Edit tour

Windows Analysis Report
https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com

Overview

General Information

Sample URL:	https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com
Analysis ID:	1484243
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6264 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1904,i,14037710128960232225,2568485604813164137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 152.199.21.175 - Destination IP: 192.168.2.16

Timestamp:	2024-07-29T20:33:58.742622+0200
SID:	2012510
Source Port:	443
Destination Port:	49753
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 152.199.21.175 - Destination IP: 192.168.2.16

Timestamp:	2024-07-29T20:33:57.449247+0200
SID:	2012510
Source Port:	443
Destination Port:	49746
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 152.199.21.175 - Destination IP: 192.168.2.16

Timestamp:	2024-07-29T20:33:55.399938+0200
SID:	2012510
Source Port:	443
Destination Port:	49741
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 152.199.21.175 - Destination IP: 192.168.2.16

Timestamp:	2024-07-29T20:33:55.445467+0200
SID:	2012510
Source Port:	443
Destination Port:	49742
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 152.199.21.175 - Destination IP: 192.168.2.16

Timestamp:	2024-07-29T20:33:57.351475+0200
SID:	2012510
Source Port:	443
Destination Port:	49746
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow - Source IP: 13.85.23.86 - Destination IP: 192.168.2.16

Timestamp:	2024-07-29T20:33:47.089483+0200
SID:	2022930
Source Port:	443
Destination Port:	49723
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 152.199.21.175 - Destination IP: 192.168.2.16

Timestamp:	2024-07-29T20:33:58.813281+0200
SID:	2012510
Source Port:	443
Destination Port:	49753
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 152.199.21.175 - Destination IP: 192.168.2.16

Timestamp:	2024-07-29T20:35:13.824754+0200
SID:	2012510
Source Port:	443
Destination Port:	49784
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 152.199.21.175 - Destination IP: 192.168.2.16

Timestamp:	2024-07-29T20:33:53.641812+0200
SID:	2012510
Source Port:	443
Destination Port:	49737
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow - Source IP: 13.85.23.86 - Destination IP: 192.168.2.16

Timestamp:	2024-07-29T20:34:24.867666+0200
SID:	2022930
Source Port:	443
Destination Port:	49758
Protocol:	TCP
Classtype:	A Network Trojan was detected

HTTP traffic detected: POST /dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com HTTP/1.1Host: zvbiitngbh67xfz7mdm4.ampleintel.comConnection: keep-aliveContent-Length: 69Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://zvbiitngbh67xfz7mdm4.ampleintel.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/html; charset=us-asciiDate: Mon, 29 Jul 2024 18:34:45 GMTX-Cnection: closeContent-Length: 326Vary: Accept-EncodingConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiDate: Mon, 29 Jul 2024 18:34:46 GMTX-Cnection: closeContent-Length: 315Vary: Accept-EncodingConnection: close

Source: chromecache_122.1.dr, chromecache_116.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_125.1.dr, chromecache_103.1.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_125.1.dr, chromecache_103.1.dr, chromecache_119.1.dr, chromecache_123.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_119.1.dr, chromecache_123.1.dr	String found in binary or memory: https://fingerprint.com)
Source: chromecache_122.1.dr, chromecache_107.1.dr, chromecache_125.1.dr, chromecache_116.1.dr, chromecache_101.1.dr, chromecache_103.1.dr, chromecache_108.1.dr, chromecache_98.1.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_87.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_87.1.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_124.1.dr, chromecache_91.1.dr	String found in binary or memory: https://openfpcdn.io/botd/v1
Source: chromecache_105.1.dr, chromecache_106.1.dr	String found in binary or memory: https://password.jpmchase.com/pce/otp

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49758 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@17/73@34/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1904,i,14037710128960232225,2568485604813164137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1904,i,14037710128960232225,2568485604813164137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://knockoutjs.com/	0%	URL Reputation	safe
https://login.windows-ppe.net	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pidpredirect_b53d3145d80ad77b43cb.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://trk.melrosebuilders.com.au/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com	0%	Avira URL Cloud	safe
https://fingerprint.com)	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	0%	Avira URL Cloud	safe
https://github.com/douglascrockford/JSON-js	0%	Avira URL Cloud	safe
https://idag2.jpmorganchase.com/adfs/portal/script/mfaotpsms.js	0%	Avira URL Cloud	safe
https://zvbiitngbh67xfz7mdm4.ampleintel.com/favicon.ico	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com?_js=_1	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	Avira URL Cloud	safe
https://password.jpmchase.com/pce/otp	0%	Avira URL Cloud	safe
https://idag2.jpmorganchase.com/favicon.ico	0%	Avira URL Cloud	safe
https://idag2.jpmorganchase.com/adfs/portal/css/style.css?id=5240DC5436BD57B06CFF8418047FDE884DB6C552D95D488B4D406966173A0556	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://idag2.jpmorganchase.com/adfs/fs/federationserverservice.asmx	0%	Avira URL Cloud	safe
https://u.iebsdatabase.com/accounts/signin/office/?ZGFjMzk5ODU1OTIzNmUyOGY4NzE3MjRhM2JjNDA1NzUlMjBhbGV4YW5kLmRvZUBqcG1jaGFzZS5jb20%3D	100%	Avira URL Cloud	malware
https://openfpcdn.io/botd/v1	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
openfpcdn.io	13.32.99.33	true	false	unknown
s-part-0014.t-0009.t-msedge.net	13.107.246.42	true	false	unknown
idag2.intl.gslbjpmchase.com	170.148.240.44	true	false	unknown
ap-1681266267.ap-southeast-2.elb.amazonaws.com	54.79.91.117	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	172.217.23.100	true	false	unknown
u.iebsdatabase.com	193.70.74.252	true	false	unknown
zvbiitngbh67xfz7mdm4.ampleintel.com	unknown	unknown	false	unknown
idag2.jpmorganchase.com	unknown	unknown	true	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
trk.melrosebuilders.com.au	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	false		unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js	false	Avira URL Cloud: safe	unknown
https://idag2.jpmorganchase.com/adfs/portal/script/mfaotpsms.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	Avira URL Cloud: safe	unknown
https://trk.melrosebuilders.com.au/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pidpredirect_b53d3145d80ad77b43cb.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1	false		unknown
https://zvbiitngbh67xfz7mdm4.ampleintel.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	Avira URL Cloud: safe	unknown
https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com	false		unknown
https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com?_js=_1	false	Avira URL Cloud: safe	unknown
https://idag2.jpmorganchase.com/adfs/portal/css/style.css?id=5240DC5436BD57B06CFF8418047FDE884DB6C552D95D488B4D406966173A0556	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	Avira URL Cloud: safe	unknown
https://idag2.jpmorganchase.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://idag2.jpmorganchase.com/adfs/fs/federationserverservice.asmx	false	Avira URL Cloud: safe	unknown
https://u.iebsdatabase.com/accounts/signin/office/?ZGFjMzk5ODU1OTIzNmUyOGY4NzE3MjRhM2JjNDA1NzUlMjBhbGV4YW5kLmRvZUBqcG1jaGFzZS5jb20%3D	false	Avira URL Cloud: malware	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js	false	Avira URL Cloud: safe	unknown
https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com&mkt=&lc=	true		unknown
https://openfpcdn.io/botd/v1	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://knockoutjs.com/	chromecache_125.1.dr, chromecache_103.1.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_122.1.dr, chromecache_107.1.dr, chromecache_125.1.dr, chromecache_116.1.dr, chromecache_101.1.dr, chromecache_103.1.dr, chromecache_108.1.dr, chromecache_98.1.dr	false	Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_87.1.dr	false	URL Reputation: safe	unknown
https://fingerprint.com)	chromecache_119.1.dr, chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com	chromecache_87.1.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_125.1.dr, chromecache_103.1.dr, chromecache_119.1.dr, chromecache_123.1.dr	false	URL Reputation: safe	unknown
https://password.jpmchase.com/pce/otp	chromecache_105.1.dr, chromecache_106.1.dr	false	Avira URL Cloud: safe	unknown
http://feross.org	chromecache_122.1.dr, chromecache_116.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.237.152.150	unknown	United States	16509	AMAZON-02US	false
13.107.246.42	s-part-0014.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
54.79.91.117	ap-1681266267.ap-southeast-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.239.83.61	unknown	United States	16509	AMAZON-02US	false
170.148.240.44	idag2.intl.gslbjpmchase.com	United States	32066	JPMORGANCHASE-DALLAS-JIPUS	false
13.32.99.33	openfpcdn.io	United States	16509	AMAZON-02US	false
193.70.74.252	u.iebsdatabase.com	France	16276	OVHFR	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.23.100	www.google.com	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1484243
Start date and time:	2024-07-29 20:33:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@17/73@34/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.71.84, 142.250.185.110, 142.250.185.163, 34.104.35.123, 40.126.31.73, 20.190.159.68, 20.190.159.71, 20.190.159.0, 40.126.31.71, 20.190.159.64, 20.190.159.23, 20.190.159.73, 2.16.238.149, 2.16.238.152, 20.190.159.2, 20.190.159.75, 20.190.159.4, 142.250.185.106, 172.217.16.202, 142.250.184.202, 142.250.185.74, 216.58.206.74, 142.250.186.106, 172.217.18.10, 216.58.212.170, 142.250.186.74, 142.250.186.42, 142.250.185.138, 172.217.16.138, 142.250.185.170, 142.250.185.234, 142.250.185.202, 142.250.181.234, 199.232.214.172, 216.58.206.67, 40.126.32.136, 20.190.160.14, 20.190.160.17, 40.126.32.76, 40.126.32.140, 40.126.32.138, 20.190.160.22, 40.126.32.74, 172.217.23.106, 216.58.212.138, 142.250.186.170, 142.250.184.234, 216.58.206.42, 142.250.186.138, 172.217.18.110
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, clients2.google.com, login.live.com, update.googleapis.com, login.mso.msidentity.com, clients1.google.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.ak.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.akadns.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 29 17:33:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9873004716100384
Encrypted:	false
SSDEEP:	48:8ndfTXHoHmidAKZdA1FehwiZUklqehry+3:8pDBky
MD5:	218AF1395B71167CEFF16EB2F8584ADB
SHA1:	796DF0EFB228B2F5AB54F79F0AF5BC478F9537EE
SHA-256:	75B88CD9B3E4024BAEA4214792F70A1EA563ED5F4616EC1A54938F66EE5338F0
SHA-512:	558C45CB661E9C907877635184A137C78D7B5AACEC346E5AAC0FB046F590E5784E8D52C96CC0563602556C84A191174359680C6B44566992575E2313E7C8AB40
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....k......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X(.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X1.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X1.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X1............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X2............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............6.r.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 29 17:33:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.0002508630491995
Encrypted:	false
SSDEEP:	48:8UdfTXHoHmidAKZdA1seh/iZUkAQkqehUy+2:8IDX9Qpy
MD5:	E613CE7212A74D7143985785E6D77A48
SHA1:	3B617F2E47BBB4DB5CE1FDBCFBD03D430D53C80B
SHA-256:	714B84FFFD9F125F61789C35C84A4E813C3A38FDE980A4CBE1D3199B10C0B08B
SHA-512:	D75B6A9FB0C75947BE26E2EE11F5C9E2860A2356A6461EE079CA19CB03C9AACF92C312B2C1ECD9EB31A708DCBEEE3DDDA7DF60636DC9434F0F8EC5494D06CCAF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....7t.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X(.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X1.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X1.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X1............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X2............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............6.r.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0105414088327045
Encrypted:	false
SSDEEP:	48:8ldfTXHAHmidAKZdA14meh7sFiZUkmgqeh7siy+BX:8HDLnoy
MD5:	8A659878EFDF95FCE215A40CB1A88B6C
SHA1:	5C23E7320F1323B270AFBFCD40A00C516FA7953D
SHA-256:	B8A0DE5FFB37B7A4B444B3E47924CF04E61A920075C881447BA8F8875CFD6F93
SHA-512:	988D47A6BDC029A0FDE07C266905C59AB9B4589092487E417723F4376620F13AB2119937345A53FACB1AB5E8F8F1E51E8C4095C8CC503F3EE35F8A72EAFE2EB5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X(.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X1.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X1.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X1............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............6.r.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 29 17:33:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.999348353310985
Encrypted:	false
SSDEEP:	48:8X5dfTXHoHmidAKZdA1TehDiZUkwqehgy+R:8rDkay
MD5:	1C12674D2EDACA5ECE09AF76700EAA43
SHA1:	4DB1BC0DD81240ED1B46A1050E789120E2ACAD7F
SHA-256:	2F4414ED52AFB214F27E8125F899F0C67282E670FDAF8BBF1EF59A6271A8A5A8
SHA-512:	AF18C1A26FD7842AE4A53095670E77FE2FC664E7117DBB9D1603EED916D7894C1AA4F839F97140C730910FAF5C85C6FDEB8DE135095BB541FD74D2FB02454FC3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?.m.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X(.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X1.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X1.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X1............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X2............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............6.r.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 29 17:33:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9907935348321617
Encrypted:	false
SSDEEP:	48:8zYdfTXHoHmidAKZdA1dehBiZUk1W1qehmy+C:8z8DE9Gy
MD5:	1A757FF9A62FC1786CAB380DDE4DA5F9
SHA1:	361753D2A5E46BA96C9C3C33AA1BFAB32041814F
SHA-256:	E07E34E8BF28A7021D3DE432BCC15B5432AF12C54D9F6D6AF92B430BDED8883C
SHA-512:	9CE1251488C98705929F299A299B3E36E1853A296497FE51EE2810B03FADBF0D5004D4B7784E56882A0DB17EE9B4F6BA1C740CE01EB6BAD368B560133D12614E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......z.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X(.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X1.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X1.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X1............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X2............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............6.r.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 29 17:33:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.99622793420977
Encrypted:	false
SSDEEP:	48:8FdfTXHoHmidAKZdA1duTeehOuTbbiZUk5OjqehOuTboy+yT+:8nD2TfTbxWOvTboy7T
MD5:	5D3291FDDF00CC3CC2D577E2CCA26DBE
SHA1:	F2AC354674D13B54D21A6491B5AC208E9EAEE885
SHA-256:	27D2B504C3B9194D15E13FED52CAD52A636FB548D1A9C6EC302B3EBBE0295A66
SHA-512:	6306124F79BFFE6733F0F5F3A146CF19A647A897232C1DCC6A8903D7AE24F96D100D425627030A861656FD0BFFCF93422AE0A34D504AA67A2C18956E703C6B08
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....ie.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X(.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X1.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X1.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X1............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X2............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............6.r.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	166
Entropy (8bit):	4.862293363989353
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbttKvYl/UvKX8ZDocWLvYAOIL0NhtvxL0Hac4NGb:hxuJzhqIziY2SX8ZkZvYm4Nhdx434Qb
MD5:	443E5C17DA7017578B2D27241DD7442B
SHA1:	4BADF6E95ABD3585391AAFB2ED2F02D6103E14C8
SHA-256:	295FBD8B265838D1EB623AB154E619C422B1C510235881506B51F89A4DC25633
SHA-512:	69B1CEF77EDF40D7F3BFDBB9827C6E59F238EF1E2AF9DB555356E8504561D81F74BCCEDBD923E8F98D9EC1C43A7F70909A13F3588B10AB1CF04466E9D2653A26
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Processing...</title>. <script src="?_js=_1"></script>.</head>.<body>.</body>.</html>

