE5D214FBCA3DE0D992CDDA377A8923CFC2A5171383F872181A12F412A62EA76E7A3
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/OneNote-CC-H-111x111?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D............X.....................Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......o...o....pixi............av1C........colrnclx...........ispe.......o...o....pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma.........................{mdat.......niP2......T..yF..d...!R..n6.T...s.Ls..{.X..K.Om..r.'..\....l.[.1.?.....3..... *%....h....k{....9.@.......PiMm...4...:.....^D..^.h.....0GOWs9...5...#..~.~.@.r..:....e......? c..D.?V.A..j.....r..6...?.5K.L._.T...Y....k.rz'..Q.....L..i........;...9....}......$T;...e....b.:D3/j...=...j.O...$w.JM.r-H(..."._.........0.31U..F..Fu.Q...[\ly................[8.'..n.3.;[PqY..1............nh...B2......Q.......kQ...80RrpD...8...I(".U.....j.v+....e_...l.....42]..3..G.'..c.......^.\,.[. :..a.c..4p.{.J..n]E........7..

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4246
Entropy (8bit):	7.813402607668727
Encrypted:	false
SSDEEP:	96:p1RGN8ljFYp3fB/rD7bD4XpX7ozIlX9gJBEj748ru0yyRqJsb:HR28lC3pz29owX90ajlYJC
MD5:	B93F7321E326CA5C00D52E5DF0357EFA
SHA1:	5620E44D1318A3FA8C3F3F7685D76706752F4E36
SHA-256:	5B00DFD36987ED6F3F48BA6EAC2F7D177B9EB6526EF82F2CC786549BAD43B5EC
SHA-512:	F6E4751B7741787BC3C04A457288AA722BB73A0FAD31E9802230D55C0616F6434A9E86B83F591680EA9344D3F5F551A545A45F7E8942FDD61A29F6E32BCB1C76
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....PLTE...PY.PY.{..V^.qy.Ya.PY.S[.lt.BJ.EM.@G.{..QY.gp.U].OW.MU.mu.MU.W_.S[.y..{..PY.{..PY.{..OX.PY.{..{..{..z..{..PY.{..PY.{..JR.PY.PY.{..PY.QZ.PY.{..PY.PY.PY.{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..z..PY.PY.PY.{..PY.{..{..QZ.PY.PY.PY.PY.PY.{..nv.PY.PY.PY.PY.Ya.PY.GL.R[.{..R[.{..NW.PY.ow.GO.PY.u}.PY.qy.IQ.]e.{..px.NV.QV.Ya.^f.Ya.HP.y..PY.el.nu.nv.FN.ov.Ya.bh.ck.nv.FK.JO.aj.W].GL.Yb.JO.KQ.{..PY....QY.T\.JR.NV.nv.OW.MU.S[.EL.BJ.LT.FK.W_.?F.FN.PX.IQ.GO.DK.V^.HP.AI.@H.X^.=E.8<lbi.<D.PX.Ya.HP.px.JO.;B.:A.cl._e.t\|.MR.LT.v~......bh.:@.9?.ck...9@........cj.8>.Z`.dk.QW.w.....x.....ip.qy.`f.s\|.dl.:>rmv.]e...T\.KR.;A.?D{Zb.SY.<B.LR.8>.8=\|hq...W`.NU.\c.HN.KP.DH.BF~...sx...........tRNS....m.m.m.mmm..............5.;...J?......zi`'...y9)#........bXS0......YM".....jF1...qoSE+.?.......~[..........XS..........o2.w......IDATx...ioLQ....c^LFR.5..2%.........-H,A.!.X........DB....[B..&\|....S.....;c~.@..;.9.6.........4.....=._.N$..'wT

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 149006
Category:	downloaded
Size (bytes):	51680
Entropy (8bit):	7.995027141577692
Encrypted:	true
SSDEEP:	1536:ceYFpaNHk2nW+TUYjAXt9a7mWcM9vkrvkZ2YV0:teaNHtW+xEXtI7Wj80
MD5:	710814A72C4B50795B33A8C8D6C1354F
SHA1:	1872EC964E641328E879816B44317544DCA4E4C1
SHA-256:	91DBD098627AA304CBB02D7A4F8A16D4F4EAF8912FCEFE7AF506F51B54B57A7B
SHA-512:	A04B4CF01AC934C4516C8EEEC9020C79A60EB42DC44AC39329A3315E58E60153BDF07C289AB910482B52DD6231B4AA52AFF0D085FC6009FDB8A0CCB3F1C9EF3F
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/FetchSessions_Core_ufpbSh26SmAaP5weAQWe5w2.js
Preview:	...........k[..(.....k...L...nv..nf.-.3...x.D.....v.......,;..^.~..p..l.$K.R..T...._......Ocp.?=k..l.}.?.m...?.G.g.;{._.~..?....M........7.....0.%.$I.\d.{.M. j..}#...I..)Fy..,.BC.%....K.. ...'N...P[x..Pz.L....o.I..D#..T[./q&..x,...]8.k...4.........#....p.A....7I..q;...B.Z3...1#ph.C8..o.......l.d...2I.=5.F....64..Le....m..v..w0....0...f...H...Q.H.<m..2l{C\|..@.=5n. F..........".]@....Fx?..P....d2...-U..f.....3K.N..awZ.....r..p.].O2oe.6....(._.'..(../.../...?3.p....'.!......a..ubb.......c......A.c.h..:;pz.,.L..6...zn.v.oIj?..\|7uC?.h]...i_...r...U/{.6#...w.li.I..".r..8k.0.y.?MD....c@.D.15G0.v...br.^-.N..ivg..\|.q..o...9.n#p.....J[\.W~.?..0Z\.AwzS.Rg.....vlg&;.?....n{.YOc!D,.7vz._9..i...&.)..G.}L.C/v#o...L.y6..B..Q.sU....9t.%..ZE..l...a.._^...i.ddd8..WJ...Co,.n-......r...[,..g.....;.:..0....i.>..H.+5...WL........BT..r...)N..m;..X...............*.nL...&...]]7..L.....z>........7v.paJQ.(../g:n`.!.B7.9.8.Q;.w".......z+.XZ...,.=..m!...t3z..R Q2...R..

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=16, height=3456, bps=0, compression=none, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS-1D X, orientation=upper-left, width=5184], baseline, precision 8, 358x201, components 3
Category:	dropped
Size (bytes):	54081
Entropy (8bit):	7.37951740253037
Encrypted:	false
SSDEEP:	768:qWmyD2U7WmyDYTu7nN9LpFiiRg5Yy9er/HSRMJWcT6dbGvLMyUO:bTuFk5JeTSRuWcT6lGTMlO
MD5:	B75B9088BA1F35D4B8C4ACDE4EED0EAD
SHA1:	DD37D3AF77580393D662F90CF97CD14E371A0EED
SHA-256:	1AF44BBF40E73FBEACB4AA6F4A295A6E7F0FAC4BBAD77C4E97D811354F93A194
SHA-512:	2D475E0C95FAB87352AFD918F130AB0E94414B8F4F1E027972D2CF4935C81C0DC47793F9ADB584DCC6BE282A214BFF11EB08AA24478FD028553175393BBF3E75
Malicious:	false
Reputation:	low
Preview:	.....`Exif..MM................@.......................................................................................................................................(...........1.....".....2...........i.........0..........Canon.Canon EOS-1D X.......'.......'.Adobe Photoshop CC 2019 (Windows).2020:04:08 10:10:41...!......................."...........'...........0...........2..................0230..................................................................................................................43..........43..........43.........................f......................"........................................................................1.........2.2.........@.4.........`.5.........x...........}...#....2019:06:12 12:51:53.2019:06:12 12:51:53..jJ...B@...........................F....................052011000029.............F....................EF24-70mm f/2.8L II USM.4655002051.........................................(.................................v.......H......

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4280
Entropy (8bit):	7.823907848428056
Encrypted:	false
SSDEEP:	96:MYJKCRXrrB0RiLoWYzXKaoWe3++NXI26X3T9WUA3RmSelzLgjzT5w76:JMCRXrAisWi6lBNX76zQ5MFpL+zVwm
MD5:	DC66DF4B133BBBEED776CA86B5AD68DA
SHA1:	EAB70E67489815AC093D17C1922A5DC5CF8C0EF0
SHA-256:	8CBBBE47E52239D7D23AE19946FC2B2E3C6E95DCF7631C807AF7A811C89CB78E
SHA-512:	679355793FD1E730F809291FD9CD0AC10407674B2871649ABC128E01F893472AD14B69C0699FCE827A0C65A050AE63B7A88636C479BFBAA7367988A3895E0AD1
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/d6ba446c-4077-4462-bfc9-7ddf7c07d7bd.png
Preview:	.PNG........IHDR.............k.XT....PLTE...............DIL............................tz....FJM........GKO........y.................IMPu{..........tz.w\|.x~....JNQ{.........\|..CGJw..AEHrx~z..DHMu}.CFL...?CF=BE...px\|nuy5:?...ios^fj:?Dv~.7<@...47=......pv{lrwekpkqv...OW]=@Dmtx....9=C...hquqv~.........`hl...fmrcinbhmZcg~.......bkoT\bnwz[dh..............]ei........5;@..............y.....SZa.........QY_@FK....................YbfMV[............{...................CJL....................W]d........)-/..I....tRNS.....S.....}IDATx..r.0..}w.:k2...p...........s..HC."..g.0.d. ....1..L.....b..d2.L&.x.t.528...B T....._...j..........o.'@xf....Ey...5.Yw.M......n..A[.....Z!.........s......P@[.e5...3....@H......"& b.Z...7....sv..0.b..BJ.........I!.....\U. .1.H.K...(..f......r..B..P....\SKK..NN...V..-W..!.f_....t...\|...yr.r...f...."......CF..=.....,. .....%............0Bn@n......=..,.....#.......g....O.\|SS.....y...-@..s. \|M....U=~.......8;.......J..x

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1458)
Category:	downloaded
Size (bytes):	292921
Entropy (8bit):	4.8481417549441845
Encrypted:	false
SSDEEP:	6144:NJ/EURw/hTUaGBzdSPlu4GlzdSfluj7/Ohhgrz4dNCOy:NSw7/Ohh/y
MD5:	74A7EF621CB98FF9F083499772DD862D
SHA1:	2DCB76B42BD8AF36379D9AF1F6FDADCB48EA6C5D
SHA-256:	786A08D74A1C5CA3ADD73F89A51969D783DF8DE6B9EC6A006005060D7F6AE529
SHA-512:	B1A22EF008AD6DBCFFDAF7BA7D7F6E747F0043642FD1E18D28EAC0687479857F674C8F991B639506D4FD613CBEEC985A3C71A57E88BBE479DFB2C9CF67FD1BDC
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3
Preview:	<!DOCTYPE HTML>..<html lang="en-US" dir="ltr">.<head>. . .. ..... . . . . . . . .. . Start of ADDITIONAL DEBUG INFO cv.html .. CVToken: CASMicrosoftCV288f1bf6.0. End of ADDITIONAL DEBUG INFO -->.... <link rel="dns-prefetch" href="https://cdn-dynmedia-1.microsoft.com"/>.<link rel="preconnect" href="https://cdn-dynmedia-1.microsoft.com"/>.<link rel="dns-prefetch" href="https://web.vortex.data.microsoft.com"/>.<link rel="preconnect" href="https://web.vortex.data.microsoft.com"/>.<link rel="dns-prefetch" href="https://img-prod-cms-rt-microsoft-com.akamaized.net"/>.<link rel="preconnect" href="https://img-prod-cms-rt-microsoft-com.akamaized.net"/>.<link rel="dns-prefetch" href="https://c.s-microsoft.com"/>.<link rel="preconnect" href="https://c.s-microsoft.com"/>.<link rel="dns-prefetch" href="https://analytics.tiktok.com"/>.<link rel="preconnect" href=

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2230), with no line terminators
Category:	downloaded
Size (bytes):	2230
Entropy (8bit):	5.1220413514345156
Encrypted:	false
SSDEEP:	48:UhdH51FtNZlLC1hdGKhhHH1FtNHt1h9hKhZS7zJRLkVbS01S0hSjSTMJcUSjSLpY:Q//JLCFGeV/ttD7rAc0MP+QuD+LpY
MD5:	4D56AF8ACF934242A6D0C2D5FD5785E1
SHA1:	9D58373C57C53221C4762B87BDC186F6E38384D0
SHA-256:	6F26F0CC605A8C789C557B2956CE78D147D5D2CC16D2F09B3A606306BCA3F4DE
SHA-512:	1ECA9E9FEF9757337739BC530C87AAA8B9209A14C16F570FC8041618274330E3649F6D0A7E9FA97DC45DC8BB8FDE61A18E06F98E8A48E7BC5F22D4D53CC217A3
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4
Preview:	.searchBox .searchBoxForm{position:relative;margin:0}.searchBox .searchBoxForm .searchBoxInput{width:100%;height:3.1875rem;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:1rem;padding-left:1.125rem;padding-right:3.625rem;border:.0625rem solid #a3a3a3;border-radius:.125rem;box-sizing:border-box;outline:0}html[dir=rtl] .searchBox .searchBoxForm .searchBoxInput{padding-left:3.625rem;padding-right:1.125rem}.searchBox .searchBoxForm .searchBoxButton{position:absolute;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;cursor:pointer;padding:0 .25rem;top:0;right:0;width:3.125rem;height:3.1875rem;background-color:transparent;border:none}html[dir=rtl] .searchBox .searchBoxForm .searchBoxButton{left:0;right:auto;transform:scaleX(-1)}.searchBox .searchBoxForm .searchBoxButton .searchBoxIconContainer{display:flex;color:#0078d4;justify-content:center}.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.68043398329258
Encrypted:	false
SSDEEP:	3:agWqLs3KOBmKL8ELDSzEfYZBAeOE8c/yCN9xGV9LH1CNILWAcELDlpKOBmKL8ELQ:QqtgLSH9xGf1OILWAfkgXe
MD5:	96F0C5B1219E39B8788028F5C17A5AD9
SHA1:	D6DCE0DE065B0D13905EAEDA0BA5C0DEA3D8F67C
SHA-256:	1FC2BCE2D46DF4565B8C488B22225CFE7ADB7C37CC9A542D4F85B61995B306CB
SHA-512:	057810FA0558506C6B8ABECB1A7A58FF61DA0609B3A5798BB42DE3A9B801CA0D8B20C4C1F9A250EE33D30492452CC5C4553332B16300408AA0C45B1515D4AF10
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-cookieconsent.min.ACSHASH96f0c5b1219e39b8788028f5c17a5ad9.js
Preview:	'use strict';function AEMOnCookieConsentChangedCallback(a){}if("undefined"!=typeof WcpConsent&&null!=WcpConsent)WcpConsent.onConsentChanged(AEMOnCookieConsentChangedCallback);

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1158), with CRLF line terminators
Category:	downloaded
Size (bytes):	8074
Entropy (8bit):	5.212007462258707
Encrypted:	false
SSDEEP:	96:2J/nMdaBU+hx1fQeWYZRRDLC3J8RMmVmafpSZtSxK2mQmeE78Ip86m8QMoFelt4k:+BfQADnGeug7+V0eZYKIjd1hfPi7
MD5:	A2E2AAA363CAF54158A9C307B134BDD6
SHA1:	5FD8223462A98F0B2C2AFAFF6DCE341D8D4ED47E
SHA-256:	E340D1F83D8B10411267D2B52961FFAF73DA8847FE100705861AAF703DF56F25
SHA-512:	712663A254B1726A225C0424C745586C008A988A5B1649650C0F667967EB3328A4047598D70784E8BB52BB9E5E904165F6A3576FF14091B9B281398D3B83130C
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/videoplayer-nocookie/embed/RW1dQ5z?pid=ocpVideo5&jsapi=true&maskLevel=20&market=en-us
Preview:	<!DOCTYPE html>.. CREATED BY VID TEAM -->..<html lang="en-us".. dir="ltr">..<head.. data-info="{"v":"1.0.8745.29656","a":"c8fc48f1-a237-44d8-b306-f4d035e201c7","cn":"OneDeployContainer","az":"{did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odeastasia, dt: 2018-05-03T20:14:23.4188992Z, bt: 2023-12-12T00:28:32.0000000Z}","ddpi":"1","dpio":"","dpi":"1","dg":"uplevel.web.pc.webkit.chrome","th":"default","m":"en-us","l":"en-us","mu":"en-us","rp":"/en-us/videoplayer/embed/RW16rdm","f":null,"bh":{}}">.. <meta charset="UTF-8" />.... <meta http-equiv="x-ua-compatible".. content="ie=edge" />.. <meta name="viewport".. content="width

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	351455
Entropy (8bit):	5.94826423970195
Encrypted:	false
SSDEEP:	6144:Xs6N5vAPQttzVM9W2uviz9hjPnGZWSwbj2d3hbI:XwPytzV6WchbnL3S3e
MD5:	B07791E6605C56A9B2BCBD3219C73E45
SHA1:	C78374CBDC5C6FF73A47F854EC9079D489215DB6
SHA-256:	06914B19E5C69B2C923F22004F334EA5887955C4D45F0FD01D42BBE41821A8DE
SHA-512:	D6F6FAEB39FFE7E9D6039A0E5C36FAA33D7C4146167B975529179396288A6EB88495CF9465B98A2C500CA887C45FACC0C11F41CE43604477DE2538457B7962A6
Malicious:	false
Reputation:	low
URL:	https://lptag.liveperson.net/lptag/api/account/60270350/configuration/applications/taglets/.jsonp?v=2.0&df=undefined&s=store-m365-en-us&b=undefined
Preview:	lpTag.callback({"serviceMap":[{"service":"liveEngageUI","account":"60270350","baseURI":"va.le1.liveperson.net"},{"service":"subscription","account":"60270350","baseURI":"va.providersubscription.liveperson.net"},{"service":"promptlibrary","account":"60270350","baseURI":"va.promptlibrary.liveperson.net/lp-promptlibrary-app"},{"service":"socialOperationsDomain","account":"60270350","baseURI":"va.socialoperations.liveperson.net"},{"service":"leProxyDomain","account":"60270350","baseURI":"va.leproxy.liveperson.net"},{"service":"interactionPlatform","account":"60270350","baseURI":"va.i.liveperson.net"},{"service":"lineConnector","account":"60270350","baseURI":"va.line-gw.liveperson.net"},{"service":"intentAnalyzer","account":"60270350","baseURI":"va.intent.liveperson.net"},{"service":"leBackofficeInt","account":"60270350","baseURI":"z1.houston.int.liveperson.net"},{"service":"liveEngage","account":"60270350","baseURI":"z1.le.liveperson.net"},{"service":"leBiMstr","account":"60270350","baseUR

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14627), with CRLF line terminators
Category:	downloaded
Size (bytes):	34372
Entropy (8bit):	5.931056415719769
Encrypted:	false
SSDEEP:	768:waxLTFDg8vvUEKdSKxjI8BxLHBja6/xuVFh56vJ7zOowCdn6GBnHmlg+DBIHAJxo:3xLKkUEKzjI8BNHBjamxuVMRB6GIl/50
MD5:	0ED23ADC4DA873A157378C425B236059
SHA1:	0297A21C5D5CA7FADD403E3B6D5CE913AA1B9E3D
SHA-256:	67986184568950851D87AA755B3D6FEC658A0F1D55133AC11F81E3E7F142EF1F
SHA-512:	7A68980D121A977C5CCDC9D855E097CC6AFCB7142D4DB7D761329228CE9983C2783C3A6294934085EBE8A632E568E62CC705BE9D60B67FE443C12A0EB2F0B221
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/lazy-sizes.js
Preview:	function _preLoadErrorHandler() { if (arguments) { var n = { Page: window.location.href, Message: arguments[0] \|\| "", Script: arguments[1] \|\| "inline", LineNumber: arguments[2] \|\| 0, UserAgent: window.navigator ? window.navigator.userAgent : "" }; _preLoadErrorsBuffer.push(n) } } var _preLoadErrorsBuffer = []; (function (n) { var t = window.onerror; window.onerror = function () { t && t.apply(this, arguments); n.apply(this, arguments) } })(_preLoadErrorHandler);../! lazysizes - v2.0.0 Copyright (c) 2015 Alexander Farkas.. Released under MIT license, http://github.com/aFarkas/lazysizes../..(function (n, t) { var i = t(n, n.document); n.lazySizes = i; typeof module == "object" && module.exports && (module.exports = i) })(window, function (n, t) { "use strict"; if (t.getElementsByClassName) { var i, s = t.documentElement, f = n.Date, ft = n.HTMLPictureElement, e = "addEventListener", r = "getAttribute", o = n[e], u = n.setTimeout, et = n.requestAnimationFrame \|\| u, c = n.requestIdleC

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	785
Entropy (8bit):	5.199317317445661
Encrypted:	false
SSDEEP:	12:6v/7FmVtrZZa1iNhOT27hEviwgabGall/6jtLR+Yxg208ahm:XVtrZy8iqhEvB93ll/GM4B
MD5:	859052CA7E07ACA482D0EF74F86B45B6
SHA1:	D680C1C7C84A04AB96BC23ADECEE5EFC4BC71BB4
SHA-256:	4C238159BDFD032EB6EF4FEFE83F453D3166ADEB2331BA61DBDD67DFA6D0ED36
SHA-512:	C90E978DA3ABDF5311CDDEF5354F5A8B9C136A9A9D784DF0184E3C84B9B2DB8B7289B42F83E6F747040FAC56EEB7C25D0B51C8443FC5BE9AFCD7EE5854ECA4F4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT...`PLTE.................................................................................................O.....tRNS..c.;.................F\|R1.=...L....AIDATx....R.@... ".B.bi..[..bdR..L.o...n6i...1..n.L.sk.F.......M.v....{.I...y......t..!......C..zj.....p......o.l..T..^......?..:.6=..(.o.}.}..&..E......Q...B..../..w.X...h........Et.jZ...E.5...........................................\|................./............... .................D.......S...E.Z'....y.......e.............................................8..ui.\.NN...I.........................................................?V.,............... .................D....n..R..a ........>T..]...v.N...!.......X..`.,.C.....M@cW6+.E.$4.S..:)*...e%.g\|e....#...l.c.,..H.......a.oR......IEND.B`.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4901
Entropy (8bit):	5.188803072955585
Encrypted:	false
SSDEEP:	96:AxtrEzrvGJreyVrey/Jrey3/reyBHrxLavLe/yeSde+aeECRL/49Nh+MNMpeGP8D:Ai/9yEyIySyprxCLqy7dNaxCRT493+M1
MD5:	16C74BDAC3ECAE5D9B48E8E489AE6B37
SHA1:	F6E973E4EBE02EDED0C6AFE1E0151A16CA7CD03E
SHA-256:	4868DA56574B7C4DC5BBF6EDEAB406CDA3F7D0D7BED51BDBCD66B2816A75C941
SHA-512:	A07E1904E050D75E0C1F87AE6CEFE3D844BFE741C79B29F9945E5D8346F7533F1A41D3F2F0AB719C1FCA21FAE8628E3C9F1B489E7E77D74C2D4F7F8C8487EC63
Malicious:	false
Reputation:	low
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dNAH-enus?ver=6d43","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dNAH-tscriptenus?ver=fb05","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeStartDate":"2023-10-24T17:07:05","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RW1dQ5q","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dQ5q?ver=8edc","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RW1dQ5q","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dQ5q?ver=8edc","link":{"href":"/vhs/api/videos//thumbnails/

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	14850
Entropy (8bit):	4.924023505398329
Encrypted:	false
SSDEEP:	384:SQBjgyWlFicKg7vJSgCCYP8wUP8u3dJB9A/hWxB:VBjgyWlFicKg7vIgC/P8wUP8u3dJB9z
MD5:	8CD39B0628EAF5B88C939EFF71B68325
SHA1:	277A609DB2B26439C06D082413E4AD5E5E5F04AD
SHA-256:	AEEC7B2255C36AA415CF4BAB8C69C1BCEEF92D9625FBE2578B71C1F4F50275E2
SHA-512:	EE85F483B2D9FF6E194E9D64BE47F32EA375C5E7547804C333B1E0BE62492628959AF57696CEC332F9D07F3D67DC4A490630667D1CE6951138E53D420C49703D
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/buy-now/v1/buy-now/clientlibs/site.min.ACSHASH8cd39b0628eaf5b88c939eff71b68325.css
Preview:	.buy-now [data-tab-content] {. display: none;.}...buy-now .active[data-tab-content] {. display: block;. overflow: hidden;.}...buy-now .BuyboxCompareChat .buybox.second .link-group .btn-primary {. color: #0067b8 !important;. background-color: #fff;. border: 2px solid #0067b8;. text-align: center;.}...buy-now .tabs {. display: flex;. justify-content: left;. list-style-type: none;. margin: 0;. padding: 0;. border-bottom: 1px solid rgba(0,0,0,.2);.}...buy-now .tab {. display: inline-flex;. max-width: unset;. min-width: 250px;. height: 80px;. text-align: left;. border: 1px solid;. border-bottom-color: rgba(0, 0, 0, .2);. padding: 0 25px 0 25px;. font-size: 20px;. font-weight: 600;. margin-right: 24px;. align-items: center;. background-color: #f5f5f5;. cursor: pointer;.}...buy-now .tab a {. color: black;. text-decoration: none;.}..buy-now .tab.active a {. color: white;.}...buy-now .tab.active {. background: rgba(0, 0, 0, .79);. color: #fff;.}...b

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30237)
Category:	downloaded
Size (bytes):	30289
Entropy (8bit):	5.261074124347665
Encrypted:	false
SSDEEP:	768:W2I2n0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:WNM0S0/ks2JdImYFcw662A86vzyR
MD5:	3D9AC371EA0A0AF8D447E581AC903BF1
SHA1:	AF5AC32CC5E6D0516A1EB8791D77449E6A1FCC8F
SHA-256:	85B659C6A59EE85A31B953A3EE45860B6A54A8B350CDB8441CD4E331CA3BA190
SHA-512:	443287A9D4861E40C4375FBD1405A4D343A7F573D112AFB02684D21F91FA74B4C5B68B7BE17FF7E892A267700C7C7B0DBEBCF39514A3BBBDA9BAF9D2286D47CF
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/meversion?partner=OfficeProducts&market=en-us&uhf=1
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"officeproducts","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":false,"graphinfo":{"graphclientid":null,"graphscope":null,"graphcodeurl":null,"graphredirecturi":null,"graphphotourl":null},"aadUrl":"https://myaccount.microsoft.com","msaUrl":"https://account.microsoft.com/","authA

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4280
Entropy (8bit):	7.823907848428056
Encrypted:	false
SSDEEP:	96:MYJKCRXrrB0RiLoWYzXKaoWe3++NXI26X3T9WUA3RmSelzLgjzT5w76:JMCRXrAisWi6lBNX76zQ5MFpL+zVwm
MD5:	DC66DF4B133BBBEED776CA86B5AD68DA
SHA1:	EAB70E67489815AC093D17C1922A5DC5CF8C0EF0
SHA-256:	8CBBBE47E52239D7D23AE19946FC2B2E3C6E95DCF7631C807AF7A811C89CB78E
SHA-512:	679355793FD1E730F809291FD9CD0AC10407674B2871649ABC128E01F893472AD14B69C0699FCE827A0C65A050AE63B7A88636C479BFBAA7367988A3895E0AD1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....PLTE...............DIL............................tz....FJM........GKO........y.................IMPu{..........tz.w\|.x~....JNQ{.........\|..CGJw..AEHrx~z..DHMu}.CFL...?CF=BE...px\|nuy5:?...ios^fj:?Dv~.7<@...47=......pv{lrwekpkqv...OW]=@Dmtx....9=C...hquqv~.........`hl...fmrcinbhmZcg~.......bkoT\bnwz[dh..............]ei........5;@..............y.....SZa.........QY_@FK....................YbfMV[............{...................CJL....................W]d........)-/..I....tRNS.....S.....}IDATx..r.0..}w.:k2...p...........s..HC."..g.0.d. ....1..L.....b..d2.L&.x.t.528...B T....._...j..........o.'@xf....Ey...5.Yw.M......n..A[.....Z!.........s......P@[.e5...3....@H......"& b.Z...7....sv..0.b..BJ.........I!.....\U. .1.H.K...(..f......r..B..P....\SKK..NN...V..-W..!.f_....t...\|...yr.r...f...."......CF..=.....,. .....%............0Bn@n......=..,.....#.......g....O.\|SS.....y...-@..s. \|M....U=~.......8;.......J..x

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1999)
Category:	downloaded
Size (bytes):	2055
Entropy (8bit):	5.084130713758028
Encrypted:	false
SSDEEP:	48:3ngn0tvYeYjl+XGvJ9kfsekngnopWOwZXTB+m1QB3yHHlBeUZ:X8lcXGNb8opWOeTBRZ
MD5:	7B3FBC24A40933858CB88B868A088ACA
SHA1:	AC9A540206C03D0EF29B7E0D8354B3C1B1F8AB49
SHA-256:	0CE48DBF6862C6E23CEC615F21927FC8E000AEE0E2BDDBE9E7A68B0A039B349E
SHA-512:	AECDA68FD6A91C7DCD6D1B12B7F83C623D06936B3E77B8CAECF7783A9AD476F6285BC07DE811BFE9F2A0DF4C5EAFE2DC41D2CE13D0C6EA4E593F02E0BBCC07BD
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/VideoCarouselModal.Main.min.js?v=DOSNv2hixuI87GFfIZJ_yOAAruDivdvp56aLCgObNJ4
Preview:	!function(){"use strict";function t(){var t=$(".modalContainer").closest(".supCardControlCard"),o=t.closest("div.supCardControlCarousel"),e=t.find("div.videoContainer"),n=e.find("div.videoContent"),i=e.find("span.modalCloseButton");e.removeClass("modalContainer"),e.find("div.modalCloseButton").css("display","none"),e.find(".supCardControlImage").css("display","block"),e.siblings(".modalPageBackground").css("display","none"),n.removeClass("modalContent"),i.removeAttr("tabindex"),i.css("display","none"),$('[class^="slick-"]').each((function(){$(this).removeClass("resetTransform")})),o.find(".supCardControlCarouselPrevButton, .supCardControlCarouselNextButton").not(".slick-hidden").show(),e.css({width:"",height:"",top:"",left:""}),n.css({width:"",height:""}),$("body").removeClass("disableScroll"),window.occe.suspendStateOfContents(n)}window.InitializeCarouselModal=function(){[900,768,480].forEach((function(o){window.matchMedia("(max-width: ".concat(o,"px)")).addEventListener("change",(fun

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1214
Entropy (8bit):	7.8269014191467186
Encrypted:	false
SSDEEP:	24:gfKzILi+tEeoBxc6moBTwwX4GMkgIPD5LOgr1dnAVucTp5hQbHupMfLUxl2/:bcW0EeoByoBTHMwDDBhAXTp5CuX2/
MD5:	93B4DB64705AD4AC6578A68E87F78A8F
SHA1:	230CE6B9DABB89A32240BDB14C28F24BA34F2DF9
SHA-256:	BCFA60E1354A5F8DC1151183CFF259E5954EFCDB7D3D6FBA5FB120F1BDE1710C
SHA-512:	F1122EAE13D5E5097829DA6222660E8FFAAF90AE0A8C9AF19F6A42F3BE41B44F9CB407EF7842FB3C4355F2D3FCE0662362451CF791921E741F1FFB834EF363D6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....0....K.K.>E..D"...<..(.D..^P.l./~..!..r~..o...Bw...G....\.C..=@?...z.ym..\|%..~.{^4k[..4......?.}..@z ~...\..w...5.H..n..T..C.X..v3.f.m..1.C...CJ.G...#_...1...%.....\(.K......;...=...d.K .8X%?..x......l...+...va..._.S..M+.._=..........$"3...Vi.\|%.......wV..S.....c.j....5..cb.....F}6..r..G.[.4j.........]....w."...Z..Z.....J..S#...E.....m.....uz..Iko.\..\.r....7.....>.;..>.5....t..i.K.#..1..rw6t...o.....o TT.v`).?.....k`..Kq.....3F...r&.>..28_T...=..].f.^..J......V........B......K.(.r..y.d...&.Dt...9....X..wi0ob...;.........i.2E...Th......?....i..^.-~....N.x..V"...B..K...W.U..5\......n...0}.v...C.....{...fE..7.D\..?....N;?.5L1...x7yc..v.Bb..8W.g{....T\|..#eV.....g'&d.x..CM..A.e...y..x.<...j...j...&..GZ....-.>.}.JOzuU....].{.."L.1.V.`\|."..f...7...8%H.em....s3..(.k....6.+{.c..H.z..0..@.O...}.-].......<........z..\|...YA...k.}.3.....a...m.hBj...^..i$....Gh2....S.%....i"np9.B<..4.p..C..q./.u.e.t..I,..>.i~\|....o mh2VK...,.e.U..b...)

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	280
Entropy (8bit):	4.587004430912269
Encrypted:	false
SSDEEP:	3:JmDMMLG6RwF/D0rTCZIV1AAFELHL1FslIHDfFTo/Zc8nFAyGTPmdo4yHzIFtG5GG:go0rLlFwG2ZTo/lFAVjbnHkLj50n
MD5:	AC1B918B4EC455FA06668A1475496728
SHA1:	57CD7F570979E50BEADBA3A5BDD714BC673E3D0E
SHA-256:	3E7D2ECDE4E09D07D16DB98DA3A8C37D40EEABFC7B9BB0EE5203972C72119E12
SHA-512:	5BB83414A0E40B0D55113E7B1FDE25F16D7ED68E3B3C61A5FCFF403E8435D43738341CEB76BF89FAC64026A4EB5717AFE94631C12C961800F5FD962BC57EDDDC
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/comparechartcomponent/comparechart/v1/comparechart/clientlibs/sites/compare-chart.min.ACSHASHac1b918b4ec455fa06668a1475496728.css
Preview:	.table-responsive.compare-chart {. z-index: 1;.}...compare-chart .compare-chart-table a.simple-link {. font-weight: 600;. text-decoration: none;.}...compare-chart-v1.compare-chart .sticky-sentinel{. width: 0;.}...comparechart .compare-chart {. overflow-x: auto;.}..

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 30132, version 0.0
Category:	downloaded
Size (bytes):	30132
Entropy (8bit):	7.994040282339949
Encrypted:	true
SSDEEP:	768:oE6QnF5iqE+5HV38V+SnObhyTt0VyxVQoZaFjNpa5euFhfbwV:oE9nF5nE+JVMV+fAu2VQoZaROj0V
MD5:	4C38C2A78502AF8DFBFE0F71CC49A1AE
SHA1:	4B8C845263B3696E28CF3F313E0214E22688A750
SHA-256:	1232BBDBC5D205F3C5A40EFA5ED92839C79E7879D5168445CC47645BB93F7D1B
SHA-512:	E60FFEA855BBA4241DAF68AF6BD3C1967211A215EF281C7DAC8311756A0781D00F529FF0AC5CE789238A4215EB1540C6C61C69D650CB2027C3C72CD475DD7B9B
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/Bold/latest.woff2
Preview:	wOF2......u..........uZ.........................`........\.....$....6.$........ .... ..-.......ZAj.bf p..................."Q..vG.{..9h`..xD.j.VS.....Y.g.."..D,#.C1.\|.........2....V.-v............&~;.As.m....=.@....=...w....".q..A..~..pN.q...y8...Kw.\.:}''.'zjX..%V,0...Zmf.?......9.\.w...f..,.....ag..,..q..$..r....0..El......".....].J...D:I\|:9z)$.V......L...#..\s7._...@....i}..lY....-..N.;.DC..,`v9.VCw.u.3..>.......yY.!~..8..<..{...M.B....g@...K;.....].Z..Y..^g...A{<....i..n..C...4.<.b..J..d..x...@...}.f....U.( ...`...0eF.Sh/.1T..J.]W<..].>T....>..,wv....~....%.:..{`K..NR.O.a...pS..m....DS...Z>...T..T%........3...7...N.sl...wb..............$q0$E..@p.J"..v.........+G..$..@..o.%...v..S.\tn.un...wS......M..m1..D.d.#FD.3...........c..f...#R.......~....Q8@.......}(..Im....u......=......c.....',e3a.13.pc....0......p.N..._...O.a...../.0.. ,.:.\7.....Bg......4.-.P...(..%....de+O.Q......@.m.Lq..D..\|V...X{....X..!Ii.Q.M..8..G.3.~o.GS9.....~.?.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	318287
Entropy (8bit):	4.936989207724513
Encrypted:	false
SSDEEP:	3072:Uwtki9QkGoO4QPwGY5DPMwqGsbkyvLUi4beyAX/bSe2yUXaemHqOOkwsik7oZtIJ:Rj9m
MD5:	43331610BE840D2CA3CEE609B90C8B62
SHA1:	84FB466ED352E3CD4EDF2F884B481724F38E1611
SHA-256:	8A276957675D9BF120FA3ADA211C5C423EA15B6CF54D9BEB2BBFD89F1F64FA05
SHA-512:	627CEB4F104E03AA7EF07BC5AEE96B74ACE8C1ECF7271B21475DD00EEE9B40531F427002246B85F81CE2088B7DF6D269E29BF1A4210BBD4556843AC6AD55092B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASH43331610be840d2ca3cee609b90c8b62.css
Preview:	.cmp-image__image{width:100%}..aem-Grid{display:block;width:100%}..aem-Grid::before,.aem-Grid::after{display:table;content:" "}..aem-Grid::after{clear:both}..aem-Grid-newComponent{clear:both;margin:0}..aem-GridColumn{box-sizing:border-box;clear:both}..aem-GridShowHidden>.aem-Grid>.aem-GridColumn{display:block !important}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:50%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--2{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:50%}..aem-Grid.aem-Grid--2>.a

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1826
Entropy (8bit):	7.84919939218005
Encrypted:	false
SSDEEP:	48:FZj+w9UzU1t6ZjirPjb6YKHjiawlyhm9pnyJeBcOyPgn0QCpa:P+4xEICYKl6y+ylcn0QCk
MD5:	E265C7CF0763336C1294F658FE2C648B
SHA1:	3B703FF0E8678F8725365A012F30944BBDEEF5CA
SHA-256:	32E5ACB69D39499AEED6A1108D7AA4C936E2D393E44B0937EB838433ADE9510F
SHA-512:	00C1420CE79D8C7564C76CD5185E2921DEA1A0E20866CE662CEA016BB91D4429F7D7A88C7419EA2DBF57DC3BAFB81D2D8AE47C92536267D6994BB94708B1F824
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........n..n..ALPH.....o.m#Az...A.....PyA.8..M..Y0(8..]).%.\|"vG..a.....nk;..m.m'...U.m.._..........O..?\|eSkm...[.....E..V....`{~f...6C`......\...H.3....q...{..?..)h..`......n.Q.0......U....^./..F..m.~x..,..8e...aP.q\....7.E$..8e.q.aH.....s....;`..q.aD.ot.jd...:...g0...:U..!...Da.S...3]......4.....p..Pj...<....tO...@....:.#.w.)...7..`.<?.}..i8(.y...l%.pL..G.m...8%&ZJ.vx.ii.....)....-L.i.1S..t..5M.1..}....0...l....U..N..m...pR..WU.+r%........[t..dY.....r..o...x.w..5..G.`._K<..2....:}b..Ji.<.f.[......4.L.(.4Q.....R5.....;..A.y.C....9.o./tz.A.i...;........^1..8.>E...h7.i....o.9....Y..m...):g......~.}.O.Px...c'OX?ydO../;.VP8 p........o.o.>Q&.E..!....8....P5E;g..9..?..U.......0...0.....~.....z...............O.......H...`.M....s........._....I.....g....~.......(./(.......8.C... ..c.{...V.`.f...=.TY.d. AxS..Q<Fg........b..N.F..^M@.f.z5.....vpN...._.Z.).'..6.'.*..]W...:o.....s....,.$..m..x.&op..o.{H....=1.v.qK..,c.d....

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Reputation:	low
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	3500
Entropy (8bit):	7.774579037615692
Encrypted:	false
SSDEEP:	96:+ajKtvNYmFsK56t+8Z3wLnM6ihPd+NPNZfFu:+aUVJqK5u+0wXk+HZfFu
MD5:	0C5EAD76743E397982475BE13CA98748
SHA1:	FE5D2D74BD5DB065AE5A640C9C33CFA464E4E4E2
SHA-256:	F5FB9EB44881B5CD0C021550A3DF2E8ACF7FA7905F41CA4463C48DE174793033
SHA-512:	65C839390C48F3749722A5879F58CBDB7E9BCD23C35427384C13C61C00D38414D436910705993452927FF29F5150C528212000DAA6CBC83158446CD7183A566A
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Clipchamp-CC-H-111x111?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D..............................!...Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......o...o....pixi............av1C........colrnclx...........ispe.......o...o....pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma..........................mdat.......niP2......T..yF..."....g.....K......1...k.Xr..0Nj.T.`s.o...(..?..@y ...`.#D .LO....!J6FT.gX....B.i=.,..'.M.8LU.....&r.6...c..[....B.u..n....=....o.{aA.\|.}..s7..<s.TXV..Q.'..w..-.m.J.q>.R...Kh..u\t,q.2Qi.>0gu?q.M..."...Q..A.Y_l...e....o[\Io.,..PDF=.T.J..z.m..$...&\.._...8.......r. .H....U=...A,..B..`..Zm".....G.v...A~..g?..T.&...l....\?T@<....D...;...:..].\h....J:b.{......>.....P....T...f.x.g..B.;.?%..Q....}...S.C.uQY.. ...!{....".........N..j..e&#4BGg..i..VL]*O.u........B.W&..Jf;...;HbM@.L:.Nn$..U..w...

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 520x293, components 3
Category:	dropped
Size (bytes):	73274
Entropy (8bit):	7.990712860794123
Encrypted:	true
SSDEEP:	1536:gKMxq1eQDZpCTPtNB69Q+Dmx+qTjWMrQc17PdKa7XcJmeP6/qtra8tG74:gJU3qPtN89ZDmR6q9PdK6X5y6/uaYA4
MD5:	398F9DC587230D80A3D281D59C37E63E
SHA1:	0BDF18BD096A4514207DE5671CCFB14CA8D4DF73
SHA-256:	30A661812C8CFD698FB81C3D2E7468970C0FEC6DA5F7CF82888D00371E0BFCBC
SHA-512:	9922B54E959A51C0AD154B4BCDB2A3E1B4AD46BE01AEDC2132A866DDB40A02EFB6C8E206693997B3454B1FE760F4CF4C32BDC3495F754CCC4E3EA0ABA83D034C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................%.............................................................................................l.3..(sLS......lV....a.t/...9.x>.....Z.O$AW.^.-..P.v%..dI..d...(.....rBE.. .zA......`b.d....mps.Q.N?A.......'(\s..y...1q.H...e.d.k...?&0\|.l...'. .`....E.G.+..F,..@FZ.;...G.p>t..[...../..g...`..G...XX$.^o..]O...=.m.C.H.T....a....9D.....H6.....q.....4...M. G..].qRa......b_a.^.iV.t....%3R........q.[xW.@..)..D...Tl.@....7$..'......;....i&.Y.aP!.QMZ,%.46..\.q..vw/V.._-.......^x.c..f...M..7oeeMB..}.5.....-...=eXH.2.........\|.:..L...d..nj......DYV.T...%..B...v...........]l.*L.;c..........9...@j`....]n.]$RX......,...:v_w.'+!..8T.....<N..z.F....w.7O....$...q.Y..u...L7..:m-...d....K.(w....nl[..;..T...;8.!RR .%.,..SZ.W.. 50.i.4.,v. ....]..V......5i.#P...w..i............k.sc{.(i............B.....Uv.s..$.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (955), with CRLF line terminators
Category:	downloaded
Size (bytes):	201253
Entropy (8bit):	2.661810841903416
Encrypted:	false
SSDEEP:	768:W7nJSq9GinOo20uqxjr3+AKyKEAPNPPn8P9R/3htzAVT+JcYY5WRItsWc7rQ3S01:WHGiOoHuOjr3+AKyKAXS
MD5:	85DE642E1467807F64F7E10807DF3869
SHA1:	C795B490811C0E5A1A8F3C3F620AAB9F00C34F07
SHA-256:	5965B2C5472AACA1CD66EA5B0D07A971B961FEE72FC27EB1F6C760042084B21B
SHA-512:	BF4EC56D6FC54EAAFBD57C4E4D06900D358E39CE15009FB983491B0A83ABB60A0A54F46BE86387AB837B4AE1D1F3FF99156D04207065B0F65F165B54CFAAF47B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/microsoft-365?ocid=cmmttvzgpuy
Preview:	..<!DOCTYPE html><html xmlns:mscom="http://schemas.microsoft.com/CMSvNext".. xmlns:md="http://schemas.microsoft.com/mscom-data" lang="en-us".. xmlns="http://www.w3.org/1999/xhtml"><head><link rel="shortcut icon".. href="//www.microsoft.com/favicon.ico?v2" /><link.. type="text/css" rel="stylesheet".. href="https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css".. /><title>Your request has been blocked. This could be.. due to several reasons.</title><meta name="Title".. content="We are sorry, the page you requested cannot be.. found" /><meta name="CorrelationVector".. content="VbLZYbRlhU2hyedN.1" /><meta name="Description".. content="" /><meta name="MscomContentLocale".. content="en-us" /><meta name="

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (584)
Category:	downloaded
Size (bytes):	6798
Entropy (8bit):	5.383941368080596
Encrypted:	false
SSDEEP:	192:2+ocdo4VYgB9G/0y/qhNJ5k4iflBDHndCjOGGWr:2+ocdo4B7G/0yyNSflhndCjOGGA
MD5:	1DABD5CC3F7B68C178B59EA74DC62947
SHA1:	B8DF9D8FD267B8B74325667DC97278CCC90A1464
SHA-256:	E49EFB0A75AF4995902362EA679A0FC4EB120A881A090CB8424D5CBD183436A2
SHA-512:	8C26E45CA37AC5DCCCC0C7BBCA92E0E8E11FB807A6D9A6916D5A0CC1CF198A7942DD5583C31ACBD1A11DDE004C252806D205E9CFDA7F494A6F7D5BBFA42920E4
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASH1dabd5cc3f7b68c178b59ea74dc62947.js
Preview:	'use strict';(()=>{function m(f){var e=G[f];if(void 0!==e)return e.exports;e=G[f]={exports:{}};return I[f](e,e.exports,m),e.exports}var I={1623:()=>{$(function(){function f(){-1!==document.cookie.indexOf("".concat("Cascade.AuthSSO","\x3d"))&&(document.cookie="".concat("Cascade.AuthSSO","\x3d; expires\x3dThu, 01 Jan 1970 00:00:00 UTC;"))}function e(){var a=function(){var d=document.cookie.match(/(^\|;\s)(Cascade.AuthSSO)=([^;])/);return d?(d=parseInt(decodeURIComponent(d[3])),!isNaN(d)&&d>n.DefaultAttempted?.n.SharedStateAttempted:n.DefaultAttempted):n.NotAttempted}(),c=!(!window.msauthRpsShare\|\|b.accountConstraint===w.AAD);if(a===n.NotAttempted\|\|c&&a!==n.SharedStateAttempted)!function(d){$("#".concat("cascadeauthsso")).remove();var g=document.createElement("iframe");g.src=d;g.setAttribute("width","0");g.setAttribute("height","0");g.setAttribute("border","0");g.setAttribute("frameborder","0");g.setAttribute("style","display: none");g.id="cascadeauthsso";document.body.appendChild(g)}(""

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 297 x 166, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6270
Entropy (8bit):	7.945330124411617
Encrypted:	false
SSDEEP:	192:zS7+uH6tmhCSqN0K4Wykh3YMBYpAjav+tlXQ:m7vHqS9WyiooqSa2m
MD5:	5C04A186E00E47C2F90ED18E03AB4093
SHA1:	AC859795B92E3FA0FA88868AF532A3ED6F30F12A
SHA-256:	1A16DBCD6926721D9C3AEB85429586B307F11D2093CF9AEEFDAA37898CB74D46
SHA-512:	909830B01A21E61D98ADF1C61DFC44BD414CF03C51250A9DD7B5C26FB12D6334D984A21F25B5ED089FFDED4CAAA764579EEA317470C8616B7928E989B1A1778A
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/f4e85874-2a1a-438d-9c3c-17b069c454c0.png
Preview:	.PNG........IHDR...)...........y;....pHYs.................sRGB.........gAMA......a.....IDATx...._S...SE4....&..DE0(.e.&jb...h....C..b,.i.na.2pI.P"H.!. ZB....w.~..g_._..$'.....>...k..p.....z............:.x...l...:.g.u.......Fz..I..Sh.......T..L)}.c..e.T1.........OL..T,\N\..K4.57.......{./.yR.H.JlQ......@..b...TAT.....)6.0-."... .&..:K.d]1L...R..lJ.......:.....9.\|?}..........g..K..._.R....bk.i..E..K.%`...O....i..E.U....J.L.v.\|..a........bV.jY.>3...M.$R......T.J.....(:......z..L..E5".w.wl.w.g.A1..E.\|.......[a...g..T.....J...U.z..\|.l)..8..U..kp.cR........T...1..l.n\|.i....5...k.j...q.F.}.E/#.j...D....T....3'..^.^:.4.Z....K.`..c@9.Y.=S.W..t..=&.Z.G.R-....%f..xG...".../l.....[.WTw/er#..I.....L.>..R\.........!..U. .5...C.ol.0%....=.....L..B..L..9.&..c.O%T\|..h........egj?A......&...-*.X......;p...nf....T.....,bea.bj#.%....1..0L(Q.... ..sL..P...E.cX%.e...v.SQ".njw...:.>...\.%...b[T..cn'.#Z..i...C..%CX."....ej<.Q.LB......u.(.....E.?.'sR...DN

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	930
Entropy (8bit):	7.753628280164637
Encrypted:	false
SSDEEP:	24:0qhIlp61EXC1aFWXWQpXxwecacgLnjqc+7DYiNNl:3Op61Uj8XWkhwwDXyl
MD5:	B665C2E078EBD73711D1A0CF23B8A717
SHA1:	5E13E0371C4C35A06B23C072AE097A151E8454C5
SHA-256:	CC9F6227E9E58BB888A8EBD2F6671D9E9333CD3FFD1E42A74D726732CCC1CE46
SHA-512:	518A8E1268BB3C10F5196FF0AB0EAFA9B8736459F519CF04883C5E7D572551165B3339C546E54C295AF78E16288AFB7E4041CFE975E242D8E0C9BEAB47DF48E0
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Twitter%202x?scl=1
Preview:	RIFF....WEBPVP8 .........@.@.>9..C.!.......Z@.x....?.t'.'.../.......g.V.G...)4%.........R.....p.o.M.....~.?................'.....D....D9^I=q.lT9..sV....]]...".....7......)....A......\|P........,9.q....1"R.MG..&.Q5...fx5..+Rwey.aY.&..i..p.1...J..1>}[.%+.B?.P.....KHWl..7..;...(#..A....V...z(...o]Z.$....._.?.^.Z.4.B..Y.+.....j...~.D..Ip.Yg..t^.Q..^S.F...g.k3Hm(F...w..D....."B.....@Q...5.........zUy...;C..6M..:........R.>7k `.....{.?.S%/.?...../d....O.\|l.t...g}..P4.:.1.Ad..4..&q.nW.N....!......f.........X..o.=.2.U..kx.?Y....:....N Z.&i...........x.ME.)..kH'o..an9L,.[.........BHC..8a.....f..........].70...+_e.y.RI.....#p8.....h!....a..".Y.U..9[....[...e....7x....Y.jg...v.~....$....)....[t.Z....8v{.4...*...N...k.>6...+.P..S).q..u....-z.........I..a.........Y..L\|..8W...s.E.BR..th.`.Z1.;1..R,_.V..a>..C...Do./O...yn......H._.p".............Ei.f.h.8...F.b:..-<A_...zs......6.K..P...,(..

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	73501
Entropy (8bit):	7.274239603253508
Encrypted:	false
SSDEEP:	1536:m5++++++++++++++++++++++++++++e3XsuNwDM17iYdtYGb40EyUPP6+BpdMhn9:V3XsumI1DEyUPyOpkM7YVVVVVVVVVVVN
MD5:	471B948CA93626961E6ADE6DE66FB747
SHA1:	F70E8C1A90732C23BFFA5DC0C417FDF0274EA3F3
SHA-256:	98861B25409C0C097A5F1FA61535701E58F2B0C9F7CC951B0AE1E988238D38E1
SHA-512:	1AD51DF041DB63A5130376D4C645EC16D2C3D2BA0F0635F185C04929AE3D96415273974B03D0898DC057AB50397EED9DD5A4807AA4D6B07D95B7E9520C494502
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3
Preview:	......Lavc58.18.100....C...........................................................##$++3..............................................................................!...1Q2aqA".#.R..BU...3..s..r4bCS..$.T.5e.c...D..Vd.f.%......................1Q!A.a....q....2"...R.bB.#.r..3.....c......8...."...................?...k]1.<...Gq_f>..#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....k]1.<.......4..;.5..GM}#.._H.H.t..;.5..GM}#..

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3176), with CRLF line terminators
Category:	downloaded
Size (bytes):	22142
Entropy (8bit):	5.9269859945107255
Encrypted:	false
SSDEEP:	384:rSWrA3pqOqNERT17pgMnQaWip7zYdCuhywhJiHuiwxJRQZ5YZTmbjeIkXRh8Kxup:rSWr6LR59gMnQaZ7zOowCdwxPQZ5MTe1
MD5:	FEBCCC48A770D434D36A19080AAAE5C2
SHA1:	FB20413664EC4439E5040B4DF52D456C5D86063D
SHA-256:	F3036460BC9DAFFAFF078BE0ADE99FC6E5BE25E41DD6FD4785CB2CA92D2FC755
SHA-512:	FB2AC2CA6076360AE2667C4E9BEE4CF71B7A92DA889F3A7C54C9185D9E6BC7DC808527F4AAC66B51C8D478CA5AA6296DA56EF12849EAB97BE9E561A67857E022
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/vp-attributes.js
Preview:	require(["window", "document", "location", "deferExec!"], function (n, t, i) { var r, u, f; if (i.host.indexOf(".xbox.com") != -1 && (r = document.getElementsByClassName("video-player"), r && r.length)) for (u = 0; u < r.length; u++)f = r[u].getAttribute("data-player-data"), f && f.length && r[u].setAttribute("data-player-data", f.replace("autoLoad", "autoload")) }); define("uhfUssCategoryService", ["require", "exports"], function (n, t) { "use strict"; var i = function () { function n(n) { this.market = n; this.responseCache = {}; this.ajaxCall = function (n, t) { var i = new XMLHttpRequest; i.open("GET", n); i.onreadystatechange = function () { this.readyState === 4 && this.status >= 200 && this.status < 400 && t(this.responseText) }; i.send(); i = null } } return n.prototype.getServiceUrl = function (n) { return "https://ussearchprod.trafficmanager.net/services/api/v1.0/store/categories" + ("?clientid=7f27b536-cf6b-4c65-8638-a0f8cbdfca65&scope=games,apps,devices,software&query=" + n

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.7572927927059716
Encrypted:	false
SSDEEP:	3:GAJzRWWXPxYAFDJLn:5zR/XPxYA7Ln
MD5:	3BA83E5651FA69097B1F5BDDD9CF4334
SHA1:	0B7E734F76965C5533022971179EF8B072A1715B
SHA-256:	4A1643EF46E69EE61A1507BFD8356E6EF13BD3FDC1DE88B4176B7F8368213361
SHA-512:	1EA803CF1418C2726724A04007350958086962CA949DE42497DC351081128483FAA83547B7CC685F06C660B6446D3A6D44F1D0D4216A2636A5ECB73B6534D3E6
Malicious:	false
Reputation:	low
Preview:	The requested resource could not be found.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32006)
Category:	downloaded
Size (bytes):	40535
Entropy (8bit):	5.329172101529111
Encrypted:	false
SSDEEP:	768:GsoeaV5BJ/Z/KYYXWp9n3PulFnzTOHRkyz9g6IWeYZlAAj4cfHGL1gEvxr06SLlb:xMV5cYYXy8IN9g6IWeYZlAAj4Wm3G6SZ
MD5:	F50D31809ACB60FA6C9D03A6DCDC1EF6
SHA1:	9AA762F1FF4DA9D6F058FDB63C07AA38BF66DF3B
SHA-256:	0B22C718AA3DF8AAF8D98526EAD4A61CF6179A64F962495734A4E208AF52B902
SHA-512:	A35E0E94CD1915E9BA7CDAA65F5061E437C08A3689125A6D3DA32C709B26645D01388F0F9ECF714C3C1BFA488AAE32EC973EAAF9F95065E28E050C47CD7B8A1D
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.37.0-release_1294589553/ui-framework.js?version=10.37.0-release_1294589553
Preview:	function createFrameworkGlobals(){var a=.8;window.lpTag=window.lpTag\|\|{};window.liveperson=window.liveperson\|\|{};window.liveperson.uiframework=window.liveperson.uiframework\|\|{};window.liveperson.uiframework.latest=window.liveperson.uiframework.latest\|\|{};var b=window.liveperson.uiframework;b["v"+a]=b["v"+a]\|\|{};b=b["v"+a];if(!b.ViewController){window.liveperson.uiframework.ViewController={extend:function(a){throw"ui-framework has versions, please use the version folder in the format of 'v0.8' or use 'latest' for the latest version"}};b.ViewController=function(){};b.ViewController.version=a;(!window.liveperson.uiframework.latest.ViewController\|\|window.liveperson.uiframework.latest.ViewController.version<a)&&(window.liveperson.uiframework.latest.ViewController=b.ViewController);window.lpTag.lpUtils=window.lpTag.lpUtils\|\|{};return b}}!function(){function a(a){return e&&"function"==typeof e.stringify?e.stringify(a):JSON.stringify(a)}function b(c,d,f){var g;if(e&&"function"==typeof e.cloneE

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17023), with no line terminators
Category:	downloaded
Size (bytes):	17023
Entropy (8bit):	5.3316276717113915
Encrypted:	false
SSDEEP:	192:Tbk8rLfMtWCoD+pIaPV+8NUIWXlcfVk9z5FJxoYWBg3xx8TtYdR0cMobzwjn:nkzQCoD+q2/K/J7xB6Y0cM3n
MD5:	84A6FA0B49E9D3E94222341313F9080A
SHA1:	34518E71DBD34CC403E719F1BA55A89FE78C6998
SHA-256:	461FA42E31FA9F5FF7FFFBDBB681263DA80E1DA88957E99E8A0FEB6A48D151EF
SHA-512:	BF79826C62A5E4E1A5B4E4B8B08227F9509730343FF80ED3EEB4D623B648E45A1993AB2538ED9A99637B150BAA7DAC39E83A079D8C6D7F4FCC7471A562932E68
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/library/svy/store/broker.js
Preview:	if(void 0===COMSCORE)var COMSCORE={};void 0===COMSCORE.SiteRecruit&&(COMSCORE.SiteRecruit={sv:"scor",testUrl:"broker-test.js",configUrl:"broker-config.js",builderUrl:"builder.js",CONSTANTS:{STATE_NAME:{IDLE:"IDLE",DDINPROGRESS:"DDINPROGRESS"}}},COMSCORE.SiteRecruit.Utils=function(){var r=COMSCORE.SiteRecruit;return{location:document.location.toString(),referrer:document.referrer.toString(),loadScript:function(e,t){t&&!r.allowScriptCaching&&(e=r.Utils.appendQueryParams(e,(new Date).getTime()));var i=document.createElement("script");i.src=e,document.body.appendChild(i)},cleanURL:function(e){var t=e.split("?");if(1<t.length){var r="?";if(/([^.@\s]+)(\.[^.@\s]+)@([^.@\s]+\.)+([^.@\s]+)\|%40/i.test(t[1])){var o=t[1].split("&");for(i=0;i<o.length;i++)/([^.@\s]+)(\.[^.@\s]+)@([^.@\s]+\.)+([^.@\s]+)\|%40/i.test(o[i])\|\|(r+=0==i?o[i]:"&"+o[i]);e=1<r.length?t[0]+r:t[0]}}return e},getDevice:function(e,t){var i=new RegExp(e,"i"),r=navigator.userAgent,o=new RegExp(t,"i"),n=self.screen.availWidth,a={

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4596
Entropy (8bit):	7.8595994478813
Encrypted:	false
SSDEEP:	96:htkfntjMNQnfrtOeQq5YKb/QLkL6JtGoFVd+KALYWbTQANHN42urpkN:htGtjM4rt2tKM9Fj+KUSh6N
MD5:	C59D7F179B1837D03040C0673C5EC15D
SHA1:	E219F3E3A6A01233B84BB27EF7EBE941A792A3AF
SHA-256:	E83C28F43B70C9D58E8F8758E547B985577F5A38045F1B5A63169913F02A0CC5
SHA-512:	452031A1B1B5E7E72AD8693FE79D75AA24E0310EEDCC09199574A76159E7533627B30F237A3836F038A03B82F96E3174AB64E6A36B4684F400ADC037D3B8B680
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....PLTE.........Q..&...d..e.'.....'......p..m..z..w..\|..x..}.....s..n..r..e.....d..d..St.{..}..\|.%...q..V.....'g.g........d..d.&......u..'g....c.%...'g.d..\|."...'g"...z.'..(...'g%...'g%..'..%..'......u..'g.'g.'g(...d.....x.P......z..\|..~.....v..}..n..t..l.....l..z.....y..x.....y..q..p. ...i..Nk$...p..s..k..Ez....a..F..j..g..~..P.....w..f..e..'g.h..Z..:j%......j..}..s..k.?..5..*...H.....m..s.$...t.....d.....f..{..?.....[.....(R#...[..X.......&...Z.....=o.......m........6s............&...^..S......."...~.....K...........;...}..b..Y..c.....z..n..-.. ...y..v..g..}....$...T...d..W..+V...d..].....!......r..M..H........v..\..#............p.......H..C......z..o..k..O..,l~..4}..t..h..s..V..H.,y..z..h..M}.X{.Bv....s.....R..]..Rr.y.....`.i...2`.v.?B.....DtRNS..m........mm......=.m......w],..uZ..........}vE.............obX?.nM...nIDATx......@....M...!{R.$'!E8h..`...A[H.).B,.(..Y..[...'DDDD4JY.J.fu..R.[.t.I!.ku...x+..j...4...!H.:~.%.+...T{9."..

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1720 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13016
Entropy (8bit):	7.883155506636877
Encrypted:	false
SSDEEP:	192:1usWVOBxMoGH4u9YRcVnk3rPnmE+59UOy+tYwOjPMZdC8NhfQyQYLWrBvo04uE:GKx3GH/9Y0cmAOXtYwOadVhfyYLyP4uE
MD5:	F5B4B4F04F1924F9470DC3C0B3E4FC01
SHA1:	28D187B90F70638832771600CD556BC85B418A37
SHA-256:	98FB37F9F0DA54BB17E1322E1A49D5D683854A0BD3DE47C01EB3F0CCBB8B2999
SHA-512:	676E6866C149E56699CA65887D4DB5903CD6F84D32987215F218082E4E441340931221BDED2A78512DEDF417848379DD7E45BF4F87804BC7FEFF7CB3632CB53B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......P.....B.uk....pHYs...........~... .IDATx.....\.u..+{)....b...G9d....hL#....."p-[K.J.6G.;..i4..q.8.0q.vk...QVk#...3.lq...a+....J.....b..vQ....b..)...s..7....w.}.... w~.}3.....k.^.h.....X.z}.a.9<...............-o......c.-..s.Ti.......^x...g_.i...=........\R?0S....sg.....G....o.J.m...].b....u...w.Z...[...}.l...1.~..B...7.\HT?0S...n....y"......z}.^`.4.T....Y......?7w.;..A...X...s..Um..~`..V..G.J,$.5...Mg..#.\|...S...O.?..u..7]{....nxK.....?2.<.....N..i...?....=.......q....>..c[..f...#.jG..F.!6.......G.}O.~..$..w..+..,....M.>.}....6T$1g?.Z......1.l_5....6.-......-.W.$..B"9!V.q.JCd....G.I.C8...... 4....K....mH....d.&..IT..<.~...,Hp.%.v.@.~.7k......Z.Y......p.^#.....l.35..5I`j'%..1..x.........={.o....bye..;v..1./~.w[..{@.N...J.mG..z...[w.=x....K....C..\......;....{o....Y..?...K;c..~...u.)m.M...m-.g.}O.MU.7.~._.eK~..UI 6Ht..l6.........F2v....q.zV..TZ..w}v.....h.t...T%..>5.7.$.{A...lsY..2.K..f.b.>....)...K...RL

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1246
Entropy (8bit):	7.808846010085192
Encrypted:	false
SSDEEP:	24:MTdxpgq3k47p11dMKevQVzC4jdSLCbw8/vSU3wJqcc+Saqpt:yvRbN7dMKf/jdaCdamwJbc+m
MD5:	0B0D324D8294AB9E1C36EFACB6276980
SHA1:	B7599E4CDD88F31A4A56C610D3E86223D95BAAE0
SHA-256:	0FE6AA8A56A4B66BA0B2D23C8AF6F1F94A894E5525C5E193C7FD70EF05A7E5E6
SHA-512:	C08A4BBDB1F2ACB74FAD8B2B51CD0E3343D38959153A62FD5E98B4591548E92344131C9ABFC742B3E51FCAE5D8FE8C98032B9EB5D2039690598B0E825093436B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........K.K.>Q..D......\|8....c.....n....K.#.'...s..5y....\|..{&...k....................[...._...>..r.......R..}3...g.....V.5u..V..../...~."...~.>y._...........B{..-kRW.d..=...F.......~. >Jr.pc...]..............gL.v$i.o.T..!P.....z..Go.....GE[......w..^.. ...M..].o....n.+WM.)..4.....?.\|Q3..c.u....2O.N.....`..n,$`? ......P..{.tK..TP.....e.J...X..4..J\.<...7..CU....<g6D..]%......QO.--Q#..\|.fe.&.1U...d.%m?.5...I..@.*E...k<.....,...IP.]T.O..8./...=~..X)......L....U........N.x0.<u.........x.......c._!...GdA<.....F.q..mj... ..O...5,#..".dPTO..9.....+.K2......m....Bl....K.#.>;s....8NG...l..% ...8............\|t=x........&..\|p.....~...G....?.j.Z.30v.m..a...i.N...A./-.....J.2.]zPI..j\|3).PPr!..s....Zv......#/.,z.jM..Kr3...8.H.hH......d.t...........,.!rP.ZQ...N....1.K...v.(...C.%......F-rf.FDW..m....w.....^....M.y...:..u^.. .........,.B..6!D$/.......:>.........ZD.^..l8....[&\.h....'.....#..#......`...s...<....P...Ih.......+\|

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 520 x 293, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	57567
Entropy (8bit):	7.925964387366125
Encrypted:	false
SSDEEP:	1536:Ei3R/YgAfMZeodfDFO1ep53uB5XBuYeORN81wlVvzZE:7RgAJFAep53uBPuuz81wjFE
MD5:	82C1B25D6524E0DB56CE7DE894E81C79
SHA1:	8DB2C034E34D4F683DE4C1CB4560181BE1788429
SHA-256:	B4E5D8A770B794EB296469CF372091303AF833CFF794FED2B7128A8E4518EA14
SHA-512:	99CD9DBBDE6D1B30A85BA48653199EA2A3CB2300C34A2B038E95A3849BA3B983A9A0BC7FB8B2C546AC14C3609B47839A6303B6BFC23D5E5F269361740B1690A7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......%........$....PLTE....3..........Y...../.......................................................)....7...y.q..3..y.......;.-..L....q....\.)......[4...,..1."..........!...$.#....G.w...V.j.6..%.......@-....c=...?.. ..)..c.,..<..U....jF....N.&..{...b.#..D..+.5...`...:5...g..q..!.......$...T...3B...[..g..R..H..T....../G..3...K.R...7.>...L..r..A..<...j.......$p.2..-..G..2./......n..'.....F........(..A.W....M.3..){....8..8..J..T..Q..O..h.....;..[...u.<..@..7.......5..V..c.@...y..C..a.....m..K.....A....%{.5...G.%r.....M.I...H.e...Q..\......$l..`.%...A.9...V..S.....I.......y.E......_.#......a..O..../.....X....!l....z.....0..t.......n.J..%e.....:\|E..........v..{..=..wy{.%.g...?y.f..EGHDa...o.[.`ce.J...O....X.#...N..........f48.tg.Y..A.82..'.Ya....X.....tRNS........~.....IDATx..M..@..#`..r,.a.A..pd..,...E...l.8...j>J.[.0..U..=.x._W.....#n....O.O....{.........>...2=.>Y[...-.\.......n.&....U...:K.....@...1..1.."..P"k.....;T.{4U.y

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62300), with CRLF line terminators
Category:	downloaded
Size (bytes):	62397
Entropy (8bit):	5.350884702903751
Encrypted:	false
SSDEEP:	768:9Ijne57zoxJa28mpUG5YTMbLpPuB8++KX5wZUZJjK1qED0F4ztva+tZW:qjetzoxJaVQC+KJwZUj0iOW
MD5:	B31E76D22DA4399DB4B8C8ECCD35DC2B
SHA1:	B36D4554849D3F05DF0363366BE9133D35EACA98
SHA-256:	5BA7B351020430E304E1C38988858E13690202831484697551E56FED5826004E
SHA-512:	DE2A305DC568D53CA6961D0C9E9FF4497A9A7FE462620417DB3F7ABB2FD508E3729C5090A1119A0DF7DA998AE7C9BF6BB140838681AFCAD493848187BDB9A312
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.32/clarity.js
Preview:	/* clarity-js v0.7.32: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Fa},get start(){return Ua},get stop(){return Va},get track(){return Pa}}),e=Object.freeze({__proto__:null,get clone(){return hr},get compute(){return pr},get data(){return ir},get keys(){return or},get reset(){return vr},get start(){return dr},get stop(){return mr},get trigger(){return fr},get update(){return gr}}),n=Object.freeze({__proto__:null,get check(){return Or},get compute(){return Tr},get data(){return rr},get start(){return Er},get stop(){return Sr},get trigger(){return Nr}}),a=Object.freeze({__proto__:null,get compute(){return Dr},get data(){return xr},get log(){return Cr},get reset(){return Ar},get start(){return _r},get stop(){return Ir},get updates(){return Mr}}),r=Object.freeze({__proto__:null,get callbacks(){return Rr},get clear(){return qr},get consent(){return Yr},get data(){return jr},get electron(){return Lr},

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1998)
Category:	downloaded
Size (bytes):	530455
Entropy (8bit):	5.155958154904355
Encrypted:	false
SSDEEP:	12288:cJpYYYb5T2ZggigVl1e/zXJ5lbgutNPzedZTyatWYLe0dZshIw:cJpYb5T2Zggigv1e/zXJLbgunzedZTyD
MD5:	9D7D4837CA0F716D17814E2733B0F9EB
SHA1:	10C4CDDC1347F1A20B2481917D676F1FD9A3EBF9
SHA-256:	D5AD7D29B9608839E63959EEA4A26F5F053E796AC0CAC9EDE5FF1F5F08F70236
SHA-512:	1CC93E948124DBA8D450A4B68966FB47C6EE13105432EBC213500ABEECE5D606DBCAAAC6BBBF5C08A2612E4E3DD22F7E0A217BCB5A6022E38B0D61E6E29E9635
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASH9d7d4837ca0f716d17814e2733b0f9eb.js
Preview:	./!. MWF (Moray) Extensions v2.15.1. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */..(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :..typeof define === 'function' && define.amd ? define(['exports'], factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, factory(global.mwf = {}));.})(this, (function (exports) { 'use strict';...var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};...var check = function (it) {.. return it && it.Math == Math && it;..};...// https://github.com/zloirock/core-js/issues/86#issuecomment-115759028..var global$a =.. // eslint-disable-next-line es/no-global-this -- safe.. check(typeof globalTh

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1020
Entropy (8bit):	7.73178843605843
Encrypted:	false
SSDEEP:	24:EqCN5i3CTc+SOgsWXfqrSoepQfdeyDckl:ErctBsgCWoeCFLv
MD5:	E4F74AA4D8B22043B8379F9F206FD2DE
SHA1:	C47BE6AF7537849B42D1F457DD50D9B78F5C2504
SHA-256:	374E698561B453F126CF795BC870D2C06E362FB35EBC2E0D4DE812D9606FDA97
SHA-512:	AA2440750CF56BD689E2DAF518ACD83D4FF6BA2E0C31F8E62560AC4A843764FB08B319192C4A20716D1135E8FFC0E3794B61DB0A49C5C5DF2D9FE9A20C1902CD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........n..n..ALPH........m$..K.z}....PAE=..n.....~K...`..$I..l..m..?.z.Y..G.m...~.B.DF..g..7.c....m.....[`=..1....)0Z}.....%.nisJ.c..C...6.oRwy..L.@.i.6[..Mo.uQ.......`0.........r..?........VP8 ....P....o.o.>Q$.E..!....8...._.g....P..E;q;..=@o7z.~.zd{,yL...^"q..O9.F...B.U....fS.-.........\yR....bg.@.2..z.R...[.>...N;.sR7..'..#............D........vp.=.K.G.....g9L-....m.@.i.m..r}..<.1...[...+L.ZU=....l0.B..eV.XZv.?__..A.....R%...^2.....g......Y.9}.".....^....6..W..o....k..3.\|q.^..c.-7K?...I.okg..T.YI.\Y...]..@.$B...,...;.....F1.5.....J^.9?w.Fl.......e.(..........z\.o..,... ....q.0EB<......9..........s\|....O....g....#..e}...W.w..........q.....eX..0v.3T.E.K\|-........2K...C....>..)^....C...Z..m`>5..'.gZ...ht.KC.....Q...l.:c....j..$.j.......~....]^z.DLg.8.]8.*......A.M..8....\|..O..W.n.Up.%>..S..c.....H..HM........9..p.4g..@.....l..i`1.g....~...#.%..n...ez...9..<@`.....F....m9....AB,L....;...._\.W...Z

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32162)
Category:	downloaded
Size (bytes):	48312
Entropy (8bit):	5.39705159583034
Encrypted:	false
SSDEEP:	768:cMHV9GUbNE6KTJvR6YQ/b9D14ezuEY0arQlqSbSzR/bF1AQ+fv1GF:HHV9FE6Kz6Rx2jlF+UF
MD5:	558230AD8AC78C043E472E6217BA2FAA
SHA1:	AE4FC0C85E1054F7FD10D16B1BAF64A27DF014A9
SHA-256:	D03ABF722B9AC55E9EBD1CD2267B96623EFE34907329FFA3A57566BC9934A4C1
SHA-512:	137C1446EF1851DA75071C856FBBFC38E0F65A5EC80230DBCD15F3D24F949D2723A7A463019F0E9A2D9587686E8FC3C33E3CAB561F9B683817DA194BC2235B9B
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.28.1-release_1349276690/storage.secure.min.html?loc=https%3A%2F%2Fpublisher.liveperson.net&site=60270350&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net
Preview:	<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta http-equiv="X-UA-Compatible" content="IE=100"><script type="text/javascript">window.lpTag=window.lpTag\|\|{},window.lpTag.lzString=window.lpTag.lzString\|\|function(){function e(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var t=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={},a={compressToBase64:function(e){if(null==e)return"";var t=a._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:a._decompress(t.length,32,function(r){return e(n,t.charAt(r))})},compressToUTF16:function(e){return null==e?"":a._compress(e,15,function(e){return t(e+32)})+" "},decompressFromUTF16:function(e){return null==e?"":"

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4900
Entropy (8bit):	5.20253442687373
Encrypted:	false
SSDEEP:	96:AxtrhzraGBre3bre3/vre33Nre3B7rxLCULeAyexdeHaeXCRLc49Ni+MNbpeGm8D:ATKp3m3q383prxrLRycd8aOCR449M+MJ
MD5:	EB41711BCCAF903F893A7DCE8F842F82
SHA1:	4E082D3E3C9591F45707903F7E5A62D11CA86392
SHA-256:	F640113A776235BFFF3270357F88745A5C660D65483702476923AA721FE3DA4F
SHA-512:	25F396295F61F105524175B66F7F62BB63994F83E30F5071EE2F0899195561D56BDAE32D8AB9FAEF0FB4E570A322DEA9B4EA437737B422144AFAF3591843CD7F
Malicious:	false
Reputation:	low
URL:	https://prod-video-cms-rt-microsoft-com.akamaized.net/vhs/api/videos/RW1dQ5E
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5E-enus?ver=77bf","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5E-tscriptenus?ver=9b58","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeStartDate":"2023-10-24T17:29:47","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RW1dIj6","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIj6?ver=98df","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RW1dIj6","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIj6?ver=98df","link":{"href":"/vhs/api/videos//thumbnails/

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 77x77, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1988
Entropy (8bit):	7.8834294907663125
Encrypted:	false
SSDEEP:	48:BJ1HaiIgKUdP3TPjEj3zK0SmvjE+mKwniEE:LvtTPIFLCliEE
MD5:	3B9153D439DA369D93348D9BF56F1E83
SHA1:	D186F6B8B00CF5AF9095E770207D428024FA0B36
SHA-256:	6E08F922CEB66ED81BC471B96434255AD1E791575F36657B8510FABB09061460
SHA-512:	2314EC0372349616D8B3F873F4153EE3CAA98A8BEF23F36F6B9453422A0AB245271047C5680ED0FEC1A8E1AD80A4E59C0ED67DB112380A1F67105BB7352FFBC9
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....P!...M.M.>Q .D#.!...H8....ev.n?@...;Z...fi;...._0...>.....?.u.z...~.zN].}C.............../A{........../.n5{my.#..W....~i...........~...&...q....G)..XI.DK.y.......aZlx.l....zf..7.....X......Q.1.f...j..A.a....@..X..j....tl.q.4:..yK.....W9..U.7&.\|..>?Kf.w_.6.aKi.o........r....b..M.m..4..U..(...5..z.1...E.?k..E......1c...c..f.%...C.@...Cq?.........b...8....r....k..G`q^...U..a....A...n(B......S~...%.7./...I?(2.....A.}..e.......F....3..&.)"....c..w.W.../..>.uS.k..K.....M)...:...[w`m.G.P....X!....%\..7;.....$;..;(..s.IJ.=.O.6...y...c.P.........].0.u..M.U....k..5....Fg.Mgd...3..M........S.M..5<#z-..}.W..W</$..ph$\|3..e>.......{.a....b....j......... .....Q.l1..I..(#_D'.......S"`O...J............2Zm....d.;.g...wJ3......T..]y#}.'4....?e7$..A..>td..M$..N.:.g........o3.3........U..mi...V...%f..........d.S7....m...7.....9M....V5X..%...fy...S."[Y..'8....WV.....N.......\.....l...r..Y...E...J.\.N....,\|.....s\.x...l.B..V...u3.j9....

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4873), with no line terminators
Category:	downloaded
Size (bytes):	4873
Entropy (8bit):	5.2268236765669895
Encrypted:	false
SSDEEP:	96:p6+5cDrFRe+/zH/pMWtPfHGHPiBwXA4nHjnwwX8ntj29X8nvDMwtKcDneTbZoDy:k+5cDrFQO7pMWtPfmHPiBwXznHjnwwXp
MD5:	ED927CF0F8A1BE103DF48446270416EE
SHA1:	F7B2BE7FC2B063AAC03E76DF9F3E19D615970213
SHA-256:	EBDD298DFD39A35E5F54469F12953081A17CBEA55F3A4A79C0FD4997D804F7D5
SHA-512:	FCA692C8C7B104FB00C2E6D90C1A0D52A0FF93CDA626338D8FA114A0E9DCE2504DF9282868F98A46648A6E616A96ACD14CAD0460D72477421C8F5EE8F7D34256
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U
Preview:	.teachingCalloutPopover{position:absolute;z-index:10000;top:45px;width:336px;right:2vw;color:#000;background-color:#fff;border:1px solid #000;box-sizing:content-box}.teachingCalloutPopover .caretArrow{position:absolute;display:block;width:1rem;height:.5rem;margin:0 .3rem}.teachingCalloutPopover .caretArrow::before{position:absolute;display:block;content:"";border-color:transparent;border-style:solid}.teachingCalloutPopover .caretArrow::after{position:absolute;display:block;content:"";border-color:transparent;border-style:solid}.teachingCalloutPopover .caretArrowPosition{left:215px}.teachingCalloutPopover .win-icon{font-family:"Dev Center MDL2 Assets";font-style:normal;font-weight:normal;line-height:1;position:relative;top:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}#teachingCalloutDismiss,#teachingCalloutMessages{color:#000}.teachingCalloutHidden{visibility:hidden}.calloutMessageHidden{display:none}.caretArrowUp{

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	210
Entropy (8bit):	4.7185615700431
Encrypted:	false
SSDEEP:	3:yionv//thPktkl8lz1pxgJlrxnlldiQg4l/ZEoUqOUxA6QiJmu1rmgOtVp:6v/lhPktkqlZYriQbl/6o+UCgOtVp
MD5:	5E136D738C93FDB32C08FDB249905C1F
SHA1:	ABEAA733EAD9D6A3843AAE402AFE8D8FBF0452BF
SHA-256:	5A639AC902DFFEC0B8174E7A2DDA2E18C8038B76FF5C88EC507984E71B7B4A1B
SHA-512:	59D0007D992CD0332E556A8F672C29F0E113FC4CBC1F3F245396A4477E894FDD5ADD9608D115E2FD656D672549713F46F95D4E316A5D0E73D7BFB754F411418F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............!.@.....PLTE.x.....x..x.!>......tRNS..V...G....qIDATx.....0.D.,.N*.../...D.....=................................l&_..i....t.i.................................i'Y......IEND.B`.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 111 x 111, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2204
Entropy (8bit):	7.822161106312027
Encrypted:	false
SSDEEP:	48:c/6OXLRUeECSupeHh+XNIJVB8e69ZRte6F5VoxPxH4mB8buOz:cSipAB+XNIO7Rte6XVePR4HuOz
MD5:	63F209DF826F187C9EB6EA5C02CE0DF8
SHA1:	F7F7148B01CDABDD1555EAE8E7E7676ED38EA92B
SHA-256:	55BB42006E6FC43811ADDBB2061577D3F9DF22FDC63AC5F743529DA08D337500
SHA-512:	2F5168DBD8551023241B74B64DC8A1FA9B28388F989F7C26B30EE7A3593A79F9E4944009399576E799786EA3B4E16B3B3379373E56861A3A0AAEDCE87C298F53
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Icon-M365-Office-Mobile-App-logo-111x111-1?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	.PNG........IHDR...o...o.......`....pHYs................NIDATx..olUg....9..u...[...[..h.tFc...A.0...%..-......-........1...H"8..J...uqnf....d.[.c.-.........\.4......{y._z.{.y....s.{n..b1....X...3.+.`.<......3.+.`.<......3.+.`.<......3.+.`.<......3.+.`.<......3.+.`.<....&V...'.Z:.#N..LR...G....)w]#!v.;.vN.}g.......0...8.....Ly+.:7...........]#.#..{.vFX....yuk.o.N>..[...X(.C.{...B}2..l..@.....o.}.....8;+.1....pq<..\|...\.._.Pdmo...C..]...>...@.G{.....3.."O..;7....K..A._T0.A.Q....\..x......:d..CS..U.......=.M.^m.xs..W...\|..G`...6..S<w...R...?..~.?......3.]...<...z..;..0.....G`..j...../..f...P.M..pD.....#.d_.. ...g..[p\|..........t................>...c.......TD/.....Qy$...R)..%.+.......T..yO...9nF`a.4fq..n<\|...u..,w/4..r?.......zS.....D....s..x.....Y;^q.'.,;..r...!......\._a\D......?.V..:.T.]._3 ...K._*U...U...[...!.....d....>n..'x."..\...A..s[:..p7.g\{.s.....t.O..'...Y..Q_6.@U..R.[.-..P.......7..3.}x......o.\|.T..B%..RC.p-....&B....AY...."/.%;.\.<#

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1158)
Category:	downloaded
Size (bytes):	7935
Entropy (8bit):	5.175600779310663
Encrypted:	false
SSDEEP:	96:jJ/nMdaBU+hx1fQeWYZRRTaQV72viMhKz7pCCtS5NI2Tmtnm8Gu8Qf8otFtMmOeC:pBfQATbJlnheBIeffKIjd1hfNR2M
MD5:	864A24D7C4A1097F30B215E79CB41967
SHA1:	CE21463CB4C1509C45EDA1B12FF71EF4AB578DD5
SHA-256:	7756407C953FC5FB0B4B2E965A32B5D129D73266F26A1A37D107C8501EC85767
SHA-512:	A83980A658DD2CF73DD711FAA09DED768E6C85E64E5A868B396B69BB7C6964643128D517F01A7873B247211631C6C2DA9E16559BEE3D44795997AA24FBB8A5DE
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/videoplayer-nocookie/embed/RW1gt0F?pid=ocpVideo1&jsapi=true&maskLevel=20&market=en-us
Preview:	<!DOCTYPE html>. CREATED BY VID TEAM -->.<html lang="en-us". dir="ltr">.<head. data-info="{"v":"1.0.8745.29656","a":"c8fc48f1-a237-44d8-b306-f4d035e201c7","cn":"OneDeployContainer","az":"{did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odeastasia, dt: 2018-05-03T20:14:23.4188992Z, bt: 2023-12-12T00:28:32.0000000Z}","ddpi":"1","dpio":"","dpi":"1","dg":"uplevel.web.pc.webkit.chrome","th":"default","m":"en-us","l":"en-us","mu":"en-us","rp":"/en-us/videoplayer/embed/RW16rdm","f":null,"bh":{}}">. <meta charset="UTF-8" />.. <meta http-equiv="x-ua-compatible". content="ie=edge" />. <meta name="viewport". content="width=device-wid

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1166
Entropy (8bit):	7.804358401965295
Encrypted:	false
SSDEEP:	24:gG/dV6nzLY68an/Dk853+fn8R7WB1RqpDm4sn9kbo63:tsLYFa/X5q8RKB7qLG9363
MD5:	393ED96929DF4D3B861C71FD37D220CA
SHA1:	E95D35FB398807BD6BD7357046698FF4BC3BAE5E
SHA-256:	25849A4CFCAB967FDD64FA8B45727EFE1E4BF89BDBE0EB838F05603F01ACB97F
SHA-512:	E8A449D953ACD644AEBD92D7CA225414030055EAD96A989480D00102E96943E82A8B9506FA8D5DD699AB22102340F811C4360E8BA6D321DF08847D73348349D9
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 z........K.K.>M .D".!....(...e:..k....n....\|.o.7...W>`.....i\|.y.zS.........P.."..+...?.!..._....N.)......'.......2.)\.....{..o\.H3..~.....,kl>..4..&...M?.{[....j.....gs.........=ywN.4.~q....b.m..>=...Gz5..L9......U.Q6?......../..~..[..K;..F....OJ.p.L..j.V?.D...]).u.^.('..O'...X....#...\|.f..eh8Z..Z8./.>..Y7G?..ix...l..jC...=;u....~e1..\|...#.r..t^....l.......<...?.<.....N.$.3.B.;W.....T...#...z..L.....g...i.....Z;D;.ZA.N...s.{3.J..=.g..C(...j..x...A.9.fc..W.?.#...S-......(=..3.......0.H..".qr.....n.3..w....{..3....w[..N.^..\....Am>.G.......H..qz.......M.......Y..[....%}.U.........Y.=z.../.........'ks.k..=...X.l.wf..\|..D..>.g.4.]..7>F...J.....%s...I]lZ.^..w[..\|.]?W.?0..~..#.(p. W'.v.A/pD..Uq...>A..."..i......H.}.Bh_fyg.1.k......p...H.....B(.Idy.>!G...U...C..p.uV...<.NV.8&w.3.&..eb..YZ..:...J.......#qw...4o...5}*}...G......=..QJ....-....=.$.n..b.n.[G............b...%...h..W.K.......".`=.#o .~..Y..b...`.-.U..T...A..-...

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (752), with no line terminators
Category:	downloaded
Size (bytes):	752
Entropy (8bit):	4.967401717999529
Encrypted:	false
SSDEEP:	12:3wKkeM1sfHEm2ZzDQmgLV7jcZ46LVqQdKIk9he8nbXgbQm0NtY9cYEhYZ:ceMqfHLujgLVsXLVNq3eKbXgEXKcbh4
MD5:	8B108270C39F8445AF12A161014C9E6C
SHA1:	CB7D4C8170DA7FC7AAB6F1FD2F3B3CADFAFB1024
SHA-256:	37E5FC99BB129CB2CA765342159CACFA954C088C56FB87B2E4FA4C6BE734BE4B
SHA-512:	12BCCF3192E6365F0FC57ED01602FC54E155831E9F8032ADDACA4FA531505C316DEA5292CE64D3E5D2EC717B507A094CFCD0FB2030E92EB5A4BDE077BE3EA1B0
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/videocarousel/modal.css?v=N-X8mbsSnLLKdlNCFZys-pVMCIxW-4ey5PpMa-c0vks
Preview:	.videoContent{position:relative}.modalPageBackground{display:none;position:fixed;top:0;left:0;right:0;bottom:0;backdrop-filter:blur(3px);z-index:998}.modalContainer{position:fixed;background-color:#fff;z-index:999;border-radius:24px;box-shadow:4px 8px 12px rgba(0,0,0,.08)}.modalContent{margin:40px;border-radius:16px;overflow:hidden}.modalContent .ocpVideo.ocpVideo{margin-top:0;margin-bottom:0;border-radius:16px}.modalCloseButton{display:none;position:absolute;text-align:center;width:24px;height:24px;top:12px;left:auto;right:12px;cursor:pointer}html[dir=rtl] .modalCloseButton{left:12px;right:auto}.disableScroll{overflow:hidden;height:100%}.resetTransform{transform:none !important;-webkit-transform:none !important;-ms-transform:none !important}

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3632), with no line terminators
Category:	downloaded
Size (bytes):	3632
Entropy (8bit):	5.242638813683258
Encrypted:	false
SSDEEP:	48:N/thgjMmJ4eDcf03Kej+odDcfHtjt3KQcRS4BzknArRBsd5tfAL6LcLFrL0ej4:lthgjPv3GtttCr5uQBrgB
MD5:	CF1930F3EB3094E7B16358D253F5A5C3
SHA1:	76A281C668CA978659E13C8BD6E4884FE2CE2696
SHA-256:	A5CA35B346944111E99E7E68EC2317C0E857AA9B044308A4FEBB22F8605E1871
SHA-512:	A30FD60623E45C503E852F8391507DABE7F0E6513CF380602F8CC3D154C9D50FACB7EFD7E1AFB7548D5BBF889DC0BF9AD49BEA9AC270D9084551E34DC9D11642
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/library/svy/store/broker-config.js?1720158984384
Preview:	COMSCORE.SiteRecruit.Broker.config={sv:"scor",delay:0,addEventDelay:1e3,isWindowOpener:!0,cookie:{name:"msresearch",path:"/",domain:".microsoft.com",duration:90},tracker:{ssl:"https://www.microsoft.com/library/svy/store/SiteRecruit_Tracker.htm"},mobile:{match:"iphone\|ipad\|ipod\|android\|opera mini\|blackberry\|windows (phone\|ce)\|iemobile\|htc\|nokia\|bb10\|mobile safari\|mobile\|wpdesktop\|lumia\|playbook\|tablet\|silk\|reddit",largePhones:"phone\|sm-(n\|g)\|pixel.+xl\|ph-1\|oneplus\|lg-\|nexus 6\|lm-q",halt:!1},mapping:[],clickedStopTrackingLink:function(){COMSCORE.SiteRecruit.DDKeepAlive.stop();var e=COMSCORE.SiteRecruit.Broker.config.cookie,i={};i.cookiename=e.name,!(i.cookieoptions={path:e.path,domain:e.domain,duration:e.duration})===document.hidden\|\|void 0===document.hidden?i.url=encodeURIComponent(COMSCORE.SiteRecruit.Utils.location):i.url=COMSCORE.SiteRecruit.Utils.UserPersistence.getUserObj(e.name).state.url,i.statename="SILENT",i.timestamp=(new Date).getTime(),i.graceperiod=600,COMSCORE.SiteRecruit.

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29388, version 0.0
Category:	downloaded
Size (bytes):	29388
Entropy (8bit):	7.993008091542256
Encrypted:	true
SSDEEP:	768:2075f+Dti4JBZRdp49Z5wmWPb2O7a35bAvDWIfe:2k5fOtiCXvb2OG3I1e
MD5:	6E75A94D5F7170A1AB532D32C2A35755
SHA1:	9C1B6FFF544089941BBEDDBCF529C3F0B46D853A
SHA-256:	D87D0A7A7FE2C36D1DC093BFE56E9B81B311988789DBD3B65ABF811D551EF02F
SHA-512:	27CDBF98A3F42510EAEB28437E3C4661734B685D63EFF5E47364AC46B73DE617894EDCB19DDD9AFD955DE192CFD8BB755998ED609EC2C279E9AFAB3DB2583175
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/Semibold/latest.woff2
Preview:	wOF2......r..........rq.........................`.....P..5..... ..m.6.$........ ..<. ....Z...Vf...-B..H.......`..^........1.......,.)..D.g.m[.......'...QQK..l!Q.......^.]Q.;...I:$..{t.C.".6.".........z....I.<.OX..%....iT.D.m.N;5y......../6jd.....iP.. m.z.....ltv...r..L....V/.%VfVfeqw..%u.,....Z.,z.....t ...5w.}..e..K.c..G.....6E...F.Q .&."&.....bd.hl.m.J.M......,..._6-.E..o.?..U.=?..l..%r....r..-k$..\|....5..[d...d........2.H...-..?Yp....9x\|...Z/z^G..=...?...l..79...S.r...uj.....u.'..jT...._&..xW`.)..Yakd.....O9.J..+..83.>!..'.`Hg...\|t..YXf..'m..B.....(,;.....2#.)..........:......W.3.....\|Q..f...Z.0vW.L.HE...c<.. U..0..?!.d..W......V./rDn{...B0..t.1...W m...@..Q.L.7.._s....m4..yk.....j.fJ..C........"....-..U.V.n..B..Zg....3..........u...nT....M7@...IQ..(..r........!...v^.s..R.... GH..&...~.......k._..?Y'.O......v...E.,....E...9..%.M...o.w..v(.a.K.h...A.......`...}^.h...PJan..Cl...t...E.@..J.c........+..@..6}OA...Q.\..E....0..2........vgK.O

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	388170
Entropy (8bit):	7.957928867019596
Encrypted:	false
SSDEEP:	6144:DnCcHiiAdV6hUPmcql2OD5vwTpB7Zq7PkXhxWpCwqq7RhuCVVcpbvSAhnvFq08RA:D7Hi3IU4dDyBLXrWYK7eSAhb8RNc5h
MD5:	946927D566C05AFF4A44C1760BF32743
SHA1:	5600CE2F4E895096064709F32AF028CDBBA0F995
SHA-256:	33D787E08C6F2BC685B9B4F09E3A2A0C7FBF25669A25E28C7E37FC4ABF6B3625
SHA-512:	548D6102BE8D37B4BB9C45583FEFB0D5F7716927C64E3B4AB2BD453F71863E53C3CDE937A794A8EE2192996A7AFBBC03F4E96D4D3BB6DEC755DA71F6870B6363
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3" xmpMM:DocumentID="xmp.did:1D29C061686011EEB25FFF87BA6598B7" xmpMM:InstanceID="xmp.iid:1D29C060686011EEB25FFF87BA6598B7" xmp:CreatorTool="Adobe Photoshop 25.1 (20231006.m.2353 10d5734) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c780726c-110d-4368-9520-476e0e8bd161" stRef:documentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52518)
Category:	downloaded
Size (bytes):	346827
Entropy (8bit):	5.422186715469859
Encrypted:	false
SSDEEP:	3072:EJAuQaZTuBn8Tk+GnSEDkWVtQL1z45+QdRPhIeDWpA79eBGXuyZ6rq1TWABjpI0:EJAigRmEDFVtQLq5+aRCeDWpApe1R0
MD5:	5FD1E33C0C907DE14AF45FB081FC7F9A
SHA1:	007DABDF9A2B735EB5519EB6E6D5A539A8C9FEB7
SHA-256:	8878A6113D3767FCB0F7C88FDC432C839A4E4E6FE97DEC5E24B0D5EB32ADDD88
SHA-512:	FBB5CE36B49887D7716D4BA257EC1328DBDCBC12B8E432076BED7E66FEFCD510F7CB5D518B04CC0B7797828B139619E5B3A2F9DADFBEADB2968F803E03DC45AE
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/main.MWU2NDEzYzJiMA.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},r=Object.prototype,n=r.hasOwnProperty,o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",a=o.asyncIterator\|\|"@@asyncIterator",c=o.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(t){u=function(t,e,r){return t[e]=r}}function f(t,e,r,n){var o=e&&e.prototype instanceof p?e:p,i=Object.create(o.prototype),a=new S(n\|\|[]);return i._invoke=function(t,e,r){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===o)throw i;return j()}for(r.method=o,r.arg=i;;){var a=r.delegate;if(a){var c=g(a,r);if(c){if(c===l)continue;return c}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if("suspendedStart"===n)throw n="completed",r.arg;r.dispatchException(r.arg)}else"return"===r.method&&r.abrupt("return",r.arg);

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 19567
Category:	downloaded
Size (bytes):	7118
Entropy (8bit):	7.969483056551195
Encrypted:	false
SSDEEP:	96:1JGRkN0TScf+4VozzFbsJnpmX9SuMOvwMwF8Xt/55ft7UXngzLWfn77A6iBeR:r2BVK1sJni9Sivq8X1XSX4WfnPA60m
MD5:	23A130FD6A6A4D521F68F6C77C1406D1
SHA1:	684E6D6E1761BDD1F5E8B87B483DDB822881154E
SHA-256:	A4C7A17478D3D3A921F14DC7D7B6E35C0FF4FDBAF410501FCC725B8F49E876F8
SHA-512:	F94F713EA1DF0B1CE15C28DF6BCE647F979095F180DF7A080D2672311BCC227AC9915B7753C2368672E4334F11DB8241DE29F7E1C45473697E399BA8BA81F844
Malicious:	false
Reputation:	low
URL:	https://cdnssl.clicktale.net/pcc/05d32363-d534-4d93-9b65-cde674775e71.js?DeploymentConfigName=Release_20240613&Version=3
Preview:	...........<kw..........X.B`;....8`'N..M..`&.%5.AHD.....}....ag..]..Z.....w.h4..7[..h..........s....G.......n.k.R7...k.......m.....k.3.#....ZXE...[...2(..6%c..........d.fc`..,.J.%-..{.C.....D.. I.k.....,.~..aA\|....#){c..c......O..S..L8h6..?.4........$c.g3.[P.%$SH3.QdD.\?$cK&\|..Yw.;G...#Y....~.k.m&...g.......xf..}@.@...3..0AH..YC..y...Q-..u......e........P_.B.3..$}.]...8.bOi..Cb;q+PfO...CA.9p2.J..,......p9..0.S.ua..Zth...s.H..N....q-.>....^..^....mL.#.L.s%../.......[]...2:E...W...mJ..OT..h...y.(.O...g..e=r.g(>9y..-.....7.y7s.......)lI......K.."......H.@A..q`..I.........B.._.......".y...Z.Ls..k..Du.;....U9P`..E.F.6.Zqu3."...b.F..X8..?...\..}..sh.]V.l.h..PLye.%...O.X..C..5....J9F.h..@7U.k.<..O.`2.../z.H..Y........e.'g.j..o....V.....!'3....K.vdT.j5.o...4..Y..*.T]..d.f.....'.....q]/...V<... kl.,...BX...T.#.......- .N.`..$.. A..d.....f.j.]..Z..DAY..,.>%...S7.t...~6t.YPM.....%kFE..Uw.8..V."...+.s..h...A.S.};L.1.H....$.>HQ...Og.1..J.c)..6.X/a<.