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32050)
Category:	dropped
Size (bytes):	55504
Entropy (8bit):	5.3796207662860205
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3/ym+d/Px2g+0wtBmixn/TPRUbx3VDg/MvXl:ABrkF7IyJvym+d/Pog+0wtBmiJig/Mt
MD5:	231B2640091D35531ED47D94D8B07571
SHA1:	94AF608E902193369046FE832F60DED769D7F6E3
SHA-256:	A9A2878CFFD73E5E02EA0453C36A0B17D50BF2C08D789EE4A4650829C61618DB
SHA-512:	A4F5102B7D647F395962F16D7E15EAA8B98780E042596D2B12922B7BF279F9AD9CE6F0C8EA55A85C8E0D0B104CFE10086BB80F71018BB588812BFBE6E88D74DA
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	448825
Entropy (8bit):	5.449026583872074
Encrypted:	false
SSDEEP:	6144:LXguq6KAmAlHK6d/1mpyDFsLLh7SB29OWvcvqcEHKE0H3NX44A:LX2S1mpEaLl7jcv4P
MD5:	437035C4A68AEA83EB85B412530BC905
SHA1:	B8171430ABC6CAD0232E88302A96AA492DB01388
SHA-256:	F3D6AC1801FEAFC2CB6D94F9AD94C4742C5E6B79ED02AD589E308A50A7619F49
SHA-512:	37C8237DAB5E1CA7C38834E6C937F3D7903C3F1189F4FE3D5C49E9220D24A073A6331F6D7DACEDD4C5793014264D90350E031619584A7ADFA23099681186D86F
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8862)
Category:	downloaded
Size (bytes):	26878
Entropy (8bit):	5.338636213948761
Encrypted:	false
SSDEEP:	768:srxUyVg1C+GcdY1n67NmSBSAje0CUVpJ2P4Gp8YcaZgulV+8HhlZwWwZII+T3Gxi:sGyYC+GcdY16sISAqAVpJ2P4Gp8YcaZ1
MD5:	5568E37925B9F9DFC99A032BA63960F5
SHA1:	2E15D3E72322520BD9ECF84F7277EF3DAA4378CE
SHA-256:	F567E03F667002B993D79E5D13534573B3B3A6E0511A7CD29BE0F792C520E857
SHA-512:	7121BF3B6B11C91CE2A4D5E8DEAA557AA21C68CF66C79C6376EFE1B720AF890E96BA16EB208FA834E6207D4614DB58FB1BEF51DC2116DE4BEE3F6B7937971EA4
Malicious:	false
Reputation:	low
URL:	https://idag2.jpmorganchase.com/adfs/portal/script/mfaotpsms.js
Preview:	function SMSOTPLayout() {. // Hide authOptions once plugin is selected.. if(authOptions) {..authOptions.style.display = "none";. }. // remove fullPage div.. document.querySelector("#fullPage").remove().. document.body.style.setProperty("background-color", "#F7F7F7", "important"). const svg = "<svg aria-labelledby=\"jpmc-logo\" id=\"Layer_1\" height=\"25\" data-name=\"Layer 1\" xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 214 24\"><title id=\"jpmc-logo\">JPMorgan Chase & Co.</title><defs><style>.cls-1 {fill-rule: evenodd;}</style></defs><path class=\"cls-1\" fill=\"#ffffff\" d=\"M209.79,17.56a1.05,1.05,0,0,1,.32-.78,1,1,0,0,1,.78-.32,1.11,1.11,0,0,1,1.11,1.1,1.11,1.11,0,0,1-1.11,1.12,1,1,0,0,1-.78-.34A1.1,1.1,0,0,1,209.79,17.56Zm-14.64-4.08h.44V18.1h-.44a3.55,3.55,0,0,0-.63-1.39,5.57,5.57,0,0,1-4.37,1.95,6.2,6.2,0,0,1-4.6-1.8,6.46,6.46,0,0,1-1.79-4.76,8.32,8.32,0,0,1,.82-3.66,5.59,5.59,0,0,1,2.3-2.55,6.48,6.48,0,0,1,3.23-.83,5.67,5.67,0,0,1,2.64.6A5.29,5.29,0,