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (387), with no line terminators
Category:	downloaded
Size (bytes):	387
Entropy (8bit):	5.0802884301148685
Encrypted:	false
SSDEEP:	12:c7IYNgvlLL9EIHCdEIHYEEIHLcJk7JcBAX2x8p:ctyh/E46IJkYE2ep
MD5:	1D54EF912663F344CFA7B55B016DD0C7
SHA1:	56324935CFF42275A7F485205AAE477546E2B38B
SHA-256:	77B19B52E3DA15B983971599A97A0030D4984B5C3148AE70E4770112A337CA65
SHA-512:	BEE3005D4B0C7587D1B6C95CC4C41B7F4DCC7F36A325C7DFEF57E41CE4C8FC3700DAE34C4DE0F2B165DDE17201C7FB5799754CADC74D713A03F60552A779AB67
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/modal-component/v1/modal-component/clientlibs/site.min.ACSHASH1d54ef912663f344cfa7b55b016dd0c7.js
Preview:	'use strict';$(function(){$(".modal-component .modal").each(function(a,b){a=$(b).find(":header");b=$(b).find(".link-group \x3e a");0<b.length&&0<a.length&&(b.attr("data-bi-EhN",a.text()),b.attr("data-bi-hN",a.text()));b.attr("data-bi-compNm","Modal")})});$(document).ready(function(){$(".modal-trigger").on("keypress",function(a){a=a.charCode\|\|a.keyCode;32!==a&&13!==a\|\|this.click()})});

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	downloaded
Size (bytes):	5182
Entropy (8bit):	5.210486161960433
Encrypted:	false
SSDEEP:	96:HvC4aTyhGT/c/v/JmlQLkKVRmKgMlc8Xl3VOObvpbzySkV+h6Mbb2O2C5k:HvC4QKGTUXBmlQLxXmKgMlRXnNbvpbz6
MD5:	10E268E8C625D4734B38095C8FD946B3
SHA1:	CCF96BE11F59C50DAFF525EDFEE910741342021B
SHA-256:	0EB913360FC0B95B7FAE37EE72FACCD8FB32F64EA65D2B2504132AD792BEBDC5
SHA-512:	C8AC446E8A87FDD663B99869D3926265AEDACE0E981BCAFAC8EE1AFBF8CC46D73FC20310C52579C4D944F8AD67879CEE4A238A5288E3D2831E3903CFB352DFC9
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/chat/v1/chat/clientlibs/site-performance-enhancement.min.ACSHASH10e268e8c625d4734b38095c8fd946b3.js
Preview:	'use strict';if(document.querySelector("#LivePerson"))$(window).on("load",function(){function c(){b\|\|(b=document.getElementById("lpSS_89316509127"));g\|\|(g=b.getAttribute("data-domainUrl"));d\|\|(d=document.getElementById("lp-iframe-container"))}function y(){$("body").attr("data-islpinitialized","false");z().then(function(){var a=window.WcpConsent;a&&(a=a.siteConsent.isConsentRequired,$("body").attr("data-isConsentRequired",a))})}function z(){return new Promise(function(a,e){var k=0,t=setInterval(function(){100>.k?"undefined"!==typeof WcpConsent&&WcpConsent&&"undefined"!==typeof WcpConsent.siteConsent&&WcpConsent.siteConsent?(clearInterval(t),a()):k++:(clearInterval(t),e())},50)})}function A(a){l()}function f(a){b.contentWindow.postMessage(a,g)}function u(){c();m\|\|(m="true"===b.getAttribute("data-isOfficeCommercial").toLowerCase()?"Office365":"Store",b.getAttribute("data-topicName")&&""!==b.getAttribute("data-topicName")&&(m=b.getAttribute("data-topicName")));f({action:"Topic",Topic:m})}f

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 297 x 166, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6270
Entropy (8bit):	7.945330124411617
Encrypted:	false
SSDEEP:	192:zS7+uH6tmhCSqN0K4Wykh3YMBYpAjav+tlXQ:m7vHqS9WyiooqSa2m
MD5:	5C04A186E00E47C2F90ED18E03AB4093
SHA1:	AC859795B92E3FA0FA88868AF532A3ED6F30F12A
SHA-256:	1A16DBCD6926721D9C3AEB85429586B307F11D2093CF9AEEFDAA37898CB74D46
SHA-512:	909830B01A21E61D98ADF1C61DFC44BD414CF03C51250A9DD7B5C26FB12D6334D984A21F25B5ED089FFDED4CAAA764579EEA317470C8616B7928E989B1A1778A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...........y;....pHYs.................sRGB.........gAMA......a.....IDATx...._S...SE4....&..DE0(.e.&jb...h....C..b,.i.na.2pI.P"H.!. ZB....w.~..g_._..$'.....>...k..p.....z............:.x...l...:.g.u.......Fz..I..Sh.......T..L)}.c..e.T1.........OL..T,\N\..K4.57.......{./.yR.H.JlQ......@..b...TAT.....)6.0-."... .&..:K.d]1L...R..lJ.......:.....9.\|?}..........g..K..._.R....bk.i..E..K.%`...O....i..E.U....J.L.v.\|..a........bV.jY.>3...M.$R......T.J.....(:......z..L..E5".w.wl.w.g.A1..E.\|.......[a...g..T.....J...U.z..\|.l)..8..U..kp.cR........T...1..l.n\|.i....5...k.j...q.F.}.E/#.j...D....T....3'..^.^:.4.Z....K.`..c@9.Y.=S.W..t..=&.Z.G.R-....%f..xG...".../l.....[.WTw/er#..I.....L.>..R\.........!..U. .5...C.ol.0%....=.....L..B..L..9.&..c.O%T\|..h........egj?A......&...-*.X......;p...nf....T.....,bea.bj#.%....1..0L(Q.... ..sL..P...E.cX%.e...v.SQ".njw...:.>...\.%...b[T..cn'.#Z..i...C..%CX."....ej<.Q.LB......u.(.....E.?.'sR...DN

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x840, components 3
Category:	downloaded
Size (bytes):	278435
Entropy (8bit):	7.971643595358909
Encrypted:	false
SSDEEP:	6144:xHu57fDU6/GU1lB84DzUUzeJuTld/+/kPv8Zcq6XDUjDCuAR9xllMD:xSDIOJe/yomldpsZgW0llC
MD5:	A8D825C54E1C1CBAA868BE59B4FD152F
SHA1:	410B1D8A1D49D922C28AE77D315955FA75BF2F73
SHA-256:	92DBFA5CD7CAD52B43502206C9A1F7270FCFB204B6F30FD186F990045778DBEA
SHA-512:	101D3EEE3737AB30BED6A9640CF08D96EA0935D0474FF9BB1A75760B35A74A2DC035A49B926BAFD3C306C5F3A5A9B0A736EE5B71D9578996B938D75050978039
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/f3fc3adb-558b-414c-92b5-f92d1c42a568.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576)
Category:	downloaded
Size (bytes):	59868
Entropy (8bit):	5.549823852454853
Encrypted:	false
SSDEEP:	768:SlQWqrpRvrzvd49MgfvayRB5lQm6jIlY/rv0/Qql+eGH3Sc1QR40V2JoHivz1U1i:3rpRDzV49wyRBsmBlMXSY70pnduA8
MD5:	30368A72D017E4133BFD3B5D073D06FF
SHA1:	7BD9259C475D46707628108E5A1C33DDAEE43BF3
SHA-256:	ED425C2855B7269156A549BFA9C2594882C8813B1FB3CB52D067D5A9B5471E96
SHA-512:	0A3E298D69906024DC0FB5854F3E57816A81506E513A1823127F4AC7A943A0D942AD8F3D41EB5EC0DB4D2AD8ABE1F39A0B6CDB024C4F547733B9922F676A9BB3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/visitor.ACSHASH30368a72d017e4133bfd3b5d073d06ff.min.js
Preview:	/.. Adobe Visitor API for JavaScript version: 4.4.0. Copyright 2019 Adobe, Inc. All Rights Reserved. More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/./.'use strict';var e=function(){function N(d){return(N="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(f){return typeof f}:function(f){return f&&"function"==typeof Symbol&&f.constructor===Symbol&&f!==Symbol.prototype?"symbol":typeof f})(d)}function O(d,f,g){return f in d?Object.defineProperty(d,f,{value:g,enumerable:!0,configurable:!0,writable:!0}):d[f]=g,d}function P(d,f,g){d=null==d?void 0:d[f];return void 0===d?g:d}function R(d,f){if(d===f)return 0;d=d.toString().split(".");.f=f.toString().split(".");a:{var g=d.concat(f);for(var c=/^\d+$/,k=0,m=g.length;k<m;k++)if(!c.test(g[k])){g=!1;break a}g=!0}if(g){for(;d.length<f.length;)d.push("0");for(;f.length<d.length;)f.push("0");a:{for(g=0;g<d.length;g++){c=parseInt(d[g],10);k=parseInt(f[g],10);if(c>k){d=1;break a}if(k>c){d=-1;break a}}d=0

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32019), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1140508
Entropy (8bit):	5.695121574391395
Encrypted:	false
SSDEEP:	12288:cJsxRIaFlA05vbVfIVhixlLgabqLj1DXyxoBUTDeD5jU29o7ogyfBDo/jVqPR9uv:fx1l75SW9C3zO/Ht7HmQBxD
MD5:	32E0F638811A157F86AFCC7383631136
SHA1:	850B615ED5656DDDC286B93164B6CC837179FE57
SHA-256:	C96903A387F97B19B3400BF476E1FA6CB93C9E377AD78DE4C25B98362A22CD98
SHA-512:	682F9208C3E28A066AEC7341F6540EC593B3ADFE402CB1FDD66A28EC3395FE45BE10B35E229FA528D18A3B735C5AC30FD541C2CC59851C601BC52AA1B14E31D9
Malicious:	false
Reputation:	low
URL:	https://amp.azure.net/libs/amp/2.3.9/azuremediaplayer.min.js
Preview:	/* Azure Media Player v2.3.9 \| (c) 2016 Microsoft Corporation */..function ObjectIron(a){var b;for(b=[],i=0,len=a.length;i<len;i+=1)b.push(a[i].isRoot?"root":a[i].name);var c=function(a,b){var c;if(null!==a&&null!==b)for(c in a)a.hasOwnProperty(c)&&(b.hasOwnProperty(c)\|\|(b[c]=a[c]))},d=function(a,b,d){var e,f,g,h,i;if(null!==a&&0!==a.length)for(e=0,f=a.length;f>e;e+=1)g=a[e],b.hasOwnProperty(g.name)&&(d.hasOwnProperty(g.name)?g.merge&&(h=b[g.name],i=d[g.name],"object"==typeof h&&"object"==typeof i?c(h,i):d[g.name]=null!=g.mergeFunction?g.mergeFunction(h,i):h+i):d[g.name]=b[g.name])},e=function(a,b){var c,f,g,h,i,j,k,l=a;if(null!==l.children&&0!==l.children.length)for(c=0,f=l.children.length;f>c;c+=1)if(j=l.children[c],b.hasOwnProperty(j.name))if(j.isArray)for(i=b[j.name+"_asArray"],g=0,h=i.length;h>g;g+=1)k=i[g],d(l.properties,b,k),e(j,k);else k=b[j.name],d(l.properties,b,k),e(j,k)},f=function(c){var d,g,h,i,j,k,l;if(null===c)return c;if("object"!=typeof c)return c;for(d=0,g=b.length;g

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:Hfn:/n
MD5:	BEB5075867AC37A3C8903AB23A5ABA22
SHA1:	86A41106441F795558A31574CBD24D5403E2F054
SHA-256:	BD38B37956C818D4084814F47B69B7798F07AF7889D3D13DEBBD2D76ECB86095
SHA-512:	976D88CFEF9792BC882CA8BB7F7F784BB97EA2046999D67C43DD4C2391943238BF9EE3DECD50DC2495829E65E9281D999E1272B188B489B1AFF59AECEE3E139A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkV74dSiH35ARIFDel_Cl4=?alt=proto
Preview:	CgkKBw3pfwpeGgA=

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4921
Entropy (8bit):	5.222250141174727
Encrypted:	false
SSDEEP:	96:Axtrozr9Guzre0kre0/Qre03yre0BYrxp8LUaWyUavdUa5aUaFCRpaO49Pag+MPx:Aetc050l0L0CrxKL4yZdPaPCRV49N+M5
MD5:	88F3A78DC9998D2E19C6B045DDBD4507
SHA1:	F8DCE60A4BB6E8693FDA595CBA1E29208E853531
SHA-256:	74E48756DB80C95BE13382BEA1E5D62C7BD9B808C135FD4E02E063485F674572
SHA-512:	39D415EB8ADEC62896941219D3803AEE5995D176EECD586C57DEC3ECF40EE30F49071373634B6CC13790F2104FB712937AC9573C24E349C4021975E69A263D7F
Malicious:	false
Reputation:	low
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-enus?ver=e63f","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-tscriptenus?ver=63d3","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeEndDate":"9999-12-31T23:59:59","activeStartDate":"2020-08-31T22:25:51","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RE4EIZB","url":"http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RE4EIZB","url":"http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3","link":{

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1995)
Category:	downloaded
Size (bytes):	130638
Entropy (8bit):	5.541755124058713
Encrypted:	false
SSDEEP:	1536:0gH8D157Z10EYu28SCQIhawlGL0pGjPTAn8VPORqIIe81DZ3syJoe5Igd:3cDDv0v2QkawwgA7TAkPORdIeCDZ3eud
MD5:	8B22B46B9C6D84D6C25E4A686D310221
SHA1:	ABDA7A45D50A74F6C346994D276FB3EE8D7E361B
SHA-256:	0F44CB801673D47C08B4257487116D288C0341FFDB31CA4590185144DBC781BA
SHA-512:	DA9211CDFC3971FDCEA936D8D96E43EA1CD7AD013DF359640E4E39013980E51A278DD05F16734572D6BE7470E6BC1FF3AF2F969829D34738DDFB24B4EB81657C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=923371515
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ .]..,"blob":{"1":"1"}.........};.....var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.length;++c){var d=b[c];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");.},ia=fa(this),ja=function(a,b){if(b)a:{for(var c=ia,d=a.split("."),e=0;e<d.length-1;e++){var f=d[e];if(!(f in c))break a;c=c[f]}var k=d[d.length-1],l=c[k],n=b(l);n!=l&&n!=null&&ea(c,k,{configurable:!0,writable:!0,value:n})}};.ja("Symbol",function(a){i

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1158)
Category:	downloaded
Size (bytes):	7935
Entropy (8bit):	5.175600779310663
Encrypted:	false
SSDEEP:	96:jJ/nMdaBU+hx1fQeWYZRRTaQV72viMhKz7pCCtS5NI2Tmtnm8Gu8Qf8otFtMmOeC:pBfQATbJlnheBIeffKIjd1hfNR2M
MD5:	864A24D7C4A1097F30B215E79CB41967
SHA1:	CE21463CB4C1509C45EDA1B12FF71EF4AB578DD5
SHA-256:	7756407C953FC5FB0B4B2E965A32B5D129D73266F26A1A37D107C8501EC85767
SHA-512:	A83980A658DD2CF73DD711FAA09DED768E6C85E64E5A868B396B69BB7C6964643128D517F01A7873B247211631C6C2DA9E16559BEE3D44795997AA24FBB8A5DE
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/videoplayer-nocookie/embed/RE4EIXC?pid=ocpVideo1&jsapi=true&maskLevel=20&market=en-us
Preview:	<!DOCTYPE html>. CREATED BY VID TEAM -->.<html lang="en-us". dir="ltr">.<head. data-info="{"v":"1.0.8745.29656","a":"c8fc48f1-a237-44d8-b306-f4d035e201c7","cn":"OneDeployContainer","az":"{did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odeastasia, dt: 2018-05-03T20:14:23.4188992Z, bt: 2023-12-12T00:28:32.0000000Z}","ddpi":"1","dpio":"","dpi":"1","dg":"uplevel.web.pc.webkit.chrome","th":"default","m":"en-us","l":"en-us","mu":"en-us","rp":"/en-us/videoplayer/embed/RW16rdm","f":null,"bh":{}}">. <meta charset="UTF-8" />.. <meta http-equiv="x-ua-compatible". content="ie=edge" />. <meta name="viewport". content="width=device-wid

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	4.7576002313728605
Encrypted:	false
SSDEEP:	3:iAE3BMiX4RXBMgX/UfVgVISfKxW4qUu5UtgseBWBZ8VNZOjmeJRNnXE1V+o+:iAE36iIsgP0KOFMLs9cVNKmV+o+
MD5:	8396009A793FDA25F0AD1C495EC773F4
SHA1:	C0143C8B9F459323B1AE10D739835E5C8546DC0D
SHA-256:	D660C1B711D4F046EC54D6681BF6B8664875AFA538957C7A9A874A9D09001D4F
SHA-512:	C11201AF295FB01B5B585CB3BE448E0573ED5B96C4FB24B2E63809CDE741D2B1903F00FCA14F760262E7045C6FAC47545C4B3D4E45F94A4C28C51B59AD6ECC38
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/areaheading/v1/areaheading/clientlibs/site.min.ACSHASH8396009a793fda25f0ad1c495ec773f4.css
Preview:	.areaheading .sr-text{border:0;clip:rect(1px,1px,1px,1px);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal !important}

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	466897
Entropy (8bit):	7.966969681374664
Encrypted:	false
SSDEEP:	12288:1Kw7fKlFQRdtU7Q4Zo45/WfjKWHI1db/D/t:UtgUU4Z75/Wfjh6d7Tt
MD5:	FD2A3831EB7EF449234C25E846E03E09
SHA1:	0C232F76D315312011087E0E268EF14BC9B92165
SHA-256:	916C01306618B660C5B9FB191960DCEA9FEF5193E86E0EF868F0D5CBA1BC1E30
SHA-512:	1BFFA91E846D29363DF15BC2D6F5B2776D94233C50DE05AEE41CBF55F456E9F9C028C00242D04B3CC5EAD4C514C0050183940079B0D64EFD89AE2524F7CED33F
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dQ5q?ver=8edc
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3" xmpMM:DocumentID="xmp.did:1D29C065686011EEB25FFF87BA6598B7" xmpMM:InstanceID="xmp.iid:1D29C064686011EEB25FFF87BA6598B7" xmp:CreatorTool="Adobe Photoshop 25.1 (20231006.m.2353 10d5734) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c780726c-110d-4368-9520-476e0e8bd161" stRef:documentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (524)
Category:	downloaded
Size (bytes):	2343
Entropy (8bit):	5.278059604921528
Encrypted:	false
SSDEEP:	48:2pCPKZdbWp170LQPJS28EVTCRU/Qxk49VMglbQ0i9rN:ZSeLgYYEwp7nitN
MD5:	CA0820E0B24021397AC8910BBD5A1F49
SHA1:	B08C0445D5BF68E10F013F4413CE6BDF5776616E
SHA-256:	11785773FA80E71FF0D843D5FA7B4474063C260D220890D7716A51F07F989D2A
SHA-512:	D7105E66514EDAF8E9C3F4FD7A085C88A0319C3D5B516641165A8D558DD6EE170D99D5326C9C2089D70ED38F007482FB64D58AA03237AF696EA2635D89BC28E4
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/footnotes/v1/footnotes/clientlibs/site.min.ACSHASHca0820e0b24021397ac8910bbd5a1f49.js
Preview:	'use strict';(()=>{function b(d){var a=f[d];if(void 0!==a)return a.exports;a=f[d]={exports:{}};return h[d](a,a.exports,b),a.exports}var h={9382:()=>{$(function(){$(".footnotes-component .py-2 a").each(function(d,a){a.dataset.biCn=a.innerText;a.dataset.biEcn=a.innerText;a.dataset.biCompnm="Footnote";a.dataset.biBhvr="0";a.dataset.biCt="Link";a.dataset.biPa="Body"})})},8724:()=>{function d(e,c){var g=document.querySelector(".pagenav .bg-body.stuck-depth");g&&(e.preventDefault(),(e=c.offset())&&window.scrollTo({top:e.top-.2*g.offsetHeight-10,left:0,behavior:"smooth"}))}$(".footnotes-component a").on("click",function(e){var c=this.getAttribute("href");c&&"#"===c.charAt(0)?d(e,$(c)):(c=this.getAttribute("id"),c=$('[href\x3d"#'.concat(c,'"]')),0!==c.length&&d(e,c))});var a=0;$("a.ms-rte-link").on("click",function(e){var c=this.getAttribute("href");c&&"#"===c.charAt(0)&&(d(e,$(c)),e=c.substring(1),e=document.getElementById(e))&&((c=this.getAttribute("id"))?e.setAttribute("href","#"+c):(c="__f

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23186), with CRLF line terminators
Category:	downloaded
Size (bytes):	23650
Entropy (8bit):	5.7660142340856355
Encrypted:	false
SSDEEP:	384:HWVFbHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpn:2VpH9yF1IBBdq5yF/2dE
MD5:	FA1374DD18FE47E010FE1E9585F4D30D
SHA1:	C70279EA45CA7B2E24DAA7ED15E18F3B2CF135A3
SHA-256:	071F6AE0360EB54C0B758BFD2B0A63EC48BB623FF15D7803D18855E7038159F8
SHA-512:	E7177F1E8AB77A7637F14435821165F43E21B0F5EE37FBDD4172C91F29F7E350E4A779AD56CE76BC0FECEB4F50140ED44B5354AAD35A346A979F05A35CE504B1
Malicious:	false
Reputation:	low
URL:	https://fpt.microsoft.com/tags?session_id=0b93d023-ab43-49bd-b75d-f0cb1e2b3303
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.microsoft.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='0b93d023-ab43-49bd-b75d-f0cb1e2b3303',ticks='8DC9CB73131E66A',rid='375e6f2e-0d8f-6b9c-2ceb-7c8e098f6dfe',authKey='H3ihr9e92IdW6yd1ZgQ9S6iHaRiejIdk0aIJJ5j7uH7CWNo7dqr52PwJZry1cbhygyB%252brABH3rQfTxQrePXgCKHohFx%252fzOMZTURUYLhno0Fg8hhVZecycqvnr%252fKBz6US%252bRSLKmHEUbnSk3iKaBb20uBbtPV6f1HvPvXCz3JIVPT%252bVo9wHzhX8ltwefg2HFVXpaElnoFHLpvrpwKzmOpWeJ1%252fQIOxPPBjV6xOviemF1th1HBtxVVIlmOEqOOpT3fhHBl%252fGpxv%252bHURt6LcIEg%252bU0hyavj8xzCa43hnCy%252b39xMrVYIABLBybkwJIIilUFR4',cid='02C58649-E822-405B-B6C3-17A7509D2FCC',assessment='',waitresponse=false,bbwait=false,commonquery='',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1720158979806,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length&&(i=t.l

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22904, version 0.0
Category:	downloaded
Size (bytes):	22904
Entropy (8bit):	7.9904849358693575
Encrypted:	true
SSDEEP:	384:evl4zAZ+ssqWqPRSKLA4kM0aQfBn9M2+iW50SIPzp6+NPf72UReN2CtbvejX7Ij:YqW+7qHP8n4L0aYn9jFDSmzp6w72Uyvv
MD5:	C654A623AD90BB3DCD769DBBAC34D863
SHA1:	8719DE38F17D8E4D73E2A5E4E867D63DD3965BAA
SHA-256:	DEEC787CCA1B9436E080478742A0299E0DB1A9712543A72D2CDC8373FC45A432
SHA-512:	B7440CEC44B71BCDBEFCD878A860EE3CC0163DC0905DC688EBCBCD7C6F5CFDFC187EA0C2B6247A362AD462450C34020933DF7825CF6CEAEB3138D65EB944ABAD
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/mwf/mwfmdl2-v3.54.woff2
Preview:	wOF2......Yx.......8..Y..........................`..`..8...Y........a.6.$..X..n.. ..[. ..S...u..l.....!......I=...ubpS5 ...o.........c.7<.y...Q..i.n..T`R.......\|h'..f.=4..G..xI&.V1...6...jf....%.y.!.).../Cj....].W%5VIj...(.........'Q.}.+.Jg.L0..$q.......#..d&...tV.".d..,.(!...p.).. ..d[........hdg.....!=..H..y.\..p.Q.O.........`e#.X..`#F..T....p.@.)UO.;85..y..@..)...!..........GNT.W...VV..j...-=+G%.yuK...u.........%c.Z......8%. ...V..P.^t....g.x.Tkw.g.....H..._R._{...u.....\%.L+...S...+).......Y&,......3......... c...v.S.LI6...X..A.....S...f-.f....X.....F.Zfwe<#c#...S......bk.HA...K.{.YG...9..24;._+ad.md..c..%..uo...6.5....../..tv.(.l.6.>.V..Q.[..Mr.O...,.......B.......TI.7..X.V...O_._3~.5..0..".$.(.j.....b.....W.O.F....$.H.I$.L.)..J.i....N..d..c.......".l..!.\r.#.\|.)..B.)..b...$D..J(..2.(...........j...:....h..&.h...Zh..l....i...:.....z.>.....d.!..f..F.e.1..g..&.d.)..f..f.e.....9.g...Xd.%.Xf..VXe.5.X.z6...ld....f....le....vv....d..

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	280
Entropy (8bit):	4.771569345292879
Encrypted:	false
SSDEEP:	6:HLyrDRMBYGXP7QULsgP0KOFMLs9cVNKmV+o+:OrDRu/sU4LUN+Z
MD5:	40203E0BB3E24FD4626D84825F55E9C5
SHA1:	3E0142F78901BBE4AB11204D50FF37AAB3EE6457
SHA-256:	91B08794829C8062E7B13FBFEA9BF1E07C86E8DF911FF418C057A4127265361D
SHA-512:	BF10EB47B28EB2C540E6C21AABACED853FF27006B174E92A518B0E630EC880BD50276C434D183FD61C97C491796AF882635C17E5428A9D06A853C3BE806A5F0C
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/footnotes/v1/footnotes/clientlibs/site.min.ACSHASH40203e0bb3e24fd4626d84825f55e9c5.css
Preview:	.footnotes-component ul ul{list-style-type:disc}..footnotes-component a{cursor:pointer}..footnotes-component .sr-text{border:0;clip:rect(1px,1px,1px,1px);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal !important}

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 36748, version 0.0
Category:	downloaded
Size (bytes):	36748
Entropy (8bit):	7.993571055882259
Encrypted:	true
SSDEEP:	768:J1RjXb4nQ5CZV6qEfz1mfNwUcf0Rn//WAlsuqjCf8qs2opmUrYSRc:RXEnQ5fzAlVe0R//WAx7b//Uxc
MD5:	88749B8058F99835F5A6B87FCC9CEDA1
SHA1:	A491726E067475E187E270D4469A96E016BD30A7
SHA-256:	F447D199F99F6EC55B5308B737A69F384032D3D0C1D05FBC41782AA50ECEB92C
SHA-512:	D595CC3E4220CB879389138D34B2DFBC9DC40EA5E83A81944FA73CBDFBBFC70D53285F8A11CEB921F55C7171EFB4A1242AE1819F0A505C0ECA06772357B2AF65
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/support-icons/fluent/latest_v1_95.woff2
Preview:	wOF2..............M....<.........................`..b........W.6.$..<..4.. ..X. [..QD`...P.<DT.~X..I...."!........_..M\|..\|[.'...FR.EH?b......0...J.....k...K.....[...1ir.x.I)\H...0..8q..... i....u.~..1...F..Cd........px~.=%..D.H.....(..@A......N..p.\.v...m..[.nkW...m...O]....6.7.;.'$....D.4..q.?.E.\%5S.UjB...V)..x...Y.C.........o....j..4@r..P{.H......f.....8 ..Q....(......f..8p....\d.....R.4......m........%r.K.....F3..I...!.k8r.d{4.OD&...0...r..B.2e.4u.....Q._...lR.v...F..p...J%IQ.j.....alI.D..&.?..... .N...Z=...G.%..o.N..I6.."u.j._.!...N..L...).&I...../..N.n......J].%....5.p.H.#+..dw..".h.."..O...i.D.TI..I.&.J...%g..-Y,.-.-',O.....y.gm.l3m+......Q..Q..P..Q....m......0.#0..1.........q.wp.....'..#.(..L...SQ*I...5..4.6.f.M.....ct.....E.......$9.K..sRN.i8...\.+s5..-.+...<.G....3x=o...^.e-YG....&.G......B.R..".W.S..C.X.W.UT..t=.H7..X=W...Z.]......T'LR...05L]...7#.....7........>.>..Q....q.q..Y.peu.s.pmq.u..4.,.\.....g.t..........DB.!.<v..\|R..E.G.E.]5.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3740
Entropy (8bit):	4.667023982777541
Encrypted:	false
SSDEEP:	96:3cVWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoW:3cVWNXK3XuXW5K
MD5:	67E89E5C622EB84D8D53163D8B12F3CF
SHA1:	839631E9A8BA4BC9234A1C475406BA5FBD2A3B88
SHA-256:	320D8D9EC89B0FCE1E3E367F4046909ADD2DE413238037E715E92B13B5838271
SHA-512:	0CD02C7568B36DF570A6CC9EF8FEE6CF5265960123F04558E07912E173B4641B0DCEDC5A70ECBCD64B99757442DA1C34565369326572F99D1A3F74F793F56D40
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/4000034.js
Preview:	(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?insights=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if (r-- < 1) return;.. var uo = c.getAttribute('data-ueto');.. if (!uo) return;.. var u = w[uo];.. w.clarityuetq = w.mtagq \|\| u;.. if (!co(u)) { setTimeout(function () { cl(); }, 250); return; }.. var m = u.beaconParams.mid;.. w.clarity('set', '_uetmid', m);.. w.clarity('metadata'

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4900
Entropy (8bit):	5.20253442687373
Encrypted:	false
SSDEEP:	96:AxtrhzraGBre3bre3/vre33Nre3B7rxLCULeAyexdeHaeXCRLc49Ni+MNbpeGm8D:ATKp3m3q383prxrLRycd8aOCR449M+MJ
MD5:	EB41711BCCAF903F893A7DCE8F842F82
SHA1:	4E082D3E3C9591F45707903F7E5A62D11CA86392
SHA-256:	F640113A776235BFFF3270357F88745A5C660D65483702476923AA721FE3DA4F
SHA-512:	25F396295F61F105524175B66F7F62BB63994F83E30F5071EE2F0899195561D56BDAE32D8AB9FAEF0FB4E570A322DEA9B4EA437737B422144AFAF3591843CD7F
Malicious:	false
Reputation:	low
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5E-enus?ver=77bf","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5E-tscriptenus?ver=9b58","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeStartDate":"2023-10-24T17:29:47","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RW1dIj6","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIj6?ver=98df","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RW1dIj6","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIj6?ver=98df","link":{"href":"/vhs/api/videos//thumbnails/

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 40x40, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	360
Entropy (8bit):	7.334002053768874
Encrypted:	false
SSDEEP:	6:zZCdClQ5lN62mazX6ducrRt1p+vq5cPIvGEpGc4xtk6Xu4lOZFK45U:455XtBL41bQvq5cPejobI6XOm45U
MD5:	E5C8F8637544A519558371B774E355DF
SHA1:	71BFB49D52B3D1B99DF598BB366DB193D8762194
SHA-256:	26C9CD908137A3768118AE5F587B66643ED94206D8FB2C3813D06C3376BA0431
SHA-512:	FDC7E17B35F0D013FAFB8557DD8E57D87F3C46552DBECFE38B1E187C5FABACBAAF334EA22F272E4C93C4296C224B53E6F5FE55B9AA40E30B97EA2BA0BB2F7961
Malicious:	false
Reputation:	low
Preview:	RIFF`...WEBPVP8 T........(.(.>E..D"...:..(.D...g..).... :5....?.L...])..6YW...{}9......2l\|...c/.0...!..y....S.h....?.;..^....._.....l..].8......O)......./Z..U........j.......1.Hz.\X...._..._...d`.^.....~.5...%....7..{..^.b......(..........9.w."`}H..u[M.M$E.z.?U`.n.M..5.....q...~...?@..8k.._...%..>.X.y-,[......~XV.~.$fG.r.k./k.G.bCu..v U.(....p....

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (26071), with no line terminators
Category:	downloaded
Size (bytes):	26086
Entropy (8bit):	5.432818104736514
Encrypted:	false
SSDEEP:	384:us282x+ZOj5jMGgKAztoDx3SF/uuRcFoyJD53QDCMkDoEo91YGtua6ca+D+oOLcG:arB/0FxO4Qcr9SGYafV5G
MD5:	A923FB946929633E387E4D2017006546
SHA1:	84D3DCF57A9EF34EA731A1B28F9ECE4B0B267A08
SHA-256:	67A664918FD7F224CCE362DB7078440CD693E1EF6B30EFF33C06F112C17102FA
SHA-512:	A974D3511DD1ED3197BC6A90F9561CDB83120E99D8276C38E32C79005E59C5C7048C8652E3DF5A1DB06191B3B6793A4C75A5C2060CC12ACB36D1E6F31C2E6BFB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/css.css?v=Z6ZkkY_X8iTM42LbcHhEDNaT4e9rMO_zPAbxEsFxAvo
Preview:	.@media screen{-ms-viewport{width:device-width}}@media screen and (-ms-high-contrast: active){textarea[placeholder],input[type=search][placeholder],input[type=text][placeholder]{border-color:WindowText}}header,footer,hgroup,nav,section{display:block}.font-bold{font-weight:600}.ocHidden{display:none !important}.clear-fix:after{content:".";clear:both;display:block;height:0;visibility:hidden}input{-webkit-appearance:none;-webkit-border-radius:0}#obf-EmailCheckBox,#obf-BasicFormScreenshotCheckbox{-webkit-appearance:revert}.content-wrapper{margin:0 auto;width:100%}.main-content,.ocFB,#ocAsstHelp{font-size:62.5%}.main-content #ocAsstHelp{font-size:100%}#product,#home,#category,#endnode{min-width:1220px;margin-top:10px}#endnode{margin-top:0}#universal-header-search-auto-suggest-transparent,.f-auto-suggest-no-results.f-auto-suggest-no-results{display:none}.grd{display:block;position:relative;width:90%;margin:0 auto;max-width:1440px;padding:0 1em;padding:0 1vw}.grd *{box-sizing:border-box}.gr

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.645093417199183
Encrypted:	false
SSDEEP:	12:M9BAG1/qAT9BAs1/qKdDYT9BAR6T9BAOk/CMRZcJfRDZ:M9p/qS91/qfT9J9yRC5N
MD5:	F9F2395C582FA601707B7A5DFAE9F05F
SHA1:	27B15AECD0BFDD3B25556AC00755856D4D331E0D
SHA-256:	D7D6D06624D4BDF6935B848DF342CE322D02B58D12BF12149DF92D557E5E9BC4
SHA-512:	F3378927D96B0B172981A821A8C2A16D0F397ED92E835B7C46316FC48350402D972A5411F0FA4C260F205AA1F7917F83F8247BF8A62C7F22E0076B168275B1E9
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-uhf.min.ACSHASHf9f2395c582fa601707b7a5dfae9f05f.css
Preview:	.c-uhfh .c-action-trigger.glyph-shopping-cart span:not(.shopping-cart-amount),.c-uhfh .c-action-trigger.glyph-shopping-bag span:not(.shopping-cart-amount){line-height:48px !important}..c-uhfh .c-action-trigger.glyph-shopping-cart:after,.c-uhfh .c-action-trigger.glyph-shopping-bag:after{line-height:43px}..c-uhfh.c-sgl-stck .c-search button{line-height:18px}..msame_Header_name{line-height:44px !important}

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	downloaded
Size (bytes):	181466
Entropy (8bit):	5.554874109955879
Encrypted:	false
SSDEEP:	3072:Sfyz+8hxjR20cgOl4L9nH2BrWNeE5Q6nRyWK/wCG4X5GFnX45Ti6ZssSBodxD4t:Sfy6gFXxH2BrWwejZcwC15GuTDZtUgu
MD5:	B4F0B5100B03A879DD5D2E97636EFC37
SHA1:	72C5001013A7514373D5CC4918B0A0D95C65617A
SHA-256:	5BACAEE30D72B76D83BC5FDD190BF027CDD4C270CF7D081E487ABFB8EA63EBFF
SHA-512:	99BF0AFAF3BB642032669DF2E934BE7FACE9A95DD79E9BF59E6D565E6355754796B1F389B32DD12AFEEC4A95B5E627ED58C8C355E9828452448F6B7EA9F2EDB1
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/custom-oneds.min.ACSHASHb4f0b5100b03a879dd5d2e97636efc37.js
Preview:	/. Microsoft Dynamic Proto Utility, 1.1.9. Copyright (c) Microsoft and contributors. All rights reserved../.'use strict';!function(Kb){function la(xa){var ca;return(n[xa]\|\|(ca=n[xa]={i:xa,l:!1,exports:{}},Kb[xa].call(ca.exports,ca,ca.exports,la),ca.l=!0,ca)).exports}var n={};la.m=Kb;la.c=n;la.d=function(xa,ca,P){la.o(xa,ca)\|\|Object.defineProperty(xa,ca,{enumerable:!0,get:P})};la.r=function(xa){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(xa,Symbol.toStringTag,{value:"Module"});Object.defineProperty(xa,"__esModule",{value:!0})};la.t=function(xa,ca){if((1&ca&&(xa=la(xa)),8&ca)\|\|4&.ca&&"object"==typeof xa&&xa&&xa.__esModule)return xa;var P=Object.create(null);if(la.r(P),Object.defineProperty(P,"default",{enumerable:!0,value:xa}),2&ca&&"string"!=typeof xa)for(var $a in xa)la.d(P,$a,function(Ua){return xa[Ua]}.bind(null,$a));return P};la.n=function(xa){var ca=xa&&xa.__esModule?function(){return xa.default}:function(){return xa};return la.d(ca,"a",ca),ca};la.o=func

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44540), with no line terminators
Category:	downloaded
Size (bytes):	44540
Entropy (8bit):	5.381669450246723
Encrypted:	false
SSDEEP:	768:sSAB8MuwhTx2nqJyOBz81NsRwn/P91Y8xhE3aOatwfwRbB9ZvKTJWmP6bhoh:+BfrJI1NvtmkUBb
MD5:	C069DD2394F1967F561F2A06D8A16B40
SHA1:	DEAE9009AA67D5887D628D2142AF29DA4AC52B9F
SHA-256:	068CEE10C51550067D65416129F80D9EE4B0CB5B8EA3D4D0AF407B944BE264AC
SHA-512:	01128181E0FFB37748BBD11EAA3DB6C5988E6CD2BD2180EE2FFEA263463BA452AFA2CCEB962EAA326F99EA9BAA1849236C86EE4D756AC7C6AF0FDAA81FD55592
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.28.1-release_1349276690/storage.secure.min.js?loc=https%3A%2F%2Fpublisher.liveperson.net&site=60270350&force=1&env=prod&isCrossDomain=true&accdn=accdn.lpsnmedia.net
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.firstParty=!0;window.lpTag=window.lpTag\|\|{};window.lpTag.lzString=window.lpTag.lzString\|\|function(){var y=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",o={};function a(e,t){if(!o[e]){o[e]={};for(var n=0;n<e.length;n++)o[e][e.charAt(n)]=n}return o[e][t]}var i={compressToBase64:function(e){if(null==e)return"";var t=i._compress(e,6,function(e){return n.charAt(e)});switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:i._decompress(t.length,32,function(e){return a(n,t.charAt(e))})},compressToUTF16:function(e){return null==e?"":i._compress(e,15,function(e){return y(e+32)})+" "},decompressFromUTF16:function(t){return null==t?"":""==t?null:i._decompress(t.length,16384,function(e){return t.charCodeAt(e)-32})},compressToUint8Array:fu

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 40x40, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	502
Entropy (8bit):	7.465743629081189
Encrypted:	false
SSDEEP:	12:7wIkGa85QxcGqFzcZVr4PE/j+MFPh86DC9ft:7wIZNBQAPkBFxDC9ft
MD5:	419F88E695A62CEC374CBBE759F11754
SHA1:	69509DDECB1B082020907299471177772DB59070
SHA-256:	2C13442D9CAA9698D2D10443EB6F0CFC395DD220E60763AE0C3A4A6044DB7603
SHA-512:	381537E55704202899317E4780520F66EC65C0F6CDF59633E61B7E880FB056379DFD539A3CA2C890BED3087DAE0F56550071C7738B6F372BD0514531F31F2B49
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Blog-1?scl=1
Preview:	RIFF....WEBPVP8 .........(.(.>)..B!..V.T..BZ@..G...lJ........`X........?.?...............W..../IHB.....nXv.N[~+..l.h2{..6.o.....b...1.6.s...<.<...[Q..w~....S.7..........s`\|..Q.,..B.....V...i?.cH.r>.%..j#9..q.eL............s....q...d....... ....X{.,.".x...e........._.....g..#..9./.:J.......!w......,$.,.....yG.s5....d.....L..r.9......0.>....*..G.q......#...F.5........}.'R..W..'.W.........1....... .........:......y.c1l!.. .X..:.7/7..a...M,....N.x.....`.j.85P.}{Q...q.E..T....0...

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=ZoeLCQAAANwNIAN6
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (10387), with no line terminators
Category:	downloaded
Size (bytes):	10930
Entropy (8bit):	4.777922581824855
Encrypted:	false
SSDEEP:	96:4CGjCf1IQNnJ0DuXGJzhIGcjfkfN9xekArvsAJKom+tmTjotKfCYzwsm1L+mFb:4CGjCf3Nn2DuWPlPIvPm+trQfCYiL+wb
MD5:	509E44BDCA06692FD924908DE96BE75B
SHA1:	2B68EABA6109F02706D13775CBC357CA40785ABE
SHA-256:	37D8CC7CC2283BFB3B3804CDD23E4B62A98EF4C0AA1C38DFA5A515D91B9A132F
SHA-512:	44E648E2433C01B879CF952AD1ACBAEE97EF82C18F846429019EF343E5272B568BE3BD9CC530E244E1E282D7CF42A1D215E79756968A4D82B845F0E242551ACF
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/glyphs/glyphs.css?v=N9jMfMIoO_s7OATN0j5LYqmO9MCqHDjfpaUV2RuaEy8
Preview:	..icon-fluent{font-family:Support Fluent Icons;font-style:normal;font-weight:normal;line-height:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.supTabControlHeader .supTabControlHeaderActive .icon-fluent{font-weight:900;color:#000}.supTabControlHeader .icon-fluent{color:gray;font-size:.9em;padding-right:5px}html[dir=rtl] .supTabControlHeader .icon-fluent{padding-left:5px}.icon-mdl2{font-family:Support MDL2 Assets;font-style:normal;font-weight:normal;line-height:1px;display:inline-block;vertical-align:baseline;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.supTabControlHeader .supTabControlHeaderActive .icon-mdl2{font-weight:900;color:#000}.supTabControlHeader .icon-mdl2{color:gray;font-size:.9em;padding-right:5px}html[dir=rtl] .supTabControlHeader .icon-mdl2{padding-left:5px}.icon-accept:before{content:"."}.icon-actioncenter:before{content:"."}.icon-actioncenternotification:before{conten

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 630x449, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	12270
Entropy (8bit):	7.983869236566813
Encrypted:	false
SSDEEP:	192:5zETpGWcscBLMx7e6R32yDHnmgyxpbmXEe38Ye0KwMalw/+mtejtl1GfpXO71mDQ:5zETQWclBg9eWHmgyxpbmXAYeEjO+0ev
MD5:	205681076DDE42DE458029AE24F251B9
SHA1:	938C68ADD9690223160F220DAA54A46EDD8B69CA
SHA-256:	4CC12636F7EEB674169CC839E665248D245CE5C038A9A4B706A93AA34045ADFC
SHA-512:	C21805A70659C3AF9FC91C0CE7BB49B056CFDBA73C0624A4FA631BD088A821AB4697D602B304500E544A91C5F2E9227B39279EA5306F5C18098CF129C230D778
Malicious:	false
Reputation:	low
Preview:	RIFF./..WEBPVP8 ./.......v...>Q&.F..!."1y p..en.G..).?....T.\|......?..+..Sma.&%......^.7....._.y....j.......?'.^............A_..........k..........yo............../..b..?.....7.....?...?...?..rt.........o.98v?._..-.7...~P......<2.#..~v...9.z.x.i..?a....6.l<.y..a.....6#..6.m..X/p^..L.a.D... .g.p^..nK.Hy.;.N..........L._u.Gq..&q....i.l@=............>fLQ...+.!.o...7H5.KM}X......."...?...5Ya..\O.!.B.......;....0p:..~`.........e0G.}..g..f\3.........C^..t.4.H~.g......oa..W..I.&...\.t'.0.F(...`.a.......!..y_/.'.".F.E<...a..'Zh.v}f....t)...`...L...8s9[.{d....d.nP....\|@D....x....v64e....?Y.A^.it. ...n..:...Y.u..}.rx.<.V......i.../V8..[.U.j"..E.?O<..>...b..Ft`".Z.c.0].)eP.19....[F.v.Y3.tm.....Z...{..jv...b!^....Gh.G+...m....dd......B.a[.?.V.d..\|J..Z.}wB.p/._. ..0./...N.%+...O"].....GXW..v. E...>H..g.:o.;.....EI.".xy........6"@....?.(...fD....o.&.~...&..\|...O.T........=...Dq.}\..d.h:..;.<`.........s....\|ei}.l...CL..M..5.d.'...nZV.\|-....

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	918
Entropy (8bit):	7.758631574599825
Encrypted:	false
SSDEEP:	24:7u4rYtBvoHsbJIecLaeIacWoCBu9YGcbyc4Ucp3ll:dY3voMlB+aQOCBuTQleP
MD5:	173D80984367F7B3AA3EA90545A5F255
SHA1:	72CA9D80BC3C47377288807AA4A923806772B3EA
SHA-256:	240180CA94EF88847E2D92CD212ADF48976659B10D8A9B4BEB95F088B2139BC0
SHA-512:	6CE5C4F9EC30584868B88F8596676CD7464495D9A364D19E6FE8A976F70959A07BF74182AB1E63A7ACC9B6510CD60CF4C27A04533D0C9DA044CD35D35D9D80FE
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....0....K.K.>Q".E.......8....d.............w........}.g.............._@.-off..a.......e.K...h3..>...\|.ZL.!....S....!..f.{.qOhk.."....L'......q..k..=7.+.r.._`.4.N......?.!.O)...(~.....C.FZs....7.+.v.9..~H..O^.]...`ge...jn.\....L....e...O.t..0.....h.jj.uy..?...&.kQ.....d^.<O...K..=.].T...9.f.$...b..&.j...-.0...V......\|..[.O.....Kv..}...z..b........S....W ..i^..6Q6+.6./].)L%....9..$E..kz.$i.`..P...6..3...vO..b....g...b.4..rm[.R.p..L...v.YB!...}W.7.^z\|7.?...k\.e./PC.Q.F...[;....H..%w..^.,jO.........?.t.t....Sg.'.. :...BO...N.@49.L..2..S.\..S`...z.wLX..{...T.w...V.@y...t..K.).......U_./..............5..0.S.'R'..8...^)x.T..$..jWT..W#...P...j._].....:..A.!.m.#.j....ko...@.D.$..g.{..."j...,#F..y...9w..\|..9]..-....Cv0...fg...;..2A\|"59.......G.X......c.....0.`...r....-..h...1..j..(...e...}g8?.......F...:I.Ne..%.a&...xtW...T{...a.y9.....B.......

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4596
Entropy (8bit):	7.8595994478813
Encrypted:	false
SSDEEP:	96:htkfntjMNQnfrtOeQq5YKb/QLkL6JtGoFVd+KALYWbTQANHN42urpkN:htGtjM4rt2tKM9Fj+KUSh6N
MD5:	C59D7F179B1837D03040C0673C5EC15D
SHA1:	E219F3E3A6A01233B84BB27EF7EBE941A792A3AF
SHA-256:	E83C28F43B70C9D58E8F8758E547B985577F5A38045F1B5A63169913F02A0CC5
SHA-512:	452031A1B1B5E7E72AD8693FE79D75AA24E0310EEDCC09199574A76159E7533627B30F237A3836F038A03B82F96E3174AB64E6A36B4684F400ADC037D3B8B680
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/d8369889-04df-4721-831d-e0490e10aaeb.png
Preview:	.PNG........IHDR.............k.XT....PLTE.........Q..&...d..e.'.....'......p..m..z..w..\|..x..}.....s..n..r..e.....d..d..St.{..}..\|.%...q..V.....'g.g........d..d.&......u..'g....c.%...'g.d..\|."...'g"...z.'..(...'g%...'g%..'..%..'......u..'g.'g.'g(...d.....x.P......z..\|..~.....v..}..n..t..l.....l..z.....y..x.....y..q..p. ...i..Nk$...p..s..k..Ez....a..F..j..g..~..P.....w..f..e..'g.h..Z..:j%......j..}..s..k.?..5..*...H.....m..s.$...t.....d.....f..{..?.....[.....(R#...[..X.......&...Z.....=o.......m........6s............&...^..S......."...~.....K...........;...}..b..Y..c.....z..n..-.. ...y..v..g..}....$...T...d..W..+V...d..].....!......r..M..H........v..\..#............p.......H..C......z..o..k..O..,l~..4}..t..h..s..V..H.,y..z..h..M}.X{.Bv....s.....R..]..Rr.y.....`.i...2`.v.?B.....DtRNS..m........mm......=.m......w],..uZ..........}vE.............obX?.nM...nIDATx......@....M...!{R.$'!E8h..`...A[H.).B,.(..Y..[...'DDDD4JY.J.fu..R.[.t.I!.ku...x+..j...4...!H.:~.%.+...T{9."..

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7866), with no line terminators
Category:	downloaded
Size (bytes):	7866
Entropy (8bit):	5.43965487415609
Encrypted:	false
SSDEEP:	96:sT3lNjFgMMEMAq4GpibRX8Ru8wMYSSwNbgSG+pqT9B/oygfJvXqV0hL+XnE2Ntam:snF1MEMAzX2uVMYENb7S/qXXLUXXaFCl
MD5:	D53092C1D6E0A7A3D1BB802C67A6E1E9
SHA1:	2556EA4F15518FA36D0B92666E22CE28EDEC6745
SHA-256:	0CA2D5D4DECE21114294A8783944CDD00A4351935831B27F9A83B8EB543C6438
SHA-512:	4264CECFB1409B3ABFE8BE4A8A1C0FA2D7D661175640CB80AF7677CDFF9B24C439DE05D406FD369D4BB7227D94126CCBB5E441FC216300C80CE11ED1107DC369
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.37.0-release_1294589553/surveylogicinstance.min.js?version=10.37.0-release_1294589553
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag.taglets.SurveyLogic=lpTag.taglets.SurveyLogic\|\|function(a){if(!a.survey\|\|"object"!=typeof a.survey\|\|this===window)return!1;this.survey=a.survey.survey\|\|a.survey;this.createQuestionsMap();this.defaultSelectValue=a.defaultSelectValue\|\|"";this.header=this.survey.header\|\|""};!function(a){var b="prototype";a[b].questionTypes={TEXTF:"Text Field",TEXT:"Text Area",SELECT:"Dropdown Box",RADIO:"Radio Button",RADIOH:"Radio Button (side by side)",CHECKBOX:"Checkbox",CSAT:"CSAT"};a[b].validationTypes={EMAIL:"email",NUMBER:"numeric",STRING:"alpha_numeric",CSAT:"csat",PHONE:"phoneNumber"};a[b].errorTypes={EMAIL:"email",NUMBER:"numeric",ILLEGAL_CHARS:"illegal_chars",REQUIRED:"required",CSAT_RANGE:"csat_range",LENGTH:"length",PHONE:"phoneNumber"};a[b].questionsText={MAX_LENGTH:2e3};a[b].csatRange={lowest:0,highest:5};a[b].getAllQuestions=function(){return this.survey&&this.survey.questions&&this.survey.questions.question&&this.survey.q

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc_webkit/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1350
Entropy (8bit):	7.78408071214036
Encrypted:	false
SSDEEP:	24:3rG2ZQYIZj8OnhXWBF9cSlruwm6hmK+z33H+BYkIVKomVZH0E5/:3rG2QYIh1XcPcShuX68nL3eYkmYZU8
MD5:	E3646CA4C91B4EBA0EF9C34B68C10EE8
SHA1:	FF82AA498D6625E6F0159CD7598FF09E19F7EA02
SHA-256:	8D013450CA90E6FDBDA607010CC6284FF2D6E6623A7E6F9E2B8848454CFC1762
SHA-512:	072DA3A4E09D59C62EA87F91106B886991C8B030F7CA2C0C81879468109A3D7555C10438C6D42D7769E4EE008E86E4CE44FB01BB16D159F84E0EFEC76069974B
Malicious:	false
Reputation:	low
Preview:	RIFF>...WEBPVP8X........n..n..ALPH.......m$I:....O.0DD~ (...Fg.U...3...YF...t...Nf.\.\E..c.3.m...5.Mn.m.....^D.'..3?XXh._....K.F.I3.g...DHl....I..T....)Q...G.....\|E.Y....mV(.X_....E....qE..U.5...q.(.q.d.@....%...TB.ex.....R. 7.0.7........d...0\.84..A.7....%..P..i.=.... .t".P.!.K.X.i.!.#MC...z!X.;..B..a...D&o.l...L..n@.y$ L..............ok....,.....?..y.A..&...3...Y/u..v5.WX.&.....j6..R./U.,V;.6.Q#a..r.....VP8 .........o.o.>Q(.E....K4h8....<c._.7.....4.u18.....`?d.`=..@=..@{..K.+.........q...e.k.....ev..\@.......0o........q...W....T:bc}..`......\.HyT...w.&.)_...:X..E.xK..3!...W2.+... .`...+..f{.......9..#..s...i....n.a......U.q~.....1.'.j.X..s.j.^{.09.b.}>[n...ko.....=...<..F....I..v.......?..$....K.#....:.J.7b.hY....d....b..............;).)..2...1lm.T...\|@..>..s.k..."..#.K......lx:..,..F.Xv.o...'... lW...n\.....8O..............L.?T.5........m.....Z\|{.%].....U3.5..$.B..D>.)'0...Ik.w.f0.6I<..G.@9q.........:...@......%.J...h+kn&T..(m..

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26742), with no line terminators
Category:	downloaded
Size (bytes):	26742
Entropy (8bit):	5.483467930657629
Encrypted:	false
SSDEEP:	384:si63R4M3jFkfHlHL91cCVVbO8IkFzjBCK2be7R1G1E2JnkNA3:siC5U5OCb68IkFRCKSj
MD5:	D4ECA7F8043C1192B1D3CBFF078AED37
SHA1:	1B2EA5F859B871C30E2D721CB4F14E0BF68F6AE4
SHA-256:	F9A5649D70F74CDE04AB0C3F8A8F41810772E9970BEFA7FEE8E339BCF4DD3B08
SHA-512:	69A6B64B5578C5E774ABB9D203C55CD94AF6CB5366F1E47C5ABD31719E6F8F642E41DE989636D0A72E8E25B75EFD11B895C7BEAAA5CFD7697AC30604C2921199
Malicious:	false
Reputation:	low
URL:	https://lptag.liveperson.net/tag/tag.js?site=60270350
Preview:	window.lpTag=window.lpTag\|\|{};lpTag.taglets=lpTag.taglets\|\|{};lpTag._tagv="4.1.10";!function(a,b){function c(c,d,e){b._logcnt=b._logcnt\|\|0;H(c,d,e,b._logcnt);if("undefined"!=typeof a.lpTaglogListeners&&a.lpTaglogListeners.constructor===Array)for(var f=0;f<lpTaglogListeners.length;f++)try{lpTaglogListeners[f](c,d,e,b._logcnt)}catch(g){H("Exception="+g.message+" msg="+c,d,e,b._logcnt)}b._logcnt++}function d(a){if(a)for(var b=0;b<a.length;b++)qa[a[b].service]=a[b].baseURI}function e(){for(var a=Ga.PRODUCTION,c=b.ovr&&b.ovr.domain,d=0;d<Ha.length;d++)if(Ha[d].tagDomain===c){a=Ha[d].env;break}return a}function f(a){var b;a=a\|\|e();if("string"==typeof a)for(var c=0;c<Ha.length;c++)if(Ha[c].env===a){b=Ha[c].tagDomain;break}return b}function g(a){var b=qa[a],c="ALL";return b?b:qa[c]}function h(){return qa}function i(a){return l(ra,a)}function j(a){return l(sa,a)}function k(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])}function l(a,b){var c;c="undefined"!=typeof b?"undefined"!=typeof a[b]

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65397)
Category:	downloaded
Size (bytes):	140778
Entropy (8bit):	5.44675798903284
Encrypted:	false
SSDEEP:	3072:WqiL9gAam/uphj/wkMLfMZ4jMFHTuT8K7He:oL9g4UlIm5HSTL7+
MD5:	94FEEC31F6FD531C80B08FAE26EB275C
SHA1:	96F904FC6D751F8CFBA18D506CB1067CB0AC25FC
SHA-256:	1569DD95C870F769B2BC3909C52C08303956BEF7DFC288402D3B8BB13148BC10
SHA-512:	EBFC643C65EA79F4930AE22AA752C79252B91D97B0A5BB4407D262BAF76C2BA84A05D0064E095D4DFC9BBE727B38428FF1D741C045F0B5A85ED38ED0A1A3C3C3
Malicious:	false
Reputation:	low
URL:	https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js
Preview:	/!. 1DS JS SDK Analytics Web, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var i,n=typeof globalThis!=n?globalThis:e\|\|self,r={},e="__ms$mod__",a={},o=a.esm_ms_analytics_web_3_2_18={},c="3.2.18",u="oneDS3",s=(s=n)[u]=s[u]\|\|{},l=(l=n)[u="oneDS"]=l[u]\|\|{},n=s[e]=s[e]\|\|{},f=n.v=n.v\|\|[],u=l[e]=l[e]\|\|{},d=u.v=u.v\|\|[];for(i in(u.o=u.o\|\|[]).push(a),t(r),r)s[i]=r[i],f[i]=c,l[i]=r[i],d[i]=c,(o.n=o.n\|\|[]).push(i)}}(this,function(n){"use strict";!function(e,t,n){var i=Object.defineProperty;if(i)try{return i(e,t,n)}catch(r){}typeof n.value!==undefined&&(e[t]=n.value)}(n,"__esModule",{value:!0});var c="function",u="object",fe="undefined",f="prototype",s="hasOwnProperty",l=Object,g=l[f],v=l.assign,y=l.create,e=l.defineProperty,T=g[s],I=null;function b(e){e=!1===(e=void 0===e\|\|e

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 72x72, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	968
Entropy (8bit):	7.753065511654769
Encrypted:	false
SSDEEP:	24:TQkJvmEaoxCdIcq4lGRIU0MfTajbBHC+U3SEJu5SVqo:0kxaY1hIiybBiF37JusX
MD5:	E0629A1ED39D8A2F2344F04DDC0F31E3
SHA1:	24259E9209CE5BCDBE49140AFF1CBF08EE35C985
SHA-256:	227F4800ADAE8392D0C38090F99E5463C6A446E35BE9DC796B13F539B52650A1
SHA-512:	E543899C070F5B5D9471680B80207AE655EA313105AE7656D7941882340342AA66296B711F8B2E3F1D6B67E81253245054B508F13C16BAFC1E7365ADEF01F659
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....P....H.H.>Q$.E#.!....8....f....U...}..W.W...!.....;.8?..W...p.H.m>.....?.....x$.\.0...G.\9/.^....>..=7...r.eZ......M.ccWq.VV...k....w..x.h&..!h....S.z<...K>.Q..'..;l..cA..,oQ..) .......{.~.`....t.~....#..p;....(3..{.mU~..."cD........3l.v..Y...u.E......\|2..\|..+.k@....wjX..?.o-.....lG^b...s.]}>EK+.]........$..q.A.q.....`.....[..ma.I]..G.......>:...'.D........4.....ZG.3..^...WqQ..o.0~1...X..@...x....U.w.^....N.......\|%.f........../.2U....7.\|..gh>"...Go.(...F`.1..^`V.Z.........r.d...\|..C......#j..I.a...\|...;G..."Y....MVw.D.."......b..G.G,o...MR..A.8.?.....$..+?.).s..........o5@..u..V...+..\r.n`9.5zh.D...`..H..;g.P...L..X.+G......d..l.]...e-vf./.f.A.:..Y...Q.......!..i.......s.,!.n.h...+L.............%V.X...>.............\|.E....g....c.l......s.....U=.....qq.?...r.E.%.s.O..mz54....i..G.tH...o..E.u....&.....gY.S......Y\|^.).;S...5%..W..mRTwV5.r}...V.w.c.P.+..LA{.1.f...i;xW9......#<6.I..

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4901
Entropy (8bit):	5.188803072955585
Encrypted:	false
SSDEEP:	96:AxtrEzrvGJreyVrey/Jrey3/reyBHrxLavLe/yeSde+aeECRL/49Nh+MNMpeGP8D:Ai/9yEyIySyprxCLqy7dNaxCRT493+M1
MD5:	16C74BDAC3ECAE5D9B48E8E489AE6B37
SHA1:	F6E973E4EBE02EDED0C6AFE1E0151A16CA7CD03E
SHA-256:	4868DA56574B7C4DC5BBF6EDEAB406CDA3F7D0D7BED51BDBCD66B2816A75C941
SHA-512:	A07E1904E050D75E0C1F87AE6CEFE3D844BFE741C79B29F9945E5D8346F7533F1A41D3F2F0AB719C1FCA21FAE8628E3C9F1B489E7E77D74C2D4F7F8C8487EC63
Malicious:	false
Reputation:	low
URL:	https://prod-video-cms-rt-microsoft-com.akamaized.net/vhs/api/videos/RW1dNAH
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dNAH-enus?ver=6d43","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dNAH-tscriptenus?ver=fb05","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeStartDate":"2023-10-24T17:07:05","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RW1dQ5q","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dQ5q?ver=8edc","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RW1dQ5q","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dQ5q?ver=8edc","link":{"href":"/vhs/api/videos//thumbnails/

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	downloaded
Size (bytes):	84225
Entropy (8bit):	4.997549810656063
Encrypted:	false
SSDEEP:	1536:BRN1GDsWcOiVWEec7ynw+OwnZ7aGogbp0H2EHE8z2nqzfPD236qyP0Vlbw5ZwQE2:BkDsmoyfRaTlE0
MD5:	AB8ADC95B904264E414E11D7806F7386
SHA1:	0176D3C27252C5A3D5A0219462D74BA3848F7911
SHA-256:	50181D5475A2E350E4A4710498A7BBC9C761047F20DC8A1AE96F217B9AB5BF73
SHA-512:	E315726FEDDEBF65DF02090D92C8C72D155D7C3C988B1A4EA4DC2C73A60DEA4702C2332E504BA684D7C6049C8B20B45DCBE52CD86199BCEB99B761C67BCDE017
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASHab8adc95b904264e414e11d7806f7386.js
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.343868368875436
Encrypted:	false
SSDEEP:	3:H+PKT/+DthGDthGRY:ezGG+
MD5:	48A7B7FF833AB1E337121EA8063665E7
SHA1:	CF841A2FB89FAC9D27355FE39F41619D75D19413
SHA-256:	37EB525CDD914FD20B1CF32EF4F5823DB403D67E3325EA098B64E9D3AF85E31F
SHA-512:	90A78328AC3178C1537A8D9EFEFE2941688783DAFD29DE1E1C12557AC5B38D6A56659AC9E516AE77D5EA1748E1D0B28E8CDD54D16393F19F6E74D3847FBC6262
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmetj_1dSiwuxIFDXoqIIkSHglPXFRxhTdsqhIFDZFhlU4SBQ2RYZVOEgUNkWGVTg==?alt=proto
Preview:	CgkKBw16KiCJGgAKGwoHDZFhlU4aAAoHDZFhlU4aAAoHDZFhlU4aAA==

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1118
Entropy (8bit):	7.772764450927152
Encrypted:	false
SSDEEP:	24:tWcBiJF9oGyQ7Um3g3DAt9fQTU8loa6f1A2WNZ9ujlfg:koE63EnKlY1A28Sg
MD5:	6AB5DB4B3FF17AB7C2F368003972A34B
SHA1:	0FF70AD3AF4CDC43E3ED1F4A505E450B9A4AA399
SHA-256:	BBAC9EC6DA00D54A354475695830F4A25D774BBF543190C3E307CDB1A5704679
SHA-512:	7EBF1105BB5CF4C69CE8731C211B3C66A30B7B307E9F69B86DDF79CCA0A4409F516A9FF89A802A1D13525E9D77EECF60C3A3FBA3F05B7B503431EC770F5D6397
Malicious:	false
Reputation:	low
Preview:	RIFFV...WEBPVP8X........n..n..ALPH)......$G:W....>....$.o.sr..w.u.Nb.{mZ.....9i9_N..?`.m::.....m.....=...".?.pf..._...bA0>...=.;.#.....{~../.......$.?.;.<jE....-.Z..GZ.......Ol..-.^#.N....c.52Z....d..4!..'.X".]B.5R\|..F.)...9{.z...~".v.C........ ....]+...LJ.[%..D.Z..B..b..P1..r.9.O...yt........?.wBM.W3:...!.....hBqZ.....VP8 ....0....o.o.>Q".D#.!...l8....._....{.]?@=.=.y@u...t...z@7.'..g...w.......~...z.\|`..'..3./..Q./.\.O...I.'Cn...aj.8..<;..........,)/.hp.......^. .U.L.\|D............\|..B3..h?.x..Z.D.\...G.`W...M.......S".g.v...Xl...\|b.G..c.s...gXWS.@.._6.7...9..]..B..@..+.9\|.........j'..f..m.......Vv.a9...6..Zl.4g.+.\|^........!.cWt.9.....1........w...r..x.....P.:..\|..bG.s..#.4.F.J.62la...`..eyK.,.bG...._=<....^..u.T..s..[..p.\|.a.e....../.=..\.......k.&.c.'....o. u.y...7..p......}n....z..<..\|]m...f.M..rO~f...=.?..`..'w..`..i....f.W{ ampE......_..8;...r.....s.e.v,..j....).<..5...g..5t./....x....%.)3.H..T.~Mk.?:3<..A....i..6 g....(.N...0/..7..\|.p.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1158)
Category:	downloaded
Size (bytes):	7935
Entropy (8bit):	5.175600779310663
Encrypted:	false
SSDEEP:	96:jJ/nMdaBU+hx1fQeWYZRRTaQV72viMhKz7pCCtS5NI2Tmtnm8Gu8Qf8otFtMmOeC:pBfQATbJlnheBIeffKIjd1hfNR2M
MD5:	864A24D7C4A1097F30B215E79CB41967
SHA1:	CE21463CB4C1509C45EDA1B12FF71EF4AB578DD5
SHA-256:	7756407C953FC5FB0B4B2E965A32B5D129D73266F26A1A37D107C8501EC85767
SHA-512:	A83980A658DD2CF73DD711FAA09DED768E6C85E64E5A868B396B69BB7C6964643128D517F01A7873B247211631C6C2DA9E16559BEE3D44795997AA24FBB8A5DE
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/videoplayer-nocookie/embed/RW1dNAH?pid=ocpVideo2&jsapi=true&maskLevel=20&market=en-us
Preview:	<!DOCTYPE html>. CREATED BY VID TEAM -->.<html lang="en-us". dir="ltr">.<head. data-info="{"v":"1.0.8745.29656","a":"c8fc48f1-a237-44d8-b306-f4d035e201c7","cn":"OneDeployContainer","az":"{did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odeastasia, dt: 2018-05-03T20:14:23.4188992Z, bt: 2023-12-12T00:28:32.0000000Z}","ddpi":"1","dpio":"","dpi":"1","dg":"uplevel.web.pc.webkit.chrome","th":"default","m":"en-us","l":"en-us","mu":"en-us","rp":"/en-us/videoplayer/embed/RW16rdm","f":null,"bh":{}}">. <meta charset="UTF-8" />.. <meta http-equiv="x-ua-compatible". content="ie=edge" />. <meta name="viewport". content="width=device-wid

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1789), with no line terminators
Category:	downloaded
Size (bytes):	1789
Entropy (8bit):	4.949297796790656
Encrypted:	false
SSDEEP:	24:s02Yxod02La21d02/YKdXSd02WwKnccd02+49XX3Xsd02wGy/rd02XLryWrrd02O:sAwzXH2+9WqXHXW4GuJ/v9M
MD5:	49696FC959CE2121F8FC42BC0A295EDF
SHA1:	353FE5D1F17B396C81383059C66E73574991A78B
SHA-256:	E0CFF5C0E0126AD78EB3DCDDA610AD22A32FB4AA37EBA19FEA990E8C3AB3918A
SHA-512:	AF4C277F64FD43CE18E94EE797FB7C4B3D19BD84B0741DFC30AE6E1FE77809EBB36CAA0341A4A86405D275E0AF63A951E488370F4A689636560049AA71084E05
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYo
Preview:	@font-face{font-family:"Segoe UI Bold";font-display:swap;font-weight:700;src:local("Segoe UI Bold"),url(segoe-ui/west-european/bold/latest.woff2) format("woff2"),url(segoe-ui/west-european/bold/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Light";font-display:swap;font-weight:100;src:local("Segoe UI Light"),url(segoe-ui/west-european/light/latest.woff2) format("woff2"),url(segoe-ui/west-european/light/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Semibold";font-display:swap;font-weight:600;src:local("Segoe UI Semibold"),url(segoe-ui/west-european/semibold/latest.woff2) format("woff2"),url(segoe-ui/west-european/semibold/latest.woff) format("woff")}@font-face{font-family:"Segoe UI Semilight";font-display:swap;font-weight:200;src:local("Segoe UI Semilight"),url(segoe-ui/west-european/semilight/latest.woff2) format("woff2"),url(segoe-ui/west-european/semilight/latest.woff) format("woff")}@font-face{font-family:"Segoe UI";font-display:swap;font-weight:400;src:

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x840, components 3
Category:	downloaded
Size (bytes):	267777
Entropy (8bit):	7.9710803451829655
Encrypted:	false
SSDEEP:	6144:DjYT+ivBNRdV1OrNEiozMxdQwQJeD+jbk8ohdMYFr:DsT75NRdV15i5xWhLkR3
MD5:	E79DB6B1E09448922C4B01E54E417881
SHA1:	F063585669584F9226F3D3783036AD8E891A6ED0
SHA-256:	B3A5172802851862013282EEE059F17603BEF662BFA5E4B5AB21D7978B88A423
SHA-512:	BC60236E14BC442E973DA2B6386C01DC91639D0CC11138C9D35A8B36B24B229699318E5B917D4C2196BD389E68D5DC4EAABEE98C05E54DBE32815E5247668274
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/1c403195-f4b9-4a21-b54c-72d6d5284d91.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (504)
Category:	downloaded
Size (bytes):	1240
Entropy (8bit):	5.226026021317682
Encrypted:	false
SSDEEP:	24:YwXyyRRvV3I1VnkOSasiYbqIhB1ChqzRAmmOKZTo72O2bC2RRSfuH99Jy:5xR8JVfSRArrLZs
MD5:	00F6C26DE9C7C0A1E7B10D8BB358E008
SHA1:	6BEBC2E9F973ACEFCA9B12BC0C30B157546C1D67
SHA-256:	1A798269DA4C197C27EAC4EE1C2C84D59CEB41A72F5E670EBD59484653CE1BFD
SHA-512:	8757F804366A0BE2C5AA8360C4397C2348625A6FFF74F3139A03853F36014BC0A4B1FBBF018C5071DB730B6371F22BF5E79A54A5B02899BC872A5D82E227ACB3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/embed-partnerscripts.ACSHASH00f6c26de9c7c0a1e7b10d8bb358e008.min.js
Preview:	'use strict';(function(){function c(d,f,a){d[f]="undefined"!==typeof a?a:""}(function(d,f){d=document.getElementById(d);var a=d.innerHTML;a=a.replace("jsonElement",JSON.stringify(f));a=a.replace("//_pageBITags","_pageBITags");d.innerHTML=a})("mediapixel",function(){if("undefined"!==typeof telemetry){var d={},f={};var a=telemetry.webAnalyticsPlugin.config.coreData;var b={pageName:a.pageName},e=document.querySelector('meta[name\x3d"awa-market"]');e=void 0===e?a.market:e.getAttribute("content");c(b,."mkt",e);e=document.querySelector('meta[name\x3d"awa-pageType"]');void 0===e?e=a.pageType:(e=e.getAttribute("content"),"Premium"===e&&(e="PDP"));c(b,"pageType",e);d.pageTags=b;b=a.pageTags.ProductInfo;void 0!==b&&(a={id:b.id},c(a,"sku",b.sku),c(a,"title",b.title),c(a,"prCat",b.prCat),c(a,"type",b.type),c(a,"family",b.family),c(a,"rtg",b.rtg),c(a,"lstPrice",b.lstPrice?b.lstPrice.replace(/[^0-9\.]+/g,""):""),c(a,"rtPrice",b.rtPrice?b.rtPrice.replace(/[^0-9\.]+/g,""):""),c(a,"cur",b.cur),c(a,"sku

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4370), with no line terminators
Category:	downloaded
Size (bytes):	4370
Entropy (8bit):	5.070419363669657
Encrypted:	false
SSDEEP:	96:yUD4Nf5fpk+9/FPV/A/xtrmAxdAe8RiM1MTMNOMx7UIF/A1ERu84jC7UO7Flt8zx:b4TJ96rrmAxdAe8RiM1MTMNOMx7UIF/o
MD5:	5F05B23BAD0F2D477C4E6B9266F99A74
SHA1:	E6CC0BE0A86B8330B4FD16CE8EB27614FB313B40
SHA-256:	70099F944DDCE86C3B9E24CE88C3C489EF4C63CEF20C4DA64A5DC33BBFE36512
SHA-512:	664E997252C7A41F8D4E7A3FD34592D25809AFCD4EF9FB7A2542F9A3C05FC8F841D5F7E58DBF0A6F00C255F43C6A36D6597DDF5C7A0FFC049994002CC851ECB8
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/promotionbanner/promotion-banner.css?v=cAmflE3c6Gw7niTOiMPEie9MY87yDE2mSl3DO7_jZRI
Preview:	/! Copyright (C) Microsoft. All rights reserved. /.uhfupgradeBanner{display:block;max-height:110px;border-bottom:.5px solid #aeaeae;box-shadow:0 1px 5px 3px #ccc;margin-bottom:10px}.uhfupgradeBanner .uhfbanner-container{max-width:1640px;max-height:inherit;display:block;position:relative;width:92%;margin-left:auto;margin-right:auto;padding-left:1vw;padding-right:1vw}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper{display:flex;flex-wrap:wrap;max-height:inherit}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper .uhfbanner-content{width:75%;align-items:stretch;float:left;position:relative;padding-top:1.5em;padding-bottom:1.5em;max-height:inherit}.uhfupgradeBanner .uhfbanner-container .uhfbanner-wrapper .uhfbanner-controls-wrapper{align-items:stretch;float:left;position:relative;padding-top:1.1vw;padding-bottom:1vw;width:24%}.uhfupgradeBanner .uhfbanner-controls{float:right}.uhfupgradeBanner .promoHeading{font-weight:600;font-size:20px;margin:0;position:relative;font-fami

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3164)
Category:	downloaded
Size (bytes):	34350
Entropy (8bit):	5.567676976277347
Encrypted:	false
SSDEEP:	768:ZtsW2+v8W9efm/OmM8bz0OFc0hWuSAcSZo81i81SNsShqgsTZeTnOkj:7sHs/L/tz0opWu7cA1+sNkTn
MD5:	D832BCC4FE42747220F5014DBF708394
SHA1:	88DEE5AF768A86CE00FAFB250A5D54CC363AFA55
SHA-256:	C95CBF14FE366B3BD006A871E99734FF2845221A872EA412E1E05B1FF7219DC3
SHA-512:	A5162066AEA3C1467BCEAE43516B1CCC23AC869CCBCA8620B4F1B9B05E1F8B97A0BFAF8327E651A061374D8AFE0AD0E32247130B7A3E9C16E8DE28DB306A3289
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-httpclient.min.ACSHASHd832bcc4fe42747220f5014dbf708394.js
Preview:	'use strict';(()=>{function M(m){var r=S[m];if(void 0!==r)return r.exports;r=S[m]={exports:{}};return T[m](r,r.exports,M),r.exports}var T={3770:(m,r,h)=>{m.exports=h(2494).default},2494:(m,r,h)=>{function f(x){return!x.response&&!!x.code&&"ECONNABORTED"!==x.code&&(0,a.default)(x)}function g(x){return"ECONNABORTED"!==x.code&&(!x.response\|\|500<=x.response.status&&599>=x.response.status)}function p(x){return!!x.config&&g(x)&&-1!==t.indexOf(x.config.method)}function n(x){return f(x)\|\|p(x)}function k(){return 0}.function l(x){var H=x[A]\|\|{};return H.retryCount=H.retryCount\|\|0,x[A]=H,H}function u(x,H){x.interceptors.request.use(function(E){return l(E).lastRequestTime=Date.now(),E});x.interceptors.response.use(null,function(E){var v=E.config;if(!v)return Promise.reject(E);var I=Object.assign({},H,v[A]),P=I.retries;P=void 0===P?3:P;var K=I.retryCondition;K=void 0===K?n:K;var N=I.retryDelay;N=void 0===N?k:N;I=I.shouldResetTimeout;I=void 0!==I&&I;var Q=l(v);if(K(E)&&Q.retryCount<P){Q.retryCount+

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	977
Entropy (8bit):	7.1708756868544326
Encrypted:	false
SSDEEP:	24:+cKYj6LJzSiTOPCTtOXS3PY/2hj1soPnsVeT0:+cKYjwJ2mCTX222wII
MD5:	1317A3DF8879D088EFCF7B8708DE0A41
SHA1:	E3909FAADA15803C7013893C27025E2B40129BA1
SHA-256:	54D513EEE6A82B780CCB312753DC70CA1416A6D18375E3928E1F4571E44055BF
SHA-512:	C1FDD053444AF70CCCF4D799AC58EAB8AC6F9B357C016F4A12DBE72D44D900A7520B35BF431C8FCA0A8556CA1C4A0E10F6EC3B3022BB86E35810795322527721
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Gldn-Editor-app-icon-75x75
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......K...K....pixi............av1C........colrnclx...........ipma...................mdat.......Jh...B2.......a .@.....s.,....r.@L.$.%0%.+.R...p.K..~..=.D.......g.Z0w...9_4..b.".}.Sku..y8.^.{...q.rY.?....c......}>...m..qR5Y.TtXK.zU`..bM.....M.T....5o..z{?}(..v_.#4..77.B]L.3.25..........I.7.l...........)K.&~\|...xlJ$....\|YX.:k6...Wk....[]..M.U...@.w...BBC..@..N<eE@..)3.. ...C..z.r%`r...r.?h.......E....%.H.3........`.qJB..S.#vlb.2K.y.U..1.z.>.....$.)%.<4;......Y0....T.r....../..M..d. .h..AN.,(.tuT.^..MB....j...<.3w%.o.q...U.?R..L..SCW.?.,...u..h..........I65..!...PC.KLt..pw.e.e.:..h......J...~..)5..L.".........Q..Lr..n.C.\4...d(.>Y.#..U."+..ZA........l.#...G.Q.M9k....j..W].^Q.5....f..Y.....Q..(..Q1.:.9....#.7..5..7(.0..1.+TX....X..5..X.~....YW.>O.0..

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1578)
Category:	downloaded
Size (bytes):	336350
Entropy (8bit):	4.971308099391292
Encrypted:	false
SSDEEP:	6144:NqP3gQQQZQXXUXpXr5ZHb/d/6yhrHhFb9NdvTH:75eYXUXpXfHb/d/6yhrHh59NdvTH
MD5:	F2F8C0FD97B17FD5136333B9FACAC0CB
SHA1:	B56053DCDFC4FEF9A16D40263DC78C76E5FE7350
SHA-256:	9F867FAC1FFF0F7E3C90A8D5485F2D307B0DA1EB93B5DD27FC0966319E373264
SHA-512:	1C62610C58FDE2ED7EBFF3C7704FD52729B181A18E9E42CB34018DC16E1DEE4BE340F8123CA438EA584430EE7DAC56AF7731DC1CEC0CEE1B64C41BFAF98CE3E2
Malicious:	false
Reputation:	low
URL:	https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.js
Preview:	var engagementFix = (function () {. var engEl;.. function focus(eng) {. //Jaime MR test change setting upstream. // Run if a button was detected. if (eng.engagementType === 5) {. // Look in dom for a role of button. We only need to do this once because each button load will cause this to run.. setTimeout(function () {. var button = document.querySelector('[role="button"]');.. if (button) {. button.removeAttribute('role');. }. }, 200);. }.. if (eng.engagementType === 23) {. document.querySelectorAll('[data-LP-event="close"]')[0].click();. }.. engEl = document.getElementById('chatEngagement');.. if (engEl != null) {. setTimeout(function () {. document.getElementById('chatEngagement').focus();. }, 200);. } else {. setTimeout(function () {. var engageme

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2361), with no line terminators
Category:	downloaded
Size (bytes):	2361
Entropy (8bit):	5.588417013877714
Encrypted:	false
SSDEEP:	48:h+gB68ZH6PYF8GDTXO1eOpwVInQLrMUTjTu6SnHt:Ic68qYF8GHXDOpRnQLrMUTjTun
MD5:	C3C78108BE7F4B8436739BB9669293F4
SHA1:	34FA69C42764B89580F8615191C16380DF55E3F9
SHA-256:	3588FBEA772641761C3BDED58AC3BAA976B0B6509559E3219130201C3F7CD3EF
SHA-512:	725DD0104EA33BD2D62CD50C5D011319684E84A2E791ED9450A579A90D5E5831425889C1E6E2BD1E235C51E0E157727BC62F1DAF86B7303B7D5518826F431BEF
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/60270350/configuration/le-campaigns/campaigns/1644274130/engagements/4242612938/revision/19398?v=3.0&cb=lp4242612938&flavor=dependency
Preview:	lp4242612938({"onsiteLocations":[4076723438],"followMeTime":0,"connectorId":1644210230,"renderingType":1,"channel":1,"allowUnauthMsg":true,"windowConf":{"json":{"externalConfiguration":null},"type":"internal"},"description":"","language":"en-US","source":0,"type":5,"enabled":true,"skillName":"BOT-STORE-SVA-EN-US","isUnifiedWindow":true,"id":4242612938,"isPopOut":false,"timeInQueue":0,"visitorBehaviors":[138786914],"followMePages":1,"availabilityPolicyForMessaging":1,"campaignId":"1644274130","zones":[143784014],"windowId":4463850138,"conversationType":1,"skillId":4403896238,"useSystemRouting":false,"effects":{"useLightBox":false,"secondsToCollapseAfter":0},"createdDate":"2023-09-27 17:55:53","connector":{"deleted":false,"configuration":{"acrValues":["0"],"pkceEnabled":false,"clientId":"60270350","jsMethodName":"lpTag.taglets.unAuthMessaging.lpUnauthFunction","jsContext":"lpTag.taglets.unAuthMessaging","jwtPublicKey":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGQctwBFFZBaSu+LC4LVk\/4\

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2974), with no line terminators
Category:	downloaded
Size (bytes):	2974
Entropy (8bit):	5.078147905018725
Encrypted:	false
SSDEEP:	24:5hpNPWqBPWsQxmpqrqysQxmpqAYP6PAQxmpqIQxmpqNs7QRlDAALAGaCqDY7KXKe:572MYXsVGQyfZ
MD5:	8C4035FBAA828A7E23B8584328FE8F88
SHA1:	F222869596F1E3E94C131DE6E85BF233ED1EC511
SHA-256:	0F4950468225BC51D24014536FE8004392A415EF01F0DB92A258818E74F9C59E
SHA-512:	74D807189427397E2C8FC35D986616C1104E9125B39F885F61D9A1AA225D566AB3474061B39C64FF69886E5AEA8D6B4C9F28B4DCC9CB6F552D90DB0C651582DB
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4
Preview:	div.shimmer-effect{display:flex;width:100%;height:300px}.shimmer-line-container{display:flex;flex-direction:column;width:100%;height:100%}.shimmer-line{background-color:#edebe9;position:relative}.banded-wrapper-reversed:nth-child(odd) .shimmer-line{background-color:#d7d4d2;position:relative}.banded-wrapper-reversed:nth-child(odd) .shimmer-line::before{content:"";width:50%;height:100%;position:absolute;top:0;left:0;background:linear-gradient(to right, #d7d4d2 0%, #b9b9b9 50%, #d7d4d2 100%);animation:shimmer 2s ease-out infinite}.banded-wrapper:nth-child(even) .shimmer-line{background-color:#d7d4d2;position:relative}.banded-wrapper:nth-child(even) .shimmer-line::before{content:"";width:50%;height:100%;position:absolute;top:0;left:0;background:linear-gradient(to right, #d7d4d2 0%, #b9b9b9 50%, #d7d4d2 100%);animation:shimmer 2s ease-out infinite}.shimmer-image-container{position:absolute;right:0;width:50%;top:5%}.banded-wrapper-reversed:nth-child(odd) .shimmer-image{position:relative;heig

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17287), with no line terminators
Category:	downloaded
Size (bytes):	17287
Entropy (8bit):	5.462725306783576
Encrypted:	false
SSDEEP:	384:omxPfBpi9L/a4MQOxRsWWFPnq7usVYwQJXeBNZEWWg:omxe9ppFPq7uFwQJXeBfJl
MD5:	61ED0E072617B75F022D6CB53EA85DE1
SHA1:	027EB2B0F2A8BD9AD6BB5DA7D9F930C7DD8C9DF2
SHA-256:	24880FC6AA75969EABF4ABC448918057EA5331426BFEC56ED8E468647C928591
SHA-512:	269B93EA5906A33D584F9A5BF20EE44461D5488494CE2E1717A70F3E998BED8A4210A7BDC2D10937FEC3D6D9727033BF8E2DD80B69DA99D3A97269AE35CC94D4
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js
Preview:	function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_F(a)&&a!=""}function strOrDefault(a,b){return _BE(a)?a:b}function _A3(a){if(!_F(a))return "";if(a.lastIndexOf(".")<0)return "";return a.toLowerCase().substr(a.lastIndexOf(".")+1,a.length)}function _A2(a){return document.getElementById(a)}var $J={_cV:false,_b:function(c,a){var d=null;if("img"._f0(c)&&_hX(a)){var g=_A3(a.src);if("png"._f0(g,true)&&!$F._lM())c="span"}var b=d;if("input"._f0(c,true)&&_hX(a)&&(a.name\|\|a.type)){if(!$aE._j._f0(a.type)){var f=document.createElement("div");f.innerHTML='<input type="'+(a.type?a.type:"")+'" name="'+(a.name?a.name:"")+'" />';b=f.firstChild}else try{var e="<"+c;if(a.type)e+=' type="'+a.type+'"';if(a.name)e+=' name="'+a.name+'"';e+=">";b=document.createElement(e)}catch(h){b=d}if(_hX(b)){a.type=d;a.na

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 111 x 111, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2913
Entropy (8bit):	7.875769193349852
Encrypted:	false
SSDEEP:	48:c/6O0oVRuqFlbiJ4kaYeZdYSU3XCepyAjZLyFV8R9fNQiW92L4ZOBZluNkC:cSO0oVRTpkaYezanj0AhwC9lQiW92L4t
MD5:	3423D4EE734C51092D19E0D742CA3BE6
SHA1:	70779E50CE41B3C0F4212FF27598289D09B82BEC
SHA-256:	8D05A9A4BA388535E5D3D562CCB1596CC52447355765D126B73E224F76B829A9
SHA-512:	EF0C363CED2DEBF19C840538B27C6C68F0B33C1C15D6F6381BCE1C4EDCE444DAD08C8EBC20B0B7D923B93503211E51254D5EDC0F6F1C6B625AC4FEA48477E915
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Defender-CC-H-111x111-1?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	.PNG........IHDR...o...o.......`....pHYs.................IDATx..].]W.......P..QP..V.cI[b.,...c...C..`1i3.H..<......B.b. .(!.>64..dZ."."....I3.If.j2w/......~.9......{.>{.s.....>..;....a_.W.......<<...9,..ayx...sX.........<<...9,..ayx...sX.........<<...9,..ayx...sX.........sw6 ...........6J.vy..K.5J@.....x.Do...]k.>...D...o...-)...V.@@...U.%.4.q...Z..d...I.=./.....?.9.67...rJ.m%...9...c`.:.1!.U.S..l.0.../.<o...oK./A.u..A...Ii%(.q{A...g....`(...x...^_..O.r.."...Rm.p.........k.3.r..o ..o.Y....S..ix..-=..O..@.p.......f...6Jvh..... .u..../..r#.L#..?-}.D.9......%.Q._...S.....Z..p}z.3..Pi....r......D.o..]h........}....T..\..A... .Y...\|.Dk....... .F7!.C....f....y^TCq1R.5.l........u.Z..n.R..F.~w..6s-.9O.4E..X..C......0.R4.L...4...DX...a]..A.G.+D..K..yT..K^3n.^'yL ......]..R...7D.*v.E.p...X..f@c...mm.......?...@..y...,....6I.T...:...W.i.V..M.d/....d.%..+Dv..`n.....`.y..a.25'.j].D{o.C.W.S.....,.Z...qC[...E.......5k.e.+H.OX...a0\|.&...-^H......j.9,!2).N

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	466897
Entropy (8bit):	7.966969681374664
Encrypted:	false
SSDEEP:	12288:1Kw7fKlFQRdtU7Q4Zo45/WfjKWHI1db/D/t:UtgUU4Z75/Wfjh6d7Tt
MD5:	FD2A3831EB7EF449234C25E846E03E09
SHA1:	0C232F76D315312011087E0E268EF14BC9B92165
SHA-256:	916C01306618B660C5B9FB191960DCEA9FEF5193E86E0EF868F0D5CBA1BC1E30
SHA-512:	1BFFA91E846D29363DF15BC2D6F5B2776D94233C50DE05AEE41CBF55F456E9F9C028C00242D04B3CC5EAD4C514C0050183940079B0D64EFD89AE2524F7CED33F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3" xmpMM:DocumentID="xmp.did:1D29C065686011EEB25FFF87BA6598B7" xmpMM:InstanceID="xmp.iid:1D29C064686011EEB25FFF87BA6598B7" xmp:CreatorTool="Adobe Photoshop 25.1 (20231006.m.2353 10d5734) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c780726c-110d-4368-9520-476e0e8bd161" stRef:documentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	15
Entropy (8bit):	3.189898095464287
Encrypted:	false
SSDEEP:	3:Uh1Kn:UDKn
MD5:	39A19D0882684989864FA50BCED6A2D1
SHA1:	5CED55DAC2E0427E9DC605CEC1FEDAB0949EB15E
SHA-256:	8FBEDED073249C3611742297EE96A976A95EE113F33B9A422A5D3A7A2DEB63E5
SHA-512:	E795CB7DE27B42948B7DDFF19F3B401A8F95753AC7D37D9B5F52D8DACD2AA43A2AD9EACEC29F77D28080E20C21C48B9FA88A733FAC108939FB2F0EB036C7AEEE
Malicious:	false
Reputation:	low
URL:	https://statics-marketingsites-wcus-ms-com.akamaized.net/statics/override.css?c=7
Preview:	/* empty css */

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37398)
Category:	downloaded
Size (bytes):	38682
Entropy (8bit):	5.4346263188560275
Encrypted:	false
SSDEEP:	768:/8FbETw0esXkP2LKoCZPAX1jpTywcsCxut:/4YS12LpX1FGxsaw
MD5:	E0CC5A8F329B84D700CE2B1405F3E5AD
SHA1:	9F678D76C06A10E3EDC6509075EA0E3F528F0877
SHA-256:	D77064ACABAE1F8B615B9BC165437D16791FFC2ACB2D4D1A81C7DD13692F5513
SHA-512:	1CC614E88CA61F781CB2715936CC8E3E28503769FB99C5F82C5B1E604BB6B84D7AA7AA32C5E5539D23738D9909B410BC22014B0F47848B279E78E7A8617332F9
Malicious:	false
Reputation:	low
URL:	https://d.impactradius-event.com/A1133099-331c-4cdf-89b0-06dc20e168021.js
Preview:	/! @build e436e5b4 @date 2024-03-22T16:01:32.768Z /!function(){"use strict";var r={3272:function(n,t,r){var c=r(3328),f=r(4994),d=r(9725),s=r(6610),l=r(4546),v=r(3159).t,m=r(7786);n.exports=function(i,o){var n=new Date,t=f(i.i.z9),r=s(i.o),e=l(r,i.v.zg,n),u=d(r,e,i.g,i.o,i.v,n),a=c(t,u,r,e,i.v.ze,n);return function(n,t,r){if(!o[n])return r(m("unknown action"));r=v(r);try{o[n](r,i,a,t)}catch(e){r(m(e.message,{z10:e.name}))}}}},325:function(n,t,r){var d=r(637).$,s=r(3272),l=r(7754),v=r(8742),m=r(3638),p=r(9336),g=r(7219),y=r(2578),$=r(997),h=r(3159).h,b=r(5814);n.exports=function(n,t,r){var t=h(b,t),e=p(m(n,t,d),{debug:!0}),i={I:!1},o={k:i,v:t,i:n,o:e,D:y(),g:l(e,i)},u=s(o,r),a=[],c=(e("app",g.C,{acid:n.acid,zn:"e436e5b4",zo:+new Date,zp:1711123292768,ver:o.v.ver,zq:i}),!1),f=function(n,t){switch(n){case"enforceDomNode":o.k.I=!1!==t[0];break;case"setPageViewCallback":"function"==typeof t[0]&&o.D.S($.T,t[0]);break;case"setNewSessionCallback":"function"==typeof t[0]&&o.D.S($.A,t[0]);brea

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (801), with no line terminators
Category:	downloaded
Size (bytes):	801
Entropy (8bit):	4.511861351173509
Encrypted:	false
SSDEEP:	24:JgwPextGGTpab5j9BB8kbco/WIGGaTpEzT8:JgwPextd9mjTBnbco/WIGl9En8
MD5:	4BC04FEDCDD03DB5476F8C10BC68CA9E
SHA1:	07509D06AF5D3011F83586AAA77E1C19D4568A0C
SHA-256:	D6B6A40E1EA28CAF222004346579692FB314A48611C7CFA02CE3372B97047FEC
SHA-512:	8FA527EBECAA6F87A3928960F59236D8F7E73D14C8F4251AFEAC63EF0D8C90638327ACE842BF885B6DEB2501B64840CA4A874E2F04E04BDE24DE0D17413E68E1
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/60270350/configuration/domainprotection/refererrestrictions?cb=lpCb99467x36884
Preview:	lpCb99467x36884([{"enabled":true,"whiteList":["microsoft.com",".microsoft.com","microsoftstore.com.cn",".microsoftstore.com.cn","office.com",".office.com","googleusercontent.com","bingplaces.com","translatoruser-int.com","liveperson.com",".liveperson.com","liveperson.net",".liveperson.net","lprnd.net",".lprnd.net","lpsnmedia.net",".lpsnmedia.net","static-assets.dev.fs.liveperson.com",".azure.com","signup.azure.com","azure.com",".moscnuat.com",".lpnet.com",".azurewebsites.net",".geologic.al",".microsoft365.com","microsoft365.com","checkout.microsoft365.com","stores.office.com",".googleusercontent.com",".bingplaces.com",".translatoruser-int.com","lpnet.com","moscnuat.com","azurewebsites.net","geologic.al",".checkout.microsoft365.com",".stores.office.com"],"deleted":false}]);

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20946
Entropy (8bit):	7.93232536946356
Encrypted:	false
SSDEEP:	384:ecpgK1ekapmcRcYDw6SaYAwQTniYPMalqQm6vkoP9njpqNT:eKjUkapAsw6C9ePM2qQm6vkoFnwT
MD5:	68B6034D22E6083CF2592BF4B8B71F0E
SHA1:	0981B22AF5F2BF930794557717FF7C7F4FF563FF
SHA-256:	56E5D47C342207184BE9DE6E3CF06CF26C32B34EE799B3ACC95EBEEEEFA5484A
SHA-512:	3CDA6510769E8EE427103B1D76A0035E2A3E62C4EF0E789DBC28969B12F2DF2C1F7E7652FDF9CC99C7C086CF2764A19520D15A5FED86ECC5CAB9D9F77D534E93
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...QgIDATx....nEy....j.%bU.X..n^......Im..M."Z...+hU...m.e.....A.FQ.m......D....ELTD...Uo}...>.\|3....v....y..gf.:.?.yf..n.m..a........+.~..J u..}.k.........:;v.P......qM.c;.1.S..j..@v....O...c.@.....5Z.P.E{...P.(.......PvvQ..... .IGj...U.:}.#..Xghj.C.MQ...Kua...)G,4]..?.........#.......w.Ti'.Vy....S....%._).'...J...%.u\.R.Oo.R,p......"Y....N:V.P.R.W......O..Pk...n......Z.....).....HVc.Z.M....H....X......5....$....p......".>...<U...Sc.\|.K...Q.NR...k...k...F...).....H...=.....+.zj(....]/5.\.........).....H...\.@.;.\|.......I.&5.'.(6.cTz^.....c.r...r....k.)s.b..<.#......I.1R....k..6........R.d....r.]...NT].H.....D.#%.N..X.......7.t,..z.;cS.p].f....E-...6.#......IuG...p..c[.g.`..v..R1V...J.9.J... ..HqIw.NS..........3.G..pI.+p.....#.N.......Gp....).....Hf.H..1.#.4..2r.f....t..;.Z.7W........".=1d...^.....M ..I..T...../.t.T................_JLz)......{..hFJ...E..t9.).WaXj&

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2006x426, components 3
Category:	dropped
Size (bytes):	7199
Entropy (8bit):	7.187747411185682
Encrypted:	false
SSDEEP:	192:qEnB1JvWYMCMvNWochd/T0hysvXzQYe+U+Bn:qEXtdMFpcHoPXzQ90p
MD5:	A1EF536F995A784BBCE0E05691367943
SHA1:	5DD8391D8449D754A6F2360F6AF7E57036A8D2E0
SHA-256:	8E87C96FE3F25AF8A013C7F08BDF5A6D6FFF2CDF031332D5DA87D9F4CE4F1482
SHA-512:	315BB5D736EE46DC50720BBAF8F6D50FE2D29EE3A2E529B0FA068B0CA86D9DD8177CDE3184E32BFBFE88F7EC68DDC6F666FB80185A98B41EB21B1FBEF7D4271E
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.............."..........0...............................................................T.........B.. Q%........8..... X..@..Q`........D...2l... .Qr. .2. .`%K .`....Vm....O..~{$..y....R.".Q......@H.......D...................................f......... R. ....{...r.>...YB......Q`....(..>.R.....Iq.k ... .......\.....D...........Q....9...IQ.Q.@@H.FA @J....eK...`..........................w+.C.}9...2..sR..\.R...#.2z..Q`#6...YB......B....%...p..H..-.~z3...Qr. .2. .b. .b. #.$mq......b.^}....).ID.%......d.... ..f,..@H........................p..r.....g!`2..r...\.R.......Qr..y.,..... ".Q`....j.,.D..,%....\..R...... ...H.".H....X.....Q..3..."....@IR.@f........@@@H.......................p..r...~.r.. ..+(....)R....p....`#.....,. X... E......).. .,..._>.c{.........+ ....4H. U. .z..Z.A.. B....]Q.k.l.....b....

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9385
Entropy (8bit):	7.822881294786196
Encrypted:	false
SSDEEP:	192:9SpS61Y2WHbeo2bgGszi+/gkGa3uDIy71VV2TtLGkLFNx5S:9SpS6a2Ierg59YkxGAFNLS
MD5:	EBD667C89F68BF45837E47001C909015
SHA1:	C258E7EAA89971FF277D22BAD64E71025D3B16F3
SHA-256:	B51CBE1AF99579551B84A0DD4310F2CC763ABA6885F9E302CB164C67C661BC9D
SHA-512:	A3F06B7431E686E0B8E8B357081B07E4AFE3B96871638E7BECDC121187A32F991D3BFC054090CF8915E38AEE2BE6877BF76F0814EF494B94A6CAA898689E49DB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....PLTE...$..3...]..O..M.C.g.^..z.E.q.N.G.p....{.1...K./...{..{..T..~.6.U<.Y1...N..z.....F..S..I.3..,...I..{.:.Z3...~..~.1..-..'..-..V.p.z.X.n,..[.r9.Z;.+..1.W.m.z..~.M....V.v1.3..7.-....<...........\|.4...y..U.....S..N.0...P./..2...R....,......Q.+..-...L.....K....+..6.S.M.+.....,...J.-.,...~.5.[,..I.M....5.a`.q4.g>.F.[.v.J.-.A.D.P.^.s=.c.oV.{Y.qR.3.p3.u...T.}X.y...<.W4.k.....7.L..G....B.A.Z...@.;.E.P.m...2..{.3.z...4.I.V.q......=.].q5..G.2.~B.hJ.g...9.8.D._.~..y.9.T0..N.iG.b.x.T.vT.nF.mK.t5.@.rX.v1..{..v.P.r.\|.8.1..~......K.m.......n.A.\|Q.{=.`.~.1..r..D....0.O.E.u.x..u..t./.1.0.G.{1.@..z..u.L.{....o....@.K.1.2.O.v.r.F..y.9.<.j.s..n..r.:.:.:.r3.3.;.y/.8.E.7.<.:.d.m..^..Ax...+..%...d.......(..".....!.....1......BtRNS...!b}^/.?H+'o>.TL.<..g..]....................v............In.B..!.IDATx..?K[Q....1.l.. ..,M.V\2...].E,...TEJ.:..@.8..Q:9d8._@]............1..V.>..{.s.X..O..l.7999.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6089), with no line terminators
Category:	downloaded
Size (bytes):	6089
Entropy (8bit):	5.4927105223990536
Encrypted:	false
SSDEEP:	96:tjo/sC63hUjG516E6xY6Z66v3fF8GhyU60urhRncv3FC+2FVjesryc0ll56/4:m0ZNStLZPv3N8GhG0u1Rncv3FC+UVjet
MD5:	59FA60456DB5679D15A03D811A40FE1F
SHA1:	93C70A005EA50B843040397E75E72D614C4447DA
SHA-256:	D3A62EDC0A5FDF2D6D0DA4BC51C5F6D52A7861D5322C42973F0B7F54D8711A4D
SHA-512:	6CD6D7438F52F98676E189D5F7A8C1D6186F5C4506DEF689F48CD6C639873D02D44E6CFBC13D6628D75C1F19F380ECDC43B835D5B4193FB82FE5758321F894E2
Malicious:	false
Reputation:	low
URL:	https://cdnssl.clicktale.net/www/bridge-WR110.js
Preview:	(function(){var t,v,a,z;function q(){a=false;z=ClickTaleGlobal.api\|\|{};t=A("ClickTaleSettings.Integration.ProjectType",0);v={clicktaleOnly:0,m1:1,m2:2,m2Prime:3};n();h();w();l();d()}function d(){if(!z.ClickTaleOnReadyInvoked){z.ClickTaleOnReadyInvoked=true;var E,C=ClickTaleGlobal.scripts,D=function(){if(typeof ClickTaleOnReady=="function"){ClickTaleOnReady()}p(window.ClickTaleOnReadyList)};if(C){E=C.dependencies;E&&E.onDependencyResolved(D);E.notifyScriptLoaded("wr")}else{D()}}}function B(){window._uxa&&_uxa.push(["afterPageView",function(){if(_uxa.push(["isRecording"])){(typeof ClickTaleOnRecording=="function")&&ClickTaleOnRecording();WRPubSub.publish("recording")}}])}function A(F,C){var E=F.split(".");var G=window;for(var D=0;D<E.length&&G;){G=G[E[D++]]}return G===undefined?C:G}function n(){var C=e();if(window.ClickTaleSettings&&ClickTaleSettings.CheckAgentSupport){ClickTaleSettings.CheckAgentSupport(function(D){return D},C)}}function p(J){if(typeof J==="object"&&"length" in J){var I

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141492
Category:	downloaded
Size (bytes):	49696
Entropy (8bit):	7.995313044786981
Encrypted:	true
SSDEEP:	768:z3DVBhZjMlfZAC5OzOo51h9TG/vwkVC+VWAK0zuPKKdYkevC3MPGp7Lu:/vj0fmDio7SpVC+VGVPKEIviME7Lu
MD5:	3D5FBC4186EF45B04DE8BF8BA6861967
SHA1:	EFB2759A486E84730182091A9710DCE3EDCD8F6F
SHA-256:	099E7356BAE6752C1A7052BC9DE4AD113187EDA6A1385794E12955F7AE636D25
SHA-512:	949516390D8CEA5A1057647B2487634CFCFBD2510D9571965DC714954723EA9FA1FA79C240671888613964D8D43C921DCA8BAE3802E15C98F127B82092E51126
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js
Preview:	............[.8.8...+.w..OL..hp._..nf.0$.......t....e .o?u.l.q.../g..J.T.U.J..k.S......T.......T.~9:?.........h.........;?.L.......W..J.U.`.F.0r..W..o...$..+....O1N....(4...R..".r.F.s...C..j.o..J...3<.%. L.....G.M.%.Ee.x".<....?..8.$.H.........Uq#Q.ER..Qr..W..)k..3.........N....:.....:.e.`.\...V........p.[....n+.......Yu..o>N.n."z.&N......!+.W......s.6r.D.....{..q/.....:z...3h....8.g31.....X...T..a...W..Fsg....h..u.$.........>..7.p~;uch..+t...i.?..3...+.r6.A......[g:..r.?S..............;.=6.&.`.....E=W.j.oaT}p..Vd.Np..\.i^[.....u'~..".M.:q.fF..._[..rM.F?....q.1.....S}.c_...\_./....y}6...._1-\|p..l@..[q........k.?&.0^_.Cw:s.Rs^...IR5..Bv.yYX.....N.....O..epmF".GA...@...q..;...v`M.%3..#..,DMLTY+..g.........d+.>...{}.&N/..g-#FV.V.p.......Xs.(..{..]..-...!..F...XQge.X.MP.&.3....Re...b23v..M.a...'......c.i...9...l..Z.`.F.._%>U.'.."..;.M......D$.}..~\|....*u...ma.f:\......p..jy.<.r...cjG.N...{{}M_oEr8%...\|.......d..nZ.S..H.Lx...x1t.

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1158), with CRLF line terminators
Category:	downloaded
Size (bytes):	8074
Entropy (8bit):	5.212007462258707
Encrypted:	false
SSDEEP:	96:2J/nMdaBU+hx1fQeWYZRRDLC3J8RMmVmafpSZtSxK2mQmeE78Ip86m8QMoFelt4k:+BfQADnGeug7+V0eZYKIjd1hfPi7
MD5:	A2E2AAA363CAF54158A9C307B134BDD6
SHA1:	5FD8223462A98F0B2C2AFAFF6DCE341D8D4ED47E
SHA-256:	E340D1F83D8B10411267D2B52961FFAF73DA8847FE100705861AAF703DF56F25
SHA-512:	712663A254B1726A225C0424C745586C008A988A5B1649650C0F667967EB3328A4047598D70784E8BB52BB9E5E904165F6A3576FF14091B9B281398D3B83130C
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/videoplayer-nocookie/embed/RW1dQ5E?pid=ocpVideo3&jsapi=true&maskLevel=20&market=en-us
Preview:	<!DOCTYPE html>.. CREATED BY VID TEAM -->..<html lang="en-us".. dir="ltr">..<head.. data-info="{"v":"1.0.8745.29656","a":"c8fc48f1-a237-44d8-b306-f4d035e201c7","cn":"OneDeployContainer","az":"{did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odeastasia, dt: 2018-05-03T20:14:23.4188992Z, bt: 2023-12-12T00:28:32.0000000Z}","ddpi":"1","dpio":"","dpi":"1","dg":"uplevel.web.pc.webkit.chrome","th":"default","m":"en-us","l":"en-us","mu":"en-us","rp":"/en-us/videoplayer/embed/RW16rdm","f":null,"bh":{}}">.. <meta charset="UTF-8" />.... <meta http-equiv="x-ua-compatible".. content="ie=edge" />.. <meta name="viewport".. content="width

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 358 x 201, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	88312
Entropy (8bit):	7.9949792207429535
Encrypted:	true
SSDEEP:	1536:vSmabYHDaDB8PqUpus+r0bIgQJvDoBqeEHSw3ndjzLc7fB+fV:vnJHDaDB8SUsHvEIeEyGdH4O
MD5:	9081C4B6E7FED838E741989671FD992E
SHA1:	5EB6A74C7BCA598E42699036BE0916753E7D9559
SHA-256:	84899376B0F82485FBCEF28D12C5083DD9D7518975C271C9B5A8F81CDBFDF10F
SHA-512:	00EDF319CDD9939587CC80ADF3C6CD6A86F444B2AC37974C6E4504477CE4BF512A19DFACA13769220CE515FFA45066DE48D2DF463E44AA2FE3BB3D83C63A1877
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/be822cca-c6ba-478d-8885-171897317c74.png
Preview:	.PNG........IHDR...f.................pHYs...............X.IDATx.\|.w.mYv....>./....t..z.0.d...A...$..J....]..\r.d.U..v.U.d..Y.,.\"i..I.$E"....3.....~.{_.......{.}_.w..w.9;..[a...../.x].`...T..T.A.!.......H;.r=.......@`.i/......P.}...fF".......J.ff......&.2...a...z.QsU..@J,.....HuX....2R..8.......L..'..1..8.$4..2....$cA.}.&@..%...].%......,..5F..&.].2..0.f...f..+.ms....q....f....W...\|`...ad.ca.D.73vzp...f....K..\.RYR.".<.X....b}..Y$Y..If..O.\|..t.Q4...I.l....)~g........I1.^.dQ.I.Q.W..."...i....mp3..=.G..K.0M..rd....@..%...+.P...8..R.S...v..`NHTG6.eQ.g..k.Y.I.SdT.vE!......LJM%.....9.NF.KJN^.8.X..#@U:e.L0H......O.._\QE.ABlb .=n@T{U6..+.F..KRA1.P.".`.:.........h..eP. Q..F..u..}...G..m..u>...J..b.HA.K...l.r.n uR......Pe....f..<P.....B.9.b.....O..M.Uya....X...W.,V/K&]...X.JEv..M.....%..d.(}.).J..G_.W..zd..,.....T..>K#)..p0Hd}.....I.d7...t.u...'.F...........r.Q=%"..+@*...W.`.q...7%...(.}B....j.R.1..(...X.. .....A..=Vi......<.#.(.q<.mF.....,.......8`4k.!x

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	210
Entropy (8bit):	4.7185615700431
Encrypted:	false
SSDEEP:	3:yionv//thPktkl8lz1pxgJlrxnlldiQg4l/ZEoUqOUxA6QiJmu1rmgOtVp:6v/lhPktkqlZYriQbl/6o+UCgOtVp
MD5:	5E136D738C93FDB32C08FDB249905C1F
SHA1:	ABEAA733EAD9D6A3843AAE402AFE8D8FBF0452BF
SHA-256:	5A639AC902DFFEC0B8174E7A2DDA2E18C8038B76FF5C88EC507984E71B7B4A1B
SHA-512:	59D0007D992CD0332E556A8F672C29F0E113FC4CBC1F3F245396A4477E894FDD5ADD9608D115E2FD656D672549713F46F95D4E316A5D0E73D7BFB754F411418F
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/3ae06b5c-45ee-4509-9ca2-e3958a88ab7f.png
Preview:	.PNG........IHDR.............!.@.....PLTE.x.....x..x.!>......tRNS..V...G....qIDATx.....0.D.,.N*.../...D.....=................................l&_..i....t.i.................................i'Y......IEND.B`.

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	6.391875872958697
Encrypted:	false
SSDEEP:	12:6v/7s6UVprYe6IZeuLgou+/CAztgbbvCR00aJzS4VQIjXuYEMwoQIjXuHBOLPMdo:hX7rRkf+/rMcCJzAIjNEMwNIj8Efl9
MD5:	FB2ED9313C602F40B7A2762ACC15FF89
SHA1:	8A390D07A8401D40CBC1A16D873911FA4CB463F5
SHA-256:	B241D02FAB4B17291AF37993EB249F9303EB5897610ABAFAC4C9F6AA6A878369
SHA-512:	9CBCF5C7B8409494F6D543434ECAFF42DE8A2D0632A17931062D7D1CC130D43E61162EEDB0965B545E65E0687DED4D4B51E29631568AF34B157A7D02A3852508
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....D.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...{PLTE.P".J$x......P".P".J$x.........K..K..K..D.o..w..w..w.........................................................P"...................$tRNS.DD...CC..DEC..CEDDEC..CED...CC...DD.c,8....bKGD(........pHYs...........~.....tIME....."4...4...QIDAT8...G.. ...Q..s....?......s.f..a`.A... .bA!..,/dYQ.....a.((j^.m?4..Q.?.....2>.........%tEXtdate:create.2020-05-28T22:34:52+02:00.t.....%tEXtdate:modify.2020-05-28T22:34:52+02:00.)<'...WzTXtRaw profile type iptc..x.....qV((.O..I.R..#..c..#.K.... D.4.d.#.T ...........H.J.....t.B5.....IEND.B`.