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8862)
Category:	dropped
Size (bytes):	26878
Entropy (8bit):	5.338636213948761
Encrypted:	false
SSDEEP:	768:srxUyVg1C+GcdY1n67NmSBSAje0CUVpJ2P4Gp8YcaZgulV+8HhlZwWwZII+T3Gxi:sGyYC+GcdY16sISAqAVpJ2P4Gp8YcaZ1
MD5:	5568E37925B9F9DFC99A032BA63960F5
SHA1:	2E15D3E72322520BD9ECF84F7277EF3DAA4378CE
SHA-256:	F567E03F667002B993D79E5D13534573B3B3A6E0511A7CD29BE0F792C520E857
SHA-512:	7121BF3B6B11C91CE2A4D5E8DEAA557AA21C68CF66C79C6376EFE1B720AF890E96BA16EB208FA834E6207D4614DB58FB1BEF51DC2116DE4BEE3F6B7937971EA4
Malicious:	false
Reputation:	low
Preview:	function SMSOTPLayout() {. // Hide authOptions once plugin is selected.. if(authOptions) {..authOptions.style.display = "none";. }. // remove fullPage div.. document.querySelector("#fullPage").remove().. document.body.style.setProperty("background-color", "#F7F7F7", "important"). const svg = "<svg aria-labelledby=\"jpmc-logo\" id=\"Layer_1\" height=\"25\" data-name=\"Layer 1\" xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 214 24\"><title id=\"jpmc-logo\">JPMorgan Chase & Co.</title><defs><style>.cls-1 {fill-rule: evenodd;}</style></defs><path class=\"cls-1\" fill=\"#ffffff\" d=\"M209.79,17.56a1.05,1.05,0,0,1,.32-.78,1,1,0,0,1,.78-.32,1.11,1.11,0,0,1,1.11,1.1,1.11,1.11,0,0,1-1.11,1.12,1,1,0,0,1-.78-.34A1.1,1.1,0,0,1,209.79,17.56Zm-14.64-4.08h.44V18.1h-.44a3.55,3.55,0,0,0-.63-1.39,5.57,5.57,0,0,1-4.37,1.95,6.2,6.2,0,0,1-4.6-1.8,6.46,6.46,0,0,1-1.79-4.76,8.32,8.32,0,0,1,.82-3.66,5.59,5.59,0,0,1,2.3-2.55,6.48,6.48,0,0,1,3.23-.83,5.67,5.67,0,0,1,2.64.6A5.29,5.29,0,

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2003)
Category:	downloaded
Size (bytes):	2976
Entropy (8bit):	5.329014205840748
Encrypted:	false
SSDEEP:	48:vxVPjDltOMSBkjGWfT58jTi1srOGM4xufaJ7mevwxnjs2XcamgJoXk+Ax42CcuKW:jPjDXOMS1WfUi1Z40faJ7mevwxnjXcv3
MD5:	5B6D180C410B42636115C0EBC5FF47EC
SHA1:	F0A696B99BD3E70818D34DA0A9A78CEA7B3D42BF
SHA-256:	ED2F401BC59AAAA63F36CD47693C43128D0B2534DBAC5EB6A0B3AF3B46BF8FFF
SHA-512:	755C8BD20967FC0298D95744FFE601B8F8F05564D7BA029CD8BD57BA17615D8DA648D3AA3AF12EF331EE37BFE924C6FCB86D057E7834EDDE59B76FC75EFC4981
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pidpredirect_b53d3145d80ad77b43cb.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{507:function(e,t,i

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2003)
Category:	dropped
Size (bytes):	2976
Entropy (8bit):	5.329014205840748
Encrypted:	false
SSDEEP:	48:vxVPjDltOMSBkjGWfT58jTi1srOGM4xufaJ7mevwxnjs2XcamgJoXk+Ax42CcuKW:jPjDXOMS1WfUi1Z40faJ7mevwxnjXcv3
MD5:	5B6D180C410B42636115C0EBC5FF47EC
SHA1:	F0A696B99BD3E70818D34DA0A9A78CEA7B3D42BF
SHA-256:	ED2F401BC59AAAA63F36CD47693C43128D0B2534DBAC5EB6A0B3AF3B46BF8FFF
SHA-512:	755C8BD20967FC0298D95744FFE601B8F8F05564D7BA029CD8BD57BA17615D8DA648D3AA3AF12EF331EE37BFE924C6FCB86D057E7834EDDE59B76FC75EFC4981
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{507:function(e,t,i

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.38000372032164
Encrypted:	false
SSDEEP:	6:B8FQtuc4svmo9qvyDPdrKFjKek+q2Q8EevWR0NNEXW0YDBOTieUWFLzR/YNe9zoG:BMQt6o9qvyLYF2ek+q2Q8Eepfd6ieUWx
MD5:	67932D4B695E1D6B19DFC2E3610761FF
SHA1:	A66898B36C94C53766E66C1A7AAEB149447EC083
SHA-256:	CE7127C38E30E92A021ED2BD09287713C6A923DB9FFDB43F126E8965D777FBF0
SHA-512:	97408B30995B72417494DACA4C67488B77E3121A9DB8BB3C2F204B49944457CAA1AF4B75730511B39FC9BABCCA5E1440168C3DBF3377B072866295BD490710FE
Malicious:	false
Reputation:	low
URL:	https://idag2.jpmorganchase.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">..<HTML><HEAD><TITLE>Not Found</TITLE>..<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>..<BODY><h2>Not Found</h2>..<hr><p>HTTP Error 404. The requested resource is not found.</p>..</BODY></HTML>..

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.933768266288633
Encrypted:	false
SSDEEP:	3:aXEfg3+Ts/pY1CqMyJ:Mag36sxK
MD5:	3AA96EDBDFB503B83D0C25153C8C1A2F
SHA1:	6D90B84F02A52800988914191F60AE9F41116929
SHA-256:	EBA56F051E54844F91A1796D4F80E9A647DDD3ABE65E3138DD01D54D3DC614A7
SHA-512:	76019ED467B5B38B7A7A2A3F393105ADE9FCB60DFA1EA621478A8575552632B7DD547ABE35CD414FD4AAA9AAE481B9C8AB53B7ECC6A677DFFE89A2E6CE7B20AB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQlLED1KfgfabBIFDQGlaXISBQ23J5OhEgUNZSGZ6hIFDXslFWI=?alt=proto
Preview:	CiwKBw0BpWlyGgAKCw23J5OhGgQIVhgCCgsNZSGZ6hoECEsYAgoHDXslFWIaAA==

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32050)
Category:	downloaded
Size (bytes):	55504
Entropy (8bit):	5.3796207662860205
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3/ym+d/Px2g+0wtBmixn/TPRUbx3VDg/MvXl:ABrkF7IyJvym+d/Pog+0wtBmiJig/Mt
MD5:	231B2640091D35531ED47D94D8B07571
SHA1:	94AF608E902193369046FE832F60DED769D7F6E3
SHA-256:	A9A2878CFFD73E5E02EA0453C36A0B17D50BF2C08D789EE4A4650829C61618DB
SHA-512:	A4F5102B7D647F395962F16D7E15EAA8B98780E042596D2B12922B7BF279F9AD9CE6F0C8EA55A85C8E0D0B104CFE10086BB80F71018BB588812BFBE6E88D74DA
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116351
Entropy (8bit):	7.9975788994031465
Encrypted:	true
SSDEEP:	1536:cEdtt9lZgVnh9Mq+S8ECUVjeJ9uBGB6QFM2lNSXkbva7/rF3I0nAiW7zMpFOfFlp:f5R6Mq74i6P6r2lNxcrhfnPXFmD6zJk
MD5:	FEDAFBAC6D003C0D0DCA6F46FC3305C2
SHA1:	19A766D07F77FB5A37435FB94001E6170382DF36
SHA-256:	15D89CD4219307695E0C0E02D0A852BCE5F1549DC1C48D0116ED05EEA0747461
SHA-512:	E7175F8E39F1AB98B8419FAC92619F1776F93225CEFDDE1A5E4629073677ADD25B2EA77AE113E64EB03A4CF7E58347872D81892DD31BDD0403D2C2DEBA421F19
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js
Preview:	...........}[[.H........-...."#<$!=.$...{z..O.e..<.pi....Z....,.I.>..L...K....W.....l.._.....r.r...w.S............`...b.E..7....v#>..~%.+.?..Y..1.S..z.2..i%...,...A.U&^..G.\|..UL...VN.0~...Z...Cm....`.......7....Rm...#^I.!.+wco0.\|..a........n..(...&X..y%.qe...X..Q9.....-FT.:..............8K`..M.O..Z'....>T...$...x<....6...\|.U.].&....f..[..dR..xX.....~?....r..>N.j....9.r?f0y.>.~.x..t.F.<...Opm..;/......Q.._...n.:...f....q<...../.'.A0........o0.....O>m\|.....\....zPy.L].Wm......S5.'0.........O.~....._...a7...;..7...S.l>..[.Y.....>;.C....j[0W>,.y9J.....g..x........._.~....g.b.......\...T).8^.<.ag.M`A..o4u...?.v....8....'......:q.6Y..]6...T}P..'!...,..d..F4....8\|..]odVcK~.5B.........i.u.,..%.c.7<..N..T../.f...o...N2.......:h.ew..x.bo.$...6.(..=z..........frk.F.7IB^R.z..~..u...A..>&<4......M.#(.Xt.......k...i.f...,C.q..bY..K#...^.!p..E..j....m.....}IX...7.k\q.z..G..X......y.d..\R.]V.......b.0.o....7..piC.../.px..j..r2.....R.j5m..s..Dw^

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15005)
Category:	dropped
Size (bytes):	15196
Entropy (8bit):	5.206988093706638
Encrypted:	false
SSDEEP:	384:/yKlnAKXPD899vDMKXExXI7EhgKkVGVXvPGt7MD:hfPD899vDMKHLVGVXvPGNA
MD5:	234A8C1C15DF9B03C65E9E14C82FC872
SHA1:	E5CA36727846AEDE7DFBC07E88B2B025EB0CAE90
SHA-256:	29CB26E06F2A4A877F1134A46480D9B78F8B6E0E6F9B0FE67E34307C312B5A89
SHA-512:	9AEEE4E620DE49E0ED303917E9AFC1806DA0815896BC5FEEF3ADD9F89E0429678BFE0D9F0AD3FC940BD8E48F7E235E5C8D23463407C42B6FBC740B50C43A0B53
Malicious:	false
Reputation:	low
Preview:	/*. Fingerprint BotD v1.9.1 - Copyright (c) FingerprintJS, Inc, 2024 (https://fingerprint.com). * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license.. */.var e=function(n,t){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,n){e.__proto__=n}\|\|function(e,n){for(var t in n)Object.prototype.hasOwnProperty.call(n,t)&&(e[t]=n[t])},e(n,t)};function n(e,n,t,r){return new(t\|\|(t=Promise))((function(i,o){function a(e){try{s(r.next(e))}catch(n){o(n)}}function u(e){try{s(r.throw(e))}catch(n){o(n)}}function s(e){var n;e.done?i(e.value):(n=e.value,n instanceof t?n:new t((function(e){e(n)}))).then(a,u)}s((r=r.apply(e,n\|\|[])).next())}))}function t(e,n){var t,r,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:u(0),throw:u(1),return:u(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function u(u){return function(s){return function(u){if(t)throw new TypeError("Generator

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113401
Entropy (8bit):	5.284985933216009
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmchSeC1Jzc6VUW3:xkNhp6VU0
MD5:	41955034BB6BC6963DF5A8ECA72C5B81
SHA1:	D4B9E8C46100BDDACE8DFA08BDFF1F6F3D3B0A81
SHA-256:	1F8CEB44FE7CFCF7E71DBD5122210335CA3821D697A851D2900B95AF7D92D69D
SHA-512:	A52DF8961AC9964DE5202A52B4C38242368DC8898593BF3E8B3AFD3FC77C2C12FE72F27BB410DD4F7498643B69EEEFCCA1A566371E211F874C0BE22CF7E2A4E8
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113355
Entropy (8bit):	5.285112404757625
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmchSeC1Jzc6VUWU:xkNhp6VUj
MD5:	302E4073AA25D25E03DA26AA4A94AD62
SHA1:	CBB8C69EC1FE0E5795DF9BD6C12B7837C61A81DC
SHA-256:	8B81B6DBB9AF6502D78ABE8A85D135861848E0597989901DA42C62ECB841A07D
SHA-512:	3F1F0CEB445D074B3B60C6E63AC03F061119379B49306387BFA2834C2F3330BA019A2C5BFB01D553398DE18E7C6CC7199CF3B70334A69B2373C9F51DA44359F2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.317614623419193
Encrypted:	false
SSDEEP:	3072:ew5iAZBaQxn7oW/gFDfmtGOOJcPSRTQLeUDdHm7mCId9hvuZTh910rOzPypRan4:ZiAhxp/mTmbraQJmvZxL4
MD5:	033A93064FBF6C5BEA2377A5D08D554D
SHA1:	75524ED095D9ACDD42EA8D67D38A5B0793081D70
SHA-256:	1EC87632EE58734951AA02813EF07AD377126A39A16F063C181519B98FFFFC07
SHA-512:	FD93A5DDF2CCE4AA956DF94E10F3791787E157BA8D6CFF8151163F719868105045F431901D496215E5959989A30969AC696C218B29B0AE343F2BF9E7F7D51078
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(532).concat([f

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15005)
Category:	downloaded
Size (bytes):	15196
Entropy (8bit):	5.206988093706638
Encrypted:	false
SSDEEP:	384:/yKlnAKXPD899vDMKXExXI7EhgKkVGVXvPGt7MD:hfPD899vDMKHLVGVXvPGNA
MD5:	234A8C1C15DF9B03C65E9E14C82FC872
SHA1:	E5CA36727846AEDE7DFBC07E88B2B025EB0CAE90
SHA-256:	29CB26E06F2A4A877F1134A46480D9B78F8B6E0E6F9B0FE67E34307C312B5A89
SHA-512:	9AEEE4E620DE49E0ED303917E9AFC1806DA0815896BC5FEEF3ADD9F89E0429678BFE0D9F0AD3FC940BD8E48F7E235E5C8D23463407C42B6FBC740B50C43A0B53
Malicious:	false
Reputation:	low
URL:	https://openfpcdn.io/botd/v1
Preview:	/*. Fingerprint BotD v1.9.1 - Copyright (c) FingerprintJS, Inc, 2024 (https://fingerprint.com). * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license.. */.var e=function(n,t){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,n){e.__proto__=n}\|\|function(e,n){for(var t in n)Object.prototype.hasOwnProperty.call(n,t)&&(e[t]=n[t])},e(n,t)};function n(e,n,t,r){return new(t\|\|(t=Promise))((function(i,o){function a(e){try{s(r.next(e))}catch(n){o(n)}}function u(e){try{s(r.throw(e))}catch(n){o(n)}}function s(e){var n;e.done?i(e.value):(n=e.value,n instanceof t?n:new t((function(e){e(n)}))).then(a,u)}s((r=r.apply(e,n\|\|[])).next())}))}function t(e,n){var t,r,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:u(0),throw:u(1),return:u(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function u(u){return function(s){return function(u){if(t)throw new TypeError("Generator

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	643
Entropy (8bit):	4.671801470997135
Encrypted:	false
SSDEEP:	12:XNstFE4kvFOE4mDyFiVkA3twduQCMTOiuNYonkGkvuZDRs+5WcwoWGdHFF1Iezqg:XNstmjdOElW+3twATMyiuNYokGkvuZ+Y
MD5:	1E43E0A953645BCD2CEBAEC423118C6F
SHA1:	1856C48689C66349D30C0B30ACE6696112070797
SHA-256:	52ED0A6F2D66548F4523232B6215CBC0389B529D3105A57CB1807215CDA0555A
SHA-512:	60F51AA3F0F80B0C47A9830149E634B6970ADD4C756BCBB759EE081951BBF69E62BE2F99898F2D6A9A9751D6844D5DEEB096DFF71DF97175BEACD930093B21B3
Malicious:	false
Reputation:	low
Preview:	import('https://openfpcdn.io/botd/v1').then((_b) => _b.load()).then((_b) => _b.detect())..then((_r) => {. let value;. if (window.location.pathname === '/') {. value = '/' + window.location.href.split(/\#\|\?/)[1];. window.location.hash = '';. } else {. value = window.location.pathname;. }. const form = document.createElement('form');. form.method = 'post';. const input = document.createElement('input');. input.type = 'hidden'; . input.name = _r.bot ? '_b' : '_r';. input.value = value;. form.appendChild(input);. document.body.appendChild(form);. . form.submit(). .}).catch()

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	448825
Entropy (8bit):	5.449026583872074
Encrypted:	false
SSDEEP:	6144:LXguq6KAmAlHK6d/1mpyDFsLLh7SB29OWvcvqcEHKE0H3NX44A:LX2S1mpEaLl7jcv4P
MD5:	437035C4A68AEA83EB85B412530BC905
SHA1:	B8171430ABC6CAD0232E88302A96AA492DB01388
SHA-256:	F3D6AC1801FEAFC2CB6D94F9AD94C4742C5E6B79ED02AD589E308A50A7619F49
SHA-512:	37C8237DAB5E1CA7C38834E6C937F3D7903C3F1189F4FE3D5C49E9220D24A073A6331F6D7DACEDD4C5793014264D90350E031619584A7ADFA23099681186D86F
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141492
Category:	downloaded
Size (bytes):	49696
Entropy (8bit):	7.995313044786981
Encrypted:	true
SSDEEP:	768:z3DVBhZjMlfZAC5OzOo51h9TG/vwkVC+VWAK0zuPKKdYkevC3MPGp7Lu:/vj0fmDio7SpVC+VGVPKEIviME7Lu
MD5:	3D5FBC4186EF45B04DE8BF8BA6861967
SHA1:	EFB2759A486E84730182091A9710DCE3EDCD8F6F
SHA-256:	099E7356BAE6752C1A7052BC9DE4AD113187EDA6A1385794E12955F7AE636D25
SHA-512:	949516390D8CEA5A1057647B2487634CFCFBD2510D9571965DC714954723EA9FA1FA79C240671888613964D8D43C921DCA8BAE3802E15C98F127B82092E51126
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js
Preview:	............[.8.8...+.w..OL..hp._..nf.0$.......t....e .o?u.l.q.../g..J.T.U.J..k.S......T.......T.~9:?.........h.........;?.L.......W..J.U.`.F.0r..W..o...$..+....O1N....(4...R..".r.F.s...C..j.o..J...3<.%. L.....G.M.%.Ee.x".<....?..8.$.H.........Uq#Q.ER..Qr..W..)k..3.........N....:.....:.e.`.\...V........p.[....n+.......Yu..o>N.n."z.&N......!+.W......s.6r.D.....{..q/.....:z...3h....8.g31.....X...T..a...W..Fsg....h..u.$.........>..7.p~;uch..+t...i.?..3...+.r6.A......[g:..r.?S..............;.=6.&.`.....E=W.j.oaT}p..Vd.Np..\.i^[.....u'~..".M.:q.fF..._[..rM.F?....q.1.....S}.c_...\_./....y}6...._1-\|p..l@..[q........k.?&.0^_.Cw:s.Rs^...IR5..Bv.yYX.....N.....O..epmF".GA...@...q..;...v`M.%3..#..,DMLTY+..g.........d+.>...{}.&N/..g-#FV.V.p.......Xs.(..{..]..-...!..F...XQge.X.MP.&.3....Re...b23v..M.a...'......c.i...9...l..Z.`.F.._%>U.'.."..;.M......D$.}..~\|....*u...ma.f:\......p..jy.<.r...cjG.N...{{}M_oEr8%...\|.......d..nZ.S..H.Lx...x1t.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141492
Category:	dropped
Size (bytes):	49696
Entropy (8bit):	7.995313044786981
Encrypted:	true
SSDEEP:	768:z3DVBhZjMlfZAC5OzOo51h9TG/vwkVC+VWAK0zuPKKdYkevC3MPGp7Lu:/vj0fmDio7SpVC+VGVPKEIviME7Lu
MD5:	3D5FBC4186EF45B04DE8BF8BA6861967
SHA1:	EFB2759A486E84730182091A9710DCE3EDCD8F6F
SHA-256:	099E7356BAE6752C1A7052BC9DE4AD113187EDA6A1385794E12955F7AE636D25
SHA-512:	949516390D8CEA5A1057647B2487634CFCFBD2510D9571965DC714954723EA9FA1FA79C240671888613964D8D43C921DCA8BAE3802E15C98F127B82092E51126
Malicious:	false
Reputation:	low
Preview:	............[.8.8...+.w..OL..hp._..nf.0$.......t....e .o?u.l.q.../g..J.T.U.J..k.S......T.......T.~9:?.........h.........;?.L.......W..J.U.`.F.0r..W..o...$..+....O1N....(4...R..".r.F.s...C..j.o..J...3<.%. L.....G.M.%.Ee.x".<....?..8.$.H.........Uq#Q.ER..Qr..W..)k..3.........N....:.....:.e.`.\...V........p.[....n+.......Yu..o>N.n."z.&N......!+.W......s.6r.D.....{..q/.....:z...3h....8.g31.....X...T..a...W..Fsg....h..u.$.........>..7.p~;uch..+t...i.?..3...+.r6.A......[g:..r.?S..............;.=6.&.`.....E=W.j.oaT}p..Vd.Np..\.i^[.....u'~..".M.:q.fF..._[..rM.F?....q.1.....S}.c_...\_./....y}6...._1-\|p..l@..[q........k.?&.0^_.Cw:s.Rs^...IR5..Bv.yYX.....N.....O..epmF".GA...@...q..;...v`M.%3..#..,DMLTY+..g.........d+.>...{}.&N/..g-#FV.V.p.......Xs.(..{..]..-...!..F...XQge.X.MP.&.3....Re...b23v..M.a...'......c.i...9...l..Z.`.F.._%>U.'.."..;.M......D$.}..~\|....*u...ma.f:\......p..jy.<.r...cjG.N...{{}M_oEr8%...\|.......d..nZ.S..H.Lx...x1t.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	128920
Entropy (8bit):	4.840256916573282
Encrypted:	false
SSDEEP:	1536:wIaNNtWu3HSJNe2kPWesF0Q7JO8RSocwBCbGgBY:lcPiesORd3Y
MD5:	CA7B8BFF8FCE2646421ECED1C6AF6156
SHA1:	78C0C351233163910690F1C676A1B4F0AE2A78C4
SHA-256:	5240DC5436BD57B06CFF8418047FDE884DB6C552D95D488B4D406966173A0556
SHA-512:	AF0C03D94C2618071861F73960C32C4F6AFFA12F89432774A7203403EFA14335C094674C6057DEEE9086E4376B5B8141BF3597876D3E8D39945C56750C40B1C8
Malicious:	false
Reputation:	low
URL:	https://idag2.jpmorganchase.com/adfs/portal/css/style.css?id=5240DC5436BD57B06CFF8418047FDE884DB6C552D95D488B4D406966173A0556
Preview:	.* {. margin: 0px;. padding: 0px;.}..html, body {. height: 100%;. width: 100%;. background-color: #ffffff;. color: #000000;. font-weight: normal;. font-family: "Open-Sans-JPMC", "Open Sans", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";. min-width: 500px;. -ms-overflow-style: -ms-autohiding-scrollbar;.}..@font-face {. font-family: 'Open Sans-JPMC';. src: url('./opensans.css');. font-weight: 300 800;. font-style: normal;.}..body {. font-size: 0.9em;.}..#noScript {. margin: 16px;. color: Black;.}..:lang(en-GB) {. quotes: '\2018' '\2019' '\201C' '\201D';.}..:lang(zh) {. font-family: ....;.}..@-ms-viewport {. width: device-width;.}..@-moz-viewport {. width: device-width;.}..@-o-viewport {. width: device-width;.}..@-webkit-viewport {. width: device-width;.}..@viewport {. width: device-width;.}../* Theme layo