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	downloaded
Size (bytes):	91802
Entropy (8bit):	5.3603423050848615
Encrypted:	false
SSDEEP:	1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn
MD5:	CF5CC7F4B57526CC37893DCB83DED031
SHA1:	E953783BE0A7894585778455AAE3D0DF094D6F29
SHA-256:	3A790B6C0D26D7A4D292CB27F992EAFAFF42C37E9318B2AB704207039127FCB8
SHA-512:	2320F9D7811CD773C1E5C2E95A31B39E9FF62A2FA7CA431975873DAB57AE42A75BA720D15AEB47FA2EA127D0766EB5AA15040CFFD04BF7A8CB8BCD7236069C40
Malicious:	false
Reputation:	low
URL:	https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (476), with no line terminators
Category:	downloaded
Size (bytes):	476
Entropy (8bit):	5.856447458258293
Encrypted:	false
SSDEEP:	12:cOgd2z3utLPneSZRafe4WTggFBKu9fvtgizoLJq8Zbj:cO+w3utrne8RK/WTggFUu5vtTGJq6
MD5:	7D44C520C37FFBD0EAC5C4B3D3E63049
SHA1:	795DB04D626E137B439338D53D93F08E9BD152D8
SHA-256:	B2E091D8F5F42FECE940CC4FAA3B8386A10753364193E3DFAF706BF2A188B3CA
SHA-512:	CEEEC60CFDC65DFFFF20A4C66A141C4DC80EF2CE3F2EEBF5DA37F2A5D6A2B2C4B6927051B76BE53B31F69E0930F800FB5A3257C26851904AF47E01D5E315DAE9
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_secure_storage/3.28.1-release_1349276690/lp-origin-trial.min.js
Preview:	!function(){if(!document.querySelector("#lp-origin-trial")){var i=document.createElement("meta");i.id="lp-origin-trial";i.httpEquiv="origin-trial";i.content="A77GUxMF2gPljjeX2xdlt25iXAGDqu3SWLRaxp24NcNGz++ZE9fkggbPexLArxAguTbk/8W5OtGUm5ki+fqC0wMAAACSeyJvcmlnaW4iOiJodHRwczovL2xwc25tZWRpYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=";document.head.append(i)}}();

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	38377
Entropy (8bit):	4.895773702678033
Encrypted:	false
SSDEEP:	768:70i7vMdqIe7d3DfxEhjYUDUEUVU369K6KcCLSpQeAi:70i7v/Ie7d3DfxEhjYUDUEUVU369K6K+
MD5:	7A7E9A6CA7D178006A937A510FFA048B
SHA1:	40AE414A13C3A548A99E12B95712E52733DC9AF2
SHA-256:	E8A204F56107DDAE54CD91117A904247618775B02A8EF8C6CD9A09D8B3CA4787
SHA-512:	C6D1579F9C5C242A7B2A325E86FEB3E916370CF3CDAF69B46646C3C1FBD7E5DD477B36B1D43AC610491C3D6259DA4168F662A83B7BFC4F7CF064A642F2295928
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/onerfstatics/default-theme.css
Preview:	html,..body,..#primaryArea,..#primaryR1,..#videoplayeriframe {.. height: 100%;.. width: 100%;.. overflow: hidden..}.....m-video-player.full-width {.. padding-left: 0;.. padding-right: 0..}.....m-video-player.expand-preview-image .x-sfa-video img {.. width: 100%;.. display: inline-block..}.....x-sfa-video {.. display: flex;.. height: 100%;.. overflow: hidden;.. width: 100%..}.....x-sfa-video img {.. height: 100%;.. margin: auto;.. display: block..}.....x-sfa-video .f-video-trigger section div button {.. background: rgba(0, 0, 0, 0.6) !important..}.....x-sfa-video:focus {.. outline: 3px solid #FFF..}.....c-video-player {.. cursor: pointer..}....a.x-sfa-video .c-video-player {.. position: relative;.. padding-bottom: 56.25% !important;.. padding-top: 30px !important;.. height: 0;.. overflow: hidden;.. min-width: 320px..}....a.x-sfa-video .f-core-player {.. position: absolute;.. top: 0;.. left: 0;.. width: 100%

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20235), with CRLF line terminators
Category:	downloaded
Size (bytes):	42145
Entropy (8bit):	5.832732156117214
Encrypted:	false
SSDEEP:	768:br5zePPdX/PBRbqc6B/7sH8IJw1twGrtAABJ7zOowCdHwQFAeTkXRXuUmN:Qpe/MTw15JBeZd2
MD5:	5AA15DD22E0CEB5BA89D9370B02F22E7
SHA1:	B18DCC105C51A40610F0C1AEEAAC6C0389198F90
SHA-256:	26B284A2D2AF4D13D1C1E6C38709372C824AB11BEA50064DBCA326E91FAF2775
SHA-512:	2F3E9411B2D4240EC4799D07DCBD40B712663E9802550F469E49C218C0F4ECFDD7DA2F2D89800C5809AF434F2F50AC3BBB853AAA3C6184486D64E5D7AE640EFE
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/require.js
Preview:	/** vim: et:ts=4:sw=4:sts=4..* @license RequireJS 2.2.0 Copyright jQuery Foundation and other contributors...* Released under MIT license, http://github.com/requirejs/requirejs/LICENSE..*/..var requirejs, require, define; (function (n) { function dt(n, t, i, r) { return r \|\| "" } function l(n) { return st.call(n) === "[object Function]" } function a(n) { return st.call(n) === "[object Array]" } function u(n, t) { if (n) for (var i = 0; i < n.length; i += 1)if (n[i] && t(n[i], i, n)) break } function rt(n, t) { if (n) for (var i = n.length - 1; i > -1; i -= 1)if (n[i] && t(n[i], i, n)) break } function r(n, t) { return bt.call(n, t) } function i(n, t) { return r(n, t) && n[t] } function h(n, t) { for (var i in n) if (r(n, i) && t(n[i], i)) break } function ut(n, t, i, u) { return t && h(t, function (t, f) { (i \|\| !r(n, f)) && (!u \|\| typeof t != "object" \|\| !t \|\| a(t) \|\| l(t) \|\| t instanceof RegExp ? n[f] = t : (n[f] \|\| (n[f] = {}), ut(n[f], t, i, u))) }), n } function f(n, t) { return f

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	916
Entropy (8bit):	7.720438442767581
Encrypted:	false
SSDEEP:	24:Yuoux1JrA90Wghgc24eKyHjpw3RI87lNi+uu5IGslN9pPySu:rvWghdBeee8BNi+15I9/fPySu
MD5:	BDE473695CDC46B3D6810A1F561FC99A
SHA1:	94F9B012FD1F881078446BBE05A7B1DA78CE25EE
SHA-256:	ED0EC0568B39A870748767E2515077EDEE489EBF64B8EDC64DF1B6615FC9B9D4
SHA-512:	47E0EA293636E61F8CB90F42E16F7D31ECA40713A5B07DC1DB8494C6E9250CC07F14F75D7FE408FB9352C132F2ED8C8B4C3D0E31A8526C3EB410E56D63A2C5DD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........K.K.>Q".E.......8...................<8..?P?c...:[...-.L.Y..$...#...].?.....I...V.y.g.P.P..;.34f.5.g...l.1..:.vS0......).....=.{../e.>.K..s...d.......2.Jt....&.9Wn.{.W. .5O..!...c.o.P....C7..@.N5.../..._.W.r......d......I. .`N._..".$.;.-p....kHBI..../x....]b....&...:D.....>.\..A(K.....>...*...t%..."U..\R....C..G.....u.I...o.....(..V../+5EV..S\|...@Q..:.....V.Rz..qCjz.....C<mQc...>x%...O<J............5..m7;.R.....b{4...q?.l.r...i?s.=.uw...C.jU...D..9..-.I...{..).(.0....LIE..@....-.0.v........H9.....:.&.....3..J...v.j...s...$c..........}...J.Y,F3...'....\|$..,..~.u.....v....u..MY..W.jJ.F.Iu..[..\|./.}^E..i..#&....\..<.A.. 0a.4].^.\|\"....1s...>...K[..c$.DU...j.........2.......2.z..!k..W..(..?.Y..A...B.vd.....z..j...B.:fD.A....k.......+to.&......q..B8$..s.....#.........FQ*P%..Q..b.2.^.."`...,e+.7.......P.. P..EU...e....=V..[\.i~.!.z.M.....\$.8J......

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (32767), with no line terminators
Category:	downloaded
Size (bytes):	463056
Entropy (8bit):	3.766543143949848
Encrypted:	false
SSDEEP:	6144:5+1Nqx4AtUHdOjyiwgSF2V2dpNdrRlW0A:w10hQlj1A
MD5:	13CF5D39051259F3BF0080F626C9CEE3
SHA1:	D9EB0BFCF6A54B6373209AEE93E2195FADCEB6C0
SHA-256:	83878F67FDA42850FE5DFC18BE86576199DFFD6F7381AE3D760437D12ECCD927
SHA-512:	D20833C1A3B18C40FC6020A2D682F5B6DA22404830A782D810374A96B359A48CA54E36A150212C6E8E52CA3EF29FE6A587CFC666D0F71717831F2BC196695B51
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/onerfstatics/onerfonedsconfig.js
Preview:	..d.e.f.i.n.e.(.".o.n.e.D.s.C.o.n.f.i.g.".,.[.".r.a.w.O.n.e.D.s.C.o.n.f.i.g.".].,.f.u.n.c.t.i.o.n.(.n.).{.r.e.t.u.r.n. .n.}.).;.r.e.q.u.i.r.e.(.[.".w.i.n.d.o.w.".,.".j.q.R.e.a.d.y.!.".,.".O.n.e.R.F._.O.n.e.D.s.J.s.l.l.".].,.f.u.n.c.t.i.o.n.(.n.,.t.).{.n...a.w.a...u.t.i.l.s.=.f.u.n.c.t.i.o.n.(.).{.f.u.n.c.t.i.o.n. .u.(.n.,.t.).{.v.a.r. .i.,.r.,.u.;.i.f.(.t.).t.r.y.{.r.e.t.u.r.n.(.i.=.J.S.O.N...s.t.r.i.n.g.i.f.y.(.t.).,.i.=.=.=.".{.}.".&.&.n.=.=.=.".t.i.m.i.n.g.".).?.f.(.).:.i.}.c.a.t.c.h.(.e.).{.r.e.t.u.r.n. .r.=.'.{.".e.r.r.o.r.".:. .".E.R.R.O.R.:. .c.o.u.l.d. .n.o.t. .s.t.r.i.n.g.i.f.y. .{.0.}. .{.1.}.".}.'.,.u.=.t.y.p.e.o.f. .t.=.=.".s.t.r.i.n.g.".?.t.:.".".,.r...r.e.p.l.a.c.e.(.".{.0.}.".,.n.)...r.e.p.l.a.c.e.(.".{.1.}.".,.u.).}.}.f.u.n.c.t.i.o.n. .f.(.).{.f.o.r.(.v.a.r. .f.,.i.=.[.".n.a.v.i.g.a.t.i.o.n.S.t.a.r.t.".,.".u.n.l.o.a.d.E.v.e.n.t.S.t.a.r.t.".,.".u.n.l.o.a.d.E.v.e.n.t.E.n.d.".,.".r.e.d.i.r.e.c.t.S.t.a.r.t.".,.".r.e.d.i.r.e.c.t.E.n.d.".,.".f.e.t.c.h.S.t.a.r.t.".,.".d.o.m.a.

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	910
Entropy (8bit):	7.708611583181537
Encrypted:	false
SSDEEP:	24:cF5h8g1wVRvfBvRytXOjORraYAgxQyXLxwanf43tSKOKut44Hb:If8KwVRnGROjOkTgx9XdW3iPHb
MD5:	EA5F81175470F655A23E40E21858D629
SHA1:	42FF00908F886AFBAE308D2E2DBF4CE2CE00B8CB
SHA-256:	23713BA4DDFFF35A4D38062986DC4B57687E7B7E3D61AF2AD72944367610D82A
SHA-512:	1F49C611BF3904B34A841B1411764D9B56876C9C557169EFBA7DDB41D7C758182DBA01594F225AEEA5339CEDAE59837AD45B8A6B9EF6DE5124771D18BCF40202
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 z...p....K.K.>E..D"......(.D..d...E....8t.ug....R...._J.0........z..n.%.....Q...".j-.K...u....>../...M..JE..0n...I..lo...b.....G...&...=0,i.(.}YC5r !aQOn$...,.@...2P.V..};...5.....s#k.....?.....yx.....O...9......o.M+eb...H.m..U0..V.\|_.............&.6.w;8.m.[.P"z...~....y........h$x(.....!f=FS.d.PQf........._....l5!j..L]P.....q!.UJ../\.7a..r.dl.qWN.Cqfm_.Ee.h..n#..I.KM........t.9V.DV./.5>.H.....<..H.\|..Z?..#4..P......?t.]f........9x..s.3.,]..z.l........n...(.q.Yw....=.~.,...z........>.6haX.....H.,..6.A..x..W....a;C:5T. ....K........M.p9.h.1:A.[.9..E..$.9........t\..}q-~.g._X....W...S....p.U.(...&...=...<.._[.m...,...$p?~..n.....l.....4.;.A..2.?E...j_..2~..A..5......SeU..%..K(.o.<..0..V....p..2.t..)....%...0.X.e.Q.N.......5...k..DP$...&u.,..Z.~f.6e.r.>....nR.(..$..)....yJ.0......5.....J..^..I....%:...B...8.;(...WNK.:X..y.6+Z<f...C....

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4466
Entropy (8bit):	4.815200143314862
Encrypted:	false
SSDEEP:	96:G9DjiPeS9cXL1V04LCJ3t8Q/sWJMqRhSgVNtHYRq9JNK2zRri4KNpcrgcG8K5VNU:G9DIHeXLToJuQsWJhXSgVNtHWq9JNK2T
MD5:	608ED94DBBE53914E7284F9D0BF56B46
SHA1:	32EC37ED5ABE203EBEB3E552CDECAF2EA9014196
SHA-256:	188B658300213BE394E47A973D27D0FE5FD8F9A150EDEC30091C1F6C409C71D1
SHA-512:	A129758D575C5B3CD577955FCE4EC13454DB2439D0C20586002500C20F07C7FA8CC9D79739C84CA23D92F1F33B7E3E52F705214CAA3A38410FF44A2814163D5F
Malicious:	false
Reputation:	low
Preview:	{.. "agegate_day": "Day",.. "agegate_enterdate": "Enter your date of birth",.. "agegate_fail": "You may not access this content.",.. "agegate_month": "Month",.. "agegate_submit": "Submit",.. "agegate_year": "Year",.. "audio_tracks": "Audio tracks",.. "agegate_dateorder": "m/d/yyyy",.. "browserunsupported": "We\u0027re sorry, but your browser does not support this video.",.. "browserunsupported_download": "Please download a copy of this video to view on your device:",.. "cc_appearance": "Appearance",.. "cc_color_black": "Black",.. "cc_color_blue": "Blue",.. "cc_color_cyan": "Cyan",.. "cc_color_green": "Green",.. "cc_color_grey": "Grey",.. "cc_color_magenta": "Magenta",.. "cc_color_red": "Red",.. "cc_color_white": "White",.. "cc_color_yellow": "Yellow",.. "cc_customize": "Customize",.. "cc_font_name_casual": "Casual",.. "cc_font_name_cursive": "Cursive",.. "cc_font_name_monospacedsansserif": "Monospaced Sans Serif",.. "cc_font_name_monospacedserif": "Monospaced S

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/collect/?pid=7850&fmt=gif&cookiesTest=true&liSync=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	3405
Entropy (8bit):	7.746365214902903
Encrypted:	false
SSDEEP:	96:+ajKwEjW5hEL8TWGeASJftZ5RpHn7lVhamJ9ksLUrXi:+aGwEjci2WGk3ZnpH7lVhZl
MD5:	C020494D9B4F0D820FFB8C9C16448CF6
SHA1:	585F1260BDA235E6A0251E5EEAC8E57FDEC0483C
SHA-256:	4BA9ABB6433C5815AE73A512CAE639AE674BF6D642DBF1487793ED3E65E4E248
SHA-512:	7E0FBB53D61256F2A236B9600563CBFD1AAE4715DF948B591D01C2CFCE6EC028EC205AAE429D2FFB0D624D97CA98D70C43C307E5EA8277307AD3D9D75EB0ED04
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/Icon-Outlook-111x111?fmt=png-alpha&wid=111&hei=111&fit=crop
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm.........,iloc....D..................................Biinf..........infe........av01Color.....infe........av01Alpha.....iref........auxl..........iprp....ipco....ispe.......o...o....pixi............av1C........colrnclx...........ispe.......o...o....pixi..........av1C.......8auxC....urn:mpeg:mpegB:cicp:systems:auxiliary:alpha.....ipma..........................mdat.......niP2......T..yF..e.s<b./..u......~.6\..Y_ C_.3..=..i..?\|.."....5............P..!n....}...T\|..s........3....a.3.b9.r......(...g.&..4..a..!.p.c..Tu......m..Tg..(u..i0...-.....].>\t...........1..Y.S..........I.%.....u....2...)...n..M_.....r_.......{..$%F.@...f2.......[......?......HQ.....?..._...@.J>...@...M...8..Sv..4f\|O..$..V....c.$..\.....wr.R..8V...[-".%./...$.../-.k...QS6.K`..bO.D>fr.....(^..,..+J..,C..H...R.......nh...B2......Q.......:.........f?.;.QE...Vj. 9.2N.n.LOst.0....7%....n.M.0..Q.$S.......-....

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1685), with no line terminators
Category:	downloaded
Size (bytes):	1685
Entropy (8bit):	4.967356713394374
Encrypted:	false
SSDEEP:	48:812F1NwJjbWCuWHL8rWSLWtPWBMaTWkcWjpWvWrWIulPWxWA:7snBuquPLCPzG3c+CSBSPkT
MD5:	7E9EDAA648AC5BBD2AFB55847CDCDCF7
SHA1:	67644113FC5DEBC0131513C92F571AC7E876F2A5
SHA-256:	C721BADC18FDBF15228470FF8C234A30DB5BB8CD9D710391FA696370B551F6B3
SHA-512:	BB9D1F5785A4B3B27D12F00F0D677F32A71897659EC5A5466FDD858D5CA8A8FCBA5F72422BA7069DF5021CFD096A73175DE184204428DEE488D7B3C38024F7C3
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/userstatesigninheaderview/user-state-sign-in-header-view.css?v=xyG63Bj9vxUihHD_jCNKMNtbuM2dcQOR-mljcLVR9rM
Preview:	.landing-page.--theme-smallbusiness2 [class^=header__container],.landing-page.--theme-smallbusiness3 [class^=header__container]{padding:20px 5%}@media screen and (min-width: 768px){.landing-page.--theme-smallbusiness2 [class^=header__container],.landing-page.--theme-smallbusiness3 [class^=header__container]{padding:0 0 20px 0}}.landing-page.--theme-smallbusiness2 [class^=header__container] p.subtitle,.landing-page.--theme-smallbusiness3 [class^=header__container] p.subtitle{color:#0a0a0a}.landing-page [class^=header__container]{font-family:"Segoe UI Semibold","wf_segoe-ui_semibold","wf_segoe-ui_normal","Segoe UI","Segoe WP",Tahoma,Arial,sans-serif}.landing-page [class^=header__container] h1+p{padding-top:10px}.landing-page [class^=header__container] p.subtitle{font-size:1.4em;color:#fff;text-align:center;margin-block:0}html[dir=rtl] .landing-page [class^=header__container] p.subtitle{text-align:center}@media screen and (min-width: 768px){.landing-page [class^=header__container] p.subti

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (590)
Category:	downloaded
Size (bytes):	1716
Entropy (8bit):	5.2304068952006615
Encrypted:	false
SSDEEP:	48:4435HDQ258U3JqVnCG/6YyTrkzRLj9tSRAE9P:hU25ZqVC6ByTrWRLjSRAE9P
MD5:	4CFFC2C9B55F8BDE649E0D2535A1EEBD
SHA1:	2AAF4DF1E02ED4F5BB48F00A7423F748BF544E0C
SHA-256:	7BB50A050792F761855CC330E0248D037B37DD68FD23FBB7DB8A7E8694F50A94
SHA-512:	599C87219B7E264CFF8E6951192C691E26DFFA88EFC607EDFE9205F1BB08DA28FD61B508FAE93652BE36BE1ADA57E50661490925B247A43C3EB7F24D8CA0C8D0
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/exp-analytics/v1.min.ACSHASH4cffc2c9b55f8bde649e0d2535a1eebd.js
Preview:	'use strict';var experimentationAnalytics=function(){function g(a){return a&&0<a.length?!1:!0}function m(a){return Object.keys(a).map(function(b){return b+""+a[b]}).join("")}function n(a){var b=a.reduce(function(c,e){c[m(e)]=e;return c},{});return Object.keys(b).map(function(c){return b[c]})}function h(a){console.log("sendToVortex Call");a&&a.analytics&&f(a)}function k(a){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:a&&a.analytics?a.analytics.tnta:""}}}function l(a,.b){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:"",at_activity_name:a&&a.responseTokens[b]?a.responseTokens[b]["activity.name"]:"",at_exp_name:a&&a.responseTokens[b]?a.responseTokens[b]["experience.name"]:"",at_activity_id:a&&a.responseTokens[b]?a.responseTokens[b]["activity.id"]:"",at_exp_id:a&&a.responseTokens[b]?a.responseTokens[b]["experience.id"]:""}}}function f(a,b,c){b="number"===typeof b?b:25;c="number"===typeof c?c:200;var e=0;if(window.expAnalytics&

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4892
Entropy (8bit):	5.192246428502183
Encrypted:	false
SSDEEP:	96:AxtrrzrzG4redBred/9red3XredBH0rxLlLeWyevde5aeRVCRLRe49NRw+MNRppZ:AVjsdYdkdad+rxhLLyWdqaWCRs49Y+MR
MD5:	E0F4271D275EA34CF0C969A45C7B21D6
SHA1:	1BB4D00FAD1E313EC3E458C30C6A170A31ED1D59
SHA-256:	4432F77A6977D0AA65487F78EE7D0871D721BF9E950CA72BADC2F769B55B21E3
SHA-512:	AA4ACC39AA583B59E788F735B323236FEC277B37A2476E64318D411F462450383BE2D531E85C55EB3758FFB029DBC5F04CA9079C6B0C4757854CA00102512F0B
Malicious:	false
Reputation:	low
URL:	https://prod-video-cms-rt-microsoft-com.akamaized.net/vhs/api/videos/RW1gt0F
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1gt0F-enus?ver=0b82","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1gt0F-tscriptenus?ver=b179","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeStartDate":"2024-05-17T23:17:30","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RW1ljxA","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1ljxA?ver=f018","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RW1ljxA","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1ljxA?ver=f018","link":{"href":"/vhs/api/videos//thumbnails/

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6125), with no line terminators
Category:	downloaded
Size (bytes):	6125
Entropy (8bit):	5.234103429010352
Encrypted:	false
SSDEEP:	96:W/M/m/i8V//c//55T/hAh6QcVsOZdNABvQUSZacKp3xAxgBxjGYnvDYn79NN7ZuV:W8mi89/M/5xE6QcVsOZdNAJmotp3xAxU
MD5:	97C18402D0D5AD89F12C548A55C8284F
SHA1:	412ACD023C48FA79C9F846040497C74C2EBEC46D
SHA-256:	464730FF27CB58E32D39C58E96330E89983298C72B1B4183A68E0B7FE4D4CCFA
SHA-512:	38C551DBEC500AA1C450FDADE3E24FA16E71066F7CD75E103E6787C8687838E89BE49181C491F1234D29D7CCECA2B9C0C9FA20010548AD4E5F83D66D0AD1F02F
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/feedback/feedback.css?v=Rkcw_yfLWOMtOcWOljMOiZgymMcrG0GDpo4Lf-TUzPo
Preview:	.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful{height:auto;display:flex;justify-content:center;align-items:center;gap:32px}.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful #beginFeedbackHeader{padding:0;margin:0}.smbArticleFluent #extendedFeedbackForm .extendedFeedbackArticleInfoUseful .extendedFeedbackHeader{font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:16px;font-weight:600;line-height:20px;color:#333}.smbArticleFluent #extendedFeedbackForm .feedbackButtons{font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:14px;font-weight:600;line-height:20px;display:flex;align-items:flex-start;gap:16px}.smbArticleFluent #extendedFeedbackForm .feedbackButtonBlue{min-width:auto;display:flex;padding:3px 40px;justify-content:center;align-items:center;border-radius:4px}.smbArticleFluent #exte

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x840, components 3
Category:	dropped
Size (bytes):	267777
Entropy (8bit):	7.9710803451829655
Encrypted:	false
SSDEEP:	6144:DjYT+ivBNRdV1OrNEiozMxdQwQJeD+jbk8ohdMYFr:DsT75NRdV15i5xWhLkR3
MD5:	E79DB6B1E09448922C4B01E54E417881
SHA1:	F063585669584F9226F3D3783036AD8E891A6ED0
SHA-256:	B3A5172802851862013282EEE059F17603BEF662BFA5E4B5AB21D7978B88A423
SHA-512:	BC60236E14BC442E973DA2B6386C01DC91639D0CC11138C9D35A8B36B24B229699318E5B917D4C2196BD389E68D5DC4EAABEE98C05E54DBE32815E5247668274
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41651)
Category:	downloaded
Size (bytes):	131537
Entropy (8bit):	5.2237799798561975
Encrypted:	false
SSDEEP:	3072:1f/HuF3CpxEIqQ0/9d1EwgXAnKxnKKviV:1f/HuZ1ILGV
MD5:	30B7C335C62E5269E2D35B8E8B9F44B4
SHA1:	C6D92B1516EB8F6D44AAF171FB24A1B2AADD0C4C
SHA-256:	10733A5D876108F81C5F78EEE5C9760A739D89C52FA6180C4290B7F909F24346
SHA-512:	5BCE247C84C88F993A857CE2F1E8540C648672DEB6D92A55BC808C33394B784C52866D635BEC8B7CD5E62A7EA4109569AC8BCD1381571B84592ACD6C5901D7A8
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/shell/_scrf/js/themes=default/54-af9f9f/c0-247156/de-099401/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/1b-c96630/db-bc0148/dc-7e9864/78-4c7d22/e1-c35781/40-7b7803/cd-23d3b0/6d-1e7ed0/b7-cadaa7/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/92-10345d/79-499886/7e-cda2d3/db-f3b1fd/93-283c2d/e0-3c9860/91-97a04f/1f-100dea/33-abe4df/19-c0fae7?ver=2.0&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 358 x 201, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	88312
Entropy (8bit):	7.9949792207429535
Encrypted:	true
SSDEEP:	1536:vSmabYHDaDB8PqUpus+r0bIgQJvDoBqeEHSw3ndjzLc7fB+fV:vnJHDaDB8SUsHvEIeEyGdH4O
MD5:	9081C4B6E7FED838E741989671FD992E
SHA1:	5EB6A74C7BCA598E42699036BE0916753E7D9559
SHA-256:	84899376B0F82485FBCEF28D12C5083DD9D7518975C271C9B5A8F81CDBFDF10F
SHA-512:	00EDF319CDD9939587CC80ADF3C6CD6A86F444B2AC37974C6E4504477CE4BF512A19DFACA13769220CE515FFA45066DE48D2DF463E44AA2FE3BB3D83C63A1877
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...f.................pHYs...............X.IDATx.\|.w.mYv....>./....t..z.0.d...A...$..J....]..\r.d.U..v.U.d..Y.,.\"i..I.$E"....3.....~.{_.......{.}_.w..w.9;..[a...../.x].`...T..T.A.!.......H;.r=.......@`.i/......P.}...fF".......J.ff......&.2...a...z.QsU..@J,.....HuX....2R..8.......L..'..1..8.$4..2....$cA.}.&@..%...].%......,..5F..&.].2..0.f...f..+.ms....q....f....W...\|`...ad.ca.D.73vzp...f....K..\.RYR.".<.X....b}..Y$Y..If..O.\|..t.Q4...I.l....)~g........I1.^.dQ.I.Q.W..."...i....mp3..=.G..K.0M..rd....@..%...+.P...8..R.S...v..`NHTG6.eQ.g..k.Y.I.SdT.vE!......LJM%.....9.NF.KJN^.8.X..#@U:e.L0H......O.._\QE.ABlb .=n@T{U6..+.F..KRA1.P.".`.:.........h..eP. Q..F..u..}...G..m..u>...J..b.HA.K...l.r.n uR......Pe....f..<P.....B.9.b.....O..M.Uya....X...W.,V/K&]...X.JEv..M.....%..d.(}.).J..G_.W..zd..,.....T..>K#)..p0Hd}.....I.d7...t.u...'.F...........r.Q=%"..+@*...W.`.q...7%...(.}B....j.R.1..(...X.. .....A..=Vi......<.#.(.q<.mF.....,.......8`4k.!x

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	150348
Entropy (8bit):	7.985709840300186
Encrypted:	false
SSDEEP:	3072:by/jtihJ+zoLggRVg4UWdgyBVxv4VTmkvzwABsS1puERQqzoWMZCSa:byr4eFgRVg4DmgVxv+vzwAKWuEiqzo9a
MD5:	9AEA7C1DC69D1CEA907C024EAB971118
SHA1:	4986A5DEAB1BB0C9F0A66E5EA996BCE6F56683AA
SHA-256:	CE4C6516F665D6893FDBE6E537C75E52213793BC2A6C55457FA63EBF1344112F
SHA-512:	D5F0E0CBCACF2B53C279E07DB91AEC0798F6F1549B2C81CE2746CB0692334927F977C7C526C6D10411291E3D889EAEAC02B492179459E37BABE5622CCC84CF23
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/2d61de8b-ff96-4a49-afa5-0795e254cc87.png
Preview:	.PNG........IHDR..............x......pHYs.................sRGB.........gAMA......a...J.IDATx.....m.u....~....Y.JJq\<\|H.H..8\|q..m6.J..T..Iq..nT.R).......Vl..i..(.AI$.k.f...H.(.t...R.5x...g.........$..^....{..}....9...t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:&.3..L.E.{.#O...v..{..<.<.Nx<y.~...p......%.b...q.W=....\.....W..3f.G.X>..'....y.7...t.3=..$.g:.#..`..m.n.^.....\V.;\|Y......mK...\|..../.......v..5%....a.....a{\|.....5\|4n.g......._....Lgz..I..t.G ...>r...[...S.._.=...\.>.\|K.....a...X.7...x.}./.._...$.>DZ.....^.".C.=.\|...lY>.........3v.3..N'.8...t...<y.......OE.....{...X....+.../w..._~...B.v..~.........:W.."...k"A.e...^.\|......j?..w...v.3..J'.8......7...j...L..}..D.M.^h....}.h.;+...>.%-.Q....h..l...p..os.H@[....C{A...7s...\|~qYoN2p.3=$.$.g:..9.....]_.......\|2......C.../KP..o0./.}\|...1.......!.b...I.......(&Y..5C\

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1818)
Category:	downloaded
Size (bytes):	233644
Entropy (8bit):	5.185249283125607
Encrypted:	false
SSDEEP:	1536:7Pv4giw/1v1MlRNUtHeVFd3F9mxCmySVbcCjh3md2svbrfEfGviI99ByBuBcB4Bj:7Pv+VAVbcCjh3md2UrfEf4QsC+qo
MD5:	2D76B4E0015D8713FE15DAED430E4FAE
SHA1:	B1E501FCB4949A69645E04906B0C2B6A1003BEAC
SHA-256:	733A8369C03E7AFD86F01E18D04F583EF4D0F7DDB7A16BB7287AC40741BC6EE3
SHA-512:	7B7BBE325A03DA9062FCC74EC016B9B4AD546FD37CEC2CE9DF44DC71EC8E105727D2506BC2F8C63A8F328016000B945A7FA11E9C0152524E750F34B56178465E
Malicious:	false
Reputation:	low
URL:	https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-m365-en-us&buttons=lpChatSales
Preview:	<!DOCTYPE html>.<html lang='en'>.<head> ..<title>iFrame Cart Page</title>..<meta charset='utf-8'>..<meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'>..<meta name="format-detection" content="telephone=no"/>....<meta name='viewport' content='width=device-width, height=device-height, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no'/>...<style>.../Empty MR3/...body {....background-image:url('https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_75.gif');....background-repeat: no-repeat;....background-attachment: fixed;....background-position: center;....background-color: #f2f2f2;....margin: 0;...}....@font-face {....font-family: "Segoe UI";....src: url("https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2") format('woff');...}......* {....font-family: "Segoe UI", Arial, sans-serif !important;...}....body #lpChat .lp_dialog_container .lp_buttons_area .lp_confirm_button {....colo

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (780), with no line terminators
Category:	downloaded
Size (bytes):	780
Entropy (8bit):	4.992440844788031
Encrypted:	false
SSDEEP:	24:a4+A24uJEVdLV+awt+a9QdKCHXgc+a9aaXgc+a2XgcS:a4+xJEV9Vbwtb9QT1b9ac1bw1S
MD5:	CB3531F56366637C3E928C625264646D
SHA1:	3F6B2AC9B3A9C76EF8410FCA587105F1D95238A5
SHA-256:	47F3F44C9BC3F47A111D004476F051D5684D9FB7526EF3985A6540F6D6B16E93
SHA-512:	5E99E7DCADC11B1BD462D4CE8C1BF4334857E830EAFD4AECBD689F9C3869689D25A568C8B91ACEC69E7A6B1E2FD033DB47D7F84DC260F92BE3823203FCDB8D1A
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/ArticleSupportBridge/article-support-bridge.css?v=R_P0TJvD9HoRHQBEdvBR1WhNn7dSbvOYWmVA9taxbpM
Preview:	.articleSupportBridge{margin-bottom:-40px}.articleSupportBridge .bridgeHeading{margin-top:40px;font-family:"Segoe UI Light","wf_segoe-ui_light",Arial,"Helvetica Neue",Verdana,Helvetica,Sans-Serif;font-size:2.4em;font-weight:bold;line-height:1.333;margin-bottom:15px}.articleSupportBridge .bridgeToken{margin-top:-30px}.articleSupportBridge .supportBridgeCTA{text-align:left;margin-top:-10px}.articleSupportBridge .supportBridgeText{text-align:left}.articleSupportBridge .phaseOneCTA{text-transform:uppercase;letter-spacing:.975px;text-decoration-style:solid;font-size:13px;text-align:left;font-weight:600}html[dir=rtl] .articleSupportBridge .supportBridgeText,html[dir=rtl] .articleSupportBridge .supportBridgeCTA,html[dir=rtl] .articleSupportBridge .phaseOneCTA{text-align:right}

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 528 x 308, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	59686
Entropy (8bit):	7.959336940636541
Encrypted:	false
SSDEEP:	1536:qXgMtwztjmT84J5Vnhw1gyUeg04SmiRdTSRC:Caztjm7fVhw1eeg07b/qC
MD5:	D64E27C255582BFDF91A0031E15098FC
SHA1:	EFD8F560E9959483BF5B3AC2F32D45E706DAAC7C
SHA-256:	9ABA33A3527FF6136556534082C289E8AD7D4428C3B79D3FAE7C31E023A7B967
SHA-512:	CDC6D2656B9734BDE82A2E7EDBDCB4F6BAAE4CB447F0F7052090DA822327AA1324907F2D789C4391CC342CDC483D499C1BE981B8C74BF7322BE05ED3795E5D4D
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/163bb596-d9da-4274-8030-1f3be23590e7.png
Preview:	.PNG........IHDR.......4.....J.......PLTE..................{.....{.......................................................................................................................................................................................................................................................................................................................................................................................TLd..............'....QDY.R(...{.lhs................\|....==_..._.\|....kKint../n.o.20O..{^...........3$2d........NUw....Y^_....=.G...........ryH%0.<..wl$%B..0Yi..2..q=....B.^..K0G....._04.........dV.R;.]b....l.p.x.Ey.y....aQ<.I.xjx=<...V.b......=BB-U..B7.......}...3.Q...Q.l.$.\|.~...0.JU.n....J..8X"....tRNS...%....Q> .A....IDATx..Kh;U..U\|e.....+..@b.UPc...D.B..4>F....#.....">A%-..RWU..@..].......B..Dp#n....Mnc.u..}.LR...w.SO._..p.....:...O}.P....S.....t....M.......+..Y.\.

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4899
Entropy (8bit):	5.228930176991416
Encrypted:	false
SSDEEP:	96:AxtrQzrvG/reMEreM/YreM3yreMBPrxLg8LemyefdepaebBCRLe49N1G+MNppeGf:ACfjMZM9MrMFrx7Lry2dKaICRC49G+MR
MD5:	FC4E6B9E85E0355070649974751168A6
SHA1:	453D8D1397FCD1B5DDAEBBE185203C2CA6C1B759
SHA-256:	86D03D395E8726913133260B9D02D993E657E601F75A65318F7AB9ED646A28DA
SHA-512:	52D04FDF1B6C800F7D6D53D7BD400313B180438C19E1BAEC9BFAF899B137F3D73B0867ED6A7FF762DBE51B18CAFEABDF2E0C2A0FB3DC8CA6AE47E8A647EE36A7
Malicious:	false
Reputation:	low
URL:	https://prod-video-cms-rt-microsoft-com.akamaized.net/vhs/api/videos/RW1dIiN
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dIiN-enus?ver=918b","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dIiN-tscriptenus?ver=761b","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeStartDate":"2023-10-24T17:13:54","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RW1dNAQ","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dNAQ?ver=5ff6","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RW1dNAQ","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dNAQ?ver=5ff6","link":{"href":"/vhs/api/videos//thumbnails/

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	388170
Entropy (8bit):	7.957928867019596
Encrypted:	false
SSDEEP:	6144:DnCcHiiAdV6hUPmcql2OD5vwTpB7Zq7PkXhxWpCwqq7RhuCVVcpbvSAhnvFq08RA:D7Hi3IU4dDyBLXrWYK7eSAhb8RNc5h
MD5:	946927D566C05AFF4A44C1760BF32743
SHA1:	5600CE2F4E895096064709F32AF028CDBBA0F995
SHA-256:	33D787E08C6F2BC685B9B4F09E3A2A0C7FBF25669A25E28C7E37FC4ABF6B3625
SHA-512:	548D6102BE8D37B4BB9C45583FEFB0D5F7716927C64E3B4AB2BD453F71863E53C3CDE937A794A8EE2192996A7AFBBC03F4E96D4D3BB6DEC755DA71F6870B6363
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIiW?ver=c095
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3" xmpMM:DocumentID="xmp.did:1D29C061686011EEB25FFF87BA6598B7" xmpMM:InstanceID="xmp.iid:1D29C060686011EEB25FFF87BA6598B7" xmp:CreatorTool="Adobe Photoshop 25.1 (20231006.m.2353 10d5734) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c780726c-110d-4368-9520-476e0e8bd161" stRef:documentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	73501
Entropy (8bit):	7.274239603253508
Encrypted:	false
SSDEEP:	1536:m5++++++++++++++++++++++++++++e3XsuNwDM17iYdtYGb40EyUPP6+BpdMhn9:V3XsumI1DEyUPyOpkM7YVVVVVVVVVVVN
MD5:	471B948CA93626961E6ADE6DE66FB747
SHA1:	F70E8C1A90732C23BFFA5DC0C417FDF0274EA3F3
SHA-256:	98861B25409C0C097A5F1FA61535701E58F2B0C9F7CC951B0AE1E988238D38E1
SHA-512:	1AD51DF041DB63A5130376D4C645EC16D2C3D2BA0F0635F185C04929AE3D96415273974B03D0898DC057AB50397EED9DD5A4807AA4D6B07D95B7E9520C494502
Malicious:	false
Reputation:	low
Preview:	......Lavc58.18.100....C...........................................................##$++3..............................................................................!...1Q2aqA".#.R..BU...3..s..r4bCS..$.T.5e.c...D..Vd.f.%......................1Q!A.a....q....2"...R.bB.#.r..3.....c......8...."...................?...k]1.<...Gq_f>..#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....i..w$.:k....Gr@#....k]1.<.......4..;.5..GM}#.._H.H.t..;.5..GM}#..

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=16, height=3456, bps=0, compression=none, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS-1D X, orientation=upper-left, width=5184], baseline, precision 8, 358x201, components 3
Category:	downloaded
Size (bytes):	54081
Entropy (8bit):	7.37951740253037
Encrypted:	false
SSDEEP:	768:qWmyD2U7WmyDYTu7nN9LpFiiRg5Yy9er/HSRMJWcT6dbGvLMyUO:bTuFk5JeTSRuWcT6lGTMlO
MD5:	B75B9088BA1F35D4B8C4ACDE4EED0EAD
SHA1:	DD37D3AF77580393D662F90CF97CD14E371A0EED
SHA-256:	1AF44BBF40E73FBEACB4AA6F4A295A6E7F0FAC4BBAD77C4E97D811354F93A194
SHA-512:	2D475E0C95FAB87352AFD918F130AB0E94414B8F4F1E027972D2CF4935C81C0DC47793F9ADB584DCC6BE282A214BFF11EB08AA24478FD028553175393BBF3E75
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/e8353844-a8a1-4be1-8fca-18c6281bfb14.jpg
Preview:	.....`Exif..MM................@.......................................................................................................................................(...........1.....".....2...........i.........0..........Canon.Canon EOS-1D X.......'.......'.Adobe Photoshop CC 2019 (Windows).2020:04:08 10:10:41...!......................."...........'...........0...........2..................0230..................................................................................................................43..........43..........43.........................f......................"........................................................................1.........2.2.........@.4.........`.5.........x...........}...#....2019:06:12 12:51:53.2019:06:12 12:51:53..jJ...B@...........................F....................052011000029.............F....................EF24-70mm f/2.8L II USM.4655002051.........................................(.................................v.......H......

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 40x40, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	502
Entropy (8bit):	7.465743629081189
Encrypted:	false
SSDEEP:	12:7wIkGa85QxcGqFzcZVr4PE/j+MFPh86DC9ft:7wIZNBQAPkBFxDC9ft
MD5:	419F88E695A62CEC374CBBE759F11754
SHA1:	69509DDECB1B082020907299471177772DB59070
SHA-256:	2C13442D9CAA9698D2D10443EB6F0CFC395DD220E60763AE0C3A4A6044DB7603
SHA-512:	381537E55704202899317E4780520F66EC65C0F6CDF59633E61B7E880FB056379DFD539A3CA2C890BED3087DAE0F56550071C7738B6F372BD0514531F31F2B49
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........(.(.>)..B!..V.T..BZ@..G...lJ........`X........?.?...............W..../IHB.....nXv.N[~+..l.h2{..6.o.....b...1.6.s...<.<...[Q..w~....S.7..........s`\|..Q.,..B.....V...i?.cH.r>.%..j#9..q.eL............s....q...d....... ....X{.,.".x...e........._.....g..#..9./.:J.......!w......,$.,.....yG.s5....d.....L..r.9......0.>....*..G.q......#...F.5........}.'R..W..'.W.........1....... .........:......y.c1l!.. .X..:.7/7..a...M,....N.x.....`.j.85P.}{Q...q.E..T....0...

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/uhf/dist/uhfbundle.js?v=of4Bk4iHW2lu2zc7UaUcCo47rVLNSJYX0ELAcivbHkg
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1158)
Category:	downloaded
Size (bytes):	7935
Entropy (8bit):	5.175600779310663
Encrypted:	false
SSDEEP:	96:jJ/nMdaBU+hx1fQeWYZRRTaQV72viMhKz7pCCtS5NI2Tmtnm8Gu8Qf8otFtMmOeC:pBfQATbJlnheBIeffKIjd1hfNR2M
MD5:	864A24D7C4A1097F30B215E79CB41967
SHA1:	CE21463CB4C1509C45EDA1B12FF71EF4AB578DD5
SHA-256:	7756407C953FC5FB0B4B2E965A32B5D129D73266F26A1A37D107C8501EC85767
SHA-512:	A83980A658DD2CF73DD711FAA09DED768E6C85E64E5A868B396B69BB7C6964643128D517F01A7873B247211631C6C2DA9E16559BEE3D44795997AA24FBB8A5DE
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/videoplayer-nocookie/embed/RW1dIiN?pid=ocpVideo4&jsapi=true&maskLevel=20&market=en-us
Preview:	<!DOCTYPE html>. CREATED BY VID TEAM -->.<html lang="en-us". dir="ltr">.<head. data-info="{"v":"1.0.8745.29656","a":"c8fc48f1-a237-44d8-b306-f4d035e201c7","cn":"OneDeployContainer","az":"{did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odeastasia, dt: 2018-05-03T20:14:23.4188992Z, bt: 2023-12-12T00:28:32.0000000Z}","ddpi":"1","dpio":"","dpi":"1","dg":"uplevel.web.pc.webkit.chrome","th":"default","m":"en-us","l":"en-us","mu":"en-us","rp":"/en-us/videoplayer/embed/RW16rdm","f":null,"bh":{}}">. <meta charset="UTF-8" />.. <meta http-equiv="x-ua-compatible". content="ie=edge" />. <meta name="viewport". content="width=device-wid

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.170914521951841
Encrypted:	false
SSDEEP:	3:S0KBRqSABJTiAUYFgW:S0H/TifW
MD5:	9F23F2E42529DC6328DDB0515A9528B6
SHA1:	9F99006DBD946A1331D006C036EC15C8F107C767
SHA-256:	215DD330DBAC4B685D846B2851CA780649411B1883CAB7740A89750C7E072E64
SHA-512:	66DA9CAACBFD30C7E22B74855A58C15F00A72B96F2C2B358E3D71F8AB45682BC588BEED70C5DF3BD3C8E6DD3D2E6EE03320EA9BC2FD5DC09AAD75D38B0776EAA
Malicious:	false
Reputation:	low
Preview:	HTTP method not allowed, supported methods: POST

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4921
Entropy (8bit):	5.222250141174727
Encrypted:	false
SSDEEP:	96:Axtrozr9Guzre0kre0/Qre03yre0BYrxp8LUaWyUavdUa5aUaFCRpaO49Pag+MPx:Aetc050l0L0CrxKL4yZdPaPCRV49N+M5
MD5:	88F3A78DC9998D2E19C6B045DDBD4507
SHA1:	F8DCE60A4BB6E8693FDA595CBA1E29208E853531
SHA-256:	74E48756DB80C95BE13382BEA1E5D62C7BD9B808C135FD4E02E063485F674572
SHA-512:	39D415EB8ADEC62896941219D3803AEE5995D176EECD586C57DEC3ECF40EE30F49071373634B6CC13790F2104FB712937AC9573C24E349C4021975E69A263D7F
Malicious:	false
Reputation:	low
URL:	https://prod-video-cms-rt-microsoft-com.akamaized.net/vhs/api/videos/RE4EIXC
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-enus?ver=e63f","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RE4EIXC-tscriptenus?ver=63d3","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeEndDate":"9999-12-31T23:59:59","activeStartDate":"2020-08-31T22:25:51","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RE4EIZB","url":"http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RE4EIZB","url":"http://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4EIZB?ver=f4a3","link":{

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16665
Entropy (8bit):	4.994689912697386
Encrypted:	false
SSDEEP:	384:BunBaB7zl+fRRQAMniuUkC0UkFPM08D7vwjPOPC:EqhiuU6POPC
MD5:	431D8804A7BA2AC0993A91964F19C890
SHA1:	1463EC1AD3B9B984E302EC5D57BB5AE841BB43B3
SHA-256:	60B7CE9C7EF5F284A139029735EEA3A618D4E35A3A3CC62BD73B82BF4BA7D9D5
SHA-512:	7974039890AC1F1521A3CE8D57BCEED9F530F1DDC74183D62DC02ABC545F53DD5259548C1465E049FCC47AC522CF0A9FA4AE36CF7ADC0F0463F2B6275AA7856B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/css/index.css
Preview:	.productplacementchoice .c-choice-summary {.. min-width: auto;.. padding-right: 12px..}.....productplacementchoice .c-choice-summary a {.. padding: 0 36px 0 0;.. margin: 0;.. color: #000..}.....productplacementchoice .c-choice-summary a:before {.. position: absolute;.. right: 0;.. padding: 12px 0..}....html img[class*=vp] {.. display: none;..}....@media (min-width:1779px) {.. html img.vp6 {.. display: block;.. }..}....@media (min-width:1400px) and (max-width:1778px) {.. html img.vp5 {.. display: block;.. }..}....@media (min-width:1084px) and (max-width:1399px) {.. html img.vp4 {.. display: block;.. }..}....@media (min-width:768px) and (max-width:1083px) {.. html img.vp3 {.. display: block;.. }..}....@media (min-width:540px) and (max-width:767px) {.. html img.vp2 {.. display: block;.. }..}....@media (max-width:539px) {.. html img.vp1 {.. display: block;.. }..}....@media(max-width:139

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25084
Entropy (8bit):	7.954629745011792
Encrypted:	false
SSDEEP:	384:z4b+mWMn+0y7Pg/1ZG7QBkT1ptdZXWVTTaGOKPKb3BZE3SDL0Fkx1qEPNugrtRPI:E+5Mn34PglkT9XICcPKb3Bh0e5tQT
MD5:	9AA997545CAD62F24960E39B773AE81C
SHA1:	3EBF01E3B3630F127309F816F13FF86B94798E07
SHA-256:	BC5E9528086858FD7BFF758A1B0AE0D559A9930E279ECDF4955572B6AD1E53EA
SHA-512:	4B2572DEA6B5C777AF39359095D97EB8078B3B252D4A70191837BF5C641B860CD4AF56719B3D96E45CBEBB13465625FD5DD6E66BC03F009487FEBEAF5D9F7169
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/fbf6e41b-ddbe-43db-a616-7a8e48d43d18.png
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...a.IDATx..y..Eu...u}.@1.....D...IX..0,A..Fc.`.,.D..H .eUX.....E..X.H...1q......(....l...r.!.....rz.....yf......9.{6z.......h....__......r.S.C..F...T.o...<.9.M..$].6.:...9..vSrN.B.2.Ug....x..rU6i>zY..C.lK.._.v.H.......9.S..U.]T.v..Y8..LJ...tl.C....m(...&.(QpAP.x\".._.G..$.L..)T[.."j$...}...@>z.n-..X.U..45&.S.....N.m\...m"I"...\.q.\|M.6#.............Q....."...e..m.6..f.....Sj...cK+DH...+]..".......i..Q.......xS.24@....C".$b.]'Y...<J.$.jY7J........i..0..1..........y./)Db.@_@.m.X\|..u..f..w..C@.\{.mc..u&....5k..`.j.ZO7.L...7.....R..zxp...B...Y....&!#..v...m[.\\|!}....B%-..K!U..cjj..Z...^...(.J....LHYK.'.@r.....d[..Q>..[VJ..b...H5H-....h.9..K.;.1..#.)fy.........r..B.X.L.)..PV$=..:.6!.B..Z.\|...).....%@..IK.G....'ci....(.-.......R.....5W..]..4.......2[..m...9..g...w.....p.4t..... ..(.je...r..R....{E.y.Xhr..U.>.H....5}.,Q.4S.$..I...R..` ....=R.#.-Y.}l......U.W...

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3425
Entropy (8bit):	7.841897699671826
Encrypted:	false
SSDEEP:	96:Kzrhpej8oDVkPi6wH/W8FmBNPZYyTV/RK5nKCuELCBgzurc7:KHh3akYfWFLZnRKZKC9+Szur4
MD5:	B7B315E5398A5177F50394FC16F577A6
SHA1:	23D3CBF6A21D4FC6C275E70CD71E9F276BB4DB52
SHA-256:	92AA5DEC4F2EE690CF1F8230FD67ED58B5918A7D1B0137DEE46E6751FB439DA6
SHA-512:	DA6BC2F39791E40E96FAB9E415F2E42E7F437E21BC9EC42488A160E1D5299315B39C9687D32E8EAEBB0828C1EAC6353B7B57F874B0B1EEE25A62DBF6347F2935
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/059b7716-5dfe-4510-9f5e-1f42cc2ba1b4.png
Preview:	.PNG........IHDR.............k.XT....PLTE....\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|........2tRNS................+.J....4P&.k`..u[9!zVC.p.g.0...>u..B...EIDATx......0...A.j...{.w...Kw......?...F...S..e:....6rL....m.-.6.h....u.......^.,.^.H....7......n......# .9..}i.}O@U.....a...?..`$A.......`l.."..C,.....M...V..b...V...b.AudLM...dP....e.w.....Y....{m........=..cTi..juz.^.....L.C).o....,rl?^.".~8........4.ht....h.........vZD...Z.5\|....ptDj.....T..w\|....}.9.8..Bga"7o.....5..(0wo4.g........S.xx._.s......s.V.-?.`.m=.]..O&...;.)...X...!.^j..y...?<.?..M\|eO...-...C.....uG.O..2V1.....+....a........A.K.}...3..)..Z...5n.F...S.-2......../b>.z....2.-...q.....w9!.Z.x.:.e:....D..9.x.W..`..Ft..}./...@....E.Z[xaB..x.P.../..dM.....62h.H..C&~J......!.p}d$vT.w...$c...:..d#;.'.@...5....P^..\...6F>vH..6r..M.G^..3F~...12....@F?.2\|X...Pv....7.~. e.+.

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4892
Entropy (8bit):	5.192246428502183
Encrypted:	false
SSDEEP:	96:AxtrrzrzG4redBred/9red3XredBH0rxLlLeWyevde5aeRVCRLRe49NRw+MNRppZ:AVjsdYdkdad+rxhLLyWdqaWCRs49Y+MR
MD5:	E0F4271D275EA34CF0C969A45C7B21D6
SHA1:	1BB4D00FAD1E313EC3E458C30C6A170A31ED1D59
SHA-256:	4432F77A6977D0AA65487F78EE7D0871D721BF9E950CA72BADC2F769B55B21E3
SHA-512:	AA4ACC39AA583B59E788F735B323236FEC277B37A2476E64318D411F462450383BE2D531E85C55EB3758FFB029DBC5F04CA9079C6B0C4757854CA00102512F0B
Malicious:	false
Reputation:	low
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1gt0F-enus?ver=0b82","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1gt0F-tscriptenus?ver=b179","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeStartDate":"2024-05-17T23:17:30","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RW1ljxA","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1ljxA?ver=f018","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RW1ljxA","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1ljxA?ver=f018","link":{"href":"/vhs/api/videos//thumbnails/

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x840, components 3
Category:	dropped
Size (bytes):	97536
Entropy (8bit):	7.953597803741894
Encrypted:	false
SSDEEP:	1536:4CuCypLSyviufmNmQQ7M8snPm+9Df+ZTk0YfrwV4B4Ub+5uY9zvhnEZrI9:4vlpmy6ufmNB8sPb9DfkTMjBI9zBERK
MD5:	344A5FC05D99098F7E8B209DD35B3390
SHA1:	49D080CF51DB7B113CDC682AF4585DB300480B8D
SHA-256:	FAED8FA7DEB08B868EB0FE4DC723DCCEB08795DB385D3765353E30C4288C460C
SHA-512:	C89F1142C4F8DF30E7E122266C54CBFF1C5857FB68807190A3B35227FF858AAAC6DFBE0A45BE232FC8CFF996D25600B6FB2F7094239DBA19FAA707328DBB2F76
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 520x293, components 3
Category:	downloaded
Size (bytes):	73274
Entropy (8bit):	7.990712860794123
Encrypted:	true
SSDEEP:	1536:gKMxq1eQDZpCTPtNB69Q+Dmx+qTjWMrQc17PdKa7XcJmeP6/qtra8tG74:gJU3qPtN89ZDmR6q9PdK6X5y6/uaYA4
MD5:	398F9DC587230D80A3D281D59C37E63E
SHA1:	0BDF18BD096A4514207DE5671CCFB14CA8D4DF73
SHA-256:	30A661812C8CFD698FB81C3D2E7468970C0FEC6DA5F7CF82888D00371E0BFCBC
SHA-512:	9922B54E959A51C0AD154B4BCDB2A3E1B4AD46BE01AEDC2132A866DDB40A02EFB6C8E206693997B3454B1FE760F4CF4C32BDC3495F754CCC4E3EA0ABA83D034C
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/2fcacd1f-1fc3-491b-a0a1-10efef238958.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................%.............................................................................................l.3..(sLS......lV....a.t/...9.x>.....Z.O$AW.^.-..P.v%..dI..d...(.....rBE.. .zA......`b.d....mps.Q.N?A.......'(\s..y...1q.H...e.d.k...?&0\|.l...'. .`....E.G.+..F,..@FZ.;...G.p>t..[...../..g...`..G...XX$.^o..]O...=.m.C.H.T....a....9D.....H6.....q.....4...M. G..].qRa......b_a.^.iV.t....%3R........q.[xW.@..)..D...Tl.@....7$..'......;....i&.Y.aP!.QMZ,%.46..\.q..vw/V.._-.......^x.c..f...M..7oeeMB..}.5.....-...=eXH.2.........\|.:..L...d..nj......DYV.T...%..B...v...........]l.*L.;c..........9...@j`....]n.]$RX......,...:v_w.'+!..8T.....<N..z.F....w.7O....$...q.Y..u...L7..:m-...d....K.(w....nl[..;..T...;8.!RR .%.,..SZ.W.. 50.i.4.,v. ....]..V......5i.#P...w..i............k.sc{.(i............B.....Uv.s..$.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4898
Entropy (8bit):	5.207667090430957
Encrypted:	false
SSDEEP:	96:AxtrgzrwGMreNvreN/TreN3FreNBQrxLGSLeCyeDdeVaepCRLy49NU+MNtpeGQ8D:AKgANyNGNEN6rxJLTyudCaQCRO49W+Mp
MD5:	FC09201E307D8A109328E3877772774A
SHA1:	DB4CA1A9F560911C4D7A8ABC90B0A8005E91AFB8
SHA-256:	ED314090BBFD3458250C740C31E709584DAAEE707890D8F01D6571AE0D768C26
SHA-512:	C35BDD522998DE52F4F74C18E1B0FEFA47E2BDFA70ABE4A01602E6BB9D45DF1BE2619C6748E742770EC0D5A992EA73B24A47F1C242E2DA39402FF7C6A8CC9645
Malicious:	false
Reputation:	low
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5z-enus?ver=2419","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5z-tscriptenus?ver=b4f9","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeStartDate":"2023-10-24T17:21:24","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RW1dIiW","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIiW?ver=c095","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RW1dIiW","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIiW?ver=c095","link":{"href":"/vhs/api/videos//thumbnails/

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34235), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	100769
Entropy (8bit):	5.246112939487446
Encrypted:	false
SSDEEP:	3072:nmwNxXC4Pn+lnTKxKdzW7I1m7H+8l9ut+EVe/EdnoEnsJ:mwFwTXqwe/EdnoEnsJ
MD5:	6FE3DD83A0D98BC1977F57EA33C37693
SHA1:	8DF606F40E4CC8C07CE929D5A82FD5304EAF4EB7
SHA-256:	A5268A183F2A091D2D17773997E89A25FC45CBD60E586EDF61F544FB85D6F6A8
SHA-512:	B81C2EB3BFA8ECF1FFCBB24E4A776CD2B083460A0AC53213EAF48997AC27BB20F49CEFF3A098AEBA33B3AD4F74CA86B5018AFE6689A260F011DF4249029CE78B
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/scripts/me/MeControl/10.24086.4/en-US/meCore.min.js
Preview:	MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])})(e,t)};function t(e,t){function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var d=function(){return(d=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)},s=function(){},i={},u=[],l=[];function v(e,t){var n,r,o,i,a=l;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(t&&null!=t.children&&(u.length\|\|u.push(t.children),delete t.children);u.length;)if((r=u.pop())&&void 0!==r.pop)for(i=r.length;i--;)u.push(r[i]);else"boolean"==typeof r&&(r=null),(o="function"!=typeof e)&&(null==r?r="":"number"==typeof r?r=String(r):"s

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.708611583181537
Encrypted:	false
SSDEEP:	24:cF5h8g1wVRvfBvRytXOjORraYAgxQyXLxwanf43tSKOKut44Hb:If8KwVRnGROjOkTgx9XdW3iPHb
MD5:	EA5F81175470F655A23E40E21858D629
SHA1:	42FF00908F886AFBAE308D2E2DBF4CE2CE00B8CB
SHA-256:	23713BA4DDFFF35A4D38062986DC4B57687E7B7E3D61AF2AD72944367610D82A
SHA-512:	1F49C611BF3904B34A841B1411764D9B56876C9C557169EFBA7DDB41D7C758182DBA01594F225AEEA5339CEDAE59837AD45B8A6B9EF6DE5124771D18BCF40202
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Defender-75x75
Preview:	RIFF....WEBPVP8 z...p....K.K.>E..D"......(.D..d...E....8t.ug....R...._J.0........z..n.%.....Q...".j-.K...u....>../...M..JE..0n...I..lo...b.....G...&...=0,i.(.}YC5r !aQOn$...,.@...2P.V..};...5.....s#k.....?.....yx.....O...9......o.M+eb...H.m..U0..V.\|_.............&.6.w;8.m.[.P"z...~....y........h$x(.....!f=FS.d.PQf........._....l5!j..L]P.....q!.UJ../\.7a..r.dl.qWN.Cqfm_.Ee.h..n#..I.KM........t.9V.DV./.5>.H.....<..H.\|..Z?..#4..P......?t.]f........9x..s.3.,]..z.l........n...(.q.Yw....=.~.,...z........>.6haX.....H.,..6.A..x..W....a;C:5T. ....K........M.p9.h.1:A.[.9..E..$.9........t\..}q-~.g._X....W...S....p.U.(...&...=...<.._[.m...,...$p?~..n.....l.....4.;.A..2.?E...j_..2~..A..5......SeU..%..K(.o.<..0..V....p..2.t..)....%...0.X.e.Q.N.......5...k..DP$...&u.,..Z.~f.6e.r.>....nR.(..$..)....yJ.0......5.....J..^..I....%:...B...8.;(...WNK.:X..y.6+Z<f...C....

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	566945
Entropy (8bit):	5.427445847196822
Encrypted:	false
SSDEEP:	6144:XU3oul3BmWRE2cXXB6l4QK/AAcRDsEbXiTMTyMm6OTa9/2y16gnu1:XQY22kuQ4/a/2y16gnu1
MD5:	0848B540E7CEFA19B6B90711E600470E
SHA1:	15A6D705E861BDBD6E4620F3982C4CDD6581BCD5
SHA-256:	5E8CB94E51F938396C62AAB378E9CCEB8D94C008730084188AAC207E8151697E
SHA-512:	6A33F5B167EBDB7ED2C21D1061603D61577A366B833155400A687CBD83E108910A4A58E29B36CAE96B51828E4D0D7C4BD714B4BF2C8C6834225839A5287288B5
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/ucs/dist/ucsCreativeService.js?v=Xoy5TlH5ODlsYqqzeOnM642UwAhzAIQYiqwgfoFRaX4
Preview:	/! For license information please see ucsCreativeService.js.LICENSE.txt /.!function(){var e={646:function(e,t,n){"use strict";function r(e){o.length\|\|(i(),!0),o[o.length]=e}e.exports=r;var i,o=[],a=0,u=1024;function c(){for(;a<o.length;){var e=a;if(a+=1,o[e].call(),a>u){for(var t=0,n=o.length-a;t<n;t++)o[t]=o[t+a];o.length-=a,a=0}}o.length=0,a=0,!1}var l="undefined"!==typeof n.g?n.g:self,s=l.MutationObserver\|\|l.WebKitMutationObserver;function f(e){return function(){var t=setTimeout(r,0),n=setInterval(r,50);function r(){clearTimeout(t),clearInterval(n),e()}}}i="function"===typeof s?function(e){var t=1,n=new s(e),r=document.createTextNode("");return n.observe(r,{characterData:!0}),function(){t=-t,r.data=t}}(c):f(c),r.requestFlush=i,r.makeRequestCallFromTimer=f},2277:function(e,t){var n;!function(){"use strict";var r={}.hasOwnProperty;function i(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.push(n);else if(Array.isArra

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	428785
Entropy (8bit):	7.960399565668148
Encrypted:	false
SSDEEP:	12288:6o6nnMQBrOvjfPzeI47yfuF72Y2Tg6DZY8:6o/+m4j2FNY8
MD5:	ED8EB030F3E69D0795EF0C4E40E771E4
SHA1:	07196E8A1409D7474EB51CA379743ACFC51ACDE5
SHA-256:	6C2C35F962939DB48AE17FB6AF14F50131A596FEB45A9819710290086406A9C9
SHA-512:	0FA862B9507E344C0EBF54D5A0DF30E65F1075F6D2CBE8A119D0DDB056E18033F58F1709B0BE30A8B7E8045DA5B62CBB77C36B61F6E64CC5A8990D368296A3E5
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3" xmpMM:DocumentID="xmp.did:D7C88CAE685E11EEB25FFF87BA6598B7" xmpMM:InstanceID="xmp.iid:D7C88CAD685E11EEB25FFF87BA6598B7" xmp:CreatorTool="Adobe Photoshop 25.1 (20231006.m.2353 10d5734) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c780726c-110d-4368-9520-476e0e8bd161" stRef:documentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6143
Entropy (8bit):	7.918747274282237
Encrypted:	false
SSDEEP:	96:giqNEZwhaB2uUnZFiegJzFUAgn3KLQSKr0GWYOnRs4CFbHdKiAlQhIaDe8mbUvEZ:Iym0B2vWegA7n3Ksp4GWT9UbOoXa8mbJ
MD5:	CCA42A6DD7E8378D54197303C9B94BD1
SHA1:	4D956D4A7049610D6728557695A2B40D71C24069
SHA-256:	3806A156470D2669E497B39DCD453A1F69CA74D5A1AB69EAB755185C0EFB6A88
SHA-512:	560D18D5C0DE6B86B1338ACC2778D633C612357AFB5ABC0302BBE469E435125DCBBC99D0C7B95B4BB3899187459245270AD0A19C4B2837F68709962FDD16CA0B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......`.............sRGB.........gAMA......a.....pHYs..."..."........IDATx^...UU...>gf...` ......"4......f..Er....(" ...\|!O..r}.$..J...... `X.(x......9..[.....C....b.......k...0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0.....B\|p..Y..y..0......R.........9..........l..ZF. ....`....>.0.H.c.y.)]2.uY.0....6......"o..7............D..(.cA.6..../....a@...BX...aP...sS.QBP...Ql<3.U.H!(.$........8.I.QD.8.....R.u. ..#H.q#.PW..u...0....Z....s..?.S.L...7.I.&u.6lX..6>..1.!..<8..w.F.......................r:..k..6.G...3&L.P.~d.)......tlfFlK[.J.[3{.^......z+.O.iA...........-r.5....u]MM..!;;;.....g.9.e8.#G...{K]]]$N#)..8p...3f...c.v.F..222N...~...:o..W.c..]QQ......3.............gk...'..!./.N$...6...E.3...?.?.....-s..f...{(e.Q..s\Dt..\|..........\....................i.j}.G...Z..}\|^^.w0..8.o.=.U..>.A...}..Q.W^.P./...e...^[[.[XX..v..].>.`....8.k..%.."NWj.."AF.\|......g..3'.2''.>..w.{3g.....^}.

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56015)
Category:	downloaded
Size (bytes):	56066
Entropy (8bit):	5.400548167770734
Encrypted:	false
SSDEEP:	768:z5kvKvdOyaupr7qkUrjEHQ8E5D5m+0Cal/pSl1JEW+zxqJWMKT1M2kZs:dDvZyk2AeBwl/pSl3I9yKJ
MD5:	449A9DEF2F0C6FC3B72C71164A97BDA3
SHA1:	25852714E23804A5500D693786CA8254025EE205
SHA-256:	220F5BD08E467A31A10A9CA1548E3580CEEB6064EAFC047ACFE35C2589BEC54F
SHA-512:	6E294FDD22793F50FB1541773BD1120BAD31108CC7EDD5F951438EB55F13A0E1574A8042750BC23BF2522AAC2F4D406322861BD10D6951D9ED30F98C16DDD274
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/js/Support.Main.min.js?v=Ig9b0I5GejGhCpyhVI41gM7rYGTq_AR6z-NcJYm-xU8
Preview:	!function(){var t={8488:function(t,e,n){var r=n(2746);t.exports=r},3104:function(t,e,n){var r=n(7273);t.exports=r},6564:function(t,e,n){var r=n(2445),o=n(3478),i=n(7269),a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not a function")}},5719:function(t,e,n){var r=n(2445),o=n(3478),i=r.String,a=r.TypeError;t.exports=function(t){if("object"==typeof t\|\|o(t))return t;throw a("Can't set "+i(t)+" as a prototype")}},1313:function(t,e,n){var r=n(4486),o=n(6635),i=n(9783),a=r("unscopables"),s=Array.prototype;null==s[a]&&i.f(s,a,{configurable:!0,value:o(null)}),t.exports=function(t){s[a][t]=!0}},3855:function(t,e,n){var r=n(2445),o=n(7455),i=r.TypeError;t.exports=function(t,e){if(o(e,t))return t;throw i("Incorrect invocation")}},4482:function(t,e,n){var r=n(2445),o=n(3406),i=r.String,a=r.TypeError;t.exports=function(t){if(o(t))return t;throw a(i(t)+" is not an object")}},3410:function(t,e,n){"use strict";var r=n(2445),o=n(6981),i=n(5633),a=n(2048),s=n(7065),u=n(1977),c=n(9

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	150348
Entropy (8bit):	7.985709840300186
Encrypted:	false
SSDEEP:	3072:by/jtihJ+zoLggRVg4UWdgyBVxv4VTmkvzwABsS1puERQqzoWMZCSa:byr4eFgRVg4DmgVxv+vzwAKWuEiqzo9a
MD5:	9AEA7C1DC69D1CEA907C024EAB971118
SHA1:	4986A5DEAB1BB0C9F0A66E5EA996BCE6F56683AA
SHA-256:	CE4C6516F665D6893FDBE6E537C75E52213793BC2A6C55457FA63EBF1344112F
SHA-512:	D5F0E0CBCACF2B53C279E07DB91AEC0798F6F1549B2C81CE2746CB0692334927F977C7C526C6D10411291E3D889EAEAC02B492179459E37BABE5622CCC84CF23
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......pHYs.................sRGB.........gAMA......a...J.IDATx.....m.u....~....Y.JJq\<\|H.H..8\|q..m6.J..T..Iq..nT.R).......Vl..i..(.AI$.k.f...H.(.t...R.5x...g.........$..^....{..}....9...t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:..t.3..Lg:&.3..L.E.{.#O...v..{..<.<.Nx<y.~...p......%.b...q.W=....\.....W..3f.G.X>..'....y.7...t.3=..$.g:.#..`..m.n.^.....\V.;\|Y......mK...\|..../.......v..5%....a.....a{\|.....5\|4n.g......._....Lgz..I..t.G ...>r...[...S.._.=...\.>.\|K.....a...X.7...x.}./.._...$.>DZ.....^.".C.=.\|...lY>.........3v.3..N'.8...t...<y.......OE.....{...X....+.../w..._~...B.v..~.........:W.."...k"A.e...^.\|......j?..w...v.3..J'.8......7...j...L..}..D.M.^h....}.h.;+...>.%-.Q....h..l...p..os.H@[....C{A...7s...\|~qYoN2p.3=$.$.g:..9.....]_.......\|2......C.../KP..o0./.}\|...1.......!.b...I.......(&Y..5C\

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 594 x 332, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17028
Entropy (8bit):	7.926562320564401
Encrypted:	false
SSDEEP:	384:7wixC+iG9rj5+kgbLPcAmxOkpJIhI9CvaMo05vCf9MRRLMk5K/jk:sifiG2tvXmxHbIhlo05KlGRaY
MD5:	DDCB4FCA39CCADCDF6C1FE2E1F717867
SHA1:	88238D53920F32AF37A802A5E6BFEEC3B1E6F75D
SHA-256:	097DF2DFA3781F1AEDB631C968D04D8152D7C7FA8E92BC91E233B3000E2F34BB
SHA-512:	316574E565EF67B97E13D0BF01CF4AFA8E0E9CF0748768CE4AE6BBB81352685A6E027EADBC083D2B632C412C950E65963E6EA98FE4CE7692C0AE0B6D956D3D37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...L.......R.....pHYs...%...%.IR$.....sRGB.........gAMA......a...B.IDATx..Y.mWU.W.7.A.e.Z..H.R.F.......$!....iH..4...T@..{i.A.....M..... .XP6eaB..R% ...Bs.o.0N..w...Zkvk..j.>g.}.^...c.1O...?..K.I'..J..<.c..fX!..N.m5...!.O-.=....p/....B.m_..o..........7.{..............]..~...C.....J..g..bI.C.....@&.7.}...u.RYs.J_.P_..j.....J...%..}.{..)}o,....\|...2iil+1.n:.W.b.I@. ......q/........},...K.....b.35f.....@t.C.H..f.....X8...qXA5W\mG..78..E.Wjm..j.C.E.....L.!e...}..... .FKi......!........t.;.s:8.P....9...H@....I! ...lp....`...".#.... .d"......=eN.nNcMUu......=.l......a.@...KY...^.....D..........=..<%&..}...P.HK.CE...0...R1..r..#h.5...)....z.B.....7.DH....KE...ha)....Z.=........)bZH.X.._...)........HK.a.Pn.X1Eh.....o.B......k...2....`..v.O.=...]..Y.!..:R.:......G@jg.q.[b.....)].O.....jm...q.c..*...=B...\|.........%....x.Bc..[.....r.....4......R.}......R...6.I..W..!...8K...:..U.. .3ZH...t.e..f\.(...y>k+.AH"..K.GjI!....J.}...HK..&..%.

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 75x75, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	834
Entropy (8bit):	7.70182419325142
Encrypted:	false
SSDEEP:	24:0zgLDWgZHXJ0ItjEcl6jCMAAj/e85sFcqq:oqDTntQm3AKDcJ
MD5:	3EBE2FB2CECBBF18F636347D5DA15D79
SHA1:	D9331DD930EFBD768F2639FEF3EECE7E9455B562
SHA-256:	353784F288BF22DB4286A6FA29AD5B98C6F618AB7AE6948C983AFDBA5909D91D
SHA-512:	8E182E3C11B1F88F7670E3931C81A0A4FDFA26A6A216F5C5277859C936D475F350FA7B7D64A363D860FC403667EA24841C3838B71A4C85C444BFDDD59ACC67B7
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Clipchamp-75x75
Preview:	RIFF:...WEBPVP8 .........K.K.>M..D"...:.8(...bL._7..U........1.......=@...@.@.y....].`...#.,.g.....V.D.YY..../VO.{..b.......3..C.)....X2.j..."v.....g...;l...,..{..%....p.k.^...p.1Z.GaV.&7 gh.....b..As.<..........F.x....<...Y.\|N.P.......(jd..E1..R...6....?.J....s.I..........N;I0:5...?.....e......C............E....p.M~y.f...T..=...y...q.(...m......zk.7.g.(.-.<..O._..o........._(....%y.......Z+/\=....m.e.cW.....l..o].r.0.........U^.~...;&(j=}..U.g~E..].-...Q..)F..)S@..b.}p..,.[.......V#....%..6t....f..nM....W.~8j.. .v......3.....s...p...V.....&.i.+U.R>......V.u.].R/o.;...J5>..C.Ybx\.7p>.1.m_&..@h:2t....%x..f...o.>..X7.Q....lF..A..0F._=.'.u".Bs,.9.B+i).....M......p...aC....[.......I.L...K..g.....jR.p'.wY.J&...z.s.jq..2R..r..,DF...!R..z.....z.j....A..n.P*.F..5.{.a0P.K.1,.....X.=^.....i...A3.0........

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9892), with no line terminators
Category:	downloaded
Size (bytes):	9892
Entropy (8bit):	5.250146010774664
Encrypted:	false
SSDEEP:	192:sEy9khiW/NNP4lG+H/Q/9aX2loUgYRN3t7TMzpsvJ/7w6kjrgRN3t7TMzHELsjji:sEy9sKubfRN3t7TMzpsvJ/GrgRN3t7TD
MD5:	3DE36F700A9FD7B27D7CF9968D108388
SHA1:	9589A684E072A97298664E70A787008BCBD20B6E
SHA-256:	027DBE31BC494E14ACAB76A221273E52D1D8273F29A5A46055B36D74D6EB369B
SHA-512:	4BFB1365BF756D4A8239C28429DC09263C25DDA33B37623553102F6A767601C2037B9B237CFF755197C35305AAAAE5895FF9E4822B21F7D8A7592FAC6CC6F73D
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_re/3.60.0.0-release_5218/jsv2/overlay.js?_v=3.60.0.0-release_5218
Preview:	window.lpTag=window.lpTag\|\|{},lpTag.taglets=lpTag.taglets\|\|{},lpTag.taglets.lightbox=function(){function a(){var a={css:j},b=lpTag.taglets.lpJsonToDom.convert({containers:a})[0];return b.className=b.className+" LPMlightbox",lpTag.taglets.utils.appendToPage(b),b.id}function b(){var a=lpTag.taglets.utils.geObjById(i);if("undefined"!=typeof a&&null!=a)try{a.parentNode.removeChild(a)}catch(b){a.style.display="none"}}function c(){var a=lpTag.taglets.utils.geObjById(i),b={name:"opacity",targetVal:.7};lpTag.taglets.lpAnimate.animate(a,b,{easing:"easeOutQuart",duration:1e3})}function d(a){var b=lpTag.taglets.utils.geObjById(i),c={name:"opacity",targetVal:0};lpTag.taglets.lpAnimate.animate(b,c,{easing:"easeOutQuart",duration:1e3,callback:a})}function e(){i=a(),c()}function f(){d(function(){b()})}var g="1.3",h="lightbox",i="",j={backgroundColor:"#000000",backgroundImage:"",opacity:0,filter:"alpha(opacity=0)",position:"fixed",top:0,left:0,bottom:0,right:0,zIndex:107108};return{_V:g,name:h,init:fu

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=Wm9lTENRQUFBTndOSUFONg==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32653)
Category:	downloaded
Size (bytes):	331784
Entropy (8bit):	5.58295720548731
Encrypted:	false
SSDEEP:	1536:b9+xOL+qkrNJG5aRyMsKaGsOo2gD0DI1/UYgzzxPix4X6TvneJ47BF7UI35jEj+f:B52UD0k+AA6rn7SIpjI0NgitVrd
MD5:	D0F640F521660F74365B05D5CEABAE44
SHA1:	A130CC8474AC5E32981B13BE64EA2E6030325232
SHA-256:	985D4383BDD2D213F017BDEE86386BE99EBB02F87F4200FF4BC9D522C2EA7C91
SHA-512:	348E20640E3EF026E6604AD916739AF8A3116C43F9D40A480F5AE8DDC91E5D2895C210EDED8687C9A248562E2DC160EC41BDFD2555514EC07DFDB7AB32E30E2C
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-thirdparty/v50.js
Preview:	// For license information, see `http://img-prod-cms-rt-microsoft-com.akamaized.net/launch/store/launch-ENf7805d09fd1b455883333cdf34ee4ca2.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-05-08T21:14:06Z",turbineBuildDate:"2023-02-22T20:37:26Z",turbineVersion:"27.5.0"},environment:{id:"ENf7805d09fd1b455883333cdf34ee4ca2",stage:"production"},dataElements:{isSurfacePDP:{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){var t=new RegExp("/d/surface"),e=new RegExp("/p/surface");return t.test(window.location.pathname.toLowerCase())\|\|e.test(window.location.pathname.toLowerCase())}}},isSurfaceCategory:{modulePath:"core/src/lib/dataElements/cookie.js",settings:{name:"test"}},isSurfaceBusiness:{modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){return new RegExp("store/b/surfaceforbusiness").test(window.location.pathname.toLowerCase())}}},PageInfo:{modulePath:"core/src/li

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	16352
Entropy (8bit):	4.989210940787624
Encrypted:	false
SSDEEP:	384:CGGBy8FZFejnyLSbr+4SbV6gpBdg71r1pzsl:8y8FZFejnyLSbr+4SbV6gpBdczs
MD5:	9CFAC5EA9165FE7AF811A476FF5BFD2A
SHA1:	1A8E2AAF9C9A74708236DBB71B714E8F95583F2E
SHA-256:	0E00B0AE9312DCC43DDC1A31B7ED955891D085B1184DDADB8266C79D5B8B9C43
SHA-512:	FB53F4C167BC3A84E06408471CFE253D2C79F3C250F9763BE0A47A64D7A32EBC1EA3C0AEA2E8E19274088D6731652DB0B129B43EA9AD4FEF7E34D182726559DE
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/buy-now/v2/buy-now-v2/clientlibs/site.min.ACSHASH9cfac5ea9165fe7af811a476ff5bfd2a.css
Preview:	.buy-now-v2 {. margin-top: 48px;.}...buy-now-v2 [data-tab-content] {. display: none;.}...buy-now-v2 a.text-break-keep-all.btn.btn-primary.my-0.px-4.mr-4:nth-child(2),..buy-now-v2 a.text-break-keep-all.btn.btn-outline-primary.my-0.px-4.mr-4:nth-child(2),..buy-now-v2 a.text-break-keep-all.btn.btn-faint-primary.my-0.px-4.mr-4:nth-child(2),..buy-now-v2 a.text-break-keep-all.btn.btn-inverted-primary-alt.my-0.px-4.mr-4:nth-child(2).{. display: none;.}...buy-now-v2 span.sku1price a.text-break-keep-all.cta.my-0 {. display: none;.}...buy-now-v2 .active[data-tab-content] {. display: block;. overflow: hidden;.}...buy-now-v2 [data-inner-tab-content] {. display: none;.}...buy-now-v2 .active[data-inner-tab-content] {. display: block;. overflow: hidden;.}...buy-now-v2 .card-container .buybox.second .link-group .btn-primary {. color: #0067b8 !important;. background-color: #fff;. border: 2px solid #0067b8;. text-align: center;.}...buy-now-v2 .tabs {. display: flex;. justify-content: le

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 27168, version 0.0
Category:	downloaded
Size (bytes):	27168
Entropy (8bit):	7.992922969154643
Encrypted:	true
SSDEEP:	768:5t+z+kiMy2C4rU03JPhE4lbMTAPZE6OekA:5t+Vyi3JXqTABEg
MD5:	B7640425501065524CEC27D4A55A85ED
SHA1:	F254C388A65EFB4B271C56DEB5685A77EBE09D9D
SHA-256:	FE8A1047376498C80A157D13555E42A92AD480FCB0BCC9DE51AD1930FBEB7F91
SHA-512:	9795975F44BCAE6B73979B221B1C544AC943BCE0ED485B266749559AE95D39641E09C458F2ED20F4667EFC80CA2C47DC6300AD4A3E5CE1D38AA94E014D61322A
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/light/latest.woff2
Preview:	wOF2......j .........i..........................`.....L........l....6.$........ ..0. ..i.C.'.9.@5..m.....1".X.13..(.......IE.....6.!s.K.=j.z.;q.......,..r....I..I..E.i..u........26.W.X....>e(<.M.R..^Y..e...+..pC.6.E9.l.$S..bn...)^.1.,..pj..<H....^v...b...\|t.....ys.XH.h.#.qF.....=W.x<q.d.m.^4....._...{...H......K.....ds.v...u{....:.....f$(t...DR.B._.p....m....jPf&e.F.Q..a.G.,.a$+.........f.k....@D{....p "B..X1+g.nN].n....W....?.:..K..D.,Y.....;I7.u.:...R.k...,....{+..Y.O`...W.xw.t..d.:...M}#`7"..\|...j.rW.....U.h..A.m`<..$h M....`..vx.w.Pi.3.}). . .Af.........n)P.w....Z.#N.6...@.e............#..B.<...H.HW......6<..)k[..%c....+O..RG0i...@.........J..3}...6..S.......'+8..ZFezY.r.%9)!n.T@.0vF.....y/..!.-.6..r?...#p\|Y.2...}...nB...6.$8.d:k.......r........ ..@.h.+.....5.H.n.3.P.58..\t..I.N.uB...@N@K.]Q..MIr..C:.{t...........F..*.)3.1J....f....Uzn.\o.#.=&h...t........:@BU....V@3..X.pD.C@ H...}.06...G........X.i]n.#<..K1`.,YV..o..<....ms.B.!..

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	2916
Entropy (8bit):	5.299643121721776
Encrypted:	false
SSDEEP:	48:F2CwrUfJrBAkyq5tJiSoGu8EBG8gxE/44af4G4QLPp/CpoiovvtB6Ugw6vAykytz:Fzw4xBryq3bCpBGlE/4Xf77jp/Cpoioa
MD5:	348B07E6E2C5729E9E932BA2765BDF43
SHA1:	09484F4E16FC3CD083C1D40C74C3765B81F76ED2
SHA-256:	5083F052635B8F690C7327BA89F17FA956E73E4161BD302163EE5B371383547E
SHA-512:	1872F4B62AF8864E5F37DC3B7277E68DF4C4D85AA405A85ACF8D034BF61F1134AFE002C169BB45DB5AC432AB25004A44935B4CDD5F87DF934E95FAA3E1920FC4
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/feature/v1/feature/clientlibs/site.min.ACSHASH348b07e6e2c5729e9e932ba2765bdf43.js
Preview:	'use strict';(()=>{function l(c){var a=t[c];if(void 0!==a)return a.exports;a=t[c]={exports:{}};return v[c](a,a.exports,l),a.exports}var v={4470:()=>{function c(a,d){(null==d\|\|d>a.length)&&(d=a.length);for(var h=0,k=Array(d);h<d;h++)k[h]=a[h];return k}window.matchMedia("(prefers-color-scheme: dark)").addEventListener("change",function(a){return function(d){var h=document.querySelectorAll(".feature-card .card-body .img-fluid");h&&h.forEach(function(k){var g=(k.getAttribute("src")\|\|"").split("?");if(!(g=.function(b){if(Array.isArray(b))return b}(g)\|\|function(b,m){var e=null==b?null:"undefined"!=typeof Symbol&&b[Symbol.iterator]\|\|b["@@iterator"];if(null!=e){var f,n,q,r=[],p=!0,u=!1;try{if(n=(e=e.call(b)).next,0===m){if(Object(e)!==e)return;p=!1}else for(;!(p=(f=n.call(e)).done)&&(r.push(f.value),r.length!==m);p=!0);}catch(w){u=!0;var x=w}finally{try{if(!p&&null!=e.return&&(q=e.return(),Object(q)!==q))return}finally{if(u)throw x;}}return r}}(g,1)\|\|function(b,m){if(b){if("string"==typeof b)r

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65513), with no line terminators
Category:	downloaded
Size (bytes):	98793
Entropy (8bit):	5.2339709898099205
Encrypted:	false
SSDEEP:	768:2qnFfbkxlWF8DdYRZMcPEk5BFIsbyy9ojybRpWJIYpQ58WLJY8wE2usUrGBux+de:k3WTZ0oQZ2LvEV5jNvy95v
MD5:	F5DE9206FA994D1694A192E4F5DC5E0A
SHA1:	E729CF7ABB7B3DB0CE4DA8181CDFE773AF534B88
SHA-256:	2BCCD68274D04786E929D36C50458F89EEE309ACA5FD18449C1C397E23E26334
SHA-512:	8350C2AEB8E66780CB529D7E15778C11B9444B283E1CC5B17B04D732B126ECE616FB4465E59F54A404F1E6C207AA7AD223D1AFCD4BCAB8530D9DB94667166EF5
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/Article/article.css?v=K8zWgnTQR4bpKdNsUEWPie7jCayl_RhEnBw5fiPiYzQ
Preview:	.html[dir=rtl] .supHomeAndLandingPageSearchButton{right:auto;left:0}html[dir=rtl] .supHomeAndLandingPageSearchBox{padding:0 18px 0 50px}.supHomeAndLandingPageSearchBoxForm{margin:auto;position:relative;max-width:748px}.supHomeAndLandingPageSearchBoxForm .supSuggestionList{margin:0;padding:0;list-style:none}.supHomeAndLandingPageSearchBoxForm .supAutoSuggestContainer{width:100%}.supHomeAndLandingPageSearchBoxForm .supSuggestionItem{text-indent:0;padding-left:18px}.supHomeAndLandingPageSearchBoxContainer{position:relative}.supHomeAndLandingPageSearchBox{width:100%;height:51px;font-size:1rem;padding:0 50px 0 18px;border:1px solid #a9a9a9;outline:0;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue","BBAlpha Sans","S60 Sans",Arial,sans-serif}.supHomeAndLandingPageSearchBox::-webkit-input-placeholder,.supHomeAndLandingPageSearchBox:-ms-input-placeholder,.supHomeAndLandingPageSearchBox::-moz-placeholder,.supHomeAndLandingPageSearchBox::-moz-placeholder{color:#505050

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32089)
Category:	downloaded
Size (bytes):	92629
Entropy (8bit):	5.303443527492463
Encrypted:	false
SSDEEP:	1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
MD5:	397754BA49E9E0CF4E7C190DA78DDA05
SHA1:	AE49E56999D82802727455F0BA83B63ACD90A22B
SHA-256:	C12F6098E641AACA96C60215800F18F5671039AECF812217FAB3C0D152F6ADB4
SHA-512:	8C64754F77507AB2C24A6FC818419B9DD3F0CECCC9065290E41AFDBEE0743F0DA2CB13B2FBB00AFA525C082F1E697CB3FFD76EF9B902CB81D7C41CA1C641DFFB
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Preview:	/! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^[\],:{}\s]$/,E=/(?:^\|:\|,)(?:\s\[)+/g,S=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener\|\|"load"===e.type\|\|"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H)

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29888, version 0.0
Category:	downloaded
Size (bytes):	29888
Entropy (8bit):	7.993034480673089
Encrypted:	true
SSDEEP:	768:b2epE/P8HSbsbNl+GfEMuHyS4aAyoVfszfHS1W:6eSkgsbGGanzAjIyg
MD5:	E465F101F881B07CCFBB55D51D18135F
SHA1:	0D76B152EA1AE4AA68DB36DCC7BD204ACDC571D3
SHA-256:	6F5EBFD0FC9A520ADCA234FDD34B4DFBEB106942A6F44E65FC1AC54F7D2D6498
SHA-512:	2C1F730DB5108DDE4731F22838AD7EEF4D6698ED5EA0C0951B81B21722DF8051623923672C46F9397F81E74741CDEC794F03AAC37E532D1223A1A1CE448C73AA
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/fonts/support-icons/mdl2/latest_v4_70.woff2
Preview:	wOF2......t........X..tb.........................`..`..6...Y..... ....6.$..,.. .. ..s. ..S."..`...@.."..........!!.T5..?.........#t..7. .. ~"?A..A...4./..}.'.D.8.E......C......T..o.......l.UJ..SB...U.D6..W..uV.j,...+.>"N...}.&E..P~....z..w...Z".k...S:..t.7.fA.ic;%HZi...W.....w...I.p..........=>....) X ....@B......R ..P..$H.....h.{,..X..l. ..uY.w.Kc..+........r.H....... .....!....7$.b......@(Mp..,."z..(......V....y.E..w\...n./...&...+...R.......\~d,.....S..r%.s.s.......h...:.@.!h..(.< .@..0.P2H..!..r.6..V.r.:..)T.9T..n......;....+a...).L+....eX....\|.x...$]hS....+e+ HK.H'Q..RJ..X...}.....l....=S.G.e.{..I%9.1.O~k....@.$.{.M^.......~z...2...r.]b..[......(.H... ...z.)...&....9..$.Q1F...1......7C..UJ...T..F....Z..K.......F..&L0c...p..N8..g...W\...q........Oz..O./......#..... ..L0B.A(..#..#..D..(..M4b.A,..`A.q.'..$ .D$..d..B.RIE.iH'..d .L.....M6r.A..3......PH!.(B1.(......2.S..*PI%..B5......:.S....H#.hB3.h......6...:.I'..B7.......>...+V.0.A.1...

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4899
Entropy (8bit):	5.228930176991416
Encrypted:	false
SSDEEP:	96:AxtrQzrvG/reMEreM/YreM3yreMBPrxLg8LemyefdepaebBCRLe49N1G+MNppeGf:ACfjMZM9MrMFrx7Lry2dKaICRC49G+MR
MD5:	FC4E6B9E85E0355070649974751168A6
SHA1:	453D8D1397FCD1B5DDAEBBE185203C2CA6C1B759
SHA-256:	86D03D395E8726913133260B9D02D993E657E601F75A65318F7AB9ED646A28DA
SHA-512:	52D04FDF1B6C800F7D6D53D7BD400313B180438C19E1BAEC9BFAF899B137F3D73B0867ED6A7FF762DBE51B18CAFEABDF2E0C2A0FB3DC8CA6AE47E8A647EE36A7
Malicious:	false
Reputation:	low
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dIiN-enus?ver=918b","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dIiN-tscriptenus?ver=761b","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeStartDate":"2023-10-24T17:13:54","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RW1dNAQ","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dNAQ?ver=5ff6","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RW1dNAQ","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dNAQ?ver=5ff6","link":{"href":"/vhs/api/videos//thumbnails/

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4898
Entropy (8bit):	5.207667090430957
Encrypted:	false
SSDEEP:	96:AxtrgzrwGMreNvreN/TreN3FreNBQrxLGSLeCyeDdeVaepCRLy49NU+MNtpeGQ8D:AKgANyNGNEN6rxJLTyudCaQCRO49W+Mp
MD5:	FC09201E307D8A109328E3877772774A
SHA1:	DB4CA1A9F560911C4D7A8ABC90B0A8005E91AFB8
SHA-256:	ED314090BBFD3458250C740C31E709584DAAEE707890D8F01D6571AE0D768C26
SHA-512:	C35BDD522998DE52F4F74C18E1B0FEFA47E2BDFA70ABE4A01602E6BB9D45DF1BE2619C6748E742770EC0D5A992EA73B24A47F1C242E2DA39402FF7C6A8CC9645
Malicious:	false
Reputation:	low
URL:	https://prod-video-cms-rt-microsoft-com.akamaized.net/vhs/api/videos/RW1dQ5z
Preview:	{"captions":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5z-enus?ver=2419","link":{"href":"/vhs/api/videos//captions/en-us","method":"GET","rel":"self"}}},"transcripts":{"en-us":{"url":"https://prod-video-cms-rt-microsoft-com.akamaized.net/cms/api/am/videofiledata/RW1dQ5z-tscriptenus?ver=b4f9","link":{"href":"/vhs/api/videos//transcripts/en-us","method":"GET","rel":"self"}}},"snippet":{"activeStartDate":"2023-10-24T17:21:24","culture":"en-us","supplier":{"name":"","source":{"name":""}},"thumbnails":{"extrasmall":{"height":0,"width":0,"assetId":"RW1dIiW","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIiW?ver=c095","link":{"href":"/vhs/api/videos//thumbnails/extrasmall","method":"GET","rel":"self"}},"small":{"height":0,"width":0,"assetId":"RW1dIiW","url":"https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIiW?ver=c095","link":{"href":"/vhs/api/videos//thumbnails/

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	563851
Entropy (8bit):	5.221453271093944
Encrypted:	false
SSDEEP:	6144:2VR57iqbPXlB5UR5vWenR5xWeMFdBjL+ks0EcU0MWEsuWe5fXbHfxlN/FNCn/Lpl:tTP0BKYtf
MD5:	12DD1E4D0485A80184B36D158018DE81
SHA1:	EB2594062E90E3DCD5127679F9C369D3BF39D61C
SHA-256:	A04B5B8B345E79987621008E6CC9BEF2B684663F9A820A0C7460E727A2A4DDC3
SHA-512:	F3A92BF0C681E6D2198970F43B966ABDF8CCBFF3F9BD5136A1CA911747369C49F8C36C69A7E98E0F2AED3163D9D1C5D44EFCE67A178DE479196845721219E12C
Malicious:	false
Reputation:	low
URL:	https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css
Preview:	@charset "UTF-8";/! @ms-mwf/mwf - v1.25.0+6321934 \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise.//! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2389), with CRLF line terminators
Category:	downloaded
Size (bytes):	22309
Entropy (8bit):	5.876846394375398
Encrypted:	false
SSDEEP:	384:uFOqfjOQtBMksqArywtp7zYdCuhywhJiHuioHlEzvBWR72T/+9TMlnvpJqvcttO4:uFr7/MkWlf7zOowCdoFuvE727+YvpkH4
MD5:	291735DEFEA0BE4AC2352B2B18155CC1
SHA1:	0DAF4629D3C5BF605E2319BADF6AB905044E6FAD
SHA-256:	3D008DB15468A8C605F4C91823680B2E62183E5AA389E465CBB3C14E847F684A
SHA-512:	0BBBA50CE4C5165E4206ACB64000B962B7633CE0687FE022D2EDFA01569326DCE18C1A9F66842C5D8782F53D99806ABE148BFE60D98E7F3146A924F1E151F835
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/require-config.js
Preview:	const baseURL = 'https://www.microsoft.com/videoplayer/';....requirejs.config({.. paths: {.. "platform": baseURL + "lib/onerfstatics/onerfcomponentfactory",.. "telem": baseURL + "lib/onerfstatics/onerfonedsconfig",.. "redtux": baseURL + "lib/mwf/slider".. }, bundles: {.. "platform": ["requireJS", "ariaWebTelemetry", "html5Shiv", "html5ShivMin", "modernizrMin", "pictureFillMin", "RedTiger_telemetry"],.. "telem": ["trackHelper", "jsll"],.. "redtux": ["copyrightHeader", "iController", "iCollectionItem", "videoClosedCaptions", "videoControls", "keycodes", "viewportCollision", "utility", "swipe", "stringExtensions", "removeFocus", "publisher", "observableComponent", "htmlExtensions", "handleImageError", "componentFactory", "breakpointTracker", "actionToggle", "additionalInformation", "alert", "areaHeading", "autosuggest", "backToTop", "banner", "biProductPlacement", "obsoleteCarousel", "checkbox", "combo", "compareChart", "contentPlacement", "

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZoeLCQAAANwNIAN6&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-16, little-endian text, with very long lines (32767), with no line terminators
Category:	downloaded
Size (bytes):	143368
Entropy (8bit):	3.949506106648749
Encrypted:	false
SSDEEP:	3072:csiNi5JqER2ERi5/4lBXFDcoAdPYT4g2epaOkTEgTJPKKwPecO/ZSUZUWu/XiKXC:csiNxdPsaZPZeXxXHW/zNilXdk
MD5:	6CBA26AFE3E9C36155A322327243717B
SHA1:	19D393E7004E78C083EAB7602D4936C2EB0DDE39
SHA-256:	763D5A901D6EB0D340574F02D964D10BB08D96BCFE79B890B3E7ACEF51241C73
SHA-512:	25623B250EC7B7E77531D5E5A50DEC29D254EA8D880621879F37C9F8AD04C790F8F5CF37EA96D2A9165F5875D3217D482560F9AE1C9A7E9682EF7F0FB75F1559
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/mscc/wcp-consent.js
Preview:	..v.a.r. .W.c.p.C.o.n.s.e.n.t.;.!.f.u.n.c.t.i.o.n.(.).{.v.a.r. .e.=.{.2.2.9.:.f.u.n.c.t.i.o.n.(.e.).{.w.i.n.d.o.w.,.e...e.x.p.o.r.t.s.=.f.u.n.c.t.i.o.n.(.e.).{.v.a.r. .t.=.{.}.;.f.u.n.c.t.i.o.n. .o.(.n.).{.i.f.(.t.[.n.].).r.e.t.u.r.n. .t.[.n.]...e.x.p.o.r.t.s.;.v.a.r. .r.=.t.[.n.].=.{.i.:.n.,.l.:.!.1.,.e.x.p.o.r.t.s.:.{.}.}.;.r.e.t.u.r.n. .e.[.n.]...c.a.l.l.(.r...e.x.p.o.r.t.s.,.r.,.r...e.x.p.o.r.t.s.,.o.).,.r...l.=.!.0.,.r...e.x.p.o.r.t.s.}.r.e.t.u.r.n. .o...m.=.e.,.o...c.=.t.,.o...d.=.f.u.n.c.t.i.o.n.(.e.,.t.,.n.).{.o...o.(.e.,.t.).\|.\|.O.b.j.e.c.t...d.e.f.i.n.e.P.r.o.p.e.r.t.y.(.e.,.t.,.{.e.n.u.m.e.r.a.b.l.e.:.!.0.,.g.e.t.:.n.}.).}.,.o...r.=.f.u.n.c.t.i.o.n.(.e.).{.".u.n.d.e.f.i.n.e.d.".!.=.t.y.p.e.o.f. .S.y.m.b.o.l.&.&.S.y.m.b.o.l...t.o.S.t.r.i.n.g.T.a.g.&.&.O.b.j.e.c.t...d.e.f.i.n.e.P.r.o.p.e.r.t.y.(.e.,.S.y.m.b.o.l...t.o.S.t.r.i.n.g.T.a.g.,.{.v.a.l.u.e.:.".M.o.d.u.l.e.".}.).,.O.b.j.e.c.t...d.e.f.i.n.e.P.r.o.p.e.r.t.y.(.e.,."._._.e.s.M.o.d.u.l.e.".,.{.v.a.l.u.e.:.!.0.}.).}.,.o...t.

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45716)
Category:	downloaded
Size (bytes):	141492
Entropy (8bit):	5.431192295682773
Encrypted:	false
SSDEEP:	1536:5FZ5EDQvTPRUbx3jog/MhSJvRkmYWp0BSYmvIxdL/Bpns0Vgt2CTJm0wTxFojd99:jE6rg/MQNn3vIPzDk80ZjT0qcePgY
MD5:	B30F8CF0A915DFF9C1A2DF86D4899173
SHA1:	C25130FFF594491102820FB5AF395E15DD13F59E
SHA-256:	23804C857C0F312172654571928D8945EB9585B94F6D4BE9C59A37EAE054C0FD
SHA-512:	6D0D1B1C6A438869EF3D9E9CBC75351BC282464EE1DDC026BEE76E6FF756D415A2E6B531734C07956BF8DD724796EF42CF26CEC19C52CBB8F9ADD6971B822101
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,r,i=n[0],a=n[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 520 x 293, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	57567
Entropy (8bit):	7.925964387366125
Encrypted:	false
SSDEEP:	1536:Ei3R/YgAfMZeodfDFO1ep53uB5XBuYeORN81wlVvzZE:7RgAJFAep53uBPuuz81wjFE
MD5:	82C1B25D6524E0DB56CE7DE894E81C79
SHA1:	8DB2C034E34D4F683DE4C1CB4560181BE1788429
SHA-256:	B4E5D8A770B794EB296469CF372091303AF833CFF794FED2B7128A8E4518EA14
SHA-512:	99CD9DBBDE6D1B30A85BA48653199EA2A3CB2300C34A2B038E95A3849BA3B983A9A0BC7FB8B2C546AC14C3609B47839A6303B6BFC23D5E5F269361740B1690A7
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/e1da0671-a934-43e7-b61d-f6f0ac42965c.png
Preview:	.PNG........IHDR.......%........$....PLTE....3..........Y...../.......................................................)....7...y.q..3..y.......;.-..L....q....\.)......[4...,..1."..........!...$.#....G.w...V.j.6..%.......@-....c=...?.. ..)..c.,..<..U....jF....N.&..{...b.#..D..+.5...`...:5...g..q..!.......$...T...3B...[..g..R..H..T....../G..3...K.R...7.>...L..r..A..<...j.......$p.2..-..G..2./......n..'.....F........(..A.W....M.3..){....8..8..J..T..Q..O..h.....;..[...u.<..@..7.......5..V..c.@...y..C..a.....m..K.....A....%{.5...G.%r.....M.I...H.e...Q..\......$l..`.%...A.9...V..S.....I.......y.E......_.#......a..O..../.....X....!l....z.....0..t.......n.J..%e.....:\|E..........v..{..=..wy{.%.g...?y.f..EGHDa...o.[.`ce.J...O....X.#...N..........f48.tg.Y..A.82..'.Ya....X.....tRNS........~.....IDATx..M..@..#`..r,.a.A..pd..,...E...l.8...j>J.[.0..U..=.x._W.....#n....O.O....{.........>...2=.>Y[...-.\.......n.&....U...:K.....@...1..1.."..P"k.....;T.{4U.y

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (955), with CRLF line terminators
Category:	downloaded
Size (bytes):	201253
Entropy (8bit):	2.661810841903416
Encrypted:	false
SSDEEP:	768:W7nJSq9GinOo20uqxjr3+AKyKEAPNPPn8P9R/3htzAVT+JcYY5WRItsWc7rQ3S01:WHGiOoHuOjr3+AKyKAXS
MD5:	85DE642E1467807F64F7E10807DF3869
SHA1:	C795B490811C0E5A1A8F3C3F620AAB9F00C34F07
SHA-256:	5965B2C5472AACA1CD66EA5B0D07A971B961FEE72FC27EB1F6C760042084B21B
SHA-512:	BF4EC56D6FC54EAAFBD57C4E4D06900D358E39CE15009FB983491B0A83ABB60A0A54F46BE86387AB837B4AE1D1F3FF99156D04207065B0F65F165B54CFAAF47B
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/microsoft-365/microsoft-office?ocid=cmml7tr0rib
Preview:	..<!DOCTYPE html><html xmlns:mscom="http://schemas.microsoft.com/CMSvNext".. xmlns:md="http://schemas.microsoft.com/mscom-data" lang="en-us".. xmlns="http://www.w3.org/1999/xhtml"><head><link rel="shortcut icon".. href="//www.microsoft.com/favicon.ico?v2" /><link.. type="text/css" rel="stylesheet".. href="https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css".. /><title>Your request has been blocked. This could be.. due to several reasons.</title><meta name="Title".. content="We are sorry, the page you requested cannot be.. found" /><meta name="CorrelationVector".. content="VbLZYbRlhU2hyedN.1" /><meta name="Description".. content="" /><meta name="MscomContentLocale".. content="en-us" /><meta name="

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	764
Entropy (8bit):	6.792303788549155
Encrypted:	false
SSDEEP:	12:+cK/gj6qWEaFRzC6l4ikyC0Crvxdh33jIM0C719H2bpF9rjwtoYp3AmNsOf7atTm:+cKYj6LdzOm0vxdhnj5BXH2VfPweEwmP
MD5:	98EB53867CC8EDC490DDCF5E934C0C93
SHA1:	626F90CFBCA97765D69E0C84DB821B9CC19ADABB
SHA-256:	F05186EB121A12C12AB9DB9163952D27FAFBD5CD0BE001BCDB4DE3A9512652F2
SHA-512:	6A16021D2FD6E12B26957ACF70447C9FE317C075A6E8CFE5F3EBA507F76BB2EBA745AEB5033C13583477192781D0221FB02A805A44D3A45913BA4300CB390F82
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Microsoft-OneDrive-75x75
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......K...K....pixi............av1C........colrnclx...........ipma...................mdat.......Jh...B2...... . .@....AYc.xW..z.^1...q{.B. Qi.^v.j.....$.Kh.cpO)...2..c..j'...CLe..j{g.h.d..vD..M./.hVa.@.u....j.k`..}!......V..Q..N...\{hk....)......u.......I&s..H.n..HL...sc.}....y.p/....<..f@z....P..5.\n..)..etZm.Qc...kK..Kjz....#.k....!3..Ub.B..R:.t....){q.*.#..Y....'4.K..._....<D\h,..q..............-#.X.E,;....~.ZaX6.n`._.B.ce.XV3..p.As.$..y...w]....4C...Yj.z.:.}..g...DgXH.u.vkWr.J.(.+.=N.V.d..,...\;q.m7...oc.MH...W...r..Y4..2+.C..a....j...p

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.269328710078199
Encrypted:	false
SSDEEP:	3:4MR1KgyWFECYDoNsDUln:4MDmCfs6
MD5:	6F083A779B1F1F71387FAA38DFA66F12
SHA1:	D60B5A5FD76B11B8DEF1AD1657738292E59C98CE
SHA-256:	2E8B2387AB049BE1306502B20D4BF3DB940C5E86152BB5927086AAF508E65776
SHA-512:	CC80DAAFFDF01EE35154C4992ED1B7E146EE3A7BC7C8DA2B51E855B29352527FFA6FE2D5672EA9BF92FED0AEBA14A1DD771F904C4255ADF184B75CD2746E0A00
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/sites-modal-component/v1/sites-modal-component/clientlibs/site.min.ACSHASH6f083a779b1f1f71387faa38dfa66f12.css
Preview:	.edit-mode .modal-dialog:before{height:100%}

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2703
Entropy (8bit):	7.656594803573823
Encrypted:	false
SSDEEP:	48:xeCUAFDwGlVJSe8WcWZTmT30kUT5BvR2Yg3dmHORWj2rt+KTQfo7IES:xHUAGeVJSBWZTrjoYgNmHiO2rt+S6t
MD5:	4EF082AFE9892D1AF2BF56EBBBE43B24
SHA1:	6AF8951AB396523FD8339B2DF591835838D15C42
SHA-256:	664490C5ED805C089F854C1EDF01D005F170730A3614D19C60375EB7C3B08FDF
SHA-512:	AF76B054DE49EE1649F657A48FBA51BE3FF7ADDEF68E67C3E09467B02D77AA75301B8E1E773EC2BBB60A684F6F870DE626E5749761F6B98F8686C13E98F3BF25
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT...@PLTE...(.........o..d..d..d..d..d..x..d..d..d..x..d.....x..x.(...x.....d....(..(..(...d.(...x..d.(...d.....x..x.....d.(...x..x.......(..(.....(...d..d.....}..d.(.....(...x..x..x..d..x..x..d........d..x..d.(...x.....d..d..d..d..x.(..(......x.(...x..d..d.(...x..d....(...x..x....(...d.....x.....d..d..x.(..(...d..d.(..(...x........x..x........x.(..(...d.(........(......d........x..d.(...d.(..(..(.....(........(......d....(...x..d....'..%.........v.!....."......l.....~.%......t..r.#...............y..x..o..h..f........{..z..g.................s.....n..j.$.........o..p..j..}........E.d....tRNS.........V.u).....&&#.........pNJD1!................................\|]WNGG@?=;% .............l]VF3.............{zusqgZXPM2.....vliaa^`.i....sIDATx....C.A.....+JJ.A..QT............l........^..............=..!..B.!..B.!..B.!..B.!..B.!....:}...s\|...I..'...3tL.D...5-a. ....k...T=V........C....y9..5OIB;p.Yy>j...p.%..Mc..s..f..R..;f../.P.<..AV.]....r^...nj..P

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	590095
Entropy (8bit):	7.88851623548862
Encrypted:	false
SSDEEP:	12288:DyQE4Yz1pwIxeVlvFj7GFWarrtvv+H2Rzqfb+XA6r:uQEDXwI8VdEEaXtvvqfR6r
MD5:	B407C93551D5C3BC9255A8062C13B41C
SHA1:	8C522FB0E2062DB60CA4A231B316639B30DEBA45
SHA-256:	5D5C588150228E3A4EE0B538BD3B7878DDA4421144290A3DB0815C42B82A1122
SHA-512:	CB926D46AAD94782A191DFF0D30CA5AB14B6DEB274BB533D6543A2C7D7CF38F97EE2B4A96CDFB5D46895775F87166C62EE8B13ABC4035DFA64A2927B7435BA17
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................8.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......H...s.i....X...;e.`.......F.s.3C..VVZ^.7..2.p._Z@>.....J.y....9..q..OZk.....[{.2...I#.b.-.B....e..).9G..t.w.^..l.lY..Ul..?............=(...<1.'... ..........c.Z...&..0..).N8..........z@8t.....@....23+(b....U$u..:.:.4.i{=..WC..ZB.m.9..<....2..*.#9v..$..p.....6.......l......[.....Zcv....s{.;..R....w{]&..{/[.1..........2.{....@.*...^.EH.@..Z...W..b

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 72x72, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	968
Entropy (8bit):	7.753065511654769
Encrypted:	false
SSDEEP:	24:TQkJvmEaoxCdIcq4lGRIU0MfTajbBHC+U3SEJu5SVqo:0kxaY1hIiybBiF37JusX
MD5:	E0629A1ED39D8A2F2344F04DDC0F31E3
SHA1:	24259E9209CE5BCDBE49140AFF1CBF08EE35C985
SHA-256:	227F4800ADAE8392D0C38090F99E5463C6A446E35BE9DC796B13F539B52650A1
SHA-512:	E543899C070F5B5D9471680B80207AE655EA313105AE7656D7941882340342AA66296B711F8B2E3F1D6B67E81253245054B508F13C16BAFC1E7365ADEF01F659
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/LinkNav-Microsoft-Word-72x72
Preview:	RIFF....WEBPVP8 ....P....H.H.>Q$.E#.!....8....f....U...}..W.W...!.....;.8?..W...p.H.m>.....?.....x$.\.0...G.\9/.^....>..=7...r.eZ......M.ccWq.VV...k....w..x.h&..!h....S.z<...K>.Q..'..;l..cA..,oQ..) .......{.~.`....t.~....#..p;....(3..{.mU~..."cD........3l.v..Y...u.E......\|2..\|..+.k@....wjX..?.o-.....lG^b...s.]}>EK+.]........$..q.A.q.....`.....[..ma.I]..G.......>:...'.D........4.....ZG.3..^...WqQ..o.0~1...X..@...x....U.w.^....N.......\|%.f........../.2U....7.\|..gh>"...Go.(...F`.1..^`V.Z.........r.d...\|..C......#j..I.a...\|...;G..."Y....MVw.D.."......b..G.G,o...MR..A.8.?.....$..+?.).s..........o5@..u..V...+..\r.n`9.5zh.D...`..H..;g.P...L..X.+G......d..l.]...e-vf./.f.A.:..Y...Q.......!..i.......s.,!.n.h...+L.............%V.X...>.............\|.E....g....c.l......s.....U=.....qq.?...r.E.%.s.O..mz54....i..G.tH...o..E.u....&.....gY.S......Y\|^.).;S...5%..W..mRTwV5.r}...V.w.c.P.+..LA{.1.f...i;xW9......#<6.I..

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42862)
Category:	downloaded
Size (bytes):	42863
Entropy (8bit):	5.085616303270228
Encrypted:	false
SSDEEP:	768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH
MD5:	D5A61C749E44E47159AF8A6579DDA121
SHA1:	3B41B3BC956685015A347A2238E71DB29DFA0DBB
SHA-256:	0C7178CC6CA34FB18E30F070A5E7A1C287B2D7CCFCBA2CFDF06E0F46EDA55740
SHA-512:	5ED98CB4311C373DA3EDE92BB47BCE551E22C30683EA8FC55097BAF99ABE1E0702B24DE48F8B9241047CC1E4364158F5A343E4E8FC182E8866DB4E99CCD7EE6E
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/lib/slick/dist/slick.min.js?v=DHF4zGyjT7GOMPBwpeehwoey18z8uiz98G4PRu2lV0A
Preview:	!function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var s,n=this;n.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:i(t),appendDots:i(t),arrows:!0,asNavFor:null,prevArrow:'<button class="slick-prev" aria-label="Previous" type="button">Previous</button>',nextArrow:'<button class="slick-next" aria-label="Next" type="button">Next</button>',autoplay:!1,autoplaySpeed:3e3,centerMode:!1,centerPadding:"50px",cssEase:"ease",customPaging:function(e,t){return i('<button type="button" />').text(t+1)},dots:!1,dotsClass:"slick-dots",draggable:!0,easing:"linear",edgeFriction:.35,fade:!1,focusOnSelect:!1,focusOnChange:!1,infinite:!0,initialSlide:0,lazyLoad:"ondemand",mobileFirst:!1,pauseOnHover:!0,pauseOnFocus:!0,pauseOnDotsHover:!1,respondTo:"window",responsive:null,rows:1,rtl:!1,slide:"",slidesP

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (497)
Category:	downloaded
Size (bytes):	38192
Entropy (8bit):	4.983658960473866
Encrypted:	false
SSDEEP:	384:OG6fvDy67WEmKEhdEVCnJMCYUxwPrkYwvYFq0UjbUc:OffvGY0nW7wvYFq0UPH
MD5:	FF22B014923E4D07AF559BB783FCE862
SHA1:	A7E26CABDE161C9D2CB633A24797E379435CD898
SHA-256:	D79B7164CF8BCB550AE1D842031454B2600E64A24844D9280E8155B82916EACD
SHA-512:	B4C413CC997F411962A150C406D597663EAE3B46B6B9A4A733F282E60F57C03AB7CDC505985DC4FB9DF09609F8E41D073FE85FE6FDC76A5559D5DD941E723284
Malicious:	false
Reputation:	low
URL:	https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.css
Preview:	/* ADA CSS */.body #lpChat .lp_dialog_container .lp_buttons_area .lp_confirm_button {..color: #FFFFFF !important;..border: 1px solid #fff !important;.}..#lpChat .lp_minimized .lp_notification_number {..margin-top: 2px !important;.}...lp-json-pollock-layout.lp-json-pollock-layout-vertical {..border-radius: 15px;.}..#lpChat .lp_csat_rater_star {..color: #fff !important;.}...lp_mobile #lpChat>.lp_maximized, .lp_tablet #lpChat>.lp_maximized {..opacity: 1 !important;..width: 100vw !important;..max-height:none !important;.}...lp_desktop #lpChat > .lp_minimized {..width: 400px !important;.}...lp_desktop #lpChat > .lp_maximized {..height: 600px !important;..width: 400px !important;..max-height: 95%;.}..[data-lp-point="lp_line_state"] {..left: -90px !important;.}...lp_sender {..display: none !important;.}...lp_chat_line_wrapper {..overflow: visible !important;..margin-bottom: 12px !important;..padding: 0px 10px 4px 24px !important;.}..[data-lp-point="headerText"] {..color: #fff !important;.}...

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	557
Entropy (8bit):	5.017920631493034
Encrypted:	false
SSDEEP:	12:DEARGUGLqcidEEblemSFxEARuWGBUGLqcSWGBdEEbleeESFZ:D1Jcsl21uWHcSWilv
MD5:	A722775809D2312F435036DEF15BCD62
SHA1:	2C6CF2D7ED0D1810B6C96269A4509071575E5771
SHA-256:	4DF68C42ED06B94BC6C7655FFA3F84487DCF88F2452B8BF43C217427E36E31A2
SHA-512:	3A4325C787C32BB7373B73CF419E94200167AA7CF2E689E4E1F8D46C8D9DE7607A4EAA3A346F25C3711723A30C678DE61F8813EBF81EEB66EA536968825F6B43
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/back-to-top-button/v1/back-to-top-button/clientlibs/sites.min.ACSHASHa722775809d2312f435036def15bcd62.css
Preview:	@media screen and (max-width:540px){.sticky.back-to-top.stuck{position:static}.}.@media screen and (min-width:540px){.sticky.back-to-top.pageHasChatContainer{bottom:32px !important;left:12px}.}.div.backToTopEditView[data-mount='back-to-top']{opacity:1 !important}.@media screen and (max-width:540px){.fixed-sticky.fixed-back-to-top.stuck{position:static}.}.@media screen and (min-width:540px){.fixed-sticky.fixed-back-to-top.pageHasChatContainer{bottom:32px !important;left:12px}.}.div.backToTopEditView[data-mount='fixed-back-to-top']{opacity:1 !important}

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	428785
Entropy (8bit):	7.960399565668148
Encrypted:	false
SSDEEP:	12288:6o6nnMQBrOvjfPzeI47yfuF72Y2Tg6DZY8:6o/+m4j2FNY8
MD5:	ED8EB030F3E69D0795EF0C4E40E771E4
SHA1:	07196E8A1409D7474EB51CA379743ACFC51ACDE5
SHA-256:	6C2C35F962939DB48AE17FB6AF14F50131A596FEB45A9819710290086406A9C9
SHA-512:	0FA862B9507E344C0EBF54D5A0DF30E65F1075F6D2CBE8A119D0DDB056E18033F58F1709B0BE30A8B7E8045DA5B62CBB77C36B61F6E64CC5A8990D368296A3E5
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dIj6?ver=98df
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3" xmpMM:DocumentID="xmp.did:D7C88CAE685E11EEB25FFF87BA6598B7" xmpMM:InstanceID="xmp.iid:D7C88CAD685E11EEB25FFF87BA6598B7" xmp:CreatorTool="Adobe Photoshop 25.1 (20231006.m.2353 10d5734) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c780726c-110d-4368-9520-476e0e8bd161" stRef:documentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	785
Entropy (8bit):	5.199317317445661
Encrypted:	false
SSDEEP:	12:6v/7FmVtrZZa1iNhOT27hEviwgabGall/6jtLR+Yxg208ahm:XVtrZy8iqhEvB93ll/GM4B
MD5:	859052CA7E07ACA482D0EF74F86B45B6
SHA1:	D680C1C7C84A04AB96BC23ADECEE5EFC4BC71BB4
SHA-256:	4C238159BDFD032EB6EF4FEFE83F453D3166ADEB2331BA61DBDD67DFA6D0ED36
SHA-512:	C90E978DA3ABDF5311CDDEF5354F5A8B9C136A9A9D784DF0184E3C84B9B2DB8B7289B42F83E6F747040FAC56EEB7C25D0B51C8443FC5BE9AFCD7EE5854ECA4F4
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/262443df-1388-45a9-9c78-4dd6f528d08b.png
Preview:	.PNG........IHDR.............k.XT...`PLTE.................................................................................................O.....tRNS..c.;.................F\|R1.=...L....AIDATx....R.@... ".B.bi..[..bdR..L.o...n6i...1..n.L.sk.F.......M.v....{.I...y......t..!......C..zj.....p......o.l..T..^......?..:.6=..(.o.}.}..&..E......Q...B..../..w.X...h........Et.jZ...E.5...........................................\|................./............... .................D.......S...E.Z'....y.......e.............................................8..ui.\.NN...I.........................................................?V.,............... .................D....n..R..a ........>T..]...v.N...!.......X..`.,.C.....M@cW6+.E.$4.S..:)*...e%.g\|e....#...l.c.,..H.......a.oR......IEND.B`.

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28908, version 0.0
Category:	downloaded
Size (bytes):	28908
Entropy (8bit):	7.989764549602985
Encrypted:	false
SSDEEP:	768:ncxMT2KlhUWbYQhHETORZaoTMJYfWHwRytVfQwg:nBaXgYQ9EyaoYOfSfo
MD5:	72095568168D6A31E051E4D531759151
SHA1:	8EBE72EF4631721D800AAC28D854C1D1B952FE24
SHA-256:	6BA0D1A726F1887BD61727B308ED0BE0E73EDBA17D4AD11B91AB19B632E078F6
SHA-512:	17F1417D99D76E46601D483F8516731E18CA028221A57C53D557E00F9627234576D62EB3AB5EB5FAA13EBC1D8BFF047AC86B1499756BEE22FFB76B998B7B19A4
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/semilight/latest.woff2
Preview:	wOF2......p...........p..........................`.....L..e.....T..].6.$........ ..b. ..Y...u.l....f.&......M.../....?..3p\.u.P..zOBE...x.I..T.;.....48.G..H..k..8...X..!...&M).)...{^..#.r.x...h...>.....f......^......gBP#40,.....%.f$..YD...i.`/p,..\.... &eNI.X.?.n+JP.4.g9...lq1.lA.D....E.1..;3.h.Y..ic.-.....V........:.......f.@..!....l.M-.XHJ..MH.H.)w......UN...O.u.3....Z.X..W..#... U ...,.=6P.@..4=.M.a..f.uO{....6d.6.:n....gx..M.s..jB.J..9M.&....R'fd..7....T=...Uu...d.....aQ...Vg.......}<........>@..]?)..T..)..H>..R@..J...Z(.4ePr. ] .A).H.J/..1.\..a.eY...oY.....k!b.......k..(............!...fc.....=@.h.#..-.L........y=.ic..2.P...fx.AJ....5-.(...o.t.+<h.aX0}\|G/.uYx..A.g.^o..S.F...3D....J....."....j.......a$6.....FG..1.a.2......'.g..95 4.h..VL+...Jf.V.+.U.e.Ia.Hc.v..i....dvF....n.zC...........c.La..d..AY.G.U\.B5TOM.A.4.6....4.L...cX...V....O.L..]B{.;./.s...\|..O$....y?.g.=>.G;...w.n....y.<un8..E.[.......?.....].e}^..FE....=:..Du......7.

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	590095
Entropy (8bit):	7.88851623548862
Encrypted:	false
SSDEEP:	12288:DyQE4Yz1pwIxeVlvFj7GFWarrtvv+H2Rzqfb+XA6r:uQEDXwI8VdEEaXtvvqfR6r
MD5:	B407C93551D5C3BC9255A8062C13B41C
SHA1:	8C522FB0E2062DB60CA4A231B316639B30DEBA45
SHA-256:	5D5C588150228E3A4EE0B538BD3B7878DDA4421144290A3DB0815C42B82A1122
SHA-512:	CB926D46AAD94782A191DFF0D30CA5AB14B6DEB274BB533D6543A2C7D7CF38F97EE2B4A96CDFB5D46895775F87166C62EE8B13ABC4035DFA64A2927B7435BA17
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1ljxA?ver=f018
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................8.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......H...s.i....X...;e.`.......F.s.3C..VVZ^.7..2.p._Z@>.....J.y....9..q..OZk.....[{.2...I#.b.-.B....e..).9G..t.w.^..l.lY..Ul..?............=(...<1.'... ..........c.Z...&..0..).N8..........z@8t.....@....23+(b....U$u..:.:.4.i{=..WC..ZB.m.9..<....2..*.#9v..$..p.....6.......l......[.....Zcv....s{.;..R....w{]&..{/[.1..........2.{....@.*...^.EH.@..Z...W..b

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6143
Entropy (8bit):	7.918747274282237
Encrypted:	false
SSDEEP:	96:giqNEZwhaB2uUnZFiegJzFUAgn3KLQSKr0GWYOnRs4CFbHdKiAlQhIaDe8mbUvEZ:Iym0B2vWegA7n3Ksp4GWT9UbOoXa8mbJ
MD5:	CCA42A6DD7E8378D54197303C9B94BD1
SHA1:	4D956D4A7049610D6728557695A2B40D71C24069
SHA-256:	3806A156470D2669E497B39DCD453A1F69CA74D5A1AB69EAB755185C0EFB6A88
SHA-512:	560D18D5C0DE6B86B1338ACC2778D633C612357AFB5ABC0302BBE469E435125DCBBC99D0C7B95B4BB3899187459245270AD0A19C4B2837F68709962FDD16CA0B
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/0b1fe818-4ce3-46e9-8851-111cec3c540c.png
Preview:	.PNG........IHDR.......`.............sRGB.........gAMA......a.....pHYs..."..."........IDATx^...UU...>gf...` ......"4......f..Er....(" ...\|!O..r}.$..J...... `X.(x......9..[.....C....b.......k...0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0.....B\|p..Y..y..0......R.........9..........l..ZF. ....`....>.0.H.c.y.)]2.uY.0....6......"o..7............D..(.cA.6..../....a@...BX...aP...sS.QBP...Ql<3.U.H!(.$........8.I.QD.8.....R.u. ..#H.q#.PW..u...0....Z....s..?.S.L...7.I.&u.6lX..6>..1.!..<8..w.F.......................r:..k..6.G...3&L.P.~d.)......tlfFlK[.J.[3{.^......z+.O.iA...........-r.5....u]MM..!;;;.....g.9.e8.#G...{K]]]$N#)..8p...3f...c.v.F..222N...~...:o..W.c..]QQ......3.............gk...'..!./.N$...6...E.3...?.?.....-s..f...{(e.Q..s\Dt..\|..........\....................i.j}.G...Z..}\|^^.w0..8.o.=.U..>.A...}..Q.W^.P./...e...^[[.[XX..v..].>.`....8.k..%.."NWj.."AF.\|......g..3'.2''.>..w.{3g.....^}.

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30237)
Category:	downloaded
Size (bytes):	30289
Entropy (8bit):	5.260859096902255
Encrypted:	false
SSDEEP:	768:c222n0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:cvM0S0/ks2JdImYFcw662A86vzyR
MD5:	E8551A4FAC8D2A2F035BE62CA4C029C6
SHA1:	899325923FBDD3260DD333EC42923CC422E97913
SHA-256:	4AE45C819C9D803938E8EB354B21E05A84F4BCF749B546920D2D2CA83E6481B3
SHA-512:	46591D53AE9C1ADB2DA3B7E66FF9AB0E7BC427D7984A44E18B23E255FE92AF5CC6BAFEE963A4A0AF9A98F30FBFE1A829E08EC05F53BF5080EFB70553412FED4A
Malicious:	false
Reputation:	low
URL:	https://mem.gfx.ms/meversion?partner=SMCConvergence&market=en-us&uhf=1
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"uhf","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":false,"graphinfo":{"graphclientid":null,"graphscope":null,"graphcodeurl":null,"graphredirecturi":null,"graphphotourl":null},"aadUrl":"https://myaccount.microsoft.com","msaUrl":"https://account.microsoft.com/","authA

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	477
Entropy (8bit):	4.592206338515134
Encrypted:	false
SSDEEP:	12:trV9WpBoNuJl+wrVha1zAxFcRjWjX0RhiUNNUqBOnBRcA:tZ9TuJzVha1zAx4qwdNmBOA
MD5:	3C6E76BCBDCB330437ED61530A2B2BCF
SHA1:	DAA0188C37DF74DE0EB39E2D534283B0C6A73328
SHA-256:	B8333C033E1EB189917B0AC3250B0CDA6EDCBCDFD4533F5AB2D7D559A26542C0
SHA-512:	9CAF3CBA94921BF540DD1278283164387B61A351C0EABC7BF28BE241A133811BD9924F687E1C4B360DCC31240875B087638986FFF5F2B14071817B6601D3FB67
Malicious:	false
Reputation:	low
Preview:	<svg width="65" height="65" viewBox="-15 -15 80 80" fill="none" xmlns="http://www.w3.org/2000/svg">..<path d="M16.7501 8.41185L41.1672 21.1167C42.7595 21.9452 43.3786 23.9076 42.5501 25.4999C42.2421 26.0919 41.7592 26.5747 41.1672 26.8828L16.7501 39.5876C15.1579 40.4161 13.1954 39.797 12.3669 38.2047C12.1259 37.7414 12 37.2268 12 36.7045V11.2949C12 9.5 13.4551 8.04492 15.25 8.04492C15.6977 8.04492 16.1397 8.13739 16.5486 8.31562L16.7501 8.41185Z" fill="#212121"/>..</svg>..

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4731), with no line terminators
Category:	downloaded
Size (bytes):	4731
Entropy (8bit):	5.05236928215413
Encrypted:	false
SSDEEP:	96:kE/qgXRB3tUoMt8tTo9t9tkovtdtaFtEHtkoAmtEAtZt1tOoXtUoAot+tNLjtEOV:LqgXT3iN+9KD6yv0+H6zm+Azrkoizow5
MD5:	C6F1B2C7B9D2FCFFC8A426BB333D7706
SHA1:	907CA90359C20F8FBAEDCE8865B6ADF395C0412B
SHA-256:	283759CFCF4D4079D15211B5512730899AE4BC8FF295AC8E1D60A300A96ED6DA
SHA-512:	C7D3B88C3B774BB9CED6C64C4627506C2951F38059257AF29A9CFE968F3462163DD26CB45C45A45CBED590C0A4323BD70026778E07B48B7EB2FB5730E14EB508
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/60270350/configuration/engagement-window/window-confs/4463850138?cb=lpCb82733x71282
Preview:	lpCb82733x71282({"id":4463850138,"name":"Store Messaging English SVA","description":"","json":{"logoAltText":"","scheme":{},"surveyAgentChatEnabled":false,"customVars":{},"postChatSurveyOnNonInteractiveChat":false,"sound":true,"smsPreFormId":"","surveyPreChatId":"315072652d636861742073757276657931343838333235343639353239","surveyPostChatEnabled":false,"language":"en-US","sendIconType":"arrow","widgets":false,"attachmentIcon":true,"barTitleText":"Store Virtual Assistant","clearHistory":true,"surveyOfflineId":"344f66666c696e652073757276657931343838333235343639323732","floatingWindow":false,"id":-1,"agentImage":false,"logoRedirectUrl":"","email":true,"agentAvatar":"true","surveyPreChatEnabled":false,"customStyle":{"v":"2.0","meta":{"fonts":{"1":"Arial,Helvetica,sans-serif"},"colors":{"11":"#6e6e6e","1":"#0363ad","2":"#000000","3":"#FFFFFF","4":"#b6b6b6","5":"#6D6E70","6":"#50e6ff","7":"#D2D2D2","8":"#243a5e","9":"#ffffff","10":"#f2f2f2"}},"config":{"transcript_bubble_agent_text":{"attrs":

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65188)
Category:	downloaded
Size (bytes):	1070247
Entropy (8bit):	5.677264797271502
Encrypted:	false
SSDEEP:	12288:FItZ/rRkx7Lm3j+NoVbk7+pHibXCIPLcv7KUO:SOx7LmTykzibXCIPLcDKUO
MD5:	C51EA7E9356D2A36227DEBA424C4B0C8
SHA1:	600B644073DC0105BCA47FDA36F8D59A0D502CB3
SHA-256:	E1E78B01B533ECD1DDD46FAD4D4C3A3C366C02E0367CD99AB56CB2A4341315BC
SHA-512:	6139AB71E86A4CCE1CA09B7137657C7C9B83ECF184EFC77B9AB9DFF4650A9C1CECBF14B34AD3B36C6733AE867085D3AA9C608E7AA0809DE066F749828DAC35DB
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.37.0-release_1294589553/desktopEmbedded.js?version=10.37.0-release_1294589553
Preview:	(()=>{"use strict";var e={115:(e,t)=>{function r(e){return btoa(e).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function n(e,t,n){e(null,{verifier:t,challenge:r(String.fromCharCode.apply(null,new Uint8Array(n)))})}t.Z=function(e,t){e\|\|(e=43);for(var i=window.msCrypto\|\|window.crypto,o=r(Array.prototype.map.call(i.getRandomValues(new Uint8Array(e)),(function(e){return String.fromCharCode(e)})).join("")).substring(0,e),a=new Uint8Array(o.length),c=0;c<o.length;c++)a[c]=o.charCodeAt(c);var u=i.subtle.digest("SHA-256",a);window.CryptoOperation?(u.onerror=t,u.oncomplete=function(e){n(t,o,e.target.result)}):u.then((function(e){n(t,o,e)})).catch(t)}}},t={};function r(n){var i=t[n];if(void 0!==i)return i.exports;var o=t[n]={exports:{}};return e[n](o,o.exports,r),o.exports}(()=>{const e=crypto;var t=function(e){return e instanceof CryptoKey};function n(e,t,r,n,i,o,a){try{var c=e[o](a),u=c.value}catch(e){return void r(e)}c.done?t(u):Promise.resolve(u).then(n,i)}const i=function(){var t

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (889)
Category:	downloaded
Size (bytes):	92962
Entropy (8bit):	5.482012211093105
Encrypted:	false
SSDEEP:	1536:wB4vGoYlmQr+IDv1Ty/6RsSz5TGF/46nNUgDbC03vu9FnHKDfa6Z/VUhdIKq6Tjv:wqxNrNG9FnHKD/oIKq6Tjv
MD5:	35986A813756F39AB6B922979FFEDB03
SHA1:	C8E2213BBAFAF535DA9C6676F3DBA43449E4D15A
SHA-256:	E2D92BDAAD925C6D355331A338384EE3FF82492352975DD4EFDA791AEF4AB3F5
SHA-512:	289F1C432E73F611D54EB1130013174174222A0C5EEF8E2464C5FD51EE33DC702326EEECA80B2AAE213DB2FCCB149297FC37CC9A0B6CF6E928A66BC27843F930
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery.min.ACSHASH35986a813756f39ab6b922979ffedb03.js
Preview:	/. jQuery JavaScript Library v3.5.1. https://jquery.com/.. Includes Sizzle.js. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://jquery.org/license.. Date: 2020-05-04T22:49Z. Sizzle CSS Selector Engine v2.3.5. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://js.foundation/.. Date: 2020-03-14./.'use strict';(function(H,Sa){"object"===typeof module&&"object"===typeof module.exports?module.exports=H.document?Sa(H,!0):function(Ta){if(!Ta.document)throw Error("jQuery requires a window with a document");return Sa(Ta)}:Sa(H)})("undefined"!==typeof window?window:this,function(H,Sa){function Ta(a,b,c){c=c\|\|M;var d,f=c.createElement("script");f.text=a;if(b)for(d in Kc)(a=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&f.setAttribute(d,a);c.head.appendChild(f).parentNode.removeChild(f)}function Ia(a){return null==.a?a+"":"object"===typeof a\|\|"function"===typeof a?db[Ob.call(a)]

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	466396
Entropy (8bit):	7.974943801737297
Encrypted:	false
SSDEEP:	6144:kdInv1yi9esnNeCcb6fSZbEq6NiDBvfKrwu0lWyTStQkz1sSslnldFWnZc0TyukR:7Nyi9fMLv/DpKcuiWESWldYnZc0TcJ
MD5:	F563A171994601BEECAFAC94106BC0A4
SHA1:	887FA922B89737BE509EA1712D9136BC88D0F015
SHA-256:	36686571CC18CC8464B4A57330D11C137D45DF5352DF0767AFEDBCF660171D0A
SHA-512:	6BFFF3E2328D17EF8341904F17CB03A18C7B40DC64812E15446F5791FFB45ABB99A21333162BFF19B5EA33E6215E92F1B5E9CB36AFA6252C5AD415C55690FA66
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1dNAQ?ver=5ff6
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3" xmpMM:DocumentID="xmp.did:811CDA1A686011EEB25FFF87BA6598B7" xmpMM:InstanceID="xmp.iid:1D29C068686011EEB25FFF87BA6598B7" xmp:CreatorTool="Adobe Photoshop 25.1 (20231006.m.2353 10d5734) (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:c780726c-110d-4368-9520-476e0e8bd161" stRef:documentID="xmp.did:8625224f-23d6-4d04-935d-b9392cc724f3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x840, components 3
Category:	downloaded
Size (bytes):	202201
Entropy (8bit):	7.966935042901671
Encrypted:	false
SSDEEP:	6144:xnXNILgypM3yjpbRubeHIQVmo1N5b0W071r:xnXeL+34Nub+8o1n2h
MD5:	75698F41FEB33A226246955EE98DAB87
SHA1:	79336F61F1442C5ECF22A3654E96B4048EEC9C3B
SHA-256:	C60DE8889FE03BDBECDCB77D03DAC94635A1A28BA25D875FE168342DF1B48FC4
SHA-512:	36A31F7CE89B78597425A0C9676397B33C1AEA85EAADF5EDAC9B09357B5884CDA8CFBE95B0820AB8F04FEADE0833D5546F00E04ACC3541A2E66E90649A7D5949
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/be5817b0-19ab-4511-a12c-e6e0f9851fc7.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	273
Entropy (8bit):	4.935550956354982
Encrypted:	false
SSDEEP:	6:Q3RnadmyWRLnadIrM9nadYErmC+LGonbWJ/cxLZ/c8en:cYdIRGdIg8dlHEGKbWNq3e
MD5:	48D949B834ED32DFD8266989E9DAB912
SHA1:	CA65B388C56F18256DC5EB3EB1FFC20578E45C76
SHA-256:	A01677A70917A26959BD831C8728392B90EA24185C0A45E0ECC927E8E558D289
SHA-512:	CD6A491474312DC3605BA3259BE5C6F4AD6D14C34DB43FD4658AC15A1C129507A4F085065ACB15F2D3135D479A856736676A7F500C8654B1079E1AD23036931D
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/back-to-top-button/v1/back-to-top-button/clientlibs/sites.min.ACSHASH48d949b834ed32dfd8266989e9dab912.js
Preview:	'use strict';$(function(){var a=document.querySelector("#msChatContainer"),b=document.querySelector(".back-to-top.sticky"),c=document.querySelector(".fixed-back-to-top.fixed-sticky");a&&b&&$(b).addClass("pageHasChatContainer");a&&c&&$(c).addClass("pageHasChatContainer")});

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	167730
Entropy (8bit):	5.045981547409661
Encrypted:	false
SSDEEP:	3072:OzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxW:clZAP+keedJ
MD5:	AFB5C64B13342F6E568093548D0A2A9F
SHA1:	95FC121CCCFDBA12443CF87A9C823486065A14AB
SHA-256:	238DB52476BF8107E2E851CD3299B071ED5944B570C1603A1EA758A4FADF5F29
SHA-512:	6FE8BADD1B94E81464C0808383A4CC77F779BF226A3C13B58B2BCB36332995EFBC7711373EE8AB2A8BC52675884F9885D168CB2DE9535E39E71B0B72940691E1
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/2b-7ae144/7e-3283eb/69-8122fc/86-016699/72-2b1d8c/80-6461e7/2a-d9be59/51-40faf7?ver=2.0
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1720 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13016
Entropy (8bit):	7.883155506636877
Encrypted:	false
SSDEEP:	192:1usWVOBxMoGH4u9YRcVnk3rPnmE+59UOy+tYwOjPMZdC8NhfQyQYLWrBvo04uE:GKx3GH/9Y0cmAOXtYwOadVhfyYLyP4uE
MD5:	F5B4B4F04F1924F9470DC3C0B3E4FC01
SHA1:	28D187B90F70638832771600CD556BC85B418A37
SHA-256:	98FB37F9F0DA54BB17E1322E1A49D5D683854A0BD3DE47C01EB3F0CCBB8B2999
SHA-512:	676E6866C149E56699CA65887D4DB5903CD6F84D32987215F218082E4E441340931221BDED2A78512DEDF417848379DD7E45BF4F87804BC7FEFF7CB3632CB53B
Malicious:	false
Reputation:	low
URL:	https://lpcdn.lpsnmedia.net/le_unified_window/10.13.0.5-release_5314/resources/icons/desktop/sprites_v1.png?v=10.13.0.5-release_5314%22%20alt=%22End%20conversation
Preview:	.PNG........IHDR.......P.....B.uk....pHYs...........~... .IDATx.....\.u..+{)....b...G9d....hL#....."p-[K.J.6G.;..i4..q.8.0q.vk...QVk#...3.lq...a+....J.....b..vQ....b..)...s..7....w.}.... w~.}3.....k.^.h.....X.z}.a.9<...............-o......c.-..s.Ti.......^x...g_.i...=........\R?0S....sg.....G....o.J.m...].b....u...w.Z...[...}.l...1.~..B...7.\HT?0S...n....y"......z}.^`.4.T....Y......?7w.;..A...X...s..Um..~`..V..G.J,$.5...Mg..#.\|...S...O.?..u..7]{....nxK.....?2.<.....N..i...?....=.......q....>..c[..f...#.jG..F.!6.......G.}O.~..$..w..+..,....M.>.}....6T$1g?.Z......1.l_5....6.-......-.W.$..B"9!V.q.JCd....G.I.C8...... 4....K....mH....d.&..IT..<.~...,Hp.%.v.@.~.7k......Z.Y......p.^#.....l.35..5I`j'%..1..x.........={.o....bye..;v..1./~.w[..{@.N...J.mG..z...[w.=x....K....C..\......;....{o....Y..?...K;c..~...u.)m.M...m-.g.}O.MU.7.~._.eK~..UI 6Ht..l6.........F2v....q.zV..TZ..w}v.....h.t...T%..>5.7.$.{A...lsY..2.K..f.b.>....)...K...RL

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (525)
Category:	downloaded
Size (bytes):	1239
Entropy (8bit):	5.011412010382019
Encrypted:	false
SSDEEP:	24:Y0vUS6zAKBzAczA+EPXmfofuofdBXnhAMK1ySYR2ssR2pR28WR2VR2dC8tnsNNy1:DvUS6EiEcE+q0ofuofvXhTgyzQssQpQP
MD5:	BE9241018193DAE097407988285EEABE
SHA1:	0CC741A9010D95908A6D284F3F149ECB11B77805
SHA-256:	44C4D4DAC7D5483313344CF58EE34C555E4B2CC347E7F377B0BD10D442245532
SHA-512:	6E26ECAC3CD7EC8E30A5E2FAC98436942C11FE6C0B18777ABBE306E2E3B626ED6049079C00A3689CE182450EC4F8F6B1317B49027D087C500BECD3015E832012
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/buy-now/v1/buy-now/clientlibs/site.min.ACSHASHbe9241018193dae097407988285eeabe.js
Preview:	'use strict';(function(){const d=document.querySelectorAll(".buy-now [data-tab-target]"),f=document.querySelectorAll(".buy-now [data-tab-content]"),g=document.querySelectorAll(".buy-now .LinkNavigation.includes .Imagearea"),e=document.querySelectorAll(".buy-now .LinkNavigation.includes .popoverdialog"),h=document.querySelectorAll(".buy-now .LinkNavigation.includes .closebutton");d.forEach(a=>{a.addEventListener("click",()=>{const c=document.querySelector(a.dataset.tabTarget);f.forEach(b=>{b.classList.remove("active")});.d.forEach(b=>{b.classList.remove("active")});a.classList.add("active");c.classList.add("active")})});g.forEach(function(a,c){a.addEventListener("click",function(b){b.preventDefault();e.forEach(function(k,l){k.style.display="none"});this.nextElementSibling&&this.nextElementSibling.classList.contains("popoverdialog")&&(b=this.offsetTop+54,this.nextElementSibling.style.left=this.offsetLeft+58+"px",this.nextElementSibling.style.top=b+"px",this.nextElementSibling.style.displ

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3425
Entropy (8bit):	7.841897699671826
Encrypted:	false
SSDEEP:	96:Kzrhpej8oDVkPi6wH/W8FmBNPZYyTV/RK5nKCuELCBgzurc7:KHh3akYfWFLZnRKZKC9+Szur4
MD5:	B7B315E5398A5177F50394FC16F577A6
SHA1:	23D3CBF6A21D4FC6C275E70CD71E9F276BB4DB52
SHA-256:	92AA5DEC4F2EE690CF1F8230FD67ED58B5918A7D1B0137DEE46E6751FB439DA6
SHA-512:	DA6BC2F39791E40E96FAB9E415F2E42E7F437E21BC9EC42488A160E1D5299315B39C9687D32E8EAEBB0828C1EAC6353B7B57F874B0B1EEE25A62DBF6347F2935
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.XT....PLTE....\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|..\|........2tRNS................+.J....4P&.k`..u[9!zVC.p.g.0...>u..B...EIDATx......0...A.j...{.w...Kw......?...F...S..e:....6rL....m.-.6.h....u.......^.,.^.H....7......n......# .9..}i.}O@U.....a...?..`$A.......`l.."..C,.....M...V..b...V...b.AudLM...dP....e.w.....Y....{m........=..cTi..juz.^.....L.C).o....,rl?^.".~8........4.ht....h.........vZD...Z.5\|....ptDj.....T..w\|....}.9.8..Bga"7o.....5..(0wo4.g........S.xx._.s......s.V.-?.`.m=.]..O&...;.)...X...!.^j..y...?<.?..M\|eO...-...C.....uG.O..2V1.....+....a........A.K.}...3..)..Z...5n.F...S.-2......../b>.z....2.-...q.....w9!.Z.x.:.e:....D..9.x.W..`..Ft..}./...@....E.Z[xaB..x.P.../..dM.....62h.H..C&~J......!.p}d$vT.w...$c...:..d#;.'.@...5....P^..\...6F>vH..6r..M.G^..3F~...12....@F?.2\|X...Pv....7.~. e.+.

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1433
Entropy (8bit):	7.4719401516006405
Encrypted:	false
SSDEEP:	24:+cKYj6L/z80ksuMe3H5bPYUQgjNYOJbjgIr2oMX57B+IeBO3SPHMraG/MnoX:+cKYjw/oMuMe35AvWgI2UrO3csliO
MD5:	FE139496D8F451CED61C18786B46EFFE
SHA1:	7DE4A92E6F264D2B3F1EDA998DC09401798181AD
SHA-256:	15FB91B680A9EECC4FD7860A73BC393AA5C4738180DACF83171BE826A1C7C2C6
SHA-512:	5DEECB01B5721F1C042415700DF27CCC1331AC09DB4FD1493087A746CE37FEC5FD69A6A188F7AEA43EEC9F96A1B5A330FCBD9AD738D99E9B72C03AA4E871C739
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/chat-2?scl=1
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......M...M....pixi............av1C........colrnclx...........ipma...................mdat.......Lh...B2.......q .@.+@..&.H..>2..7:..u....!mAZ.....-...J....E.%6..........x.............r...#.$.Hx.(.....H...i.;w.g..5..a.Qb....6.".R......&..q..t.UM.%.Xj.+.M.^.aE.......4.b..9..+y.3.Eyr..n$......M.n;5X.t.m...dTP.-....Tp.....F....6...7.....(.cR.e%)@\.(..'..._._.a.U.)+."..n.2.{z...e_....-......2...#.....LG..WJ .<..HW....A.l..Me.x.RR\|.-.W.@J......0.....W.A\."..s..l.s...B....+.:...q..r..U...wa.kw.W.....K.3:.....OE.....^X\..\.eL....z.2.'.....R.=.\|..2.C._......#+...e....B.e.&.mA........G.3.6.J..5..`.S..A9..T....0...3....U.6V.6.I`}h.C....T.72]...3.._Sfc....o^.........fz6..H..:..xf..Z.z..Mn'.. .Dm.r\.n.....0..).W..,.....>g...M.X.V.r......x<B..^e.?.<.V.{.`....x..}g..Y.KG.s..

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 352725
Category:	downloaded
Size (bytes):	101932
Entropy (8bit):	7.9975103438672415
Encrypted:	true
SSDEEP:	1536:56VpoRXw24C1n+hsRGxvOVV9C+j0r/aBRl75/JRPfs1rWOJdm/2cvfUXnbb32UH:Dw24C1+d8a3iB75/JRPfs1ujvfafpH
MD5:	B7FE6DD421C792F445730D6D393E72D5
SHA1:	BE98E042D67B647FE56204CA47FA8A59936305A2
SHA-256:	429189DDEF576C4DF5A1C59C39B21A022CCEC185E922F67C54AF13E8ACE7D48E
SHA-512:	EBAB66208BD6903B849106C1329F5A78B0C226FC05CBF6674110397BDA6057ECFF9A18941E7D7D0DE2841E5E6BC54F41A5D283614BBCBBFA2C19C92D6386C623
Malicious:	false
Reputation:	low
URL:	https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js
Preview:	...........k[..(.}....0R......;.7.'a.m0.f."..+1.#.!....OU.E......y.................v.\|....7.&q......jn>..t...\|.X.k.....5...u...(..y}.][.u....6._._...$.,...C....(fX.>.U.z..d.6.C?...E9.{9.n..5..U.^......w-l(... <...7(`57r.]H......./.....1.>.b6.4...u..C.`q...x;....$.f.[....>..`...d.}..&.l2... ....s...(T..5..........k../.6.5~w-.9,.....>...o..3..X....2....o.Q0a. d45..5.].GW..p...Y<.... .^uB.b,.t.a{..{.\|~.Ot.4.Oy..&..'f..I'..81....!.....vU...$X...?......0.p..M...d.M/..o.......evE3..............,Ip..'..?fW..\|x.D..v.2...3...{[k....6.~.?Y.....i.v..Y.m.x...v.[j&a.R.xV.....#q....A..p.../...@....\|c..x..g=X.x:^...?*':..(......}.G.P.....4..]...GC@\|k.tk....^g.d...1.......Vs...rj.."a...1...q.G.\...y.0.X.[?.;......k..x........4u...~.CdB".....:$`.y)..c3m...vt=......$....B..`i...0.>e.....Ib...~8.E..e..:s.:..`...9..&\|..d......>....>..O..A...,./.....v7...n.(...B..........._3=.2.=#.._.}......M.n+A.l..P...$...`.....L../.....\|.j....,o.>Ru..?N.K...Mp%1..S......U.(?..u.

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6695), with no line terminators
Category:	downloaded
Size (bytes):	6695
Entropy (8bit):	4.88339278941013
Encrypted:	false
SSDEEP:	96:kTKVEtYqv/RQZDoWuEe7cB6a3DRLIQrPYCD1aCf:k+/0SZ2EGk39DPo4
MD5:	2EA8743282D0F37D83A741D4865A4380
SHA1:	314199713832F54D47FCC4A02C10694415D8E3D6
SHA-256:	8464E89A3405882018354BABA048187A60F3544539C6036C1B03BD4D8D221E32
SHA-512:	5FECD648A474DEFCE3AE86181AE5F4CA827D9006D2DBEBC7CA5B7AABDE89633747086A407711F64ABB95F2C7B15CEE4296590EF39C0F6FBEA4668E55255587F7
Malicious:	false
Reputation:	low
URL:	https://accdn.lpsnmedia.net/api/account/60270350/configuration/setting/accountproperties/?cb=accountSettingsCB
Preview:	accountSettingsCB([{"id":"messaging.ios.sdk.min.version","createdDate":"2017-01-10 04:11:41","modifiedDate":"2023-01-22 16:38:10","type":2,"propertyValue":{"value":"1.1.36"},"deleted":false},{"id":"nbc.integrations.adobe.analytics","createdDate":"2021-07-07 07:29:31","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.audio.sharing.enabled","createdDate":"2018-05-13 02:02:09","modifiedDate":"2018-11-14 08:32:03","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.ios.logs.settings","createdDate":"2017-01-10 04:11:41","modifiedDate":"2023-01-22 16:38:10","type":4,"propertyValue":{"value":{"level":"WARNING","minLogLevel":"INFO","randomFactor":1000.0,"maxEvents":50.0,"maxPendingEventsRequests":10.0}},"deleted":false},{"id":"le.site.otk.forceDurationOverride","createdDate":"2021-06-29 03:18:17","type":2,"propertyValue":{"value":"false"},"deleted":false},{"id":"messaging.file.sharing.blurAllConversationImages","createdDate":"2021-04-13 05:58

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6341), with CRLF line terminators
Category:	downloaded
Size (bytes):	25483
Entropy (8bit):	5.997823934558386
Encrypted:	false
SSDEEP:	768:h8EQ+D8jD6h7zOowCdw2YB6c7+Z6EkH/anOik:KDeB183IU
MD5:	9B1985D7ED25B601EE5DA21590824CE7
SHA1:	2B71037C9426729436A01AACE103C3B9016E80E4
SHA-256:	9B2FC7A60784111F7AC916A60DAD4DB56C49D40C1FB80BBAED0FDA97206192ED
SHA-512:	BFB6CB6F33012F0ABBD1C23D55A07F5B9502A63D7492CCAA882B7EAC6BDA9FA06131ED386060494F802DFF5579E2458D5934D0BAF674D309214465BC0BABB4EB
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/videoplayer/lib/js/auto-play.js
Preview:	if (require(["jqReady!", "window", "document", "location", "deferExec!"], function () { window.location.host.indexOf("businessstore.microsoft.com") != -1 && msCommonShell && (msCommonShell.as = { callback: function () { } }) }), window.location.host.indexOf("businessstore.microsoft.com") != -1) { var p = document.createElement("nav"); x = document.getElementById("headerUniversalHeader"); x.insertBefore(p, x.firstChild); p.outerHTML = "<nav id=uhf-g-nav><\/nav>" } require(["jqReady!", "deferExec!"], function (n) { n("[data-ocms-id] .m-content-placement section a, [data-ocms-id] .m-content-placement section").removeAttr("data-js-href").removeAttr("href").bind("mouseup click mousedown", function (n) { n.stopImmediatePropagation(); n.preventDefault() }) }); require(["jqReady!", "deferExec!"], function (n) { n("[data-ocms-id] .m-hyperlink-group-content-placement section a, [data-ocms-id] .m-hyperlink-group-content-placement section").removeAttr("data-js-href").removeAttr("href").bind("mouse

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	15222
Entropy (8bit):	7.9775166410284575
Encrypted:	false
SSDEEP:	384:M4u3OnpvCIlPpEyeJElnb5V4PnxbEs9h0iJhy0OdUS1V:C3zIhEhw5exbVy0Oyq
MD5:	ECD7ADDCBD950B30D58C1FA180BB55B1
SHA1:	A387F09F77FCAC1460CA3CEB5311465FA3E0B453
SHA-256:	28B446AD909403F020E3F581D4937768C413313FCF856A6BED9E84D967BB01F7
SHA-512:	97768511CE5D44417218511089B1CAA1E059724A390933BC1AE5CCF85D783AAC0CFF979200A7868C95ED1C7559CF46E4C1372258EA62AA343EAFA51355478159
Malicious:	false
Reputation:	low
URL:	https://cdn-dynmedia-1.microsoft.com/is/image/microsoftcorp/gldn-FEATURE-powerful-apps-2120x1190:VP4-630x449
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............:\...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......v........pixi............av1C........colrnclx...........ipma.................:dmdat.....&'^.D.4..2.t.p.A....@....cR_(....Z..D.......)..qv...bm;.LrG.)$CM.y...l.f.q..-}..\......8...%_U..........jl..0?..\|...Pn........C...`2m.&........+...~..r.+...1C._a.T-]..Yuyh..e.k..#.C...g.{Y.tS....K?.4.{.P..9`Ol].fi.E..%...........F..+.g.Z.)...fE.S........toF......[........f:K..>....W.J.cR..1..>W....y...<69........<k.xu.:a.%W>..Z.:A..X...=.z..>.X..<S..Bf.:..W...f.8I....o...F....27.s..u.TI.m..\|..2-'.<.A4N......\ ......A..L.G..N3..a[=...h..CcS....{...k.kil...A.1+...F)...T.Y...6..a......_Ts.e...Ab... F......,..........(aP.\|.L2..3......F.I..0.....\|.H.$3. V..=?._.P......i..8?.E.Z@.W...zT.d>.8\|..*..!l..?U.:..q..B..CX...`_.9.qI..P.c..6.o.VA.M...V.l.=..x..D.\|.........{.[J.j-.