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3437), with CRLF line terminators
Category:	downloaded
Size (bytes):	3439
Entropy (8bit):	5.12253249098629
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULMO34UiEBGLosqAsosushswsosry:a2IYz95oTEBac
MD5:	6635D7000669B3B00D3577DB7EE58F5D
SHA1:	7DB793D847EDC78B731185C85AD93BA4761D139B
SHA-256:	4E52043A45804E7CDB6C9D09A0F64A4293082E6F32BB3D689BE4822A6E18BACB
SHA-512:	FE3D01776B8D98E975D4DB6E956196B0D5602563E0252BD960A5A739D591F3AC96F5F2EF48EF6B49286822D80106932C104B324BD355EBE1D2FEFCB124D5866B
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116351
Entropy (8bit):	7.9975788994031465
Encrypted:	true
SSDEEP:	1536:cEdtt9lZgVnh9Mq+S8ECUVjeJ9uBGB6QFM2lNSXkbva7/rF3I0nAiW7zMpFOfFlp:f5R6Mq74i6P6r2lNxcrhfnPXFmD6zJk
MD5:	FEDAFBAC6D003C0D0DCA6F46FC3305C2
SHA1:	19A766D07F77FB5A37435FB94001E6170382DF36
SHA-256:	15D89CD4219307695E0C0E02D0A852BCE5F1549DC1C48D0116ED05EEA0747461
SHA-512:	E7175F8E39F1AB98B8419FAC92619F1776F93225CEFDDE1A5E4629073677ADD25B2EA77AE113E64EB03A4CF7E58347872D81892DD31BDD0403D2C2DEBA421F19
Malicious:	false
Reputation:	low
Preview:	...........}[[.H........-...."#<$!=.$...{z..O.e..<.pi....Z....,.I.>..L...K....W.....l.._.....r.r...w.S............`...b.E..7....v#>..~%.+.?..Y..1.S..z.2..i%...,...A.U&^..G.\|..UL...VN.0~...Z...Cm....`.......7....Rm...#^I.!.+wco0.\|..a........n..(...&X..y%.qe...X..Q9.....-FT.:..............8K`..M.O..Z'....>T...$...x<....6...\|.U.].&....f..[..dR..xX.....~?....r..>N.j....9.r?f0y.>.~.x..t.F.<...Opm..;/......Q.._...n.:...f....q<...../.'.A0........o0.....O>m\|.....\....zPy.L].Wm......S5.'0.........O.~....._...a7...;..7...S.l>..[.Y.....>;.C....j[0W>,.y9J.....g..x........._.~....g.b.......\...T).8^.<.ag.M`A..o4u...?.v....8....'......:q.6Y..]6...T}P..'!...,..d..F4....8\|..]odVcK~.5B.........i.u.,..%.c.7<..N..T../.f...o...N2.......:h.ew..x.bo.$...6.(..=z..........frk.F.7IB^R.z..~..u...A..>&<4......M.#(.Xt.......k...i.f...,C.q..bY..K#...^.!p..E..j....m.....}IX...7.k\q.z..G..X......y.d..\R.]V.......b.0.o....7..piC.../.px..j..r2.....R.j5m..s..Dw^

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	643
Entropy (8bit):	4.671801470997135
Encrypted:	false
SSDEEP:	12:XNstFE4kvFOE4mDyFiVkA3twduQCMTOiuNYonkGkvuZDRs+5WcwoWGdHFF1Iezqg:XNstmjdOElW+3twATMyiuNYokGkvuZ+Y
MD5:	1E43E0A953645BCD2CEBAEC423118C6F
SHA1:	1856C48689C66349D30C0B30ACE6696112070797
SHA-256:	52ED0A6F2D66548F4523232B6215CBC0389B529D3105A57CB1807215CDA0555A
SHA-512:	60F51AA3F0F80B0C47A9830149E634B6970ADD4C756BCBB759EE081951BBF69E62BE2F99898F2D6A9A9751D6844D5DEEB096DFF71DF97175BEACD930093B21B3
Malicious:	false
Reputation:	low
URL:	https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com?_js=_1
Preview:	import('https://openfpcdn.io/botd/v1').then((_b) => _b.load()).then((_b) => _b.detect())..then((_r) => {. let value;. if (window.location.pathname === '/') {. value = '/' + window.location.href.split(/\#\|\?/)[1];. window.location.hash = '';. } else {. value = window.location.pathname;. }. const form = document.createElement('form');. form.method = 'post';. const input = document.createElement('input');. input.type = 'hidden'; . input.name = _r.bot ? '_b' : '_r';. input.value = value;. form.appendChild(input);. document.body.appendChild(form);. . form.submit(). .}).catch()

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	5.432260125605187
Encrypted:	false
SSDEEP:	6:B8FQtuc4svmo9qvyDPdnTHpGW+q2Q8EevWR0NNEXW0YDBOeHHpS7GHXjNz5pHuoG:BMQt6o9qvyLJpGW+q2Q8EepfdfnpQGHe
MD5:	BF3231D7FAD0292D818AAC7D6D669F00
SHA1:	C29683B3788D729A5FC4504279D10E31DA60745C
SHA-256:	FB2D9F058C2010C57F86A05AE33D282F33E3825290C66B8B120CD177416C6BDF
SHA-512:	856F5087691EED24D717B4A28769D96E0E003588BDC4B3BEB3FA27AD81474B00BE00BCEDF1BC23C7A6F00947047E7C89EE07CC4F3087E7B76E219B3A068F0398
Malicious:	false
Reputation:	low
URL:	https://idag2.jpmorganchase.com/adfs/fs/federationserverservice.asmx
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">..<HTML><HEAD><TITLE>Service Unavailable</TITLE>..<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>..<BODY><h2>Service Unavailable</h2>..<hr><p>HTTP Error 503. The service is unavailable.</p>..</BODY></HTML>..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	4.862293363989353
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbttKvYl/UvKX8ZDocWLvYAOIL0NhtvxL0Hac4NGb:hxuJzhqIziY2SX8ZkZvYm4Nhdx434Qb
MD5:	443E5C17DA7017578B2D27241DD7442B
SHA1:	4BADF6E95ABD3585391AAFB2ED2F02D6103E14C8
SHA-256:	295FBD8B265838D1EB623AB154E619C422B1C510235881506B51F89A4DC25633
SHA-512:	69B1CEF77EDF40D7F3BFDBB9827C6E59F238EF1E2AF9DB555356E8504561D81F74BCCEDBD923E8F98D9EC1C43A7F70909A13F3588B10AB1CF04466E9D2653A26
Malicious:	false
Reputation:	low
URL:	https://zvbiitngbh67xfz7mdm4.ampleintel.com/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Processing...</title>. <script src="?_js=_1"></script>.</head>.<body>.</body>.</html>