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3385), with no line terminators
Category:	downloaded
Size (bytes):	3385
Entropy (8bit):	5.293928956465786
Encrypted:	false
SSDEEP:	96:W4zB+C3yvyE14QHzsyTz4n/2yx/2ydgC2ZPXOMs9:Wy+C3y6k4QPItzqC2xXOMs9
MD5:	838B4CF03009164350BEE28EC54B1B28
SHA1:	7289901F526CD15984F080E40BBF8B8B6098EB73
SHA-256:	70C7CD74052E7BB3716548F7748B7FBF90C8BB39B0F688495B5D3D8974295A72
SHA-512:	48763334DD0DE579917B94CC53A7D002AFF1D5EF46D2D4BEA8991B05ACB355CD67A21495751EDCB89DFB0A6AE3F773419DAFF49A6DFE9EA48CC8E80BCBF99BF1
Malicious:	false
Reputation:	low
URL:	https://support.microsoft.com/css/StickyFeedback/sticky-feedback.css?v=cMfNdAUue7NxZUj3dIt_v5DIuzmw9ohJW109iXQpWnI
Preview:	.supStickyFeedback{position:fixed;width:100%;bottom:0}.supFeedbackFullTextIsOpen{height:222px}#ocHelp{min-height:75%}#supWrapperToPreventFeedbackFlickering{min-height:59px}.ocSmartFeedbackBegin{height:38px}#supFeedbackWrapper{background-color:#f2f2f2;max-width:none;z-index:10000}#supColumnWrapper{padding:11px 0 10px;border-bottom:1px solid #cecece}#supDisableStickyFeedbackButton{position:absolute;top:0;right:15px;font-size:1.4em;text-decoration:none}html[dir=rtl] #supDisableStickyFeedbackButton{left:15px;right:auto}html[dir=rtl] .ocFeedbackButton{margin:12px 0 0 5px}html[dir=rtl] .ocSmartFeedbackReply{text-align:right}#ocMainContent{min-height:100%}.ocFeedbackButton{min-width:62px;height:28px;font-family:"Segoe UI","Segoe UI Web","wf_segoe-ui_normal","Helvetica Neue",Helvetica,Tahoma,"BBAlpha Sans","S60 Sans",Arial,sans-serif;font-size:15px;font-weight:normal;color:#313131;display:inline-block;text-align:center;text-decoration:none;border:1px solid transparent;background-color:rgba(0,0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 5, 2024 07:55:04.351111889 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 5, 2024 07:55:12.669431925 CEST	49735	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:12.669492006 CEST	443	49735	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:12.669568062 CEST	49735	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:12.669599056 CEST	49736	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:12.669606924 CEST	443	49736	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:12.669658899 CEST	49736	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:12.669951916 CEST	49736	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:12.669970989 CEST	443	49736	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:12.670114994 CEST	49735	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:12.670125008 CEST	443	49735	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:13.654393911 CEST	443	49735	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:13.654664993 CEST	49735	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:13.654699087 CEST	443	49735	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:13.655777931 CEST	443	49735	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:13.655844927 CEST	49735	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:13.656979084 CEST	49735	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:13.657053947 CEST	443	49735	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:13.657239914 CEST	49735	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:13.657248020 CEST	443	49735	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:13.658572912 CEST	443	49736	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:13.658759117 CEST	49736	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:13.658767939 CEST	443	49736	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:13.659845114 CEST	443	49736	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:13.659904003 CEST	49736	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:13.660739899 CEST	49736	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:13.660811901 CEST	443	49736	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:13.711941957 CEST	49735	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:13.711941957 CEST	49736	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:13.711958885 CEST	443	49736	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:13.758496046 CEST	49736	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:13.961752892 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 5, 2024 07:55:14.255747080 CEST	443	49735	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:14.255867958 CEST	443	49735	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:14.255924940 CEST	49735	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:14.276191950 CEST	49735	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:14.276237011 CEST	443	49735	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:15.801287889 CEST	49741	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:55:15.801315069 CEST	443	49741	216.58.206.36	192.168.2.4
Jul 5, 2024 07:55:15.805090904 CEST	49741	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:55:15.805434942 CEST	49741	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:55:15.805457115 CEST	443	49741	216.58.206.36	192.168.2.4
Jul 5, 2024 07:55:16.240874052 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:16.240935087 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:16.241084099 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:16.244954109 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:16.244982004 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:16.473753929 CEST	443	49741	216.58.206.36	192.168.2.4
Jul 5, 2024 07:55:16.474287987 CEST	49741	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:55:16.474313974 CEST	443	49741	216.58.206.36	192.168.2.4
Jul 5, 2024 07:55:16.475390911 CEST	443	49741	216.58.206.36	192.168.2.4
Jul 5, 2024 07:55:16.475548029 CEST	49741	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:55:16.481101036 CEST	49741	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:55:16.481189966 CEST	443	49741	216.58.206.36	192.168.2.4
Jul 5, 2024 07:55:16.538249969 CEST	49741	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:55:16.538269997 CEST	443	49741	216.58.206.36	192.168.2.4
Jul 5, 2024 07:55:16.584402084 CEST	49741	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:55:16.918055058 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:16.918122053 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:16.921941996 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:16.921967030 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:16.922235012 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:16.963973999 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:16.977999926 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:17.024496078 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:17.196491957 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:17.196557045 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:17.196608067 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:17.196650982 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:17.196674109 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:17.196686029 CEST	49742	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:17.196691036 CEST	443	49742	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:17.227232933 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:17.227264881 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:17.227324009 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:17.228106976 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:17.228127003 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:17.358311892 CEST	49746	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:17.358355999 CEST	443	49746	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:17.358413935 CEST	49746	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:17.359306097 CEST	49746	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:17.359325886 CEST	443	49746	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:17.373157024 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:17.373167992 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:17.373222113 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:17.380182028 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:17.380192041 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:17.876214981 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:17.876337051 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:17.878931999 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:17.878943920 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:17.879209995 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:17.882939100 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:17.924508095 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:18.027029991 CEST	443	49746	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:18.028760910 CEST	49746	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:18.028790951 CEST	443	49746	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:18.029838085 CEST	443	49746	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:18.029953957 CEST	49746	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:18.030927896 CEST	49746	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:18.031001091 CEST	443	49746	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:18.059968948 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:18.060364962 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:18.060374022 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:18.061388969 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:18.061512947 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:18.062585115 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:18.062644005 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:18.085170984 CEST	49746	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:18.085197926 CEST	443	49746	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:18.116080046 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:18.116113901 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:18.130939007 CEST	49746	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:18.158091068 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:18.158159018 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:18.158227921 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:18.159365892 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:18.159365892 CEST	49743	443	192.168.2.4	184.28.90.27
Jul 5, 2024 07:55:18.159388065 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:18.159399033 CEST	443	49743	184.28.90.27	192.168.2.4
Jul 5, 2024 07:55:18.163567066 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:19.650340080 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:19.696506023 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.765634060 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.765662909 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.765671015 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.765713930 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.765737057 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.765747070 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.765750885 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:19.765769005 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:19.765774012 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.765799046 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:19.765820980 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:19.855770111 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.855813026 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.855844975 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:19.855856895 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.855870008 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:19.855897903 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:19.855920076 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:19.877830029 CEST	49749	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:19.877840996 CEST	443	49749	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:22.642683983 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:22.642724991 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:22.642788887 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:22.643157005 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:22.643172026 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:22.737255096 CEST	443	49746	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:22.737309933 CEST	443	49746	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:22.737361908 CEST	49746	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:22.917428017 CEST	49746	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:22.917473078 CEST	443	49746	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.244550943 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:23.244590998 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:23.244662046 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:23.244915962 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:23.244929075 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:23.369538069 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.413800955 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.461694002 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.461708069 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.462819099 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.462868929 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.465225935 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.465290070 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.466937065 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.466943979 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.509771109 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.576395035 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.576428890 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.576438904 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.576467037 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.576488018 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.576503038 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.576514006 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.576539993 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.576554060 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.576582909 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.689414978 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.689445019 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.689510107 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.689534903 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.689543009 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.689791918 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.690499067 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.690521002 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.690551043 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.690558910 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.690582991 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.690619946 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.781603098 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.781625986 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.781667948 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.781685114 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.781718016 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.781732082 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.782279968 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.782295942 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.782340050 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.782346964 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.782377005 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.782396078 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.782890081 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.782947063 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.782962084 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.782989979 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.783001900 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.788739920 CEST	49796	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:23.788755894 CEST	443	49796	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:23.914664984 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:23.940694094 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:23.940746069 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:23.940805912 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:23.941265106 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:23.941307068 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:23.942538977 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:23.942604065 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:23.942892075 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:23.942905903 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:23.943655014 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:23.943747044 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:23.944003105 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:23.944010973 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:23.992594957 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.085057020 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.085091114 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.085098982 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.085129976 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.085146904 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.085160017 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.085165024 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.085174084 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.085194111 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.085222006 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.176069975 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.176109076 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.176146030 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.176162958 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.176187038 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.176208019 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.177759886 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.177786112 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.177819967 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.177825928 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.177853107 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.177871943 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.266607046 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.266628981 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.266700983 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.266712904 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.266771078 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.268090963 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.268107891 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.268161058 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.268167019 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.268194914 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.268219948 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.269201040 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.269217014 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.269257069 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.269263029 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.269285917 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.269308090 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.270353079 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.270370960 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.270421982 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.270426989 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.270467997 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.358649015 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.358668089 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.358709097 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.358726025 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.358747959 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.358767033 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.359493971 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.359508038 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.359541893 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.359549999 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.359565973 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.359594107 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.360485077 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.360502958 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.360536098 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.360547066 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.360562086 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.360588074 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.361068010 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.361090899 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.361116886 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.361120939 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.361146927 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.361166000 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.361382961 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.361401081 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.361434937 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.361439943 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.361464024 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.361483097 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.362150908 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.362195969 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.362200022 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.362237930 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.362277985 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.377324104 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.466665030 CEST	49800	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.466680050 CEST	443	49800	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.605767012 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.606053114 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.606067896 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.607088089 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.607202053 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.925071955 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.925420046 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.925431013 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.925565958 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:24.975768089 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:24.975790977 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.022859097 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.030203104 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.030225992 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.030234098 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.030265093 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.030278921 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.030293941 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.030311108 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.030327082 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.030365944 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.030612946 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.118288040 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.118299007 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.118330956 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.118419886 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.118419886 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.118437052 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.118571043 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.120234013 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.120256901 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.120290995 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.120315075 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.120322943 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.120362043 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.120405912 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.120454073 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.121256113 CEST	49801	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.121290922 CEST	443	49801	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.288140059 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.288188934 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.288317919 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.289819956 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.289848089 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.953227997 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.969191074 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.969207048 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.969659090 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.970805883 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:25.970868111 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:25.971276045 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.016503096 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.073628902 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.073653936 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.073668003 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.073741913 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.073754072 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.073843002 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.162605047 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.162626028 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.162714958 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.162714958 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.162733078 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.162767887 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.164458036 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.164474010 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.164580107 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.164580107 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.164592028 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.164664030 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.251271963 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.251295090 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.251343966 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.251358986 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.251389980 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.251389980 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.252511978 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.252526999 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.252594948 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.252604008 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.252640009 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.254108906 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.254123926 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.254163980 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.254180908 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.254219055 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.254240036 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.254241943 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.254254103 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.254300117 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.254306078 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.254337072 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.254342079 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.254371881 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.254842997 CEST	49804	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.254857063 CEST	443	49804	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.396270037 CEST	443	49741	216.58.206.36	192.168.2.4
Jul 5, 2024 07:55:26.396344900 CEST	443	49741	216.58.206.36	192.168.2.4
Jul 5, 2024 07:55:26.396392107 CEST	49741	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:55:26.720953941 CEST	49741	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:55:26.720982075 CEST	443	49741	216.58.206.36	192.168.2.4
Jul 5, 2024 07:55:26.746263981 CEST	49815	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.746275902 CEST	443	49815	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.746436119 CEST	49815	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.752779007 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.752787113 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.752857924 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.757344961 CEST	49815	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.757359982 CEST	443	49815	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.760636091 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:26.760643959 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:26.764456987 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:26.764497042 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:26.765033960 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:26.766947031 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:26.766962051 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:26.811789036 CEST	49819	443	192.168.2.4	63.140.62.17
Jul 5, 2024 07:55:26.811821938 CEST	443	49819	63.140.62.17	192.168.2.4
Jul 5, 2024 07:55:26.815001965 CEST	49819	443	192.168.2.4	63.140.62.17
Jul 5, 2024 07:55:26.818938017 CEST	49819	443	192.168.2.4	63.140.62.17
Jul 5, 2024 07:55:26.818952084 CEST	443	49819	63.140.62.17	192.168.2.4
Jul 5, 2024 07:55:27.443988085 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.461632967 CEST	443	49819	63.140.62.17	192.168.2.4
Jul 5, 2024 07:55:27.463001966 CEST	443	49815	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.506294012 CEST	49815	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:27.506294012 CEST	49819	443	192.168.2.4	63.140.62.17
Jul 5, 2024 07:55:27.646982908 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:27.648508072 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.650963068 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:27.654952049 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:27.793190002 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:27.798362970 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:27.798393011 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.798968077 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.805908918 CEST	49819	443	192.168.2.4	63.140.62.17
Jul 5, 2024 07:55:27.805932045 CEST	443	49819	63.140.62.17	192.168.2.4
Jul 5, 2024 07:55:27.806083918 CEST	49815	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:27.806106091 CEST	443	49815	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.806385040 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:27.806396961 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:27.806529999 CEST	443	49815	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.807099104 CEST	443	49819	63.140.62.17	192.168.2.4
Jul 5, 2024 07:55:27.807112932 CEST	443	49819	63.140.62.17	192.168.2.4
Jul 5, 2024 07:55:27.807157040 CEST	49819	443	192.168.2.4	63.140.62.17
Jul 5, 2024 07:55:27.807497025 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:27.807509899 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:27.807549000 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:27.809982061 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:27.810054064 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.814255953 CEST	49815	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:27.814332008 CEST	443	49815	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.818645000 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:27.860505104 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.953696012 CEST	49815	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:27.953953981 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.953973055 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.953988075 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.954041004 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:27.954047918 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:27.954087973 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:27.999042988 CEST	49672	443	192.168.2.4	173.222.162.32
Jul 5, 2024 07:55:27.999083996 CEST	443	49672	173.222.162.32	192.168.2.4
Jul 5, 2024 07:55:28.043623924 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:28.043644905 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:28.043682098 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:28.043692112 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:28.043730021 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:28.043739080 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:28.046108007 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:28.046123981 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:28.046171904 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:28.046176910 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:28.046211004 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:28.046936989 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:28.046982050 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:28.046986103 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:28.047008991 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:28.047015905 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:28.047043085 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:28.050396919 CEST	49816	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:28.050416946 CEST	443	49816	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:28.343682051 CEST	49819	443	192.168.2.4	63.140.62.17
Jul 5, 2024 07:55:28.343812943 CEST	443	49819	63.140.62.17	192.168.2.4
Jul 5, 2024 07:55:28.358268023 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.358414888 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.359581947 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.359601974 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.433670044 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.452235937 CEST	49819	443	192.168.2.4	63.140.62.17
Jul 5, 2024 07:55:28.452254057 CEST	443	49819	63.140.62.17	192.168.2.4
Jul 5, 2024 07:55:28.551176071 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.554001093 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.554009914 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.554063082 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.554079056 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.554088116 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.554095984 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.554095984 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.554105043 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.554116011 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.554126978 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.554136038 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.649831057 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.649841070 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.649889946 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.649903059 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.649909973 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.649921894 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.649931908 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.649969101 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.649985075 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.650576115 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.650583982 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.650609970 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.650619030 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.650625944 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.650635004 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.650640965 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.650657892 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.650661945 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.650686026 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.650686026 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.652452946 CEST	49819	443	192.168.2.4	63.140.62.17
Jul 5, 2024 07:55:28.742465019 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.742475986 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.742496967 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.742511034 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.742536068 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.742556095 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.742587090 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.743856907 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.743865967 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.743911028 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.743922949 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.743935108 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.743942022 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.743962049 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.743968010 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.743983030 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.743983030 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.744012117 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.744896889 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.744905949 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.744946003 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.744961977 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.744967937 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.744985104 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.745007038 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.745007038 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.746038914 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.746059895 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.746125937 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.746133089 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.838129044 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.838150978 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.838200092 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.838215113 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.838243961 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.838530064 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.838537931 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.838577986 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.838586092 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.838615894 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:28.838633060 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:28.840573072 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:29.112751007 CEST	49818	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:29.112776041 CEST	443	49818	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:32.025938988 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:32.025949955 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:32.026009083 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:32.026381016 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:32.026395082 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:32.028141022 CEST	49851	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:32.028177977 CEST	443	49851	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:32.028330088 CEST	49851	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:32.028513908 CEST	49852	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:32.028523922 CEST	443	49852	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:32.028574944 CEST	49852	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:32.028706074 CEST	49851	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:32.028721094 CEST	443	49851	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:32.028944969 CEST	49852	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:32.028959036 CEST	443	49852	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:32.169008970 CEST	443	49815	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:32.169096947 CEST	443	49815	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:32.169161081 CEST	49815	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:33.342588902 CEST	49815	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:33.342631102 CEST	443	49815	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:33.376713991 CEST	443	49736	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:33.376816988 CEST	443	49736	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:33.376943111 CEST	49736	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:33.442826033 CEST	49736	443	192.168.2.4	23.214.40.215
Jul 5, 2024 07:55:33.442862034 CEST	443	49736	23.214.40.215	192.168.2.4
Jul 5, 2024 07:55:33.566124916 CEST	443	49852	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.566356897 CEST	49852	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.566374063 CEST	443	49852	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.566457987 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.566632032 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.566639900 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.567717075 CEST	443	49852	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.567732096 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.567799091 CEST	49852	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.567811966 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.568846941 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.568908930 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.569246054 CEST	49852	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.569307089 CEST	443	49852	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.569433928 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.569441080 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.582114935 CEST	443	49851	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:33.582588911 CEST	49851	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:33.582612991 CEST	443	49851	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:33.583626032 CEST	443	49851	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:33.583689928 CEST	49851	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:33.588711023 CEST	49851	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:33.588793993 CEST	443	49851	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:33.617108107 CEST	49852	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.617122889 CEST	443	49852	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.617161989 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.633095026 CEST	49851	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:33.633112907 CEST	443	49851	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:33.660881996 CEST	49852	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.681086063 CEST	49851	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:33.841284990 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.842978001 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.842988014 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.843000889 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.843034029 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.843041897 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.843055964 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.843069077 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.843105078 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.843113899 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.843137980 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:33.843183994 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.843183994 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.843556881 CEST	49850	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:33.843574047 CEST	443	49850	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:37.422234058 CEST	443	49851	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:37.422293901 CEST	443	49851	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:37.422339916 CEST	49851	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:37.527268887 CEST	49851	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:37.527299881 CEST	443	49851	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:44.801882029 CEST	49910	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:44.801930904 CEST	443	49910	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:44.801976919 CEST	49910	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:44.806158066 CEST	49910	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:44.806175947 CEST	443	49910	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:44.807904959 CEST	49912	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:44.807941914 CEST	443	49912	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:44.808134079 CEST	49912	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:44.811009884 CEST	49912	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:44.811024904 CEST	443	49912	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:45.472059965 CEST	443	49912	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:45.472248077 CEST	49912	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:45.472280025 CEST	443	49912	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:45.472640991 CEST	443	49912	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:45.472930908 CEST	49912	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:45.473016977 CEST	443	49912	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:45.490973949 CEST	443	49910	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:45.491229057 CEST	49910	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:45.491257906 CEST	443	49910	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:45.491633892 CEST	443	49910	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:45.493679047 CEST	49910	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:45.493773937 CEST	443	49910	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:45.512454033 CEST	49912	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:45.539839983 CEST	49910	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:49.139789104 CEST	49947	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:49.139826059 CEST	443	49947	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:49.139878035 CEST	49947	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:49.140240908 CEST	49947	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:49.140254021 CEST	443	49947	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:49.839323044 CEST	443	49947	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:49.839576006 CEST	49947	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:49.839587927 CEST	443	49947	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:49.839895010 CEST	443	49947	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:49.840256929 CEST	49947	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:49.840312004 CEST	443	49947	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:49.886946917 CEST	49947	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:50.189250946 CEST	443	49912	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:50.189340115 CEST	443	49912	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:50.189413071 CEST	49912	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:50.197695971 CEST	443	49910	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:50.197779894 CEST	443	49910	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:50.198014021 CEST	49910	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:50.370335102 CEST	49910	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:55:50.370361090 CEST	443	49910	13.107.246.45	192.168.2.4
Jul 5, 2024 07:55:50.370378017 CEST	49912	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:50.370400906 CEST	443	49912	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:52.438853979 CEST	49980	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:52.438870907 CEST	443	49980	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:52.438952923 CEST	49980	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:52.439901114 CEST	49980	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:52.439914942 CEST	443	49980	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:53.100956917 CEST	443	49980	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:53.150958061 CEST	49980	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:53.158020973 CEST	49980	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:53.158032894 CEST	443	49980	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:53.158521891 CEST	443	49980	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:53.167778969 CEST	49980	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:53.167866945 CEST	443	49980	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:53.213306904 CEST	49980	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:54.393788099 CEST	49989	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:54.393790007 CEST	49988	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:54.393826962 CEST	443	49989	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:54.393830061 CEST	443	49988	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:54.394998074 CEST	49988	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:54.395004988 CEST	49989	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:54.395457983 CEST	49989	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:54.395462036 CEST	49988	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:54.395471096 CEST	443	49989	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:54.395477057 CEST	443	49988	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:54.542015076 CEST	443	49947	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:54.542113066 CEST	443	49947	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:54.542196035 CEST	49947	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:54.612204075 CEST	49947	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:54.612243891 CEST	443	49947	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:55.079943895 CEST	443	49989	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:55.080286980 CEST	49989	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:55.080302000 CEST	443	49989	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:55.080626965 CEST	443	49989	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:55.080955982 CEST	49989	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:55.081008911 CEST	443	49989	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:55.135658026 CEST	49989	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:55:55.242435932 CEST	443	49988	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:55.242736101 CEST	49988	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:55.242748976 CEST	443	49988	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:55.243109941 CEST	443	49988	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:55.243594885 CEST	49988	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:55.243666887 CEST	443	49988	152.199.21.175	192.168.2.4
Jul 5, 2024 07:55:55.292155981 CEST	49988	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:55:57.458511114 CEST	443	49819	63.140.62.17	192.168.2.4
Jul 5, 2024 07:55:57.458578110 CEST	443	49819	63.140.62.17	192.168.2.4
Jul 5, 2024 07:55:57.458683968 CEST	49819	443	192.168.2.4	63.140.62.17
Jul 5, 2024 07:55:57.521737099 CEST	49819	443	192.168.2.4	63.140.62.17
Jul 5, 2024 07:55:57.521754980 CEST	443	49819	63.140.62.17	192.168.2.4
Jul 5, 2024 07:55:57.816436052 CEST	443	49980	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:57.816519976 CEST	443	49980	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:57.816576004 CEST	49980	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:57.936728001 CEST	49980	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:55:57.936744928 CEST	443	49980	13.107.246.60	192.168.2.4
Jul 5, 2024 07:55:59.802018881 CEST	443	49989	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:59.802186966 CEST	443	49989	13.107.246.42	192.168.2.4
Jul 5, 2024 07:55:59.803010941 CEST	49989	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:00.215702057 CEST	49989	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:00.215714931 CEST	443	49989	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:09.767277956 CEST	50077	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:09.767297983 CEST	443	50077	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:09.767414093 CEST	50077	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:09.767625093 CEST	50077	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:09.767641068 CEST	443	50077	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:09.768590927 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:09.768600941 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:09.768685102 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:09.768970013 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:09.768981934 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:09.769752026 CEST	50079	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:09.769761086 CEST	443	50079	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:09.769848108 CEST	50079	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:09.770293951 CEST	50079	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:09.770306110 CEST	443	50079	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:09.775083065 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:09.775118113 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:09.775259972 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:09.775504112 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:09.775520086 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:09.779829979 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:09.779844046 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:09.780119896 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:09.780389071 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:09.780400038 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:09.785002947 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:09.785026073 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:09.785078049 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:09.785331964 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:09.785341978 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:10.259711981 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:10.261068106 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:10.261085033 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:10.262098074 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:10.262450933 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:10.263463020 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:10.263530970 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:10.305166006 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:10.305181980 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:10.352763891 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:10.439707994 CEST	443	50077	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:10.439897060 CEST	50077	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:10.439910889 CEST	443	50077	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:10.440763950 CEST	443	50077	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:10.440814972 CEST	50077	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:10.441639900 CEST	50077	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:10.441698074 CEST	443	50077	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:10.442368984 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:10.442559958 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:10.442585945 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:10.442888021 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:10.443151951 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:10.443211079 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:10.443377972 CEST	443	50079	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:10.443576097 CEST	50079	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:10.443583965 CEST	443	50079	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:10.443871975 CEST	443	50079	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:10.444399118 CEST	50079	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:10.444451094 CEST	443	50079	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:10.463598967 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:10.464370012 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:10.464397907 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:10.465364933 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:10.465430975 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:10.466337919 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:10.466398954 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:10.483052969 CEST	50077	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:10.483067036 CEST	443	50077	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:10.491549015 CEST	50079	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:10.491549015 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:10.506684065 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:10.506711960 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:10.522686958 CEST	50077	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:10.527659893 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:10.527843952 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:10.527854919 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:10.529315948 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:10.529426098 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:10.530122042 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:10.530275106 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:10.554491043 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:10.574632883 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:10.574659109 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:10.624806881 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:11.603779078 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.603790045 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.749299049 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.749325037 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.749331951 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.749361038 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.749372959 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.749382973 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.749389887 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.749425888 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.749439955 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.749464989 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.840516090 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.840538025 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.840595961 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.840615034 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.840699911 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.842953920 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.842971087 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.842994928 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.843033075 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.843038082 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.843159914 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.843693018 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.843734980 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.843736887 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.843893051 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.844007969 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.844018936 CEST	443	50080	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:11.844031096 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:11.844127893 CEST	50080	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:14.328227997 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:14.368499041 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:14.433437109 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:14.433461905 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:14.433470964 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:14.433506012 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:14.433521032 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:14.433533907 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:14.433542967 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:14.433559895 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:14.433559895 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:14.433593035 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:14.523581982 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:14.523637056 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:14.523694038 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:14.523704052 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:14.523704052 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:14.523801088 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:14.524416924 CEST	50078	443	192.168.2.4	13.107.246.60
Jul 5, 2024 07:56:14.524440050 CEST	443	50078	13.107.246.60	192.168.2.4
Jul 5, 2024 07:56:15.146415949 CEST	443	50077	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:15.146476030 CEST	443	50077	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:15.146552086 CEST	50077	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:15.153748989 CEST	443	50079	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:15.153804064 CEST	443	50079	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:15.154014111 CEST	50079	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:15.197566032 CEST	50077	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:15.197572947 CEST	50079	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:15.197586060 CEST	443	50077	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:15.197603941 CEST	443	50079	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:15.850754976 CEST	50127	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:56:15.850804090 CEST	443	50127	216.58.206.36	192.168.2.4
Jul 5, 2024 07:56:15.850909948 CEST	50127	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:56:15.851119995 CEST	50127	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:56:15.851141930 CEST	443	50127	216.58.206.36	192.168.2.4
Jul 5, 2024 07:56:16.496771097 CEST	443	50127	216.58.206.36	192.168.2.4
Jul 5, 2024 07:56:16.496975899 CEST	50127	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:56:16.497000933 CEST	443	50127	216.58.206.36	192.168.2.4
Jul 5, 2024 07:56:16.497286081 CEST	443	50127	216.58.206.36	192.168.2.4
Jul 5, 2024 07:56:16.497586966 CEST	50127	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:56:16.497648001 CEST	443	50127	216.58.206.36	192.168.2.4
Jul 5, 2024 07:56:16.539566994 CEST	50127	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:56:18.627562046 CEST	49852	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:56:18.627577066 CEST	443	49852	152.199.21.175	192.168.2.4
Jul 5, 2024 07:56:23.370795012 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:23.370820999 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:23.370920897 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:23.371124983 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:23.371138096 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:23.548634052 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.563716888 CEST	50179	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:23.563740969 CEST	443	50179	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:23.563806057 CEST	50179	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:23.563947916 CEST	50179	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:23.563967943 CEST	443	50179	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:23.596494913 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.689570904 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.689671993 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.689713001 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.689713001 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.689726114 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.689760923 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.690094948 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.690385103 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.690421104 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.690464020 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.690474987 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.690542936 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.690598965 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.691020012 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.691065073 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.691073895 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.694408894 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.694438934 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.694479942 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.694489956 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.694535017 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.788510084 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:23.788537979 CEST	443	50180	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:23.788661957 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:23.788866043 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:23.788881063 CEST	443	50180	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:23.798264027 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.798552990 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.798579931 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.798616886 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.798626900 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.798641920 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.798655987 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.799048901 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.799077034 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.799098015 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.799104929 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.799225092 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.799429893 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.799779892 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.799808979 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.799824953 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.799839973 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.799884081 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.800009966 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.800065994 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.800105095 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.800111055 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.800173998 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.800569057 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.800775051 CEST	50081	443	192.168.2.4	35.186.249.72
Jul 5, 2024 07:56:23.800790071 CEST	443	50081	35.186.249.72	192.168.2.4
Jul 5, 2024 07:56:23.804286003 CEST	50181	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:23.804312944 CEST	443	50181	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:23.804375887 CEST	50181	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:23.804878950 CEST	50181	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:23.804891109 CEST	443	50181	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.026604891 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.026801109 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.026813984 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.027769089 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.027821064 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.028626919 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.028683901 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.028759956 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.072510004 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.078839064 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.078847885 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.126862049 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.232117891 CEST	443	50179	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.232388020 CEST	50179	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.232399940 CEST	443	50179	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.233360052 CEST	443	50179	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.233406067 CEST	50179	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.234278917 CEST	50179	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.234337091 CEST	443	50179	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.234399080 CEST	50179	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.276501894 CEST	443	50179	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.285151958 CEST	50179	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.285157919 CEST	443	50179	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.333148956 CEST	50179	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.477684975 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.477705956 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.477715015 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.477785110 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.477791071 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.477839947 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.479630947 CEST	443	50180	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.483711958 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.483747005 CEST	443	50180	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.484664917 CEST	443	50180	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.484733105 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.487814903 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.487894058 CEST	443	50180	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.488298893 CEST	50176	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.488323927 CEST	443	50176	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.488789082 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.488806009 CEST	443	50180	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.489897013 CEST	50183	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.489924908 CEST	443	50183	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.490065098 CEST	50183	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.491173029 CEST	50183	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.491188049 CEST	443	50183	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.495693922 CEST	443	50181	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.496825933 CEST	50181	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.496834993 CEST	443	50181	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.497695923 CEST	443	50181	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.497761011 CEST	50181	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.500313044 CEST	50181	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.500366926 CEST	443	50181	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.500905037 CEST	50181	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.500910044 CEST	443	50181	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.506664038 CEST	443	50179	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.506720066 CEST	443	50179	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.506937981 CEST	50179	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.507832050 CEST	50185	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:24.507863998 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:24.508055925 CEST	50185	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:24.508276939 CEST	50185	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:24.508290052 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:24.513485909 CEST	50186	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.513495922 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.513560057 CEST	50186	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.513873100 CEST	50186	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:24.513891935 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:24.518672943 CEST	50179	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.518683910 CEST	443	50179	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.531816006 CEST	50187	443	192.168.2.4	63.140.62.222
Jul 5, 2024 07:56:24.531852961 CEST	443	50187	63.140.62.222	192.168.2.4
Jul 5, 2024 07:56:24.531905890 CEST	50187	443	192.168.2.4	63.140.62.222
Jul 5, 2024 07:56:24.532413960 CEST	50187	443	192.168.2.4	63.140.62.222
Jul 5, 2024 07:56:24.532428980 CEST	443	50187	63.140.62.222	192.168.2.4
Jul 5, 2024 07:56:24.533349037 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:24.533395052 CEST	443	50188	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:24.533536911 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:24.533840895 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:24.533857107 CEST	443	50188	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:24.540323973 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.550262928 CEST	50181	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.755119085 CEST	443	50180	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.755193949 CEST	443	50180	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.755336046 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.755665064 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.755697012 CEST	443	50180	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.755708933 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.755835056 CEST	50180	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.759634018 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:24.759674072 CEST	443	50189	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:24.759835005 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:24.760077953 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:24.760093927 CEST	443	50189	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:24.800831079 CEST	443	50181	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.800894022 CEST	443	50181	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.801256895 CEST	50181	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.801264048 CEST	443	50181	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:24.801284075 CEST	50181	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.801307917 CEST	50181	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:24.803968906 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:24.804011106 CEST	443	50191	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:24.804121017 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:24.804311991 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:24.804327965 CEST	443	50191	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.142282009 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:25.142595053 CEST	50185	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:25.142615080 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:25.143507004 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:25.143568993 CEST	50185	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:25.144211054 CEST	50185	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:25.144264936 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:25.144412994 CEST	50185	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:25.144421101 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:25.145483971 CEST	443	50183	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:25.145644903 CEST	50183	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:25.145674944 CEST	443	50183	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:25.145967960 CEST	443	50183	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:25.146388054 CEST	50183	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:25.146452904 CEST	443	50183	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:25.146497965 CEST	50183	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:25.163887978 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.164139986 CEST	50186	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.164169073 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.165065050 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.165122032 CEST	50186	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.165909052 CEST	50186	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.165998936 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.166074991 CEST	50186	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.166089058 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.177854061 CEST	443	50187	63.140.62.222	192.168.2.4
Jul 5, 2024 07:56:25.179358959 CEST	50187	443	192.168.2.4	63.140.62.222
Jul 5, 2024 07:56:25.179369926 CEST	443	50187	63.140.62.222	192.168.2.4
Jul 5, 2024 07:56:25.179668903 CEST	443	50188	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.180027962 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.180059910 CEST	443	50188	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.180346966 CEST	443	50187	63.140.62.222	192.168.2.4
Jul 5, 2024 07:56:25.180433989 CEST	50187	443	192.168.2.4	63.140.62.222
Jul 5, 2024 07:56:25.181116104 CEST	443	50188	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.181173086 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.181559086 CEST	50187	443	192.168.2.4	63.140.62.222
Jul 5, 2024 07:56:25.181636095 CEST	443	50187	63.140.62.222	192.168.2.4
Jul 5, 2024 07:56:25.182444096 CEST	50187	443	192.168.2.4	63.140.62.222
Jul 5, 2024 07:56:25.182459116 CEST	443	50187	63.140.62.222	192.168.2.4
Jul 5, 2024 07:56:25.183182955 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.183249950 CEST	443	50188	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.183326960 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.183334112 CEST	443	50188	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.188510895 CEST	443	50183	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:25.191024065 CEST	50183	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:25.191024065 CEST	50185	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:25.222012043 CEST	50186	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.238049030 CEST	50187	443	192.168.2.4	63.140.62.222
Jul 5, 2024 07:56:25.239396095 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.409605980 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:25.409632921 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:25.409666061 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:25.409691095 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:25.409689903 CEST	50185	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:25.409739971 CEST	50185	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:25.410634995 CEST	50185	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:25.410655975 CEST	443	50185	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:25.422059059 CEST	50194	443	192.168.2.4	52.34.170.192
Jul 5, 2024 07:56:25.422091961 CEST	443	50194	52.34.170.192	192.168.2.4
Jul 5, 2024 07:56:25.422207117 CEST	50194	443	192.168.2.4	52.34.170.192
Jul 5, 2024 07:56:25.422353983 CEST	50194	443	192.168.2.4	52.34.170.192
Jul 5, 2024 07:56:25.422364950 CEST	443	50194	52.34.170.192	192.168.2.4
Jul 5, 2024 07:56:25.424854994 CEST	443	50183	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:25.424916983 CEST	443	50183	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:25.425056934 CEST	50183	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:25.425653934 CEST	50183	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:25.425682068 CEST	443	50183	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:25.425700903 CEST	50183	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:25.425718069 CEST	50183	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:25.426165104 CEST	50195	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:25.426203966 CEST	443	50195	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:25.426278114 CEST	50195	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:25.426537037 CEST	50195	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:25.426556110 CEST	443	50195	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:25.427812099 CEST	443	50189	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.428009033 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.428023100 CEST	443	50189	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.428220987 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:25.428250074 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:25.428318977 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:25.428529978 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:25.428543091 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:25.429012060 CEST	443	50189	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.429081917 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.429424047 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.429485083 CEST	443	50189	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.429790020 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.429804087 CEST	443	50189	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.433589935 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.433615923 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.433623075 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.433675051 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.433676004 CEST	50186	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.433715105 CEST	50186	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.434315920 CEST	50186	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.434333086 CEST	443	50186	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.453473091 CEST	443	50188	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.453538895 CEST	443	50188	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.453596115 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.453893900 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.453913927 CEST	443	50188	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.453983068 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.453991890 CEST	50188	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.472702026 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.475915909 CEST	443	50191	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.476110935 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.476140976 CEST	443	50191	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.477307081 CEST	443	50191	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.477376938 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.478123903 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.478209972 CEST	443	50191	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.478260040 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.484747887 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:25.484787941 CEST	443	50197	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:25.484846115 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:25.485033035 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:25.485045910 CEST	443	50197	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:25.494919062 CEST	443	50187	63.140.62.222	192.168.2.4
Jul 5, 2024 07:56:25.494987965 CEST	443	50187	63.140.62.222	192.168.2.4
Jul 5, 2024 07:56:25.495052099 CEST	50187	443	192.168.2.4	63.140.62.222
Jul 5, 2024 07:56:25.496400118 CEST	50187	443	192.168.2.4	63.140.62.222
Jul 5, 2024 07:56:25.496426105 CEST	443	50187	63.140.62.222	192.168.2.4
Jul 5, 2024 07:56:25.503565073 CEST	50198	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.503599882 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.503742933 CEST	50198	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.504019976 CEST	50198	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.504035950 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.511096001 CEST	50199	443	192.168.2.4	63.140.62.27
Jul 5, 2024 07:56:25.511121035 CEST	443	50199	63.140.62.27	192.168.2.4
Jul 5, 2024 07:56:25.511219978 CEST	50199	443	192.168.2.4	63.140.62.27
Jul 5, 2024 07:56:25.511379004 CEST	50199	443	192.168.2.4	63.140.62.27
Jul 5, 2024 07:56:25.511389971 CEST	443	50199	63.140.62.27	192.168.2.4
Jul 5, 2024 07:56:25.520509958 CEST	443	50191	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.520680904 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.520709038 CEST	443	50191	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.568691969 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.595379114 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:25.595427990 CEST	443	50200	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:25.595494986 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:25.595748901 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:25.595762968 CEST	443	50200	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:25.705374956 CEST	443	50189	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.705459118 CEST	443	50189	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.705516100 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.705884933 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.705915928 CEST	443	50189	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.705928087 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.706015110 CEST	50189	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.706912994 CEST	50201	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:25.706962109 CEST	443	50201	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:25.707051992 CEST	50201	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:25.707307100 CEST	50201	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:25.707320929 CEST	443	50201	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:25.761516094 CEST	443	50191	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.761606932 CEST	443	50191	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.761656046 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.761976004 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.762001991 CEST	443	50191	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:25.762012959 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.762047052 CEST	50191	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:25.921118975 CEST	50203	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.921183109 CEST	443	50203	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:25.921475887 CEST	50203	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.921513081 CEST	50203	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:25.921520948 CEST	443	50203	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.039624929 CEST	50205	443	192.168.2.4	104.244.42.195
Jul 5, 2024 07:56:26.039674044 CEST	443	50205	104.244.42.195	192.168.2.4
Jul 5, 2024 07:56:26.039902925 CEST	50205	443	192.168.2.4	104.244.42.195
Jul 5, 2024 07:56:26.039902925 CEST	50205	443	192.168.2.4	104.244.42.195
Jul 5, 2024 07:56:26.039938927 CEST	443	50205	104.244.42.195	192.168.2.4
Jul 5, 2024 07:56:26.079441071 CEST	443	50200	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.079632044 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.079643965 CEST	443	50200	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.080668926 CEST	443	50200	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.080769062 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.081567049 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.081634045 CEST	443	50200	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.081897020 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.081907034 CEST	443	50200	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.082989931 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.086991072 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.087016106 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.087903023 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.087995052 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.088839054 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.088840008 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.088866949 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.088906050 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.088943005 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.121737003 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.130404949 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.130604029 CEST	50198	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.130624056 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.130968094 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.131277084 CEST	50198	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.131340027 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.131398916 CEST	50198	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.132497072 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.138775110 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.138801098 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.159876108 CEST	443	50195	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:26.160228968 CEST	443	50199	63.140.62.27	192.168.2.4
Jul 5, 2024 07:56:26.175633907 CEST	50199	443	192.168.2.4	63.140.62.27
Jul 5, 2024 07:56:26.175652981 CEST	443	50199	63.140.62.27	192.168.2.4
Jul 5, 2024 07:56:26.176184893 CEST	50195	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:26.176217079 CEST	443	50195	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:26.176495075 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.176646948 CEST	443	50195	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:26.176886082 CEST	443	50199	63.140.62.27	192.168.2.4
Jul 5, 2024 07:56:26.176970959 CEST	50199	443	192.168.2.4	63.140.62.27
Jul 5, 2024 07:56:26.177987099 CEST	50195	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:26.178070068 CEST	443	50195	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:26.178565025 CEST	50199	443	192.168.2.4	63.140.62.27
Jul 5, 2024 07:56:26.178647995 CEST	443	50199	63.140.62.27	192.168.2.4
Jul 5, 2024 07:56:26.179508924 CEST	50195	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:26.180365086 CEST	50199	443	192.168.2.4	63.140.62.27
Jul 5, 2024 07:56:26.180376053 CEST	443	50199	63.140.62.27	192.168.2.4
Jul 5, 2024 07:56:26.185739994 CEST	50198	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.185744047 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.191220999 CEST	50207	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.191272974 CEST	443	50207	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.191468000 CEST	50207	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.193054914 CEST	50207	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.193072081 CEST	443	50207	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.224505901 CEST	443	50195	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:26.233453035 CEST	50199	443	192.168.2.4	63.140.62.27
Jul 5, 2024 07:56:26.260108948 CEST	443	50200	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.260184050 CEST	443	50200	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.262259007 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.267944098 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.267971992 CEST	443	50200	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.268001080 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.268057108 CEST	50200	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.268858910 CEST	50208	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.268923998 CEST	443	50208	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.268987894 CEST	50208	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.269277096 CEST	50208	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.269294977 CEST	443	50208	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.278120995 CEST	50209	443	192.168.2.4	91.228.74.244
Jul 5, 2024 07:56:26.278141022 CEST	443	50209	91.228.74.244	192.168.2.4
Jul 5, 2024 07:56:26.278223991 CEST	50209	443	192.168.2.4	91.228.74.244
Jul 5, 2024 07:56:26.278414011 CEST	50209	443	192.168.2.4	91.228.74.244
Jul 5, 2024 07:56:26.278426886 CEST	443	50209	91.228.74.244	192.168.2.4
Jul 5, 2024 07:56:26.321230888 CEST	443	50197	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:26.321476936 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.321530104 CEST	443	50197	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:26.322818995 CEST	443	50197	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:26.322905064 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.324035883 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.324037075 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.324063063 CEST	443	50197	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:26.324114084 CEST	443	50197	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:26.326103926 CEST	443	50194	52.34.170.192	192.168.2.4
Jul 5, 2024 07:56:26.326371908 CEST	50194	443	192.168.2.4	52.34.170.192
Jul 5, 2024 07:56:26.326389074 CEST	443	50194	52.34.170.192	192.168.2.4
Jul 5, 2024 07:56:26.327389002 CEST	443	50194	52.34.170.192	192.168.2.4
Jul 5, 2024 07:56:26.327478886 CEST	50194	443	192.168.2.4	52.34.170.192
Jul 5, 2024 07:56:26.328450918 CEST	50194	443	192.168.2.4	52.34.170.192
Jul 5, 2024 07:56:26.328450918 CEST	50194	443	192.168.2.4	52.34.170.192
Jul 5, 2024 07:56:26.328469038 CEST	443	50194	52.34.170.192	192.168.2.4
Jul 5, 2024 07:56:26.328526020 CEST	443	50194	52.34.170.192	192.168.2.4
Jul 5, 2024 07:56:26.357614040 CEST	443	50201	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:26.358266115 CEST	50201	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:26.358298063 CEST	443	50201	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:26.359343052 CEST	443	50201	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:26.359464884 CEST	50201	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:26.360326052 CEST	50201	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:26.360394001 CEST	443	50201	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:26.360769033 CEST	50201	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:26.360776901 CEST	443	50201	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:26.373819113 CEST	50194	443	192.168.2.4	52.34.170.192
Jul 5, 2024 07:56:26.373821020 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.373838902 CEST	443	50194	52.34.170.192	192.168.2.4
Jul 5, 2024 07:56:26.373852015 CEST	443	50197	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:26.381871939 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.381896973 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.381906033 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.381939888 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.381953001 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.381967068 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.381974936 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.381998062 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.382144928 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.382390022 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.382452965 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.382577896 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.384681940 CEST	50196	443	192.168.2.4	66.235.152.225
Jul 5, 2024 07:56:26.384705067 CEST	443	50196	66.235.152.225	192.168.2.4
Jul 5, 2024 07:56:26.393328905 CEST	50210	443	192.168.2.4	172.217.16.130
Jul 5, 2024 07:56:26.393382072 CEST	443	50210	172.217.16.130	192.168.2.4
Jul 5, 2024 07:56:26.393480062 CEST	50210	443	192.168.2.4	172.217.16.130
Jul 5, 2024 07:56:26.394218922 CEST	50210	443	192.168.2.4	172.217.16.130
Jul 5, 2024 07:56:26.394237995 CEST	443	50210	172.217.16.130	192.168.2.4
Jul 5, 2024 07:56:26.396696091 CEST	50211	443	192.168.2.4	66.235.152.156
Jul 5, 2024 07:56:26.396733046 CEST	443	50211	66.235.152.156	192.168.2.4
Jul 5, 2024 07:56:26.396884918 CEST	50211	443	192.168.2.4	66.235.152.156
Jul 5, 2024 07:56:26.398880959 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.398904085 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.398910046 CEST	50211	443	192.168.2.4	66.235.152.156
Jul 5, 2024 07:56:26.398912907 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.398921967 CEST	443	50211	66.235.152.156	192.168.2.4
Jul 5, 2024 07:56:26.398989916 CEST	50198	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.399013042 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.399025917 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.401716948 CEST	50201	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:26.402029037 CEST	50198	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.402399063 CEST	50198	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.402416945 CEST	443	50198	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.406526089 CEST	50215	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:26.406554937 CEST	443	50215	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:26.406692982 CEST	50215	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:26.406863928 CEST	50215	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:26.406884909 CEST	443	50215	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:26.423640966 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.423643112 CEST	50194	443	192.168.2.4	52.34.170.192
Jul 5, 2024 07:56:26.424066067 CEST	443	50127	216.58.206.36	192.168.2.4
Jul 5, 2024 07:56:26.424124002 CEST	443	50127	216.58.206.36	192.168.2.4
Jul 5, 2024 07:56:26.424415112 CEST	50127	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:56:26.435554981 CEST	443	50195	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:26.435597897 CEST	443	50195	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:26.435684919 CEST	50195	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:26.437649965 CEST	50195	443	192.168.2.4	157.240.0.35
Jul 5, 2024 07:56:26.437650919 CEST	50127	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:56:26.437674046 CEST	443	50195	157.240.0.35	192.168.2.4
Jul 5, 2024 07:56:26.437681913 CEST	443	50127	216.58.206.36	192.168.2.4
Jul 5, 2024 07:56:26.439449072 CEST	50217	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:26.439469099 CEST	443	50217	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:26.439733982 CEST	50217	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:26.439733982 CEST	50217	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:26.439754009 CEST	443	50217	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:26.472881079 CEST	443	50199	63.140.62.27	192.168.2.4
Jul 5, 2024 07:56:26.472965956 CEST	443	50199	63.140.62.27	192.168.2.4
Jul 5, 2024 07:56:26.473144054 CEST	50199	443	192.168.2.4	63.140.62.27
Jul 5, 2024 07:56:26.473464012 CEST	50199	443	192.168.2.4	63.140.62.27
Jul 5, 2024 07:56:26.473493099 CEST	443	50199	63.140.62.27	192.168.2.4
Jul 5, 2024 07:56:26.501338959 CEST	443	50194	52.34.170.192	192.168.2.4
Jul 5, 2024 07:56:26.501415014 CEST	443	50194	52.34.170.192	192.168.2.4
Jul 5, 2024 07:56:26.501461029 CEST	50194	443	192.168.2.4	52.34.170.192
Jul 5, 2024 07:56:26.502343893 CEST	50194	443	192.168.2.4	52.34.170.192
Jul 5, 2024 07:56:26.502363920 CEST	443	50194	52.34.170.192	192.168.2.4
Jul 5, 2024 07:56:26.510154963 CEST	443	50197	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:26.510206938 CEST	443	50197	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:26.510236025 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.510270119 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.511053085 CEST	50197	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.511080980 CEST	443	50197	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:26.511493921 CEST	50220	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.511539936 CEST	443	50220	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:26.511790991 CEST	50220	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.511791945 CEST	50220	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:26.511827946 CEST	443	50220	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:26.535219908 CEST	50221	443	192.168.2.4	44.232.230.158
Jul 5, 2024 07:56:26.535258055 CEST	443	50221	44.232.230.158	192.168.2.4
Jul 5, 2024 07:56:26.535387993 CEST	50221	443	192.168.2.4	44.232.230.158
Jul 5, 2024 07:56:26.535618067 CEST	50221	443	192.168.2.4	44.232.230.158
Jul 5, 2024 07:56:26.535629034 CEST	443	50221	44.232.230.158	192.168.2.4
Jul 5, 2024 07:56:26.557432890 CEST	443	50203	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.557876110 CEST	50203	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.557908058 CEST	443	50203	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.558249950 CEST	443	50203	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.558641911 CEST	50203	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.558705091 CEST	443	50203	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.558861017 CEST	50203	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.581653118 CEST	443	50205	104.244.42.195	192.168.2.4
Jul 5, 2024 07:56:26.590867996 CEST	50205	443	192.168.2.4	104.244.42.195
Jul 5, 2024 07:56:26.590903044 CEST	443	50205	104.244.42.195	192.168.2.4
Jul 5, 2024 07:56:26.592075109 CEST	443	50205	104.244.42.195	192.168.2.4
Jul 5, 2024 07:56:26.592401028 CEST	50205	443	192.168.2.4	104.244.42.195
Jul 5, 2024 07:56:26.593333960 CEST	50205	443	192.168.2.4	104.244.42.195
Jul 5, 2024 07:56:26.593404055 CEST	443	50205	104.244.42.195	192.168.2.4
Jul 5, 2024 07:56:26.593924999 CEST	50205	443	192.168.2.4	104.244.42.195
Jul 5, 2024 07:56:26.593938112 CEST	443	50205	104.244.42.195	192.168.2.4
Jul 5, 2024 07:56:26.604511976 CEST	443	50203	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.636420012 CEST	443	50201	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:26.636511087 CEST	443	50201	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:26.638462067 CEST	50201	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:26.638465881 CEST	50205	443	192.168.2.4	104.244.42.195
Jul 5, 2024 07:56:26.645333052 CEST	50201	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:26.645363092 CEST	443	50201	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:26.646300077 CEST	50222	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:26.646330118 CEST	443	50222	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:26.647142887 CEST	50222	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:26.649416924 CEST	50222	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:26.649425983 CEST	443	50222	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:26.658272028 CEST	50223	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:26.658318043 CEST	443	50223	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:26.658425093 CEST	50223	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:26.666997910 CEST	50223	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:26.667030096 CEST	443	50223	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:26.749250889 CEST	443	50208	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.749463081 CEST	50208	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.749495029 CEST	443	50208	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.749844074 CEST	443	50208	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.750329971 CEST	50208	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.750329971 CEST	50208	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.750354052 CEST	443	50208	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.750402927 CEST	443	50208	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.774977922 CEST	443	50205	104.244.42.195	192.168.2.4
Jul 5, 2024 07:56:26.775047064 CEST	443	50205	104.244.42.195	192.168.2.4
Jul 5, 2024 07:56:26.775341034 CEST	50205	443	192.168.2.4	104.244.42.195
Jul 5, 2024 07:56:26.776940107 CEST	50205	443	192.168.2.4	104.244.42.195
Jul 5, 2024 07:56:26.776973009 CEST	443	50205	104.244.42.195	192.168.2.4
Jul 5, 2024 07:56:26.787540913 CEST	50225	443	192.168.2.4	104.244.42.131
Jul 5, 2024 07:56:26.787552118 CEST	443	50225	104.244.42.131	192.168.2.4
Jul 5, 2024 07:56:26.787842035 CEST	50225	443	192.168.2.4	104.244.42.131
Jul 5, 2024 07:56:26.787986040 CEST	50225	443	192.168.2.4	104.244.42.131
Jul 5, 2024 07:56:26.787998915 CEST	443	50225	104.244.42.131	192.168.2.4
Jul 5, 2024 07:56:26.795705080 CEST	50208	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.817092896 CEST	443	50207	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.817408085 CEST	50207	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.817444086 CEST	443	50207	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.818429947 CEST	443	50207	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.818528891 CEST	50207	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.819572926 CEST	50207	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.819679022 CEST	443	50207	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.819732904 CEST	50207	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.824189901 CEST	443	50203	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.824280977 CEST	443	50203	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.824595928 CEST	50203	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.825301886 CEST	50203	443	192.168.2.4	18.200.174.228
Jul 5, 2024 07:56:26.825328112 CEST	443	50203	18.200.174.228	192.168.2.4
Jul 5, 2024 07:56:26.828236103 CEST	50226	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:26.828272104 CEST	443	50226	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:26.829155922 CEST	50226	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:26.829312086 CEST	50226	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:26.829324007 CEST	443	50226	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:26.860508919 CEST	443	50207	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.874665976 CEST	50207	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.874706030 CEST	443	50207	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.921021938 CEST	50207	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.928523064 CEST	443	50207	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.928607941 CEST	443	50207	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.928661108 CEST	50207	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.930572033 CEST	50207	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.930600882 CEST	443	50207	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.932940006 CEST	443	50208	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.933022022 CEST	443	50208	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.933094025 CEST	50208	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.933523893 CEST	50228	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.933578014 CEST	443	50228	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.933767080 CEST	50228	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.934633970 CEST	50228	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:26.934667110 CEST	443	50228	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:26.935326099 CEST	50208	443	192.168.2.4	35.244.174.68
Jul 5, 2024 07:56:26.935353041 CEST	443	50208	35.244.174.68	192.168.2.4
Jul 5, 2024 07:56:26.936294079 CEST	50229	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:26.936317921 CEST	443	50229	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:26.936376095 CEST	50229	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:26.936665058 CEST	50229	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:26.936672926 CEST	443	50229	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.036474943 CEST	443	50211	66.235.152.156	192.168.2.4
Jul 5, 2024 07:56:27.036783934 CEST	50211	443	192.168.2.4	66.235.152.156
Jul 5, 2024 07:56:27.036798000 CEST	443	50211	66.235.152.156	192.168.2.4
Jul 5, 2024 07:56:27.037688017 CEST	443	50211	66.235.152.156	192.168.2.4
Jul 5, 2024 07:56:27.037743092 CEST	50211	443	192.168.2.4	66.235.152.156
Jul 5, 2024 07:56:27.038024902 CEST	50211	443	192.168.2.4	66.235.152.156
Jul 5, 2024 07:56:27.038075924 CEST	443	50211	66.235.152.156	192.168.2.4
Jul 5, 2024 07:56:27.038264990 CEST	50211	443	192.168.2.4	66.235.152.156
Jul 5, 2024 07:56:27.038273096 CEST	443	50211	66.235.152.156	192.168.2.4
Jul 5, 2024 07:56:27.040505886 CEST	443	50215	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.040685892 CEST	50215	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.040699959 CEST	443	50215	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.040981054 CEST	443	50215	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.041296959 CEST	50215	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.041347980 CEST	443	50215	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.041392088 CEST	50215	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.064716101 CEST	443	50210	172.217.16.130	192.168.2.4
Jul 5, 2024 07:56:27.064888954 CEST	50210	443	192.168.2.4	172.217.16.130
Jul 5, 2024 07:56:27.064914942 CEST	443	50210	172.217.16.130	192.168.2.4
Jul 5, 2024 07:56:27.065773010 CEST	443	50210	172.217.16.130	192.168.2.4
Jul 5, 2024 07:56:27.065835953 CEST	50210	443	192.168.2.4	172.217.16.130
Jul 5, 2024 07:56:27.066670895 CEST	50210	443	192.168.2.4	172.217.16.130
Jul 5, 2024 07:56:27.066729069 CEST	443	50210	172.217.16.130	192.168.2.4
Jul 5, 2024 07:56:27.066832066 CEST	50210	443	192.168.2.4	172.217.16.130
Jul 5, 2024 07:56:27.081188917 CEST	50211	443	192.168.2.4	66.235.152.156
Jul 5, 2024 07:56:27.084512949 CEST	443	50215	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.106658936 CEST	443	50209	91.228.74.244	192.168.2.4
Jul 5, 2024 07:56:27.106847048 CEST	50209	443	192.168.2.4	91.228.74.244
Jul 5, 2024 07:56:27.106854916 CEST	443	50209	91.228.74.244	192.168.2.4
Jul 5, 2024 07:56:27.107367039 CEST	443	50217	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:27.107579947 CEST	50217	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:27.107600927 CEST	443	50217	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:27.107827902 CEST	443	50209	91.228.74.244	192.168.2.4
Jul 5, 2024 07:56:27.107887983 CEST	50209	443	192.168.2.4	91.228.74.244
Jul 5, 2024 07:56:27.107914925 CEST	443	50217	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:27.108504057 CEST	50217	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:27.108555079 CEST	443	50217	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:27.108804941 CEST	50209	443	192.168.2.4	91.228.74.244
Jul 5, 2024 07:56:27.108864069 CEST	443	50209	91.228.74.244	192.168.2.4
Jul 5, 2024 07:56:27.108937025 CEST	50217	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:27.108983040 CEST	50209	443	192.168.2.4	91.228.74.244
Jul 5, 2024 07:56:27.108988047 CEST	443	50209	91.228.74.244	192.168.2.4
Jul 5, 2024 07:56:27.112210989 CEST	50210	443	192.168.2.4	172.217.16.130
Jul 5, 2024 07:56:27.112235069 CEST	443	50210	172.217.16.130	192.168.2.4
Jul 5, 2024 07:56:27.131205082 CEST	50230	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.131239891 CEST	443	50230	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.131427050 CEST	50230	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.131674051 CEST	50230	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.131685972 CEST	443	50230	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.156502008 CEST	443	50217	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:27.160190105 CEST	50209	443	192.168.2.4	91.228.74.244
Jul 5, 2024 07:56:27.160192966 CEST	50210	443	192.168.2.4	172.217.16.130
Jul 5, 2024 07:56:27.166625977 CEST	443	50220	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:27.166821957 CEST	50220	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:27.166858912 CEST	443	50220	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:27.167159081 CEST	443	50220	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:27.167540073 CEST	50220	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:27.167603016 CEST	443	50220	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:27.167635918 CEST	50220	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:27.186786890 CEST	50231	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.186847925 CEST	443	50231	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.186903954 CEST	50231	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.187072992 CEST	50231	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.187091112 CEST	443	50231	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.208400965 CEST	50220	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:27.208455086 CEST	443	50220	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:27.224342108 CEST	443	50211	66.235.152.156	192.168.2.4
Jul 5, 2024 07:56:27.224564075 CEST	443	50211	66.235.152.156	192.168.2.4
Jul 5, 2024 07:56:27.224625111 CEST	50211	443	192.168.2.4	66.235.152.156
Jul 5, 2024 07:56:27.226103067 CEST	50211	443	192.168.2.4	66.235.152.156
Jul 5, 2024 07:56:27.226120949 CEST	443	50211	66.235.152.156	192.168.2.4
Jul 5, 2024 07:56:27.294620991 CEST	443	50223	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.294924021 CEST	443	50209	91.228.74.244	192.168.2.4
Jul 5, 2024 07:56:27.295007944 CEST	443	50209	91.228.74.244	192.168.2.4
Jul 5, 2024 07:56:27.295053005 CEST	50223	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.295084000 CEST	50209	443	192.168.2.4	91.228.74.244
Jul 5, 2024 07:56:27.295087099 CEST	443	50223	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.295903921 CEST	50209	443	192.168.2.4	91.228.74.244
Jul 5, 2024 07:56:27.295914888 CEST	443	50209	91.228.74.244	192.168.2.4
Jul 5, 2024 07:56:27.295993090 CEST	443	50223	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.296053886 CEST	50223	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.296509027 CEST	50223	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.296571970 CEST	443	50223	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.296924114 CEST	50232	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.296976089 CEST	443	50232	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.297048092 CEST	50223	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.297061920 CEST	443	50223	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.297063112 CEST	50232	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.297224998 CEST	50232	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.297241926 CEST	443	50232	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.302153111 CEST	443	50222	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:27.302726030 CEST	50222	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:27.302731991 CEST	443	50222	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:27.303055048 CEST	443	50222	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:27.303725004 CEST	50222	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:27.303786993 CEST	443	50222	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:27.304076910 CEST	50222	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:27.306200027 CEST	443	50225	104.244.42.131	192.168.2.4
Jul 5, 2024 07:56:27.306498051 CEST	50225	443	192.168.2.4	104.244.42.131
Jul 5, 2024 07:56:27.306529045 CEST	443	50225	104.244.42.131	192.168.2.4
Jul 5, 2024 07:56:27.307598114 CEST	443	50225	104.244.42.131	192.168.2.4
Jul 5, 2024 07:56:27.307658911 CEST	50225	443	192.168.2.4	104.244.42.131
Jul 5, 2024 07:56:27.307980061 CEST	50225	443	192.168.2.4	104.244.42.131
Jul 5, 2024 07:56:27.308033943 CEST	443	50225	104.244.42.131	192.168.2.4
Jul 5, 2024 07:56:27.308123112 CEST	50225	443	192.168.2.4	104.244.42.131
Jul 5, 2024 07:56:27.308130026 CEST	443	50225	104.244.42.131	192.168.2.4
Jul 5, 2024 07:56:27.311518908 CEST	443	50215	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.311543941 CEST	443	50215	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.311602116 CEST	50215	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.311603069 CEST	443	50215	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.311655045 CEST	50215	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.312206030 CEST	50215	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.312216997 CEST	443	50215	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.341480970 CEST	50223	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.344512939 CEST	443	50222	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:27.356662989 CEST	50225	443	192.168.2.4	104.244.42.131
Jul 5, 2024 07:56:27.378525972 CEST	443	50210	172.217.16.130	192.168.2.4
Jul 5, 2024 07:56:27.379417896 CEST	443	50210	172.217.16.130	192.168.2.4
Jul 5, 2024 07:56:27.379468918 CEST	50210	443	192.168.2.4	172.217.16.130
Jul 5, 2024 07:56:27.379971027 CEST	50210	443	192.168.2.4	172.217.16.130
Jul 5, 2024 07:56:27.379985094 CEST	443	50210	172.217.16.130	192.168.2.4
Jul 5, 2024 07:56:27.390620947 CEST	50233	443	192.168.2.4	142.250.185.132
Jul 5, 2024 07:56:27.390659094 CEST	443	50233	142.250.185.132	192.168.2.4
Jul 5, 2024 07:56:27.390737057 CEST	50233	443	192.168.2.4	142.250.185.132
Jul 5, 2024 07:56:27.390928030 CEST	50233	443	192.168.2.4	142.250.185.132
Jul 5, 2024 07:56:27.390943050 CEST	443	50233	142.250.185.132	192.168.2.4
Jul 5, 2024 07:56:27.406898022 CEST	443	50217	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:27.406954050 CEST	443	50217	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:27.407013893 CEST	50217	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:27.407349110 CEST	50217	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:27.407361031 CEST	443	50217	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:27.407371044 CEST	50217	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:27.407460928 CEST	50217	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:27.415162086 CEST	443	50228	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:27.415370941 CEST	50228	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:27.415406942 CEST	443	50228	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:27.415757895 CEST	443	50228	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:27.416074038 CEST	50228	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:27.416136026 CEST	443	50228	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:27.416187048 CEST	50228	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:27.424381971 CEST	443	50221	44.232.230.158	192.168.2.4
Jul 5, 2024 07:56:27.424609900 CEST	50221	443	192.168.2.4	44.232.230.158
Jul 5, 2024 07:56:27.424628973 CEST	443	50221	44.232.230.158	192.168.2.4
Jul 5, 2024 07:56:27.425663948 CEST	443	50221	44.232.230.158	192.168.2.4
Jul 5, 2024 07:56:27.425729990 CEST	50221	443	192.168.2.4	44.232.230.158
Jul 5, 2024 07:56:27.426007032 CEST	50221	443	192.168.2.4	44.232.230.158
Jul 5, 2024 07:56:27.426070929 CEST	443	50221	44.232.230.158	192.168.2.4
Jul 5, 2024 07:56:27.426100016 CEST	50221	443	192.168.2.4	44.232.230.158
Jul 5, 2024 07:56:27.460501909 CEST	443	50228	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:27.461092949 CEST	443	50226	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.461278915 CEST	50226	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.461297989 CEST	443	50226	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.461641073 CEST	443	50226	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.461935043 CEST	50226	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.461990118 CEST	443	50226	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.462035894 CEST	50226	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.467853069 CEST	50221	443	192.168.2.4	44.232.230.158
Jul 5, 2024 07:56:27.467864990 CEST	443	50221	44.232.230.158	192.168.2.4
Jul 5, 2024 07:56:27.492913961 CEST	443	50220	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:27.492969036 CEST	443	50220	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:27.493027925 CEST	50220	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:27.493974924 CEST	50220	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:27.493993998 CEST	443	50220	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:27.494472980 CEST	50234	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.494493008 CEST	443	50234	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.494709969 CEST	50234	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.494911909 CEST	50234	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.494921923 CEST	443	50234	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.496485949 CEST	50235	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.496512890 CEST	443	50235	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.496587992 CEST	50235	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.496751070 CEST	50235	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.496766090 CEST	443	50235	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.508497000 CEST	443	50226	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.515948057 CEST	50221	443	192.168.2.4	44.232.230.158
Jul 5, 2024 07:56:27.515949965 CEST	50226	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.559489965 CEST	443	50223	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.559557915 CEST	443	50223	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.559617996 CEST	50223	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.560256958 CEST	50223	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.560271978 CEST	443	50223	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.563159943 CEST	443	50228	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:27.563224077 CEST	443	50228	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:27.563317060 CEST	50228	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:27.563738108 CEST	50236	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.563759089 CEST	443	50236	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.563837051 CEST	50236	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.563894987 CEST	50228	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:27.563894987 CEST	50228	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:27.563906908 CEST	443	50228	52.223.40.198	192.168.2.4
Jul 5, 2024 07:56:27.564016104 CEST	50228	443	192.168.2.4	52.223.40.198
Jul 5, 2024 07:56:27.564457893 CEST	50236	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.564467907 CEST	443	50236	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.565536022 CEST	50237	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.565557957 CEST	443	50237	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.565771103 CEST	50237	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.565901995 CEST	50237	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.565917015 CEST	443	50237	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.569735050 CEST	443	50225	104.244.42.131	192.168.2.4
Jul 5, 2024 07:56:27.569789886 CEST	443	50225	104.244.42.131	192.168.2.4
Jul 5, 2024 07:56:27.569888115 CEST	50225	443	192.168.2.4	104.244.42.131
Jul 5, 2024 07:56:27.570233107 CEST	50225	443	192.168.2.4	104.244.42.131
Jul 5, 2024 07:56:27.570241928 CEST	443	50225	104.244.42.131	192.168.2.4
Jul 5, 2024 07:56:27.583148956 CEST	443	50229	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.583329916 CEST	50229	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.583344936 CEST	443	50229	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.584928989 CEST	443	50229	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.584992886 CEST	50229	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.585247040 CEST	50229	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.585346937 CEST	443	50229	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.585352898 CEST	50229	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.588761091 CEST	443	50222	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:27.588879108 CEST	443	50222	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:27.589032888 CEST	50222	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:27.589338064 CEST	50222	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:27.589346886 CEST	443	50222	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:27.600107908 CEST	443	50221	44.232.230.158	192.168.2.4
Jul 5, 2024 07:56:27.600203991 CEST	443	50221	44.232.230.158	192.168.2.4
Jul 5, 2024 07:56:27.600254059 CEST	50221	443	192.168.2.4	44.232.230.158
Jul 5, 2024 07:56:27.602603912 CEST	50221	443	192.168.2.4	44.232.230.158
Jul 5, 2024 07:56:27.602623940 CEST	443	50221	44.232.230.158	192.168.2.4
Jul 5, 2024 07:56:27.627978086 CEST	50229	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.627993107 CEST	443	50229	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.674494982 CEST	50229	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.724363089 CEST	443	50230	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.724626064 CEST	50230	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.724634886 CEST	443	50230	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.724925995 CEST	443	50230	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.725199938 CEST	50230	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.725254059 CEST	443	50230	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.725301027 CEST	50230	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.752679110 CEST	443	50226	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.752778053 CEST	443	50226	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.752826929 CEST	50226	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.753806114 CEST	50226	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.753825903 CEST	443	50226	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.768929005 CEST	50230	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.768944979 CEST	443	50230	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.844877958 CEST	443	50230	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.844934940 CEST	443	50230	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.845074892 CEST	50230	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.845422983 CEST	50230	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.845438957 CEST	443	50230	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.847804070 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.847822905 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.847985983 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.848203897 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:27.848215103 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:27.851902008 CEST	443	50231	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.852092028 CEST	50231	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.852106094 CEST	443	50231	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.853033066 CEST	443	50231	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.853091955 CEST	50231	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.853351116 CEST	50231	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.853420019 CEST	443	50231	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.853468895 CEST	50231	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.854557037 CEST	443	50229	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.854614973 CEST	443	50229	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.854825974 CEST	50229	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.855875969 CEST	50229	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.855885029 CEST	443	50229	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.856120110 CEST	50244	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.856144905 CEST	443	50244	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.856199026 CEST	50244	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.857491970 CEST	50244	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.857506990 CEST	443	50244	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.861216068 CEST	50245	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.861226082 CEST	443	50245	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.861278057 CEST	50245	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.861433983 CEST	50245	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:27.861447096 CEST	443	50245	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:27.864762068 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:27.864773989 CEST	443	50246	104.18.24.173	192.168.2.4
Jul 5, 2024 07:56:27.864825964 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:27.865006924 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:27.865020990 CEST	443	50246	104.18.24.173	192.168.2.4
Jul 5, 2024 07:56:27.865420103 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:27.865428925 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:27.865483046 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:27.865637064 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:27.865644932 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:27.900507927 CEST	443	50231	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.909017086 CEST	50231	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.909027100 CEST	443	50231	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.943540096 CEST	443	50232	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.947271109 CEST	50232	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.947280884 CEST	443	50232	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.947611094 CEST	443	50232	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.949286938 CEST	50232	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.949357033 CEST	443	50232	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:27.949593067 CEST	50232	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.961987019 CEST	50231	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:27.996501923 CEST	443	50232	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.039753914 CEST	443	50233	142.250.185.132	192.168.2.4
Jul 5, 2024 07:56:28.039937019 CEST	50233	443	192.168.2.4	142.250.185.132
Jul 5, 2024 07:56:28.039953947 CEST	443	50233	142.250.185.132	192.168.2.4
Jul 5, 2024 07:56:28.040831089 CEST	443	50233	142.250.185.132	192.168.2.4
Jul 5, 2024 07:56:28.041001081 CEST	50233	443	192.168.2.4	142.250.185.132
Jul 5, 2024 07:56:28.041332006 CEST	50233	443	192.168.2.4	142.250.185.132
Jul 5, 2024 07:56:28.041390896 CEST	443	50233	142.250.185.132	192.168.2.4
Jul 5, 2024 07:56:28.043889999 CEST	50233	443	192.168.2.4	142.250.185.132
Jul 5, 2024 07:56:28.084515095 CEST	443	50233	142.250.185.132	192.168.2.4
Jul 5, 2024 07:56:28.088300943 CEST	50233	443	192.168.2.4	142.250.185.132
Jul 5, 2024 07:56:28.088313103 CEST	443	50233	142.250.185.132	192.168.2.4
Jul 5, 2024 07:56:28.115353107 CEST	443	50231	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.115427971 CEST	443	50231	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.116802931 CEST	50231	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.116955042 CEST	50231	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.116980076 CEST	443	50231	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.119761944 CEST	50250	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.119780064 CEST	443	50250	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.120013952 CEST	50250	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.120013952 CEST	50250	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.120039940 CEST	443	50250	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.120347977 CEST	443	50235	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.121306896 CEST	50235	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.121315956 CEST	443	50235	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.122229099 CEST	443	50235	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.122344971 CEST	50235	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.122600079 CEST	50235	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.122659922 CEST	443	50235	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.122728109 CEST	50235	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.129360914 CEST	443	50234	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.129609108 CEST	50234	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.129626989 CEST	443	50234	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.129920006 CEST	443	50234	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.130283117 CEST	50234	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.130336046 CEST	443	50234	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.130409956 CEST	50234	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.136244059 CEST	50233	443	192.168.2.4	142.250.185.132
Jul 5, 2024 07:56:28.164510965 CEST	443	50235	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.168334007 CEST	50235	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.168344021 CEST	443	50235	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.172499895 CEST	443	50234	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.184303045 CEST	50234	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.205667019 CEST	443	50236	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.205934048 CEST	50236	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.205945969 CEST	443	50236	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.206231117 CEST	443	50236	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.206530094 CEST	50236	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.206582069 CEST	443	50236	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.206656933 CEST	50236	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.208753109 CEST	443	50232	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.208831072 CEST	443	50232	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.209050894 CEST	50232	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.210014105 CEST	50232	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.210031033 CEST	443	50232	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.213501930 CEST	50252	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.213515997 CEST	443	50252	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.213671923 CEST	50252	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.213869095 CEST	50252	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.213880062 CEST	443	50252	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.215548992 CEST	50235	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.229434967 CEST	443	50237	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.229705095 CEST	50237	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.229717016 CEST	443	50237	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.231213093 CEST	443	50237	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.231297970 CEST	50237	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.231852055 CEST	50237	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.231935024 CEST	443	50237	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.231971979 CEST	50237	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.247498035 CEST	50236	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.247519970 CEST	443	50236	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.272502899 CEST	443	50237	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.279490948 CEST	50237	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.279500008 CEST	443	50237	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.323988914 CEST	443	50233	142.250.185.132	192.168.2.4
Jul 5, 2024 07:56:28.324107885 CEST	443	50233	142.250.185.132	192.168.2.4
Jul 5, 2024 07:56:28.324270010 CEST	50233	443	192.168.2.4	142.250.185.132
Jul 5, 2024 07:56:28.324677944 CEST	50233	443	192.168.2.4	142.250.185.132
Jul 5, 2024 07:56:28.324704885 CEST	443	50233	142.250.185.132	192.168.2.4
Jul 5, 2024 07:56:28.327608109 CEST	50237	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.335375071 CEST	50254	443	192.168.2.4	142.250.186.164
Jul 5, 2024 07:56:28.335390091 CEST	443	50254	142.250.186.164	192.168.2.4
Jul 5, 2024 07:56:28.335447073 CEST	50254	443	192.168.2.4	142.250.186.164
Jul 5, 2024 07:56:28.335629940 CEST	50254	443	192.168.2.4	142.250.186.164
Jul 5, 2024 07:56:28.335640907 CEST	443	50254	142.250.186.164	192.168.2.4
Jul 5, 2024 07:56:28.336494923 CEST	443	50246	104.18.24.173	192.168.2.4
Jul 5, 2024 07:56:28.336733103 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:28.336760998 CEST	443	50246	104.18.24.173	192.168.2.4
Jul 5, 2024 07:56:28.337719917 CEST	443	50246	104.18.24.173	192.168.2.4
Jul 5, 2024 07:56:28.337826014 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:28.338711977 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:28.338773012 CEST	443	50246	104.18.24.173	192.168.2.4
Jul 5, 2024 07:56:28.338896036 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:28.338903904 CEST	443	50246	104.18.24.173	192.168.2.4
Jul 5, 2024 07:56:28.381887913 CEST	443	50235	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.381966114 CEST	443	50235	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.382739067 CEST	50235	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.382992029 CEST	50235	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.383007050 CEST	443	50235	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.385395050 CEST	50255	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.385405064 CEST	443	50255	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.385587931 CEST	50255	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.385797024 CEST	50255	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.385807037 CEST	443	50255	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.389956951 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:28.392162085 CEST	50256	443	192.168.2.4	192.132.33.67
Jul 5, 2024 07:56:28.392185926 CEST	443	50256	192.132.33.67	192.168.2.4
Jul 5, 2024 07:56:28.392571926 CEST	50256	443	192.168.2.4	192.132.33.67
Jul 5, 2024 07:56:28.392571926 CEST	50256	443	192.168.2.4	192.132.33.67
Jul 5, 2024 07:56:28.392601967 CEST	443	50256	192.132.33.67	192.168.2.4
Jul 5, 2024 07:56:28.392661095 CEST	443	50234	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.392734051 CEST	443	50234	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.393157005 CEST	50234	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.393418074 CEST	50234	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.393438101 CEST	443	50234	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.395912886 CEST	50257	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.395941019 CEST	443	50257	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.396171093 CEST	50257	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.396171093 CEST	50257	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.396202087 CEST	443	50257	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.402626991 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:28.402657986 CEST	443	50258	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:28.402753115 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:28.402920961 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:28.402935982 CEST	443	50258	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:28.470513105 CEST	443	50236	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.470561028 CEST	443	50236	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.471517086 CEST	50236	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.471594095 CEST	50236	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.471604109 CEST	443	50236	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.494411945 CEST	443	50237	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.494473934 CEST	443	50237	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.495029926 CEST	50237	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.495095968 CEST	50237	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.495110989 CEST	443	50237	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.497185946 CEST	443	50245	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.497560978 CEST	50259	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.497584105 CEST	443	50259	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.497613907 CEST	50245	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.497623920 CEST	443	50245	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.497653008 CEST	50259	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.497821093 CEST	50259	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.497834921 CEST	443	50259	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.498004913 CEST	443	50245	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.498366117 CEST	50245	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.498367071 CEST	50245	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.498378992 CEST	443	50245	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.498442888 CEST	443	50245	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.503998041 CEST	443	50244	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.504307985 CEST	50244	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.504328966 CEST	443	50244	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.504627943 CEST	443	50244	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.504734039 CEST	50260	443	192.168.2.4	18.130.29.255
Jul 5, 2024 07:56:28.504757881 CEST	443	50260	18.130.29.255	192.168.2.4
Jul 5, 2024 07:56:28.505019903 CEST	50244	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.505019903 CEST	50260	443	192.168.2.4	18.130.29.255
Jul 5, 2024 07:56:28.505098104 CEST	443	50244	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.505234003 CEST	50260	443	192.168.2.4	18.130.29.255
Jul 5, 2024 07:56:28.505234003 CEST	50244	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.505249977 CEST	443	50260	18.130.29.255	192.168.2.4
Jul 5, 2024 07:56:28.529337883 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.529571056 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.529578924 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.529911995 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.530222893 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.530267954 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.530277014 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.547085047 CEST	443	50246	104.18.24.173	192.168.2.4
Jul 5, 2024 07:56:28.547169924 CEST	443	50246	104.18.24.173	192.168.2.4
Jul 5, 2024 07:56:28.547266960 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:28.547475100 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:28.547487020 CEST	443	50246	104.18.24.173	192.168.2.4
Jul 5, 2024 07:56:28.547518969 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:28.547575951 CEST	50246	443	192.168.2.4	104.18.24.173
Jul 5, 2024 07:56:28.548510075 CEST	443	50244	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.549566031 CEST	50261	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.549581051 CEST	443	50261	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.549730062 CEST	50261	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.549895048 CEST	50261	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.549909115 CEST	443	50261	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.550086021 CEST	50245	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.550088882 CEST	50244	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.553075075 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:28.553813934 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:28.553819895 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:28.554759979 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:28.555000067 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:28.555006981 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:28.555150986 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:28.555754900 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:28.555823088 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:28.555887938 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:28.556946993 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:28.556955099 CEST	443	50262	104.18.25.173	192.168.2.4
Jul 5, 2024 07:56:28.557018995 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:28.557182074 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:28.557193995 CEST	443	50262	104.18.25.173	192.168.2.4
Jul 5, 2024 07:56:28.572500944 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.582151890 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.596512079 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:28.598159075 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:28.598165989 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:28.646117926 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:28.651782036 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.651806116 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.651818991 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.651840925 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.651851892 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.651859045 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.651870012 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.651896954 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.651897907 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.651926994 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.651952982 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.745131969 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.745147943 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.745426893 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.745436907 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.745569944 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.747104883 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.747118950 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.747179031 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.747184992 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.747313023 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.759224892 CEST	443	50245	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.759315014 CEST	443	50245	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.759397984 CEST	50245	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.762988091 CEST	50245	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.763000965 CEST	443	50245	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.772927999 CEST	443	50244	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.773000956 CEST	443	50244	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.773663044 CEST	50244	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.774663925 CEST	50244	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.774679899 CEST	443	50244	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.778565884 CEST	443	50250	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.778836012 CEST	50250	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.778842926 CEST	443	50250	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.779793978 CEST	443	50250	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.779870987 CEST	50250	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.779886961 CEST	50263	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.779915094 CEST	443	50263	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.780021906 CEST	50263	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.780204058 CEST	50250	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.780256987 CEST	443	50250	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.780487061 CEST	50250	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.780492067 CEST	443	50250	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.780499935 CEST	50263	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.780513048 CEST	443	50263	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.784066916 CEST	50264	443	192.168.2.4	23.20.216.210
Jul 5, 2024 07:56:28.784089088 CEST	443	50264	23.20.216.210	192.168.2.4
Jul 5, 2024 07:56:28.784248114 CEST	50264	443	192.168.2.4	23.20.216.210
Jul 5, 2024 07:56:28.784421921 CEST	50264	443	192.168.2.4	23.20.216.210
Jul 5, 2024 07:56:28.784434080 CEST	443	50264	23.20.216.210	192.168.2.4
Jul 5, 2024 07:56:28.821223974 CEST	50250	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.832607031 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:28.832679033 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:28.832860947 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:28.833662033 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:28.833672047 CEST	443	50247	3.71.149.231	192.168.2.4
Jul 5, 2024 07:56:28.833704948 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:28.833934069 CEST	50247	443	192.168.2.4	3.71.149.231
Jul 5, 2024 07:56:28.837768078 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.837835073 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.837857962 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.837872028 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.837908983 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.837908983 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.838144064 CEST	50243	443	192.168.2.4	13.107.246.45
Jul 5, 2024 07:56:28.838148117 CEST	443	50243	13.107.246.45	192.168.2.4
Jul 5, 2024 07:56:28.855408907 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:28.855441093 CEST	443	50265	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:28.855588913 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:28.855724096 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:28.855735064 CEST	443	50265	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:28.857007027 CEST	443	50252	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.858212948 CEST	50252	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.858222008 CEST	443	50252	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.858547926 CEST	443	50252	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.858983040 CEST	50252	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.859042883 CEST	443	50252	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.861140966 CEST	50252	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.908499002 CEST	443	50252	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:28.913333893 CEST	50252	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:28.953042984 CEST	50267	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.953066111 CEST	443	50267	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.953169107 CEST	50267	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.953687906 CEST	50267	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:28.953701019 CEST	443	50267	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:28.975205898 CEST	443	50258	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:28.977013111 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:28.977025986 CEST	443	50258	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:28.978050947 CEST	443	50258	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:28.978116989 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:28.979346037 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:28.979423046 CEST	443	50258	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:28.979657888 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:28.979665995 CEST	443	50258	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:28.985383987 CEST	443	50256	192.132.33.67	192.168.2.4
Jul 5, 2024 07:56:28.985567093 CEST	50256	443	192.168.2.4	192.132.33.67
Jul 5, 2024 07:56:28.985593081 CEST	443	50256	192.132.33.67	192.168.2.4
Jul 5, 2024 07:56:28.986574888 CEST	443	50256	192.132.33.67	192.168.2.4
Jul 5, 2024 07:56:28.986654043 CEST	50256	443	192.168.2.4	192.132.33.67
Jul 5, 2024 07:56:28.987659931 CEST	50256	443	192.168.2.4	192.132.33.67
Jul 5, 2024 07:56:28.987724066 CEST	443	50256	192.132.33.67	192.168.2.4
Jul 5, 2024 07:56:28.988008022 CEST	50256	443	192.168.2.4	192.132.33.67
Jul 5, 2024 07:56:28.988017082 CEST	443	50256	192.132.33.67	192.168.2.4
Jul 5, 2024 07:56:28.992413998 CEST	443	50254	142.250.186.164	192.168.2.4
Jul 5, 2024 07:56:28.998923063 CEST	50254	443	192.168.2.4	142.250.186.164
Jul 5, 2024 07:56:28.998971939 CEST	443	50254	142.250.186.164	192.168.2.4
Jul 5, 2024 07:56:29.000298023 CEST	443	50254	142.250.186.164	192.168.2.4
Jul 5, 2024 07:56:29.000382900 CEST	50254	443	192.168.2.4	142.250.186.164
Jul 5, 2024 07:56:29.000760078 CEST	50254	443	192.168.2.4	142.250.186.164
Jul 5, 2024 07:56:29.000822067 CEST	443	50254	142.250.186.164	192.168.2.4
Jul 5, 2024 07:56:29.000924110 CEST	50254	443	192.168.2.4	142.250.186.164
Jul 5, 2024 07:56:29.000930071 CEST	443	50254	142.250.186.164	192.168.2.4
Jul 5, 2024 07:56:29.022398949 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.026616096 CEST	443	50257	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.026793003 CEST	50257	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.026806116 CEST	443	50257	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.027662992 CEST	443	50257	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.027733088 CEST	50257	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.028114080 CEST	50257	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.028172016 CEST	443	50257	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.028207064 CEST	50257	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.038501024 CEST	50256	443	192.168.2.4	192.132.33.67
Jul 5, 2024 07:56:29.043385029 CEST	50254	443	192.168.2.4	142.250.186.164
Jul 5, 2024 07:56:29.046116114 CEST	443	50250	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.046169996 CEST	443	50250	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.046417952 CEST	50250	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.047163963 CEST	50250	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.047178030 CEST	443	50250	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.048342943 CEST	443	50262	104.18.25.173	192.168.2.4
Jul 5, 2024 07:56:29.048597097 CEST	443	50255	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.049738884 CEST	50255	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.049747944 CEST	443	50255	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.050115108 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:29.050144911 CEST	443	50262	104.18.25.173	192.168.2.4
Jul 5, 2024 07:56:29.050770044 CEST	443	50255	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.050828934 CEST	50255	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.051171064 CEST	443	50262	104.18.25.173	192.168.2.4
Jul 5, 2024 07:56:29.051234007 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:29.052683115 CEST	50255	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.052756071 CEST	443	50255	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.052922010 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:29.052987099 CEST	443	50262	104.18.25.173	192.168.2.4
Jul 5, 2024 07:56:29.053822994 CEST	50255	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.053831100 CEST	443	50255	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.053965092 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:29.053975105 CEST	443	50262	104.18.25.173	192.168.2.4
Jul 5, 2024 07:56:29.068504095 CEST	443	50257	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.075035095 CEST	50257	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.075046062 CEST	443	50257	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.093882084 CEST	443	50256	192.132.33.67	192.168.2.4
Jul 5, 2024 07:56:29.098896980 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.099714041 CEST	50256	443	192.168.2.4	192.132.33.67
Jul 5, 2024 07:56:29.099734068 CEST	443	50256	192.132.33.67	192.168.2.4
Jul 5, 2024 07:56:29.099786043 CEST	50256	443	192.168.2.4	192.132.33.67
Jul 5, 2024 07:56:29.102830887 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:29.102832079 CEST	50255	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.118208885 CEST	50257	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.120284081 CEST	443	50252	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.120357037 CEST	443	50252	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.120486975 CEST	50252	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.121552944 CEST	50252	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.121563911 CEST	443	50252	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.132411957 CEST	443	50259	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.132587910 CEST	50259	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.132602930 CEST	443	50259	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.133487940 CEST	443	50259	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.133538961 CEST	50259	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.133814096 CEST	50259	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.133871078 CEST	443	50259	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.133927107 CEST	50259	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.140508890 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.170969009 CEST	50272	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.170995951 CEST	443	50272	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.171060085 CEST	50272	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.171235085 CEST	50272	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.171250105 CEST	443	50272	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.172729969 CEST	443	50258	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.172796011 CEST	443	50258	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.172908068 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.173749924 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.173783064 CEST	443	50258	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.173794985 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.173832893 CEST	50258	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.174765110 CEST	50273	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.174772978 CEST	443	50273	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.174901009 CEST	50273	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.175014019 CEST	50273	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.175028086 CEST	443	50273	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.178206921 CEST	50259	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.178235054 CEST	443	50259	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.198936939 CEST	443	50261	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.199201107 CEST	50261	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.199230909 CEST	443	50261	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.199702978 CEST	443	50261	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.200139999 CEST	50261	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.200227022 CEST	443	50261	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.200262070 CEST	50261	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.214215994 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:29.214255095 CEST	443	50274	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:29.214327097 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:29.214525938 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:29.214541912 CEST	443	50274	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:29.225642920 CEST	50259	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.244071960 CEST	50261	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.244086981 CEST	443	50261	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.269973040 CEST	443	50262	104.18.25.173	192.168.2.4
Jul 5, 2024 07:56:29.270066977 CEST	443	50262	104.18.25.173	192.168.2.4
Jul 5, 2024 07:56:29.270122051 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:29.270442963 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:29.270458937 CEST	443	50262	104.18.25.173	192.168.2.4
Jul 5, 2024 07:56:29.270467997 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:29.270625114 CEST	50262	443	192.168.2.4	104.18.25.173
Jul 5, 2024 07:56:29.272015095 CEST	50277	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.272030115 CEST	443	50277	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.272253036 CEST	50277	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.272850037 CEST	50277	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.272860050 CEST	443	50277	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.277957916 CEST	443	50254	142.250.186.164	192.168.2.4
Jul 5, 2024 07:56:29.278033972 CEST	443	50254	142.250.186.164	192.168.2.4
Jul 5, 2024 07:56:29.278261900 CEST	50254	443	192.168.2.4	142.250.186.164
Jul 5, 2024 07:56:29.278439045 CEST	50254	443	192.168.2.4	142.250.186.164
Jul 5, 2024 07:56:29.278453112 CEST	443	50254	142.250.186.164	192.168.2.4
Jul 5, 2024 07:56:29.281240940 CEST	443	50260	18.130.29.255	192.168.2.4
Jul 5, 2024 07:56:29.281472921 CEST	50260	443	192.168.2.4	18.130.29.255
Jul 5, 2024 07:56:29.281485081 CEST	443	50260	18.130.29.255	192.168.2.4
Jul 5, 2024 07:56:29.282532930 CEST	443	50260	18.130.29.255	192.168.2.4
Jul 5, 2024 07:56:29.282609940 CEST	50260	443	192.168.2.4	18.130.29.255
Jul 5, 2024 07:56:29.283552885 CEST	50260	443	192.168.2.4	18.130.29.255
Jul 5, 2024 07:56:29.283615112 CEST	443	50260	18.130.29.255	192.168.2.4
Jul 5, 2024 07:56:29.283719063 CEST	50260	443	192.168.2.4	18.130.29.255
Jul 5, 2024 07:56:29.292538881 CEST	443	50257	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.292603970 CEST	443	50257	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.292666912 CEST	50257	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.293505907 CEST	50257	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.293521881 CEST	443	50257	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.320961952 CEST	443	50255	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.321029902 CEST	443	50255	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.321172953 CEST	50255	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.321721077 CEST	50255	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.321727037 CEST	443	50255	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.328511953 CEST	443	50260	18.130.29.255	192.168.2.4
Jul 5, 2024 07:56:29.338076115 CEST	50260	443	192.168.2.4	18.130.29.255
Jul 5, 2024 07:56:29.338087082 CEST	443	50260	18.130.29.255	192.168.2.4
Jul 5, 2024 07:56:29.386821985 CEST	50260	443	192.168.2.4	18.130.29.255
Jul 5, 2024 07:56:29.398379087 CEST	443	50259	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.398458004 CEST	443	50259	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.398583889 CEST	50259	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.399244070 CEST	50259	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.399271965 CEST	443	50259	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.437768936 CEST	443	50263	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.438097000 CEST	50263	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.438111067 CEST	443	50263	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.438442945 CEST	443	50263	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.438899040 CEST	50263	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.438961029 CEST	443	50263	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.439053059 CEST	50263	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.451215029 CEST	443	50260	18.130.29.255	192.168.2.4
Jul 5, 2024 07:56:29.451277018 CEST	443	50260	18.130.29.255	192.168.2.4
Jul 5, 2024 07:56:29.451328039 CEST	50260	443	192.168.2.4	18.130.29.255
Jul 5, 2024 07:56:29.453279972 CEST	50260	443	192.168.2.4	18.130.29.255
Jul 5, 2024 07:56:29.453298092 CEST	443	50260	18.130.29.255	192.168.2.4
Jul 5, 2024 07:56:29.456140995 CEST	50279	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.456173897 CEST	443	50279	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.456311941 CEST	50279	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.456506968 CEST	50279	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.456518888 CEST	443	50279	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.470040083 CEST	443	50261	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.470139980 CEST	443	50261	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.470207930 CEST	50261	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.470662117 CEST	50261	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.470695972 CEST	443	50261	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.476533890 CEST	50280	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.476548910 CEST	443	50280	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.476807117 CEST	50280	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.477152109 CEST	50280	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.477163076 CEST	443	50280	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.480503082 CEST	443	50263	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.497975111 CEST	443	50264	23.20.216.210	192.168.2.4
Jul 5, 2024 07:56:29.498289108 CEST	50264	443	192.168.2.4	23.20.216.210
Jul 5, 2024 07:56:29.498298883 CEST	443	50264	23.20.216.210	192.168.2.4
Jul 5, 2024 07:56:29.499278069 CEST	443	50264	23.20.216.210	192.168.2.4
Jul 5, 2024 07:56:29.499335051 CEST	50264	443	192.168.2.4	23.20.216.210
Jul 5, 2024 07:56:29.500204086 CEST	50264	443	192.168.2.4	23.20.216.210
Jul 5, 2024 07:56:29.500269890 CEST	443	50264	23.20.216.210	192.168.2.4
Jul 5, 2024 07:56:29.500380039 CEST	50264	443	192.168.2.4	23.20.216.210
Jul 5, 2024 07:56:29.500387907 CEST	443	50264	23.20.216.210	192.168.2.4
Jul 5, 2024 07:56:29.513567924 CEST	443	50265	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:29.513837099 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.513844967 CEST	443	50265	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:29.514815092 CEST	443	50265	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:29.514869928 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.514875889 CEST	443	50265	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:29.514925957 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.516597033 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.516663074 CEST	443	50265	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:29.516733885 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.544235945 CEST	50264	443	192.168.2.4	23.20.216.210
Jul 5, 2024 07:56:29.559509993 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.559516907 CEST	443	50265	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:29.591028929 CEST	443	50267	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.591200113 CEST	50267	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.591216087 CEST	443	50267	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.591582060 CEST	443	50267	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.592303991 CEST	50267	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.592364073 CEST	443	50267	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.592597008 CEST	50267	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.608398914 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.611820936 CEST	443	50264	23.20.216.210	192.168.2.4
Jul 5, 2024 07:56:29.611898899 CEST	443	50264	23.20.216.210	192.168.2.4
Jul 5, 2024 07:56:29.611960888 CEST	50264	443	192.168.2.4	23.20.216.210
Jul 5, 2024 07:56:29.630947113 CEST	50264	443	192.168.2.4	23.20.216.210
Jul 5, 2024 07:56:29.630966902 CEST	443	50264	23.20.216.210	192.168.2.4
Jul 5, 2024 07:56:29.636501074 CEST	443	50267	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.679999113 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.692150116 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.692161083 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.692189932 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.692203999 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.692214966 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.692214966 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.692245007 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.692259073 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.692265034 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.692298889 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.705496073 CEST	443	50263	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.705570936 CEST	443	50263	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.705621958 CEST	50263	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.706280947 CEST	50263	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.706300974 CEST	443	50263	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.758848906 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.763247967 CEST	443	50273	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.763442039 CEST	50273	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.763470888 CEST	443	50273	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.763830900 CEST	443	50273	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.764348030 CEST	50273	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.764405966 CEST	443	50273	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.764477015 CEST	50273	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.779711008 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.779720068 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.779755116 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.779783964 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.779805899 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.779819965 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.794646025 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.794687986 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.794696093 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.794708967 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.794734955 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.794744968 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.794775009 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.796279907 CEST	443	50272	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.796463013 CEST	50272	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.796475887 CEST	443	50272	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.797357082 CEST	443	50272	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.797415972 CEST	50272	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.797703028 CEST	50272	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.797761917 CEST	443	50272	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.797841072 CEST	50272	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.797849894 CEST	443	50272	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.799386978 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.799438953 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.799449921 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.805346966 CEST	50273	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.805356026 CEST	443	50273	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.830615044 CEST	50284	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.830643892 CEST	443	50284	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.830707073 CEST	50284	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.830882072 CEST	50284	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.830895901 CEST	443	50284	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.848597050 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.848653078 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.848664045 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.851699114 CEST	50272	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.855545998 CEST	443	50267	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.855613947 CEST	443	50267	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.855689049 CEST	50267	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.856272936 CEST	50267	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.856287003 CEST	443	50267	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.860848904 CEST	50286	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.860873938 CEST	443	50286	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.860920906 CEST	50286	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.861144066 CEST	50286	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:29.861152887 CEST	443	50286	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:29.871470928 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.871479988 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.871500015 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.871524096 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.871534109 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.871572018 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.871582031 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.873665094 CEST	443	50265	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:29.873728037 CEST	443	50265	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:29.873776913 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.874128103 CEST	50265	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.874138117 CEST	443	50265	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:29.875695944 CEST	50287	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.875720024 CEST	443	50287	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:29.875776052 CEST	50287	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.875931978 CEST	50287	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:29.875946999 CEST	443	50287	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:29.886051893 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.886059046 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.886085987 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.886112928 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.886136055 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.886146069 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.886179924 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.886189938 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.886339903 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.886385918 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.891031981 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.891097069 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.895550013 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.895585060 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.895613909 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.895622969 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.895638943 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.895654917 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.895663977 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.895694971 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.896428108 CEST	50082	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.896440029 CEST	443	50082	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.913279057 CEST	443	50277	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.919207096 CEST	50277	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.919224024 CEST	443	50277	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.919567108 CEST	443	50277	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.920274019 CEST	50277	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.920331955 CEST	443	50277	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.920543909 CEST	50277	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.956377983 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.956398010 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.956684113 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.957036972 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:29.957055092 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:29.968509912 CEST	443	50277	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.977003098 CEST	443	50273	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.977061033 CEST	443	50273	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.977133989 CEST	50273	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.987977982 CEST	50273	443	192.168.2.4	76.223.111.18
Jul 5, 2024 07:56:29.987987995 CEST	443	50273	76.223.111.18	192.168.2.4
Jul 5, 2024 07:56:29.988867044 CEST	50289	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.988902092 CEST	443	50289	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:29.988966942 CEST	50289	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.989206076 CEST	50289	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:29.989221096 CEST	443	50289	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.058491945 CEST	443	50272	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.058582067 CEST	443	50272	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.058640003 CEST	50272	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.059315920 CEST	50272	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.059336901 CEST	443	50272	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.062422037 CEST	50291	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.062474012 CEST	443	50291	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.062537909 CEST	50291	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.062695026 CEST	50291	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.062711954 CEST	443	50291	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.085845947 CEST	443	50279	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.086249113 CEST	50279	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.086260080 CEST	443	50279	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.087270021 CEST	443	50279	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.087321997 CEST	50279	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.087785959 CEST	50279	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.087843895 CEST	443	50279	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.087945938 CEST	50279	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.087953091 CEST	443	50279	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.125031948 CEST	443	50274	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.125210047 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.125220060 CEST	443	50274	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.126260042 CEST	443	50274	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.126323938 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.127799034 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.127856970 CEST	443	50274	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.127922058 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.128556967 CEST	50279	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.133795977 CEST	443	50280	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.134438992 CEST	50280	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.134447098 CEST	443	50280	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.134763002 CEST	443	50280	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.135116100 CEST	50280	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.135174036 CEST	443	50280	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.135226965 CEST	50280	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.172498941 CEST	443	50274	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.176501989 CEST	443	50280	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.180012941 CEST	443	50277	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.180085897 CEST	443	50277	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.180190086 CEST	50277	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.180418968 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.180428982 CEST	443	50274	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.183419943 CEST	50277	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.183430910 CEST	443	50277	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.194190025 CEST	50295	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:30.194207907 CEST	443	50295	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:30.194264889 CEST	50295	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:30.195401907 CEST	50295	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:30.195414066 CEST	443	50295	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:30.200177908 CEST	50297	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.200195074 CEST	443	50297	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.200443029 CEST	50297	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.200647116 CEST	50297	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.200660944 CEST	443	50297	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.201988935 CEST	50298	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.201997995 CEST	443	50298	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.202053070 CEST	50298	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.202205896 CEST	50298	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.202218056 CEST	443	50298	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.228420019 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.308190107 CEST	443	50274	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.308262110 CEST	443	50274	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.308329105 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.308546066 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.308561087 CEST	443	50274	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.308573008 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.308603048 CEST	50274	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.317418098 CEST	50302	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.317444086 CEST	443	50302	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.317549944 CEST	50302	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.317781925 CEST	50302	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.317797899 CEST	443	50302	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.346633911 CEST	443	50279	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.346709967 CEST	443	50279	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.346820116 CEST	50279	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.348201036 CEST	50279	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.348226070 CEST	443	50279	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.364311934 CEST	50304	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.364345074 CEST	443	50304	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.364408970 CEST	50304	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.364664078 CEST	50304	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.364680052 CEST	443	50304	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.374676943 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:30.374689102 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:30.374744892 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:30.374938011 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:30.374950886 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:30.397922993 CEST	443	50280	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.397984982 CEST	443	50280	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.398104906 CEST	50280	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.398843050 CEST	50280	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.398855925 CEST	443	50280	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.457305908 CEST	443	50284	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.457509041 CEST	50284	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.457526922 CEST	443	50284	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.458029985 CEST	443	50284	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.458338022 CEST	50284	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.458437920 CEST	443	50284	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.458441973 CEST	50284	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.504503965 CEST	443	50284	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.507921934 CEST	50284	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.508980036 CEST	443	50286	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.509207964 CEST	50286	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.509219885 CEST	443	50286	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.509671926 CEST	443	50286	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.510056019 CEST	50286	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.510135889 CEST	443	50286	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.510148048 CEST	50286	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.522192001 CEST	443	50287	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:30.522449970 CEST	50287	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:30.522463083 CEST	443	50287	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:30.522804976 CEST	443	50287	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:30.527031898 CEST	50287	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:30.527031898 CEST	50287	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:30.527057886 CEST	443	50287	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:30.527105093 CEST	443	50287	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:30.556030035 CEST	50286	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.556041002 CEST	443	50286	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.571312904 CEST	50287	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:30.578541040 CEST	50308	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:30.578571081 CEST	443	50308	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:30.578654051 CEST	50308	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:30.578828096 CEST	50308	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:30.578843117 CEST	443	50308	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:30.627813101 CEST	443	50289	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.628102064 CEST	50289	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.628114939 CEST	443	50289	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.628451109 CEST	443	50289	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.628819942 CEST	50289	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.628878117 CEST	443	50289	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.628901005 CEST	50289	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.628909111 CEST	443	50289	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.682636976 CEST	50289	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.693279028 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:30.693438053 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:30.693449020 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:30.694529057 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:30.694606066 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:30.694941998 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:30.695008039 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:30.695053101 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:30.719783068 CEST	443	50284	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.719875097 CEST	443	50284	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.720171928 CEST	50284	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.720706940 CEST	50284	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.720722914 CEST	443	50284	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.721623898 CEST	443	50291	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.722220898 CEST	50291	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.722232103 CEST	443	50291	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.723212004 CEST	443	50291	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.723282099 CEST	50291	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.723802090 CEST	50291	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.723860979 CEST	443	50291	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.724112034 CEST	50311	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.724139929 CEST	443	50311	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.724196911 CEST	50311	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.724406004 CEST	50291	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.724416018 CEST	443	50291	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.724555016 CEST	50311	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.724570036 CEST	443	50311	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.735652924 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:30.735660076 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:30.770695925 CEST	443	50286	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.770761013 CEST	443	50286	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.770822048 CEST	50286	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.771579981 CEST	50286	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.771599054 CEST	443	50286	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.776141882 CEST	50291	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.791151047 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:30.806041956 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:30.806058884 CEST	443	50313	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:30.806123972 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:30.806312084 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:30.806319952 CEST	443	50313	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:30.844918966 CEST	443	50297	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.845129967 CEST	50297	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.845150948 CEST	443	50297	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.845488071 CEST	443	50297	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.845894098 CEST	50297	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.845963001 CEST	443	50297	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.846234083 CEST	50297	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.850661993 CEST	443	50298	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.850967884 CEST	50298	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.850980997 CEST	443	50298	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.851346970 CEST	443	50298	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.852010965 CEST	443	50295	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:30.852650881 CEST	50295	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:30.852669954 CEST	443	50295	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:30.853003979 CEST	443	50295	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:30.853105068 CEST	50298	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.853168964 CEST	443	50298	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.853835106 CEST	50298	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:30.855704069 CEST	50295	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:30.855772018 CEST	443	50295	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:30.869735003 CEST	443	50287	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:30.869815111 CEST	443	50287	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:30.869864941 CEST	50287	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:30.870980978 CEST	50287	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:30.871001005 CEST	443	50287	3.75.62.37	192.168.2.4
Jul 5, 2024 07:56:30.871011019 CEST	50287	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:30.871053934 CEST	50287	443	192.168.2.4	3.75.62.37
Jul 5, 2024 07:56:30.872847080 CEST	50315	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.872883081 CEST	443	50315	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.873086929 CEST	50315	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.873254061 CEST	50315	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.873267889 CEST	443	50315	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.888504982 CEST	443	50297	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.900494099 CEST	443	50298	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.901156902 CEST	50295	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:30.903338909 CEST	443	50289	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.903404951 CEST	443	50289	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.903482914 CEST	50289	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.905380964 CEST	50289	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:30.905390024 CEST	443	50289	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:30.945900917 CEST	443	50302	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.956207991 CEST	50302	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.956223011 CEST	443	50302	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.956617117 CEST	443	50302	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.956785917 CEST	50316	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:30.956806898 CEST	443	50316	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:30.956877947 CEST	50316	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:30.967323065 CEST	50316	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:30.967355013 CEST	443	50316	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:30.967575073 CEST	50302	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.967650890 CEST	443	50302	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:30.974273920 CEST	50302	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:30.992177010 CEST	443	50304	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.996695042 CEST	443	50291	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.996761084 CEST	443	50291	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:30.999021053 CEST	50291	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.020499945 CEST	443	50302	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:31.038248062 CEST	50304	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.044915915 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.064085007 CEST	50304	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.064111948 CEST	443	50304	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.064770937 CEST	50291	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.064798117 CEST	443	50291	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.065164089 CEST	443	50304	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.065243006 CEST	50304	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.065649033 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.065658092 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.066212893 CEST	50304	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.066286087 CEST	443	50304	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.066679001 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.066754103 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.066865921 CEST	50304	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.066879034 CEST	443	50304	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.067222118 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.067277908 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.067486048 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.067492008 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.077018023 CEST	50317	443	192.168.2.4	54.144.178.48
Jul 5, 2024 07:56:31.077035904 CEST	443	50317	54.144.178.48	192.168.2.4
Jul 5, 2024 07:56:31.077157021 CEST	50317	443	192.168.2.4	54.144.178.48
Jul 5, 2024 07:56:31.077302933 CEST	50317	443	192.168.2.4	54.144.178.48
Jul 5, 2024 07:56:31.077317953 CEST	443	50317	54.144.178.48	192.168.2.4
Jul 5, 2024 07:56:31.079803944 CEST	50318	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.079818010 CEST	443	50318	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.079868078 CEST	50318	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.080280066 CEST	50318	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.080292940 CEST	443	50318	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.109349012 CEST	443	50297	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.109410048 CEST	443	50297	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.109462976 CEST	50297	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.110261917 CEST	50297	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.110270023 CEST	443	50297	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.113137007 CEST	50322	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.113157034 CEST	443	50322	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.113234043 CEST	50322	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.113429070 CEST	50322	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.113442898 CEST	443	50322	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.115956068 CEST	443	50298	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.116020918 CEST	443	50298	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.116074085 CEST	50298	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.116636038 CEST	50298	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.116643906 CEST	443	50298	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.119384050 CEST	50304	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.119620085 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.121331930 CEST	50323	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:31.121349096 CEST	443	50323	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:31.121412992 CEST	50323	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:31.121603012 CEST	50323	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:31.121617079 CEST	443	50323	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:31.177845001 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.177870035 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.177876949 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.177910089 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.177923918 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.177931070 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.177943945 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.177948952 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.177983999 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.178018093 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.216037035 CEST	443	50302	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:31.216104984 CEST	443	50302	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:31.216201067 CEST	50302	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:31.216437101 CEST	50302	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:31.216455936 CEST	443	50302	52.16.78.59	192.168.2.4
Jul 5, 2024 07:56:31.216464996 CEST	50302	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:31.216629028 CEST	50302	443	192.168.2.4	52.16.78.59
Jul 5, 2024 07:56:31.217951059 CEST	50326	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.218017101 CEST	443	50326	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.218094110 CEST	50326	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.218287945 CEST	50326	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.218321085 CEST	443	50326	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.221402884 CEST	443	50308	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:31.221621037 CEST	50308	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:31.221630096 CEST	443	50308	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:31.221939087 CEST	443	50308	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:31.222387075 CEST	50308	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:31.222449064 CEST	443	50308	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:31.222532034 CEST	50308	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:31.253237009 CEST	443	50304	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.253313065 CEST	443	50304	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.253360033 CEST	50304	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.253848076 CEST	50304	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.253858089 CEST	443	50304	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.262782097 CEST	50308	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:31.262794018 CEST	443	50308	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:31.265677929 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.265697956 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.265801907 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.265810013 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.265851021 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.267285109 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.267298937 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.267381907 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.267388105 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.267406940 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.267442942 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.283262014 CEST	443	50313	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.283435106 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.283443928 CEST	443	50313	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.284518003 CEST	443	50313	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.284574032 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.285579920 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.285634995 CEST	443	50313	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.285764933 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.285770893 CEST	443	50313	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.307028055 CEST	50328	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.307044983 CEST	443	50328	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.307163954 CEST	50328	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.307351112 CEST	50328	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.307363033 CEST	443	50328	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.325781107 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.357466936 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.357484102 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.357578993 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.357589006 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.357644081 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.358879089 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.358894110 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.358967066 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.358974934 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.359019995 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.360835075 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.360848904 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.360913992 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.360920906 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.360945940 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.360961914 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.361835003 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.361849070 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.361963034 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.361972094 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.362016916 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.363962889 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.363981009 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.363991976 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.364021063 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.364028931 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.364041090 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:31.364053011 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.364073038 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:31.364095926 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:31.364723921 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.364789009 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.364854097 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:31.365235090 CEST	50288	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:31.365243912 CEST	443	50288	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.369966984 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:31.369993925 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.370085955 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:31.371189117 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:31.371196985 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.371745110 CEST	50330	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:31.371773005 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.371831894 CEST	50330	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:31.371836901 CEST	443	50311	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.372052908 CEST	50330	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:31.372065067 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:31.372176886 CEST	50311	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.372185946 CEST	443	50311	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.372528076 CEST	443	50311	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.372826099 CEST	50311	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.372893095 CEST	443	50311	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.372927904 CEST	50311	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.416498899 CEST	443	50311	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.420294046 CEST	50311	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.421991110 CEST	443	50313	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.422068119 CEST	443	50313	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.422245026 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.422645092 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.422658920 CEST	443	50313	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.422682047 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.422702074 CEST	50313	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.424242973 CEST	50331	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.424276114 CEST	443	50331	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.424346924 CEST	50331	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.424578905 CEST	50331	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.424596071 CEST	443	50331	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.449615002 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.449631929 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.449702024 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.449712038 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.449723959 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.449811935 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.450404882 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.450472116 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.450490952 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.450522900 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.450669050 CEST	50305	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:31.450680017 CEST	443	50305	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:31.467883110 CEST	443	50316	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:31.468229055 CEST	50316	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:31.468276978 CEST	443	50316	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:31.469324112 CEST	443	50316	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:31.469396114 CEST	50316	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:31.470314980 CEST	50316	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:31.470371962 CEST	443	50316	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:31.470437050 CEST	50316	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:31.470443010 CEST	443	50316	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:31.506408930 CEST	443	50308	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:31.506531954 CEST	443	50308	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:31.506582975 CEST	50308	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:31.508012056 CEST	50308	443	192.168.2.4	142.250.184.226
Jul 5, 2024 07:56:31.508024931 CEST	443	50308	142.250.184.226	192.168.2.4
Jul 5, 2024 07:56:31.510941029 CEST	50316	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:31.511408091 CEST	443	50315	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.511902094 CEST	50315	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.511919022 CEST	443	50315	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.512269974 CEST	443	50315	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.512687922 CEST	50315	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.512768984 CEST	443	50315	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.512919903 CEST	50315	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.512919903 CEST	50315	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.512936115 CEST	443	50315	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.519088030 CEST	50333	443	192.168.2.4	172.217.16.194
Jul 5, 2024 07:56:31.519118071 CEST	443	50333	172.217.16.194	192.168.2.4
Jul 5, 2024 07:56:31.519174099 CEST	50333	443	192.168.2.4	172.217.16.194
Jul 5, 2024 07:56:31.519340992 CEST	50333	443	192.168.2.4	172.217.16.194
Jul 5, 2024 07:56:31.519355059 CEST	443	50333	172.217.16.194	192.168.2.4
Jul 5, 2024 07:56:31.636106014 CEST	443	50311	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.636173010 CEST	443	50311	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.636217117 CEST	50311	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.636864901 CEST	50311	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.636879921 CEST	443	50311	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.642632961 CEST	443	50316	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:31.642761946 CEST	443	50316	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:31.643013954 CEST	50316	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:31.643156052 CEST	50316	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:31.643172026 CEST	443	50316	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:31.657613039 CEST	50334	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:31.657633066 CEST	443	50334	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:31.657687902 CEST	50334	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:31.657876015 CEST	50334	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:31.657890081 CEST	443	50334	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:31.711971998 CEST	50335	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:31.711987019 CEST	443	50335	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:31.712219954 CEST	50335	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:31.712397099 CEST	50335	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:31.712409019 CEST	443	50335	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:31.714586973 CEST	443	50318	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.714787960 CEST	50318	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.714796066 CEST	443	50318	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.715137005 CEST	443	50318	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.715436935 CEST	50318	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.715497971 CEST	443	50318	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.715598106 CEST	50318	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.745953083 CEST	443	50322	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.746167898 CEST	50322	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.746181011 CEST	443	50322	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.746517897 CEST	443	50322	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.746965885 CEST	50322	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.747028112 CEST	443	50322	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.747133017 CEST	50322	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.756542921 CEST	443	50318	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.773849964 CEST	443	50315	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.773924112 CEST	443	50315	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.773969889 CEST	50315	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.774693012 CEST	50315	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.774699926 CEST	443	50315	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.777165890 CEST	50337	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.777204037 CEST	443	50337	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.777439117 CEST	50337	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.777625084 CEST	50337	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.777645111 CEST	443	50337	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.780945063 CEST	443	50323	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:31.781156063 CEST	50323	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:31.781179905 CEST	443	50323	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:31.781513929 CEST	443	50323	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:31.781851053 CEST	50323	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:31.781910896 CEST	443	50323	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:31.781970024 CEST	50323	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:31.788503885 CEST	443	50322	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.793771982 CEST	443	50328	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.793961048 CEST	50328	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.793975115 CEST	443	50328	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.794996023 CEST	443	50328	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.795070887 CEST	50328	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.795991898 CEST	50328	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.796056986 CEST	443	50328	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.796124935 CEST	50328	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.796142101 CEST	443	50328	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.822724104 CEST	50323	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:31.822735071 CEST	443	50323	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:31.838712931 CEST	50328	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.846123934 CEST	443	50326	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.846307993 CEST	50326	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.846342087 CEST	443	50326	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.846648932 CEST	443	50326	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.846995115 CEST	50326	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.847054958 CEST	443	50326	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.847096920 CEST	50326	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.856230021 CEST	443	50317	54.144.178.48	192.168.2.4
Jul 5, 2024 07:56:31.856422901 CEST	50317	443	192.168.2.4	54.144.178.48
Jul 5, 2024 07:56:31.856440067 CEST	443	50317	54.144.178.48	192.168.2.4
Jul 5, 2024 07:56:31.857590914 CEST	443	50317	54.144.178.48	192.168.2.4
Jul 5, 2024 07:56:31.857646942 CEST	50317	443	192.168.2.4	54.144.178.48
Jul 5, 2024 07:56:31.858479023 CEST	50317	443	192.168.2.4	54.144.178.48
Jul 5, 2024 07:56:31.858542919 CEST	443	50317	54.144.178.48	192.168.2.4
Jul 5, 2024 07:56:31.858607054 CEST	50317	443	192.168.2.4	54.144.178.48
Jul 5, 2024 07:56:31.858619928 CEST	443	50317	54.144.178.48	192.168.2.4
Jul 5, 2024 07:56:31.892505884 CEST	443	50326	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.898833990 CEST	50326	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.898885965 CEST	50317	443	192.168.2.4	54.144.178.48
Jul 5, 2024 07:56:31.904851913 CEST	443	50328	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.904926062 CEST	443	50328	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.904978037 CEST	50328	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.905249119 CEST	50328	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.905267000 CEST	443	50328	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.906316042 CEST	50339	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.906366110 CEST	443	50339	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.906429052 CEST	50339	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.906600952 CEST	50339	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:31.906620026 CEST	443	50339	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:31.911276102 CEST	443	50331	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.911453009 CEST	50331	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.911462069 CEST	443	50331	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.911753893 CEST	443	50331	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.912034988 CEST	50331	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.912090063 CEST	443	50331	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.912122011 CEST	50331	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.952507019 CEST	443	50331	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:31.961824894 CEST	50331	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:31.976437092 CEST	443	50318	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.976500034 CEST	443	50318	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.976681948 CEST	50318	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.977101088 CEST	50318	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:31.977111101 CEST	443	50318	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:31.979242086 CEST	443	50317	54.144.178.48	192.168.2.4
Jul 5, 2024 07:56:31.979394913 CEST	443	50317	54.144.178.48	192.168.2.4
Jul 5, 2024 07:56:31.979448080 CEST	50317	443	192.168.2.4	54.144.178.48
Jul 5, 2024 07:56:31.979923010 CEST	50317	443	192.168.2.4	54.144.178.48
Jul 5, 2024 07:56:31.979933023 CEST	443	50317	54.144.178.48	192.168.2.4
Jul 5, 2024 07:56:31.981647968 CEST	50342	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.981677055 CEST	443	50342	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:31.981784105 CEST	50342	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.981982946 CEST	50342	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:31.981997013 CEST	443	50342	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.009823084 CEST	443	50322	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.009871960 CEST	443	50322	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.009938002 CEST	50322	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.011538982 CEST	50322	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.011552095 CEST	443	50322	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.064524889 CEST	443	50331	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.064590931 CEST	443	50331	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.064651012 CEST	50331	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.078221083 CEST	50331	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.078232050 CEST	443	50331	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.092428923 CEST	50343	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.092469931 CEST	443	50343	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.093158007 CEST	50343	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.093347073 CEST	50343	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.093358994 CEST	443	50343	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.107300043 CEST	443	50326	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.107362032 CEST	443	50326	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.107426882 CEST	50326	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:32.108150005 CEST	50326	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:32.108164072 CEST	443	50326	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.113164902 CEST	50344	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.113178968 CEST	443	50344	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.113229036 CEST	50344	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.113543034 CEST	50344	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.113558054 CEST	443	50344	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.116327047 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.116523981 CEST	50330	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.116532087 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.116873026 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.117208958 CEST	50330	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.117271900 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.117336035 CEST	50330	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.119040966 CEST	443	50323	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:32.119097948 CEST	50323	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:32.119110107 CEST	443	50323	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:32.119122028 CEST	443	50323	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:32.119163990 CEST	50323	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:32.120167971 CEST	50323	443	192.168.2.4	37.252.171.52
Jul 5, 2024 07:56:32.120177984 CEST	443	50323	37.252.171.52	192.168.2.4
Jul 5, 2024 07:56:32.130364895 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.130572081 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.130578995 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.130908966 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.131371021 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.131418943 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.131531954 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.132843018 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:32.132862091 CEST	443	50345	185.89.211.84	192.168.2.4
Jul 5, 2024 07:56:32.133060932 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:32.133225918 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:32.133236885 CEST	443	50345	185.89.211.84	192.168.2.4
Jul 5, 2024 07:56:32.133889914 CEST	443	50334	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:32.134165049 CEST	50334	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:32.134196043 CEST	443	50334	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:32.135485888 CEST	443	50334	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:32.135552883 CEST	50334	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:32.135833025 CEST	50334	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:32.135898113 CEST	443	50334	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:32.135977030 CEST	50334	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:32.135992050 CEST	443	50334	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:32.160501957 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.166301012 CEST	443	50333	172.217.16.194	192.168.2.4
Jul 5, 2024 07:56:32.166490078 CEST	50333	443	192.168.2.4	172.217.16.194
Jul 5, 2024 07:56:32.166507959 CEST	443	50333	172.217.16.194	192.168.2.4
Jul 5, 2024 07:56:32.167483091 CEST	443	50333	172.217.16.194	192.168.2.4
Jul 5, 2024 07:56:32.167550087 CEST	50333	443	192.168.2.4	172.217.16.194
Jul 5, 2024 07:56:32.167840958 CEST	50333	443	192.168.2.4	172.217.16.194
Jul 5, 2024 07:56:32.167901993 CEST	443	50333	172.217.16.194	192.168.2.4
Jul 5, 2024 07:56:32.167943001 CEST	50333	443	192.168.2.4	172.217.16.194
Jul 5, 2024 07:56:32.168149948 CEST	50330	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.176493883 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.180361032 CEST	50334	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:32.212508917 CEST	443	50333	172.217.16.194	192.168.2.4
Jul 5, 2024 07:56:32.215279102 CEST	50333	443	192.168.2.4	172.217.16.194
Jul 5, 2024 07:56:32.215292931 CEST	443	50333	172.217.16.194	192.168.2.4
Jul 5, 2024 07:56:32.263230085 CEST	50333	443	192.168.2.4	172.217.16.194
Jul 5, 2024 07:56:32.304955006 CEST	443	50334	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:32.305660009 CEST	443	50334	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:32.305722952 CEST	50334	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:32.305824041 CEST	50334	443	192.168.2.4	151.101.193.44
Jul 5, 2024 07:56:32.305844069 CEST	443	50334	151.101.193.44	192.168.2.4
Jul 5, 2024 07:56:32.361078978 CEST	443	50335	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:32.361282110 CEST	50335	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:32.361296892 CEST	443	50335	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:32.362358093 CEST	443	50335	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:32.362410069 CEST	50335	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:32.363390923 CEST	50335	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:32.363449097 CEST	443	50335	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:32.363523006 CEST	50335	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:32.372926950 CEST	443	50339	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:32.373125076 CEST	50339	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:32.373140097 CEST	443	50339	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:32.373509884 CEST	443	50339	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:32.373981953 CEST	50339	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:32.374046087 CEST	443	50339	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:32.374126911 CEST	50339	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:32.405540943 CEST	50335	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:32.405550003 CEST	443	50335	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:32.420497894 CEST	443	50339	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:32.440155029 CEST	443	50337	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.440350056 CEST	50337	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.440361977 CEST	443	50337	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.440740108 CEST	443	50337	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.441046953 CEST	50337	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.441102982 CEST	443	50337	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.441154957 CEST	50337	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.448647976 CEST	443	50333	172.217.16.194	192.168.2.4
Jul 5, 2024 07:56:32.448964119 CEST	443	50333	172.217.16.194	192.168.2.4
Jul 5, 2024 07:56:32.449021101 CEST	50333	443	192.168.2.4	172.217.16.194
Jul 5, 2024 07:56:32.449335098 CEST	50333	443	192.168.2.4	172.217.16.194
Jul 5, 2024 07:56:32.449350119 CEST	443	50333	172.217.16.194	192.168.2.4
Jul 5, 2024 07:56:32.453536034 CEST	50335	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:32.484504938 CEST	443	50337	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.485061884 CEST	443	50339	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:32.498917103 CEST	443	50339	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:32.498971939 CEST	50339	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:32.499222040 CEST	50339	443	192.168.2.4	35.244.159.8
Jul 5, 2024 07:56:32.499234915 CEST	443	50339	35.244.159.8	192.168.2.4
Jul 5, 2024 07:56:32.510519028 CEST	50346	443	192.168.2.4	34.98.64.218
Jul 5, 2024 07:56:32.510545969 CEST	443	50346	34.98.64.218	192.168.2.4
Jul 5, 2024 07:56:32.510622978 CEST	50346	443	192.168.2.4	34.98.64.218
Jul 5, 2024 07:56:32.510842085 CEST	50346	443	192.168.2.4	34.98.64.218
Jul 5, 2024 07:56:32.510859013 CEST	443	50346	34.98.64.218	192.168.2.4
Jul 5, 2024 07:56:32.522941113 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:32.522969961 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:32.523053885 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:32.523217916 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:32.523233891 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:32.566267014 CEST	443	50343	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.566490889 CEST	50343	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.566502094 CEST	443	50343	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.567488909 CEST	443	50343	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.567553997 CEST	50343	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.567846060 CEST	50343	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.567913055 CEST	443	50343	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.568008900 CEST	50343	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.568017006 CEST	443	50343	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.612916946 CEST	50343	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.615092993 CEST	443	50335	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:32.616137028 CEST	443	50335	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:32.616211891 CEST	50335	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:32.616539955 CEST	50335	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:32.616559029 CEST	443	50335	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:32.639296055 CEST	50348	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:32.639318943 CEST	443	50348	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:32.639511108 CEST	50348	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:32.639719963 CEST	50348	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:32.639729023 CEST	443	50348	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:32.645006895 CEST	443	50342	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.645714998 CEST	50342	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:32.645734072 CEST	443	50342	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.646037102 CEST	443	50342	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.646369934 CEST	50342	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:32.646430969 CEST	443	50342	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.646547079 CEST	50342	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:32.692496061 CEST	443	50342	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.710534096 CEST	443	50343	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.710619926 CEST	443	50343	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.711034060 CEST	443	50337	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.711040974 CEST	50343	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.711138010 CEST	443	50337	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.713884115 CEST	50337	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.716490030 CEST	50337	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.716506958 CEST	443	50337	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.723659992 CEST	50343	443	192.168.2.4	172.64.151.101
Jul 5, 2024 07:56:32.723666906 CEST	443	50343	172.64.151.101	192.168.2.4
Jul 5, 2024 07:56:32.763385057 CEST	443	50344	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.763601065 CEST	50344	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.763608932 CEST	443	50344	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.763994932 CEST	443	50344	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.764507055 CEST	50344	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.764573097 CEST	443	50344	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.764748096 CEST	50344	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.791353941 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.795500040 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.795547962 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.795556068 CEST	50330	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.795598030 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.795610905 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.795675039 CEST	50330	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.804977894 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.804997921 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.805059910 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.805066109 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.805145979 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.805628061 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.805690050 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.805741072 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.812503099 CEST	443	50344	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.827650070 CEST	50330	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.827662945 CEST	443	50330	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.854825974 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.854825974 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.854835987 CEST	443	50329	108.138.7.18	192.168.2.4
Jul 5, 2024 07:56:32.854892969 CEST	50329	443	192.168.2.4	108.138.7.18
Jul 5, 2024 07:56:32.880976915 CEST	50349	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:32.881010056 CEST	443	50349	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:32.881067991 CEST	50349	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:32.881268024 CEST	50349	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:32.881280899 CEST	443	50349	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:32.891005993 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.891022921 CEST	443	50350	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:32.892512083 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.892549992 CEST	443	50351	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:32.892596960 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.892666101 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.892772913 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.892786026 CEST	443	50350	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:32.893007040 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.893023014 CEST	443	50351	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:32.893796921 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.893802881 CEST	50353	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.893815041 CEST	443	50352	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:32.893826008 CEST	443	50353	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:32.893896103 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.893901110 CEST	50353	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.894277096 CEST	50353	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.894292116 CEST	443	50353	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:32.894668102 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:32.894680023 CEST	443	50352	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:32.918585062 CEST	443	50342	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.918761969 CEST	443	50342	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.919251919 CEST	50342	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:32.919697046 CEST	50342	443	192.168.2.4	54.216.96.15
Jul 5, 2024 07:56:32.919709921 CEST	443	50342	54.216.96.15	192.168.2.4
Jul 5, 2024 07:56:32.926026106 CEST	50354	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.926037073 CEST	443	50354	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.926126003 CEST	50354	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.927001953 CEST	50354	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:32.927017927 CEST	443	50354	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:32.933944941 CEST	443	50345	185.89.211.84	192.168.2.4
Jul 5, 2024 07:56:32.935233116 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:32.935246944 CEST	443	50345	185.89.211.84	192.168.2.4
Jul 5, 2024 07:56:32.936152935 CEST	443	50345	185.89.211.84	192.168.2.4
Jul 5, 2024 07:56:32.936450005 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:32.936594963 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:32.936594963 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:32.936604023 CEST	443	50345	185.89.211.84	192.168.2.4
Jul 5, 2024 07:56:32.936646938 CEST	443	50345	185.89.211.84	192.168.2.4
Jul 5, 2024 07:56:32.938920975 CEST	443	49852	152.199.21.175	192.168.2.4
Jul 5, 2024 07:56:32.938982010 CEST	443	49852	152.199.21.175	192.168.2.4
Jul 5, 2024 07:56:32.939136982 CEST	49852	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:56:32.951920986 CEST	49852	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:56:32.951936960 CEST	443	49852	152.199.21.175	192.168.2.4
Jul 5, 2024 07:56:32.979084969 CEST	443	50346	34.98.64.218	192.168.2.4
Jul 5, 2024 07:56:32.979293108 CEST	50346	443	192.168.2.4	34.98.64.218
Jul 5, 2024 07:56:32.979301929 CEST	443	50346	34.98.64.218	192.168.2.4
Jul 5, 2024 07:56:32.980328083 CEST	443	50346	34.98.64.218	192.168.2.4
Jul 5, 2024 07:56:32.980510950 CEST	50346	443	192.168.2.4	34.98.64.218
Jul 5, 2024 07:56:32.980603933 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:32.980608940 CEST	443	50345	185.89.211.84	192.168.2.4
Jul 5, 2024 07:56:32.981195927 CEST	50346	443	192.168.2.4	34.98.64.218
Jul 5, 2024 07:56:32.981271982 CEST	443	50346	34.98.64.218	192.168.2.4
Jul 5, 2024 07:56:32.981304884 CEST	50346	443	192.168.2.4	34.98.64.218
Jul 5, 2024 07:56:33.028502941 CEST	443	50346	34.98.64.218	192.168.2.4
Jul 5, 2024 07:56:33.029870033 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:33.029871941 CEST	50346	443	192.168.2.4	34.98.64.218
Jul 5, 2024 07:56:33.029879093 CEST	443	50346	34.98.64.218	192.168.2.4
Jul 5, 2024 07:56:33.030318975 CEST	443	50344	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:33.030375957 CEST	443	50344	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:33.030473948 CEST	50344	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:33.031116962 CEST	50344	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:33.031132936 CEST	443	50344	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:33.078032017 CEST	50346	443	192.168.2.4	34.98.64.218
Jul 5, 2024 07:56:33.095123053 CEST	443	50346	34.98.64.218	192.168.2.4
Jul 5, 2024 07:56:33.095252991 CEST	443	50346	34.98.64.218	192.168.2.4
Jul 5, 2024 07:56:33.096373081 CEST	50346	443	192.168.2.4	34.98.64.218
Jul 5, 2024 07:56:33.096508026 CEST	50346	443	192.168.2.4	34.98.64.218
Jul 5, 2024 07:56:33.096519947 CEST	443	50346	34.98.64.218	192.168.2.4
Jul 5, 2024 07:56:33.116414070 CEST	443	50345	185.89.211.84	192.168.2.4
Jul 5, 2024 07:56:33.116522074 CEST	443	50345	185.89.211.84	192.168.2.4
Jul 5, 2024 07:56:33.116544008 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:33.116991043 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:33.118554115 CEST	50345	443	192.168.2.4	185.89.211.84
Jul 5, 2024 07:56:33.118577957 CEST	443	50345	185.89.211.84	192.168.2.4
Jul 5, 2024 07:56:33.181184053 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:33.181616068 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:33.181632042 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:33.182609081 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:33.182759047 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:33.183002949 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:33.183065891 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:33.183113098 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:33.228507042 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:33.237301111 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:33.237318039 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:33.291026115 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:33.296940088 CEST	443	50348	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:33.315857887 CEST	50348	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:33.315879107 CEST	443	50348	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:33.316919088 CEST	443	50348	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:33.317339897 CEST	50348	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:33.317786932 CEST	50348	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:33.317850113 CEST	443	50348	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:33.318243980 CEST	50348	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:33.330993891 CEST	50356	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:33.331029892 CEST	443	50356	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:33.335160971 CEST	50356	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:33.342003107 CEST	50356	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:33.342017889 CEST	443	50356	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:33.364507914 CEST	443	50348	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:33.365312099 CEST	50348	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:33.365323067 CEST	443	50348	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:33.372616053 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.372642994 CEST	443	50357	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.372895002 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.373003960 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.373017073 CEST	443	50357	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.413100958 CEST	50348	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:33.553934097 CEST	443	50348	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:33.554024935 CEST	443	50348	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:33.555279016 CEST	50348	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:33.555378914 CEST	50348	443	192.168.2.4	198.47.127.205
Jul 5, 2024 07:56:33.555392027 CEST	443	50348	198.47.127.205	192.168.2.4
Jul 5, 2024 07:56:33.565254927 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:33.565387011 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:33.565402985 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:33.565465927 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:33.565606117 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:33.566018105 CEST	443	50354	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:33.566242933 CEST	50354	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:33.566251993 CEST	443	50354	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:33.566508055 CEST	50347	443	192.168.2.4	157.240.252.35
Jul 5, 2024 07:56:33.566523075 CEST	443	50347	157.240.252.35	192.168.2.4
Jul 5, 2024 07:56:33.566600084 CEST	443	50354	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:33.569097042 CEST	50358	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:33.569133043 CEST	443	50358	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:33.569415092 CEST	50358	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:33.569415092 CEST	50354	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:33.569479942 CEST	443	50354	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:33.569679022 CEST	50354	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:33.569680929 CEST	50358	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:33.569698095 CEST	443	50358	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:33.587219954 CEST	443	50349	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:33.587416887 CEST	50349	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:33.587435961 CEST	443	50349	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:33.588288069 CEST	443	50349	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:33.588371992 CEST	50349	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:33.589277983 CEST	50349	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:33.589277983 CEST	50349	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:33.589294910 CEST	443	50349	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:33.589338064 CEST	443	50349	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:33.616498947 CEST	443	50354	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:33.639271021 CEST	50349	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:33.639282942 CEST	443	50349	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:33.687365055 CEST	50349	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:33.755273104 CEST	443	50349	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:33.755363941 CEST	443	50349	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:33.755497932 CEST	50349	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:33.755837917 CEST	50349	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:33.755853891 CEST	443	50349	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:33.770020962 CEST	50360	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:33.770045042 CEST	443	50360	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:33.770209074 CEST	50360	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:33.770361900 CEST	50360	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:33.770374060 CEST	443	50360	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:33.793401003 CEST	443	50350	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.793725967 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.793745995 CEST	443	50350	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.794331074 CEST	443	50353	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.794662952 CEST	443	50350	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.794949055 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.795300007 CEST	50353	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.795317888 CEST	443	50353	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.795535088 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.795598984 CEST	443	50350	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.795682907 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.796298981 CEST	443	50353	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.796407938 CEST	50353	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.796608925 CEST	50353	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.796689034 CEST	443	50353	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.796715975 CEST	50353	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.809600115 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:33.809611082 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:33.809669018 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:33.809883118 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:33.809894085 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:33.821388006 CEST	443	50352	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.821609020 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.821619034 CEST	443	50352	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.822509050 CEST	443	50352	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.822573900 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.822935104 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.822935104 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.822946072 CEST	443	50352	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.822985888 CEST	443	50352	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.823432922 CEST	443	50351	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.823599100 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.823616982 CEST	443	50351	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.824568987 CEST	443	50351	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.824646950 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.824950933 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.824950933 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.824965000 CEST	443	50351	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.825010061 CEST	443	50351	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.830905914 CEST	443	50354	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:33.830985069 CEST	443	50354	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:33.832406998 CEST	50354	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:33.832468987 CEST	50354	443	192.168.2.4	63.32.136.28
Jul 5, 2024 07:56:33.832485914 CEST	443	50354	63.32.136.28	192.168.2.4
Jul 5, 2024 07:56:33.836504936 CEST	443	50350	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.844501019 CEST	443	50353	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.847212076 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.847213984 CEST	50353	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.847219944 CEST	443	50353	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.847220898 CEST	443	50350	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.863240957 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.863249063 CEST	443	50352	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.879595041 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.879604101 CEST	443	50351	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.895304918 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.895307064 CEST	50353	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.911396980 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.927397966 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.972909927 CEST	443	50350	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.972965002 CEST	443	50350	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.973023891 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.973189116 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.973205090 CEST	443	50350	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.973213911 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.973246098 CEST	50350	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.975673914 CEST	443	50353	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.975730896 CEST	443	50353	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:33.975780964 CEST	50353	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.976197958 CEST	50353	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:33.976214886 CEST	443	50353	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.005162954 CEST	443	50352	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.005206108 CEST	443	50352	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.005397081 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.005407095 CEST	443	50352	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.005414963 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.005450964 CEST	50352	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.008040905 CEST	443	50351	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.008106947 CEST	443	50351	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.008210897 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.008285999 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.008301020 CEST	443	50351	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.008330107 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.008341074 CEST	50351	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.040247917 CEST	443	50356	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.040436029 CEST	50356	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.040452957 CEST	443	50356	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.041313887 CEST	443	50356	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.041373014 CEST	50356	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.042242050 CEST	50356	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.042295933 CEST	443	50356	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.042438984 CEST	50356	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.042445898 CEST	443	50356	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.042476892 CEST	50356	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.084517002 CEST	443	50356	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.085813046 CEST	50356	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.167138100 CEST	443	50356	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.169461966 CEST	443	50356	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.169523954 CEST	50356	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.182526112 CEST	50356	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.182538986 CEST	443	50356	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.219218969 CEST	443	50358	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:34.219424009 CEST	50358	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:34.219436884 CEST	443	50358	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:34.219717026 CEST	443	50358	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:34.220043898 CEST	50358	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:34.220101118 CEST	443	50358	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:34.220149040 CEST	50358	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:34.246016026 CEST	50362	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.246048927 CEST	443	50362	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.246121883 CEST	50362	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.246339083 CEST	50362	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.246356010 CEST	443	50362	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.256952047 CEST	443	50360	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:34.258119106 CEST	50360	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:34.258133888 CEST	443	50360	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:34.259177923 CEST	443	50360	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:34.259231091 CEST	50360	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:34.259531975 CEST	50360	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:34.259589911 CEST	443	50360	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:34.259852886 CEST	50360	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:34.259859085 CEST	443	50360	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:34.260503054 CEST	443	50358	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:34.267504930 CEST	443	50357	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.267786026 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.267796993 CEST	443	50357	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.268820047 CEST	443	50357	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.268889904 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.269143105 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.269198895 CEST	443	50357	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.269249916 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.269254923 CEST	443	50357	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.271708012 CEST	50358	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:34.303725004 CEST	50360	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:34.319714069 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.376856089 CEST	443	50360	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:34.376934052 CEST	443	50360	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:34.376982927 CEST	50360	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:34.377872944 CEST	50360	443	192.168.2.4	18.214.123.106
Jul 5, 2024 07:56:34.377890110 CEST	443	50360	18.214.123.106	192.168.2.4
Jul 5, 2024 07:56:34.500189066 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.500416040 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.500426054 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.501600981 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.501656055 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.502646923 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.502724886 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.502785921 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.502790928 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.502844095 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.502854109 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.502871037 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.502959013 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.502989054 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.503109932 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.503144979 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.503168106 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.503232956 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.503243923 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.503276110 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.503283978 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.572199106 CEST	443	50357	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.572266102 CEST	443	50357	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.572388887 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.572506905 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.572521925 CEST	443	50357	54.194.186.155	192.168.2.4
Jul 5, 2024 07:56:34.572530031 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.572562933 CEST	50357	443	192.168.2.4	54.194.186.155
Jul 5, 2024 07:56:34.610620975 CEST	443	50358	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:34.610685110 CEST	50358	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:34.610704899 CEST	443	50358	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:34.610783100 CEST	443	50358	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:34.610867023 CEST	50358	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:34.611761093 CEST	50358	443	192.168.2.4	157.240.253.35
Jul 5, 2024 07:56:34.611776114 CEST	443	50358	157.240.253.35	192.168.2.4
Jul 5, 2024 07:56:34.731583118 CEST	443	50362	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.731987000 CEST	50362	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.731996059 CEST	443	50362	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.733036995 CEST	443	50362	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.733139992 CEST	50362	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.733757019 CEST	50362	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.733814955 CEST	443	50362	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.734515905 CEST	50362	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.734522104 CEST	443	50362	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.781122923 CEST	50362	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.847780943 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.848037958 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.848082066 CEST	443	50361	52.4.178.162	192.168.2.4
Jul 5, 2024 07:56:34.848146915 CEST	50361	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:56:34.852452040 CEST	443	50362	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.852519035 CEST	443	50362	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.852585077 CEST	50362	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.853672981 CEST	50362	443	192.168.2.4	3.209.6.182
Jul 5, 2024 07:56:34.853679895 CEST	443	50362	3.209.6.182	192.168.2.4
Jul 5, 2024 07:56:34.864423037 CEST	50365	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:56:34.864443064 CEST	443	50365	44.214.131.22	192.168.2.4
Jul 5, 2024 07:56:34.864511967 CEST	50365	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:56:34.864726067 CEST	50365	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:56:34.864738941 CEST	443	50365	44.214.131.22	192.168.2.4
Jul 5, 2024 07:56:35.556693077 CEST	443	50365	44.214.131.22	192.168.2.4
Jul 5, 2024 07:56:35.559979916 CEST	50365	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:56:35.559995890 CEST	443	50365	44.214.131.22	192.168.2.4
Jul 5, 2024 07:56:35.561021090 CEST	443	50365	44.214.131.22	192.168.2.4
Jul 5, 2024 07:56:35.561170101 CEST	50365	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:56:35.563596010 CEST	50365	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:56:35.563656092 CEST	443	50365	44.214.131.22	192.168.2.4
Jul 5, 2024 07:56:35.566982031 CEST	50365	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:56:35.566991091 CEST	443	50365	44.214.131.22	192.168.2.4
Jul 5, 2024 07:56:35.577912092 CEST	443	50295	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:35.577986002 CEST	443	50295	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:35.578052998 CEST	50295	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:35.619981050 CEST	50365	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:56:35.676841021 CEST	443	50365	44.214.131.22	192.168.2.4
Jul 5, 2024 07:56:35.676924944 CEST	443	50365	44.214.131.22	192.168.2.4
Jul 5, 2024 07:56:35.676990032 CEST	50365	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:56:35.677671909 CEST	50365	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:56:35.677684069 CEST	443	50365	44.214.131.22	192.168.2.4
Jul 5, 2024 07:56:36.222508907 CEST	50295	443	192.168.2.4	13.107.246.42
Jul 5, 2024 07:56:36.222532988 CEST	443	50295	13.107.246.42	192.168.2.4
Jul 5, 2024 07:56:37.266026974 CEST	50372	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:37.270757914 CEST	53	50372	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:37.270813942 CEST	50372	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:37.271053076 CEST	50372	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:37.271080017 CEST	50372	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:37.275908947 CEST	53	50372	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:37.275921106 CEST	53	50372	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:37.372646093 CEST	50372	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:37.396431923 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:37.396506071 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:37.396585941 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:37.397021055 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:37.397046089 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:37.423329115 CEST	53	50372	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:37.648682117 CEST	53	50372	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:37.648741007 CEST	50372	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:38.139065027 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.139739990 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.139758110 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.140726089 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.140841961 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.143307924 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.143384933 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.143971920 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.143982887 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.185581923 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.801031113 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.811707020 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.811716080 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.811731100 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.811821938 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.811862946 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.811918974 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.811984062 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.895767927 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.895787001 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.895879984 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.895901918 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.896121025 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.900326967 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.900361061 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.900398970 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.900419950 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.900438070 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.902393103 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.902429104 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.902466059 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.902488947 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.902538061 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.981616974 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.981638908 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.981684923 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.981702089 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.981717110 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.981765985 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.985332012 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.985349894 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.985410929 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.985419989 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.985430002 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.985539913 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.987529039 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.987545013 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.987704992 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.987714052 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.987761974 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.993791103 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.993813992 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.993851900 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.993859053 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:38.993897915 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:38.993897915 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.072798014 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.072815895 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.072855949 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.072866917 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.072906017 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.072906017 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.073724031 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.073743105 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.073833942 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.073833942 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.073848963 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.073923111 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.074681997 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.074698925 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.074769974 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.074779034 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.074884892 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.075737000 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.075758934 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.075794935 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.075841904 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.075841904 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.075841904 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.075850964 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.075942039 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.077972889 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.077991009 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.078031063 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.078037977 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.078051090 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.078109980 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.079741001 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.079761028 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.079801083 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.079807043 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.079898119 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.079898119 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.081566095 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.081584930 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.081671000 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.081671000 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.081679106 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.081759930 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.161763906 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.161787033 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.161859989 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.161875010 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.161983967 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.162380934 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.162395954 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.162452936 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.162461042 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.162487030 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.162518024 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.163841963 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.163863897 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.163960934 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.163971901 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.164026976 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.164670944 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.164686918 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.164735079 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.164741993 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.164766073 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.164782047 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.165785074 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.165802002 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.165846109 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.165855885 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.165910006 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.165910006 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.167469978 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.167488098 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.167526007 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.167562962 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.167571068 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.167601109 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.167607069 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.167817116 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.186676025 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.234682083 CEST	50374	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.234697104 CEST	443	50374	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.741734028 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.741784096 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:39.741947889 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.742435932 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:39.742451906 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:40.244620085 CEST	49988	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:56:40.244633913 CEST	443	49988	152.199.21.175	192.168.2.4
Jul 5, 2024 07:56:40.506287098 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:40.506711006 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:40.506740093 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:40.507118940 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:40.507915020 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:40.507977962 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:40.508099079 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:40.547409058 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:40.547420979 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.191026926 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.201137066 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.201148033 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.201164961 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.201209068 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:41.201246977 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.201262951 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:41.201298952 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:41.289504051 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.289570093 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.289586067 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:41.289597988 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.289635897 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:41.289647102 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:41.294370890 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.294430017 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:41.296976089 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.297022104 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:41.297033072 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.297075033 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:41.297079086 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:41.297126055 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:41.297401905 CEST	50378	443	192.168.2.4	18.66.147.58
Jul 5, 2024 07:56:41.297418118 CEST	443	50378	18.66.147.58	192.168.2.4
Jul 5, 2024 07:56:55.078567028 CEST	443	49988	152.199.21.175	192.168.2.4
Jul 5, 2024 07:56:55.078661919 CEST	443	49988	152.199.21.175	192.168.2.4
Jul 5, 2024 07:56:55.078819990 CEST	49988	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:56:55.524008036 CEST	49988	443	192.168.2.4	152.199.21.175
Jul 5, 2024 07:56:55.524044991 CEST	443	49988	152.199.21.175	192.168.2.4
Jul 5, 2024 07:57:14.156953096 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.157018900 CEST	443	50405	52.4.178.162	192.168.2.4
Jul 5, 2024 07:57:14.157237053 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.157809973 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.157831907 CEST	443	50405	52.4.178.162	192.168.2.4
Jul 5, 2024 07:57:14.670010090 CEST	443	50405	52.4.178.162	192.168.2.4
Jul 5, 2024 07:57:14.670587063 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.670620918 CEST	443	50405	52.4.178.162	192.168.2.4
Jul 5, 2024 07:57:14.671549082 CEST	443	50405	52.4.178.162	192.168.2.4
Jul 5, 2024 07:57:14.671636105 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.672389984 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.672389984 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.672449112 CEST	443	50405	52.4.178.162	192.168.2.4
Jul 5, 2024 07:57:14.672493935 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.672506094 CEST	443	50405	52.4.178.162	192.168.2.4
Jul 5, 2024 07:57:14.719943047 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.719976902 CEST	443	50405	52.4.178.162	192.168.2.4
Jul 5, 2024 07:57:14.765908957 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.793680906 CEST	443	50405	52.4.178.162	192.168.2.4
Jul 5, 2024 07:57:14.793821096 CEST	443	50405	52.4.178.162	192.168.2.4
Jul 5, 2024 07:57:14.794301987 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.794337988 CEST	443	50405	52.4.178.162	192.168.2.4
Jul 5, 2024 07:57:14.794370890 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.794749022 CEST	50405	443	192.168.2.4	52.4.178.162
Jul 5, 2024 07:57:14.799228907 CEST	50406	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:57:14.799263954 CEST	443	50406	44.214.131.22	192.168.2.4
Jul 5, 2024 07:57:14.799390078 CEST	50406	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:57:14.799671888 CEST	50406	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:57:14.799689054 CEST	443	50406	44.214.131.22	192.168.2.4
Jul 5, 2024 07:57:15.287024021 CEST	443	50406	44.214.131.22	192.168.2.4
Jul 5, 2024 07:57:15.287499905 CEST	50406	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:57:15.287513971 CEST	443	50406	44.214.131.22	192.168.2.4
Jul 5, 2024 07:57:15.287825108 CEST	443	50406	44.214.131.22	192.168.2.4
Jul 5, 2024 07:57:15.288244963 CEST	50406	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:57:15.288296938 CEST	443	50406	44.214.131.22	192.168.2.4
Jul 5, 2024 07:57:15.288464069 CEST	50406	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:57:15.332499027 CEST	443	50406	44.214.131.22	192.168.2.4
Jul 5, 2024 07:57:15.486793995 CEST	443	50406	44.214.131.22	192.168.2.4
Jul 5, 2024 07:57:15.486877918 CEST	443	50406	44.214.131.22	192.168.2.4
Jul 5, 2024 07:57:15.486941099 CEST	50406	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:57:15.487663031 CEST	50406	443	192.168.2.4	44.214.131.22
Jul 5, 2024 07:57:15.487675905 CEST	443	50406	44.214.131.22	192.168.2.4
Jul 5, 2024 07:57:15.908432007 CEST	50407	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:57:15.908459902 CEST	443	50407	216.58.206.36	192.168.2.4
Jul 5, 2024 07:57:15.908591986 CEST	50407	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:57:15.908879995 CEST	50407	443	192.168.2.4	216.58.206.36
Jul 5, 2024 07:57:15.908890009 CEST	443	50407	216.58.206.36	192.168.2.4
Jul 5, 2024 07:57:16.556977034 CEST	443	50407	216.58.206.36	192.168.2.4
Jul 5, 2024 07:57:16.600737095 CEST	50407	443	192.168.2.4	216.58.206.36