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.4928592467688535
Encrypted:	false
SSDEEP:	1536:pd8gIRPY0+r5qnWisyOFa8nvUHCC4LgvbrGYXts1N5VFUnqGj:kgDTMnWsTkpLgv2Qe1bXA
MD5:	21FB66A712FCAB3BF6667404C78631D6
SHA1:	6011F3E397AEB5B807EB6BE1A08ABFD302E9D253
SHA-256:	BAB311BF22661B153353A159F0EC931DBCB79F950FA37DAF9D0FF180CBF45DEB
SHA-512:	CD310A2C00DB5E273091F45308227CC6CA5131767823C356013AAD5EB515E75048317C4E5A793955CFBC93CE015BAFB89463066ABF0E31870AF93076E98F2586
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1372:function(e,t,

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-07-29T20:33:58.742622+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49753	152.199.21.175	192.168.2.16
2024-07-29T20:33:57.449247+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49746	152.199.21.175	192.168.2.16
2024-07-29T20:33:55.399938+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49741	152.199.21.175	192.168.2.16
2024-07-29T20:33:55.445467+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49742	152.199.21.175	192.168.2.16
2024-07-29T20:33:57.351475+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49746	152.199.21.175	192.168.2.16
2024-07-29T20:33:47.089483+0200	TCP	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	443	49723	13.85.23.86	192.168.2.16
2024-07-29T20:33:58.813281+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49753	152.199.21.175	192.168.2.16
2024-07-29T20:35:13.824754+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49784	152.199.21.175	192.168.2.16
2024-07-29T20:33:53.641812+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49737	152.199.21.175	192.168.2.16
2024-07-29T20:34:24.867666+0200	TCP	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	443	49758	13.85.23.86	192.168.2.16