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 5, 2024 07:55:11.243726015 CEST	53	61551	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:11.252464056 CEST	53	57122	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:12.262363911 CEST	53	54017	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:12.660108089 CEST	60643	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:12.660257101 CEST	60562	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:12.666773081 CEST	53	60643	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:12.667726994 CEST	53	60562	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:15.790364981 CEST	54524	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:15.793015003 CEST	54115	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:15.797173023 CEST	53	54524	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:15.799561977 CEST	53	54115	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:17.340749025 CEST	59296	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:17.341382027 CEST	59264	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:17.341880083 CEST	59983	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:17.342019081 CEST	62843	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:17.356937885 CEST	53988	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:17.357268095 CEST	53090	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:17.359812975 CEST	64221	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:17.360075951 CEST	56423	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:19.875390053 CEST	63089	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:19.875597000 CEST	64945	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:20.957909107 CEST	54541	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:20.958127975 CEST	55277	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:22.530510902 CEST	61993	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:22.530663967 CEST	57342	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:23.166225910 CEST	53	53162	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:24.209479094 CEST	138	138	192.168.2.4	192.168.2.255
Jul 5, 2024 07:55:26.742224932 CEST	59416	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:26.742559910 CEST	61839	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:26.750771999 CEST	57503	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:26.751216888 CEST	53	55321	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:26.751667976 CEST	53	50286	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:26.751959085 CEST	56158	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:26.759305000 CEST	53	57503	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:26.762795925 CEST	62961	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:26.763159037 CEST	55574	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:26.763715982 CEST	53	56158	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:26.770032883 CEST	53	57505	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:26.773140907 CEST	53	55574	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:26.774137974 CEST	53	62961	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:26.823651075 CEST	53	53961	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:26.824652910 CEST	53	57226	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:30.176310062 CEST	53	57364	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:32.013580084 CEST	55724	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:32.017437935 CEST	58097	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:32.019572020 CEST	50097	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:32.019737005 CEST	57999	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:32.020910025 CEST	53	55724	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:32.025311947 CEST	53	58097	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:35.809135914 CEST	55567	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:35.809751034 CEST	65297	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:40.681910038 CEST	56169	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:40.682068110 CEST	60117	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:55:49.592241049 CEST	53	59815	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:52.443202972 CEST	53	58805	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:52.443339109 CEST	53	52844	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:52.453268051 CEST	53	65497	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:52.959849119 CEST	53	61348	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:52.960027933 CEST	53	59068	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:53.000817060 CEST	53	59797	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:53.001702070 CEST	53	56505	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:53.202289104 CEST	53	55498	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:53.202831030 CEST	53	64731	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:53.212410927 CEST	53	57894	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:53.212759018 CEST	53	49788	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:53.224443913 CEST	53	51994	1.1.1.1	192.168.2.4
Jul 5, 2024 07:55:53.225020885 CEST	53	63247	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:04.695259094 CEST	53	62759	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:09.725193024 CEST	53	49847	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:09.725285053 CEST	53	64331	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:09.730006933 CEST	53711	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.730139017 CEST	51004	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.736574888 CEST	53	61912	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:09.737931967 CEST	58892	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.738058090 CEST	62813	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.747787952 CEST	63379	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.747916937 CEST	61158	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.748742104 CEST	63167	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.748862982 CEST	56363	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.751602888 CEST	53	51004	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:09.755141020 CEST	53	61158	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:09.758761883 CEST	59082	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.758991957 CEST	50509	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.770776033 CEST	62549	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.770889997 CEST	55635	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.776143074 CEST	55392	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.776266098 CEST	56749	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.778120995 CEST	53	55635	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:09.779099941 CEST	53	62549	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:09.783504963 CEST	53	55392	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:09.784281969 CEST	53	56749	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:09.785856009 CEST	54785	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.785974026 CEST	63539	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:09.799959898 CEST	53	60968	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:09.800446987 CEST	53	51683	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:10.792036057 CEST	53	50519	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:12.062092066 CEST	53	56000	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:23.361838102 CEST	54484	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:23.362111092 CEST	51940	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:23.369383097 CEST	53	54484	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:23.370431900 CEST	53	51940	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:23.545739889 CEST	53	55417	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:23.555600882 CEST	52105	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:23.555752039 CEST	60423	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:23.562583923 CEST	53	60423	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:23.563230038 CEST	53	52105	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:23.865118027 CEST	53	54651	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:24.490621090 CEST	49439	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.490776062 CEST	59682	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.495456934 CEST	60591	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.495697975 CEST	56215	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.498738050 CEST	53	59682	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:24.504585028 CEST	61612	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.504703045 CEST	51340	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.505198956 CEST	53	60591	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:24.505213022 CEST	53	56215	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:24.512701988 CEST	53	51340	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:24.512962103 CEST	53	61612	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:24.518167019 CEST	65333	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.518275976 CEST	57787	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.523531914 CEST	55843	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.523677111 CEST	60891	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.526137114 CEST	53	65333	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:24.531261921 CEST	53	57787	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:24.532598019 CEST	53	55843	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:24.533010960 CEST	53	60891	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:24.790841103 CEST	57837	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.790971041 CEST	63853	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:24.799901009 CEST	53	63853	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:25.391607046 CEST	50885	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.391937017 CEST	59846	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.477576017 CEST	64958	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.477746010 CEST	63634	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.484353065 CEST	53	63634	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:25.502125025 CEST	61971	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.502351999 CEST	55669	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.509696007 CEST	53	61971	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:25.510765076 CEST	53	55669	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:25.587905884 CEST	57710	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.588052034 CEST	58735	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.594803095 CEST	53	57710	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:25.594906092 CEST	53	58735	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:25.699038029 CEST	62504	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.699204922 CEST	49281	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.705832005 CEST	53	49281	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:25.705883980 CEST	53	62504	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:25.809748888 CEST	54102	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.810116053 CEST	64109	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.818502903 CEST	53	64109	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:25.919704914 CEST	56924	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:25.919704914 CEST	57069	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.030653000 CEST	56232	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.030819893 CEST	50262	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.037798882 CEST	53	56232	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.038172960 CEST	53	50262	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.060703039 CEST	60569	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.060863972 CEST	62770	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.067375898 CEST	53	62770	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.183527946 CEST	62705	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.183900118 CEST	50957	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.190440893 CEST	53	50957	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.190458059 CEST	53	62705	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.270771980 CEST	51363	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.271080017 CEST	62697	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.277461052 CEST	53	51363	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.277684927 CEST	53	62697	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.384684086 CEST	53182	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.384880066 CEST	61640	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.391700983 CEST	53	53182	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.391925097 CEST	53	61640	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.496254921 CEST	54229	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.496539116 CEST	49995	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.505666971 CEST	53	49995	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.506714106 CEST	52688	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.506715059 CEST	65035	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.645729065 CEST	60233	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.646300077 CEST	51101	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.652946949 CEST	53	60233	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.653187037 CEST	53	51101	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.778987885 CEST	58160	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.779103041 CEST	64247	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:26.785758972 CEST	53	58160	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:26.787184000 CEST	53	64247	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:27.381953001 CEST	55033	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.382091999 CEST	54044	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.390156031 CEST	53	55033	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:27.390249968 CEST	53	54044	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:27.561208963 CEST	55636	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.561328888 CEST	60035	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.648019075 CEST	64394	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.648220062 CEST	53776	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.654907942 CEST	53	53776	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:27.856743097 CEST	55908	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.856849909 CEST	61859	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.857072115 CEST	61266	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.857172012 CEST	51996	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.857876062 CEST	60560	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.857990026 CEST	49870	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:27.863384008 CEST	53	55908	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:27.863914013 CEST	53	61266	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:27.864458084 CEST	53	61859	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:27.865083933 CEST	53	51996	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.118145943 CEST	50386	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.118145943 CEST	60131	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.130245924 CEST	53	60131	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.211503983 CEST	56875	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.211503983 CEST	52973	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.327379942 CEST	60011	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.327544928 CEST	51973	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.334317923 CEST	53	51973	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.335020065 CEST	53	60011	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.383765936 CEST	62340	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.384000063 CEST	61109	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.390506029 CEST	53	61109	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.391793013 CEST	53	62340	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.394397020 CEST	64189	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.394599915 CEST	57442	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.401865005 CEST	53	64189	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.402307987 CEST	53	57442	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.495954037 CEST	62129	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.496536970 CEST	63553	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.549148083 CEST	57068	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.549245119 CEST	50913	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.556478977 CEST	53	57068	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.556632042 CEST	53	50913	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.776051044 CEST	57507	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.776051044 CEST	51069	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.783009052 CEST	53	51069	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.783582926 CEST	53	57507	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.834315062 CEST	50477	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.834315062 CEST	50122	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.854917049 CEST	53	50477	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.854932070 CEST	53	50122	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:28.946392059 CEST	56317	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.946540117 CEST	56543	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:28.954204082 CEST	53	56543	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:29.071788073 CEST	52144	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:29.071908951 CEST	63911	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:29.206621885 CEST	53698	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:29.206753016 CEST	64660	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:29.213681936 CEST	53	53698	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:29.213766098 CEST	53	64660	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:29.217179060 CEST	54388	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:29.217320919 CEST	63177	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:29.224752903 CEST	53	63177	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:29.471734047 CEST	49296	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:29.471852064 CEST	55282	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:29.479192972 CEST	53	55282	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:30.285664082 CEST	52051	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:30.286052942 CEST	53195	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:30.366631031 CEST	56503	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:30.366801023 CEST	59993	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:30.738616943 CEST	57551	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:30.738791943 CEST	64658	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:30.745381117 CEST	53	64658	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:30.798507929 CEST	58489	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:30.798636913 CEST	63891	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:30.805553913 CEST	53	58489	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:30.805607080 CEST	53	63891	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:30.909070969 CEST	62935	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:30.909393072 CEST	49558	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:30.915852070 CEST	53	62935	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:30.917516947 CEST	53	49558	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.069716930 CEST	58159	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.069884062 CEST	52981	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.076452971 CEST	53	52981	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.076474905 CEST	53	58159	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.081329107 CEST	59184	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.081505060 CEST	64811	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.082122087 CEST	58339	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.082324982 CEST	58077	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.090575933 CEST	53	58077	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.299779892 CEST	62247	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.299922943 CEST	57958	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.306473970 CEST	53	62247	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.306670904 CEST	53	57958	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.511367083 CEST	54102	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.511518002 CEST	57924	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.518007040 CEST	53	54102	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.518738031 CEST	53	57924	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.646172047 CEST	61336	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.646446943 CEST	49915	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.657092094 CEST	53	61336	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.657205105 CEST	53	49915	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.704473019 CEST	53651	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.704627037 CEST	63476	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.711500883 CEST	53	53651	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.711513996 CEST	53	63476	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:31.948976994 CEST	52509	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.949132919 CEST	64350	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:31.956119061 CEST	53	64350	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.083494902 CEST	60885	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.083642006 CEST	50972	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.091207027 CEST	53	50972	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.091727972 CEST	53	60885	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.091785908 CEST	54567	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.092041969 CEST	51476	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.098845959 CEST	53	54567	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.099402905 CEST	53	51476	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.099941015 CEST	57867	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.109081984 CEST	53	57867	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.124470949 CEST	65207	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.124902010 CEST	62991	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.132188082 CEST	53	62991	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.502955914 CEST	49432	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.503177881 CEST	49413	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.509701967 CEST	53	49432	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.510176897 CEST	53	49413	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.515305996 CEST	55099	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.515474081 CEST	51728	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.521959066 CEST	53	51728	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.522275925 CEST	53	55099	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.621114969 CEST	60853	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.621469021 CEST	61657	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.638508081 CEST	53	60853	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.638942957 CEST	53	61657	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.872059107 CEST	63181	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.872287035 CEST	57124	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.876590014 CEST	56975	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.876982927 CEST	63720	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:32.879766941 CEST	53	63181	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.880539894 CEST	53	57124	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.884061098 CEST	53	56975	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:32.887178898 CEST	53	63720	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:33.315588951 CEST	50250	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:33.315588951 CEST	55847	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:33.322907925 CEST	53	55847	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:33.325088978 CEST	53	50250	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:33.578828096 CEST	58622	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:33.578828096 CEST	49393	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:33.585967064 CEST	53	49393	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:33.759577990 CEST	51016	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:33.759577990 CEST	59393	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:33.767112017 CEST	53	59393	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:33.769608021 CEST	53	51016	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:33.801162958 CEST	58871	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:33.801440001 CEST	51543	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:33.809014082 CEST	53	51543	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:33.809190035 CEST	53	58871	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:34.238007069 CEST	63437	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:34.238249063 CEST	55966	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:34.245009899 CEST	53	55966	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:34.245491982 CEST	53	63437	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:34.851954937 CEST	56250	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:34.852258921 CEST	51150	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:34.860105991 CEST	53	56250	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:34.863991976 CEST	53	51150	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:37.242706060 CEST	54453	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:37.243664980 CEST	63224	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:37.253516912 CEST	53	63224	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:37.258017063 CEST	55882	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:37.258794069 CEST	51785	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:37.264525890 CEST	53	55882	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:37.282212019 CEST	53	51785	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:37.374224901 CEST	57892	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:37.385380030 CEST	53	57892	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:38.917411089 CEST	53	55948	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:44.059990883 CEST	58432	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:44.059990883 CEST	58121	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:44.069116116 CEST	53	58121	1.1.1.1	192.168.2.4
Jul 5, 2024 07:56:51.107717991 CEST	60859	53	192.168.2.4	1.1.1.1
Jul 5, 2024 07:56:51.120793104 CEST	53	60859	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 5, 2024 07:55:32.113029003 CEST	192.168.2.4	1.1.1.1	c2c0	(Port unreachable)	Destination Unreachable
Jul 5, 2024 07:56:09.751657963 CEST	192.168.2.4	1.1.1.1	c269	(Port unreachable)	Destination Unreachable
Jul 5, 2024 07:56:20.122936010 CEST	192.168.2.4	1.1.1.1	c25f	(Port unreachable)	Destination Unreachable
Jul 5, 2024 07:56:25.437925100 CEST	192.168.2.4	1.1.1.1	c27f	(Port unreachable)	Destination Unreachable
Jul 5, 2024 07:56:26.535095930 CEST	192.168.2.4	1.1.1.1	c2a3	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 5, 2024 07:55:12.660108089 CEST	192.168.2.4	1.1.1.1	0xd074	Standard query (0)	aka.ms	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:12.660257101 CEST	192.168.2.4	1.1.1.1	0x1d9a	Standard query (0)	aka.ms	65	IN (0x0001)	false
Jul 5, 2024 07:55:15.790364981 CEST	192.168.2.4	1.1.1.1	0xea45	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:15.793015003 CEST	192.168.2.4	1.1.1.1	0x9268	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 5, 2024 07:55:17.340749025 CEST	192.168.2.4	1.1.1.1	0xfe4e	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:17.341382027 CEST	192.168.2.4	1.1.1.1	0xab4f	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Jul 5, 2024 07:55:17.341880083 CEST	192.168.2.4	1.1.1.1	0x366a	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:17.342019081 CEST	192.168.2.4	1.1.1.1	0x5765	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Jul 5, 2024 07:55:17.356937885 CEST	192.168.2.4	1.1.1.1	0x87b4	Standard query (0)	mem.gfx.ms	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:17.357268095 CEST	192.168.2.4	1.1.1.1	0xfa10	Standard query (0)	mem.gfx.ms	65	IN (0x0001)	false
Jul 5, 2024 07:55:17.359812975 CEST	192.168.2.4	1.1.1.1	0xc603	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:17.360075951 CEST	192.168.2.4	1.1.1.1	0x230c	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jul 5, 2024 07:55:19.875390053 CEST	192.168.2.4	1.1.1.1	0xdbc0	Standard query (0)	support.content.office.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:19.875597000 CEST	192.168.2.4	1.1.1.1	0xc052	Standard query (0)	support.content.office.net	65	IN (0x0001)	false
Jul 5, 2024 07:55:20.957909107 CEST	192.168.2.4	1.1.1.1	0xa09b	Standard query (0)	support.content.office.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:20.958127975 CEST	192.168.2.4	1.1.1.1	0xbf45	Standard query (0)	support.content.office.net	65	IN (0x0001)	false
Jul 5, 2024 07:55:22.530510902 CEST	192.168.2.4	1.1.1.1	0x797f	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:22.530663967 CEST	192.168.2.4	1.1.1.1	0x4da5	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jul 5, 2024 07:55:26.742224932 CEST	192.168.2.4	1.1.1.1	0xabc2	Standard query (0)	assets.onestore.ms	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:26.742559910 CEST	192.168.2.4	1.1.1.1	0x6d1c	Standard query (0)	assets.onestore.ms	65	IN (0x0001)	false
Jul 5, 2024 07:55:26.750771999 CEST	192.168.2.4	1.1.1.1	0xbbad	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:26.751959085 CEST	192.168.2.4	1.1.1.1	0xed9	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jul 5, 2024 07:55:26.762795925 CEST	192.168.2.4	1.1.1.1	0xb527	Standard query (0)	microsoftwindows.112.2o7.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:26.763159037 CEST	192.168.2.4	1.1.1.1	0x1d	Standard query (0)	microsoftwindows.112.2o7.net	65	IN (0x0001)	false
Jul 5, 2024 07:55:32.013580084 CEST	192.168.2.4	1.1.1.1	0xb42a	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:32.017437935 CEST	192.168.2.4	1.1.1.1	0xc849	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Jul 5, 2024 07:55:32.019572020 CEST	192.168.2.4	1.1.1.1	0xa07a	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:32.019737005 CEST	192.168.2.4	1.1.1.1	0x1dfd	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Jul 5, 2024 07:55:35.809135914 CEST	192.168.2.4	1.1.1.1	0x99e	Standard query (0)	amp.azure.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:35.809751034 CEST	192.168.2.4	1.1.1.1	0x9016	Standard query (0)	amp.azure.net	65	IN (0x0001)	false
Jul 5, 2024 07:55:40.681910038 CEST	192.168.2.4	1.1.1.1	0x6d8f	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:40.682068110 CEST	192.168.2.4	1.1.1.1	0xaf39	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:09.730006933 CEST	192.168.2.4	1.1.1.1	0xdca9	Standard query (0)	lptag.liveperson.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.730139017 CEST	192.168.2.4	1.1.1.1	0xfb48	Standard query (0)	lptag.liveperson.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:09.737931967 CEST	192.168.2.4	1.1.1.1	0xab88	Standard query (0)	lpcdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.738058090 CEST	192.168.2.4	1.1.1.1	0x5295	Standard query (0)	lpcdn.lpsnmedia.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:09.747787952 CEST	192.168.2.4	1.1.1.1	0x4426	Standard query (0)	accdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.747916937 CEST	192.168.2.4	1.1.1.1	0xdabe	Standard query (0)	accdn.lpsnmedia.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:09.748742104 CEST	192.168.2.4	1.1.1.1	0xadec	Standard query (0)	publisher.liveperson.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.748862982 CEST	192.168.2.4	1.1.1.1	0xbff9	Standard query (0)	publisher.liveperson.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:09.758761883 CEST	192.168.2.4	1.1.1.1	0x22c5	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.758991957 CEST	192.168.2.4	1.1.1.1	0x54d4	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Jul 5, 2024 07:56:09.770776033 CEST	192.168.2.4	1.1.1.1	0x8200	Standard query (0)	d.impactradius-event.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.770889997 CEST	192.168.2.4	1.1.1.1	0x1763	Standard query (0)	d.impactradius-event.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:09.776143074 CEST	192.168.2.4	1.1.1.1	0x2acd	Standard query (0)	cdnssl.clicktale.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.776266098 CEST	192.168.2.4	1.1.1.1	0x691a	Standard query (0)	cdnssl.clicktale.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:09.785856009 CEST	192.168.2.4	1.1.1.1	0x1b16	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.785974026 CEST	192.168.2.4	1.1.1.1	0xab8d	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:23.361838102 CEST	192.168.2.4	1.1.1.1	0x6163	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:23.362111092 CEST	192.168.2.4	1.1.1.1	0x4c56	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:23.555600882 CEST	192.168.2.4	1.1.1.1	0x40b1	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:23.555752039 CEST	192.168.2.4	1.1.1.1	0xbf01	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:24.490621090 CEST	192.168.2.4	1.1.1.1	0x9cd7	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.490776062 CEST	192.168.2.4	1.1.1.1	0xa0ec	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:24.495456934 CEST	192.168.2.4	1.1.1.1	0x2fd2	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.495697975 CEST	192.168.2.4	1.1.1.1	0x5779	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:24.504585028 CEST	192.168.2.4	1.1.1.1	0x948f	Standard query (0)	mscom.demdex.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.504703045 CEST	192.168.2.4	1.1.1.1	0x5b0	Standard query (0)	mscom.demdex.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:24.518167019 CEST	192.168.2.4	1.1.1.1	0xd147	Standard query (0)	msftenterprise.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.518275976 CEST	192.168.2.4	1.1.1.1	0xfa8c	Standard query (0)	msftenterprise.sc.omtrdc.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:24.523531914 CEST	192.168.2.4	1.1.1.1	0x6cb9	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.523677111 CEST	192.168.2.4	1.1.1.1	0x6b7	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:24.790841103 CEST	192.168.2.4	1.1.1.1	0xc52b	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.790971041 CEST	192.168.2.4	1.1.1.1	0x258f	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:25.391607046 CEST	192.168.2.4	1.1.1.1	0xf19d	Standard query (0)	ats.everesttech.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.391937017 CEST	192.168.2.4	1.1.1.1	0x447	Standard query (0)	ats.everesttech.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:25.477576017 CEST	192.168.2.4	1.1.1.1	0xc1a3	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.477746010 CEST	192.168.2.4	1.1.1.1	0x172b	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:25.502125025 CEST	192.168.2.4	1.1.1.1	0x53e	Standard query (0)	msftenterprise.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.502351999 CEST	192.168.2.4	1.1.1.1	0x4e0a	Standard query (0)	msftenterprise.sc.omtrdc.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:25.587905884 CEST	192.168.2.4	1.1.1.1	0x75b5	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.588052034 CEST	192.168.2.4	1.1.1.1	0xccc4	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:25.699038029 CEST	192.168.2.4	1.1.1.1	0xbb2e	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.699204922 CEST	192.168.2.4	1.1.1.1	0xef09	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:25.809748888 CEST	192.168.2.4	1.1.1.1	0x6f81	Standard query (0)	rtd.tubemogul.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.810116053 CEST	192.168.2.4	1.1.1.1	0xf6dd	Standard query (0)	rtd.tubemogul.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:25.919704914 CEST	192.168.2.4	1.1.1.1	0x962c	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:25.919704914 CEST	192.168.2.4	1.1.1.1	0x49fd	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.030653000 CEST	192.168.2.4	1.1.1.1	0xbf43	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.030819893 CEST	192.168.2.4	1.1.1.1	0xe1d1	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:26.060703039 CEST	192.168.2.4	1.1.1.1	0x7a16	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.060863972 CEST	192.168.2.4	1.1.1.1	0x34ae	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:26.183527946 CEST	192.168.2.4	1.1.1.1	0x27d8	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.183900118 CEST	192.168.2.4	1.1.1.1	0x69e	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jul 5, 2024 07:56:26.270771980 CEST	192.168.2.4	1.1.1.1	0x9ae4	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.271080017 CEST	192.168.2.4	1.1.1.1	0x13cd	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:26.384684086 CEST	192.168.2.4	1.1.1.1	0xfcf7	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.384880066 CEST	192.168.2.4	1.1.1.1	0x2d22	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:26.496254921 CEST	192.168.2.4	1.1.1.1	0x3ed9	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.496539116 CEST	192.168.2.4	1.1.1.1	0xe401	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:26.506714106 CEST	192.168.2.4	1.1.1.1	0xe1f0	Standard query (0)	ats.everesttech.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:26.506715059 CEST	192.168.2.4	1.1.1.1	0x4114	Standard query (0)	ats.everesttech.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.645729065 CEST	192.168.2.4	1.1.1.1	0x7007	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.646300077 CEST	192.168.2.4	1.1.1.1	0x831d	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:26.778987885 CEST	192.168.2.4	1.1.1.1	0x1288	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.779103041 CEST	192.168.2.4	1.1.1.1	0x56f6	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:27.381953001 CEST	192.168.2.4	1.1.1.1	0x3bd0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:27.382091999 CEST	192.168.2.4	1.1.1.1	0xdf27	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:27.561208963 CEST	192.168.2.4	1.1.1.1	0x11db	Standard query (0)	servedby.flashtalking.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:27.561328888 CEST	192.168.2.4	1.1.1.1	0x2d02	Standard query (0)	servedby.flashtalking.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:27.648019075 CEST	192.168.2.4	1.1.1.1	0x22ec	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:27.648220062 CEST	192.168.2.4	1.1.1.1	0x3ac5	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:27.856743097 CEST	192.168.2.4	1.1.1.1	0x6f4f	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:27.856849909 CEST	192.168.2.4	1.1.1.1	0xc0e7	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:27.857072115 CEST	192.168.2.4	1.1.1.1	0xe173	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:27.857172012 CEST	192.168.2.4	1.1.1.1	0x25da	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:27.857876062 CEST	192.168.2.4	1.1.1.1	0x62e1	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:27.857990026 CEST	192.168.2.4	1.1.1.1	0xb142	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:28.118145943 CEST	192.168.2.4	1.1.1.1	0x7aec	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.118145943 CEST	192.168.2.4	1.1.1.1	0xe67e	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:28.211503983 CEST	192.168.2.4	1.1.1.1	0x3b90	Standard query (0)	ds.reson8.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.211503983 CEST	192.168.2.4	1.1.1.1	0xc651	Standard query (0)	ds.reson8.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:28.327379942 CEST	192.168.2.4	1.1.1.1	0xb86a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.327544928 CEST	192.168.2.4	1.1.1.1	0x9d53	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:28.383765936 CEST	192.168.2.4	1.1.1.1	0x6de8	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.384000063 CEST	192.168.2.4	1.1.1.1	0x6611	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:28.394397020 CEST	192.168.2.4	1.1.1.1	0x10a1	Standard query (0)	dmpsync.3lift.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.394599915 CEST	192.168.2.4	1.1.1.1	0x8039	Standard query (0)	dmpsync.3lift.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:28.495954037 CEST	192.168.2.4	1.1.1.1	0x57e3	Standard query (0)	ag.innovid.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.496536970 CEST	192.168.2.4	1.1.1.1	0xf85d	Standard query (0)	ag.innovid.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:28.549148083 CEST	192.168.2.4	1.1.1.1	0x41cf	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.549245119 CEST	192.168.2.4	1.1.1.1	0x3b1f	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:28.776051044 CEST	192.168.2.4	1.1.1.1	0xfb99	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:28.776051044 CEST	192.168.2.4	1.1.1.1	0x1c56	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.834315062 CEST	192.168.2.4	1.1.1.1	0x24e	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.834315062 CEST	192.168.2.4	1.1.1.1	0x193e	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:28.946392059 CEST	192.168.2.4	1.1.1.1	0x3353	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.946540117 CEST	192.168.2.4	1.1.1.1	0x85eb	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false
Jul 5, 2024 07:56:29.071788073 CEST	192.168.2.4	1.1.1.1	0x8a43	Standard query (0)	publisher.liveperson.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.071908951 CEST	192.168.2.4	1.1.1.1	0xc45d	Standard query (0)	publisher.liveperson.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:29.206621885 CEST	192.168.2.4	1.1.1.1	0x54bb	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.206753016 CEST	192.168.2.4	1.1.1.1	0xafb5	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:29.217179060 CEST	192.168.2.4	1.1.1.1	0x7436	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.217320919 CEST	192.168.2.4	1.1.1.1	0xe4ba	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:29.471734047 CEST	192.168.2.4	1.1.1.1	0xc010	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.471852064 CEST	192.168.2.4	1.1.1.1	0x7d1a	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:30.285664082 CEST	192.168.2.4	1.1.1.1	0x8faa	Standard query (0)	lpcdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.286052942 CEST	192.168.2.4	1.1.1.1	0xda9f	Standard query (0)	lpcdn.lpsnmedia.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:30.366631031 CEST	192.168.2.4	1.1.1.1	0x8724	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.366801023 CEST	192.168.2.4	1.1.1.1	0x40c3	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:30.738616943 CEST	192.168.2.4	1.1.1.1	0xaf99	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.738791943 CEST	192.168.2.4	1.1.1.1	0x24d1	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:30.798507929 CEST	192.168.2.4	1.1.1.1	0x1ea8	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.798636913 CEST	192.168.2.4	1.1.1.1	0x4306	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:30.909070969 CEST	192.168.2.4	1.1.1.1	0x1e33	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.909393072 CEST	192.168.2.4	1.1.1.1	0x5b9f	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:31.069716930 CEST	192.168.2.4	1.1.1.1	0x37f4	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.069884062 CEST	192.168.2.4	1.1.1.1	0x5373	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:31.081329107 CEST	192.168.2.4	1.1.1.1	0x592a	Standard query (0)	lpcdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.081505060 CEST	192.168.2.4	1.1.1.1	0x3335	Standard query (0)	lpcdn.lpsnmedia.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:31.082122087 CEST	192.168.2.4	1.1.1.1	0xfc91	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.082324982 CEST	192.168.2.4	1.1.1.1	0x8d6c	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:31.299779892 CEST	192.168.2.4	1.1.1.1	0xcc85	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.299922943 CEST	192.168.2.4	1.1.1.1	0xe5aa	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:31.511367083 CEST	192.168.2.4	1.1.1.1	0x1c88	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.511518002 CEST	192.168.2.4	1.1.1.1	0xa3bb	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:31.646172047 CEST	192.168.2.4	1.1.1.1	0x366f	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.646446943 CEST	192.168.2.4	1.1.1.1	0xdcc3	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:31.704473019 CEST	192.168.2.4	1.1.1.1	0x2b13	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.704627037 CEST	192.168.2.4	1.1.1.1	0xade1	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:31.948976994 CEST	192.168.2.4	1.1.1.1	0x8138	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.949132919 CEST	192.168.2.4	1.1.1.1	0x879f	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:32.083494902 CEST	192.168.2.4	1.1.1.1	0x9f1b	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.083642006 CEST	192.168.2.4	1.1.1.1	0x73c0	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:32.091785908 CEST	192.168.2.4	1.1.1.1	0xe7be	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.092041969 CEST	192.168.2.4	1.1.1.1	0x524a	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:32.099941015 CEST	192.168.2.4	1.1.1.1	0xb7bc	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.124470949 CEST	192.168.2.4	1.1.1.1	0xf0a9	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.124902010 CEST	192.168.2.4	1.1.1.1	0x83b3	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:32.502955914 CEST	192.168.2.4	1.1.1.1	0x49cb	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.503177881 CEST	192.168.2.4	1.1.1.1	0x2b8a	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:32.515305996 CEST	192.168.2.4	1.1.1.1	0xeb7d	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.515474081 CEST	192.168.2.4	1.1.1.1	0x35ea	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:32.621114969 CEST	192.168.2.4	1.1.1.1	0x870f	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.621469021 CEST	192.168.2.4	1.1.1.1	0x47d4	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:32.872059107 CEST	192.168.2.4	1.1.1.1	0x8fd4	Standard query (0)	q-aus1.clicktale.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.872287035 CEST	192.168.2.4	1.1.1.1	0x918a	Standard query (0)	q-aus1.clicktale.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:32.876590014 CEST	192.168.2.4	1.1.1.1	0xd7a2	Standard query (0)	c.clicktale.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.876982927 CEST	192.168.2.4	1.1.1.1	0x6fac	Standard query (0)	c.clicktale.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:33.315588951 CEST	192.168.2.4	1.1.1.1	0xf704	Standard query (0)	srm.bf.contentsquare.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:33.315588951 CEST	192.168.2.4	1.1.1.1	0x6686	Standard query (0)	srm.bf.contentsquare.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:33.578828096 CEST	192.168.2.4	1.1.1.1	0xd20b	Standard query (0)	lptag.liveperson.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:33.578828096 CEST	192.168.2.4	1.1.1.1	0x1a77	Standard query (0)	lptag.liveperson.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:33.759577990 CEST	192.168.2.4	1.1.1.1	0x65c8	Standard query (0)	q-aus1.clicktale.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:33.759577990 CEST	192.168.2.4	1.1.1.1	0x9af6	Standard query (0)	q-aus1.clicktale.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:33.801162958 CEST	192.168.2.4	1.1.1.1	0x2a9	Standard query (0)	k-aus1.clicktale.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:33.801440001 CEST	192.168.2.4	1.1.1.1	0xed6e	Standard query (0)	k-aus1.clicktale.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:34.238007069 CEST	192.168.2.4	1.1.1.1	0x4cb7	Standard query (0)	srm.bf.contentsquare.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:34.238249063 CEST	192.168.2.4	1.1.1.1	0x8a4b	Standard query (0)	srm.bf.contentsquare.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:34.851954937 CEST	192.168.2.4	1.1.1.1	0xb026	Standard query (0)	k-aus1.clicktale.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:34.852258921 CEST	192.168.2.4	1.1.1.1	0x7ba	Standard query (0)	k-aus1.clicktale.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:37.242706060 CEST	192.168.2.4	1.1.1.1	0xe994	Standard query (0)	accdn.lpsnmedia.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:37.243664980 CEST	192.168.2.4	1.1.1.1	0xba88	Standard query (0)	accdn.lpsnmedia.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:37.258017063 CEST	192.168.2.4	1.1.1.1	0x5ced	Standard query (0)	static-assets.fs.liveperson.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:37.258794069 CEST	192.168.2.4	1.1.1.1	0xf346	Standard query (0)	static-assets.fs.liveperson.com	65	IN (0x0001)	false
Jul 5, 2024 07:56:37.374224901 CEST	192.168.2.4	1.1.1.1	0x9497	Standard query (0)	static-assets.fs.liveperson.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:44.059990883 CEST	192.168.2.4	1.1.1.1	0x359e	Standard query (0)	va.v.liveperson.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:44.059990883 CEST	192.168.2.4	1.1.1.1	0xc3ab	Standard query (0)	va.v.liveperson.net	65	IN (0x0001)	false
Jul 5, 2024 07:56:51.107717991 CEST	192.168.2.4	1.1.1.1	0x5c6	Standard query (0)	static-assets.fs.liveperson.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 5, 2024 07:55:12.666773081 CEST	1.1.1.1	192.168.2.4	0xd074	No error (0)	aka.ms		23.214.40.215	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:15.797173023 CEST	1.1.1.1	192.168.2.4	0xea45	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:15.799561977 CEST	1.1.1.1	192.168.2.4	0x9268	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 5, 2024 07:55:17.347987890 CEST	1.1.1.1	192.168.2.4	0xab4f	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:17.348346949 CEST	1.1.1.1	192.168.2.4	0xfe4e	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:17.348457098 CEST	1.1.1.1	192.168.2.4	0x366a	No error (0)	js.monitor.azure.com	aijscdn2.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:17.348457098 CEST	1.1.1.1	192.168.2.4	0x366a	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:17.348457098 CEST	1.1.1.1	192.168.2.4	0x366a	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:17.349706888 CEST	1.1.1.1	192.168.2.4	0x5765	No error (0)	js.monitor.azure.com	aijscdn2.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:17.364196062 CEST	1.1.1.1	192.168.2.4	0x87b4	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:17.364196062 CEST	1.1.1.1	192.168.2.4	0x87b4	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:17.364196062 CEST	1.1.1.1	192.168.2.4	0x87b4	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:17.365966082 CEST	1.1.1.1	192.168.2.4	0xfa10	No error (0)	mem.gfx.ms	amcdnmsftuswe.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:17.366602898 CEST	1.1.1.1	192.168.2.4	0x230c	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:17.368241072 CEST	1.1.1.1	192.168.2.4	0xc603	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:19.883430004 CEST	1.1.1.1	192.168.2.4	0xc052	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:19.883548975 CEST	1.1.1.1	192.168.2.4	0xdbc0	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:20.965821981 CEST	1.1.1.1	192.168.2.4	0xbf45	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:20.965867043 CEST	1.1.1.1	192.168.2.4	0xa09b	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:22.537230968 CEST	1.1.1.1	192.168.2.4	0x797f	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:22.537693024 CEST	1.1.1.1	192.168.2.4	0x4da5	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:23.911096096 CEST	1.1.1.1	192.168.2.4	0xcd74	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:23.911096096 CEST	1.1.1.1	192.168.2.4	0xcd74	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:26.749769926 CEST	1.1.1.1	192.168.2.4	0x6d1c	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:26.750111103 CEST	1.1.1.1	192.168.2.4	0xabc2	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:26.759305000 CEST	1.1.1.1	192.168.2.4	0xbbad	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:26.759305000 CEST	1.1.1.1	192.168.2.4	0xbbad	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:26.759305000 CEST	1.1.1.1	192.168.2.4	0xbbad	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:26.763715982 CEST	1.1.1.1	192.168.2.4	0xed9	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:26.763715982 CEST	1.1.1.1	192.168.2.4	0xed9	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:26.774137974 CEST	1.1.1.1	192.168.2.4	0xb527	No error (0)	microsoftwindows.112.2o7.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:26.774137974 CEST	1.1.1.1	192.168.2.4	0xb527	No error (0)	microsoftwindows.112.2o7.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:26.774137974 CEST	1.1.1.1	192.168.2.4	0xb527	No error (0)	microsoftwindows.112.2o7.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:31.393184900 CEST	1.1.1.1	192.168.2.4	0xce1f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:31.393184900 CEST	1.1.1.1	192.168.2.4	0xce1f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:32.020910025 CEST	1.1.1.1	192.168.2.4	0xb42a	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.020910025 CEST	1.1.1.1	192.168.2.4	0xb42a	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.020910025 CEST	1.1.1.1	192.168.2.4	0xb42a	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:32.025311947 CEST	1.1.1.1	192.168.2.4	0xc849	No error (0)	logincdn.msftauth.net	scdn38c07.wpc.9da5e.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.025311947 CEST	1.1.1.1	192.168.2.4	0xc849	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.026098013 CEST	1.1.1.1	192.168.2.4	0x5927	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.026098013 CEST	1.1.1.1	192.168.2.4	0x5927	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:32.027204037 CEST	1.1.1.1	192.168.2.4	0x1dfd	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.027204037 CEST	1.1.1.1	192.168.2.4	0x1dfd	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.027318001 CEST	1.1.1.1	192.168.2.4	0xa07a	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.027318001 CEST	1.1.1.1	192.168.2.4	0xa07a	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.027318001 CEST	1.1.1.1	192.168.2.4	0xa07a	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:32.034512043 CEST	1.1.1.1	192.168.2.4	0x5a83	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.034512043 CEST	1.1.1.1	192.168.2.4	0x5a83	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:32.036086082 CEST	1.1.1.1	192.168.2.4	0xd3be	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.036086082 CEST	1.1.1.1	192.168.2.4	0xd3be	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:32.037178040 CEST	1.1.1.1	192.168.2.4	0xfdce	No error (0)	scdn38c07.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.052314043 CEST	1.1.1.1	192.168.2.4	0x2b29	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.052314043 CEST	1.1.1.1	192.168.2.4	0x2b29	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:32.080753088 CEST	1.1.1.1	192.168.2.4	0xa87d	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.080753088 CEST	1.1.1.1	192.168.2.4	0xa87d	No error (0)	sni1gl.wpc.alphacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:32.082123995 CEST	1.1.1.1	192.168.2.4	0x2ed3	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.096080065 CEST	1.1.1.1	192.168.2.4	0x8bb1	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:32.096080065 CEST	1.1.1.1	192.168.2.4	0x8bb1	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:55:35.816385984 CEST	1.1.1.1	192.168.2.4	0x99e	No error (0)	amp.azure.net	160c1.wpc.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:35.817703009 CEST	1.1.1.1	192.168.2.4	0x9016	No error (0)	amp.azure.net	160c1.wpc.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:40.689497948 CEST	1.1.1.1	192.168.2.4	0x6d8f	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:40.690258980 CEST	1.1.1.1	192.168.2.4	0xaf39	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:45.789500952 CEST	1.1.1.1	192.168.2.4	0x9d53	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:55:45.789500952 CEST	1.1.1.1	192.168.2.4	0x9d53	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.737658024 CEST	1.1.1.1	192.168.2.4	0xdca9	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.745311022 CEST	1.1.1.1	192.168.2.4	0xab88	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.745321989 CEST	1.1.1.1	192.168.2.4	0x5295	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.751602888 CEST	1.1.1.1	192.168.2.4	0xfb48	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.754836082 CEST	1.1.1.1	192.168.2.4	0x4426	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.755141020 CEST	1.1.1.1	192.168.2.4	0xdabe	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.755904913 CEST	1.1.1.1	192.168.2.4	0xbff9	No error (0)	publisher.liveperson.net	publisher.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.756668091 CEST	1.1.1.1	192.168.2.4	0xadec	No error (0)	publisher.liveperson.net	publisher.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.765795946 CEST	1.1.1.1	192.168.2.4	0x22c5	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.765795946 CEST	1.1.1.1	192.168.2.4	0x22c5	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.765795946 CEST	1.1.1.1	192.168.2.4	0x22c5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.765795946 CEST	1.1.1.1	192.168.2.4	0x22c5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.766604900 CEST	1.1.1.1	192.168.2.4	0x54d4	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.766604900 CEST	1.1.1.1	192.168.2.4	0x54d4	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.773979902 CEST	1.1.1.1	192.168.2.4	0x8291	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.774442911 CEST	1.1.1.1	192.168.2.4	0xe603	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.774442911 CEST	1.1.1.1	192.168.2.4	0xe603	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.774442911 CEST	1.1.1.1	192.168.2.4	0xe603	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.779099941 CEST	1.1.1.1	192.168.2.4	0x8200	No error (0)	d.impactradius-event.com		35.186.249.72	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.783504963 CEST	1.1.1.1	192.168.2.4	0x2acd	No error (0)	cdnssl.clicktale.net	d1xbuscas8tetl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.783504963 CEST	1.1.1.1	192.168.2.4	0x2acd	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.18	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.783504963 CEST	1.1.1.1	192.168.2.4	0x2acd	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.43	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.783504963 CEST	1.1.1.1	192.168.2.4	0x2acd	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.85	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.783504963 CEST	1.1.1.1	192.168.2.4	0x2acd	No error (0)	d1xbuscas8tetl.cloudfront.net		108.138.7.67	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:09.784281969 CEST	1.1.1.1	192.168.2.4	0x691a	No error (0)	cdnssl.clicktale.net	d1xbuscas8tetl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.792546988 CEST	1.1.1.1	192.168.2.4	0x1b16	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.792546988 CEST	1.1.1.1	192.168.2.4	0x1b16	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.792687893 CEST	1.1.1.1	192.168.2.4	0xab8d	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:09.792687893 CEST	1.1.1.1	192.168.2.4	0xab8d	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:23.369383097 CEST	1.1.1.1	192.168.2.4	0x6163	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:23.369383097 CEST	1.1.1.1	192.168.2.4	0x6163	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:23.369383097 CEST	1.1.1.1	192.168.2.4	0x6163	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:23.369383097 CEST	1.1.1.1	192.168.2.4	0x6163	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.200.174.228	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:23.369383097 CEST	1.1.1.1	192.168.2.4	0x6163	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.109.160	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:23.369383097 CEST	1.1.1.1	192.168.2.4	0x6163	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.78.41.255	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:23.369383097 CEST	1.1.1.1	192.168.2.4	0x6163	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.247.72.3	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:23.369383097 CEST	1.1.1.1	192.168.2.4	0x6163	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.81.13	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:23.369383097 CEST	1.1.1.1	192.168.2.4	0x6163	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.243.47.41	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:23.369383097 CEST	1.1.1.1	192.168.2.4	0x6163	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.102.202	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:23.369383097 CEST	1.1.1.1	192.168.2.4	0x6163	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.136.28	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:23.370431900 CEST	1.1.1.1	192.168.2.4	0x4c56	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:23.370431900 CEST	1.1.1.1	192.168.2.4	0x4c56	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:23.370431900 CEST	1.1.1.1	192.168.2.4	0x4c56	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:23.562583923 CEST	1.1.1.1	192.168.2.4	0xbf01	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:23.563230038 CEST	1.1.1.1	192.168.2.4	0x40b1	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:23.563230038 CEST	1.1.1.1	192.168.2.4	0x40b1	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.498044014 CEST	1.1.1.1	192.168.2.4	0x9cd7	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.498044014 CEST	1.1.1.1	192.168.2.4	0x9cd7	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.498738050 CEST	1.1.1.1	192.168.2.4	0xa0ec	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.498738050 CEST	1.1.1.1	192.168.2.4	0xa0ec	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505198956 CEST	1.1.1.1	192.168.2.4	0x2fd2	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505198956 CEST	1.1.1.1	192.168.2.4	0x2fd2	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505198956 CEST	1.1.1.1	192.168.2.4	0x2fd2	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505198956 CEST	1.1.1.1	192.168.2.4	0x2fd2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.136.28	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505198956 CEST	1.1.1.1	192.168.2.4	0x2fd2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.215.24	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505198956 CEST	1.1.1.1	192.168.2.4	0x2fd2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.250.64.99	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505198956 CEST	1.1.1.1	192.168.2.4	0x2fd2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.243.47.41	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505198956 CEST	1.1.1.1	192.168.2.4	0x2fd2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.155.49.201	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505198956 CEST	1.1.1.1	192.168.2.4	0x2fd2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.76.110.110	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505198956 CEST	1.1.1.1	192.168.2.4	0x2fd2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.228.126	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505198956 CEST	1.1.1.1	192.168.2.4	0x2fd2	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.243.204.162	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505213022 CEST	1.1.1.1	192.168.2.4	0x5779	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505213022 CEST	1.1.1.1	192.168.2.4	0x5779	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.505213022 CEST	1.1.1.1	192.168.2.4	0x5779	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512701988 CEST	1.1.1.1	192.168.2.4	0x5b0	No error (0)	mscom.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512701988 CEST	1.1.1.1	192.168.2.4	0x5b0	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512701988 CEST	1.1.1.1	192.168.2.4	0x5b0	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512962103 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	mscom.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512962103 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512962103 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512962103 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.200.174.228	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512962103 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.247.233.124	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512962103 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.81.13	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512962103 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.215.24	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512962103 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.155.49.201	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512962103 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.248.35	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512962103 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.209.47.42	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.512962103 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.154.75.170	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.526137114 CEST	1.1.1.1	192.168.2.4	0xd147	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.526137114 CEST	1.1.1.1	192.168.2.4	0xd147	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.526137114 CEST	1.1.1.1	192.168.2.4	0xd147	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.532598019 CEST	1.1.1.1	192.168.2.4	0x6cb9	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.532598019 CEST	1.1.1.1	192.168.2.4	0x6cb9	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:24.533010960 CEST	1.1.1.1	192.168.2.4	0x6b7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.799807072 CEST	1.1.1.1	192.168.2.4	0xc52b	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:24.799901009 CEST	1.1.1.1	192.168.2.4	0x258f	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:25.410708904 CEST	1.1.1.1	192.168.2.4	0xf19d	No error (0)	ats.everesttech.net	ats.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:25.410708904 CEST	1.1.1.1	192.168.2.4	0xf19d	No error (0)	dco-ats-00-1379651868.us-west-2.elb.amazonaws.com		52.34.170.192	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.410708904 CEST	1.1.1.1	192.168.2.4	0xf19d	No error (0)	dco-ats-00-1379651868.us-west-2.elb.amazonaws.com		44.232.230.158	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.421684027 CEST	1.1.1.1	192.168.2.4	0x2509	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:25.421684027 CEST	1.1.1.1	192.168.2.4	0x2509	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.421684027 CEST	1.1.1.1	192.168.2.4	0x2509	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.421684027 CEST	1.1.1.1	192.168.2.4	0x2509	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.437863111 CEST	1.1.1.1	192.168.2.4	0x8560	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:25.484276056 CEST	1.1.1.1	192.168.2.4	0xc1a3	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:25.484276056 CEST	1.1.1.1	192.168.2.4	0xc1a3	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.484276056 CEST	1.1.1.1	192.168.2.4	0xc1a3	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.484276056 CEST	1.1.1.1	192.168.2.4	0xc1a3	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.484276056 CEST	1.1.1.1	192.168.2.4	0xc1a3	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.484276056 CEST	1.1.1.1	192.168.2.4	0xc1a3	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.484276056 CEST	1.1.1.1	192.168.2.4	0xc1a3	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.484276056 CEST	1.1.1.1	192.168.2.4	0xc1a3	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.504237890 CEST	1.1.1.1	192.168.2.4	0x447	No error (0)	ats.everesttech.net	ats.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:25.509696007 CEST	1.1.1.1	192.168.2.4	0x53e	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.509696007 CEST	1.1.1.1	192.168.2.4	0x53e	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.509696007 CEST	1.1.1.1	192.168.2.4	0x53e	No error (0)	msftenterprise.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.594803095 CEST	1.1.1.1	192.168.2.4	0x75b5	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.705883980 CEST	1.1.1.1	192.168.2.4	0xbb2e	No error (0)	cm.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:25.818502903 CEST	1.1.1.1	192.168.2.4	0xf6dd	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:25.819618940 CEST	1.1.1.1	192.168.2.4	0x6f81	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:25.927403927 CEST	1.1.1.1	192.168.2.4	0x49fd	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:25.927403927 CEST	1.1.1.1	192.168.2.4	0x49fd	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:25.928852081 CEST	1.1.1.1	192.168.2.4	0x962c	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:25.928852081 CEST	1.1.1.1	192.168.2.4	0x962c	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.037798882 CEST	1.1.1.1	192.168.2.4	0xbf43	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.037798882 CEST	1.1.1.1	192.168.2.4	0xbf43	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.037798882 CEST	1.1.1.1	192.168.2.4	0xbf43	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.038172960 CEST	1.1.1.1	192.168.2.4	0xe1d1	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.038172960 CEST	1.1.1.1	192.168.2.4	0xe1d1	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.067375898 CEST	1.1.1.1	192.168.2.4	0x34ae	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.067375898 CEST	1.1.1.1	192.168.2.4	0x34ae	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.067523956 CEST	1.1.1.1	192.168.2.4	0x7a16	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.067523956 CEST	1.1.1.1	192.168.2.4	0x7a16	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.190458059 CEST	1.1.1.1	192.168.2.4	0x27d8	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.190458059 CEST	1.1.1.1	192.168.2.4	0x27d8	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.190458059 CEST	1.1.1.1	192.168.2.4	0x27d8	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.190458059 CEST	1.1.1.1	192.168.2.4	0x27d8	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.277461052 CEST	1.1.1.1	192.168.2.4	0x9ae4	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.277461052 CEST	1.1.1.1	192.168.2.4	0x9ae4	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.277461052 CEST	1.1.1.1	192.168.2.4	0x9ae4	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.277461052 CEST	1.1.1.1	192.168.2.4	0x9ae4	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.277461052 CEST	1.1.1.1	192.168.2.4	0x9ae4	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.277461052 CEST	1.1.1.1	192.168.2.4	0x9ae4	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.277684927 CEST	1.1.1.1	192.168.2.4	0x13cd	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.277684927 CEST	1.1.1.1	192.168.2.4	0x13cd	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.391700983 CEST	1.1.1.1	192.168.2.4	0xfcf7	No error (0)	googleads.g.doubleclick.net		172.217.16.130	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.391925097 CEST	1.1.1.1	192.168.2.4	0x2d22	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 5, 2024 07:56:26.395420074 CEST	1.1.1.1	192.168.2.4	0x7944	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.396266937 CEST	1.1.1.1	192.168.2.4	0x15ab	No error (0)	microsoftmscompoc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.396266937 CEST	1.1.1.1	192.168.2.4	0x15ab	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.396266937 CEST	1.1.1.1	192.168.2.4	0x15ab	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.396266937 CEST	1.1.1.1	192.168.2.4	0x15ab	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.503931046 CEST	1.1.1.1	192.168.2.4	0x3ed9	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.503931046 CEST	1.1.1.1	192.168.2.4	0x3ed9	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.505666971 CEST	1.1.1.1	192.168.2.4	0xe401	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.505666971 CEST	1.1.1.1	192.168.2.4	0xe401	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.514290094 CEST	1.1.1.1	192.168.2.4	0x4114	No error (0)	ats.everesttech.net	ats.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.514290094 CEST	1.1.1.1	192.168.2.4	0x4114	No error (0)	dco-ats-00-1379651868.us-west-2.elb.amazonaws.com		44.232.230.158	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.514290094 CEST	1.1.1.1	192.168.2.4	0x4114	No error (0)	dco-ats-00-1379651868.us-west-2.elb.amazonaws.com		52.34.170.192	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.535001993 CEST	1.1.1.1	192.168.2.4	0xe1f0	No error (0)	ats.everesttech.net	ats.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.652946949 CEST	1.1.1.1	192.168.2.4	0x7007	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.652946949 CEST	1.1.1.1	192.168.2.4	0x7007	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.652946949 CEST	1.1.1.1	192.168.2.4	0x7007	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.652946949 CEST	1.1.1.1	192.168.2.4	0x7007	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.216.96.15	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.652946949 CEST	1.1.1.1	192.168.2.4	0x7007	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.228.126	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.652946949 CEST	1.1.1.1	192.168.2.4	0x7007	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.247.233.124	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.652946949 CEST	1.1.1.1	192.168.2.4	0x7007	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.155.49.201	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.652946949 CEST	1.1.1.1	192.168.2.4	0x7007	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.51.71.34	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.652946949 CEST	1.1.1.1	192.168.2.4	0x7007	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.228.109	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.652946949 CEST	1.1.1.1	192.168.2.4	0x7007	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.217.19	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.652946949 CEST	1.1.1.1	192.168.2.4	0x7007	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.136.28	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.653187037 CEST	1.1.1.1	192.168.2.4	0x831d	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.653187037 CEST	1.1.1.1	192.168.2.4	0x831d	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.653187037 CEST	1.1.1.1	192.168.2.4	0x831d	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.785758972 CEST	1.1.1.1	192.168.2.4	0x1288	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.785758972 CEST	1.1.1.1	192.168.2.4	0x1288	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.785758972 CEST	1.1.1.1	192.168.2.4	0x1288	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:26.787184000 CEST	1.1.1.1	192.168.2.4	0x56f6	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:26.787184000 CEST	1.1.1.1	192.168.2.4	0x56f6	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.390156031 CEST	1.1.1.1	192.168.2.4	0x3bd0	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:27.390249968 CEST	1.1.1.1	192.168.2.4	0xdf27	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 5, 2024 07:56:27.568073988 CEST	1.1.1.1	192.168.2.4	0x2d02	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.568537951 CEST	1.1.1.1	192.168.2.4	0x11db	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.654907942 CEST	1.1.1.1	192.168.2.4	0x3ac5	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.654907942 CEST	1.1.1.1	192.168.2.4	0x3ac5	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.654931068 CEST	1.1.1.1	192.168.2.4	0x22ec	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.654931068 CEST	1.1.1.1	192.168.2.4	0x22ec	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.863384008 CEST	1.1.1.1	192.168.2.4	0x6f4f	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:27.863384008 CEST	1.1.1.1	192.168.2.4	0x6f4f	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:27.863914013 CEST	1.1.1.1	192.168.2.4	0xe173	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.863914013 CEST	1.1.1.1	192.168.2.4	0xe173	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.863914013 CEST	1.1.1.1	192.168.2.4	0xe173	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.863914013 CEST	1.1.1.1	192.168.2.4	0xe173	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:27.863914013 CEST	1.1.1.1	192.168.2.4	0xe173	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:27.864458084 CEST	1.1.1.1	192.168.2.4	0xc0e7	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Jul 5, 2024 07:56:27.864689112 CEST	1.1.1.1	192.168.2.4	0x62e1	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.865083933 CEST	1.1.1.1	192.168.2.4	0x25da	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.865083933 CEST	1.1.1.1	192.168.2.4	0x25da	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.865083933 CEST	1.1.1.1	192.168.2.4	0x25da	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:27.866111994 CEST	1.1.1.1	192.168.2.4	0xb142	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.129708052 CEST	1.1.1.1	192.168.2.4	0x7aec	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.130245924 CEST	1.1.1.1	192.168.2.4	0xe67e	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.219491959 CEST	1.1.1.1	192.168.2.4	0x3b90	No error (0)	ds.reson8.com	ds.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.229239941 CEST	1.1.1.1	192.168.2.4	0xc651	No error (0)	ds.reson8.com	ds.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.334317923 CEST	1.1.1.1	192.168.2.4	0x9d53	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 5, 2024 07:56:28.335020065 CEST	1.1.1.1	192.168.2.4	0xb86a	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.391793013 CEST	1.1.1.1	192.168.2.4	0x6de8	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.391793013 CEST	1.1.1.1	192.168.2.4	0x6de8	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.391793013 CEST	1.1.1.1	192.168.2.4	0x6de8	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.401865005 CEST	1.1.1.1	192.168.2.4	0x10a1	No error (0)	dmpsync.3lift.com	eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.401865005 CEST	1.1.1.1	192.168.2.4	0x10a1	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.401865005 CEST	1.1.1.1	192.168.2.4	0x10a1	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.401865005 CEST	1.1.1.1	192.168.2.4	0x10a1	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.402307987 CEST	1.1.1.1	192.168.2.4	0x8039	No error (0)	dmpsync.3lift.com	eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.402307987 CEST	1.1.1.1	192.168.2.4	0x8039	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.502516985 CEST	1.1.1.1	192.168.2.4	0x57e3	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.502516985 CEST	1.1.1.1	192.168.2.4	0x57e3	No error (0)	aragorn-uk-prod.inbake.com	aragorn-prod-uk-acai-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.502516985 CEST	1.1.1.1	192.168.2.4	0x57e3	No error (0)	aragorn-prod-uk-acai-lb.inbake.com		18.130.29.255	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.502516985 CEST	1.1.1.1	192.168.2.4	0x57e3	No error (0)	aragorn-prod-uk-acai-lb.inbake.com		13.43.170.63	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.502516985 CEST	1.1.1.1	192.168.2.4	0x57e3	No error (0)	aragorn-prod-uk-acai-lb.inbake.com		18.168.156.229	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.502516985 CEST	1.1.1.1	192.168.2.4	0x57e3	No error (0)	aragorn-prod-uk-acai-lb.inbake.com		35.179.20.165	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.502516985 CEST	1.1.1.1	192.168.2.4	0x57e3	No error (0)	aragorn-prod-uk-acai-lb.inbake.com		13.43.158.51	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.502516985 CEST	1.1.1.1	192.168.2.4	0x57e3	No error (0)	aragorn-prod-uk-acai-lb.inbake.com		35.178.138.61	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.502516985 CEST	1.1.1.1	192.168.2.4	0x57e3	No error (0)	aragorn-prod-uk-acai-lb.inbake.com		35.176.50.98	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.502516985 CEST	1.1.1.1	192.168.2.4	0x57e3	No error (0)	aragorn-prod-uk-acai-lb.inbake.com		35.178.78.206	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.504410982 CEST	1.1.1.1	192.168.2.4	0xf85d	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.504410982 CEST	1.1.1.1	192.168.2.4	0xf85d	No error (0)	aragorn-uk-prod.inbake.com	aragorn-prod-uk-acai-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.556478977 CEST	1.1.1.1	192.168.2.4	0x41cf	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.556478977 CEST	1.1.1.1	192.168.2.4	0x41cf	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.556632042 CEST	1.1.1.1	192.168.2.4	0x3b1f	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Jul 5, 2024 07:56:28.783009052 CEST	1.1.1.1	192.168.2.4	0x1c56	No error (0)	rtb.adentifi.com		23.20.216.210	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.783009052 CEST	1.1.1.1	192.168.2.4	0x1c56	No error (0)	rtb.adentifi.com		34.199.165.35	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.783009052 CEST	1.1.1.1	192.168.2.4	0x1c56	No error (0)	rtb.adentifi.com		44.195.214.224	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.783009052 CEST	1.1.1.1	192.168.2.4	0x1c56	No error (0)	rtb.adentifi.com		52.20.56.172	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.783009052 CEST	1.1.1.1	192.168.2.4	0x1c56	No error (0)	rtb.adentifi.com		44.218.178.141	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.783009052 CEST	1.1.1.1	192.168.2.4	0x1c56	No error (0)	rtb.adentifi.com		18.232.220.142	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.854917049 CEST	1.1.1.1	192.168.2.4	0x24e	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.854917049 CEST	1.1.1.1	192.168.2.4	0x24e	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.854917049 CEST	1.1.1.1	192.168.2.4	0x24e	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.854917049 CEST	1.1.1.1	192.168.2.4	0x24e	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.854917049 CEST	1.1.1.1	192.168.2.4	0x24e	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:28.854932070 CEST	1.1.1.1	192.168.2.4	0x193e	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.854932070 CEST	1.1.1.1	192.168.2.4	0x193e	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.854932070 CEST	1.1.1.1	192.168.2.4	0x193e	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.954204082 CEST	1.1.1.1	192.168.2.4	0x85eb	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:28.976001978 CEST	1.1.1.1	192.168.2.4	0x3353	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:29.079265118 CEST	1.1.1.1	192.168.2.4	0xc45d	No error (0)	publisher.liveperson.net	publisher.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:29.080735922 CEST	1.1.1.1	192.168.2.4	0x8a43	No error (0)	publisher.liveperson.net	publisher.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:29.213681936 CEST	1.1.1.1	192.168.2.4	0x54bb	No error (0)	sync.crwdcntrl.net		52.16.78.59	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.213681936 CEST	1.1.1.1	192.168.2.4	0x54bb	No error (0)	sync.crwdcntrl.net		54.154.176.81	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.213681936 CEST	1.1.1.1	192.168.2.4	0x54bb	No error (0)	sync.crwdcntrl.net		108.128.111.241	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.213681936 CEST	1.1.1.1	192.168.2.4	0x54bb	No error (0)	sync.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.213681936 CEST	1.1.1.1	192.168.2.4	0x54bb	No error (0)	sync.crwdcntrl.net		52.50.240.62	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.213681936 CEST	1.1.1.1	192.168.2.4	0x54bb	No error (0)	sync.crwdcntrl.net		34.252.32.189	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.213681936 CEST	1.1.1.1	192.168.2.4	0x54bb	No error (0)	sync.crwdcntrl.net		54.72.120.129	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.213681936 CEST	1.1.1.1	192.168.2.4	0x54bb	No error (0)	sync.crwdcntrl.net		52.209.249.92	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:29.223923922 CEST	1.1.1.1	192.168.2.4	0x7436	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:29.224752903 CEST	1.1.1.1	192.168.2.4	0xe4ba	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:29.479175091 CEST	1.1.1.1	192.168.2.4	0xc010	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:29.479175091 CEST	1.1.1.1	192.168.2.4	0xc010	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:29.479175091 CEST	1.1.1.1	192.168.2.4	0xc010	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:29.479192972 CEST	1.1.1.1	192.168.2.4	0x7d1a	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:29.479192972 CEST	1.1.1.1	192.168.2.4	0x7d1a	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:29.479192972 CEST	1.1.1.1	192.168.2.4	0x7d1a	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:30.292996883 CEST	1.1.1.1	192.168.2.4	0x8faa	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:30.295958042 CEST	1.1.1.1	192.168.2.4	0xda9f	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:30.374135017 CEST	1.1.1.1	192.168.2.4	0x40c3	No error (0)	js.monitor.azure.com	aijscdn2.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:30.374183893 CEST	1.1.1.1	192.168.2.4	0x8724	No error (0)	js.monitor.azure.com	aijscdn2.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:30.374183893 CEST	1.1.1.1	192.168.2.4	0x8724	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:30.374183893 CEST	1.1.1.1	192.168.2.4	0x8724	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.745286942 CEST	1.1.1.1	192.168.2.4	0xaf99	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:30.745381117 CEST	1.1.1.1	192.168.2.4	0x24d1	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:30.805553913 CEST	1.1.1.1	192.168.2.4	0x1ea8	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.805553913 CEST	1.1.1.1	192.168.2.4	0x1ea8	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.805607080 CEST	1.1.1.1	192.168.2.4	0x4306	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Jul 5, 2024 07:56:30.915852070 CEST	1.1.1.1	192.168.2.4	0x1e33	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:30.915852070 CEST	1.1.1.1	192.168.2.4	0x1e33	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.915852070 CEST	1.1.1.1	192.168.2.4	0x1e33	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.915852070 CEST	1.1.1.1	192.168.2.4	0x1e33	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.915852070 CEST	1.1.1.1	192.168.2.4	0x1e33	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:30.917516947 CEST	1.1.1.1	192.168.2.4	0x5b9f	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.076474905 CEST	1.1.1.1	192.168.2.4	0x37f4	No error (0)	sync.srv.stackadapt.com		54.144.178.48	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.076474905 CEST	1.1.1.1	192.168.2.4	0x37f4	No error (0)	sync.srv.stackadapt.com		54.172.224.53	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.076474905 CEST	1.1.1.1	192.168.2.4	0x37f4	No error (0)	sync.srv.stackadapt.com		54.221.116.2	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.076474905 CEST	1.1.1.1	192.168.2.4	0x37f4	No error (0)	sync.srv.stackadapt.com		54.164.16.2	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.076474905 CEST	1.1.1.1	192.168.2.4	0x37f4	No error (0)	sync.srv.stackadapt.com		54.204.57.1	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.076474905 CEST	1.1.1.1	192.168.2.4	0x37f4	No error (0)	sync.srv.stackadapt.com		52.86.0.224	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.076474905 CEST	1.1.1.1	192.168.2.4	0x37f4	No error (0)	sync.srv.stackadapt.com		54.174.166.97	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.076474905 CEST	1.1.1.1	192.168.2.4	0x37f4	No error (0)	sync.srv.stackadapt.com		54.147.209.196	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.088557005 CEST	1.1.1.1	192.168.2.4	0x592a	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.088860989 CEST	1.1.1.1	192.168.2.4	0x3335	No error (0)	lpcdn.lpsnmedia.net	ipv4geo.lpcdn.lpsnmedia.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.089148045 CEST	1.1.1.1	192.168.2.4	0xfc91	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.089148045 CEST	1.1.1.1	192.168.2.4	0xfc91	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.090575933 CEST	1.1.1.1	192.168.2.4	0x8d6c	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.090575933 CEST	1.1.1.1	192.168.2.4	0x8d6c	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.306473970 CEST	1.1.1.1	192.168.2.4	0xcc85	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.306473970 CEST	1.1.1.1	192.168.2.4	0xcc85	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.518007040 CEST	1.1.1.1	192.168.2.4	0x1c88	No error (0)	cm.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.657092094 CEST	1.1.1.1	192.168.2.4	0x366f	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.657092094 CEST	1.1.1.1	192.168.2.4	0x366f	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.657092094 CEST	1.1.1.1	192.168.2.4	0x366f	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.657092094 CEST	1.1.1.1	192.168.2.4	0x366f	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.657092094 CEST	1.1.1.1	192.168.2.4	0x366f	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.657205105 CEST	1.1.1.1	192.168.2.4	0xdcc3	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.711500883 CEST	1.1.1.1	192.168.2.4	0x2b13	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.711500883 CEST	1.1.1.1	192.168.2.4	0x2b13	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.711500883 CEST	1.1.1.1	192.168.2.4	0x2b13	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:31.711513996 CEST	1.1.1.1	192.168.2.4	0xade1	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.711513996 CEST	1.1.1.1	192.168.2.4	0xade1	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.956043005 CEST	1.1.1.1	192.168.2.4	0x8138	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:31.956119061 CEST	1.1.1.1	192.168.2.4	0x879f	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:32.091207027 CEST	1.1.1.1	192.168.2.4	0x73c0	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Jul 5, 2024 07:56:32.091727972 CEST	1.1.1.1	192.168.2.4	0x9f1b	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.091727972 CEST	1.1.1.1	192.168.2.4	0x9f1b	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.131995916 CEST	1.1.1.1	192.168.2.4	0xf0a9	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.509701967 CEST	1.1.1.1	192.168.2.4	0x49cb	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.509701967 CEST	1.1.1.1	192.168.2.4	0x49cb	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.521959066 CEST	1.1.1.1	192.168.2.4	0x35ea	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:32.522275925 CEST	1.1.1.1	192.168.2.4	0xeb7d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:32.522275925 CEST	1.1.1.1	192.168.2.4	0xeb7d	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.638508081 CEST	1.1.1.1	192.168.2.4	0x870f	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:32.638508081 CEST	1.1.1.1	192.168.2.4	0x870f	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:32.638508081 CEST	1.1.1.1	192.168.2.4	0x870f	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.638942957 CEST	1.1.1.1	192.168.2.4	0x47d4	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:32.638942957 CEST	1.1.1.1	192.168.2.4	0x47d4	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:32.879766941 CEST	1.1.1.1	192.168.2.4	0x8fd4	No error (0)	q-aus1.clicktale.net	q-aus1.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:32.879766941 CEST	1.1.1.1	192.168.2.4	0x8fd4	No error (0)	q-aus1.contentsquare.net		18.214.123.106	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.879766941 CEST	1.1.1.1	192.168.2.4	0x8fd4	No error (0)	q-aus1.contentsquare.net		34.192.94.140	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.879766941 CEST	1.1.1.1	192.168.2.4	0x8fd4	No error (0)	q-aus1.contentsquare.net		44.218.208.161	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.880539894 CEST	1.1.1.1	192.168.2.4	0x918a	No error (0)	q-aus1.clicktale.net	q-aus1.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:32.884061098 CEST	1.1.1.1	192.168.2.4	0xd7a2	No error (0)	c.clicktale.net	c.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:32.884061098 CEST	1.1.1.1	192.168.2.4	0xd7a2	No error (0)	c.ba.contentsquare.net		54.194.186.155	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.884061098 CEST	1.1.1.1	192.168.2.4	0xd7a2	No error (0)	c.ba.contentsquare.net		54.194.125.88	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.884061098 CEST	1.1.1.1	192.168.2.4	0xd7a2	No error (0)	c.ba.contentsquare.net		54.74.33.57	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.884061098 CEST	1.1.1.1	192.168.2.4	0xd7a2	No error (0)	c.ba.contentsquare.net		52.50.166.121	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:32.887178898 CEST	1.1.1.1	192.168.2.4	0x6fac	No error (0)	c.clicktale.net	c.ba.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:33.325088978 CEST	1.1.1.1	192.168.2.4	0xf704	No error (0)	srm.bf.contentsquare.net		3.209.6.182	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:33.325088978 CEST	1.1.1.1	192.168.2.4	0xf704	No error (0)	srm.bf.contentsquare.net		54.209.38.113	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:33.325088978 CEST	1.1.1.1	192.168.2.4	0xf704	No error (0)	srm.bf.contentsquare.net		100.24.219.17	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:33.585967064 CEST	1.1.1.1	192.168.2.4	0x1a77	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:33.598489046 CEST	1.1.1.1	192.168.2.4	0xd20b	No error (0)	lptag.liveperson.net	lptag.liveperson.cotcdb.net.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:33.767112017 CEST	1.1.1.1	192.168.2.4	0x9af6	No error (0)	q-aus1.clicktale.net	q-aus1.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:33.769608021 CEST	1.1.1.1	192.168.2.4	0x65c8	No error (0)	q-aus1.clicktale.net	q-aus1.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:33.769608021 CEST	1.1.1.1	192.168.2.4	0x65c8	No error (0)	q-aus1.contentsquare.net		18.214.123.106	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:33.769608021 CEST	1.1.1.1	192.168.2.4	0x65c8	No error (0)	q-aus1.contentsquare.net		44.218.208.161	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:33.769608021 CEST	1.1.1.1	192.168.2.4	0x65c8	No error (0)	q-aus1.contentsquare.net		34.192.94.140	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:33.809014082 CEST	1.1.1.1	192.168.2.4	0xed6e	No error (0)	k-aus1.clicktale.net	k.bf.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:33.809190035 CEST	1.1.1.1	192.168.2.4	0x2a9	No error (0)	k-aus1.clicktale.net	k.bf.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:33.809190035 CEST	1.1.1.1	192.168.2.4	0x2a9	No error (0)	k.bf.contentsquare.net		52.4.178.162	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:33.809190035 CEST	1.1.1.1	192.168.2.4	0x2a9	No error (0)	k.bf.contentsquare.net		3.231.194.130	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:34.245491982 CEST	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	srm.bf.contentsquare.net		3.209.6.182	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:34.245491982 CEST	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	srm.bf.contentsquare.net		54.209.38.113	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:34.245491982 CEST	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	srm.bf.contentsquare.net		100.24.219.17	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:34.860105991 CEST	1.1.1.1	192.168.2.4	0xb026	No error (0)	k-aus1.clicktale.net	k.bf.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:34.860105991 CEST	1.1.1.1	192.168.2.4	0xb026	No error (0)	k.bf.contentsquare.net		44.214.131.22	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:34.860105991 CEST	1.1.1.1	192.168.2.4	0xb026	No error (0)	k.bf.contentsquare.net		18.213.102.178	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:34.863991976 CEST	1.1.1.1	192.168.2.4	0x7ba	No error (0)	k-aus1.clicktale.net	k.bf.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:37.250674009 CEST	1.1.1.1	192.168.2.4	0xe994	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:37.253516912 CEST	1.1.1.1	192.168.2.4	0xba88	No error (0)	accdn.lpsnmedia.net	geo.accdn.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:37.282212019 CEST	1.1.1.1	192.168.2.4	0xf346	No error (0)	static-assets.fs.liveperson.com	dh1y47vf5ttia.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:37.385380030 CEST	1.1.1.1	192.168.2.4	0x9497	No error (0)	static-assets.fs.liveperson.com	dh1y47vf5ttia.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:37.385380030 CEST	1.1.1.1	192.168.2.4	0x9497	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.147.58	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:37.385380030 CEST	1.1.1.1	192.168.2.4	0x9497	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.147.110	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:37.385380030 CEST	1.1.1.1	192.168.2.4	0x9497	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.147.62	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:37.385380030 CEST	1.1.1.1	192.168.2.4	0x9497	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.147.106	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:44.067286015 CEST	1.1.1.1	192.168.2.4	0x359e	No error (0)	va.v.liveperson.net	geo.va-v.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:44.069116116 CEST	1.1.1.1	192.168.2.4	0xc3ab	No error (0)	va.v.liveperson.net	geo.va-v.livepersonk.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:51.120793104 CEST	1.1.1.1	192.168.2.4	0x5c6	No error (0)	static-assets.fs.liveperson.com	dh1y47vf5ttia.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 07:56:51.120793104 CEST	1.1.1.1	192.168.2.4	0x5c6	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.147.62	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:51.120793104 CEST	1.1.1.1	192.168.2.4	0x5c6	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.147.106	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:51.120793104 CEST	1.1.1.1	192.168.2.4	0x5c6	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.147.58	A (IP address)	IN (0x0001)	false
Jul 5, 2024 07:56:51.120793104 CEST	1.1.1.1	192.168.2.4	0x5c6	No error (0)	dh1y47vf5ttia.cloudfront.net		18.66.147.110	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

aka.ms

fs.microsoft.com

https:

mem.gfx.ms

js.monitor.azure.com

aadcdn.msauth.net

aadcdn.msftauth.net

logincdn.msftauth.net

wcpstatic.microsoft.com

d.impactradius-event.com

dpm.demdex.net

www.facebook.com

mscom.demdex.net

msftenterprise.sc.omtrdc.net

idsync.rlcdn.com

target.microsoft.com

ib.adnxs.com

ats.everesttech.net

cm.g.doubleclick.net

analytics.twitter.com

match.adsrvr.org

googleads.g.doubleclick.net

cms.quantserve.com

www.clarity.ms

www.google.com

a.tribalfusion.com

cms.analytics.yahoo.com

dmpsync.3lift.com

bttrack.com

s.tribalfusion.com

cdnssl.clicktale.net

ag.innovid.com

rtb.adentifi.com

ups.analytics.yahoo.com

sync.crwdcntrl.net

dsum-sec.casalemedia.com

trc.taboola.com

us-u.openx.net

sync.srv.stackadapt.com

image2.pubmatic.com

c.clicktale.net

srm.bf.contentsquare.net

static-assets.fs.liveperson.com

q-aus1.clicktale.net

k-aus1.clicktale.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	23.214.40.215	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:55:13 UTC	679	OUT	GET /LearnAboutSenderIdentification HTTP/1.1 Host: aka.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:55:14 UTC	511	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://support.microsoft.com/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44 Request-Context: appId=cid-v1:7d63747b-487e-492a-872d-762362f77974 X-Response-Cache-Status: True Expires: Fri, 05 Jul 2024 05:55:14 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Jul 2024 05:55:14 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:55:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-05 05:55:17 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=209730 Date: Fri, 05 Jul 2024 05:55:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:55:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-05 05:55:18 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=209745 Date: Fri, 05 Jul 2024 05:55:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-05 05:55:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49749	13.107.246.60	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:55:19 UTC	566	OUT	GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:55:19 UTC	692	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:55:19 GMT Content-Type: application/javascript Content-Length: 30289 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=7200 Expires: Fri, 05 Jul 2024 05:09:35 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240705T055519Z-157bfc59976nv92g334eeatxnc00000009gg000000003aan x-fd-int-roxy-purgeid: 38334287 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-05 05:55:19 UTC	15692	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 30 38 36 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 73 6d 63 63 6f 6e 76 65 72 67 65 6e 63 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"smcconvergence","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rw
2024-07-05 05:55:19 UTC	14597	IN	Data Raw: 65 5b 65 5d 3d 7b 69 64 3a 65 2c 62 75 6e 64 6c 65 50 72 6f 6d 69 73 65 3a 6e 2c 65 78 70 6f 72 74 73 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 3b 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 72 3d 5b 5d 2c 6e 29 3a 28 72 3d 6e 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 47 65 2e 70 75 73 68 28 7b 69 64 3a 65 2c 64 65 70 73 3a 6e 2c 66 61 63 74 6f 72 79 3a 74 7d 29 7d 28 65 2c 72 2c 6f 29 7d 76 61 72 20 4b 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 Data Ascii: e[e]={id:e,bundlePromise:n,exports:t}}function ze(e,n,t){var r,o;o="function"==typeof n?(r=[],n):(r=n,t),function(e,n,t){Ge.push({id:e,deps:n,factory:t})}(e,r,o)}var Ke={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-cor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49796	13.107.246.45	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:55:23 UTC	610	OUT	GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:55:23 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:55:23 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 91802 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:58 GMT ETag: 0x8DC99EFA85DE069 x-ms-request-id: e20dc997-a01e-004a-16d9-cbe4fb000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.18.gbl.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240705T055523Z-157bfc59976x49h5y0c5nkcgkn0000000h30000000006s30 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-05 05:55:23 UTC	15402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 53 68 61 72 65 64 20 41 6e 61 6c 79 74 69 63 73 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 2c 69 3d 22 5f 5f 6d 73 24 6d 6f 64 5f 5f 22 2c 6f 3d 7b 7d 2c 61 3d 6f 2e 65 73 6d 5f 6d 73 5f 73 68 61 72 65 64 5f 61 6e 61 6c 79 74 69 63 73 5f 6d 65 63 74 72 6c 5f 33 5f 32 5f 31 38 3d 7b 7d 2c 75 3d 22 33 2e 32 2e 31 38 22 2c 63 3d 22 6f 6e 65 44 73 4d 65 43 Data Ascii: /! 1DS JS SDK Shared Analytics, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeC
2024-07-05 05:55:23 UTC	16384	IN	Data Raw: 20 74 7d 28 6f 2c 65 29 29 5b 6f 74 28 6e 29 5d 3d 74 29 2c 74 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 26 26 65 5b 6e 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 48 72 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c 6a 72 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 57 72 3d 22 63 6f 6f 6b 69 65 22 2c 58 72 3d 22 65 78 70 69 72 65 73 22 2c 47 72 3d 22 65 6e 61 62 6c 65 64 22 2c 51 72 3d 22 69 73 43 6f 6f 6b 69 65 55 73 65 44 69 73 61 62 6c 65 64 22 2c 4a 72 3d 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 55 73 61 67 65 22 2c 24 72 3d 22 5f 63 6b 4d 67 72 22 2c 5a 72 3d 6e 75 6c 6c 2c 59 72 3d 6e 75 6c 6c 2c 65 69 3d 6e 75 6c 6c 2c 6e Data Ascii: t}(o,e))[ot(n)]=t),t)},kill:function(e,n){if(e&&e[n])try{delete e[n]}catch(t){}}};return o}var Hr="toGMTString",jr="toUTCString",Wr="cookie",Xr="expires",Gr="enabled",Qr="isCookieUseDisabled",Jr="disableCookiesUsage",$r="_ckMgr",Zr=null,Yr=null,ei=null,n
2024-07-05 05:55:23 UTC	16384	IN	Data Raw: 29 26 26 28 61 3d 65 28 70 2c 70 5b 44 65 5d 28 29 29 29 2c 6f 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 70 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 70 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 65 5d 7d 2c 70 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 67 26 26 30 3c 72 5b 6e 65 5d 26 26 28 65 3d 72 2c 72 3d 5b 5d 2c 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 29 5b 46 5d 28 65 29 7d 29 29 7d 2c 70 2e 70 6f 6c 6c 49 6e 74 65 72 6e 61 6c 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 3d 65 7c 7c 6e 75 6c 6c 2c 4e 3d 21 31 2c 41 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 41 Data Ascii: )&&(a=e(p,p[De]())),o\|\|a\|\|null},p.setPerfMgr=function(e){o=e},p.eventCnt=function(){return r[ne]},p.releaseQueue=function(){var e;g&&0<r[ne]&&(e=r,r=[],ie(e,function(e){y()[F](e)}))},p.pollInternalLogs=function(e){return P=e\|\|null,N=!1,A&&(clearInterval(A
2024-07-05 05:55:23 UTC	16384	IN	Data Raw: 73 3a 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 7d 2c 7b 72 3a 63 2e 57 49 4e 52 54 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 20 52 54 22 7d 2c 7b 72 3a 63 2e 57 49 4e 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 7b 72 3a 63 2e 49 4f 53 2c 6f 73 3a 22 69 4f 53 22 7d 2c 7b 72 3a 63 2e 41 4e 44 52 4f 49 44 2c 6f 73 3a 22 41 6e 64 72 6f 69 64 22 7d 2c 7b 72 3a 63 2e 4c 49 4e 55 58 2c 6f 73 3a 22 4c 69 6e 75 78 22 7d 2c 7b 72 3a 63 2e 43 52 4f 53 2c 6f 73 3a 22 43 68 72 6f 6d 65 20 4f 53 22 7d 2c 7b 73 3a 22 78 31 31 22 2c 6f 73 3a 22 55 6e 69 78 22 7d 2c 7b 73 3a 22 62 6c 61 63 6b 62 65 72 72 79 22 2c 6f 73 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 7b 73 3a 22 73 79 6d 62 69 61 6e 22 2c 6f 73 3a 22 53 79 6d 62 69 61 6e 22 7d 2c 7b 73 3a 22 6e 6f 6b 69 61 22 Data Ascii: s:"Windows Phone"},{r:c.WINRT,os:"Windows RT"},{r:c.WIN,os:"Windows"},{r:c.IOS,os:"iOS"},{r:c.ANDROID,os:"Android"},{r:c.LINUX,os:"Linux"},{r:c.CROS,os:"Chrome OS"},{s:"x11",os:"Unix"},{s:"blackberry",os:"BlackBerry"},{s:"symbian",os:"Symbian"},{s:"nokia"
2024-07-05 05:55:23 UTC	16384	IN	Data Raw: 29 29 7b 76 61 72 20 74 2c 72 3d 64 2c 69 3d 65 2c 6f 3d 67 2c 61 3d 66 3b 69 66 28 49 26 26 21 76 26 26 43 63 2e 74 65 73 74 28 65 29 29 7b 76 61 72 20 75 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 63 3d 75 2e 6c 65 6e 67 74 68 3b 69 66 28 31 3c 63 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6f 26 26 6f 2e 73 6c 69 63 65 28 29 2c 73 3d 30 3b 73 3c 63 2d 31 3b 73 2b 2b 29 7b 76 61 72 20 6c 3d 75 5b 73 5d 2c 61 3d 61 5b 6c 5d 3d 61 5b 6c 5d 7c 7c 7b 7d 3b 72 2b 3d 22 2e 22 2b 6c 2c 6f 26 26 6f 2e 70 75 73 68 28 6c 29 7d 69 3d 75 5b 63 2d 31 5d 7d 7d 28 65 3d 76 26 26 28 28 74 3d 53 5b 65 3d 72 5d 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 37 3c 3d 65 2e 6c 65 6e 67 74 68 26 26 28 74 3d 61 74 28 65 2c 22 65 78 74 2e 6d 65 74 61 64 61 74 61 22 29 7c 7c 61 74 28 Data Ascii: )){var t,r=d,i=e,o=g,a=f;if(I&&!v&&Cc.test(e)){var u=e.split("."),c=u.length;if(1<c){for(var o=o&&o.slice(),s=0;s<c-1;s++){var l=u[s],a=a[l]=a[l]\|\|{};r+="."+l,o&&o.push(l)}i=u[c-1]}}(e=v&&((t=S[e=r])===undefined&&(7<=e.length&&(t=at(e,"ext.metadata")\|\|at(
2024-07-05 05:55:23 UTC	10864	IN	Data Raw: 74 63 68 29 2c 69 26 26 72 3c 3d 51 26 26 28 51 3d 2d 31 2c 6b 3d 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6c 61 74 65 6e 63 79 3a 72 2c 73 65 6e 64 54 79 70 65 3a 65 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 6e 7d 7d 2c 21 74 29 3a 28 51 3d 30 3c 3d 51 3f 4d 61 74 68 2e 6d 69 6e 28 51 2c 72 29 3a 72 2c 6b 3d 4d 61 74 68 2e 6d 61 78 28 6b 2c 6e 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 71 3d 7b 52 45 41 4c 5f 54 49 4d 45 3a 5b 32 2c 31 2c 30 5d 2c 4e 45 41 52 5f 52 45 41 4c 5f 54 49 4d 45 3a 5b 36 2c 33 2c 30 5d 2c 42 45 53 54 5f 45 46 46 4f 52 54 3a 5b 31 38 2c 39 2c 30 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 24 3f 59 3a 5a 3b 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: tch),i&&r<=Q&&(Q=-1,k=0)},function(){return{latency:r,sendType:e,sendReason:n}},!t):(Q=0<=Q?Math.min(Q,r):r,k=Math.max(k,n)),i}function n(){q={REAL_TIME:[2,1,0],NEAR_REAL_TIME:[6,3,0],BEST_EFFORT:[18,9,0]}}function e(e,n){var t=[],r=$?Y:Z;ie(e,function(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49800	13.107.246.60	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:55:23 UTC	602	OUT	GET /scripts/me/MeControl/10.24086.4/en-US/meBoot.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:55:24 UTC	629	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:55:23 GMT Content-Type: application/javascript Content-Length: 204055 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 29 Mar 2024 00:16:10 GMT ETag: "1da81a8f96fc417" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240705T055523Z-157bfc5997664n58z75k33ycmc0000000fq0000000009zgn x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-05 05:55:24 UTC	15755	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 42 6f 6f 74 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 53 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 3d 7b 7d 2c 75 3d 5b 5d 2c 70 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 2c 69 2c 61 3d 70 3b 66 6f 72 28 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 32 3c 69 2d 2d 3b 29 75 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 3b 66 6f 72 28 65 26 26 6e 75 6c 6c 21 3d 65 2e 63 68 69 6c 64 72 65 6e 26 26 28 75 2e 6c 65 6e 67 74 68 7c 7c 75 2e 70 75 73 68 28 65 2e 63 68 69 6c 64 Data Ascii: MeControlDefine("meBoot",["exports","@mecontrol/web-inline"],function(t,S){"use strict";var c=function(){},i={},u=[],p=[];function O(t,e){var r,n,o,i,a=p;for(i=arguments.length;2<i--;)u.push(arguments[i]);for(e&&null!=e.children&&(u.length\|\|u.push(e.child
2024-07-05 05:55:24 UTC	16384	IN	Data Raw: 79 28 74 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 65 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 3a 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 3a 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 7d 76 61 72 20 74 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 65 74 28 74 29 7b 76 61 72 20 65 2c 72 2c 6e 2c 6f 3d 22 22 2c 69 3d 74 79 70 65 6f 66 20 74 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 69 7c 7c 22 6e Data Ascii: y(t),r=0;r<t;r++)e[r]=arguments[r];return 0===e.length?function(t){return t}:1===e.length?e[0]:e.reduce(function(t,e){return function(){return t(e.apply(void 0,arguments))}})}var tt=Array.isArray;function et(t){var e,r,n,o="",i=typeof t;if("string"==i\|\|"n
2024-07-05 05:55:24 UTC	16384	IN	Data Raw: 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 22 22 3d 3d 3d 74 7c 7c 21 77 65 2e 74 65 73 74 28 74 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 6f 3d 65 3b 6e 3c 6f 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 6f 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 69 66 28 53 2e 68 61 73 4f 77 6e 28 69 2c 61 29 29 7b 76 61 72 20 73 3d 69 5b 61 5d 3b 6e 75 6c 6c 3d 3d 73 7c 7c 53 65 28 73 29 7c 7c 28 74 5b 61 5d 3d 73 29 7d 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 Data Ascii: "string":return""===t\|\|!we.test(t);default:return!1}}function Oe(t){for(var e=[],r=1;r<arguments.length;r++)e[r-1]=arguments[r];for(var n=0,o=e;n<o.length;n++){var i=o[n];for(var a in i)if(S.hasOwn(i,a)){var s=i[a];null==s\|\|Se(s)\|\|(t[a]=s)}}return t}funct
2024-07-05 05:55:24 UTC	16384	IN	Data Raw: 68 69 73 2e 70 72 6f 70 73 2c 72 3d 65 2e 63 73 73 43 6c 61 73 73 2c 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 74 68 69 73 2e 73 74 61 74 65 2e 61 63 74 69 76 61 74 65 64 3b 72 65 74 75 72 6e 20 4f 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 3a 65 74 28 5b 72 2c 28 74 3d 7b 7d 2c 74 2e 6d 65 63 74 72 6c 5f 66 6f 63 75 73 5f 76 69 73 69 62 6c 65 3d 6f 2c 74 29 5d 29 7d 2c 6e 29 7d 2c 66 72 29 3b 66 75 6e 63 74 69 6f 6e 20 66 72 28 74 29 7b 76 61 72 20 65 3d 75 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 74 65 3d 7b 61 63 74 69 76 61 74 65 64 3a 21 21 74 2e 76 69 73 69 62 6c 65 4f 6e 53 74 61 72 74 7d 2c 65 2e 68 61 73 52 65 63 65 6e 74 4b 65 79 62 6f 61 72 64 41 63 74 69 6f 6e 3d 21 31 2c 65 2e 6b 65 79 Data Ascii: his.props,r=e.cssClass,n=e.children,o=this.state.activated;return O("div",{class:et([r,(t={},t.mectrl_focus_visible=o,t)])},n)},fr);function fr(t){var e=ur.call(this,t)\|\|this;return e.state={activated:!!t.visibleOnStart},e.hasRecentKeyboardAction=!1,e.key
2024-07-05 05:55:24 UTC	16384	IN	Data Raw: 55 72 6c 29 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 21 31 3b 63 61 73 65 22 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 46 72 6f 6d 49 64 70 22 3a 72 65 74 75 72 6e 20 78 74 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 73 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 73 69 67 6e 4f 75 74 41 6e 64 46 6f 72 67 65 74 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 55 72 6c 29 3b 63 61 73 65 22 73 77 69 74 63 68 54 6f 22 3a 72 65 74 75 72 6e 20 78 74 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 70 53 77 69 74 63 68 54 6f 55 72 6c 29 3b 63 61 73 65 22 67 65 74 52 Data Ascii: Url);case"signOutFromIdp":return!1;case"signOutAndForgetFromIdp":return xt(null===(r=this.config.msa)\|\|void 0===r?void 0:r.signOutAndForgetUrl);case"switch":return xt(this.config.appSwitchUrl);case"switchTo":return xt(this.config.appSwitchToUrl);case"getR
2024-07-05 05:55:24 UTC	16384	IN	Data Raw: 6e 20 67 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 74 26 26 2d 31 3c 6d 74 28 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 79 6e 28 74 29 7d 76 61 72 20 79 6e 3d 28 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 70 70 6f 72 74 73 4d 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6d 73 61 6c 4a 73 57 69 74 68 4d 73 61 22 3d 3d 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 2c 76 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4f 70 65 72 61 74 69 6f 6e 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3b 73 77 69 74 63 68 28 74 29 7b 63 Data Ascii: n gn(t){return!!t&&-1<mt(t).toLowerCase().indexOf("login.live.com")}function mn(t){return new yn(t)}var yn=(vn.prototype.supportsMsa=function(){return"msalJsWithMsa"===this.config.type},vn.prototype.isOperationSupported=function(t,e){var r,n,o;switch(t){c
2024-07-05 05:55:24 UTC	16384	IN	Data Raw: 61 64 2e 63 61 63 68 65 64 44 61 74 61 2c 6c 3d 74 2c 66 3d 30 3b 66 3c 64 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 69 66 28 79 3d 6c 5b 6e 75 6c 6c 21 3d 28 6f 3d 64 5b 66 5d 2e 61 63 63 6f 75 6e 74 49 64 29 3f 6f 3a 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 2e 6b 65 79 5d 29 7b 76 61 72 20 68 3d 64 5b 66 5d 2e 70 61 79 6c 6f 61 64 3b 79 2e 70 69 63 74 75 72 65 55 72 6c 3d 6e 75 6c 6c 21 3d 28 69 3d 79 2e 70 69 63 74 75 72 65 55 72 6c 29 3f 69 3a 68 2e 72 65 73 6f 75 72 63 65 2c 79 2e 63 61 63 68 65 4d 65 74 61 3f 79 2e 63 61 63 68 65 4d 65 74 61 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 3a 79 2e 63 61 63 68 65 4d 65 74 61 3d 28 28 72 3d 7b 7d 29 2e 70 69 63 74 75 72 65 55 72 6c 3d 68 2e 72 65 73 6f 75 72 63 65 45 54 61 67 2c Data Ascii: ad.cachedData,l=t,f=0;f<d.length;f++){if(y=l[null!=(o=d[f].accountId)?o:d[f].payload.key]){var h=d[f].payload;y.pictureUrl=null!=(i=y.pictureUrl)?i:h.resource,y.cacheMeta?y.cacheMeta.pictureUrl=h.resourceETag:y.cacheMeta=((r={}).pictureUrl=h.resourceETag,
2024-07-05 05:55:24 UTC	16384	IN	Data Raw: 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 36 36 36 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 5c 78 33 61 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 5c 78 33 61 2d 32 70 78 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 67 6c 79 70 68 5c 78 37 62 6f 76 65 72 66 6c 6f 77 5c 78 33 61 68 69 64 64 65 6e 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 5c 78 33 61 63 6f 76 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 5c 78 33 61 63 65 6e 74 65 72 20 63 65 6e 74 65 72 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 5c 78 33 61 6e 6f 2d 72 65 70 65 61 74 5c 78 37 64 Data Ascii: line-color\x3a\x23666\x21important\x3boutline-width\x3a2px\x21important\x3boutline-offset\x3a-2px\x21important\x7d.mectrl_glyph\x7boverflow\x3ahidden\x3bbackground-size\x3acover\x3bbackground-position\x3acenter center\x3bbackground-repeat\x3ano-repeat\x7d
2024-07-05 05:55:24 UTC	16384	IN	Data Raw: 72 6c 5f 74 68 65 6d 65 5f 67 72 61 79 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 6f 66 66 5f 62 6c 61 63 6b 20 2e 67 6c 79 70 68 5f 61 63 63 6f 75 6e 74 5f 63 69 72 63 6c 65 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 5c 78 33 61 75 72 6c 5c 78 32 38 5c 78 32 32 64 61 74 61 5c 78 33 61 69 6d 61 67 65 5c 78 32 66 73 76 67 5c 78 32 62 78 6d 6c 5c 78 33 62 63 68 61 72 73 65 74 5c 78 33 64 75 74 66 2d 38 2c 5c 78 32 35 33 43 73 76 67 20 78 6d 6c 6e 73 5c 78 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 20 76 69 65 77 42 6f 78 5c 78 33 64 5c 78 32 37 30 20 30 20 36 34 20 Data Ascii: rl_theme_gray .glyph_account_circle,.mectrl_theme_off_black .glyph_account_circle\x7bbackground-image\x3aurl\x28\x22data\x3aimage\x2fsvg\x2bxml\x3bcharset\x3dutf-8,\x253Csvg xmlns\x3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27 viewBox\x3d\x270 0 64
2024-07-05 05:55:24 UTC	16384	IN	Data Raw: 33 64 5c 78 32 37 68 74 74 70 5c 78 33 61 5c 78 32 66 5c 78 32 66 77 77 77 2e 77 33 2e 6f 72 67 5c 78 32 66 32 30 30 30 5c 78 32 66 73 76 67 5c 78 32 37 5c 78 32 35 33 45 5c 78 32 35 33 43 70 61 74 68 20 64 5c 78 33 64 5c 78 32 37 4d 35 2e 34 35 33 20 35 4c 31 30 20 39 2e 35 35 32 20 39 2e 35 35 32 20 31 30 20 35 20 35 2e 34 35 33 2e 34 34 38 20 31 30 20 30 20 39 2e 35 35 32 20 34 2e 35 34 37 20 35 20 30 20 2e 34 34 38 2e 34 34 38 20 30 20 35 20 34 2e 35 34 37 20 39 2e 35 35 32 20 30 20 31 30 20 2e 34 34 38 20 35 2e 34 35 33 20 35 7a 5c 78 32 37 20 66 69 6c 6c 5c 78 33 64 5c 78 32 37 5c 78 32 35 32 33 33 32 33 31 33 30 5c 78 32 37 5c 78 32 66 5c 78 32 35 33 45 5c 78 32 35 33 43 5c 78 32 66 73 76 67 5c 78 32 35 33 45 5c 78 32 32 5c 78 32 39 5c 78 37 64 5c Data Ascii: 3d\x27http\x3a\x2f\x2fwww.w3.org\x2f2000\x2fsvg\x27\x253E\x253Cpath d\x3d\x27M5.453 5L10 9.552 9.552 10 5 5.453.448 10 0 9.552 4.547 5 0 .448.448 0 5 4.547 9.552 0 10 .448 5.453 5z\x27 fill\x3d\x27\x2523323130\x27\x2f\x253E\x253C\x2fsvg\x253E\x22\x29\x7d\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49801	13.107.246.60	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:55:24 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:55:25 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:55:24 GMT Content-Type: application/x-javascript Content-Length: 49696 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 24 May 2024 22:13:21 GMT ETag: 0x8DC7C3EB8EDBF94 x-ms-request-id: ed2f6aa1-401e-0055-1bcb-cad3dd000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240705T055524Z-157bfc59976jp7kxwf5sufykgw0000000hbg00000000km3b x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-05 05:55:25 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd eb 5b e3 38 d2 38 fa fd fd 2b 82 77 0f 13 4f 4c c8 05 68 70 da 9d 5f 1a e8 6e 66 80 30 24 cc e5 05 96 c7 89 15 f0 74 b0 b3 b6 c3 65 20 e7 6f 3f 75 91 6c d9 71 e8 9e dd f3 9c 2f 67 2e c4 96 4a b2 54 aa 2a 55 95 4a d2 e6 8f 6b ff 53 f9 b1 b2 f1 fd ff 54 06 c3 de f9 b0 d2 ff 54 19 7e 39 3a 3f a8 9c c1 db 1f 95 d3 fe f0 68 ff f0 fb eb c1 8f e2 ff c3 3b 3f ae 4c fc a9 a8 c0 ef c8 8d 85 57 09 83 4a 18 55 fc 60 1c 46 b3 30 72 13 11 57 ee e1 6f e4 bb d3 ca 24 0a ef 2b c9 9d a8 cc a2 f0 4f 31 4e e2 ca d4 8f 13 28 34 12 d3 f0 b1 52 85 ea 22 af 72 e6 46 c9 73 e5 e8 cc ac 43 fd 02 6a f3 6f fd 00 4a 8f c3 d9 33 3c df 25 95 20 4c fc b1 a8 b8 81 47 b5 4d e1 25 88 45 65 1e 78 22 aa 3c de f9 e3 bb ca 89 3f 8e c2 38 9c 24 95 48 8c 85 ff Data Ascii: [88+wOLhp_nf0$te o?ulq/g.JT*UJkSTT~9:?h;?LWJU`F0rWo$+O1N(4R"rFsCjoJ3<% LGM%Eex"<?8$H
2024-07-05 05:55:25 UTC	16384	IN	Data Raw: 97 54 f3 53 f3 32 8c 02 fa 7d e9 7a 52 90 4a da 17 b0 b9 c2 43 2e b7 f6 3f f6 cf 11 8a 63 a5 49 a4 a8 49 28 d5 0d 41 59 e3 36 4b e1 be dd c8 64 fa 76 93 fc 38 74 42 0b 75 16 78 23 72 79 77 a4 26 b6 6d 43 64 2f 6c 19 d9 74 94 90 61 91 60 34 f0 86 29 63 e5 69 ae 49 b5 65 76 82 3a 1d fc 74 11 80 41 e2 c1 88 1c 3e e1 11 1b 00 db 07 eb f8 4f 26 f5 dc 61 9e e2 d2 a0 a3 84 8c eb 6a c9 61 90 a2 83 77 39 02 26 c1 28 09 27 7c 4e 1a 9d a2 af 9d 9a 96 7e ab 22 0f 8f ad 44 ea 4b 76 c5 a8 e1 89 8b b1 50 0a 8c f6 11 f3 45 9e 51 b5 30 ad 06 5d 8b 00 a8 29 bd 0a 6f e9 e0 39 ed a6 b3 48 ab 31 b4 7c bc 95 21 bd e0 ae 6a 9a 75 94 ac 94 b1 aa 11 21 de 1c 60 e2 45 42 a6 f9 06 6e b7 4d 8b 4e 5d 69 e0 81 e6 78 0e 99 e5 32 c6 b3 53 2c 53 b4 e1 99 e6 78 24 cb dc f1 f1 84 18 32 00 Data Ascii: TS2}zRJC.?cII(AY6Kdv8tBux#ryw&mCd/lta`4)ciIev:tA>O&ajaw9&('\|N~"DKvPEQ0])o9H1\|!ju!`EBnMN]ix2S,Sx$2
2024-07-05 05:55:25 UTC	16384	IN	Data Raw: f2 4f 5b d4 a4 9d 57 5a a4 b5 86 e8 cd 7e 78 25 c4 db 48 a6 01 0e cf 44 6d 1e 41 54 1d 69 1d 00 32 87 8c 70 54 bd c4 49 e5 f3 7a f4 57 6d 21 e3 e3 28 9f c9 5e 7b a7 de e3 ad 96 b5 b6 5a 64 aa 0d c1 66 a8 dd 1d a4 50 a3 73 c5 d5 f6 8a 7f d5 6d e8 af f9 78 76 d2 ae b3 65 79 eb 8f 56 52 89 bd 02 4b 5d 8b 6c 9c ec da 22 a6 62 47 ab 46 ba 85 c4 37 58 97 52 1d 0f 18 dc 56 31 6f 99 71 74 e2 b7 0e a2 fa 41 5f aa d0 ba 8c f5 ac d7 2c 58 8e 74 a6 4d 9d 2b 73 d2 d0 2d b5 9f 06 9c 84 b6 c1 2a 36 cc 8a b2 40 3a 7e d3 40 df fa d7 2a 2d 92 09 47 3a e8 0b d7 be f2 dc 63 53 ac 35 2d 49 8f 5e 80 73 3e ff 1e c3 a9 d8 51 26 77 e7 44 62 6c ac 1b 24 0b 0b f9 0f 12 d7 79 5f 12 5d 51 5f f0 07 d3 15 f8 fc c1 93 97 cf 14 e1 42 9e 28 10 3c 50 78 90 c6 aa 69 d9 ec 9a 49 32 ad 43 ec Data Ascii: O[WZ~x%HDmATi2pTIzWm!(^{ZdfPsmxveyVRK]l"bGF7XRV1oqtA_,XtM+s-6@:~@-G:cS5-I^s>Q&wDbl$y_]Q_B(<PxiI2C
2024-07-05 05:55:25 UTC	1362	IN	Data Raw: eb da 58 47 f9 9b 46 cc 13 08 64 da 0c 9a 50 9e 2d 6a 50 48 14 af c7 23 18 0e a7 3e 06 23 48 88 f9 87 13 83 84 72 88 31 2d cc 3c 9f da 66 8d df 09 4d 5e b3 bb 47 09 c7 18 f5 f7 d6 55 7a 5f b9 01 6e 11 07 0a 1c d9 f5 fb 05 7b 3f 19 17 80 be 98 57 2d 92 59 26 82 49 8a 36 e5 8b 2b 65 1e 58 2d 18 ee d3 0b 52 db 21 24 56 0e 21 e2 92 4b dc 98 a0 69 b1 4d c6 67 27 5e af e9 76 fb ae a6 2b 07 b7 b7 6e d4 73 94 77 ef 01 78 8f fb e2 e0 00 6d 0e 0e 2f 22 8c 8e f2 5a 17 03 fa 01 12 96 aa 1c 75 70 1e 3d 08 df b8 6b 19 a2 a0 77 dd 99 09 0b 4c 4a 24 3d 28 9b 8d 1a b9 27 74 ee 1c d4 5d 79 e2 4a 86 09 e5 e4 ce 89 49 c3 9b d1 3c 2d ca 8a 63 bb c6 d9 d8 03 ef 19 8b 3a 1e 44 e5 fe 7d 67 b9 cc a6 d9 32 c9 17 67 17 e9 ec 2c 39 bb 98 5e 4c 3f 5e 9e 2f a8 2d f9 32 fd 98 3a ec 6c Data Ascii: XGFdP-jPH#>#Hr1-<fM^GUz_n{?W-Y&I6+eX-R!$V!KiMg'^v+nswxm/"Zup=kwLJ$=('t]yJI<-c:D}g2g,9^L?^/-2:l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49804	13.107.246.60	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:55:25 UTC	602	OUT	GET /scripts/me/MeControl/10.24086.4/en-US/meCore.min.js HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://support.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://support.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:55:26 UTC	629	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:55:25 GMT Content-Type: application/javascript Content-Length: 100769 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 29 Mar 2024 00:16:14 GMT ETag: "1da81a8fbcebaa1" X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240705T055525Z-157bfc59976nv92g334eeatxnc00000009c000000000br41 x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-05 05:55:26 UTC	15755	IN	Data Raw: 4d 65 43 6f 6e 74 72 6f 6c 44 65 66 69 6e 65 28 22 6d 65 43 6f 72 65 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 72 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 Data Ascii: MeControlDefine("meCore",["exports","@mecontrol/web-inline","@mecontrol/web-boot"],function(e,f,h){"use strict";var r=function(e,t){return(r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)
2024-07-05 05:55:26 UTC	16384	IN	Data Raw: 73 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 3d 68 2e 64 65 62 6f 75 6e 63 65 28 74 2e 65 78 70 61 6e 64 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 2e 62 69 6e 64 28 74 29 29 2c 74 2e 73 74 61 74 65 3d 7b 65 78 70 61 6e 64 65 64 3a 21 31 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 66 2e 53 79 6e 74 68 65 74 69 63 45 76 65 6e 74 28 22 63 6f 6d 6d 61 6e 64 63 6c 69 63 6b 22 2c 7b 63 6f 6d 6d 61 6e 64 49 64 3a 74 2e 69 64 2c 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 3a 6e 7d 29 2c 6f 3d 66 2e 67 65 74 4f 70 74 69 6f 6e 73 28 29 3b 6f 26 26 28 6f 2e 73 79 6e 74 68 65 74 69 63 45 76 65 6e 74 54 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 72 29 7c 7c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 Data Ascii: scrollHandler=h.debounce(t.expandedScrollHandler.bind(t)),t.state={expanded:!1},t}function $(e,t,n){var r=new f.SyntheticEvent("commandclick",{commandId:t.id,currentAccount:n}),o=f.getOptions();o&&(o.syntheticEventTarget.dispatchEvent(r)\|\|e.preventDefault
2024-07-05 05:55:26 UTC	16384	IN	Data Raw: 73 6f 6e 28 65 2e 63 6f 6e 74 65 6e 74 29 3b 72 65 74 75 72 6e 7b 70 61 72 74 41 3a 6e 2c 70 61 72 74 42 3a 7b 76 65 72 3a 22 31 2e 30 22 2c 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 3a 74 2e 69 6d 70 72 65 73 73 69 6f 6e 47 75 69 64 2c 6d 61 72 6b 65 74 3a 66 2e 4d 45 2e 43 6f 6e 66 69 67 2e 6d 6b 74 2c 70 61 67 65 54 61 67 73 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 66 2e 67 65 74 50 61 67 65 54 61 67 73 28 74 2e 61 63 63 6f 75 6e 74 73 2e 63 6f 75 6e 74 73 2c 74 2e 61 63 63 6f 75 6e 74 73 2e 63 75 72 72 65 6e 74 29 29 2c 63 6f 6e 74 65 6e 74 56 65 72 3a 22 32 2e 30 22 2c 63 6f 6e 74 65 6e 74 3a 22 5b 22 2b 72 2b 22 5d 22 7d 2c 70 61 72 74 43 3a 7b 62 61 73 65 54 79 70 65 3a 46 65 2c 70 61 67 65 4c 6f 61 64 54 69 6d 65 3a 4d 61 74 68 2e 72 6f 75 Data Ascii: son(e.content);return{partA:n,partB:{ver:"1.0",impressionGuid:t.impressionGuid,market:f.ME.Config.mkt,pageTags:JSON.stringify(f.getPageTags(t.accounts.counts,t.accounts.current)),contentVer:"2.0",content:"["+r+"]"},partC:{baseType:Fe,pageLoadTime:Math.rou
2024-07-05 05:55:26 UTC	16384	IN	Data Raw: 65 72 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 6f 75 74 6c 69 6e 65 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 66 69 6c 6c 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 70 75 72 70 6c 65 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 63 75 72 72 65 6e 74 41 63 63 6f 75 6e 74 20 61 2e 6d 65 63 74 72 6c 5f 73 69 67 6e 6f 75 74 5c 78 33 61 61 63 74 69 76 65 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 Data Ascii: er-color\x3a\x23fff\x21important\x3boutline-color\x3a\x23fff\x21important\x3bfill\x3a\x23fff\x21important\x3bbackground-color\x3apurple\x7d.mectrl_theme_azure_hclight .mectrl_currentAccount a.mectrl_signout\x3aactive\x7b-ms-high-contrast-adjust\x3anone\x3
2024-07-05 05:55:26 UTC	16384	IN	Data Raw: 2d 6f 6e 2d 62 6c 61 63 6b 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 61 2c 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 20 6c 69 20 62 75 74 74 6f 6e 5c 78 37 62 62 6f 72 64 65 72 5c 78 33 61 73 6f 6c 69 64 20 31 70 78 5c 78 37 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 2e 66 69 78 65 64 2d 6d 65 6e 75 20 75 6c 5c 78 37 62 70 6f 73 69 74 69 6f 6e 5c 78 33 61 66 69 78 65 64 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 6c 5c 78 37 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 33 33 33 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 37 64 2e 6d 65 63 74 72 6c 5f 6d 65 6e 75 20 75 Data Ascii: -on-black\x29\x7b.mectrl_menu ul li a,.mectrl_menu ul li button\x7bborder\x3asolid 1px\x7d\x7d.mectrl_menu.fixed-menu ul\x7bposition\x3afixed\x7d.mectrl_menu ul\x7bcolor\x3a\x23333\x21important\x3bbackground-color\x3a\x23fff\x21important\x7d.mectrl_menu u
2024-07-05 05:55:26 UTC	16384	IN	Data Raw: 5c 78 33 61 68 6f 76 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 30 66 66 5c 78 37 64 5c 78 37 64 5c 78 34 30 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 5c 78 32 38 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 5c 78 33 61 62 6c 61 63 6b 2d 6f 6e 2d 77 68 69 74 65 5c 78 32 39 5c 78 37 62 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 65 78 70 61 6e 64 65 64 2e 73 69 67 6e 49 6e 2c 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 49 74 65 6d 5c 78 33 61 68 6f 76 65 72 20 2e 70 72 69 6d 61 72 79 41 63 74 69 6f 6e 2e 73 69 67 6e 49 6e 5c 78 37 62 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: \x3ahover .primaryAction.signIn\x7bbackground-color\x3a\x230ff\x7d\x7d\x40media screen and \x28-ms-high-contrast\x3ablack-on-white\x29\x7b.mectrl_accountItem .primaryAction.expanded.signIn,.mectrl_accountItem\x3ahover .primaryAction.signIn\x7bbackground-c
2024-07-05 05:55:26 UTC	3094	IN	Data Raw: 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 2e 65 78 70 61 6e 64 65 64 2c 2e 6d 65 63 74 72 6c 5f 74 68 65 6d 65 5f 61 7a 75 72 65 5f 68 63 6c 69 67 68 74 20 2e 6d 65 63 74 72 6c 5f 61 63 63 6f 75 6e 74 41 63 74 69 6f 6e 73 20 2e 6d 65 63 74 72 6c 5f 74 72 69 67 67 65 72 5c 78 33 61 68 6f 76 65 72 5c 78 37 62 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 2d 61 64 6a 75 73 74 5c 78 33 61 6e 6f 6e 65 5c 78 33 62 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 33 62 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 5c 78 33 61 5c 78 32 33 66 66 66 5c 78 32 31 69 6d 70 6f 72 74 61 6e 74 5c 78 Data Ascii: _theme_azure_hclight .mectrl_accountActions .mectrl_trigger.expanded,.mectrl_theme_azure_hclight .mectrl_accountActions .mectrl_trigger\x3ahover\x7b-ms-high-contrast-adjust\x3anone\x3bcolor\x3a\x23fff\x21important\x3bborder-color\x3a\x23fff\x21important\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49816	13.107.246.60	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:55:27 UTC	633	OUT	GET /shared/1.0/content/js/FetchSessions_Core_ufpbSh26SmAaP5weAQWe5w2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:55:27 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:55:27 GMT Content-Type: application/x-javascript Content-Length: 51680 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 30 May 2024 22:52:19 GMT ETag: 0x8DC80FB292A658D x-ms-request-id: 80366d8b-a01e-004d-7775-ce0cba000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240705T055527Z-157bfc59976mnqs85rnhh4gqgs00000005gg000000001uya x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-05 05:55:27 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6b 5b e3 b8 d2 28 fa fd fd 15 c1 6b 1d c6 1e 4c c8 85 ab d3 6e 76 1a e8 6e 66 b8 2d 02 33 b3 16 b0 78 9c 44 80 a7 8d 9d d7 76 a0 19 c8 fe ed bb 2e 92 2c 3b 86 ee 5e ef 7e ce f9 70 e6 12 6c a9 24 4b a5 52 a9 aa 54 2a ad fc bc f0 5f 8d 9f 1b cb df ff 4f 63 70 d6 3f 3d 6b 1c 7f 6c 9c 7d de 3f dd 6d 9c c0 db 3f 1b 47 c7 67 fb 3b 7b df 5f 0f 7e 14 ff 3f bb 0b b3 c6 4d 18 89 06 fc 1d 06 99 18 37 92 b8 91 a4 8d 30 1e 25 e9 24 49 83 5c 64 8d 7b f8 4d c3 20 6a dc a4 c9 7d 23 bf 13 8d 49 9a fc 29 46 79 d6 88 c2 2c 87 42 43 11 25 8f 0d 1b aa 4b c7 8d 93 20 cd 9f 1a fb 27 4e 13 ea 17 50 5b 78 1b c6 50 7a 94 4c 9e e0 f9 2e 6f c4 49 1e 8e 44 23 88 c7 54 5b 04 2f 71 26 1a d3 78 2c d2 c6 e3 5d 38 ba 6b 1c 86 a3 34 c9 92 9b bc 91 8a 91 Data Ascii: k[(kLnvnf-3xDv.,;^~pl$KRT*_Ocp?=kl}?m?Gg;{_~?M70%$I\d{M j}#I)Fy,BC%K 'NP[xPzL.oID#T[/q&x,]8k4
2024-07-05 05:55:28 UTC	16384	IN	Data Raw: 9a 6e fd 2f ab f0 91 59 b1 2e fe 8d f0 f1 65 7a f5 b3 f5 92 a7 53 f1 42 37 82 d3 a6 d9 cb f2 f6 e5 78 09 ea bc 6c 92 b7 12 d6 2e f6 ae 2e 96 2e 97 af 30 c7 d9 c6 fa ae cc fa 00 e4 df 2f de 8b eb 60 a9 ec e7 cb 0b 67 09 61 2c 47 bb f5 fd e9 e3 91 58 db b2 ad 25 6c fd 92 e5 58 af ac 5b 34 32 db 34 a6 48 9f 7f ce b0 1e ef cf 5e 41 dc 46 cc 16 49 e2 44 99 16 12 b2 21 71 fb f8 e3 b2 b4 af 6f 80 c7 b4 b9 1b e0 0b c3 2b 6f 8b f6 0a f8 54 b9 fa bd 56 22 b7 db 4e 2f 96 fe 76 fe 9c f4 01 0c 7c a1 5d 4c 8b a4 30 62 43 46 cb 4d 9a 02 35 17 8c 7c 61 d3 d2 66 10 3d 11 02 93 68 90 de 92 9d 25 a3 cd 5f c5 4b 8b b2 d0 cc 64 08 7a db 03 ca 40 36 9e a5 c8 45 3c b6 9f 63 3e 6a 6c 05 d1 63 f0 94 59 80 9f a4 89 9b 1d 40 6c c7 13 6c 50 e6 0b 48 42 db d3 28 0d 87 e5 f6 1b f5 17 Data Ascii: n/Y.ezSB7xl...0/`ga,GX%lX[424H^AFID!qo+oTV"N/v\|]L0bCFM5\|af=h%_Kdz@6E<c>jlcY@llPHB(
2024-07-05 05:55:28 UTC	16384	IN	Data Raw: d7 cf 4f f8 e1 a9 e7 4a 8e 6f 7b e7 5b 82 7f 82 10 7e ad 7a c5 9c 1c 05 07 c4 2b 20 3a 4e 47 d7 02 d4 58 7d df 5d 44 f8 bd 2f fe 0a 7e 5f 73 16 f1 7d ed 59 c4 dc a0 4c 76 66 23 49 29 3e cf ba 60 c4 e4 75 bd 1e 39 0f e5 dd 9a 31 8e 9a 71 2a 16 a0 15 11 c4 54 45 9f 70 a6 1f bc 1a f7 1a 07 48 76 81 57 71 1c 30 0e 30 9f 31 1a c8 40 d4 d7 ea 49 d3 1f 89 75 c6 99 20 0f 5b 61 2b 05 28 6d 9f 3e 8d 24 44 da af 89 08 c2 39 04 06 c8 8d 7a 0b d7 70 9c f4 fc 76 70 11 5f 23 88 6e 72 8b 2c be 35 bc d2 2d 4e fa 42 6b b9 07 00 25 ce dd 4c 26 c7 a8 cf 76 e0 9d 29 b0 da 30 56 a6 fe eb 49 c8 b1 39 18 07 ec 7f c1 ec 72 73 dd bd b4 eb 68 85 00 81 d7 13 4e 4d cc 0e f7 74 bd e4 c8 27 76 78 a5 6a 87 02 f5 dd 50 70 6e 89 d4 83 d1 ee 80 77 a8 7e 0e 1e 39 db e9 b6 f3 48 d3 b1 71 32 Data Ascii: OJo{[~z+ :NGX}]D/~_s}YLvf#I)>`u91q*TEpHvWq001@Iu [a+(m>$D9zpvp_#nr,5-NBk%L&v)0VI9rshNMt'vxjPpnw~9Hq2
2024-07-05 05:55:28 UTC	3340	IN	Data Raw: d6 fe 66 6d e9 5f 1b da 52 06 f1 48 b5 7e 13 01 e5 2f ab 6a 01 6f 29 7f a9 14 a2 c3 2c 50 13 c4 9b e7 0e 4a a4 50 62 2a fd 1f 60 8d fb e1 e0 d8 11 d8 bc 49 94 05 b2 19 ef 3e 64 a5 36 1b 87 3b 7b 3e 32 61 92 2c b7 eb 3f a7 2e 84 df f9 6a 25 86 7f 5d 53 f5 cc 7d 44 77 6f f5 b2 0b 9d f8 53 fc b9 94 1f 8e af 82 68 e4 6e 22 06 e5 b7 fa e4 92 bb 95 fc 70 b0 ae 64 ac a3 bb 73 f0 32 0c 77 c5 8d 17 dd 6c 4f a8 85 e3 0c 6b 96 2b 86 49 55 3c 19 da 91 93 6e a5 13 9d 8a ef 50 1d 9c ed 66 db 91 f3 10 48 43 db 51 b2 ed 44 ce b6 e4 55 cd 78 33 2a 9f 8a cd 26 67 c7 f1 15 4a 29 ab 9f 04 b1 dd 5f 80 d7 bc 80 48 71 2e 37 ae 70 e3 3a 82 ee 40 91 04 56 db 8e f9 ce 45 c2 b0 25 fe ad f5 8b d1 50 fc a3 48 94 56 8c a9 04 bd af 18 51 89 bc f0 9d 03 f6 35 30 d3 cb f7 6e c4 35 12 7a Data Ascii: fm_RH~/jo),PJPb`I>d6;{>2a,?.j%]S}DwoShn"pds2wlOk+IU<nPfHCQDUx3&gJ)_Hq.7p:@VE%PHVQ50n5z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49818	152.199.21.175	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:55:28 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:55:28 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3131508 Cache-Control: public, max-age=31536000 Content-MD5: PV+8QYbvRbBN6L+LpoYZZw== Content-Type: application/x-javascript Date: Fri, 05 Jul 2024 05:55:28 GMT Etag: 0x8DC7C3E9BFAA7DE Last-Modified: Fri, 24 May 2024 22:12:32 GMT Server: ECAcc (lhc/7971) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e60f2855-801e-00d7-5124-b2bf4e000000 x-ms-version: 2009-09-19 Content-Length: 141492 Connection: close
2024-07-05 05:55:28 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-07-05 05:55:28 UTC	1	IN	Data Raw: 6c Data Ascii: l
2024-07-05 05:55:28 UTC	16383	IN	Data Raw: 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 5f 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 64 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 5f 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 64 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c Data Ascii: e?document.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){_.isHistorySupported()&&d.history.pushState(e,n)},replaceState:function(e,n){_.isHistorySupported()&&d.history.replaceState(e,n)}},addEventL
2024-07-05 05:55:28 UTC	16383	IN	Data Raw: 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 41 4c 54 3a 22 38 30 30 34 33 34 45 32 22 2c 50 50 5f 45 5f 50 52 45 56 49 4f 55 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 33 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 57 52 4f 4e 47 3a 22 38 30 30 34 35 35 30 35 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 46 41 54 41 4c 3a 22 38 30 30 34 35 35 33 37 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 55 4e 41 55 54 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 33 38 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 4f Data Ascii: VALID_SMS:"800434E1",PP_E_INLINELOGIN_INVALID_ALT:"800434E2",PP_E_PREVIOUS_PASSWORD:"80041013",PP_E_HIP_VALIDATION_WRONG:"80045505",PP_E_HIP_VALIDATION_ERROR_FATAL:"80045537",PP_E_HIP_VALIDATION_ERROR_UNAUTHENTICATED:"80045538",PP_E_HIP_VALIDATION_ERROR_O
2024-07-05 05:55:28 UTC	16383	IN	Data Raw: 41 28 65 2c 6e 29 3b 30 3c 74 3f 65 2e 73 70 6c 69 63 65 28 74 2c 31 29 3a 30 3d 3d 3d 74 26 26 65 2e 73 68 69 66 74 28 29 7d 2c 77 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 26 26 53 2e 61 2e 44 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3e 53 2e 61 2e 41 28 6e 2c 65 29 26 26 6e 2e 70 75 73 68 28 65 29 7d 29 29 2c 6e 7d 2c 4d 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 3b 69 66 28 65 29 66 6f 72 28 76 61 72 20 6f 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 69 3b 6f 2b 2b 29 72 2e 70 75 73 68 28 6e 2e 63 61 6c 6c 28 74 2c 65 5b 6f 5d 2c 6f 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6a 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 3b Data Ascii: A(e,n);0<t?e.splice(t,1):0===t&&e.shift()},wc:function(e){var n=[];return e&&S.a.D(e,(function(e){0>S.a.A(n,e)&&n.push(e)})),n},Mb:function(e,n,t){var r=[];if(e)for(var o=0,i=e.length;o<i;o++)r.push(n.call(t,e[o],o));return r},jb:function(e,n,t){var r=[];
2024-07-05 05:55:28 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 5b 54 5d 29 26 26 65 21 3d 3d 50 5b 54 5d 26 26 65 21 3d 3d 53 2e 6f 2e 66 6e 5b 54 5d 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 6f 62 6a 65 63 74 20 74 68 61 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 61 6e 20 6f 62 73 65 72 76 61 62 6c 65 3b 20 70 6f 73 73 69 62 6c 79 20 66 72 6f 6d 20 61 6e 6f 74 68 65 72 20 4b 6e 6f 63 6b 6f 75 74 20 69 6e 73 74 61 6e 63 65 22 29 3b 72 65 74 75 72 6e 21 21 65 7d 2c 53 2e 5a 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 5b 54 5d 3d 3d 3d 50 5b 54 5d 7c 7c 65 5b 54 5d 3d 3d 3d 53 2e 6f 2e 66 6e 5b 54 5d 26 26 65 2e 4e 63 29 7d 2c 53 2e 62 28 22 6f 62 Data Ascii: function"==typeof e&&e[T])&&e!==P[T]&&e!==S.o.fn[T])throw Error("Invalid object that looks like an observable; possibly from another Knockout instance");return!!e},S.Za=function(e){return"function"==typeof e&&(e[T]===P[T]\|\|e[T]===S.o.fn[T]&&e.Nc)},S.b("ob
2024-07-05 05:55:28 UTC	16383	IN	Data Raw: 72 28 3b 72 3d 74 3b 29 74 3d 53 2e 68 2e 6e 65 78 74 53 69 62 6c 69 6e 67 28 72 29 2c 66 28 65 2c 72 29 7d 53 2e 69 2e 6d 61 28 6e 2c 53 2e 69 2e 48 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 6e 29 7b 76 61 72 20 74 3d 65 2c 72 3d 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 3b 72 26 26 53 2e 68 2e 53 63 28 6e 29 2c 28 72 7c 7c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 2e 6e 6f 64 65 48 61 73 42 69 6e 64 69 6e 67 73 28 6e 29 29 26 26 28 74 3d 70 28 6e 2c 6e 75 6c 6c 2c 65 29 2e 62 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 46 6f 72 44 65 73 63 65 6e 64 61 6e 74 73 29 2c 74 26 26 21 62 5b 53 2e 61 2e 52 28 6e 29 5d 26 26 64 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 53 2e 61 2e 67 2e 55 62 28 65 2c 45 2c 7b 7d Data Ascii: r(;r=t;)t=S.h.nextSibling(r),f(e,r)}S.i.ma(n,S.i.H)}function f(e,n){var t=e,r=1===n.nodeType;r&&S.h.Sc(n),(r\|\|S.ga.instance.nodeHasBindings(n))&&(t=p(n,null,e).bindingContextForDescendants),t&&!b[S.a.R(n)]&&d(t,n)}function p(e,n,t){var o,i=S.a.g.Ub(e,E,{}
2024-07-05 05:55:28 UTC	16383	IN	Data Raw: 2c 6c 7c 7c 28 73 3f 70 2e 6c 65 6e 67 74 68 26 26 72 28 29 2e 6c 65 6e 67 74 68 3c 70 2e 6c 65 6e 67 74 68 3a 70 2e 6c 65 6e 67 74 68 26 26 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3f 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 21 3d 3d 70 5b 30 5d 3a 70 2e 6c 65 6e 67 74 68 7c 7c 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 26 26 53 2e 75 2e 47 28 53 2e 61 2e 46 62 2c 6e 75 6c 6c 2c 5b 65 2c 22 63 68 61 6e 67 65 22 5d 29 2c 28 6c 7c 7c 53 2e 53 2e 59 61 28 29 29 26 26 53 2e 69 2e 6d 61 28 65 2c 53 2e 69 2e 48 29 2c 53 2e 61 2e 77 64 28 65 29 2c 75 26 26 32 30 3c 4d 61 74 68 2e 61 62 73 28 75 2d 65 2e 73 63 72 6f 6c 6c 54 6f 70 29 26 26 28 65 2e 73 63 72 6f 6c 6c 54 6f 70 3d Data Ascii: ,l\|\|(s?p.length&&r().length<p.length:p.length&&0<=e.selectedIndex?S.w.M(e.options[e.selectedIndex])!==p[0]:p.length\|\|0<=e.selectedIndex)&&S.u.G(S.a.Fb,null,[e,"change"]),(l\|\|S.S.Ya())&&S.i.ma(e,S.i.H),S.a.wd(e),u&&20<Math.abs(u-e.scrollTop)&&(e.scrollTop=
2024-07-05 05:55:28 UTC	16383	IN	Data Raw: 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 76 61 72 20 6f 3d 74 28 37 29 2c 69 3d 74 28 30 29 2c 61 3d 74 28 31 29 2c 73 3d 74 28 31 37 29 2c 75 3d 74 28 39 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 2c 63 3d 69 2e 53 74 72 69 6e 67 2c 6c 3d 61 2e 48 65 6c 70 65 72 2c 64 3d 6f 2e 4b 65 79 43 6f 64 65 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3f 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3a 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 6e 2e 61 70 70 6c 79 45 78 74 65 6e 73 69 6f 6e 73 3d 66 75 Data Ascii: structor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}var o=t(7),i=t(0),a=t(1),s=t(17),u=t(9).getInstance(window.ServerData),c=i.String,l=a.Helper,d=o.KeyCode;function f(e){e.preventDefault?e.preventDefault():e.returnValue=!1}n.applyExtensions=fu
2024-07-05 05:55:28 UTC	10427	IN	Data Raw: 7c 63 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 41 70 69 52 65 71 75 65 73 74 3b 76 61 72 20 6c 3d 7b 7d 3b 6c 2e 72 65 71 75 65 73 74 54 69 6d 65 6f 75 74 3d 72 2c 6f 26 26 28 6c 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 6f 29 2c 6c 2e 72 65 71 75 65 73 74 54 79 70 65 3d 74 2c 69 26 26 28 6c 2e 6e 6f 43 61 6c 6c 62 61 63 6b 3d 21 30 29 2c 61 2e 65 76 65 6e 74 41 72 67 73 3d 6c 2c 61 2e 65 76 65 6e 74 4f 70 74 69 6f 6e 73 3d 73 2c 75 2e 74 72 61 63 65 42 65 67 69 6e 52 65 71 75 65 73 74 28 65 2c 61 29 7d 7d 65 2e 65 76 65 6e 74 44 61 74 61 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 6e 2c 74 2c 72 2c 6f 29 7b 75 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 28 65 2c 6e 2c 74 2c 72 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 6e 29 7b 76 61 72 20 74 3d Data Ascii: \|c.EventLevel.ApiRequest;var l={};l.requestTimeout=r,o&&(l.contentType=o),l.requestType=t,i&&(l.noCallback=!0),a.eventArgs=l,a.eventOptions=s,u.traceBeginRequest(e,a)}}e.eventData=a}function C(e,n,t,r,o){u.traceEndRequest(e,n,t,r,o)}function w(e,n){var t=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49850	152.199.21.175	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:55:33 UTC	602	OUT	GET /16.000/content/js/MeControl_Ye0OByYXt18CLWy1Pqhd4Q2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:55:33 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2645685 Cache-Control: public, max-age=31536000 Content-MD5: PS13nXT03y6zfgtuT9Kz1Q== Content-Type: application/x-javascript Date: Fri, 05 Jul 2024 05:55:33 GMT Etag: 0x8DC7F9D3D11D389 Last-Modified: Wed, 29 May 2024 05:07:29 GMT Server: ECAcc (lhc/7956) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7348d602-c01e-00d3-078f-b61346000000 x-ms-version: 2009-09-19 Content-Length: 17287 Connection: close
2024-07-05 05:55:33 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 68 58 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 74 72 75 65 3a 61 3d 3d 30 7c 7c 61 3d 3d 66 61 6c 73 65 7c 7c 61 3d 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 44 75 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 5f 4a 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 44 28 61 29 7b 72 65 74 75 72 6e 20 22 66 75 6e 63 74 69 6f 6e 22 2e 5f 66 30 28 74 79 70 65 6f 66 20 61 2c 74 72 75 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 46 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 5f 42 45 28 61 29 7b 72 65 74 75 72 6e 20 5f 68 58 28 61 29 26 26 5f Data Ascii: function _hX(a){return a?true:a==0\|\|a==false\|\|a==""}function _Du(a,b){return _hX(a)?a:b}function _J(a){return a instanceof Array}function _BD(a){return "function"._f0(typeof a,true)}function _F(a){return typeof a=="string"}function _BE(a){return _hX(a)&&_
2024-07-05 05:55:33 UTC	904	IN	Data Raw: 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3d 53 65 72 76 65 72 44 61 74 61 2e 63 44 3b 69 66 28 64 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 64 7d 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 64 56 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 63 2c 61 29 7b 76 61 72 20 62 3d 7b 65 72 72 6f 72 3a 64 2c 75 73 65 72 4c 69 73 74 3a 5b 5d 2c 70 6f 73 74 4c 6f 67 6f 75 74 52 65 64 69 72 65 63 74 55 72 69 56 61 6c 69 64 3a 63 7d 3b 69 66 28 61 29 62 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3d 61 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 7d 2c 5f 66 33 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 4d 65 43 6f 6e 74 72 6f 6c 2e 5f 6a 51 28 61 2e 6f 72 69 67 69 6e 29 21 3d 3d 4d 65 43 6f 6e 74 72 6f 6c 2e Data Ascii: directUriValid=ServerData.cD;if(d)b.performance=d}return JSON.stringify(b)},_dV:function(d,c,a){var b={error:d,userList:[],postLogoutRedirectUriValid:c};if(a)b.performance=a;return JSON.stringify(b)},_f3:function(a){if(MeControl._jQ(a.origin)!==MeControl.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	50080	13.107.246.42	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:11 UTC	1475	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; ak_bmsc=17701768D2288A18C404A699826805F5~000000000000000000000000000000~YAAQvI4UArUvanSQAQAA/BB2gRi78VWk02BMQWOBsmx+5x1B57V3ydaBqRo7Bve6bSHZ4ScI7UriMlESGemf+2OAbi70bwWhYdSwqlW/ZFF4Zt7P4K3F+oT8Cv4I+LXEdzO2jBn34aDGLLxyuYYmM4JrXK4jjGncocFZs04HEIcyJpRT6/AVHBtbNTdPXYrfsqIN1KY3uKTCJo9ODgcnYEhy1Mh/KEwnkhfUduQsQ56uwDXsFu5ANdXozVBH/t7IzK4Nsv67pKcez1rjiH+hGOPbKcqbX7+HGLky+xSAik81x+eY5d4OytyUQ+cyRqcA6yE/oPecfwoSmCqQM+d8a+hHQJSOXheY/ouSA++zDp6rjbTE0D/+w9zff5Q=; MS0=203ae4f83d6245fd92ff0d1112d881f2; bm_sv=8285EBDF91693D0D2DFAF2259D7EDF3D~YAAQvI4UAqgwanSQAQAAQ312gRhy4k2O1CRrb6JbIQY5hDPsgRsW0bFlXqhqH2+FQePmdH0xkflwK4e5J0sYX6vnxBqQPCJjVca7xe3qqO8cGLbSQk5JYZkjk0Ru7VhElIJA/KPAZteHxs/p2PK7Urs3SUoOIuefS7l/jwtR2Xdq7ZNIpcQLo3SBQcBhLTM8elDl/huDtjzWxpLzGFw89q/N4Ele5HMtVpFfZEvzYd6sfDvRha73fP/2gmPw0sxtVwIj~1
2024-07-05 05:56:11 UTC	713	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:11 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 39041 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7a343e86-801e-00b4-2e45-cee3b3000000 x-ms-version: 2009-09-19 x-azure-ref: 20240705T055611Z-157bfc59976d2vnn3t284pk5sn0000000ha000000000q3ht Accept-Ranges: bytes
2024-07-05 05:56:11 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-07-05 05:56:11 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-07-05 05:56:11 UTC	82	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" +
2024-07-05 05:56:11 UTC	16384	IN	Data Raw: 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 66 6f 63 75 73 3a 3a 62 65 66 6f 72 65 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 Data Ascii: label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:focus::before {\n border: 1px solid "+e["radio-button-hover-border
2024-07-05 05:56:11 UTC	4196	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 61 6c 6c 28 65 29 7d 29 29 7d 2c 65 2e 63 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4d 53 43 43 22 2c 65 Data Ascii: .length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEventListener(t,o):e.attachEvent("on"+t,(function(){o.call(e)}))},e.cookieName="MSCC",e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	50078	13.107.246.60	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:14 UTC	562	OUT	GET /meversion?partner=OfficeProducts&market=en-us&uhf=1 HTTP/1.1 Host: mem.gfx.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:14 UTC	692	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:14 GMT Content-Type: application/javascript Content-Length: 30289 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=7200 Expires: Fri, 05 Jul 2024 06:39:11 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240705T055614Z-157bfc59976xj6bdta7ycbnc40000000013000000000mzt3 x-fd-int-roxy-purgeid: 38334287 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-07-05 05:56:14 UTC	15692	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 30 38 36 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 6f 66 66 69 63 65 70 72 6f 64 75 63 74 73 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"officeproducts","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rw
2024-07-05 05:56:14 UTC	14597	IN	Data Raw: 65 5b 65 5d 3d 7b 69 64 3a 65 2c 62 75 6e 64 6c 65 50 72 6f 6d 69 73 65 3a 6e 2c 65 78 70 6f 72 74 73 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 3b 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 72 3d 5b 5d 2c 6e 29 3a 28 72 3d 6e 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 47 65 2e 70 75 73 68 28 7b 69 64 3a 65 2c 64 65 70 73 3a 6e 2c 66 61 63 74 6f 72 79 3a 74 7d 29 7d 28 65 2c 72 2c 6f 29 7d 76 61 72 20 4b 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 Data Ascii: e[e]={id:e,bundlePromise:n,exports:t}}function ze(e,n,t){var r,o;o="function"==typeof n?(r=[],n):(r=n,t),function(e,n,t){Ge.push({id:e,deps:n,factory:t})}(e,r,o)}var Ke={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-cor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	50081	35.186.249.72	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:23 UTC	565	OUT	GET /A1133099-331c-4cdf-89b0-06dc20e168021.js HTTP/1.1 Host: d.impactradius-event.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:23 UTC	900	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:23 GMT Cache-Control: public,max-age=900,s-maxage=300 Expires: Fri, 05 Jul 2024 06:01:23 GMT Last-Modified: Fri, 22 Mar 2024 16:06:02 GMT ETag: W/"0fc710d07e78000c36b701e1d5df54f7" Vary: Accept-Encoding x-goog-generation: 1711123562168785 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 15547 Content-Type: text/javascript; charset=utf-8 x-goog-hash: crc32c=f4aoPA== x-goog-hash: md5=D8cQ0H54AAw2twHh1d9U9w== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: ACJd0Nq-djzhRS2vhvDGPtBIB_UP2ubw8m-j5krpBrU_fOaqlnq-JoxbjuHIrCTVYILmicTNhoU Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-07-05 05:56:23 UTC	490	IN	Data Raw: 61 36 33 0d 0a 2f 2a 21 20 40 62 75 69 6c 64 20 65 34 33 36 65 35 62 34 20 40 64 61 74 65 20 32 30 32 34 2d 30 33 2d 32 32 54 31 36 3a 30 31 3a 33 32 2e 37 36 38 5a 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 7b 33 32 37 32 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 63 3d 72 28 33 33 32 38 29 2c 66 3d 72 28 34 39 39 34 29 2c 64 3d 72 28 39 37 32 35 29 2c 73 3d 72 28 36 36 31 30 29 2c 6c 3d 72 28 34 35 34 36 29 2c 76 3d 72 28 33 31 35 39 29 2e 74 2c 6d 3d 72 28 37 37 38 36 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 76 61 72 20 6e 3d 6e 65 77 20 44 61 74 65 2c 74 3d 66 28 69 2e 69 2e 7a 39 29 2c 72 3d 73 28 69 2e 6f 29 2c 65 3d 6c 28 72 2c 69 2e Data Ascii: a63/! @build e436e5b4 @date 2024-03-22T16:01:32.768Z /!function(){"use strict";var r={3272:function(n,t,r){var c=r(3328),f=r(4994),d=r(9725),s=r(6610),l=r(4546),v=r(3159).t,m=r(7786);n.exports=function(i,o){var n=new Date,t=f(i.i.z9),r=s(i.o),e=l(r,i.
2024-07-05 05:56:23 UTC	1390	IN	Data Raw: 29 2c 76 3d 72 28 38 37 34 32 29 2c 6d 3d 72 28 33 36 33 38 29 2c 70 3d 72 28 39 33 33 36 29 2c 67 3d 72 28 37 32 31 39 29 2c 79 3d 72 28 32 35 37 38 29 2c 24 3d 72 28 39 39 37 29 2c 68 3d 72 28 33 31 35 39 29 2e 68 2c 62 3d 72 28 35 38 31 34 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 74 3d 68 28 62 2c 74 29 2c 65 3d 70 28 6d 28 6e 2c 74 2c 64 29 2c 7b 64 65 62 75 67 3a 21 30 7d 29 2c 69 3d 7b 49 3a 21 31 7d 2c 6f 3d 7b 6b 3a 69 2c 76 3a 74 2c 69 3a 6e 2c 6f 3a 65 2c 44 3a 79 28 29 2c 67 3a 6c 28 65 2c 69 29 7d 2c 75 3d 73 28 6f 2c 72 29 2c 61 3d 5b 5d 2c 63 3d 28 65 28 22 61 70 70 22 2c 67 2e 43 2c 7b 61 63 69 64 3a 6e 2e 61 63 69 64 2c 7a 6e 3a 22 65 34 33 36 65 35 62 34 22 2c 7a 6f 3a 2b 6e 65 77 20 Data Ascii: ),v=r(8742),m=r(3638),p=r(9336),g=r(7219),y=r(2578),$=r(997),h=r(3159).h,b=r(5814);n.exports=function(n,t,r){var t=h(b,t),e=p(m(n,t,d),{debug:!0}),i={I:!1},o={k:i,v:t,i:n,o:e,D:y(),g:l(e,i)},u=s(o,r),a=[],c=(e("app",g.C,{acid:n.acid,zn:"e436e5b4",zo:+new
2024-07-05 05:56:23 UTC	786	IN	Data Raw: 75 67 7c 7c 64 29 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 7d 3b 72 65 74 75 72 6e 20 63 2e 64 65 62 75 67 3d 64 2c 63 2e 65 72 72 6f 72 3d 64 2c 63 2e 69 6e 66 6f 3d 64 2c 63 2e 77 61 72 6e 3d 64 2c 28 63 2e 50 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 28 74 3d 74 7c 7c 7b 7d 29 2e 74 69 6d 65 73 74 61 6d 70 3f 31 3a 32 2c 69 3d 74 2e 64 65 62 75 67 3f 30 3a 31 2c 72 3d 30 2c 6f 3d 61 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 2b 2b 72 29 6e 5b 61 5b 72 5d 5b 30 5d 5d 26 26 6e 5b 61 5b 72 5d 5b 30 5d 5d 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 5b 72 5d 2e 73 6c 69 63 65 28 65 2c 61 5b 72 5d 2e 6c 65 6e 67 74 68 2d 69 29 29 3b 66 6f 72 28 72 3d 30 2c 6f 3d 6c 2e Data Ascii: ug\|\|d).apply(null,[].slice.call(arguments))};return c.debug=d,c.error=d,c.info=d,c.warn=d,(c.P=function(n,t){for(var e=(t=t\|\|{}).timestamp?1:2,i=t.debug?0:1,r=0,o=a.length;r<o;++r)n[a[r][0]]&&n[a[r][0]].apply(null,a[r].slice(e,a[r].length-i));for(r=0,o=l.
2024-07-05 05:56:23 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 65 3d 6f 2e 48 28 6f 2e 47 28 29 29 2c 72 3d 72 2e 59 28 6e 75 6c 6c 2c 65 2e 57 29 3b 69 66 28 72 26 26 75 28 65 2e 56 5b 72 2e 67 70 5d 29 26 26 21 75 28 65 2e 56 5b 72 2e 67 63 7c 7c 22 69 72 63 6c 69 63 6b 69 64 22 5d 29 29 72 65 74 75 72 6e 20 6e 28 69 28 22 4e 6f 20 67 61 74 65 77 61 79 43 6c 69 63 6b 49 64 20 66 6f 75 6e 64 20 66 6f 72 20 61 20 67 61 74 65 77 61 79 43 6c 69 63 6b 20 65 76 65 6e 74 22 2c 7b 64 6f 6d 61 69 6e 3a 65 2e 4b 2c 63 69 64 3a 72 2e 69 64 2c 74 64 3a 6f 2e 4a 28 72 29 7d 29 29 3b 6e 28 29 7d 7d 2c 37 37 38 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 Data Ascii: 8000ports=function(n,t,r){var e=o.H(o.G()),r=r.Y(null,e.W);if(r&&u(e.V[r.gp])&&!u(e.V[r.gc\|\|"irclickid"]))return n(i("No gatewayClickId found for a gatewayClick event",{domain:e.K,cid:r.id,td:o.J(r)}));n()}},7786:function(n){n.exports=function(n,t){retu
2024-07-05 05:56:23 UTC	1390	IN	Data Raw: 7c 21 6f 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 75 28 29 3b 65 2e 66 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 74 3d 6f 2e 6c 65 6e 67 74 68 3b 6e 3c 74 3b 2b 2b 6e 29 7b 76 61 72 20 72 3d 6f 5b 6e 5d 3b 69 66 28 72 2e 75 26 26 61 2e 67 2e 73 6e 2e 64 6e 28 72 2e 75 2c 6e 75 6c 6c 2c 7b 74 61 67 3a 22 69 66 22 3d 3d 3d 72 2e 74 3f 22 69 66 72 61 6d 65 22 3a 22 69 6d 61 67 65 22 7d 2c 75 29 2c 21 72 2e 63 29 72 65 74 75 72 6e 20 75 28 29 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 65 3d 28 65 2e 69 64 3d 22 69 6d 70 61 63 74 50 6f 73 74 62 61 63 6b 46 72 61 6d 65 22 2b 6e 2c 65 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 28 65 2e 63 Data Ascii: \|!o.length)return u();e.fn(function(){for(var n=0,t=o.length;n<t;++n){var r=o[n];if(r.u&&a.g.sn.dn(r.u,null,{tag:"if"===r.t?"iframe":"image"},u),!r.c)return u();var e=document.createElement("iframe"),e=(e.id="impactPostbackFrame"+n,e.contentDocument\|\|(e.c
2024-07-05 05:56:23 UTC	1390	IN	Data Raw: 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 7c 7c 6e 5b 72 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 2d 31 3c 69 2e 78 6e 28 74 2c 72 29 7c 7c 65 2e 70 75 73 68 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 5b 72 5d 29 29 3b 72 65 74 75 72 6e 20 65 7d 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 29 7b 76 61 72 20 69 3d 65 5b 30 5d 7c 7c 7b 7d 2c 65 3d 65 5b 31 5d 7c 7c 7b 7d 2c 6f 3d 72 2e 59 28 69 2e 63 61 6d 70 61 69 67 6e 49 64 7c 7c 72 2e 49 6e 28 29 29 7c 7c 7b 7d 2c 6f 3d 66 28 7b 6f 72 67 3a 69 2e 6f 72 67 49 64 7c 7c 6f 2e 66 71 7c 7c 22 6e 6f 74 5f 73 65 74 22 2c 72 74 3a 69 2e 72 65 71 75 65 73 74 54 79 70 Data Ascii: hasOwnProperty(r)\|\|n[r]===undefined\|\|-1<i.xn(t,r)\|\|e.push(encodeURIComponent(r)+"="+encodeURIComponent(n[r]));return e};n.exports=function(n,t,r,e){var i=e[0]\|\|{},e=e[1]\|\|{},o=r.Y(i.campaignId\|\|r.In())\|\|{},o=f({org:i.orgId\|\|o.fq\|\|"not_set",rt:i.requestTyp
2024-07-05 05:56:23 UTC	1390	IN	Data Raw: 65 72 6d 3a 7b 22 64 65 66 61 75 6c 74 22 3a 7b 70 3a 5b 22 6b 77 22 5d 7d 7d 7d 2c 6e 7d 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 76 61 72 20 61 3d 28 75 3d 75 7c 7c 5b 5d 29 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 7b 54 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 41 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 72 3d 30 3b 72 3c 61 3b 2b 2b 72 29 6e 28 75 5b 72 5d 29 26 26 74 2e 70 75 73 68 28 75 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 52 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 2c 65 2c 69 3d 63 2e 71 6e 28 74 7c 7c 22 22 29 3b 69 66 28 6e 29 66 6f 72 28 65 3d 30 3b 65 3c 61 3b 2b 2b 65 29 69 66 28 28 72 3d 75 5b 65 5d 29 2e 69 64 3d 3d Data Ascii: erm:{"default":{p:["kw"]}}},n};n.exports=function(u){var a=(u=u\|\|[]).length;return{Tn:function(){return u},An:function(n){for(var t=[],r=0;r<a;++r)n(u[r])&&t.push(u[r]);return t},Rn:function(n,t){var r,e,i=c.qn(t\|\|"");if(n)for(e=0;e<a;++e)if((r=u[e]).id==
2024-07-05 05:56:23 UTC	1390	IN	Data Raw: 6f 6e 73 65 6e 74 53 74 61 74 75 73 3a 74 7d 29 29 3b 73 3d 74 3b 74 3d 6f 2e 48 6e 28 65 2e 63 6c 69 63 6b 49 64 2c 65 29 3f 5b 65 5d 3a 5b 5d 3b 6e 3d 3d 3d 6c 2e 47 6e 7c 7c 73 3d 3d 3d 76 2e 46 6e 3f 74 3d 6f 2e 51 6e 28 29 3a 73 3d 76 2e 59 6e 2c 75 28 72 2c 7b 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 3a 73 2c 66 70 63 3a 61 2e 24 6e 28 73 3d 3d 3d 76 2e 46 6e 29 7c 7c 6e 75 6c 6c 2c 65 76 65 6e 74 73 3a 74 7d 2c 69 29 7d 2c 57 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 69 66 28 73 3d 76 2e 4f 6e 2c 21 6f 2e 56 6e 28 74 29 29 72 65 74 75 72 6e 20 61 2e 55 6e 28 73 29 2c 72 28 67 28 22 6e 6f 74 20 61 20 6e 65 77 20 6c 6f 79 61 6c 74 79 20 63 6f 6e 73 65 6e 74 20 65 76 65 6e 74 22 29 29 3b 75 28 6e 2c 7b 63 6f 6e 73 65 6e 74 53 74 61 74 75 73 Data Ascii: onsentStatus:t}));s=t;t=o.Hn(e.clickId,e)?[e]:[];n===l.Gn\|\|s===v.Fn?t=o.Qn():s=v.Yn,u(r,{consentStatus:s,fpc:a.$n(s===v.Fn)\|\|null,events:t},i)},Wn:function(n,t,r){if(s=v.On,!o.Vn(t))return a.Un(s),r(g("not a new loyalty consent event"));u(n,{consentStatus
2024-07-05 05:56:23 UTC	1390	IN	Data Raw: 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 72 3d 30 2c 65 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 65 3b 2b 2b 72 29 7b 76 61 72 20 69 3d 75 28 74 5b 72 5d 29 3b 69 66 28 69 5b 30 5d 3d 3d 3d 6e 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 63 28 69 5b 31 5d 29 7d 63 61 74 63 68 28 6f 29 7b 7d 72 65 74 75 72 6e 20 69 5b 31 5d 7d 7d 7d 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 66 28 61 29 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 69 66 28 74 29 74 72 79 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 2c 65 3d Data Ascii: r t=document.cookie.split(";"),r=0,e=t.length;r<e;++r){var i=u(t[r]);if(i[0]===n){try{return c(i[1])}catch(o){}return i[1]}}};n.exports=function(o){var u=function(){var n=f(a);if(n)return n;var t=window.location.hostname;if(t)try{for(var r=t.split("."),e=
2024-07-05 05:56:23 UTC	1390	IN	Data Raw: 22 29 2c 69 3d 6e 65 77 20 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 2c 6f 3d 30 3b 65 2e 72 65 76 65 72 73 65 28 29 3b 66 6f 72 28 76 61 72 20 75 3d 30 2c 61 3d 65 2e 6c 65 6e 67 74 68 3b 75 3c 61 3b 2b 2b 75 29 28 72 3d 64 5b 65 5b 75 5d 5d 29 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 28 69 5b 75 5d 3d 63 5b 72 3d 28 72 2b 6f 29 25 66 5d 2c 6f 3d 72 29 3a 69 5b 75 5d 3d 65 5b 75 5d 3b 72 65 74 75 72 6e 22 7e 22 2b 69 2e 6a 6f 69 6e 28 22 22 29 7d 7d 28 29 2c 24 6e 3a 73 2c 76 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 75 5b 30 5d 3f 70 61 72 73 65 49 6e 74 28 75 5b 31 5d 2c 31 30 29 3a 22 22 3b 72 65 74 75 72 6e 20 75 5b 30 5d 26 26 74 3c 6e 7d 2c 70 6e 3a 61 2c 62 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 28 73 28 29 7c 7c 76 28 29 29 7d Data Ascii: "),i=new Array(e.length),o=0;e.reverse();for(var u=0,a=e.length;u<a;++u)(r=d[e[u]])!==undefined?(i[u]=c[r=(r+o)%f],o=r):i[u]=e[u];return"~"+i.join("")}}(),$n:s,vn:function(){var n=u[0]?parseInt(u[1],10):"";return u[0]&&t<n},pn:a,bn:function(){c(s()\|\|v())}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	50176	18.200.174.228	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:24 UTC	721	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1720158982869 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:24 UTC	823	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:24 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6666 Connection: close X-TID: BsRYl4pZSKQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.microsoft.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-1-v062-0de694321.edge-irl1.demdex.com 3 ms set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:24 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:24 UTC	6666	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 36 39 30 33 33 35 39 34 39 36 31 32 36 39 30 31 34 31 36 34 31 36 31 34 37 38 31 37 39 33 34 39 32 32 31 38 36 39 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"69033594961269014164161478179349221869","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	50179	157.240.0.35	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:24 UTC	660	OUT	GET /tr?id=1770559986549030&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1720158983054 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:24 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 05 Jul 2024 05:56:24 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	50180	157.240.0.35	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:24 UTC	653	OUT	GET /tr?id=undefined&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1720158983054 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:24 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 05 Jul 2024 05:56:24 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	50181	157.240.0.35	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:24 UTC	652	OUT	GET /tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1720158983054 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:24 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=102, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 05 Jul 2024 05:56:24 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50185	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:25 UTC	519	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1720158982869 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930
2024-07-05 05:56:25 UTC	713	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:25 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6649 Connection: close X-TID: BVcV2JfbQzE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-1-v062-0e609ec7b.edge-irl1.demdex.com 3 ms set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:25 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:25 UTC	6649	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 36 39 30 33 33 35 39 34 39 36 31 32 36 39 30 31 34 31 36 34 31 36 31 34 37 38 31 37 39 33 34 39 32 32 31 38 36 39 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"69033594961269014164161478179349221869","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	50183	157.240.0.35	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:25 UTC	645	OUT	GET /tr?id=undefined&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1720158983054 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:25 UTC	581	IN	HTTP/1.1 302 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Date: Fri, 05 Jul 2024 05:56:25 GMT Set-Cookie: Location: /tr?redirect=0&ts=1720158983054&dpost=0&dpoco=0&dpo=LDU&ev=PageView&id=undefined Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Content-Type: text/plain Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50186	18.200.174.228	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:25 UTC	774	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: mscom.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930
2024-07-05 05:56:25 UTC	606	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:25 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: IBLi0uM1SQY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Wed, 3 Jul 2024 06:32:08 GMT DCS: dcs-prod-irl1-1-v062-0d2d75d82.edge-irl1.demdex.com 2 ms
2024-07-05 05:56:25 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50187	63.140.62.222	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:25 UTC	748	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=69033594961269014164161478179349221869&ts=1720158984015 HTTP/1.1 Host: msftenterprise.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:25 UTC	442	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.microsoft.com access-control-allow-credentials: true date: Fri, 05 Jul 2024 05:56:25 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-07-05 05:56:25 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50188	157.240.253.35	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:25 UTC	423	OUT	GET /tr?id=1770559986549030&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1720158983054 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:25 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=88, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 05 Jul 2024 05:56:25 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50189	157.240.253.35	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:25 UTC	416	OUT	GET /tr?id=undefined&ev=PixelInitialized&dpo=LDU&dpoco=0&dpost=0&ts=1720158983054 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:25 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=89, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 05 Jul 2024 05:56:25 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50191	157.240.253.35	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:25 UTC	415	OUT	GET /tr?id=1770559986549030&ev=PageView&dpo=LDU&dpoco=0&dpost=0&ts=1720158983054 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:25 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=91, rtx=0, c=10, mss=1392, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 05 Jul 2024 05:56:25 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50200	35.244.174.68	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	637	OUT	GET /365868.gif?partner_uid=68751917230853503114135629145946568930 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:26 UTC	736	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomNjg3NTE5MTcyMzA4NTM1MDMxMTQxMzU2MjkxNDU5NDY1Njg5MzAQABoNCIqWnrQGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=atOjBcyCYn2GsdaqsxED1hSZseGFHGGyDailxYB1zV4=; Path=/; Domain=rlcdn.com; Expires=Sat, 05 Jul 2025 05:56:26 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 03 Sep 2024 05:56:26 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 05 Jul 2024 05:56:26 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50196	66.235.152.225	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	2581	OUT	POST /rest/v1/delivery?client=microsoftmscompoc&sessionId=432ece6dcac6428aa4d7ff4ce502936a&version=2.4.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive Content-Length: 1279 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; ak_bmsc=17701768D2288A18C404A699826805F5~000000000000000000000000000000~YAAQvI4UArUvanSQAQAA/BB2gRi78VWk02BMQWOBsmx+5x1B57V3ydaBqRo7Bve6bSHZ4ScI7UriMlESGemf+2OAbi70bwWhYdSwqlW/ZFF4Zt7P4K3F+oT8Cv4I+LXEdzO2jBn34aDGLLxyuYYmM4JrXK4jjGncocFZs04HEIcyJpRT6/AVHBtbNTdPXYrfsqIN1KY3uKTCJo9ODgcnYEhy1Mh/KEwnkhfUduQsQ56uwDXsFu5ANdXozVBH/t7IzK4Nsv67pKcez1rjiH+hGOPbKcqbX7+HGLky+xSAik81x+eY5d4OytyUQ+cyRqcA6yE/oPecfwoSmCqQM+d8a+hHQJSOXheY/ouSA++zDp6rjbTE0D/+w9zff5Q=; MS0=203ae4f83d6245fd92ff0d1112d881f2; bm_sv=8285EBDF91693D0D2DFAF2259D7EDF3D~YAAQvI4UAqgwanSQAQAAQ312gRhy4k2O1CRrb6JbIQY5hDPsgRsW0bFlXqhqH2+FQePmdH0xkflwK4e5J0sYX6vnxBqQPCJjVca7xe3qqO8cGLbSQk5JYZkjk0Ru7VhElIJA/KPAZteHxs/p2PK7Urs3SUoOIuefS7l/jwtR2Xdq7ZNIpcQLo3SBQcBhLTM8elDl/huDtjzWxpLzGFw89q/N4Ele5HMtVpFfZEvzYd6sfDvRha73fP/2gmPw0sxtVwIj~1; fptctx2=H3ihr9e92IdW6yd1ZgQ9S6iHaRiejIdk0aIJJ5j7uH7CWNo7dqr52PwJZry1cbhygyB%252brABH3rQfTxQrePXgCM [TRUNCATED]
2024-07-05 05:56:26 UTC	1279	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 39 62 34 63 61 39 35 38 35 33 35 34 65 32 33 61 62 37 64 31 66 37 32 37 30 30 31 39 30 66 61 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 2d 32 34 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 Data Ascii: {"requestId":"e9b4ca9585354e23ab7d1f72700190fa","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":-240,"channel":"web","screen":{"width":1280,"hei
2024-07-05 05:56:26 UTC	843	IN	HTTP/1.1 200 OK date: Fri, 05 Jul 2024 05:56:26 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.microsoft.com access-control-allow-credentials: true x-request-id: e2e07326-5e4b-4e3d-a084-a59017f3d8e8 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-07-05 05:56:26 UTC	9048	IN	Data Raw: 32 33 35 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 39 62 34 63 61 39 35 38 35 33 35 34 65 32 33 61 62 37 64 31 66 37 32 37 30 30 31 39 30 66 61 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6d 69 63 72 6f 73 6f 66 74 6d 73 63 6f 6d 70 6f 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 34 33 32 65 63 65 36 64 63 61 63 36 34 32 38 61 61 34 64 37 66 66 34 63 65 35 30 32 39 33 36 61 2e 33 37 5f 30 22 2c 22 74 68 69 72 64 50 61 72 74 79 49 64 22 3a 22 37 34 39 65 65 65 36 30 33 39 63 35 34 38 39 62 39 64 62 33 30 30 30 63 37 61 62 33 66 33 39 39 22 2c 22 63 75 73 74 6f 6d 65 72 49 64 73 22 3a 5b 7b 22 69 64 22 3a 22 37 34 39 65 65 65 36 30 33 39 63 35 34 38 39 62 39 64 62 33 30 30 30 63 37 61 62 33 66 33 39 39 22 Data Ascii: 2350{"status":200,"requestId":"e9b4ca9585354e23ab7d1f72700190fa","client":"microsoftmscompoc","id":{"tntId":"432ece6dcac6428aa4d7ff4ce502936a.37_0","thirdPartyId":"749eee6039c5489b9db3000c7ab3f399","customerIds":[{"id":"749eee6039c5489b9db3000c7ab3f399"
2024-07-05 05:56:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50198	18.200.174.228	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	1015	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=69033594961269014164161478179349221869&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%01749eee6039c5489b9db3000c7ab3f399%012&d_cid_ic=MC1%01749eee6039c5489b9db3000c7ab3f399%012&ts=1720158985010 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dextp=358-1-1720158984986
2024-07-05 05:56:26 UTC	824	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:26 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6666 Connection: close X-TID: UfzLcCr5RnI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.microsoft.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-1-v062-03737a6b6.edge-irl1.demdex.com 11 ms set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:26 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:26 UTC	6666	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 36 39 30 33 33 35 39 34 39 36 31 32 36 39 30 31 34 31 36 34 31 36 31 34 37 38 31 37 39 33 34 39 32 32 31 38 36 39 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"69033594961269014164161478179349221869","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50195	157.240.0.35	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	656	OUT	GET /tr?redirect=0&ts=1720158983054&dpost=0&dpoco=0&dpo=LDU&ev=PageView&id=undefined HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:26 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 05 Jul 2024 05:56:26 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50199	63.140.62.27	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	491	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=69033594961269014164161478179349221869&ts=1720158984015 HTTP/1.1 Host: msftenterprise.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:26 UTC	378	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 05 Jul 2024 05:56:26 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-07-05 05:56:26 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50197	37.252.171.52	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	644	OUT	GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:26 UTC	1493	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 05 Jul 2024 05:56:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID AN-X-Request-Uuid: 74976087-d163-47a9-b739-eb91fc827456 Set-Cookie: XANDR_PANID=HNkAzNizP5u1cR5RixtMwt64PWHTdlWANFZbzeKHi5KBjLLSIfAINX1tJ_PZ5lcC4lmHbgFtEodjV1QmluoAEaIvLa5hth-dkZuEcR3gRzQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 03-Oct-2024 05:56:26 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 23-Jun-2034 05:56:26 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8382743720347916431; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 03-Oct-2024 05:56:26 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 1005.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50194	52.34.170.192	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	719	OUT	GET /ats/ats?cmd=RT&AdvertiserID=4249&platform=TUMRI&ActionID=20114&ActionName=Microsoft_Store_RT_Pixel&ut1=&ut2=en&ut3=us&cachebuster=922783656 HTTP/1.1 Host: ats.everesttech.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:26 UTC	391	IN	HTTP/1.1 200 Date: Fri, 05 Jul 2024 05:56:26 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Set-Cookie: everest_g_v2=g_surferid~ZoeLCgAAAK474iWc;path=/;Max-Age=63072000;domain=.everesttech.net;Secure;SameSite=None Pragma: no-cache Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Expires: Fri Jul 05 05:56:26 UTC 2024
2024-07-05 05:56:26 UTC	814	IN	Data Raw: 33 32 37 0d 0a 47 49 46 38 39 61 01 00 01 00 e7 0f 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 80 80 80 c0 c0 c0 ff 00 00 00 ff 00 ff ff 00 00 00 ff ff 00 ff 00 ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 33 00 00 66 00 00 99 00 00 cc 00 00 ff 00 33 00 00 33 33 00 33 66 00 33 99 00 33 cc 00 33 ff 00 66 00 00 66 33 00 66 66 00 66 99 00 66 cc 00 66 ff 00 99 00 00 99 33 00 99 66 00 99 99 00 99 cc 00 99 ff 00 cc 00 00 cc 33 00 cc 66 00 cc 99 00 cc cc 00 cc ff 00 ff 00 00 ff 33 00 ff 66 00 ff 99 00 ff cc 00 ff ff 33 00 00 33 00 33 33 00 66 Data Ascii: 327GIF89a3f3333f333ff3fffff3f3f3f3333f
2024-07-05 05:56:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50201	142.250.184.226	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	797	OUT	GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=Njg3NTE5MTcyMzA4NTM1MDMxMTQxMzU2MjkxNDU5NDY1Njg5MzA= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:26 UTC	880	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=Njg3NTE5MTcyMzA4NTM1MDMxMTQxMzU2MjkxNDU5NDY1Njg5MzA=&google_tc= Date: Fri, 05 Jul 2024 05:56:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 378 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 05-Jul-2024 06:11:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-05 05:56:26 UTC	378	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 64 6f 62 65 5f 64 6d 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50203	18.200.174.228	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	773	OUT	GET /ibs:dpid=411&dpuuid=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428
2024-07-05 05:56:26 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:26 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 7S8Y5qqOT4o= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0e609ec7b.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:26 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:26 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50205	104.244.42.195	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	648	OUT	GET /i/adsct?p_user_id=68751917230853503114135629145946568930&p_id=38594 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:26 UTC	571	IN	HTTP/1.1 200 OK date: Fri, 05 Jul 2024 05:56:26 GMT perf: 7402827104 server: tsa_b set-cookie: personalization_id="v1_snjhTR/DLdoJuJvDwpU6IQ=="; Max-Age=63072000; Expires=Sun, 05 Jul 2026 05:56:26 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: c1c7121ffe31eb5c strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 53daf37775f4940408c21b27ef13e22b6977a9b533bebb4a2767b890384a0df9 connection: close
2024-07-05 05:56:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	50208	35.244.174.68	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	760	OUT	GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomNjg3NTE5MTcyMzA4NTM1MDMxMTQxMzU2MjkxNDU5NDY1Njg5MzAQABoNCIqWnrQGEgUI6AcQAEIASgA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=atOjBcyCYn2GsdaqsxED1hSZseGFHGGyDailxYB1zV4=; pxrc=CAA=
2024-07-05 05:56:26 UTC	745	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://dpm.demdex.net/ibs:dpid=477&dpuuid=3f70fdc17f2be172a9c39a131e721f634f7c24732ad6d96ed30f06f467d8c964b0da87c991749652 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=atOjBcyCYn2GsdaqsxED1hSZseGFHGGyDailxYB1zV4=; Path=/; Domain=rlcdn.com; Expires=Sat, 05 Jul 2025 05:56:26 GMT; Secure; SameSite=None Set-Cookie: pxrc=CIqWnrQGEgUI6AcQABIGCPHrARAA; Path=/; Domain=rlcdn.com; Expires=Tue, 03 Sep 2024 05:56:26 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 05 Jul 2024 05:56:26 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50207	52.223.40.198	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:26 UTC	661	OUT	GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:26 UTC	521	IN	HTTP/1.1 302 Found Date: Fri, 05 Jul 2024 05:56:26 GMT Content-Length: 251 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 set-cookie: TDID=25d05297-4043-442c-ad28-aa0eb5db090d; expires=Sat, 05 Jul 2025 05:56:26 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsImt-ViL6wjj0QBTgB; expires=Sat, 05 Jul 2025 05:56:26 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-07-05 05:56:26 UTC	251	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 61 61 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 64 6f 6d 61 69 6e 3d 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 26 74 74 64 5f 74 70 69 3d 31 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 61 61 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 64 6f 6d 61 69 6e 3d 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 26 74 74 64 5f 74 70 69 3d 31 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1">https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50211	66.235.152.156	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	2340	OUT	GET /rest/v1/delivery?client=microsoftmscompoc&sessionId=432ece6dcac6428aa4d7ff4ce502936a&version=2.4.0 HTTP/1.1 Host: target.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; ak_bmsc=17701768D2288A18C404A699826805F5~000000000000000000000000000000~YAAQvI4UArUvanSQAQAA/BB2gRi78VWk02BMQWOBsmx+5x1B57V3ydaBqRo7Bve6bSHZ4ScI7UriMlESGemf+2OAbi70bwWhYdSwqlW/ZFF4Zt7P4K3F+oT8Cv4I+LXEdzO2jBn34aDGLLxyuYYmM4JrXK4jjGncocFZs04HEIcyJpRT6/AVHBtbNTdPXYrfsqIN1KY3uKTCJo9ODgcnYEhy1Mh/KEwnkhfUduQsQ56uwDXsFu5ANdXozVBH/t7IzK4Nsv67pKcez1rjiH+hGOPbKcqbX7+HGLky+xSAik81x+eY5d4OytyUQ+cyRqcA6yE/oPecfwoSmCqQM+d8a+hHQJSOXheY/ouSA++zDp6rjbTE0D/+w9zff5Q=; MS0=203ae4f83d6245fd92ff0d1112d881f2; bm_sv=8285EBDF91693D0D2DFAF2259D7EDF3D~YAAQvI4UAqgwanSQAQAAQ312gRhy4k2O1CRrb6JbIQY5hDPsgRsW0bFlXqhqH2+FQePmdH0xkflwK4e5J0sYX6vnxBqQPCJjVca7xe3qqO8cGLbSQk5JYZkjk0Ru7VhElIJA/KPAZteHxs/p2PK7Urs3SUoOIuefS7l/jwtR2Xdq7ZNIpcQLo3SBQcBhLTM8elDl/huDtjzWxpLzGFw89q/N4Ele5HMtVpFfZEvzYd6sfDvRha73fP/2gmPw0sxtVwIj~1; fptctx2=H3ihr9e92IdW6yd1ZgQ9S6iHaRiejIdk0aIJJ5j7uH7CWNo7dqr52PwJZry1cbhygyB%252brABH3rQfTxQrePXgCM [TRUNCATED]
2024-07-05 05:56:27 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Fri, 05 Jul 2024 05:56:27 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-07-05 05:56:27 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-07-05 05:56:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50215	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	921	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=69033594961269014164161478179349221869&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%01749eee6039c5489b9db3000c7ab3f399%012&d_cid_ic=MC1%01749eee6039c5489b9db3000c7ab3f399%012&ts=1720158985010 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885
2024-07-05 05:56:27 UTC	713	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:27 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6649 Connection: close X-TID: L/xSyuS4QJc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-1-v062-03bee4256.edge-irl1.demdex.com 6 ms set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:27 UTC	6649	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 36 39 30 33 33 35 39 34 39 36 31 32 36 39 30 31 34 31 36 34 31 36 31 34 37 38 31 37 39 33 34 39 32 32 31 38 36 39 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"69033594961269014164161478179349221869","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	50210	172.217.16.130	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	861	OUT	GET /pagead/viewthroughconversion/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&data=ecomm_pagetype%3Dcategory HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:27 UTC	997	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 05 Jul 2024 05:56:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&data=ecomm_pagetype%3Dcategory&is_vtc=1&cid=CAQSGwDaQooLTZdXR5fs8nqRtC8tcBd_32eW1NDgeA&random=1228577267 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 05-Jul-2024 06:11:27 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-05 05:56:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	50217	157.240.253.35	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	419	OUT	GET /tr?redirect=0&ts=1720158983054&dpost=0&dpoco=0&dpo=LDU&ev=PageView&id=undefined HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:27 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=101, rtx=0, c=10, mss=1392, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 05 Jul 2024 05:56:27 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	50209	91.228.74.244	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	634	OUT	GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:27 UTC	696	IN	HTTP/1.1 302 Found Date: Fri, 05 Jul 2024 05:56:27 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://dpm.demdex.net/ibs:dpid=1175&gdpr=0&dpuuid=V8hZPVmcUWhMzVFuAMpMOFebVDxMzFc-U8gj5Aul P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EOYBDAGgLLmvYA; expires=Thu, 03-Oct-2024 05:56:27 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=66878b0b-30da4-26e56-26426; expires=Tue, 05-Aug-2025 05:56:27 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	50220	37.252.171.52	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	861	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=HNkAzNizP5u1cR5RixtMwt64PWHTdlWANFZbzeKHi5KBjLLSIfAINX1tJ_PZ5lcC4lmHbgFtEodjV1QmluoAEaIvLa5hth-dkZuEcR3gRzQ.; receive-cookie-deprecation=1; uuid2=8382743720347916431
2024-07-05 05:56:27 UTC	1426	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 05 Jul 2024 05:56:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://dpm.demdex.net/ibs:dpid=358&dpuuid=8382743720347916431 AN-X-Request-Uuid: e654d824-6d7c-463b-a172-b91a1dba845f Set-Cookie: XANDR_PANID=HNkAzNizP5u1cR5RixtMwt64PWHTdlWANFZbzeKHi5KBjLLSIfAINX1tJ_PZ5lcC4lmHbgFtEodjV1QmluoAEaIvLa5hth-dkZuEcR3gRzQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 03-Oct-2024 05:56:27 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 23-Jun-2034 05:56:27 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8382743720347916431; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 03-Oct-2024 05:56:27 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 1005.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	50223	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	895	OUT	GET /ibs:dpid=992&dpuuid=1u83iowz6j9oz HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120
2024-07-05 05:56:27 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:27 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: CuC058GzSjk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-09fd8b58e.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:27 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	50222	142.250.184.226	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	849	OUT	GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=Njg3NTE5MTcyMzA4NTM1MDMxMTQxMzU2MjkxNDU5NDY1Njg5MzA=&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-05 05:56:27 UTC	996	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEO-44wYLLjHm6fOR1-kzhvc&google_cver=1?gdpr=0&gdpr_consent= Date: Fri, 05 Jul 2024 05:56:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 314 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkN9gLO1jEhsATUNHZnVb06TJ_nOfcUFoIZB0B_ROV6kHa-_Xi8nPEsuXQComw; expires=Sun, 05-Jul-2026 05:56:27 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-05 05:56:27 UTC	314	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 37 37 31 26 61 6d 70 3b 64 70 75 75 69 64 3d 43 41 45 53 45 4f 2d 34 34 77 59 4c 4c 6a 48 6d 36 66 4f 52 31 2d 6b 7a 68 76 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEO-44wYLLjHm6fOR1-kzhvc&google_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	50225	104.244.42.131	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	470	OUT	GET /i/adsct?p_user_id=68751917230853503114135629145946568930&p_id=38594 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_snjhTR/DLdoJuJvDwpU6IQ=="
2024-07-05 05:56:27 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 05 Jul 2024 05:56:27 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: cc8717aa0daf4427 strict-transport-security: max-age=631138519 x-response-time: 74 x-connection-hash: 7f6dee0ffecff71f3874fbe8d708086c5d6065995c95af8369052214e280665c connection: close
2024-07-05 05:56:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	50228	52.223.40.198	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	748	OUT	GET /track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=25d05297-4043-442c-ad28-aa0eb5db090d; TDCPM=CAEYBSgCMgsImt-ViL6wjj0QBTgB
2024-07-05 05:56:27 UTC	522	IN	HTTP/1.1 302 Found Date: Fri, 05 Jul 2024 05:56:27 GMT Content-Length: 189 Connection: close server: Kestrel location: https://dpm.demdex.net/ibs:dpid=903&dpuuid=25d05297-4043-442c-ad28-aa0eb5db090d set-cookie: TDID=25d05297-4043-442c-ad28-aa0eb5db090d; expires=Sat, 05 Jul 2025 05:56:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsItJKd4aewjj0QBRgFIAEoAjILCJrflYi-sI49EAU4AQ..; expires=Sat, 05 Jul 2025 05:56:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-07-05 05:56:27 UTC	189	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 39 30 33 26 64 70 75 75 69 64 3d 32 35 64 30 35 32 39 37 2d 34 30 34 33 2d 34 34 32 63 2d 61 64 32 38 2d 61 61 30 65 62 35 64 62 30 39 30 64 22 3e 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 39 30 33 26 64 70 75 75 69 64 3d 32 35 64 30 35 32 39 37 2d 34 30 34 33 2d 34 34 32 63 2d 61 64 32 38 2d 61 61 30 65 62 35 64 62 30 39 30 64 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://dpm.demdex.net/ibs:dpid=903&dpuuid=25d05297-4043-442c-ad28-aa0eb5db090d">https://dpm.demdex.net/ibs:dpid=903&dpuuid=25d05297-4043-442c-ad28-aa0eb5db090d</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	50221	44.232.230.158	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	532	OUT	GET /ats/ats?cmd=RT&AdvertiserID=4249&platform=TUMRI&ActionID=20114&ActionName=Microsoft_Store_RT_Pixel&ut1=&ut2=en&ut3=us&cachebuster=922783656 HTTP/1.1 Host: ats.everesttech.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: everest_g_v2=g_surferid~ZoeLCgAAAK474iWc
2024-07-05 05:56:27 UTC	268	IN	HTTP/1.1 200 Date: Fri, 05 Jul 2024 05:56:27 GMT Content-Type: image/jpeg Transfer-Encoding: chunked Connection: close Pragma: no-cache Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Expires: Fri Jul 05 05:56:27 UTC 2024
2024-07-05 05:56:27 UTC	814	IN	Data Raw: 33 32 37 0d 0a 47 49 46 38 39 61 01 00 01 00 e7 0f 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 80 80 80 c0 c0 c0 ff 00 00 00 ff 00 ff ff 00 00 00 ff ff 00 ff 00 ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 33 00 00 66 00 00 99 00 00 cc 00 00 ff 00 33 00 00 33 33 00 33 66 00 33 99 00 33 cc 00 33 ff 00 66 00 00 66 33 00 66 66 00 66 99 00 66 cc 00 66 ff 00 99 00 00 99 33 00 99 66 00 99 99 00 99 cc 00 99 ff 00 cc 00 00 cc 33 00 cc 66 00 cc 99 00 cc cc 00 cc ff 00 ff 00 00 ff 33 00 ff 66 00 ff 99 00 ff cc 00 ff ff 33 00 00 33 00 33 33 00 66 Data Ascii: 327GIF89a3f3333f333ff3fffff3f3f3f3333f
2024-07-05 05:56:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	50226	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	728	OUT	GET /ibs:dpid=411&dpuuid=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231; dpm=68751917230853503114135629145946568930
2024-07-05 05:56:27 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:27 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: rxiZ+D12R+w= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-05c71d301.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:27 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	50229	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	1050	OUT	GET /ibs:dpid=477&dpuuid=3f70fdc17f2be172a9c39a131e721f634f7c24732ad6d96ed30f06f467d8c964b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338
2024-07-05 05:56:27 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:27 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: eh7LXnpnR4o= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0baa3e85c.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:27 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	50230	13.107.246.45	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	541	OUT	GET /tag/uet/4000034?insights=1 HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:27 UTC	379	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:27 GMT Content-Type: application/x-javascript Content-Length: 866 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0 x-azure-ref: 20240705T055627Z-157bfc599769bbcfn5fpqda8ws0000000dn0000000004kqe X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-07-05 05:56:27 UTC	866	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 61 5b 63 5d 3d 61 5b 63 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 5b 63 5d 2e 71 3d 61 5b 63 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 73 22 2c 22 43 6c 61 72 69 74 79 49 6e 73 69 67 68 74 73 22 29 7d 29 2c 21 31 29 3b 61 5b 63 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 5b 63 5d 28 22 73 65 74 22 2c 22 5f 75 22 2c 22 34 30 30 30 30 33 34 22 29 7d 29 2c 21 31 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 Data Ascii: !function(c,l,a,r,i,t,y){a[c]=a[c]\|\|function(){(a[c].q=a[c].q\|\|[]).push(arguments)};a[c]("metadata",(function(){a[c]("set","_s","ClarityInsights")}),!1);a[c]("metadata",(function(){a[c]("set","_u","4000034")}),!1);if(a[c].v\|\|a[c].t)return a[c]("event",c,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	50231	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	1052	OUT	GET /ibs:dpid=782&dpuuid=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671
2024-07-05 05:56:28 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: lyNesZQxTck= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0a60144b6.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	50232	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:27 UTC	1106	OUT	GET /ibs:dpid=1175&gdpr=0&dpuuid=V8hZPVmcUWhMzVFuAMpMOFebVDxMzFc-U8gj5Aul HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790
2024-07-05 05:56:28 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 1J8poRMVQDI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-05a927ebd.edge-irl1.demdex.com 3 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	50233	142.250.185.132	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	913	OUT	GET /pagead/1p-user-list/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&data=ecomm_pagetype%3Dcategory&is_vtc=1&cid=CAQSGwDaQooLTZdXR5fs8nqRtC8tcBd_32eW1NDgeA&random=1228577267 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:28 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 05 Jul 2024 05:56:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-05 05:56:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	50235	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	1099	OUT	GET /ibs:dpid=358&dpuuid=8382743720347916431 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898
2024-07-05 05:56:28 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: k090tJzgSLQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-081173f76.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	50234	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	1135	OUT	GET /ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004
2024-07-05 05:56:28 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: k661fQvyRfo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-00c4d45c7.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	50236	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	879	OUT	GET /ibs:dpid=992&dpuuid=1u83iowz6j9oz HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004
2024-07-05 05:56:28 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ROp0ean6R/A= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-03bee4256.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	50237	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	1138	OUT	GET /ibs:dpid=903&dpuuid=25d05297-4043-442c-ad28-aa0eb5db090d HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004
2024-07-05 05:56:28 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: qPDWk265TZY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0f90fba2f.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	50246	104.18.24.173	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	713	OUT	GET /i.match?p=b13&u=68751917230853503114135629145946568930&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:28 UTC	906	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 05 Jul 2024 05:56:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 1111 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=awnoeUyOZbSUoJTyHrYHKCCPrBURDTx9aCLZaJV20X; path=/; domain=.tribalfusion.com; expires=Thu, 03-Oct-2024 05:56:28 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=awnoeUyOZbSUoJTyHrYHKCCPrBURDTx9aCLZaJV20X; path=/; domain=.tribalfusion.com; expires=Thu, 03-Oct-2024 05:56:28 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b13&u=68751917230853503114135629145946568930&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 89e51cad9fee1a1b-EWR alt-svc: h3=":443"; ma=86400
2024-07-05 05:56:28 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-07-05 05:56:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	50245	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	1015	OUT	GET /ibs:dpid=477&dpuuid=3f70fdc17f2be172a9c39a131e721f634f7c24732ad6d96ed30f06f467d8c964b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326
2024-07-05 05:56:28 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 7UncbFz9SWo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-0c9b644f2.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	50244	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	1164	OUT	GET /ibs:dpid=771&dpuuid=CAESEO-44wYLLjHm6fOR1-kzhvc&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004
2024-07-05 05:56:28 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 8pBo8I97Teo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-0f73745e7.edge-irl1.demdex.com 5 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	50243	13.107.246.45	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	534	OUT	GET /s/0.7.32/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:28 UTC	619	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:28 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 62397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 10 May 2024 17:30:20 GMT ETag: "0x8DC7116DE09E645" x-ms-request-id: 0b8abf6a-501e-0029-7e63-c510af000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20240705T055628Z-157bfc59976ww4ds06kddf9rns0000000hb000000000bbnc Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 51562430 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-05 05:56:28 UTC	15765	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 33 32 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 46 61 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 55 61 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 56 61 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 50 61 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.32: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return Fa},get start(){return Ua},get stop(){return Va},get track(){return Pa}}),e=Object.freeze({__pro
2024-07-05 05:56:28 UTC	16384	IN	Data Raw: 3d 61 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 73 65 20 50 74 2e 69 6e 64 65 78 4f 66 28 75 29 3e 3d 30 3a 76 61 72 20 63 3d 6f 2e 74 79 70 65 2c 73 3d 22 22 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2b 3d 6f 5b 74 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 29 3b 76 61 72 20 6c 3d 7a 74 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 73 2e 69 6e 64 65 78 4f 66 28 74 29 3e 3d 30 7d 29 29 3b 72 2e 70 72 69 76 61 63 79 3d 22 49 4e 50 55 54 22 3d 3d 3d 75 26 26 48 74 2e 69 6e 64 65 78 4f 66 28 63 29 3e 3d 30 3f 69 3a 6c 3f 34 3a 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 61 74 Data Ascii: =a.tag.toUpperCase();switch(!0){case Pt.indexOf(u)>=0:var c=o.type,s="";Object.keys(o).forEach((function(t){return s+=o[t].toLowerCase()}));var l=zt.some((function(t){return s.indexOf(t)>=0}));r.privacy="INPUT"===u&&Ht.indexOf(c)>=0?i:l?4:2;break;case"dat
2024-07-05 05:56:28 UTC	16384	IN	Data Raw: 6e 67 22 29 3e 3d 30 3f 22 61 72 74 69 63 6c 65 22 3a 72 29 7b 63 61 73 65 22 61 72 74 69 63 6c 65 22 3a 63 61 73 65 22 72 65 63 69 70 65 22 3a 43 72 28 35 2c 74 5b 61 5d 29 2c 43 72 28 38 2c 74 2e 63 72 65 61 74 6f 72 29 2c 43 72 28 31 38 2c 74 2e 68 65 61 64 6c 69 6e 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 6f 64 75 63 74 22 3a 43 72 28 35 2c 74 5b 61 5d 29 2c 43 72 28 31 30 2c 74 2e 6e 61 6d 65 29 2c 43 72 28 31 32 2c 74 2e 73 6b 75 29 2c 74 2e 62 72 61 6e 64 26 26 43 72 28 36 2c 74 2e 62 72 61 6e 64 2e 6e 61 6d 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 67 67 72 65 67 61 74 65 72 61 74 69 6e 67 22 3a 74 2e 72 61 74 69 6e 67 56 61 6c 75 65 26 26 28 57 28 31 31 2c 72 61 28 74 2e 72 61 74 69 6e 67 56 61 6c 75 65 2c 31 30 30 29 29 2c 57 28 31 38 Data Ascii: ng")>=0?"article":r){case"article":case"recipe":Cr(5,t[a]),Cr(8,t.creator),Cr(18,t.headline);break;case"product":Cr(5,t[a]),Cr(10,t.name),Cr(12,t.sku),t.brand&&Cr(6,t.brand.name);break;case"aggregaterating":t.ratingValue&&(W(11,ra(t.ratingValue,100)),W(18
2024-07-05 05:56:28 UTC	13864	IN	Data Raw: 69 3d 5b 5d 2c 6f 3d 30 2c 75 3d 72 3b 6f 3c 75 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 63 3d 75 5b 6f 5d 3b 69 66 28 77 72 28 63 2c 61 2e 63 6f 6e 64 69 74 69 6f 6e 29 29 7b 76 61 72 20 73 3d 79 72 28 74 2c 63 29 3b 73 26 26 69 2e 70 75 73 68 28 73 29 7d 7d 6e 3d 69 7d 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 77 72 28 74 2c 65 29 7b 69 66 28 65 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 3a 22 29 3b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3e 31 3f 74 5b 6e 5b 30 5d 5d 3d 3d 6e 5b 31 5d 3a 74 5b 6e 5b 30 5d 5d 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 72 28 74 29 7b 76 61 72 20 65 3d 5b 73 28 29 2c 74 5d 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 34 3a 76 61 72 Data Ascii: i=[],o=0,u=r;o<u.length;o++){var c=u[o];if(wr(c,a.condition)){var s=yr(t,c);s&&i.push(s)}}n=i}return n}return null}function wr(t,e){if(e){var n=e.split(":");return n.length>1?t[n[0]]==n[1]:t[n[0]]}return!0}function kr(t){var e=[s(),t];switch(t){case 4:var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	50247	3.71.149.231	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	674	OUT	GET /cms?partner_id=ADOBE&_hosted_id=68751917230853503114135629145946568930&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:28 UTC	343	IN	HTTP/1.1 302 Redirect Date: Fri, 05 Jul 2024 05:56:28 GMT Connection: close Server: ATS/9.1.10.121 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=68751917230853503114135629145946568930&gdpr=0&gdpr_consent= Content-Type: text/html Content-Language: en Content-Length: 415
2024-07-05 05:56:28 UTC	415	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	50250	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	997	OUT	GET /ibs:dpid=782&dpuuid=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553
2024-07-05 05:56:29 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:28 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: KgdnMy7EQ04= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0b5c14f17.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	50252	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	1052	OUT	GET /ibs:dpid=1175&gdpr=0&dpuuid=V8hZPVmcUWhMzVFuAMpMOFebVDxMzFc-U8gj5Aul HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663
2024-07-05 05:56:29 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: vy5vzd4pSKY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-035930d82.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	50258	76.223.111.18	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	697	OUT	GET /getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: dmpsync.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:29 UTC	735	IN	HTTP/1.1 302 Found Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=2550234816237896863704; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 03 Oct 2024 05:56:29 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=2550234816237896863704; Max-Age=7776000; Expires=Thu, 03 Oct 2024 05:56:29 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	50256	192.132.33.67	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	632	OUT	GET /dmp/adobe/user?dd_uuid=68751917230853503114135629145946568930 HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:29 UTC	558	IN	HTTP/1.1 302 Found Cache-Control: private,no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: //dpm.demdex.net/ibs:dpid=49276&dpuuid=9f67d042-b1fb-4d14-8890-a63d1b470b24 Set-Cookie: GLOBALID=2uKlc8-sIBd987Fnp3vFHZ__BQ8EX1SHC3I45QuyIbuKuTtscI7B0f-14h7TmPQoIWr2j0j-wZQC4TM1; domain=.bttrack.com; expires=Thu, 03-Oct-2024 05:56:11 GMT; path=/; secure; SameSite=None X-ServerName: Track001-iad Date: Fri, 05 Jul 2024 05:56:11 GMT Connection: close Content-Length: 206 Strict-Transport-Security: max-age=31536000;
2024-07-05 05:56:29 UTC	206	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 25 32 66 25 32 66 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 25 32 66 69 62 73 25 33 61 64 70 69 64 25 33 64 34 39 32 37 36 25 32 36 64 70 75 75 69 64 25 33 64 39 66 36 37 64 30 34 32 2d 62 31 66 62 2d 34 64 31 34 2d 38 38 39 30 2d 61 36 33 64 31 62 34 37 30 62 32 34 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="%2f%2fdpm.demdex.net%2fibs%3adpid%3d49276%26dpuuid%3d9f67d042-b1fb-4d14-8890-a63d1b470b24">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	50254	142.250.186.164	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:28 UTC	676	OUT	GET /pagead/1p-user-list/923371515/?guid=ON&script=0&url=www.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products&data=ecomm_pagetype%3Dcategory&is_vtc=1&cid=CAQSGwDaQooLTZdXR5fs8nqRtC8tcBd_32eW1NDgeA&random=1228577267 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:29 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 05 Jul 2024 05:56:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-05 05:56:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	50257	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	1069	OUT	GET /ibs:dpid=358&dpuuid=8382743720347916431 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885
2024-07-05 05:56:29 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: WEGudht6R2E= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-03ab4a197.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	50255	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	1083	OUT	GET /ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885
2024-07-05 05:56:29 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: yL/IXgZpTNM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0de694321.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	50262	104.18.25.173	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	775	OUT	GET /z/i.match?p=b13&u=68751917230853503114135629145946568930&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=awnoeUyOZbSUoJTyHrYHKCCPrBURDTx9aCLZaJV20X
2024-07-05 05:56:29 UTC	857	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 209 X-Reuse-Index: 12 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aknsuBtlix98qyTAZaRq6gUlQ6IxSJ30MBjoAORThJRQEj6iFgltSoqZaACaASAIYEiF53Qw1svOMGtpG7; path=/; domain=.tribalfusion.com; expires=Thu, 03-Oct-2024 05:56:29 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aknsuBtlix98qyTAZaRq6gUlQ6IxSJ30MBjoAORThJRQEj6iFgltSoqZaACaASAIYEiF53Qw1svOMGtpG7; path=/; domain=.tribalfusion.com; expires=Thu, 03-Oct-2024 05:56:29 GMT; Location: https://dpm.demdex.net/ibs:dpid=22054 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 89e51cb22d928c77-EWR alt-svc: h3=":443"; ma=86400
2024-07-05 05:56:29 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-07-05 05:56:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	50082	108.138.7.18	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	570	OUT	GET /www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:29 UTC	664	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 101932 Connection: close Date: Fri, 05 Jul 2024 05:56:30 GMT Last-Modified: Thu, 15 Feb 2024 10:35:13 GMT ETag: "b7fe6dd421c792f445730d6d393e72d5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=900 Content-Encoding: gzip x-amz-version-id: JUwHso4GCTdeT8XY56XFxnSiy_sxhSap Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e75bff6012758ccb55ff41b176b32342.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: QgT-hpe_XQIxO2DgTjQV-zlo3RyUbSDnniQlhU4GZy9cUTK-FmzF-w== Timing-Allow-Origin: * age: 0 Vary: Origin
2024-07-05 05:56:29 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db c8 b2 28 fc 7d ff 0a a3 cd 30 52 10 06 93 cc cc 1a 3b 8a 37 01 27 61 c2 6d 30 e4 66 1c 22 ec 06 2b 31 92 23 b5 21 8c ad f3 db 4f 55 f5 45 ad 8b 81 99 b5 f6 79 de 0f ef ec b5 83 d5 f7 ae ae aa ae aa ae ae be f1 e3 da 76 f7 7c fb f0 e0 95 37 b3 26 71 f4 95 0d f8 ee d0 6a 6e 3e db dc 74 ad 84 fb 7c 9a 58 cd 86 6b 8d a2 84 87 fe 35 83 af 9e 75 1d 0c e2 28 89 2e 79 7d 10 5d 5b ae 75 1b 84 c3 e8 36 91 5f fe 5f d3 98 dd b2 8b 24 e0 2c a9 87 8c 43 9a ae 91 f0 28 66 58 b0 3e 08 55 d9 7a b1 bd 64 f2 97 bf 36 f0 43 3f be 93 f5 45 39 91 7b 39 8e 6e a1 f9 35 18 dd 55 10 5e d5 c3 c4 e7 03 2a d7 77 2d 6c 28 d9 89 ae fd 20 3c 89 fd c1 37 28 60 35 37 72 e9 5d 48 1b b3 dd cb 18 a6 93 2f 13 85 09 0b f9 31 fb 3e 0d 62 36 a4 34 7f Data Ascii: k[(}0R;7'am0f"+1#!OUEyv\|7&qjn>t\|Xk5u(.y}][u6__$,C(fX>Uzd6C?E9{9n5U^*w-l( <7(`57r]H/1>b64
2024-07-05 05:56:29 UTC	1410	IN	Data Raw: 24 a7 57 06 ac 10 6d d0 b1 5b df 1d 0a 34 d9 61 2a e5 1f 55 3b 2a 97 07 54 bd a8 7a 3c e9 91 e9 4f 87 5b 91 3c c8 a3 4b 76 76 c3 6d 38 2d 0c 2a 37 8e fc a1 f7 c9 c5 9f 82 83 7c 72 cb 57 f6 92 78 a0 7c 45 d4 0e ae a9 2b 55 5b 3a 50 57 fb cb ba f1 95 92 67 44 1b 77 3e d8 f8 76 05 9b 89 ab 4e f6 8c d0 b2 d0 7e ee 28 2d fd e2 6e ba ff d2 bb 46 bc 88 da df 29 2a df 2e ec 1a 07 34 f9 50 c6 17 7b 57 cf 0b e9 52 13 3b a8 df 4f d8 58 48 36 2f b1 46 d1 f9 a1 ea 17 9b 40 6c 7a 40 0a f2 c5 96 72 88 87 c2 ee 58 7d 8c e9 d0 ea 5a 7d ca 2b 42 6e a2 12 40 0a 1c 7c 43 41 97 a5 ca 69 6c c4 bd f5 2c 7e 6d fd fc a7 d5 b5 3e be e5 f1 3f f3 9f 9e 6d cc 7f da fc e5 d9 86 63 e4 ff b4 76 0e d9 e2 b9 8e 9f 36 7b ac d3 37 72 a1 a6 83 af 6f 46 b9 36 57 cf d7 fa 85 06 d7 dd 01 f7 2c Data Ascii: $Wm[4aU;Tz<O[<Kvvm8-7\|rWx\|E+U[:PWgDw>vN~(-nF).4P{WR;OXH6/F@lz@rX}Z}+Bn@\|CAil,~m>?mcv6{7roF6W,
2024-07-05 05:56:29 UTC	1024	IN	Data Raw: 0b c9 be 9c 3c dc 4f b3 b0 fb 4b 76 a0 1e 61 f1 7e c1 3d 73 09 6d cc f7 dd 6b 0b 84 29 02 65 5f b4 46 bc ce 5f 5d c3 68 37 82 a2 41 d4 6c 2f d9 fa 37 74 29 7b 30 93 56 bd 06 c6 fa 68 e6 12 45 9a 92 39 7f 00 67 cf 62 f0 e9 9d 51 06 7c dc cb e5 ea f8 3c 22 b8 e9 09 34 da ce 7e 36 ab 4a 8a 76 a4 64 da 94 a7 60 99 2c b9 9f 97 0e f5 46 bf 87 48 d2 a6 7f 9b 89 1c e9 0e f7 96 7e 80 36 b9 28 70 8c 0f fa f0 29 6a c0 cd 67 cf 9e ce 9b ff da 70 cc 67 00 ff 32 37 ed 1d de b6 77 38 89 62 20 ee c9 5f 0e 5a 5d b2 eb 41 b9 bd fb 25 37 2e 0e 4b 93 7e d2 b6 ac 26 46 29 2e 5a 65 b5 0f ac 21 f7 bc e2 0f 28 1a c5 bb dc 24 f0 7e a9 0b f6 03 1c 0b 3b 44 16 2a 10 23 6b f8 fb df d3 8a 4e 39 6a 8c c6 85 9b 3c 58 00 7f 48 60 a7 e3 cd e6 fa ba 05 5d 67 09 09 a5 38 26 ec c4 1b be 3b Data Ascii: <OKva~=smk)e_F_]h7Al/7t){0VhE9gbQ\|<"4~6Jvd`,FH~6(p)jgpg27w8b _Z]A%7.K~&F).Ze!($~;D*#kN9j<XH`]g8&;
2024-07-05 05:56:29 UTC	12792	IN	Data Raw: b8 68 b7 00 ac ed d2 c6 91 80 00 04 ed ce e7 1f a4 de 6d 7f 39 0d 07 fe f4 6a 04 b2 81 b8 99 d2 ac a9 81 88 e0 78 ea 2b ad ad d5 c6 20 1e 87 91 48 17 bf 31 15 84 0f 95 48 3f 31 4d 61 6f 2e be 5e ed 8b 93 91 c6 87 3c 69 38 b3 54 30 ff 1a dd a1 c0 95 7b 25 7b 7e e8 b4 1b 56 85 3b aa 76 82 3e 75 f8 f2 c6 15 c5 39 83 79 7e 44 62 13 99 03 72 a1 65 bb 89 f4 b3 11 05 de 7a 6f eb d9 4d 40 17 53 da f0 cf 1f 46 72 03 d4 10 4a 5a 6a a8 b6 02 8c 71 09 3c f4 aa e8 3c 87 f5 55 a1 2b 63 34 66 81 8f aa 00 d9 45 24 1b 10 83 91 6e 29 1f eb 8a 41 b8 ca 7c a2 e7 88 9c e2 e1 3a c4 4f 54 15 b1 d8 0f d6 a1 62 ba 92 b2 c5 3c 5c 4f 95 d4 55 79 7c 77 12 75 7e b0 c1 94 de 40 d1 ba 03 3a 4b 50 30 f7 cc 11 8b 79 89 48 6d 65 f6 50 49 c7 47 b0 c1 04 09 c6 42 61 a6 a1 32 9f db 66 75 3e Data Ascii: hm9jx+ H1H?1Mao.^<i8T0{%{~V;v>u9y~DbrezoM@SFrJZjq<<U+c4fE$n)A\|:OTb<\OUy\|wu~@:KP0yHmePIGBa2fu>
2024-07-05 05:56:29 UTC	16384	IN	Data Raw: 2f 2b c7 dc 80 9c d0 8a 2c 12 ea 07 c9 04 4b c3 a7 fc d4 1a dd 68 2b 71 31 8b f5 a7 42 91 e2 12 7d 49 dd 79 22 c0 c0 1b 79 c6 03 ae bc 72 88 06 d8 79 21 69 41 a7 bd 7a dc 3a b9 1e 36 fd 84 41 83 16 ce 1b 22 67 49 64 4a c4 6c 75 2d 0b e9 e1 d2 20 9c 73 ab 4d 5a da dd 91 2f 6f 40 d9 0e 6f 7c 00 50 96 80 7a 98 91 56 58 89 be cf 95 ac 0f cb 08 1b ef c1 08 08 c8 de 06 f9 46 06 51 f6 da da 93 0d b4 88 ab 94 e0 f0 12 9e f8 3c d9 4b ee 58 ba 2d 88 20 45 12 87 8d 29 3d d7 ae 34 82 25 0b ce c3 c6 59 3c 00 75 c9 15 70 a3 77 de 00 ec aa 33 04 35 41 b2 5b d9 a9 ca 93 5b 1d c6 dc 87 20 ac ad 3e d7 37 c5 3d 9e c3 63 64 bb 21 68 58 8d c3 db 00 2a 90 6f 36 1a ed 66 56 42 75 ad d7 d6 b2 1f 02 70 f4 96 ec 17 ee 2e bc 11 43 bb 27 50 bb 68 1d 3e 95 da c8 f4 5c 3f b7 86 3c 6a Data Ascii: /+,Kh+q1B}Iy"yry!iAz:6A"gIdJlu- sMZ/o@o\|PzVXFQ<KX- E)=4%Y<upw35A[[ >7=cd!hX*o6fVBup.C'Ph>\?<j
2024-07-05 05:56:29 UTC	2804	IN	Data Raw: 05 8e af d3 96 a6 99 29 c3 af eb f3 55 64 2b 19 5c f4 a1 33 80 7f 57 08 2e aa 8f 59 80 f6 cc 25 7b 88 1a 92 9d 07 c6 4e c2 81 6c 72 8a ac cd 0c 92 3a b8 5a 56 d5 9c c1 ba 05 0b f9 66 ba b6 c6 c4 0e 4c e7 f7 2f f7 0f 9a 9d 00 de 6d e5 5e 5f a2 30 bd 15 ce e2 f3 8e 9a 51 58 f0 4c 1a df cb a1 44 cc 3a 7b f6 da 63 50 a9 17 4b ce 1c 88 48 c3 9c 24 a4 c8 e6 5d 6a f5 e7 27 0c 8a a0 5d b4 b3 eb af 70 7f 00 b3 55 2c a4 76 4a 48 3d 95 d3 6f 75 35 33 7b 84 14 2c e1 10 95 67 50 0f d6 5b 2f 36 8d b6 84 ce a5 65 12 d6 90 45 82 c1 d3 a4 d1 93 0d 97 34 da 57 c7 ec 3c d2 c8 59 f3 b1 bb 84 59 d0 7e b2 51 c0 6d f8 a0 ce 6d 47 d1 f6 51 e9 fb 4b e9 7b af f4 bd af bf 8b 1d a5 2e 85 b4 89 d2 6a 78 09 12 59 08 08 0d c1 bf 6b c2 94 01 bd 3c 4d 29 f4 c1 bd a3 c4 62 91 d7 07 20 1c Data Ascii: )Ud+\3W.Y%{Nlr:ZVfL/m^_0QXLD:{cPKH$]j']pU,vJH=ou53{,gP[/6eE4W<YY~QmmGQK{.jxYk<M)b
2024-07-05 05:56:29 UTC	2836	IN	Data Raw: e4 c8 01 87 7a 63 33 ff 75 20 65 96 34 c4 ac 22 5f db 9c 25 a5 e4 22 56 8b 6b e4 26 66 f8 82 e2 d1 ff 86 06 99 c1 d4 37 48 df 6f 23 f4 25 d1 e6 3f 7b 24 b1 7c 85 8c 6c 36 f8 cc 9a 0f 37 ec 5e 8c be 98 a6 01 e2 66 65 21 43 4c ce 36 2f 64 f6 3d a0 4f 4f 94 a7 a4 63 b1 a3 c6 70 4f a8 83 63 0f b9 4c 0d 65 1e 36 08 40 cc a0 c7 f1 cd 6a 3a 2e ef 6a 0a b4 f1 df b8 d2 02 9d 5f eb 97 04 ec f1 1e bc cd 46 ef 3e 09 3a fd 33 7a 07 60 1c b8 c4 26 dc 4f 94 c3 1f 87 67 c6 ea 8c 86 1c 58 27 48 34 44 de 52 6d 40 1b 19 5c f3 73 55 0c 43 d5 c3 1d 14 f9 c0 0e 43 05 21 0d ad dd cc b5 7e 92 18 04 31 00 0c 68 ff 02 5a a6 4e 2e 07 ed 91 da 17 14 58 9e 03 d2 88 ad 2e 8a 0a 74 94 e6 c1 ba 3b 08 21 65 7d 13 f8 d2 e1 51 f7 e0 a2 77 70 71 74 7c f8 42 03 4a 95 03 ad a4 bb 5b 3d f0 49 Data Ascii: zc3u e4"_%"Vk&f7Ho#%?{$\|l67^fe!CL6/d=OOcpOcLe6@j:.j_F>:3z`&OgX'H4DRm@\sUCC!~1hZN.X.t;!e}Qwpqt\|BJ[=I
2024-07-05 05:56:29 UTC	12792	IN	Data Raw: c2 43 81 3f c7 41 3e 24 7f 62 9f 3a 8e 46 ea 8b e3 07 1e 43 a3 de 7c fd e0 47 16 06 69 0f ab 22 1e f3 d4 24 41 72 6e 0b 03 a2 49 de 42 94 3f ac 35 a2 06 46 b2 a1 5d 57 ba ee 28 ad 16 bb 20 18 f9 63 43 f1 03 9d 8b e9 6d 22 27 0f 5c 44 66 d3 ca fb 42 4e 7f dd bd 1f 37 3f fd 0f bc b4 02 ad e3 97 9b c6 66 39 d3 e7 3e ba fb 9b f5 3d 88 cc 6a fb ba f9 a7 b3 da 67 db 85 fa 3e 74 81 69 fd cc 9c 06 9a 3d 4c 99 08 67 4f 5d 2a e7 5c a4 6c 43 c1 cc ab 49 84 9a 14 d0 ce 59 94 0f f1 d2 7b 0a de e6 1c 4b 40 6f 68 61 c4 14 90 ee 0f f6 01 79 85 e2 1d c4 a0 94 ba 15 bf 5d 50 0d 40 e6 8d 08 83 55 4d 43 7e f9 9a 23 39 8f 6e 90 22 e2 70 a5 11 e3 a8 cf 88 6f 9d 26 13 00 82 ee b6 9a 14 d9 d5 70 70 c1 18 f5 41 85 77 8d 11 10 a5 ae 5d 4f a2 32 bb 0a 81 de eb f9 0d 45 a9 a4 8c 3f Data Ascii: C?A>$b:FC\|Gi"$ArnIB?5F]W( cCm"'\DfBN7?f9>=jg>ti=LgO]*\lCIY{K@ohay]P@UMC~#9n"po&ppAw]O2E?
2024-07-05 05:56:29 UTC	16384	IN	Data Raw: 8c e5 bb 70 6f a9 02 76 19 ec 26 75 8c 07 b6 8f c0 0e 61 dd f2 f2 85 37 18 fa cb de 78 e8 c3 13 ea dd e1 ef 1b 7b 28 35 00 2b 6f 47 d2 ff 26 10 9c 48 42 8d a5 0b 9b 28 86 df 5e a9 40 0b 1b 57 a0 e8 ce 91 0f 03 b9 1b ae 41 d6 d2 78 d8 7a fe 1f cf 56 3a e2 92 7b 5d d7 8b 74 9a ae 0d 86 d6 09 33 9a a3 68 c3 44 0c 3d 58 75 1b e5 32 90 b0 60 b4 f1 fd fb 29 42 81 53 01 be 43 21 4d bb 19 7a ec 93 80 13 0c c4 d8 eb 4f 44 70 c6 93 61 8a 44 e6 a8 0f 68 08 8e f9 1a 96 f8 37 58 e2 3f 70 89 d7 71 59 2f 5d b3 e8 02 04 59 5a 1f 16 de ed 10 cd 9e 8f 86 68 f1 7c 3c 74 60 57 b7 c3 f3 db 21 bb 5e 5e 5a 01 0a c7 3f 1a 9e 97 d6 f0 82 7c e0 00 f2 2c 0b fe 73 65 99 0c 2d 79 90 2f b2 f6 08 ee 25 fa 0a 7f 24 6f 39 51 15 fa cb 12 7a af 54 92 a7 5b 62 b5 3f 41 af 90 d7 74 7b 24 1e Data Ascii: pov&ua7x{(5+oG&HB(^@WAxzV:{]t3hD=Xu2`)BSC!MzODpaDh7X?pqY/]YZh\|<t`W!^^Z?\|,se-y/%$o9QzT[b?At{$
2024-07-05 05:56:29 UTC	2804	IN	Data Raw: 39 0a 07 03 5d 2d 10 97 15 50 ab 30 4d 4a d4 5c 5e 81 50 ae ed 14 ee 38 23 98 12 5d 03 50 cc ef 93 88 d1 7c f0 22 3f ec f9 38 23 f7 b2 9f fd a1 d0 01 ee 51 f1 c6 ff 28 8d e4 66 a8 fc 35 f9 3b 70 4a 62 29 68 d7 19 ba a0 b2 94 51 64 5d 65 c4 34 3a 63 5a 2e 79 d6 92 1b 2c 71 6d ab b7 24 94 b9 8a cd 72 6d 1b 4b 88 05 d2 d5 62 47 09 42 97 38 92 cb 61 36 42 ed c1 33 71 14 a2 1f be d3 c0 6d d6 78 b5 ee ad c3 82 d3 56 7e 63 7d 0d d2 aa 96 b2 f1 04 dd aa 90 d5 ec ad 7a 3a d0 9a 00 72 14 8d d0 11 b0 6c 46 e4 da 86 44 69 a7 3b aa 66 38 a4 03 13 2e 2c 72 77 f4 9c 50 a9 6c bf 97 84 99 fb 4b be 6a 2a 52 48 54 7e 00 83 05 ec 9b c6 e9 7f 2a 4e ab 79 99 db 61 f6 d0 ce f1 50 d8 f3 0c 83 ba 00 91 b7 0b 8b f4 93 a1 3a 43 0e a4 ed 98 ce 8a 85 97 f6 6d 9e a5 96 9d 34 ab 43 68 Data Ascii: 9]-P0MJ\^P8#]P\|"?8#Q(f5;pJb)hQd]e4:cZ.y,qm$rmKbGB8a6B3qmxV~c}z:rlFDi;f8.,rwPlKjRHT~NyaP:Cm4Ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	50259	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	1109	OUT	GET /ibs:dpid=903&dpuuid=25d05297-4043-442c-ad28-aa0eb5db090d HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997
2024-07-05 05:56:29 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: k97sgx/xQQs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-01d209844.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	50261	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	1345	OUT	GET /ibs:dpid=3047&dpuuid=6030D8AB173F1A&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997
2024-07-05 05:56:29 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 2nTpV1uCQxc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0682f52e2.edge-irl1.demdex.com 3 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	50260	18.130.29.255	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	587	OUT	GET /dv/sync?tid=6 HTTP/1.1 Host: ag.innovid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:29 UTC	388	IN	HTTP/1.1 302 Found Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Length: 0 Connection: close Location: https://dpm.demdex.net/ibs:dpid=80742&dpuuid=c958e13d-70ba-4ec0-af46-73a1a1dfc0e3 Set-Cookie: uuid=c958e13d-70ba-4ec0-af46-73a1a1dfc0e3-20240705 01:56:29; Max-Age=7776000; Expires=Thu, 03 Oct 2024 05:56:29 GMT; SameSite=None; Path=/; Domain=.innovid.com; Secure Request-Time: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	50263	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	1181	OUT	GET /ibs:dpid=771&dpuuid=CAESEO-44wYLLjHm6fOR1-kzhvc&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220
2024-07-05 05:56:29 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: /e285bFfQ7Q= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0da8ccf03.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	50264	23.20.216.210	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	591	OUT	GET /CookieSyncAdobe HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:29 UTC	128	IN	HTTP/1.1 204 No Content Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	50265	3.75.62.37	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	684	OUT	GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=68751917230853503114135629145946568930&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:29 UTC	671	IN	HTTP/1.1 302 Found Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=68751917230853503114135629145946568930&gdpr=0&gdpr_consent=&uid=68751917230853503114135629145946568930&verify=true Age: 0 Connection: close Server: ATS/9.1.10.121 Set-Cookie: A3=d=AQABBA2Lh2YCEHShiHVXtqAi9ue3Z2gIFZYFEgEBAQHciGaRZtxA0iMA_eMAAA&S=AQAAAsFS6VmvMTD7rbQpEf5ZBDI; Expires=Sat, 5 Jul 2025 11:56:29 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	50267	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	1412	OUT	GET /ibs:dpid=57282&dpuuid=18FDA53A2A05BEF7FBA9ECC41EBF7AC4 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332
2024-07-05 05:56:29 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: jlK/Y4M7RJ4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-035930d82.edge-irl1.demdex.com 3 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	50273	76.223.111.18	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	779	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: dmpsync.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=2550234816237896863704; tluid=2550234816237896863704
2024-07-05 05:56:29 UTC	689	IN	HTTP/1.1 302 Found Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Length: 0 Connection: close Location: https://dpm.demdex.net/ibs:dpid=72352&dpuuid=2550234816237896863704&gdpr=0&gdpr_consent= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=2550234816237896863704; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 03 Oct 2024 05:56:29 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=2550234816237896863704; Max-Age=7776000; Expires=Thu, 03 Oct 2024 05:56:29 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	50272	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	1439	OUT	GET /ibs:dpid=49276&dpuuid=9f67d042-b1fb-4d14-8890-a63d1b470b24 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:30 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:29 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: E/9vWsUfQN0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-0e9e686c2.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:29 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	50277	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:29 UTC	1395	OUT	GET /ibs:dpid=22054 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:30 UTC	905	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:30 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 9d1gDLpvR/w= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-035930d82.edge-irl1.demdex.com 1 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	50279	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	1439	OUT	GET /ibs:dpid=80742&dpuuid=c958e13d-70ba-4ec0-af46-73a1a1dfc0e3 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:30 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:30 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: xgEq0VarRI0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-043b36820.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	50274	52.16.78.59	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	737	OUT	GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=68751917230853503114135629145946568930?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:30 UTC	536	IN	HTTP/1.1 302 Found Date: Fri, 05 Jul 2024 05:56:30 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.23.84 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=68751917230853503114135629145946568930?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	50280	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	1201	OUT	GET /ibs:dpid=3047&dpuuid=6030D8AB173F1A&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:30 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:30 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: sxf+GLKlQNA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-00ce9d1b4.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	50284	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	1423	OUT	GET /ibs:dpid=53196&dpuuid=Q7734453881467559336 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:30 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:30 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Eh3Ms3RiT/U= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0a60144b6.edge-irl1.demdex.com 5 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	50286	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	1199	OUT	GET /ibs:dpid=57282&dpuuid=18FDA53A2A05BEF7FBA9ECC41EBF7AC4 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:30 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:30 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Y3Xm7gIGTUg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-0371282fc.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	50287	3.75.62.37	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	846	OUT	GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=68751917230853503114135629145946568930&gdpr=0&gdpr_consent=&uid=68751917230853503114135629145946568930&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBA2Lh2YCEHShiHVXtqAi9ue3Z2gIFZYFEgEBAQHciGaRZtxA0iMA_eMAAA&S=AQAAAsFS6VmvMTD7rbQpEf5ZBDI
2024-07-05 05:56:30 UTC	719	IN	HTTP/1.1 302 Found Date: Fri, 05 Jul 2024 05:56:30 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19cu~2jdh;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 05-Jul-2025 05:56:30 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-QzMRMEVE2pENmt5zwgcb3Cdt1QZ5mD2iNo0-~A Age: 0 Connection: close Server: ATS/9.1.10.121 Set-Cookie: A3=d=AQABBA2Lh2YCEHShiHVXtqAi9ue3Z2gIFZYFEgEBAQHciGaRZtxA0iMA_eMAAA&S=AQAAAsFS6VmvMTD7rbQpEf5ZBDI; Expires=Sat, 5 Jul 2025 11:56:30 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	50289	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	1446	OUT	GET /ibs:dpid=72352&dpuuid=2550234816237896863704&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:30 UTC	892	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:30 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: q3pT73r9TdM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0485758a3.edge-irl1.demdex.com 12 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	50288	108.138.7.18	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	596	OUT	GET /ptc/05d32363-d534-4d93-9b65-cde674775e71.js HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:31 UTC	680	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 9077 Connection: close Date: Fri, 05 Jul 2024 05:56:32 GMT Last-Modified: Thu, 13 Jun 2024 09:22:21 GMT ETag: "d2ba765f9d6c67ba7509d5da2286bbb7" x-amz-server-side-encryption: AES256 Content-Encoding: gzip x-amz-version-id: .7nUC3X5TW_ivyGxSQ.GDKNPomyOddlI Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 61c90c70feca5f532bf48bc0dc85d516.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: I2s3-Nti1f2Ftojiem2whtJCniFC7eJgm8yMWG3Yfl3W41_ATHDHrA== Timing-Allow-Origin: * age: 0 cache-control: max-age=900 Access-Control-Allow-Origin: *
2024-07-05 05:56:31 UTC	9077	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 6b 5b db ba d2 e8 67 fa 3c eb 3f 18 ef 77 93 a4 38 4e 02 2d 5d 0d cb ed cb a5 5d 84 03 94 4d 28 dd 9b cb ee 63 6c 25 71 71 ec 2c db 09 64 95 fc f7 33 a3 8b 2d db 72 a0 eb 72 3e 9c f4 29 c4 d2 68 34 1a cd 8c 66 46 b2 68 b5 b4 bd 70 32 8f bc e1 28 d1 36 da ed ad e6 46 7b e3 95 b6 e7 7b ce dd b9 ed 13 ed 28 71 4d 43 fb dc d7 4e ed 84 04 89 76 4a 02 d7 0b 86 3f bd f8 e9 c5 bd 17 b8 e1 bd 99 c2 fe ea 87 b7 b6 af 59 5a 45 c5 e3 a3 f6 7d b1 5d 6e d7 27 49 02 28 63 45 cb b4 4a b4 fd e9 45 01 ab e9 05 5e 02 2d 95 c5 a2 55 b1 32 76 22 6f 92 c4 8a 66 a2 e6 89 96 e6 8c 44 b1 17 06 88 e2 bb 7e 1f e9 5d 4d bf 8d 3c 77 48 9a 5f ce 3a 9d b6 f9 2d d6 0d 4d 9f 38 0e d6 b4 5f bb 9b 1b 9b 5b 9b 4d f7 f5 e6 ab e6 2b f7 ed 66 f3 ed ed d6 eb Data Ascii: }k[g<?w8N-]]M(cl%qq,d3-rr>)h4fFhp2(6F{{(qMCNvJ?YZE}]n'I(cEJE^-U2v"ofD~]M<wH_:-M8_[M+f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	50291	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	1203	OUT	GET /ibs:dpid=49276&dpuuid=9f67d042-b1fb-4d14-8890-a63d1b470b24 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:30 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:30 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: xyV1gvy0TK8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-0e61a2f28.edge-irl1.demdex.com 7 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:30 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	50297	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	1417	OUT	GET /ibs:dpid=782&dpuuid=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:31 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: tt0I+8esQfI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0e7d3f901.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	50298	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	1159	OUT	GET /ibs:dpid=22054 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:31 UTC	905	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 5CbiY+WYR7I= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-03bee4256.edge-irl1.demdex.com 1 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	50302	52.16.78.59	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:30 UTC	763	OUT	GET /map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=68751917230853503114135629145946568930?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-07-05 05:56:31 UTC	729	IN	HTTP/1.1 302 Found Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.26.101 Set-Cookie: _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Tue, 01-Apr-2025 05:04:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=eb8e777ed79790ed8c55b9071d588782;Path=/;Domain=crwdcntrl.net;Expires=Tue, 01-Apr-2025 05:04:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Location: https://dpm.demdex.net/ibs:dpid=121998&dpuuid=eb8e777ed79790ed8c55b9071d588782 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50304	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	1203	OUT	GET /ibs:dpid=80742&dpuuid=c958e13d-70ba-4ec0-af46-73a1a1dfc0e3 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:31 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: wQ6My/nsSSA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-0e31bcd6d.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50305	13.107.246.42	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	563	OUT	GET /scripts/c/ms.analytics-web-3.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://publisher.liveperson.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:31 UTC	969	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 140778 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:57 GMT ETag: 0x8DC99EFA7D93FA1 x-ms-request-id: 80275c59-501e-005d-5dd9-cb85d7000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.analytics-web-3.2.18.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240705T055631Z-157bfc599762bp4g6vwuvcqvz00000000ha000000000erwu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-05 05:56:31 UTC	15415	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 41 6e 61 6c 79 74 69 63 73 20 57 65 62 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: /! 1DS JS SDK Analytics Web, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof
2024-07-05 05:56:31 UTC	16384	IN	Data Raw: 2a 56 69 5e 65 29 2b 65 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 69 28 65 29 7b 76 61 72 20 74 3d 30 2c 6e 3d 72 65 28 7a 6e 29 7c 7c 72 65 28 47 6e 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 3d 6e 26 26 6e 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 3f 6e 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 26 46 69 3a 74 29 26 26 64 69 28 29 26 26 28 42 69 7c 7c 71 69 28 29 2c 74 3d 47 69 28 29 26 46 69 29 2c 30 3d 3d 3d 74 26 26 28 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 56 69 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 29 2c 65 7c 7c 28 74 3e 3e 3e 3d 30 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 47 69 28 65 29 7b 76 61 72 20 74 3d 28 28 4b 69 3d 33 36 Data Ascii: Vi^e)+e)}catch(t){}}function zi(e){var t=0,n=re(zn)\|\|re(Gn);return 0===(t=n&&n.getRandomValues?n.getRandomValues(new Uint32Array(1))[0]&Fi:t)&&di()&&(Bi\|\|qi(),t=Gi()&Fi),0===t&&(t=Math.floor(ViMath.random()\|0)),e\|\|(t>>>=0),t}function Gi(e){var t=((Ki=36
2024-07-05 05:56:31 UTC	16384	IN	Data Raw: 69 61 6c 69 7a 65 64 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 22 29 2c 54 3d 65 7c 7c 7b 7d 2c 76 5b 71 5d 3d 54 2c 51 28 65 5b 7a 5d 29 26 26 6a 28 22 50 6c 65 61 73 65 20 70 72 6f 76 69 64 65 20 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 20 6b 65 79 22 29 2c 72 3d 69 2c 76 5b 4c 61 5d 3d 69 3b 65 3d 24 74 28 54 2e 64 69 73 61 62 6c 65 44 62 67 45 78 74 29 2c 21 30 3d 3d 3d 65 26 26 44 26 26 28 72 5b 68 65 5d 28 44 29 2c 44 3d 6e 75 6c 6c 29 2c 72 26 26 21 44 26 26 21 30 21 3d 3d 65 26 26 28 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6d 69 29 7b 6d 69 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 79 69 5b 52 5d 3b 74 2b 2b 29 6d 69 5b 79 69 5b 74 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: ialized more than once"),T=e\|\|{},v[q]=T,Q(e[z])&&j("Please provide instrumentation key"),r=i,v[La]=i;e=$t(T.disableDbgExt),!0===e&&D&&(r[he](D),D=null),r&&!D&&!0!==e&&(D=function(e){if(!mi){mi={};for(var t=0;t<yi[R];t++)mi[yi[t]]=function(t,n){return func
2024-07-05 05:56:31 UTC	16384	IN	Data Raw: 30 2c 6c 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 66 3d 65 5b 73 5d 3b 69 66 28 66 29 7b 69 66 28 68 3c 3d 6e 29 7b 67 2e 6f 76 65 72 66 6c 6f 77 3d 76 2e 73 70 6c 69 74 28 73 29 3b 62 72 65 61 6b 7d 76 61 72 20 64 3d 6d 2e 67 65 74 45 76 65 6e 74 42 6c 6f 62 28 66 29 3b 69 66 28 64 26 26 64 2e 6c 65 6e 67 74 68 3c 3d 75 29 7b 76 61 72 20 70 3d 64 2e 6c 65 6e 67 74 68 3b 69 66 28 63 3c 74 2e 6c 65 6e 67 74 68 2b 70 29 7b 67 2e 6f 76 65 72 66 6c 6f 77 3d 76 2e 73 70 6c 69 74 28 73 29 3b 62 72 65 61 6b 7d 74 26 26 28 74 2b 3d 22 5c 6e 22 29 2c 74 2b 3d 64 2c 32 30 3c 2b 2b 6c 26 26 28 74 2e 73 75 62 73 74 72 28 30 2c 31 29 2c 6c 3d 30 29 2c 69 3d 21 30 2c 6e 2b 2b 7d 65 6c 73 65 28 64 3f 72 3a 61 29 2e 70 75 73 68 28 66 29 2c 65 2e 73 70 Data Ascii: 0,l=0;s<e.length;){var f=e[s];if(f){if(h<=n){g.overflow=v.split(s);break}var d=m.getEventBlob(f);if(d&&d.length<=u){var p=d.length;if(c<t.length+p){g.overflow=v.split(s);break}t&&(t+="\n"),t+=d,20<++l&&(t.substr(0,1),l=0),i=!0,n++}else(d?r:a).push(f),e.sp
2024-07-05 05:56:31 UTC	16384	IN	Data Raw: 69 64 65 6e 74 69 66 69 65 72 29 2c 6b 3d 77 63 28 77 2e 73 65 74 54 69 6d 65 6f 75 74 4f 76 65 72 72 69 64 65 2c 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 4f 76 65 72 72 69 64 65 29 2c 4a 3d 21 77 2e 64 69 73 61 62 6c 65 4f 70 74 69 6d 69 7a 65 4f 62 6a 26 26 21 21 72 65 28 22 63 68 72 6f 6d 65 22 29 2c 74 3d 65 2e 67 65 74 57 50 61 72 61 6d 2c 65 2e 67 65 74 57 50 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 77 2e 69 67 6e 6f 72 65 4d 63 31 4d 73 30 43 6f 6f 6b 69 65 50 72 6f 63 65 73 73 69 6e 67 26 26 28 65 7c 3d 32 29 2c 65 7c 74 28 29 7d 2c 30 3c 77 2e 65 76 65 6e 74 73 4c 69 6d 69 74 49 6e 4d 65 6d 26 26 28 48 3d 77 2e 65 76 65 6e 74 73 4c 69 6d 69 74 49 6e 4d 65 6d 29 2c 30 3c 77 2e 69 6d 6d 65 64 69 Data Ascii: identifier),k=wc(w.setTimeoutOverride,w.clearTimeoutOverride),J=!w.disableOptimizeObj&&!!re("chrome"),t=e.getWParam,e.getWParam=function(){var e=0;return w.ignoreMc1Ms0CookieProcessing&&(e\|=2),e\|t()},0<w.eventsLimitInMem&&(H=w.eventsLimitInMem),0<w.immedi
2024-07-05 05:56:31 UTC	16384	IN	Data Raw: 61 70 70 6c 79 53 65 73 73 69 6f 6e 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 56 75 28 34 2c 65 2c 71 63 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 6c 28 29 2c 65 29 2c 73 29 7d 2c 6e 2e 61 70 70 6c 79 44 65 76 69 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 64 65 76 69 63 65 3b 56 75 28 31 2c 65 2c 7a 63 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 74 2e 6c 6f 63 61 6c 49 64 2c 65 5b 32 5d 3d 74 2e 6d 61 6b 65 2c 65 5b 33 5d 3d 74 2e 6d 6f 64 65 6c 2c 65 5b 31 5d 3d 74 2e 64 65 76 69 63 65 43 6c 61 73 73 2c 65 29 2c 73 29 7d 2c 6e 2e 61 70 70 6c 79 43 6c 6f 75 64 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 63 6c 6f 75 64 3b 56 75 28 31 30 2c 65 2c 47 63 2c 28 28 65 3d Data Ascii: applySessionContext=function(e){Vu(4,e,qc,((e={})[0]=l(),e),s)},n.applyDeviceContext=function(e){var t=n.device;Vu(1,e,zc,((e={})[0]=t.localId,e[2]=t.make,e[3]=t.model,e[1]=t.deviceClass,e),s)},n.applyCloudContext=function(e){var t=n.cloud;Vu(10,e,Gc,((e=
2024-07-05 05:56:31 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 69 2c 72 29 7b 76 61 72 20 65 2c 61 2c 6f 2c 63 2c 74 2c 75 3d 69 2e 6e 61 6d 65 2c 73 3d 28 21 51 28 75 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 75 7c 7c 28 65 3d 6f 65 28 29 2c 75 3d 69 2e 6e 61 6d 65 3d 65 26 26 65 2e 74 69 74 6c 65 7c 7c 22 22 29 2c 69 2e 75 72 69 29 3b 21 51 28 73 29 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 7c 7c 28 65 3d 63 69 28 29 2c 73 3d 69 2e 75 72 69 3d 65 26 26 65 5b 59 6c 5d 7c 7c 22 22 29 2c 76 5b 73 66 5d 28 29 3f 28 61 3d 21 31 2c 30 3c 28 63 3d 76 5b 6c 66 5d 28 29 5b 66 66 5d 29 26 26 28 6f 3d 59 73 28 63 2c 2b 6e 65 77 20 44 61 74 65 29 2c 76 5b 64 66 5d 28 6f 29 7c 7c 28 6f 3d 75 6e 64 65 66 69 6e 65 64 29 29 2c 51 28 72 29 7c 7c 51 28 72 5b 63 66 5d 29 7c 7c 28 Data Ascii: ction(i,r){var e,a,o,c,t,u=i.name,s=(!Q(u)&&"string"==typeof u\|\|(e=oe(),u=i.name=e&&e.title\|\|""),i.uri);!Q(s)&&"string"==typeof s\|\|(e=ci(),s=i.uri=e&&e[Yl]\|\|""),v[sf]()?(a=!1,0<(c=v[lf]()[ff])&&(o=Ys(c,+new Date),v[df](o)\|\|(o=undefined)),Q(r)\|\|Q(r[cf])\|\|(
2024-07-05 05:56:31 UTC	16384	IN	Data Raw: 36 5d 3d 22 56 49 44 45 4f 42 55 46 46 45 52 49 4e 47 22 2c 69 5b 69 2e 56 49 44 45 4f 45 52 52 4f 52 3d 32 34 37 5d 3d 22 56 49 44 45 4f 45 52 52 4f 52 22 2c 69 5b 69 2e 56 49 44 45 4f 4d 55 54 45 3d 32 34 38 5d 3d 22 56 49 44 45 4f 4d 55 54 45 22 2c 69 5b 69 2e 56 49 44 45 4f 55 4e 4d 55 54 45 3d 32 34 39 5d 3d 22 56 49 44 45 4f 55 4e 4d 55 54 45 22 2c 69 5b 69 2e 56 49 44 45 4f 46 55 4c 4c 53 43 52 45 45 4e 3d 32 35 30 5d 3d 22 56 49 44 45 4f 46 55 4c 4c 53 43 52 45 45 4e 22 2c 69 5b 69 2e 56 49 44 45 4f 55 4e 46 55 4c 4c 53 43 52 45 45 4e 3d 32 35 31 5d 3d 22 56 49 44 45 4f 55 4e 46 55 4c 4c 53 43 52 45 45 4e 22 2c 69 5b 69 2e 56 49 44 45 4f 52 45 50 4c 41 59 3d 32 35 32 5d 3d 22 56 49 44 45 4f 52 45 50 4c 41 59 22 2c 69 5b 69 2e 56 49 44 45 4f 50 4c Data Ascii: 6]="VIDEOBUFFERING",i[i.VIDEOERROR=247]="VIDEOERROR",i[i.VIDEOMUTE=248]="VIDEOMUTE",i[i.VIDEOUNMUTE=249]="VIDEOUNMUTE",i[i.VIDEOFULLSCREEN=250]="VIDEOFULLSCREEN",i[i.VIDEOUNFULLSCREEN=251]="VIDEOUNFULLSCREEN",i[i.VIDEOREPLAY=252]="VIDEOREPLAY",i[i.VIDEOPL
2024-07-05 05:56:31 UTC	10675	IN	Data Raw: 6f 75 72 63 65 3a 6e 2e 63 53 2c 74 65 6d 70 6c 61 74 65 4e 61 6d 65 3a 6e 2e 74 4e 2c 70 72 6f 64 75 63 74 49 64 3a 6e 2e 70 69 64 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 6e 2e 63 54 2c 70 61 72 65 6e 74 49 64 3a 6e 2e 70 49 2c 70 61 72 65 6e 74 4e 61 6d 65 3a 6e 2e 70 4e 7d 29 3b 66 6f 72 28 76 61 72 20 61 2c 6f 3d 30 3b 6f 3c 65 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 28 61 3d 65 2e 61 74 74 72 69 62 75 74 65 73 5b 6f 5d 29 2e 6e 61 6d 65 21 3d 3d 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 69 64 26 26 61 2e 6e 61 6d 65 21 3d 3d 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 61 72 65 61 4e 61 6d 65 26 26 61 2e 6e 61 6d 65 21 3d 3d 74 68 69 73 2e 5f Data Ascii: ource:n.cS,templateName:n.tN,productId:n.pid,contentType:n.cT,parentId:n.pI,parentName:n.pN});for(var a,o=0;o<e.attributes.length;o++)(a=e.attributes[o]).name!==this._contentBlobFieldNames.id&&a.name!==this._contentBlobFieldNames.areaName&&a.name!==this._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	50308	142.250.184.226	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	751	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=Wm9lTENRQUFBTndOSUFONg== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkN9gLO1jEhsATUNHZnVb06TJ_nOfcUFoIZB0B_ROV6kHa-_Xi8nPEsuXQComw
2024-07-05 05:56:31 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 05 Jul 2024 05:56:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-05 05:56:31 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	50313	172.64.151.101	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	634	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:31 UTC	1162	IN	HTTP/1.1 302 Found Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=88&external_user_id=ZoeLCQAAANwNIAN6&C=1 CF-Ray: 89e51cbfe834186d-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZoeLD9HM6Z4AAD5dAATj.wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 05 Jul 2025 05:56:31 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=3586; Path=/; Domain=casalemedia.com; Expires=Thu, 03 Oct 2024 05:56:31 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=3586; Path=/; Domain=casalemedia.com; Expires=Thu, 03 Oct 2024 05:56:31 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M4OY2w1QyXtvGJBXTCf0ApEPtyS0qJ%2BKyeOzWiOQbPRSBL4tGTD8b6MCXWv6pWkh4R6elIlzpvumPkNzy0oZDEoM2abT9gxcW6L5OhIzdz3CY42vp1CbkKo%2BA4RzJ%2FlpYcBXh6vD3vvdFQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	50311	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	1187	OUT	GET /ibs:dpid=53196&dpuuid=Q7734453881467559336 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:31 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Q+3sNmEoR6Y= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-01d209844.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	50316	151.101.193.44	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	609	OUT	GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:31 UTC	588	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 65470 Accept-Ranges: bytes Date: Fri, 05 Jul 2024 05:56:31 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr18127-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1720158992.519797,VS0,VE69 X-vcl-time-ms: 69 transfer-encoding: chunked
2024-07-05 05:56:31 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-07-05 05:56:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-07-05 05:56:31 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	50315	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	1443	OUT	GET /ibs:dpid=30646?dpuuid=y-QzMRMEVE2pENmt5zwgcb3Cdt1QZ5mD2iNo0-~A HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:31 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Vq404wRKSPU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0682f52e2.edge-irl1.demdex.com 3 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	50318	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	1210	OUT	GET /ibs:dpid=72352&dpuuid=2550234816237896863704&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:31 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 6ecY71m2RX8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-0de694321.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	50322	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	1181	OUT	GET /ibs:dpid=782&dpuuid=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:32 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 3sDFIEPLR74= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-071805ff3.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:31 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	50323	37.252.171.52	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	798	OUT	GET /setuid?entity=158&code=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=HNkAzNizP5u1cR5RixtMwt64PWHTdlWANFZbzeKHi5KBjLLSIfAINX1tJ_PZ5lcC4lmHbgFtEodjV1QmluoAEaIvLa5hth-dkZuEcR3gRzQ.; receive-cookie-deprecation=1; uuid2=8382743720347916431
2024-07-05 05:56:32 UTC	1517	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 05 Jul 2024 05:56:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 05232ed7-7eee-432d-8e7e-38dc83c42294 Set-Cookie: XANDR_PANID=HNkAzNizP5u1cR5RixtMwt64PWHTdlWANFZbzeKHi5KBjLLSIfAINX1tJ_PZ5lcC4lmHbgFtEodjV1QmluoAEaIvLa5hth-dkZuEcR3gRzQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 03-Oct-2024 05:56:32 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FErk#WF']wIg2GTrh8d9!]tbPl1MwL(!R7qUY#R![kQ7tYWJWpa^$iuX>-ONG'Ni?<QG=%9sk?bIRwi:w9Ld1i[)06_pSf?(lOfM!x%H[BNqn; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 03-Oct-2024 05:56:32 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 23-Jun-2034 05:56:32 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8382743720347916431; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 03-Oct-2024 05:56:32 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 1005.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-07-05 05:56:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	50328	35.244.159.8	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	616	OUT	GET /w/1.0/sd?id=537148856&val=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:31 UTC	489	IN	HTTP/1.1 302 Found Set-Cookie: i=a2b419c2-5dde-400a-9d0e-81025b90bca1\|1720158991; Version=1; Expires=Sat, 05-Jul-2025 05:56:31 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=ZoeLCQAAANwNIAN6 Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	50326	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	1436	OUT	GET /ibs:dpid=121998&dpuuid=eb8e777ed79790ed8c55b9071d588782 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:32 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:32 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: KvFs8KJUQC0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-0e31bcd6d.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:32 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:32 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	50317	54.144.178.48	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	597	OUT	GET /sync?nid=adobe HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:31 UTC	1295	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 05 Jul 2024 05:56:31 GMT Location: https://dpm.demdex.net/ibs:dpid=390122&dpuuid=RO9hsv43VjtJegiqx3XZlggueyE Set-Cookie: sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-44ef61b2-fe37-563b-497a-08aac775d996.HUZAD87nGmfB6ts9monpnGc74iU%2BnIDtZVp3vzenSYI; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3ARO9hsv43VjtJegiqx3XZlggueyE.f1DEnV0kSRDqXApJa8DQm75QGQfLI69IqPby0eTbqqo; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCCPlp60BjABOgT87-jmQgSKb5hs.JK3gtaCCrSYariMYH6FcAw98RTjk2ouXBLt9VxHEA5Q; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIPMD_qM83gEw_KpANQ1k_u5OM7M1EA1HSai3RTqI7aomEHwYBCCPlp60BjABOgT87-jmQgSKb5hs.JK3gtaCCrSYariMYH6FcAw98RTjk2ouXBLt9VxHEA5Q; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 100 Connection: Close
2024-07-05 05:56:31 UTC	100	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 33 39 30 31 32 32 26 61 6d 70 3b 64 70 75 75 69 64 3d 52 4f 39 68 73 76 34 33 56 6a 74 4a 65 67 69 71 78 33 58 5a 6c 67 67 75 65 79 45 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dpm.demdex.net/ibs:dpid=390122&dpuuid=RO9hsv43VjtJegiqx3XZlggueyE">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	50331	172.64.151.101	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:31 UTC	700	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZoeLCQAAANwNIAN6&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZoeLD9HM6Z4AAD5dAATj.wAA; CMPS=3586; CMPRO=3586
2024-07-05 05:56:32 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 89e51cc3ebd543ee-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZoeLD9HM6Z4AAD5dAATj.wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 05 Jul 2025 05:56:32 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=3586; Path=/; Domain=casalemedia.com; Expires=Thu, 03 Oct 2024 05:56:32 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pQ9LUxD5RZwZrpU7M9hve3eB6Ay8OXMGGr7Y7pk54GHeRXyEP5oQ6YDiebvU8%2B6jjqlfV0dxRMd8M6LP%2FnLZe47qtwuxVE82Mnb%2BxR7UcWfXxbB6LfdvnUNo%2BsCUD3mPwbv0Q2naUGf4oQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-05 05:56:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	50330	108.138.7.18	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	644	OUT	GET /pcc/05d32363-d534-4d93-9b65-cde674775e71.js?DeploymentConfigName=Release_20240613&Version=3 HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:32 UTC	680	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 7118 Connection: close Date: Fri, 05 Jul 2024 05:56:33 GMT Last-Modified: Thu, 13 Jun 2024 09:22:20 GMT ETag: "23a130fd6a6a4d521f68f6c77c1406d1" x-amz-server-side-encryption: AES256 Content-Encoding: gzip x-amz-version-id: 4jKhtkHaMTvoqhRUnY2NuCnBTwc1lBBz Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 61c90c70feca5f532bf48bc0dc85d516.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: A1HehOdzvABc1PsPMygLtiHrJ3LGmmramAevLJRN0E811kWlGTOeGA== Timing-Allow-Origin: * age: 0 cache-control: max-age=900 Access-Control-Allow-Origin: *
2024-07-05 05:56:32 UTC	7118	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 3c 6b 77 da c8 92 9f c7 e7 cc 7f 10 9a bb 58 0a 42 60 3b 99 d9 8b a2 cb 38 60 27 4e fc 8a 4d 92 99 60 26 a7 25 35 a0 41 48 44 12 d8 04 b4 bf 7d ab ba f5 04 61 67 e6 ee 5d e7 04 5a fd a8 ae ae ae 77 b7 68 34 84 8e 37 5b fa f6 68 1c 0a 87 cd e6 cf f5 c3 e6 e1 73 a1 e3 d8 e6 a4 47 1c 2a 9c 87 96 aa 08 1f 6e 85 6b 12 52 37 14 ae a9 6b d9 ee e8 c7 bd 1f f7 ee 6d d7 f2 ee d5 b4 ef 6b c7 33 88 23 e8 c2 8e 86 f5 5a 58 45 da f6 b8 5b 1a 86 00 32 28 19 99 36 25 63 7f dc db 80 aa da ae 1d c2 c8 d2 ea 64 d4 66 63 60 fa f6 2c 0c 4a 86 25 2d bb e7 8b 7b a8 43 db 09 a9 bf 1b 44 d2 01 20 49 c3 b9 6b 86 b6 e7 0a 92 2c ac 7e dc fb 61 41 7c c1 a7 a6 e7 23 29 7b 63 9f 06 63 cf b1 00 d6 05 09 c7 aa 4f 80 08 53 e8 fa 4c 38 68 36 19 12 3f f8 34 Data Ascii: <kwXB`;8`'NM`&%5AHD}ag]Zwh47[hsG*nkR7kmk3#ZXE[2(6%cdfc`,J%-{CD Ik,~aA\|#){ccOSL8h6?4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50329	108.138.7.18	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	572	OUT	GET /www/bridge-WR110.js HTTP/1.1 Host: cdnssl.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:32 UTC	657	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 6089 Connection: close Date: Fri, 05 Jul 2024 05:56:33 GMT Last-Modified: Mon, 20 May 2024 10:53:04 GMT ETag: "59fa60456db5679d15a03d811a40fe1f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 x-amz-version-id: RV1_qv1iW41b5v52vW3grEK.N5_cJGdu Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 002af2e4f72157b8b4bd2de012b5b57c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: PCqJ29VN_ynhlqwU3l51I6CqukgXjjj_RFsNR9We5J5v8TopPmOkjw== age: 0 Access-Control-Allow-Origin: *
2024-07-05 05:56:32 UTC	6089	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 76 2c 61 2c 7a 3b 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 61 3d 66 61 6c 73 65 3b 7a 3d 43 6c 69 63 6b 54 61 6c 65 47 6c 6f 62 61 6c 2e 61 70 69 7c 7c 7b 7d 3b 74 3d 41 28 22 43 6c 69 63 6b 54 61 6c 65 53 65 74 74 69 6e 67 73 2e 49 6e 74 65 67 72 61 74 69 6f 6e 2e 50 72 6f 6a 65 63 74 54 79 70 65 22 2c 30 29 3b 76 3d 7b 63 6c 69 63 6b 74 61 6c 65 4f 6e 6c 79 3a 30 2c 6d 31 3a 31 2c 6d 32 3a 32 2c 6d 32 50 72 69 6d 65 3a 33 7d 3b 6e 28 29 3b 68 28 29 3b 77 28 29 3b 6c 28 29 3b 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 69 66 28 21 7a 2e 43 6c 69 63 6b 54 61 6c 65 4f 6e 52 65 61 64 79 49 6e 76 6f 6b 65 64 29 7b 7a 2e 43 6c 69 63 6b 54 61 6c 65 4f 6e 52 65 61 64 79 49 6e 76 6f 6b 65 64 3d 74 72 75 Data Ascii: (function(){var t,v,a,z;function q(){a=false;z=ClickTaleGlobal.api\|\|{};t=A("ClickTaleSettings.Integration.ProjectType",0);v={clicktaleOnly:0,m1:1,m2:2,m2Prime:3};n();h();w();l();d()}function d(){if(!z.ClickTaleOnReadyInvoked){z.ClickTaleOnReadyInvoked=tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50334	151.101.193.44	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	373	OUT	GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:32 UTC	595	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 65476 Accept-Ranges: bytes Date: Fri, 05 Jul 2024 05:56:32 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-nyc-kteb1890088-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1720158992.187762,VS0,VE66 X-vcl-time-ms: 66 transfer-encoding: chunked
2024-07-05 05:56:32 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-07-05 05:56:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-07-05 05:56:32 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-05 05:56:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	50333	172.217.16.194	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	612	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=Wm9lTENRQUFBTndOSUFONg== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkN9gLO1jEhsATUNHZnVb06TJ_nOfcUFoIZB0B_ROV6kHa-_Xi8nPEsuXQComw
2024-07-05 05:56:32 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 05 Jul 2024 05:56:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-05 05:56:32 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	50335	198.47.127.205	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	679	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:32 UTC	636	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 05 Jul 2024 05:56:31 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_218=22978-ZoeLCQAAANwNIAN6&KRTB&23194-ZoeLCQAAANwNIAN6&KRTB&23244-ZoeLCQAAANwNIAN6; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 03-Oct-2024 05:56:31 GMT; path=/ Set-Cookie: PugT=1720158991; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 04-Aug-2024 05:56:31 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-07-05 05:56:32 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50339	35.244.159.8	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	680	OUT	GET /w/1.0/sd?cc=1&id=537148856&val=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=a2b419c2-5dde-400a-9d0e-81025b90bca1\|1720158991
2024-07-05 05:56:32 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 05 Jul 2024 05:56:32 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-05 05:56:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50337	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	1207	OUT	GET /ibs:dpid=30646?dpuuid=y-QzMRMEVE2pENmt5zwgcb3Cdt1QZ5mD2iNo0-~A HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:32 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:32 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: dIZl7SgZQDc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-0481b53b7.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:32 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:32 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50343	172.64.151.101	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	464	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZoeLCQAAANwNIAN6&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZoeLD9HM6Z4AAD5dAATj.wAA; CMPS=3586; CMPRO=3586
2024-07-05 05:56:32 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:32 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 89e51cc80cb0190e-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZoeLD9HM6Z4AAD5dAATj.wAA; Path=/; Domain=casalemedia.com; Expires=Sat, 05 Jul 2025 05:56:32 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=3586; Path=/; Domain=casalemedia.com; Expires=Thu, 03 Oct 2024 05:56:32 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lccGQJ6bFilshaJ1AVmoN0vbxInifWI8SGAPvl0GK5GjbOj%2Bu6VvIoZirGTmSJNWv05K7%2BOexW1uLSFrAr0s5QNpgwvAH%2FwJiwyHiOGI1yN9YeFwfJa9dtGeGtg1Ks84CtBO2tM7%2FQUYPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-07-05 05:56:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50342	54.216.96.15	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	1431	OUT	GET /ibs:dpid=390122&dpuuid=RO9hsv43VjtJegiqx3XZlggueyE HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:32 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:32 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: caq3H+RKTwE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-0c9b644f2.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:32 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:32 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50344	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	1200	OUT	GET /ibs:dpid=121998&dpuuid=eb8e777ed79790ed8c55b9071d588782 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:33 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:32 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: s1fxSt83Re4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v062-047d3ba14.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:32 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:32 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50345	185.89.211.84	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	536	OUT	GET /setuid?entity=158&code=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8382743720347916431; anj=dTM7k!M4.FErk#WF']wIg2GTrh8d9!]tbPl1MwL(!R7qUY#R![kQ7tYWJWpa^$iuX>-ONG'Ni?<QG=%9sk?bIRwi:w9Ld1i[)06_pSf?(lOfM!x%H[BNqn
2024-07-05 05:56:33 UTC	1516	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 05 Jul 2024 05:56:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 9cb12ff7-b9e5-4eb2-a917-962f0019dc09 Set-Cookie: XANDR_PANID=fXq293WQEnvnVEF5y1F5s4okBL_iPCiL3RWhQWS83ZXrJYRYkTO_7ZJ3_JjhQKc83M-wOj7FMw4ALqbnFib7FK6m42zyH5GAbnIFvTu-XN0.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 03-Oct-2024 05:56:33 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FErk#WF']wIg2GTrh8d9!]tc#8i_jAez_UZ18%4Qw+Ai%8^#A:cR+T::rEjaQ>>YDC^+D$25A)(rF5kpv7Pt)1hG5$.i#xqes%6lPT%TvZ#; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 03-Oct-2024 05:56:33 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 23-Jun-2034 05:56:33 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8382743720347916431; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 03-Oct-2024 05:56:33 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-07-05 05:56:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50346	34.98.64.218	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:32 UTC	444	OUT	GET /w/1.0/sd?cc=1&id=537148856&val=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=a2b419c2-5dde-400a-9d0e-81025b90bca1\|1720158991
2024-07-05 05:56:33 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 05 Jul 2024 05:56:33 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-05 05:56:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50347	157.240.252.35	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:33 UTC	636	OUT	GET /fr/b.php?p=1531105787105294&e=ZoeLCQAAANwNIAN6&t=2592000&o=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:33 UTC	1984	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/gif report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7388026619009474990"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} Date: Thu, 04 Jul 2024 22:56:33 PDT document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" Pragma: public Cache-Control: public, max-age=0 Expires: Thu, 04 Jul 2024 22:56:33 PDT
2024-07-05 05:56:33 UTC	765	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 72 65 70 6f 72 74 69 6e 67 2d 65 6e 64 70 6f 69 6e 74 73 3a 20 63 6f 6f 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 6f 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 63 6f 65 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 65 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 64 65 66 61 75 6c 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 72 6f 77 73 65 72 5f 65 72 72 6f Data Ascii: X-Content-Type-Options: nosniffreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_erro
2024-07-05 05:56:33 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50348	198.47.127.205	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:33 UTC	563	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=ZoeLCQAAANwNIAN6 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KRTBCOOKIE_218=22978-ZoeLCQAAANwNIAN6&KRTB&23194-ZoeLCQAAANwNIAN6&KRTB&23244-ZoeLCQAAANwNIAN6; PugT=1720158991
2024-07-05 05:56:33 UTC	636	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 05 Jul 2024 05:56:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_218=22978-ZoeLCQAAANwNIAN6&KRTB&23194-ZoeLCQAAANwNIAN6&KRTB&23244-ZoeLCQAAANwNIAN6; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 03-Oct-2024 05:56:32 GMT; path=/ Set-Cookie: PugT=1720158992; domain=pubmatic.com; SameSite=None; secure; expires=Sun, 04-Aug-2024 05:56:32 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-07-05 05:56:33 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50354	63.32.136.28	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:33 UTC	1195	OUT	GET /ibs:dpid=390122&dpuuid=RO9hsv43VjtJegiqx3XZlggueyE HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=68751917230853503114135629145946568930; dpm=68751917230853503114135629145946568930; dextp=358-1-1720158984986\|477-1-1720158985096\|771-1-1720158985207\|782-1-1720158985318\|992-1-1720158985428\|1123-1-1720158985539\|903-1-1720158985649\|1175-1-1720158985779\|1957-1-1720158985885\|3047-1-1720158986001\|22054-1-1720158986120\|30646-1-1720158986231\|53196-1-1720158986338\|38117-1-1720158986448\|57282-1-1720158986560\|49276-1-1720158986671\|72352-1-1720158986790\|80742-1-1720158986898\|81309-1-1720158987004\|121998-1-1720158987107\|144228-1-1720158987217\|144229-1-1720158987326\|144230-1-1720158987436\|144231-1-1720158987553\|144232-1-1720158987663\|144233-1-1720158987774\|144234-1-1720158987885\|144235-1-1720158987997\|144236-1-1720158988109\|144237-1-1720158988220\|147592-1-1720158988332\|390122-1-1720158988465
2024-07-05 05:56:33 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:33 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: e+cJO+4mRpA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v062-05c71d301.edge-irl1.demdex.com 2 ms set-cookie: dpm=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:33 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=68751917230853503114135629145946568930; Max-Age=15552000; Expires=Wed, 01 Jan 2025 05:56:33 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-07-05 05:56:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50349	18.214.123.106	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:33 UTC	457	OUT	POST /quota?ct=0 HTTP/1.1 Host: q-aus1.clicktale.net Connection: keep-alive Content-Length: 207 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:33 UTC	207	OUT	Data Raw: 7b 22 72 65 63 6f 72 64 69 6e 67 54 79 70 65 73 22 3a 5b 35 5d 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 6d 69 63 72 6f 73 6f 66 74 2d 33 36 35 2f 62 75 79 2f 63 6f 6d 70 61 72 65 2d 61 6c 6c 2d 6d 69 63 72 6f 73 6f 66 74 2d 33 36 35 2d 70 72 6f 64 75 63 74 73 3f 6f 63 69 64 3d 63 6d 6d 69 62 62 77 73 34 64 33 22 2c 22 70 72 6f 6a 65 63 74 49 64 22 3a 32 34 32 32 2c 22 75 75 22 3a 22 33 61 62 30 33 30 62 34 2d 66 64 63 35 2d 61 36 62 63 2d 39 65 31 35 2d 34 35 39 61 39 64 33 34 65 37 65 36 22 2c 22 73 6e 22 3a 31 2c 22 70 6e 22 3a 31 7d Data Ascii: {"recordingTypes":[5],"url":"https://www.microsoft.com/en-us/microsoft-365/buy/compare-all-microsoft-365-products?ocid=cmmibbws4d3","projectId":2422,"uu":"3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6","sn":1,"pn":1}
2024-07-05 05:56:33 UTC	324	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:33 GMT Content-Type: application/json Content-Length: 29 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression
2024-07-05 05:56:33 UTC	29	IN	Data Raw: 7b 22 61 6c 6c 6f 77 65 64 52 65 63 6f 72 64 69 6e 67 54 79 70 65 73 22 3a 5b 35 5d 7d Data Ascii: {"allowedRecordingTypes":[5]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50350	54.194.186.155	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:33 UTC	875	OUT	GET /pageview?ex=&pvt=n&la=en-US&uc=0&url=https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fbuy%2Fcompare-all-microsoft-365-products%3Focid%3Dcmmibbws4d3&dr=&dw=1263&dh=6283&ww=1280&wh=907&sw=1280&sh=1024&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6&sn=1&hd=1720158992&v=13.89.2&pid=2422&pn=1&r=652266 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:33 UTC	469	IN	HTTP/1.1 204 No Content Date: Fri, 05 Jul 2024 05:56:33 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50353	54.194.186.155	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:33 UTC	806	OUT	GET /pageEvent?value=H4sIAAAAAAAAAwsIcVZwD%2FV0UahRMDBNMTYyNjPWTTE1NtE1SbE01rVMMjPVTU5JNTM3MTc3TTU3BAC5OujJLwAAAA%3D%3D&ct=2&isETR=false&isCustomHashId=false&v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6&r=733361 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:33 UTC	469	IN	HTTP/1.1 204 No Content Date: Fri, 05 Jul 2024 05:56:33 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50352	54.194.186.155	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:33 UTC	770	OUT	GET /pageEvent?value=H4sIAAAAAAAAA3POz0vLTLdSCErNSU0sTo03MjAyMTAzNAYAgJLsFxgAAAA%3D&ct=2&isETR=false&isCustomHashId=false&v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6&r=590981 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:34 UTC	469	IN	HTTP/1.1 204 No Content Date: Fri, 05 Jul 2024 05:56:33 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50351	54.194.186.155	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:33 UTC	765	OUT	GET /dvar?v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6&dv=H4sIAAAAAAAAA6tWCghxjncvzUxRslIyME0xNjI2M9ZNMTU20TVJsTTWtUwyM9VNTkk1MzcxNzdNNTdUqgUAotlAIzMAAAA%3D&ct=2&r=775330 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:34 UTC	469	IN	HTTP/1.1 204 No Content Date: Fri, 05 Jul 2024 05:56:33 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50356	3.209.6.182	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:34 UTC	693	OUT	POST /exist?v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6 HTTP/1.1 Host: srm.bf.contentsquare.net Connection: keep-alive Content-Length: 1328 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:34 UTC	1328	OUT	Data Raw: 7b 22 70 72 6f 6a 65 63 74 49 64 22 3a 22 32 34 32 32 22 2c 22 66 69 6c 74 65 72 22 3a 32 2c 22 68 61 73 68 65 73 22 3a 5b 22 65 65 32 62 38 34 31 35 32 39 65 35 64 30 36 61 65 61 65 37 66 36 35 62 34 31 33 62 34 30 62 62 66 65 66 35 31 36 31 63 39 66 61 64 39 61 38 61 31 37 35 35 64 61 63 30 33 38 30 36 32 39 31 62 22 2c 22 64 36 33 31 66 30 66 34 37 39 39 64 33 33 64 65 33 64 61 35 63 61 30 37 32 63 65 32 61 31 64 35 62 61 33 31 39 63 63 61 35 33 35 33 61 66 64 35 37 33 63 37 32 39 32 38 61 65 66 31 63 65 63 65 22 2c 22 33 35 65 66 34 37 34 30 31 32 35 63 31 37 66 37 33 66 30 31 33 36 37 31 32 39 66 38 32 62 38 32 62 37 32 34 65 33 35 63 33 34 36 30 32 31 35 37 36 37 61 30 63 34 39 64 64 64 65 65 39 30 31 30 22 2c 22 65 34 30 65 64 31 39 32 61 37 66 37 Data Ascii: {"projectId":"2422","filter":2,"hashes":["ee2b841529e5d06aeae7f65b413b40bbfef5161c9fad9a8a1755dac03806291b","d631f0f4799d33de3da5ca072ce2a1d5ba319cca5353afd573c72928aef1cece","35ef4740125c17f73f01367129f82b82b724e35c3460215767a0c49dddee9010","e40ed192a7f7
2024-07-05 05:56:34 UTC	158	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:34 GMT Content-Type: application/json Content-Length: 2 Connection: close Access-Control-Allow-Origin: *
2024-07-05 05:56:34 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50358	157.240.253.35	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:34 UTC	400	OUT	GET /fr/b.php?p=1531105787105294&e=ZoeLCQAAANwNIAN6&t=2592000&o=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:34 UTC	1984	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/gif report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7388026624975822114"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} Date: Thu, 04 Jul 2024 22:56:34 PDT document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" Pragma: public Cache-Control: public, max-age=0 Expires: Thu, 04 Jul 2024 22:56:34 PDT
2024-07-05 05:56:34 UTC	765	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 72 65 70 6f 72 74 69 6e 67 2d 65 6e 64 70 6f 69 6e 74 73 3a 20 63 6f 6f 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 6f 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 63 6f 65 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 65 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 64 65 66 61 75 6c 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 72 6f 77 73 65 72 5f 65 72 72 6f Data Ascii: X-Content-Type-Options: nosniffreporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_erro
2024-07-05 05:56:34 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50360	18.214.123.106	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:34 UTC	354	OUT	GET /quota?ct=0 HTTP/1.1 Host: q-aus1.clicktale.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:34 UTC	143	IN	HTTP/1.1 404 Not Found Date: Fri, 05 Jul 2024 05:56:34 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 42 Connection: close
2024-07-05 05:56:34 UTC	42	IN	Data Raw: 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 2e Data Ascii: The requested resource could not be found.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50357	54.194.186.155	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:34 UTC	1157	OUT	GET /dvar?v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6&dv=H4sIAAAAAAAAA1WQUU%2FCMBSF%2F8rNnjSucUDA6NtlKzjCgIzOEAkhdavSMFfSFWUR%2F7vdMIhPp7f39pzv9svB%2FhrZut3z7ntAYEknJJm7YMVHFwZxI3ROooULM0b68QqiTq8LR1gQ3Gfgb5QqhbZ1xLeyeAOzEacJX73vuJalKoDxl9zeKi0gkBlPjUydB6fJ9B33F0GlMoO69yFNZdv0sBNaiiIVgOeh9l3Hu6s5a8gLwmG%2FOQ5iFwJKAuoCJi6MkIxmKzt%2BiXyy%2FOMey6IBZ7oCn2EJRkFSyN3%2BALEgTzy3xEbaLY7QpNfktbLWmSrCmFH%2FERIWjsNnZOF0AjGdTWMWToY23leFsZsBltuIayPSDbwqDYEwXObWj2meNgzTIq9I%2B%2Bzb6nQ9z77H%2FJNXJbEMeItgZTk39WcSmGmVwQ38K6%2BQRtcra4tIGgdL%2Bv0DZ6oExekBAAA%3D&ct=2&r=023529 HTTP/1.1 Host: c.clicktale.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:34 UTC	469	IN	HTTP/1.1 204 No Content Date: Fri, 05 Jul 2024 05:56:34 GMT Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50361	52.4.178.162	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:34 UTC	542	OUT	POST /v2/recording?rt=5&rst=1720158992388&let=1720158993085&v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6&ri=1&ct=2 HTTP/1.1 Host: k-aus1.clicktale.net Connection: keep-alive Content-Length: 107442 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:34 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd 0b 93 db c6 92 26 fa 57 70 35 77 4e cc cc 35 ba f1 7e 48 a1 70 c8 2d d9 47 bb b6 ac 70 cb 3e b3 b1 9e 50 80 40 91 0d 37 08 d0 00 d8 0f cf cc 7f d9 df b2 bf ec 16 40 b2 1b 04 01 66 55 31 49 16 9a 3c bb 23 f7 03 0d 80 55 99 5f 66 e5 e3 cb ff fd 9f af ca c7 19 79 f5 da 70 bf 79 15 05 25 fd 4a 77 0d 4d b7 3d df 37 4c cf fc e6 55 90 4f 8a 57 af ff f7 7f be 22 77 24 2d 3f 05 53 7a c9 ab cf 5f ae 94 1f 7e fd f8 5e f9 2f 45 b3 23 d3 30 1d 53 8d 6c d3 52 ad c8 37 55 7f e4 d8 6a 18 11 c7 b5 5c d7 26 ae fe ea bf ff e3 bf bf d9 fe 24 b7 e7 49 57 59 3a 8e 27 af 95 5f 48 42 82 82 7c 35 34 c3 d2 1c dd 5c de f2 e9 6f c2 e2 63 44 ef f8 cd ab 71 96 4f 83 f2 d5 6b ed 9b 57 23 fa 07 bf fe f2 91 de e5 a6 2c 67 c5 eb cb cb fb fb fb 8b 69 1c Data Ascii: &Wp5wN5~Hp-Gp>P@7@fU1I<#U_fypy%JwM=7LUOW"w$-?Sz_~^/E#0SlR7Uj\&$IWY:'_HB\|54\ocDqOkW#,gi
2024-07-05 05:56:34 UTC	16384	OUT	Data Raw: 21 bc 36 42 e6 3e e6 b6 d7 c4 63 21 9c 2d 0a e2 9c 9e 85 c0 ed 63 a6 37 dc a1 91 99 fe f5 80 2d c4 e2 84 b1 31 9e be 96 cd e5 c0 f8 c3 9a 89 95 5e 74 36 1c 30 19 89 ae eb 64 d2 02 24 23 01 4f 62 b1 0d 5c 5e 29 fa cc 23 74 35 c3 03 44 38 8d 04 d3 04 11 39 8c c4 4f d9 5d 4c 6a fa 97 df d8 1b 0d 7a 95 c4 3d 39 43 01 0f e0 e0 34 14 ce 0e 5d cd f4 af 07 6c 28 a6 b5 28 d6 43 8c cb bb 85 a1 f8 92 cd 28 88 2f 64 f4 cb dd c1 2c 44 53 29 3a 5b 0c 98 ac 44 d7 75 32 a9 00 96 95 80 db 99 0d ec 1a 47 e7 08 ed cc f0 58 11 f4 ea 51 e7 d0 44 d6 ba 06 8f 9c e0 ac 1e 75 45 82 6a 52 54 8f 9a bd 4a de cc dd 4b ac e0 58 36 0e 1e d0 c1 59 3d ca 34 a1 83 a5 7a d4 3d 57 8f ee a3 7a b4 5f f2 9b fe dd c6 55 47 af 1e 85 07 83 e8 3a b6 59 70 71 79 a8 e9 0d 71 88 a8 2b e5 38 57 8f 0a Data Ascii: !6B>c!-c7-1^t60d$#Ob\^)#t5D89O]Ljz=9C4]l((C(/d,DS):[Du2GXQDuEjRTJKX6Y=4z=Wz_UG:Ypqyq+8W
2024-07-05 05:56:34 UTC	16384	OUT	Data Raw: 02 96 bd 12 29 09 33 d5 eb f0 94 04 42 e9 4a a3 24 8c 94 ae c3 53 12 08 a1 2b 0d 34 1a 09 5d 47 45 49 20 34 af 34 fc d8 a5 79 ed 93 92 40 28 55 49 94 84 d7 a5 54 bd 50 12 fb 0f d6 3f cd d4 ef ab a5 da f2 4e ba 50 12 e3 18 b9 e1 28 09 0f 21 be 66 e6 07 bc 1d 79 f6 11 28 09 0f 21 4d 25 ed 2e 9e 63 d8 99 62 d8 2d c5 43 88 57 49 5b 8a 67 26 5e 1d 09 25 e1 c1 1a 56 22 25 e1 19 89 58 47 40 49 78 18 fd 2a f3 d1 c8 db 51 b8 1e 4e 49 78 6e 47 ae a2 17 4a c2 c3 08 4f 99 bd ba 3c 17 a6 41 b8 29 09 0f 16 a7 72 53 12 1e ac 4d e5 a6 24 3c 84 34 95 99 92 f0 60 69 2a ff 7b 87 60 62 49 94 84 e7 1a da fc 0e bd 01 c0 f2 55 1a 0d e1 99 a9 57 07 a7 21 3c 84 7a 95 44 43 78 46 ea d5 c1 69 08 0f 21 5e a5 01 45 23 f1 ea 98 68 08 0f a1 63 a5 61 c6 2e 1d 6b 8f 34 84 87 50 9f d2 68 Data Ascii: )3BJ$S+4]GEI 44y@(UITP?NP(!fy(!M%.cb-CWI[g&^%V"%XG@IxQNIxnGJO<A)rSM$<4`i{`bIUW!<zDCxFi!^E#hca.k4Ph
2024-07-05 05:56:34 UTC	16384	OUT	Data Raw: ee 71 27 2b 60 5b 64 37 a2 59 5a 74 f9 22 c3 94 3a 79 95 ed a7 eb 86 26 7e fe 38 d3 bf ab 5a e5 3f 94 fa 67 98 58 1f 1e 1b 69 3d 43 08 56 9e 06 cc ba 7c a4 4d 86 af 19 b5 b7 4b 35 75 b8 86 8e c7 4d 58 3f 28 0c 69 89 01 39 e6 51 8d 3f 1b ba 7f 7d 80 80 0f 59 7e f3 91 ec 28 d5 79 ba 62 93 67 46 17 8d ee a6 97 3d a6 a9 41 ec 95 b4 e4 60 6c b2 57 3e 1e 14 1e 41 bd f5 f8 07 c3 ce 50 2f 91 e6 66 57 7b ce 95 3f 5e 4f fa 7e 14 87 8e 67 67 3a 3e d8 7e 12 79 76 ea 66 ae 9d aa 2c 17 69 52 b8 0a dd 68 70 07 02 6c 48 54 2e ae b2 95 2b d8 1d 92 5e 1e c1 e0 d5 7b 78 e5 f4 71 e3 f1 25 6c 6a 6c 38 de c0 bd 67 8f 3f dd 26 cb ff f3 bf fe f7 c2 5a de 2a 2b 2f 8b 42 ef 3b b3 4c 59 a9 5a de 29 35 7b 34 21 5c bb d9 fe 63 35 53 f6 b2 9c 2a 6b be aa b3 db 64 a1 fe c9 6a 18 cd 4f Data Ascii: q'+`[d7YZt":y&~8Z?gXi=CV\|MK5uMX?(i9Q?}Y~(ybgF=A`lW>AP/fW{?^O~gg:>~yvf,iRhplHT.+^{xq%ljl8g?&Z+/B;LYZ)5{4!\c5SkdjO
2024-07-05 05:56:34 UTC	16384	OUT	Data Raw: d1 1a 15 fa 10 cb 31 0d c8 c2 02 2c 29 b2 72 f7 6d d7 ff 3d f9 6d 27 e1 ad 73 05 4c c2 21 39 77 15 5f df fe 9d 8d ab fa 5c d4 4d 52 18 32 04 31 9a ec 6f 16 9d 3e 21 3f 99 7b 91 3b f6 6e f1 e1 ad 91 1f 01 8b 72 ec 23 e0 18 74 0e 4d c2 a4 6b cd b2 81 9f e3 d8 00 5d 81 d6 58 cd 23 ec 59 23 c4 06 8b e3 f6 70 f8 d0 19 67 4d 39 72 18 6d c5 1c 1c dd 0d 68 ed b9 56 b9 dd b9 56 a3 89 cf be 38 a0 5f 79 3a 70 5c 6b 32 93 a0 e0 ab a0 90 89 c1 e3 c5 a6 06 fc bd 11 b6 93 ab 21 58 c2 36 f1 e6 15 09 3b 8a a6 1c fc 03 4d ef 4e ac e0 96 e3 1c 3e 9c f0 ee 14 9f ba e0 47 d0 f1 cf 1c 3e fc 09 02 34 e5 c6 29 54 4e ba e8 4b 77 0a ca 87 28 6f 1e d4 b4 8d f8 6b df 73 50 10 33 31 e6 eb 1d 02 b8 9a 9c 00 16 7c 5d 0d 3b 88 ab 9d ab c8 f1 41 e4 cf f8 c5 ae b4 f7 cb e7 c3 60 56 c4 42 Data Ascii: 1,)rm=m'sL!9w_\MR21o>!?{;nr#tMk]X#Y#pgM9rmhVV8_y:p\k2!X6;MN>G>4)TNKw(oksP31\|];A`VB
2024-07-05 05:56:34 UTC	16384	OUT	Data Raw: 94 fb 37 a7 a9 aa ac ae d4 be 18 86 f2 54 0f 47 f3 0c 41 c1 0c a1 c8 fa 74 23 03 fc 96 71 e8 e2 60 0f 77 57 1f db 56 a3 2a 9a 52 d9 38 fd 8b bb c3 d8 34 66 8a 25 94 8a 87 8b 8e 90 d4 94 6c 02 af d7 93 a9 d0 b1 25 8d 60 3b 41 fa d0 a4 1d 24 e1 5c 32 41 96 e9 f7 30 53 11 cc 76 77 4e 2f 04 f0 10 2f 64 37 1d 34 9a 5f 11 d3 26 dc 24 db 28 ef 4e 0f 73 9a 7e 96 06 c3 c5 49 95 b6 b2 bb 20 c8 63 34 e5 e7 61 fc 98 ea b1 a3 b3 fd 93 21 79 37 09 c7 33 3b 37 3f 8c c7 d2 e6 78 2c c3 3f 05 fe a9 f0 4f db 82 67 03 78 06 ff 14 f8 a7 c2 3f 6d 50 98 56 7e 0f 77 89 02 04 ac 25 2e bb 66 59 ac 58 7b 3a 9f 01 08 6f 81 15 ce dc cc 16 8e 3c 93 c0 c7 b4 df c9 11 96 2d c6 9c 4c c9 eb 4e 66 2f e7 ae b3 1e 6f 3f 81 fe 9e 7b d1 a6 bb f9 fb 16 fd 38 28 f1 59 13 af c0 ef d4 2b f0 3b d1 Data Ascii: 7TGAt#q`wWV*R84f%l%`;A$\2A0SvwN//d74_&$(Ns~I c4a!y73;7?x,?Ogx?mPV~w%.fYX{:o<-LNf/o?{8(Y+;
2024-07-05 05:56:34 UTC	9138	OUT	Data Raw: 9b 46 2a 1b c4 7a 82 fe 39 1b ed ff 92 ed 7b f1 59 e0 2e a2 79 cf fc d5 f5 fd 2d c9 fa c9 56 f5 84 96 6e 98 ad 5b 3a da 70 68 db a5 55 5c af d1 c9 e0 ee ca b5 00 ee bb 18 ad 95 c0 5b 02 e8 bd 22 7b 15 87 d7 ce b9 26 d3 b7 ac e7 06 4b b2 3b 05 65 f3 7a af b3 34 7b 4d 59 ad 2f b5 d3 bb 56 b2 6f 2f d5 9b 2e 22 5b b3 a9 b4 d4 ab d1 23 d4 38 3b de 4f 78 37 01 b1 96 14 67 47 f9 dd 83 ab 92 37 93 d1 8d 28 f4 60 af 46 de 81 28 3f ac 5a 6f ae f7 37 80 b0 6d cb f9 4c f7 07 6f d7 70 d6 57 f2 f7 73 9e a1 bd 76 9f aa d1 dc a7 0b 74 d7 6a 2a 6b e4 dc cc 2e 5e bb 98 75 66 07 36 b1 48 4c 7b c0 ff 37 74 db bd 5d 74 9b 98 0c 5d 05 b7 0e b9 fb 71 71 dd ec db b0 72 dd b2 d6 f6 de 6d c2 54 cd 1e f0 ff 5d b4 bd 33 ce 36 97 5e 18 69 d3 de e3 f2 91 be 6d c9 0a 37 51 56 63 f0 78 Data Ascii: Fz9{Y.y-Vn[:phU\["{&K;ez4{MY/Vo/."[#8;Ox7gG7(`F(?Zo7mLopWsvtjk.^uf6HL{7t]t]qqrmT]36^im7QVcx
2024-07-05 05:56:34 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:56:34 GMT Content-Length: 0 Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50362	3.209.6.182	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:34 UTC	422	OUT	GET /exist?v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6 HTTP/1.1 Host: srm.bf.contentsquare.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:34 UTC	165	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 05 Jul 2024 05:56:34 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 48 Connection: close Allow: POST
2024-07-05 05:56:34 UTC	48	IN	HTTP method not allowed, supported methods: POST