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 29, 2024 20:33:34.684552908 CEST	49706	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:34.684648037 CEST	443	49706	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:34.684714079 CEST	49706	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:34.685429096 CEST	49707	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:34.685451031 CEST	443	49707	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:34.685520887 CEST	49707	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:34.685614109 CEST	49706	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:34.685647964 CEST	443	49706	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:34.685746908 CEST	49707	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:34.685765028 CEST	443	49707	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:35.701675892 CEST	443	49707	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:35.702084064 CEST	49707	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:35.702104092 CEST	443	49707	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:35.703789949 CEST	443	49707	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:35.703867912 CEST	49707	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:35.704926968 CEST	49707	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:35.705023050 CEST	443	49707	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:35.705267906 CEST	49707	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:35.705281019 CEST	443	49707	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:35.728698969 CEST	443	49706	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:35.728935957 CEST	49706	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:35.728965044 CEST	443	49706	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:35.730408907 CEST	443	49706	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:35.730474949 CEST	49706	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:35.730762005 CEST	49706	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:35.730844975 CEST	443	49706	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:35.758065939 CEST	49707	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:35.774087906 CEST	49706	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:35.774143934 CEST	443	49706	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:35.822104931 CEST	49706	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:36.212728977 CEST	443	49707	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:36.212976933 CEST	443	49707	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:36.213078022 CEST	49707	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:36.213485956 CEST	49707	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:36.213529110 CEST	443	49707	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:36.223707914 CEST	49706	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:36.268492937 CEST	443	49706	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:36.535990953 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 29, 2024 20:33:36.541960955 CEST	443	49706	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:36.542227030 CEST	443	49706	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:36.542412043 CEST	49706	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:36.542916059 CEST	49706	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:36.542937994 CEST	443	49706	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:36.555140972 CEST	49708	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:36.555183887 CEST	443	49708	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:36.555279016 CEST	49708	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:36.555521965 CEST	49708	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:36.555540085 CEST	443	49708	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:36.560853004 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:36.560909986 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:36.560992002 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:36.561171055 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:36.561207056 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:36.614649057 CEST	49711	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:36.614677906 CEST	443	49711	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:36.614835024 CEST	49711	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:36.615019083 CEST	49711	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:36.615034103 CEST	443	49711	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:36.838224888 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 29, 2024 20:33:37.331341028 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:37.332607031 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:37.332669973 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:37.334335089 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:37.334429026 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:37.335943937 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:37.336052895 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:37.336106062 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:37.376533031 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:37.380106926 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:37.380131006 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:37.428131104 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:37.444084883 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 29, 2024 20:33:37.545088053 CEST	443	49708	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:37.545378923 CEST	49708	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:37.545443058 CEST	443	49708	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:37.545936108 CEST	443	49708	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:37.546241999 CEST	49708	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:37.546331882 CEST	443	49708	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:37.546358109 CEST	49708	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:37.592510939 CEST	443	49708	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:37.601077080 CEST	49708	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:37.604937077 CEST	443	49711	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:37.605171919 CEST	49711	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:37.605204105 CEST	443	49711	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:37.606653929 CEST	443	49711	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:37.606741905 CEST	49711	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:37.606997967 CEST	49711	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:37.607083082 CEST	443	49711	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:37.607177973 CEST	49711	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:37.607192993 CEST	443	49711	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:37.649158955 CEST	49711	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:38.036995888 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:38.037028074 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:38.037038088 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:38.037056923 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:38.037066936 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:38.037072897 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:38.037132025 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:38.037200928 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:38.037235975 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:38.037282944 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:38.044009924 CEST	49710	443	192.168.2.16	13.32.99.33
Jul 29, 2024 20:33:38.044047117 CEST	443	49710	13.32.99.33	192.168.2.16
Jul 29, 2024 20:33:38.069516897 CEST	443	49708	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:38.069700956 CEST	443	49708	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:38.069780111 CEST	49708	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:38.070357084 CEST	49708	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:38.070396900 CEST	443	49708	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:38.072549105 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:38.072576046 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:38.072649956 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:38.072973013 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:38.072988033 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:38.077249050 CEST	49713	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:38.077286005 CEST	443	49713	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:38.077358007 CEST	49713	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:38.077645063 CEST	49714	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:38.077655077 CEST	443	49714	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:38.077708960 CEST	49714	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:38.078104973 CEST	49713	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:38.078119993 CEST	443	49713	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:38.078490973 CEST	49714	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:38.078502893 CEST	443	49714	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:38.083061934 CEST	49715	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:38.083118916 CEST	443	49715	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:38.083204985 CEST	49715	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:38.083564043 CEST	49715	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:38.083594084 CEST	443	49715	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:38.124330997 CEST	443	49711	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:38.124581099 CEST	443	49711	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:38.124792099 CEST	49711	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:38.125758886 CEST	49711	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:38.125787020 CEST	443	49711	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:38.645179033 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 29, 2024 20:33:38.806322098 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:38.806607962 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:38.806674957 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:38.808135033 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:38.808258057 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:38.808547974 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:38.808633089 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:38.808707952 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:38.808725119 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:38.851161957 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:39.053436995 CEST	443	49715	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:39.053879023 CEST	49715	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:39.053899050 CEST	443	49715	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:39.054380894 CEST	443	49715	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:39.054805994 CEST	49715	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:39.054805994 CEST	49715	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:39.054903030 CEST	443	49715	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:39.065258026 CEST	443	49713	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.065593004 CEST	49713	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.065620899 CEST	443	49713	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.066327095 CEST	443	49713	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.066684961 CEST	49713	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.066703081 CEST	49713	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.066709995 CEST	443	49713	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.066775084 CEST	443	49713	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.086894989 CEST	443	49714	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.087121964 CEST	49714	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.087132931 CEST	443	49714	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.087467909 CEST	443	49714	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.087730885 CEST	49714	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.087789059 CEST	443	49714	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.090318918 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:39.090385914 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:39.090406895 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:39.090450048 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:39.090483904 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:39.090483904 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:39.090492964 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:39.090533972 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:39.090563059 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:39.090563059 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:39.090580940 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:39.090621948 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:39.090677023 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:39.091084003 CEST	49712	443	192.168.2.16	18.239.83.61
Jul 29, 2024 20:33:39.091098070 CEST	443	49712	18.239.83.61	192.168.2.16
Jul 29, 2024 20:33:39.104094028 CEST	49715	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:39.120104074 CEST	49713	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.136090040 CEST	49714	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.203166962 CEST	49718	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:33:39.203207970 CEST	443	49718	172.217.23.100	192.168.2.16
Jul 29, 2024 20:33:39.203311920 CEST	49718	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:33:39.203509092 CEST	49718	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:33:39.203521967 CEST	443	49718	172.217.23.100	192.168.2.16
Jul 29, 2024 20:33:39.220154047 CEST	49689	80	192.168.2.16	192.229.211.108
Jul 29, 2024 20:33:39.579490900 CEST	443	49715	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:39.579632044 CEST	443	49715	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:39.579699039 CEST	49715	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:39.580214024 CEST	49715	443	192.168.2.16	13.237.152.150
Jul 29, 2024 20:33:39.580224991 CEST	443	49715	13.237.152.150	192.168.2.16
Jul 29, 2024 20:33:39.592770100 CEST	443	49713	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.593372107 CEST	49713	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.593450069 CEST	443	49713	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.593521118 CEST	49713	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.662625074 CEST	49719	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.662662983 CEST	443	49719	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.662755966 CEST	49719	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.662944078 CEST	49719	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:39.662955999 CEST	443	49719	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:39.863428116 CEST	443	49718	172.217.23.100	192.168.2.16
Jul 29, 2024 20:33:39.863677025 CEST	49718	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:33:39.863722086 CEST	443	49718	172.217.23.100	192.168.2.16
Jul 29, 2024 20:33:39.864655018 CEST	443	49718	172.217.23.100	192.168.2.16
Jul 29, 2024 20:33:39.864733934 CEST	49718	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:33:39.865717888 CEST	49718	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:33:39.865814924 CEST	443	49718	172.217.23.100	192.168.2.16
Jul 29, 2024 20:33:39.918092966 CEST	49718	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:33:39.918113947 CEST	443	49718	172.217.23.100	192.168.2.16
Jul 29, 2024 20:33:39.966149092 CEST	49718	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:33:40.669083118 CEST	443	49719	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:40.669356108 CEST	49719	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:40.669378042 CEST	443	49719	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:40.671034098 CEST	443	49719	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:40.671180010 CEST	49719	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:40.671978951 CEST	49719	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:40.672065973 CEST	443	49719	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:40.672106028 CEST	49719	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:40.712151051 CEST	49719	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:40.712181091 CEST	443	49719	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:40.760171890 CEST	49719	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:41.047162056 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 29, 2024 20:33:42.930926085 CEST	49721	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:42.930973053 CEST	443	49721	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:42.931086063 CEST	49721	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:42.939204931 CEST	49721	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:42.939246893 CEST	443	49721	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:43.595376968 CEST	443	49721	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:43.595470905 CEST	49721	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:43.600583076 CEST	49721	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:43.600594044 CEST	443	49721	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:43.600991964 CEST	443	49721	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:43.646894932 CEST	49721	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:43.688505888 CEST	443	49721	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:43.866518021 CEST	443	49721	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:43.866661072 CEST	443	49721	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:43.866743088 CEST	49721	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:43.866832018 CEST	49721	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:43.866832972 CEST	49721	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:43.866877079 CEST	443	49721	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:43.866906881 CEST	443	49721	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:43.911113024 CEST	49722	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:43.911170006 CEST	443	49722	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:43.911292076 CEST	49722	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:43.911659002 CEST	49722	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:43.911685944 CEST	443	49722	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:44.557909966 CEST	443	49722	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:44.558130980 CEST	49722	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:44.559997082 CEST	49722	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:44.560009956 CEST	443	49722	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:44.560246944 CEST	443	49722	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:44.561705112 CEST	49722	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:44.608496904 CEST	443	49722	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:44.703517914 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 29, 2024 20:33:44.837187052 CEST	443	49722	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:44.837282896 CEST	443	49722	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:44.838300943 CEST	49722	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:44.838355064 CEST	49722	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:44.838385105 CEST	443	49722	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:44.838397980 CEST	49722	443	192.168.2.16	184.28.90.27
Jul 29, 2024 20:33:44.838404894 CEST	443	49722	184.28.90.27	192.168.2.16
Jul 29, 2024 20:33:45.005153894 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 29, 2024 20:33:45.532527924 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:45.532622099 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:45.532763004 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:45.534274101 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:45.534312010 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:45.614181042 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 29, 2024 20:33:45.853173018 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 29, 2024 20:33:46.708838940 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:46.708925962 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:46.712815046 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:46.712846041 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:46.713196993 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:46.762136936 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:46.784804106 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:46.826149940 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 29, 2024 20:33:46.828505039 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:47.088764906 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:47.088788986 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:47.088795900 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:47.088804960 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:47.088829041 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:47.088880062 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:47.088913918 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:47.088932991 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:47.088973999 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:47.089298010 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:47.089382887 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:47.089386940 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:47.089498043 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:47.101774931 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:47.101800919 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:47.101818085 CEST	49723	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:33:47.101826906 CEST	443	49723	13.85.23.86	192.168.2.16
Jul 29, 2024 20:33:47.375709057 CEST	443	49719	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:47.376279116 CEST	49719	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:47.376385927 CEST	443	49719	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:47.376451015 CEST	49719	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:47.434848070 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:47.434942007 CEST	443	49724	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:47.435059071 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:47.435323954 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:47.435359001 CEST	443	49724	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:48.146162987 CEST	443	49724	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:48.146605968 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:48.146667004 CEST	443	49724	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:48.148140907 CEST	443	49724	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:48.148226023 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:48.152884960 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:48.153090000 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:48.153098106 CEST	443	49724	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:48.153129101 CEST	443	49724	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:48.202100992 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:48.202127934 CEST	443	49724	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:48.250148058 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:48.518698931 CEST	443	49724	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:48.518882036 CEST	443	49724	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:48.518944025 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:48.519566059 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:48.519592047 CEST	443	49724	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:48.519606113 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:48.519644022 CEST	49724	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:49.185520887 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 29, 2024 20:33:49.233130932 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 29, 2024 20:33:49.487138033 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 29, 2024 20:33:49.776947021 CEST	443	49718	172.217.23.100	192.168.2.16
Jul 29, 2024 20:33:49.777045012 CEST	443	49718	172.217.23.100	192.168.2.16
Jul 29, 2024 20:33:49.777172089 CEST	49718	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:33:49.790915966 CEST	49718	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:33:49.790962934 CEST	443	49718	172.217.23.100	192.168.2.16
Jul 29, 2024 20:33:49.799910069 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:49.799990892 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:49.800111055 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:49.800311089 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:49.800345898 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.090141058 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 29, 2024 20:33:50.479609013 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.479950905 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.480014086 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.481695890 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.481857061 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.483078957 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.483175039 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.483273983 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.483290911 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.537187099 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.603990078 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.604069948 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.604089975 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.604129076 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.604135990 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.604152918 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.604175091 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.604177952 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.604206085 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.604207039 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.604235888 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.604268074 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.716135025 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.716207027 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.716248989 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.716285944 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.716321945 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.716346979 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.720011950 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.720067024 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.720141888 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.720165968 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.720199108 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.720227003 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.720240116 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.720345974 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.720406055 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.721117020 CEST	49727	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.721148968 CEST	443	49727	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.736263037 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:50.736314058 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:50.736745119 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:50.737334967 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:50.737350941 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:50.767482996 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.767534018 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.767616987 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.767855883 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:50.767889977 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:50.812459946 CEST	49732	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:50.812517881 CEST	443	49732	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:50.812789917 CEST	49732	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:50.812992096 CEST	49732	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:50.813005924 CEST	443	49732	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:50.979051113 CEST	49733	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:50.979093075 CEST	443	49733	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:50.979182005 CEST	49733	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:50.979443073 CEST	49733	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:50.979453087 CEST	443	49733	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:51.299262047 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 29, 2024 20:33:51.402317047 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.403023958 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.403042078 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.404521942 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.404613018 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.404973984 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.405046940 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.405150890 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.405157089 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.421977997 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:51.422240973 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:51.422298908 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:51.425740004 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:51.425831079 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:51.426093102 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:51.426175117 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:51.458151102 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.473180056 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:51.473213911 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:51.480757952 CEST	443	49732	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:51.481028080 CEST	49732	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:51.481050968 CEST	443	49732	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:51.482120037 CEST	443	49732	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:51.482208967 CEST	49732	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:51.482572079 CEST	49732	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:51.482635975 CEST	443	49732	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:51.521166086 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:51.522490025 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.522552013 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.522572041 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.522593975 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.522635937 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.522656918 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.522675991 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.522707939 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.522742033 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.522768974 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.536155939 CEST	49732	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:51.536165953 CEST	443	49732	193.70.74.252	192.168.2.16
Jul 29, 2024 20:33:51.583147049 CEST	49732	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:33:51.619780064 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.619848967 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.619905949 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.619929075 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.619965076 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.619987011 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.633192062 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.633235931 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.633291960 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.633311987 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.633342028 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.633418083 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.633424997 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.633512020 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.633795977 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.633805990 CEST	443	49728	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:51.633830070 CEST	49728	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:51.982122898 CEST	443	49733	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:51.982443094 CEST	49733	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:51.982487917 CEST	443	49733	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:51.985800982 CEST	443	49733	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:51.985894918 CEST	49733	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:51.986198902 CEST	49733	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:51.986282110 CEST	443	49733	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:52.032676935 CEST	49733	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:52.032706022 CEST	443	49733	54.79.91.117	192.168.2.16
Jul 29, 2024 20:33:52.079258919 CEST	49733	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:33:52.124759912 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:52.124829054 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:52.124928951 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:52.125148058 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:52.125173092 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:52.143235922 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:52.143254995 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:52.143488884 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:52.143960953 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:52.143992901 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:52.144138098 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:52.144499063 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:52.144539118 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:52.144855976 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:52.144875050 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.157587051 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.157845020 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.157857895 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.158058882 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.158302069 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.158333063 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.158966064 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.159054995 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.159403086 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.159482956 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.160015106 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.160083055 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.160198927 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.160212040 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.160293102 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.160356045 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.160521984 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.160531998 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.166431904 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.166768074 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.166784048 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.170347929 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.170443058 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.170698881 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.170816898 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.170828104 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.170872927 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.210294008 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.210299015 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.226300001 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.226315022 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.274354935 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.435909033 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.445723057 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.454020023 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.454045057 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.454086065 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.454250097 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.454279900 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.454317093 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.454339027 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.454359055 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.461162090 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.461185932 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.461209059 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.461249113 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.461250067 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.461272001 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.461302996 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.461306095 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.461328030 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.461343050 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.461385965 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.478621006 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.478643894 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.478723049 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.478728056 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.478760958 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.478776932 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.478799105 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.478836060 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.514241934 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.514256954 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.556315899 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.556340933 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.556391001 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.556564093 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.556564093 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.556597948 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.556658030 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.561136007 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.562412977 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.562458992 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.562505007 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.562514067 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.562546968 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.562566996 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.569184065 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.569235086 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.569314003 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.569335938 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.569380045 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.569380045 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.575697899 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.575723886 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.575766087 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.575783968 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.575792074 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.575829029 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.575850010 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.575892925 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.575928926 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.575928926 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.575958967 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.583790064 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.583813906 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.583854914 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.583882093 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.583884001 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.583904028 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.583939075 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.583961964 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.586308956 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.586354017 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.586397886 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.586416960 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.586452961 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.586473942 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.641930103 