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50365	44.214.131.22	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:35 UTC	476	OUT	GET /v2/recording?rt=5&rst=1720158992388&let=1720158993085&v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6&ri=1&ct=2 HTTP/1.1 Host: k-aus1.clicktale.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:35 UTC	207	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 05 Jul 2024 05:56:35 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 19 Connection: close Allow: OPTIONS, POST X-Content-Type-Options: nosniff
2024-07-05 05:56:35 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50374	18.66.147.58	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:38 UTC	576	OUT	GET /microsoft/lp_ada_enhancements-prod.js HTTP/1.1 Host: static-assets.fs.liveperson.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://publisher.liveperson.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:38 UTC	529	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 336350 Connection: close Last-Modified: Mon, 01 Jul 2024 15:18:13 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 05 Jul 2024 05:56:39 GMT ETag: "f2f8c0fd97b17fd5136333b9facac0cb" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ad3c90e13b86d72e2a5e6bf65eab3450.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: bOQ2iviwutYZWI64VCnnxAFPO3YQv0GuVXIYchzI0298AhT5Ro-UEg==
2024-07-05 05:56:38 UTC	16384	IN	Data Raw: 76 61 72 20 65 6e 67 61 67 65 6d 65 6e 74 46 69 78 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 65 6e 67 45 6c 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 66 6f 63 75 73 28 65 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 4a 61 69 6d 65 20 4d 52 20 74 65 73 74 20 63 68 61 6e 67 65 20 73 65 74 74 69 6e 67 20 75 70 73 74 72 65 61 6d 0a 20 20 20 20 20 20 20 20 2f 2f 20 52 75 6e 20 69 66 20 61 20 62 75 74 74 6f 6e 20 77 61 73 20 64 65 74 65 63 74 65 64 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 6e 67 2e 65 6e 67 61 67 65 6d 65 6e 74 54 79 70 65 20 3d 3d 3d 20 35 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4c 6f 6f 6b 20 69 6e 20 64 6f 6d 20 66 6f 72 20 61 20 72 6f 6c 65 20 6f 66 20 62 75 74 74 6f 6e 2e 20 20 Data Ascii: var engagementFix = (function () { var engEl; function focus(eng) { //Jaime MR test change setting upstream // Run if a button was detected if (eng.engagementType === 5) { // Look in dom for a role of button.
2024-07-05 05:56:38 UTC	16384	IN	Data Raw: 33 25 45 30 25 42 38 25 38 38 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 25 45 30 25 42 39 25 38 34 25 45 30 25 42 38 25 41 31 25 45 30 25 42 39 25 38 38 25 45 30 25 42 39 25 38 34 25 45 30 25 42 38 25 39 34 25 45 30 25 42 39 25 38 39 25 45 30 25 42 39 25 38 34 25 45 30 25 42 38 25 41 31 25 45 30 25 42 39 25 38 38 25 45 30 25 42 38 25 39 45 25 45 30 25 42 38 25 41 44 25 45 30 25 42 39 25 38 33 25 45 30 25 42 38 25 38 38 25 45 30 25 42 38 25 41 42 25 45 30 25 42 38 25 41 33 25 45 30 25 42 38 25 42 37 25 45 30 25 42 38 25 41 44 25 45 30 25 42 38 25 39 45 25 45 30 25 42 38 25 41 44 25 45 30 25 42 39 25 38 33 25 45 30 25 42 38 25 38 38 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 25 45 30 25 42 38 25 38 34 25 45 30 25 42 39 25 38 38 25 45 30 25 42 38 25 41 Data Ascii: 3%E0%B8%88'), decodeURI('%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B9%84%E0%B8%94%E0%B9%89%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%9E%E0%B8%AD%E0%B9%83%E0%B8%88%E0%B8%AB%E0%B8%A3%E0%B8%B7%E0%B8%AD%E0%B8%9E%E0%B8%AD%E0%B9%83%E0%B8%88'), decodeURI('%E0%B8%84%E0%B9%88%E0%B8%A
2024-07-05 05:56:38 UTC	12288	IN	Data Raw: 20 27 52 61 63 7a 65 6a 20 70 72 61 77 64 6f 70 6f 64 6f 62 6e 65 27 2c 20 27 42 61 72 64 7a 6f 20 70 72 61 77 64 6f 70 6f 64 6f 62 6e 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 41 54 45 5f 4e 50 53 2e 61 6c 74 5f 74 65 78 74 2e 70 75 73 68 28 64 65 63 6f 64 65 55 52 49 28 27 4a 65 64 6e 61 25 32 30 6e 61 25 32 30 70 69 25 43 34 25 39 39 25 43 34 25 38 37 25 32 30 67 77 69 61 7a 64 65 6b 25 33 42 25 32 30 62 61 72 64 7a 6f 25 32 30 6e 69 65 70 72 61 77 64 6f 70 6f 64 6f 62 6e 65 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 44 77 69 65 25 32 30 6e 61 25 32 30 70 69 25 43 34 25 39 39 25 43 34 25 38 37 25 32 30 67 77 69 61 7a 64 65 6b 25 33 42 25 32 30 72 61 63 7a 65 6a 25 32 30 6e 69 65 70 72 61 77 64 6f 70 6f 64 6f 62 6e 65 27 29 2c Data Ascii: 'Raczej prawdopodobne', 'Bardzo prawdopodobne'); RATE_NPS.alt_text.push(decodeURI('Jedna%20na%20pi%C4%99%C4%87%20gwiazdek%3B%20bardzo%20nieprawdopodobne'), decodeURI('Dwie%20na%20pi%C4%99%C4%87%20gwiazdek%3B%20raczej%20nieprawdopodobne'),
2024-07-05 05:56:38 UTC	8949	IN	Data Raw: 30 65 67 79 25 32 30 63 73 69 6c 6c 61 67 25 33 42 25 32 30 6e 61 67 79 6f 6e 25 32 30 65 6c 25 43 33 25 41 39 67 65 64 65 74 6c 65 6e 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 25 43 33 25 39 36 74 62 25 43 35 25 39 31 6c 25 32 30 6b 25 43 33 25 41 39 74 25 32 30 63 73 69 6c 6c 61 67 25 33 42 25 32 30 6b 69 73 73 25 43 33 25 41 39 25 32 30 65 6c 25 43 33 25 41 39 67 65 64 65 74 6c 65 6e 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 25 43 33 25 39 36 74 62 25 43 35 25 39 31 6c 25 32 30 68 25 43 33 25 41 31 72 6f 6d 25 32 30 63 73 69 6c 6c 61 67 25 33 42 25 32 30 73 65 6d 6c 65 67 65 73 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 25 43 33 25 39 36 74 62 25 43 35 25 39 31 6c 25 32 30 68 25 43 33 25 41 31 72 6f 6d 25 32 30 63 73 69 6c 6c 61 67 25 33 42 25 Data Ascii: 0egy%20csillag%3B%20nagyon%20el%C3%A9gedetlen'), decodeURI('%C3%96tb%C5%91l%20k%C3%A9t%20csillag%3B%20kiss%C3%A9%20el%C3%A9gedetlen'), decodeURI('%C3%96tb%C5%91l%20h%C3%A1rom%20csillag%3B%20semleges'), decodeURI('%C3%96tb%C5%91l%20h%C3%A1rom%20csillag%3B%
2024-07-05 05:56:38 UTC	16384	IN	Data Raw: 32 30 74 25 43 33 25 41 34 68 64 65 73 74 25 43 33 25 41 34 25 33 42 25 32 30 65 72 69 74 74 25 43 33 25 41 34 69 6e 25 32 30 65 70 25 43 33 25 41 34 74 6f 64 65 6e 6e 25 43 33 25 41 34 6b 25 43 33 25 42 36 69 73 65 73 74 69 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 4b 61 6b 73 69 25 32 30 76 69 69 64 65 73 74 25 43 33 25 41 34 25 32 30 74 25 43 33 25 41 34 68 64 65 73 74 25 43 33 25 41 34 25 33 42 25 32 30 6d 65 6c 6b 6f 25 32 30 65 70 25 43 33 25 41 34 74 6f 64 65 6e 6e 25 43 33 25 41 34 6b 25 43 33 25 42 36 69 73 65 73 74 69 27 29 2c 20 64 65 63 6f 64 65 55 52 49 28 27 4b 6f 6c 6d 65 25 32 30 76 69 69 64 65 73 74 25 43 33 25 41 34 25 32 30 74 25 43 33 25 41 34 68 64 65 73 74 25 43 33 25 41 34 25 33 42 25 32 30 65 69 25 32 30 65 70 25 43 33 25 41 34 Data Ascii: 20t%C3%A4hdest%C3%A4%3B%20eritt%C3%A4in%20ep%C3%A4todenn%C3%A4k%C3%B6isesti'), decodeURI('Kaksi%20viidest%C3%A4%20t%C3%A4hdest%C3%A4%3B%20melko%20ep%C3%A4todenn%C3%A4k%C3%B6isesti'), decodeURI('Kolme%20viidest%C3%A4%20t%C3%A4hdest%C3%A4%3B%20ei%20ep%C3%A4
2024-07-05 05:56:38 UTC	16384	IN	Data Raw: 6d 27 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 65 6c 29 20 7b 20 72 65 74 75 72 6e 20 65 6c 2e 72 65 6d 6f 76 65 28 29 20 7d 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 54 6f 6f 6c 74 69 70 28 72 61 74 65 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 65 6c 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 27 73 75 72 76 65 79 2d 70 6f 70 75 70 27 29 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6c 61 73 74 45 6c 65 6d 65 6e 74 20 3d 20 65 6c 73 5b 65 6c 73 2e 6c 65 6e 67 74 68 20 2d 20 31 5d 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 6c 61 73 74 45 6c 65 6d 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 Data Ascii: m').forEach(function (el) { return el.remove() }); } function showTooltip(rate) { const els = document.getElementsByClassName('survey-popup'); const lastElement = els[els.length - 1]; if (lastElement) { const
2024-07-05 05:56:38 UTC	16384	IN	Data Raw: 64 67 65 6e 2d 74 68 2d 74 68 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 6f 66 66 69 63 65 33 36 35 2d 6c 65 61 64 67 65 6e 2d 74 68 2d 77 77 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 77 65 62 70 75 72 63 68 61 73 65 2d 73 61 6c 65 73 2d 54 48 2d 54 48 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 77 65 62 70 75 72 63 68 61 73 65 2d 73 61 6c 65 73 2d 74 68 2d 74 68 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 73 74 6f 72 65 2d 6d 33 36 35 2d 74 68 2d 74 68 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 73 74 6f 72 65 2d 6d 33 36 35 2d 74 68 2d 77 77 27 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: dgen-th-th': case 'office365-leadgen-th-ww': case 'webpurchase-sales-TH-TH': case 'webpurchase-sales-th-th': case 'store-m365-th-th': case 'store-m365-th-ww':
2024-07-05 05:56:38 UTC	16384	IN	Data Raw: 66 74 2e 63 6f 6d 2f 66 72 2d 63 68 2f 73 75 70 70 6f 72 74 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 53 75 70 70 6f 72 74 20 54 65 63 68 6e 69 71 75 65 27 2c 20 27 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6f 66 66 69 63 65 2e 63 6f 6d 2f 66 72 2d 63 68 2f 61 72 74 69 63 6c 65 2f 67 65 74 2d 73 75 70 70 6f 72 74 2d 6f 72 2d 61 64 76 69 63 65 2d 31 38 39 34 38 61 34 63 2d 33 65 62 31 2d 34 62 33 30 2d 62 31 62 63 2d 61 34 63 63 32 39 65 62 37 36 35 35 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 53 75 70 70 6f 72 74 25 32 30 6c 69 25 43 33 25 41 39 25 32 30 25 43 33 25 41 30 25 32 30 6c 61 25 32 30 66 61 63 74 75 72 61 74 69 6f 6e 27 Data Ascii: ft.com/fr-ch/support'], ['Support Technique', 'https://support.office.com/fr-ch/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655'], ['Support%20li%C3%A9%20%C3%A0%20la%20facturation'
2024-07-05 05:56:39 UTC	16384	IN	Data Raw: 72 74 2e 6f 66 66 69 63 65 2e 63 6f 6d 2f 7a 68 2d 74 77 2f 61 72 74 69 63 6c 65 2f 67 65 74 2d 73 75 70 70 6f 72 74 2d 6f 72 2d 61 64 76 69 63 65 2d 31 38 39 34 38 61 34 63 2d 33 65 62 31 2d 34 62 33 30 2d 62 31 62 63 2d 61 34 63 63 32 39 65 62 37 36 35 35 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 25 45 37 25 38 30 25 38 46 25 45 38 25 41 36 25 42 44 25 45 36 25 39 34 25 41 46 25 45 36 25 38 46 25 42 34 25 45 39 25 41 30 25 38 31 25 45 39 25 39 44 25 41 32 27 2c 20 27 68 74 74 70 73 3a 2f 2f 67 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 77 6c 69 6e 6b 2f 3f 6c 69 6e 6b 69 64 3d 32 31 35 32 35 39 36 27 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 0a Data Ascii: rt.office.com/zh-tw/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655'], ['%E7%80%8F%E8%A6%BD%E6%94%AF%E6%8F%B4%E9%A0%81%E9%9D%A2', 'https://go.microsoft.com/fwlink/?linkid=2152596'] ],
2024-07-05 05:56:39 UTC	16384	IN	Data Raw: 74 74 70 73 3a 2f 2f 70 61 72 74 6e 65 72 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 73 75 70 70 6f 72 74 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 54 65 63 68 6e 69 63 61 6c 20 73 75 70 70 6f 72 74 27 2c 20 27 68 74 74 70 73 3a 2f 2f 61 7a 75 72 65 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 73 75 70 70 6f 72 74 2f 63 72 65 61 74 65 2d 74 69 63 6b 65 74 2f 27 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5b 27 42 69 6c 6c 69 6e 67 20 73 75 70 70 6f 72 74 27 2c 20 27 68 74 74 70 73 3a 2f 2f 61 7a 75 72 65 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 73 75 70 70 6f 72 74 2f 63 72 65 61 74 65 2d Data Ascii: ttps://partner.microsoft.com/en-us/support'], ['Technical support', 'https://azure.microsoft.com/en-us/support/create-ticket/'], ['Billing support', 'https://azure.microsoft.com/en-us/support/create-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50378	18.66.147.58	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:56:40 UTC	591	OUT	GET /microsoft/lp_ada_enhancements-prod.css HTTP/1.1 Host: static-assets.fs.liveperson.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://publisher.liveperson.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:56:41 UTC	508	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 38192 Connection: close Date: Fri, 05 Jul 2024 05:56:42 GMT Last-Modified: Tue, 25 Jun 2024 13:38:36 GMT ETag: "ff22b014923e4d07af559bb783fce862" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ba67e20db38657ee5cb05d05b3da9d70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: h9C7M5XH_Mw_lYM7eyTqp0zJXWJhQqRnS8uoJa0O24hQeFF9B4Sw9Q==
2024-07-05 05:56:41 UTC	16384	IN	Data Raw: 2f 2a 20 41 44 41 20 43 53 53 20 2a 2f 0a 62 6f 64 79 20 23 6c 70 43 68 61 74 20 2e 6c 70 5f 64 69 61 6c 6f 67 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 6c 70 5f 62 75 74 74 6f 6e 73 5f 61 72 65 61 20 2e 6c 70 5f 63 6f 6e 66 69 72 6d 5f 62 75 74 74 6f 6e 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 23 6c 70 43 68 61 74 20 2e 6c 70 5f 6d 69 6e 69 6d 69 7a 65 64 20 2e 6c 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 6e 75 6d 62 65 72 20 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 6c 61 79 6f 75 Data Ascii: /* ADA CSS */body #lpChat .lp_dialog_container .lp_buttons_area .lp_confirm_button {color: #FFFFFF !important;border: 1px solid #fff !important;}#lpChat .lp_minimized .lp_notification_number {margin-top: 2px !important;}.lp-json-pollock-layou
2024-07-05 05:56:41 UTC	629	IN	Data Raw: 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 65 6c 65 6d 65 6e 74 2d 74 65 78 74 3a 6e 74 68 2d 63 68 69 6c 64 28 65 76 65 6e 29 20 68 33 20 7b 0a 63 6f 6c 6f 72 3a 20 23 37 33 37 33 37 33 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 6c 70 2d 77 69 6e 64 6f 77 2d 72 6f 6f 74 20 2e 6c 70 5f 63 68 61 74 5f 6c 69 6e 65 5f 77 72 61 70 70 65 72 20 2e 6c 70 5f 72 69 63 68 5f 63 6f 6e 74 65 6e 74 5f 6c 69 6e 65 20 2e 6c 70 5f 74 69 74 6c 65 5f 74 65 78 74 20 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 20 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 6c 61 79 6f 75 74 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 20 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 6c 61 79 6f 75 74 2d 63 61 72 6f 75 73 65 6c 20 7b 0a 64 69 73 70 6c 61 Data Ascii: .lp-json-pollock-element-text:nth-child(even) h3 {color: #737373 !important;}.lp-window-root .lp_chat_line_wrapper .lp_rich_content_line .lp_title_text .lp-json-pollock .lp-json-pollock-layout-carousel-wrapper .lp-json-pollock-layout-carousel {displa
2024-07-05 05:56:41 UTC	12792	IN	Data Raw: 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 65 6c 65 6d 65 6e 74 2d 74 65 78 74 20 73 70 61 6e 5b 73 74 79 6c 65 2a 3d 22 63 6f 6c 6f 72 3a 23 30 30 38 30 30 30 3b 22 5d 20 7b 0a 63 6f 6c 6f 72 3a 23 30 30 38 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 6c 61 79 6f 75 74 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 6c 61 79 6f 75 74 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 6c 70 63 5f 63 61 72 64 2e 6c 70 63 5f 63 61 72 64 5f 68 6f 72 69 7a 6f 6e 74 61 6c 2e 6c 70 63 5f 64 65 73 6b 74 6f 70 2c 20 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 6c 61 79 6f 75 74 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 6c 61 79 6f 75 74 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 6c 70 63 5f 63 61 72 64 2e 6c Data Ascii: json-pollock-element-text span[style*="color:#008000;"] {color:#008000 !important;}.lp-json-pollock-layout.lp-json-pollock-layout-horizontal.lpc_card.lpc_card_horizontal.lpc_desktop, .lp-json-pollock-layout.lp-json-pollock-layout-horizontal.lpc_card.l
2024-07-05 05:56:41 UTC	6396	IN	Data Raw: 61 64 69 75 73 3a 20 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 30 30 36 37 42 38 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 65 6c 65 6d 65 6e 74 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 65 6c 65 6d 65 6e 74 2d 62 75 74 74 6f 6e 20 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 31 35 73 20 65 61 73 65 20 21 69 6d 70 6f 72 Data Ascii: adius: 2px !important; border-top: 2px solid #0067B8 !important;}.lp-json-pollock-element-button { box-shadow: none !important; border-radius: 2px !important;}.lp-json-pollock-element-button button { transition: all 0.15s ease !impor
2024-07-05 05:56:41 UTC	1991	IN	Data Raw: 6c 6f 72 3a 20 23 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 0a 2f 2a 20 46 69 78 65 73 20 66 6f 72 20 63 6f 6e 74 61 69 6e 65 72 20 77 69 64 74 68 73 20 75 73 69 6e 67 20 63 6f 6d 70 6c 65 78 20 6c 61 79 6f 75 74 73 20 2a 2f 0a 2e 6c 70 2d 77 69 6e 64 6f 77 2d 72 6f 6f 74 20 2e 6c 70 5f 63 68 61 74 5f 6c 69 6e 65 5f 77 72 61 70 70 65 72 20 2e 6c 70 5f 72 69 63 68 5f 63 6f 6e 74 65 6e 74 5f 6c 69 6e 65 20 2e 6c 70 5f 74 69 74 6c 65 5f 74 65 78 74 20 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 20 2e 6c 70 2d 6a 73 6f 6e 2d 70 6f 6c 6c 6f 63 6b 2d 6c 61 79 6f 75 74 20 7b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2f 2a 20 56 69 64 Data Ascii: lor: #000 !important; opacity: 1;}/* Fixes for container widths using complex layouts /.lp-window-root .lp_chat_line_wrapper .lp_rich_content_line .lp_title_text .lp-json-pollock .lp-json-pollock-layout { max-width: 100% !important;}/ Vid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50405	52.4.178.162	443	2700	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:57:14 UTC	540	OUT	POST /v2/recording?rt=5&rst=1720158992388&let=1720159033655&v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6&ri=2&ct=2 HTTP/1.1 Host: k-aus1.clicktale.net Connection: keep-alive Content-Length: 2219 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:57:14 UTC	2219	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 5c dd 4f 1b 47 10 ff 5f fc 7c 0d fb 39 bb c3 73 a5 2a 2f 55 55 b5 55 ab 86 07 07 1f c1 92 b1 91 6d 42 12 94 ff bd b3 06 9a bb db b9 9b 35 26 c9 01 79 88 08 c7 fd 76 3e 76 3e 7e b3 5e f8 f7 66 b2 fd 78 59 4f 8e 0d 56 93 d9 74 4b ff d3 c1 28 ed 23 a2 75 e8 ab c9 74 fd 6e 33 39 fe f7 66 f2 7e be 99 bf 5d d4 bf 2c 56 6f a7 8b c5 47 7a 36 39 dd 6c eb 0f db 75 7d 76 7c 74 e4 fc a4 6a 3f 08 36 7b 12 b3 27 d8 7d 12 55 f6 44 67 4f b2 95 a3 cb 9e 40 f6 24 74 9f 60 b6 0e 66 eb 60 d7 2e e8 2e ec bd 9f 9c 54 f7 fe 79 bd fc 6b 5e 5f ff b6 5a 6f 65 0f a9 4c 23 95 f9 23 f7 a2 ce 9f 64 5a 7f 43 4f 1b c8 64 7d 63 df 7f 3e f9 5c dd dc 07 aa ad 96 57 8b 05 7d 7f ba 79 3d 9b 1c 7b 6d 63 35 39 5b ad 2f a6 b4 21 8a e2 79 bb 5d cf df 5e 6d eb f4 Data Ascii: \OG_\|9s*/UUUmB5&yv>v>~^fxYOVtK(#utn39f~],VoGz69lu}v\|tj?6{'}UDgO@$t`f`..Tyk^_ZoeL##dZCOd}c>\W}y={mc59[/!y]^m
2024-07-05 05:57:14 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 05:57:14 GMT Content-Length: 0 Connection: close Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	50406	44.214.131.22	443

Timestamp	Bytes transferred	Direction	Data
2024-07-05 05:57:15 UTC	476	OUT	GET /v2/recording?rt=5&rst=1720158992388&let=1720159033655&v=13.89.2&pid=2422&pn=1&sn=1&uu=3ab030b4-fdc5-a6bc-9e15-459a9d34e7e6&ri=2&ct=2 HTTP/1.1 Host: k-aus1.clicktale.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-05 05:57:15 UTC	207	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 05 Jul 2024 05:57:15 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 19 Connection: close Allow: OPTIONS, POST X-Content-Type-Options: nosniff
2024-07-05 05:57:15 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Target ID:	0
Start time:	01:55:07
Start date:	05/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	01:55:09
Start date:	05/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2280,i,5128880978760814452,2696330715248247459,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	01:55:12
Start date:	05/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/LearnAboutSenderIdentification"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557224213775.YTk4ZGI0ZTAtN2UxOC00MmFjLWI3Y2YtMzVmODg2YzU1YThhZDAzMTBjOTItZjU5YS00NDg4LTg5Y2MtMWMyNjZmMDM0ZTRl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJo4FWi2OOuH3QbcSebwJVpjnKM-oXDZysjzdye3KrzL8vb-TNkN91g_oJ4VBIlz9sWZoUEc_9kkkfjEiCiBgmcYcWHcdVkJWwfz6E7ZyP5ME2AP21GZkRIbhpG0h8un9yfhyacEDQDZFzFjLHJ3jh2_4kmOFkidDmyZMFs6l0kYo1CV7z5_CmmfaRrxZgpmM305fNB7bRkIn5gtoNonkrllXgxpxieY_202o5fMeaDXDzdJKzdF40CziK_nfTPr0EGXJ6dJlNhyme73FyDzLSzkp9zCja0r6nh4_WWxlYTJx2t2BaexesB7Hi53Op7VQsEH4SnlxysaP57VPY_dr16G&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true	HTTP Parser: Form action: https://support.microsoft.com/signin-oidc microsoftonline microsoft
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557475095269.YjhhNWJkNjAtMmNhOS00YzJhLWJiMTYtM2Q1MzUxODA5ZTNhY2EyMjA3OGUtMzhmOS00MmVhLWI2YmYtZGY4ZWY1NjBlZjhl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJprg2mAcgVmzw2Qq1hLgUgGQpnOGOgFSLVknMVAN_SdgGinkPVCUWdKzh0b1UPEfJiLA1yC2IZ_BRQoFNI0kNgQWI9ZFo0SqqNKNf-bggMNLb96FVFmBIC9ZgY-CpWAQ5PicD8WrVVE2hM_kPHFPGJIF1m0pHO8sb91a-gz82H6k91WqZOirECr_iHbwZMzJlibEATszRsPFsDsQL_0nXFh2HfINGbD5wGx-wXmALMebrlRbjaVOHC9pprH5xrZDL4plmCa3sw7eSKkh8U0KX0MFuTy9oauxE_2ZgBdgevbZO1GvAPxkhdcXIpW2UWrkvK6UWAo4c1kqDFnWYbFYj3S&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: Form action: https://support.microsoft.com/signin-oidc microsoftonline microsoft
Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9P1_8pz8WPEu0Y4eCpkoXWlv5Mw7CwhPO76NVWaXz-vFcjC_87SKoJNhfTE7mlKLSAk60eMixDO4Ag6aissMW9ZwRZhQ-HYQor0eadiBaS3w0U-EarOIXHkPKisb7HmTIGQSYzaU-_yRkMi4dm98n5pIub5J2qYMnItsPfgvf6TLLKH2Xbn7U0gFjS6ffUlyUBfMxilzeK5xo-J5gw0DaWSvC4It8rIV9okAb1ySr5FEogN6OVgoJuErlFki7eFAQJVQDe7-oPK9DFb66pdQQb9PoVd4JfFCW39w5FN_4EgNzy7CDCqM2OWsKNU0qyjnxF3ld1tme-i-0hGtC9gd4ZCH1KojJCzCDhabHOpwu_3VM-RA6t6zWdmijpJ8W5w-oU_pLDEA5qUsf5DJ8HLE8ArmdHp8hZ04xODuJd7r_V8riY7Zdezlq2mPDZUOyAgEY4zcXDN9iWuHhgAjDiqeZSGK8OHqSM6hX8abirgsvDgb0xaSeEz6a6ip-0eq44Tcek&response_mode=form_post&nonce=638557557806076505.Y2NjMjFiOWQtNDFmYi00YzdkLThiYmYtMjA4MTk2MGE2NmY2ZmUzNDEwNTktMTcxNi00MGVhLTgzNzEtMjAyMzc2ODMyZTlk&prompt=none&code_challenge=rIEOTOOZOlzpU5Uofasg5G_1DHXVG_stdi4-I_3Qzq0&code_challenge_method=S256&x-cl...	HTTP Parser: Form action: https://www.microsoft.com/cascadeauth/account/signin-oidc live microsoft

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557224213775.YTk4ZGI0ZTAtN2UxOC00MmFjLWI3Y2YtMzVmODg2YzU1YThhZDAzMTBjOTItZjU5YS00NDg4LTg5Y2MtMWMyNjZmMDM0ZTRl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJo4FWi2OOuH3QbcSebwJVpjnKM-oXDZysjzdye3KrzL8vb-TNkN91g_oJ4VBIlz9sWZoUEc_9kkkfjEiCiBgmcYcWHcdVkJWwfz6E7ZyP5ME2AP21GZkRIbhpG0h8un9yfhyacEDQDZFzFjLHJ3jh2_4kmOFkidDmyZMFs6l0kYo1CV7z5_CmmfaRrxZgpmM305fNB7bRkIn5gtoNonkrllXgxpxieY_202o5fMeaDXDzdJKzdF40CziK_nfTPr0EGXJ6dJlNhyme73FyDzLSzkp9zCja0r6nh4_WWxlYTJx2t2BaexesB7Hi53Op7VQsEH4SnlxysaP57VPY_dr16G&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557224213775.YTk4ZGI0ZTAtN2UxOC00MmFjLWI3Y2YtMzVmODg2YzU1YThhZDAzMTBjOTItZjU5YS00NDg4LTg5Y2MtMWMyNjZmMDM0ZTRl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJo4FWi2OOuH3QbcSebwJVpjnKM-oXDZysjzdye3KrzL8vb-TNkN91g_oJ4VBIlz9sWZoUEc_9kkkfjEiCiBgmcYcWHcdVkJWwfz6E7ZyP5ME2AP21GZkRIbhpG0h8un9yfhyacEDQDZFzFjLHJ3jh2_4kmOFkidDmyZMFs6l0kYo1CV7z5_CmmfaRrxZgpmM305fNB7bRkIn5gtoNonkrllXgxpxieY_202o5fMeaDXDzdJKzdF40CziK_nfTPr0EGXJ6dJlNhyme73FyDzLSzkp9zCja0r6nh4_WWxlYTJx2t2BaexesB7Hi53Op7VQsEH4SnlxysaP57VPY_dr16G&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557475095269.YjhhNWJkNjAtMmNhOS00YzJhLWJiMTYtM2Q1MzUxODA5ZTNhY2EyMjA3OGUtMzhmOS00MmVhLWI2YmYtZGY4ZWY1NjBlZjhl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJprg2mAcgVmzw2Qq1hLgUgGQpnOGOgFSLVknMVAN_SdgGinkPVCUWdKzh0b1UPEfJiLA1yC2IZ_BRQoFNI0kNgQWI9ZFo0SqqNKNf-bggMNLb96FVFmBIC9ZgY-CpWAQ5PicD8WrVVE2hM_kPHFPGJIF1m0pHO8sb91a-gz82H6k91WqZOirECr_iHbwZMzJlibEATszRsPFsDsQL_0nXFh2HfINGbD5wGx-wXmALMebrlRbjaVOHC9pprH5xrZDL4plmCa3sw7eSKkh8U0KX0MFuTy9oauxE_2ZgBdgevbZO1GvAPxkhdcXIpW2UWrkvK6UWAo4c1kqDFnWYbFYj3S&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557224213775.YTk4ZGI0ZTAtN2UxOC00MmFjLWI3Y2YtMzVmODg2YzU1YThhZDAzMTBjOTItZjU5YS00NDg4LTg5Y2MtMWMyNjZmMDM0ZTRl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJo4FWi2OOuH3QbcSebwJVpjnKM-oXDZysjzdye3KrzL8vb-TNkN91g_oJ4VBIlz9sWZoUEc_9kkkfjEiCiBgmcYcWHcdVkJWwfz6E7ZyP5ME2AP21GZkRIbhpG0h8un9yfhyacEDQDZFzFjLHJ3jh2_4kmOFkidDmyZMFs6l0kYo1CV7z5_CmmfaRrxZgpmM305fNB7bRkIn5gtoNonkrllXgxpxieY_202o5fMeaDXDzdJKzdF40CziK_nfTPr0EGXJ6dJlNhyme73FyDzLSzkp9zCja0r6nh4_WWxlYTJx2t2BaexesB7Hi53Op7VQsEH4SnlxysaP57VPY_dr16G&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/savedusers?appid=ee272b19-4411-433f-8f28-5c13cb6fd407&wreply=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&uaid=1b8f7b5e-4e4b-49a5-e249-e7ef4d837bdd&partnerId=smcconvergence&idpflag=proxy	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557475095269.YjhhNWJkNjAtMmNhOS00YzJhLWJiMTYtM2Q1MzUxODA5ZTNhY2EyMjA3OGUtMzhmOS00MmVhLWI2YmYtZGY4ZWY1NjBlZjhl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJprg2mAcgVmzw2Qq1hLgUgGQpnOGOgFSLVknMVAN_SdgGinkPVCUWdKzh0b1UPEfJiLA1yC2IZ_BRQoFNI0kNgQWI9ZFo0SqqNKNf-bggMNLb96FVFmBIC9ZgY-CpWAQ5PicD8WrVVE2hM_kPHFPGJIF1m0pHO8sb91a-gz82H6k91WqZOirECr_iHbwZMzJlibEATszRsPFsDsQL_0nXFh2HfINGbD5wGx-wXmALMebrlRbjaVOHC9pprH5xrZDL4plmCa3sw7eSKkh8U0KX0MFuTy9oauxE_2ZgBdgevbZO1GvAPxkhdcXIpW2UWrkvK6UWAo4c1kqDFnWYbFYj3S&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: Number of links: 0
Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9P1_8pz8WPEu0Y4eCpkoXWlv5Mw7CwhPO76NVWaXz-vFcjC_87SKoJNhfTE7mlKLSAk60eMixDO4Ag6aissMW9ZwRZhQ-HYQor0eadiBaS3w0U-EarOIXHkPKisb7HmTIGQSYzaU-_yRkMi4dm98n5pIub5J2qYMnItsPfgvf6TLLKH2Xbn7U0gFjS6ffUlyUBfMxilzeK5xo-J5gw0DaWSvC4It8rIV9okAb1ySr5FEogN6OVgoJuErlFki7eFAQJVQDe7-oPK9DFb66pdQQb9PoVd4JfFCW39w5FN_4EgNzy7CDCqM2OWsKNU0qyjnxF3ld1tme-i-0hGtC9gd4ZCH1KojJCzCDhabHOpwu_3VM-RA6t6zWdmijpJ8W5w-oU_pLDEA5qUsf5DJ8HLE8ArmdHp8hZ04xODuJd7r_V8riY7Zdezlq2mPDZUOyAgEY4zcXDN9iWuHhgAjDiqeZSGK8OHqSM6hX8abirgsvDgb0xaSeEz6a6ip-0eq44Tcek&response_mode=form_post&nonce=638557557806076505.Y2NjMjFiOWQtNDFmYi00YzdkLThiYmYtMjA4MTk2MGE2NmY2ZmUzNDEwNTktMTcxNi00MGVhLTgzNzEtMjAyMzc2ODMyZTlk&prompt=none&code_challenge=rIEOTOOZOlzpU5Uofasg5G_1DHXVG_stdi4-I_3Qzq0&code_challenge_method=S256&x-cl...	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557224213775.YTk4ZGI0ZTAtN2UxOC00MmFjLWI3Y2YtMzVmODg2YzU1YThhZDAzMTBjOTItZjU5YS00NDg4LTg5Y2MtMWMyNjZmMDM0ZTRl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJo4FWi2OOuH3QbcSebwJVpjnKM-oXDZysjzdye3KrzL8vb-TNkN91g_oJ4VBIlz9sWZoUEc_9kkkfjEiCiBgmcYcWHcdVkJWwfz6E7ZyP5ME2AP21GZkRIbhpG0h8un9yfhyacEDQDZFzFjLHJ3jh2_4kmOFkidDmyZMFs6l0kYo1CV7z5_CmmfaRrxZgpmM305fNB7bRkIn5gtoNonkrllXgxpxieY_202o5fMeaDXDzdJKzdF40CziK_nfTPr0EGXJ6dJlNhyme73FyDzLSzkp9zCja0r6nh4_WWxlYTJx2t2BaexesB7Hi53Op7VQsEH4SnlxysaP57VPY_dr16G&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/savedusers?appid=ee272b19-4411-433f-8f28-5c13cb6fd407&wreply=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&uaid=1b8f7b5e-4e4b-49a5-e249-e7ef4d837bdd&partnerId=smcconvergence&idpflag=proxy	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557475095269.YjhhNWJkNjAtMmNhOS00YzJhLWJiMTYtM2Q1MzUxODA5ZTNhY2EyMjA3OGUtMzhmOS00MmVhLWI2YmYtZGY4ZWY1NjBlZjhl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJprg2mAcgVmzw2Qq1hLgUgGQpnOGOgFSLVknMVAN_SdgGinkPVCUWdKzh0b1UPEfJiLA1yC2IZ_BRQoFNI0kNgQWI9ZFo0SqqNKNf-bggMNLb96FVFmBIC9ZgY-CpWAQ5PicD8WrVVE2hM_kPHFPGJIF1m0pHO8sb91a-gz82H6k91WqZOirECr_iHbwZMzJlibEATszRsPFsDsQL_0nXFh2HfINGbD5wGx-wXmALMebrlRbjaVOHC9pprH5xrZDL4plmCa3sw7eSKkh8U0KX0MFuTy9oauxE_2ZgBdgevbZO1GvAPxkhdcXIpW2UWrkvK6UWAo4c1kqDFnWYbFYj3S&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9P1_8pz8WPEu0Y4eCpkoXWlv5Mw7CwhPO76NVWaXz-vFcjC_87SKoJNhfTE7mlKLSAk60eMixDO4Ag6aissMW9ZwRZhQ-HYQor0eadiBaS3w0U-EarOIXHkPKisb7HmTIGQSYzaU-_yRkMi4dm98n5pIub5J2qYMnItsPfgvf6TLLKH2Xbn7U0gFjS6ffUlyUBfMxilzeK5xo-J5gw0DaWSvC4It8rIV9okAb1ySr5FEogN6OVgoJuErlFki7eFAQJVQDe7-oPK9DFb66pdQQb9PoVd4JfFCW39w5FN_4EgNzy7CDCqM2OWsKNU0qyjnxF3ld1tme-i-0hGtC9gd4ZCH1KojJCzCDhabHOpwu_3VM-RA6t6zWdmijpJ8W5w-oU_pLDEA5qUsf5DJ8HLE8ArmdHp8hZ04xODuJd7r_V8riY7Zdezlq2mPDZUOyAgEY4zcXDN9iWuHhgAjDiqeZSGK8OHqSM6hX8abirgsvDgb0xaSeEz6a6ip-0eq44Tcek&response_mode=form_post&nonce=638557557806076505.Y2NjMjFiOWQtNDFmYi00YzdkLThiYmYtMjA4MTk2MGE2NmY2ZmUzNDEwNTktMTcxNi00MGVhLTgzNzEtMjAyMzc2ODMyZTlk&prompt=none&code_challenge=rIEOTOOZOlzpU5Uofasg5G_1DHXVG_stdi4-I_3Qzq0&code_challenge_method=S256&x-cl...	HTTP Parser: Title: Continue does not match URL

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557224213775.YTk4ZGI0ZTAtN2UxOC00MmFjLWI3Y2YtMzVmODg2YzU1YThhZDAzMTBjOTItZjU5YS00NDg4LTg5Y2MtMWMyNjZmMDM0ZTRl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJo4FWi2OOuH3QbcSebwJVpjnKM-oXDZysjzdye3KrzL8vb-TNkN91g_oJ4VBIlz9sWZoUEc_9kkkfjEiCiBgmcYcWHcdVkJWwfz6E7ZyP5ME2AP21GZkRIbhpG0h8un9yfhyacEDQDZFzFjLHJ3jh2_4kmOFkidDmyZMFs6l0kYo1CV7z5_CmmfaRrxZgpmM305fNB7bRkIn5gtoNonkrllXgxpxieY_202o5fMeaDXDzdJKzdF40CziK_nfTPr0EGXJ6dJlNhyme73FyDzLSzkp9zCja0r6nh4_WWxlYTJx2t2BaexesB7Hi53Op7VQsEH4SnlxysaP57VPY_dr16G&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557224213775.YTk4ZGI0ZTAtN2UxOC00MmFjLWI3Y2YtMzVmODg2YzU1YThhZDAzMTBjOTItZjU5YS00NDg4LTg5Y2MtMWMyNjZmMDM0ZTRl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJo4FWi2OOuH3QbcSebwJVpjnKM-oXDZysjzdye3KrzL8vb-TNkN91g_oJ4VBIlz9sWZoUEc_9kkkfjEiCiBgmcYcWHcdVkJWwfz6E7ZyP5ME2AP21GZkRIbhpG0h8un9yfhyacEDQDZFzFjLHJ3jh2_4kmOFkidDmyZMFs6l0kYo1CV7z5_CmmfaRrxZgpmM305fNB7bRkIn5gtoNonkrllXgxpxieY_202o5fMeaDXDzdJKzdF40CziK_nfTPr0EGXJ6dJlNhyme73FyDzLSzkp9zCja0r6nh4_WWxlYTJx2t2BaexesB7Hi53Op7VQsEH4SnlxysaP57VPY_dr16G&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/savedusers?appid=ee272b19-4411-433f-8f28-5c13cb6fd407&wreply=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&uaid=1b8f7b5e-4e4b-49a5-e249-e7ef4d837bdd&partnerId=smcconvergence&idpflag=proxy	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/savedusers?appid=ee272b19-4411-433f-8f28-5c13cb6fd407&wreply=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&uaid=1b8f7b5e-4e4b-49a5-e249-e7ef4d837bdd&partnerId=smcconvergence&idpflag=proxy&sso_reload=true	HTTP Parser: No favicon
Source: https://support.microsoft.com/en-us/silentsigninhandler	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557475095269.YjhhNWJkNjAtMmNhOS00YzJhLWJiMTYtM2Q1MzUxODA5ZTNhY2EyMjA3OGUtMzhmOS00MmVhLWI2YmYtZGY4ZWY1NjBlZjhl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJprg2mAcgVmzw2Qq1hLgUgGQpnOGOgFSLVknMVAN_SdgGinkPVCUWdKzh0b1UPEfJiLA1yC2IZ_BRQoFNI0kNgQWI9ZFo0SqqNKNf-bggMNLb96FVFmBIC9ZgY-CpWAQ5PicD8WrVVE2hM_kPHFPGJIF1m0pHO8sb91a-gz82H6k91WqZOirECr_iHbwZMzJlibEATszRsPFsDsQL_0nXFh2HfINGbD5wGx-wXmALMebrlRbjaVOHC9pprH5xrZDL4plmCa3sw7eSKkh8U0KX0MFuTy9oauxE_2ZgBdgevbZO1GvAPxkhdcXIpW2UWrkvK6UWAo4c1kqDFnWYbFYj3S&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: No favicon
Source: https://fpt.microsoft.com/tags?session_id=0b93d023-ab43-49bd-b75d-f0cb1e2b3303	HTTP Parser: No favicon
Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9P1_8pz8WPEu0Y4eCpkoXWlv5Mw7CwhPO76NVWaXz-vFcjC_87SKoJNhfTE7mlKLSAk60eMixDO4Ag6aissMW9ZwRZhQ-HYQor0eadiBaS3w0U-EarOIXHkPKisb7HmTIGQSYzaU-_yRkMi4dm98n5pIub5J2qYMnItsPfgvf6TLLKH2Xbn7U0gFjS6ffUlyUBfMxilzeK5xo-J5gw0DaWSvC4It8rIV9okAb1ySr5FEogN6OVgoJuErlFki7eFAQJVQDe7-oPK9DFb66pdQQb9PoVd4JfFCW39w5FN_4EgNzy7CDCqM2OWsKNU0qyjnxF3ld1tme-i-0hGtC9gd4ZCH1KojJCzCDhabHOpwu_3VM-RA6t6zWdmijpJ8W5w-oU_pLDEA5qUsf5DJ8HLE8ArmdHp8hZ04xODuJd7r_V8riY7Zdezlq2mPDZUOyAgEY4zcXDN9iWuHhgAjDiqeZSGK8OHqSM6hX8abirgsvDgb0xaSeEz6a6ip-0eq44Tcek&response_mode=form_post&nonce=638557557806076505.Y2NjMjFiOWQtNDFmYi00YzdkLThiYmYtMjA4MTk2MGE2NmY2ZmUzNDEwNTktMTcxNi00MGVhLTgzNzEtMjAyMzc2ODMyZTlk&prompt=none&code_challenge=rIEOTOOZOlzpU5Uofasg5G_1DHXVG_stdi4-I_3Qzq0&code_challenge_method=S256&x-cl...	HTTP Parser: No favicon
Source: https://www.microsoft.com/cascadeauth/store/account/silentauth?auth=None	HTTP Parser: No favicon
Source: https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-m365-en-us&buttons=lpChatSales	HTTP Parser: No favicon
Source: https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-m365-en-us&buttons=lpChatSales	HTTP Parser: No favicon
Source: https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-m365-en-us&buttons=lpChatSales	HTTP Parser: No favicon
Source: https://publisher.liveperson.net/iframe-le-tag/iframe-cs.html?lpsite=60270350&lpsection=store-m365-en-us&buttons=lpChatSales	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557224213775.YTk4ZGI0ZTAtN2UxOC00MmFjLWI3Y2YtMzVmODg2YzU1YThhZDAzMTBjOTItZjU5YS00NDg4LTg5Y2MtMWMyNjZmMDM0ZTRl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJo4FWi2OOuH3QbcSebwJVpjnKM-oXDZysjzdye3KrzL8vb-TNkN91g_oJ4VBIlz9sWZoUEc_9kkkfjEiCiBgmcYcWHcdVkJWwfz6E7ZyP5ME2AP21GZkRIbhpG0h8un9yfhyacEDQDZFzFjLHJ3jh2_4kmOFkidDmyZMFs6l0kYo1CV7z5_CmmfaRrxZgpmM305fNB7bRkIn5gtoNonkrllXgxpxieY_202o5fMeaDXDzdJKzdF40CziK_nfTPr0EGXJ6dJlNhyme73FyDzLSzkp9zCja0r6nh4_WWxlYTJx2t2BaexesB7Hi53Op7VQsEH4SnlxysaP57VPY_dr16G&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557224213775.YTk4ZGI0ZTAtN2UxOC00MmFjLWI3Y2YtMzVmODg2YzU1YThhZDAzMTBjOTItZjU5YS00NDg4LTg5Y2MtMWMyNjZmMDM0ZTRl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJo4FWi2OOuH3QbcSebwJVpjnKM-oXDZysjzdye3KrzL8vb-TNkN91g_oJ4VBIlz9sWZoUEc_9kkkfjEiCiBgmcYcWHcdVkJWwfz6E7ZyP5ME2AP21GZkRIbhpG0h8un9yfhyacEDQDZFzFjLHJ3jh2_4kmOFkidDmyZMFs6l0kYo1CV7z5_CmmfaRrxZgpmM305fNB7bRkIn5gtoNonkrllXgxpxieY_202o5fMeaDXDzdJKzdF40CziK_nfTPr0EGXJ6dJlNhyme73FyDzLSzkp9zCja0r6nh4_WWxlYTJx2t2BaexesB7Hi53Op7VQsEH4SnlxysaP57VPY_dr16G&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/savedusers?appid=ee272b19-4411-433f-8f28-5c13cb6fd407&wreply=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&uaid=1b8f7b5e-4e4b-49a5-e249-e7ef4d837bdd&partnerId=smcconvergence&idpflag=proxy	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557475095269.YjhhNWJkNjAtMmNhOS00YzJhLWJiMTYtM2Q1MzUxODA5ZTNhY2EyMjA3OGUtMzhmOS00MmVhLWI2YmYtZGY4ZWY1NjBlZjhl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJprg2mAcgVmzw2Qq1hLgUgGQpnOGOgFSLVknMVAN_SdgGinkPVCUWdKzh0b1UPEfJiLA1yC2IZ_BRQoFNI0kNgQWI9ZFo0SqqNKNf-bggMNLb96FVFmBIC9ZgY-CpWAQ5PicD8WrVVE2hM_kPHFPGJIF1m0pHO8sb91a-gz82H6k91WqZOirECr_iHbwZMzJlibEATszRsPFsDsQL_0nXFh2HfINGbD5wGx-wXmALMebrlRbjaVOHC9pprH5xrZDL4plmCa3sw7eSKkh8U0KX0MFuTy9oauxE_2ZgBdgevbZO1GvAPxkhdcXIpW2UWrkvK6UWAo4c1kqDFnWYbFYj3S&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: No <meta name="author".. found
Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9P1_8pz8WPEu0Y4eCpkoXWlv5Mw7CwhPO76NVWaXz-vFcjC_87SKoJNhfTE7mlKLSAk60eMixDO4Ag6aissMW9ZwRZhQ-HYQor0eadiBaS3w0U-EarOIXHkPKisb7HmTIGQSYzaU-_yRkMi4dm98n5pIub5J2qYMnItsPfgvf6TLLKH2Xbn7U0gFjS6ffUlyUBfMxilzeK5xo-J5gw0DaWSvC4It8rIV9okAb1ySr5FEogN6OVgoJuErlFki7eFAQJVQDe7-oPK9DFb66pdQQb9PoVd4JfFCW39w5FN_4EgNzy7CDCqM2OWsKNU0qyjnxF3ld1tme-i-0hGtC9gd4ZCH1KojJCzCDhabHOpwu_3VM-RA6t6zWdmijpJ8W5w-oU_pLDEA5qUsf5DJ8HLE8ArmdHp8hZ04xODuJd7r_V8riY7Zdezlq2mPDZUOyAgEY4zcXDN9iWuHhgAjDiqeZSGK8OHqSM6hX8abirgsvDgb0xaSeEz6a6ip-0eq44Tcek&response_mode=form_post&nonce=638557557806076505.Y2NjMjFiOWQtNDFmYi00YzdkLThiYmYtMjA4MTk2MGE2NmY2ZmUzNDEwNTktMTcxNi00MGVhLTgzNzEtMjAyMzc2ODMyZTlk&prompt=none&code_challenge=rIEOTOOZOlzpU5Uofasg5G_1DHXVG_stdi4-I_3Qzq0&code_challenge_method=S256&x-cl	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557224213775.YTk4ZGI0ZTAtN2UxOC00MmFjLWI3Y2YtMzVmODg2YzU1YThhZDAzMTBjOTItZjU5YS00NDg4LTg5Y2MtMWMyNjZmMDM0ZTRl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJo4FWi2OOuH3QbcSebwJVpjnKM-oXDZysjzdye3KrzL8vb-TNkN91g_oJ4VBIlz9sWZoUEc_9kkkfjEiCiBgmcYcWHcdVkJWwfz6E7ZyP5ME2AP21GZkRIbhpG0h8un9yfhyacEDQDZFzFjLHJ3jh2_4kmOFkidDmyZMFs6l0kYo1CV7z5_CmmfaRrxZgpmM305fNB7bRkIn5gtoNonkrllXgxpxieY_202o5fMeaDXDzdJKzdF40CziK_nfTPr0EGXJ6dJlNhyme73FyDzLSzkp9zCja0r6nh4_WWxlYTJx2t2BaexesB7Hi53Op7VQsEH4SnlxysaP57VPY_dr16G&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557224213775.YTk4ZGI0ZTAtN2UxOC00MmFjLWI3Y2YtMzVmODg2YzU1YThhZDAzMTBjOTItZjU5YS00NDg4LTg5Y2MtMWMyNjZmMDM0ZTRl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJo4FWi2OOuH3QbcSebwJVpjnKM-oXDZysjzdye3KrzL8vb-TNkN91g_oJ4VBIlz9sWZoUEc_9kkkfjEiCiBgmcYcWHcdVkJWwfz6E7ZyP5ME2AP21GZkRIbhpG0h8un9yfhyacEDQDZFzFjLHJ3jh2_4kmOFkidDmyZMFs6l0kYo1CV7z5_CmmfaRrxZgpmM305fNB7bRkIn5gtoNonkrllXgxpxieY_202o5fMeaDXDzdJKzdF40CziK_nfTPr0EGXJ6dJlNhyme73FyDzLSzkp9zCja0r6nh4_WWxlYTJx2t2BaexesB7Hi53Op7VQsEH4SnlxysaP57VPY_dr16G&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/savedusers?appid=ee272b19-4411-433f-8f28-5c13cb6fd407&wreply=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&uaid=1b8f7b5e-4e4b-49a5-e249-e7ef4d837bdd&partnerId=smcconvergence&idpflag=proxy	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638557557475095269.YjhhNWJkNjAtMmNhOS00YzJhLWJiMTYtM2Q1MzUxODA5ZTNhY2EyMjA3OGUtMzhmOS00MmVhLWI2YmYtZGY4ZWY1NjBlZjhl&prompt=none&nopa=2&state=CfDJ8CiTzr73KWNFsUGcHEnPeJprg2mAcgVmzw2Qq1hLgUgGQpnOGOgFSLVknMVAN_SdgGinkPVCUWdKzh0b1UPEfJiLA1yC2IZ_BRQoFNI0kNgQWI9ZFo0SqqNKNf-bggMNLb96FVFmBIC9ZgY-CpWAQ5PicD8WrVVE2hM_kPHFPGJIF1m0pHO8sb91a-gz82H6k91WqZOirECr_iHbwZMzJlibEATszRsPFsDsQL_0nXFh2HfINGbD5wGx-wXmALMebrlRbjaVOHC9pprH5xrZDL4plmCa3sw7eSKkh8U0KX0MFuTy9oauxE_2ZgBdgevbZO1GvAPxkhdcXIpW2UWrkvK6UWAo4c1kqDFnWYbFYj3S&x-client-SKU=ID_NET6_0&x-client-ver=6.35.0.0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.live.com/oauth20_authorize.srf?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&scope=openid+profile+offline_access&redirect_uri=https%3a%2f%2fwww.microsoft.com%2fcascadeauth%2faccount%2fsignin-oidc&response_type=code&state=CfDJ8GIDTS11_mxJlLbEvLbfH9P1_8pz8WPEu0Y4eCpkoXWlv5Mw7CwhPO76NVWaXz-vFcjC_87SKoJNhfTE7mlKLSAk60eMixDO4Ag6aissMW9ZwRZhQ-HYQor0eadiBaS3w0U-EarOIXHkPKisb7HmTIGQSYzaU-_yRkMi4dm98n5pIub5J2qYMnItsPfgvf6TLLKH2Xbn7U0gFjS6ffUlyUBfMxilzeK5xo-J5gw0DaWSvC4It8rIV9okAb1ySr5FEogN6OVgoJuErlFki7eFAQJVQDe7-oPK9DFb66pdQQb9PoVd4JfFCW39w5FN_4EgNzy7CDCqM2OWsKNU0qyjnxF3ld1tme-i-0hGtC9gd4ZCH1KojJCzCDhabHOpwu_3VM-RA6t6zWdmijpJ8W5w-oU_pLDEA5qUsf5DJ8HLE8ArmdHp8hZ04xODuJd7r_V8riY7Zdezlq2mPDZUOyAgEY4zcXDN9iWuHhgAjDiqeZSGK8OHqSM6hX8abirgsvDgb0xaSeEz6a6ip-0eq44Tcek&response_mode=form_post&nonce=638557557806076505.Y2NjMjFiOWQtNDFmYi00YzdkLThiYmYtMjA4MTk2MGE2NmY2ZmUzNDEwNTktMTcxNi00MGVhLTgzNzEtMjAyMzc2ODMyZTlk&prompt=none&code_challenge=rIEOTOOZOlzpU5Uofasg5G_1DHXVG_stdi4-I_3Qzq0&code_challenge_method=S256&x-cl...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_314.2.dr	String found in binary or memory: "//www.linkedin.com/shareArticle?mini=true&url=" + equals www.linkedin.com (Linkedin)
Source: chromecache_314.2.dr	String found in binary or memory: url: "//www.facebook.com/share.php?u=" + h, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: aka.ms
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: support.content.office.net
Source: global traffic	DNS traffic detected: DNS query: assets.onestore.ms
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: microsoftwindows.112.2o7.net
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: amp.azure.net
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: lptag.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: lpcdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: accdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: publisher.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: d.impactradius-event.com
Source: global traffic	DNS traffic detected: DNS query: cdnssl.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: mscom.demdex.net
Source: global traffic	DNS traffic detected: DNS query: msftenterprise.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: ats.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rtd.tubemogul.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rtd-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: servedby.flashtalking.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: px.owneriq.net
Source: global traffic	DNS traffic detected: DNS query: jadserve.postrelease.com
Source: global traffic	DNS traffic detected: DNS query: ds.reson8.com
Source: global traffic	DNS traffic detected: DNS query: bttrack.com
Source: global traffic	DNS traffic detected: DNS query: dmpsync.3lift.com
Source: global traffic	DNS traffic detected: DNS query: ag.innovid.com
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: rtb.adentifi.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic	DNS traffic detected: DNS query: q-aus1.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: c.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: srm.bf.contentsquare.net
Source: global traffic	DNS traffic detected: DNS query: k-aus1.clicktale.net
Source: global traffic	DNS traffic detected: DNS query: static-assets.fs.liveperson.com
Source: global traffic	DNS traffic detected: DNS query: va.v.liveperson.net

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://aka.ms/LearnAboutSenderIdentification

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Windows Analysis Report
https://aka.ms/LearnAboutSenderIdentification