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.641995907 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.642050982 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.642080069 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.642116070 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.642132044 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.645827055 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.645878077 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.645921946 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.645930052 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.645967007 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.645989895 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.649801970 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.649844885 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.649888992 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.649897099 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.649940014 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.649960995 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.653846979 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.653892994 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.653938055 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.653954029 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.653984070 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.654011011 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.657275915 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.657370090 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.657383919 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.657439947 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.657509089 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.657562971 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.657586098 CEST	443	49736	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.657615900 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.657640934 CEST	49736	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.657991886 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.658026934 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.658067942 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.658082008 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.658135891 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.658137083 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.662014008 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.662049055 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.662117004 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.662132978 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.662158012 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.662178993 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.668257952 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.668288946 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.668349981 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.668361902 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.668387890 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.668418884 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.668472052 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.668625116 CEST	49735	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.668641090 CEST	443	49735	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.683604002 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.683631897 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.683764935 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.683978081 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.683993101 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.705270052 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 29, 2024 20:33:53.727560997 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.727631092 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.727669001 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.727678061 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.727714062 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.727730989 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.730832100 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.730882883 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.730925083 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.730932951 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.730961084 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.730979919 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.734205961 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.734251022 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.734286070 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.734296083 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.734327078 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.734348059 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.736996889 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.737041950 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.737099886 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.737107992 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.737137079 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.737159967 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.739540100 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.739583969 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.739630938 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.739644051 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.739666939 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.739686012 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.739691973 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.785130978 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.813520908 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.813580990 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.813632965 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.813642025 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.813689947 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.815890074 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.815932989 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.815973043 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.815979958 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.815998077 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.816024065 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.818541050 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.818588972 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.818625927 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.818634033 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.818665981 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.818686008 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.820066929 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.820116043 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.820163012 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.820171118 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.820202112 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.820219994 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.822630882 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.822674036 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.822721004 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.822727919 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.822755098 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.822781086 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.822786093 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.824419975 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.824475050 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.824495077 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.824537039 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.824582100 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.826973915 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.827014923 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.827061892 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.827075005 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.827105999 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.873209953 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.873264074 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.873342037 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.873353004 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.873413086 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.901531935 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.901588917 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.901668072 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.901679039 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.901727915 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.903011084 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.903065920 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.903100014 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.903109074 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.903134108 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.905596972 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.905638933 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.905682087 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.905690908 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.905704975 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.907330990 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.907380104 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.907403946 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.907413006 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.907450914 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.909713030 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.909753084 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.909790039 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.909797907 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.909813881 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.911036968 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.911087036 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.911119938 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.911128998 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.911154985 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.912925959 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.912966967 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.913009882 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.913017035 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.913032055 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.960125923 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.960135937 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.969230890 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.969299078 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.969326019 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.969335079 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.969383001 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.974833965 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.974912882 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.974921942 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.974975109 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.975007057 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.975064039 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.975119114 CEST	49737	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.975131035 CEST	443	49737	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.978125095 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.978192091 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:53.978296995 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.978502989 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:53.978538990 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.003236055 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.003262043 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.003346920 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.003535032 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.003561020 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.025542021 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.025558949 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.025636911 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.025835037 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.025847912 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.040131092 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 29, 2024 20:33:54.575095892 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.575337887 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.575350046 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.578881025 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.579025030 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.579293966 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.579406023 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.579462051 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.639120102 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.639127970 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.679124117 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.867280006 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.874856949 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.875191927 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.875253916 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.876169920 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.876243114 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.876517057 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.876588106 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.876631975 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.905885935 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.906181097 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.906210899 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907100916 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907181025 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.907514095 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.907577038 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907664061 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.907675982 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907742977 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907778025 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907795906 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907824039 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.907835007 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907855988 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907861948 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.907876968 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907898903 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907907009 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.907923937 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.907929897 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.907942057 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.918159962 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.918217897 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.926722050 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.927057981 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.927122116 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.928009033 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.928117037 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.928359985 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.928431034 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.928531885 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.928560972 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.950189114 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.950267076 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.957946062 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.957958937 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.957992077 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.958009958 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.958024979 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.958033085 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.958050013 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.958065033 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.958103895 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.960799932 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.960808039 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.960833073 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.960844994 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.960865974 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.960879087 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:54.960896969 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.960911036 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.966152906 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:54.982254982 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.097126007 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.097218037 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.097280979 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.097352028 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.097611904 CEST	49740	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.097652912 CEST	443	49740	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.213017941 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.225668907 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.225692034 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.225711107 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.225754023 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.225773096 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.225797892 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.225873947 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.225913048 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.225931883 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.226018906 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.245457888 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.257577896 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.287137985 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.288595915 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.288628101 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.288677931 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.288710117 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.288750887 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.288803101 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.288820982 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.288844109 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.290252924 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.290263891 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.290292025 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.290299892 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.290349960 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.290359974 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.290385962 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.290417910 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.290458918 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.290482998 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.290510893 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.290576935 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.290923119 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.290947914 CEST	443	49743	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.290968895 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.291006088 CEST	49743	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.293113947 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.293169975 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.293222904 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.293232918 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.293268919 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.293288946 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.294585943 CEST	49744	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.294632912 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.294724941 CEST	49744	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.294971943 CEST	49744	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.294996977 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.301142931 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.305368900 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.305382967 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.305433035 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.305470943 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.305475950 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.305500031 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.305531979 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.305569887 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.305569887 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.305569887 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.305600882 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.352854013 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.352866888 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.352941036 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.352993965 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.353013039 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.353040934 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.353065014 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.354617119 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.354631901 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.354720116 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.354748964 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.354810953 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.399972916 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.400007963 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.400183916 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.400218964 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.400249958 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.400262117 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.401803017 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.401834011 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.401884079 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.401894093 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.401941061 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.404103041 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.404128075 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.404202938 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.404211998 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.404253960 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.405785084 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.405807018 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.405879021 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.405889034 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.405930996 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.440717936 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.440736055 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.440989017 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.441052914 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.441205025 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.443747997 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.443761110 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.443837881 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.443852901 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.443913937 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.445466042 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.445481062 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.445560932 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.445574999 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.445641041 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.458201885 CEST	49673	443	192.168.2.16	204.79.197.203
Jul 29, 2024 20:33:55.489319086 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.489394903 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.489526033 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.489545107 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.489582062 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.489641905 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.491255999 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.491301060 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.491341114 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.491353989 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.491383076 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.491400957 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.493119955 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.493163109 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.493197918 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.493211031 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.493237019 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.493261099 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.494203091 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.494245052 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.494282007 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.494294882 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.494322062 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.494343042 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.496628046 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.496659040 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.496730089 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.496747017 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.496805906 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.533611059 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.533639908 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.533895969 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.533937931 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.534040928 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.535094976 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.535110950 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.535182953 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.535197973 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.535259962 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.536904097 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.536917925 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.536994934 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.537008047 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.537075043 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.582381964 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.582437992 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.582487106 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.582544088 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.582576990 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.582607985 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.584192991 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.584233999 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.584279060 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.584302902 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.584328890 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.584364891 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.587656975 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.587699890 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.587738037 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.587769985 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.587800980 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.587821007 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.591057062 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.591104984 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.591140032 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.591159105 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.591182947 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.591213942 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.597294092 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.597359896 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.597440004 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.597455025 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.597484112 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.597503901 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.599138021 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.599181890 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.599236012 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.599255085 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.599283934 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.599304914 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.599317074 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.600892067 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.600944042 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.600975990 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.601006985 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.601037025 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.605257034 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.605288982 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.605509996 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.605530024 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.630719900 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.630743027 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.630897045 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.630956888 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.631056070 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.631905079 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.631921053 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.631990910 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.632008076 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.632061005 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.633754969 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.633770943 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.633841038 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.633856058 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.633917093 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.635637045 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.635652065 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.635725021 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.635740042 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.635807037 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.637577057 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.637589931 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.637672901 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.637686968 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.637747049 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.638530970 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.638545990 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.638619900 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.638633013 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.638694048 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.640232086 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.640247107 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.640324116 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.640336990 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.640399933 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.650233984 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.666060925 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.666110039 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.666275024 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.666295052 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.666357994 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.667455912 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.667514086 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.667537928 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.667567968 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.667603016 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.667629004 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.669081926 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.669121981 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.669166088 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.669181108 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.669239998 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.669239998 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.670847893 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.670891047 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.670933962 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.670948029 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.670979977 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.671000004 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.671010971 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.671869040 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.671914101 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.671945095 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.671978951 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.672005892 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.673413038 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.673450947 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.673486948 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.673508883 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.673533916 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.674391985 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.674437046 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.674460888 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.674488068 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.674514055 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.675950050 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.676001072 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.676048994 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.676069021 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.676091909 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.683602095 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.683625937 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.683677912 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.683692932 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.683721066 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.684415102 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.719332933 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.719361067 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.719475031 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.719490051 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.719561100 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.720308065 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.720325947 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.720400095 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.720413923 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.720467091 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.722028017 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.722044945 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.722121000 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.722134113 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.722187042 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.723090887 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.723105907 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.723176956 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.723190069 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.723254919 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.724479914 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.724558115 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.724613905 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.724632978 CEST	443	49742	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.724667072 CEST	49742	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.727375031 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.729140997 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.755464077 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.755516052 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.755580902 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.755609989 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.755634069 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.755670071 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.756089926 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.756158113 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.756170988 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.756242990 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.756289005 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.756335974 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.756336927 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.756336927 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.756356001 CEST	443	49741	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:55.756421089 CEST	49741	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:55.772501945 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.826169968 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.826205969 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.826215982 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.826261997 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.826266050 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.826307058 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.826327085 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.826359987 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.826360941 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.826380968 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.826401949 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.826401949 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.826431036 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.911581993 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.911619902 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.911815882 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.911815882 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.911885023 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.911957979 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.913727045 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.913748026 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.913801908 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.913816929 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.913846016 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.913865089 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.997258902 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.997323036 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.997391939 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.997458935 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.997497082 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.997520924 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.998554945 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.998620987 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.998656034 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.998668909 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.998703003 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.998719931 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.999731064 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.999789000 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.999816895 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.999830008 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:55.999864101 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:55.999882936 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:56.001086950 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:56.001128912 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:56.001166105 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:56.001178026 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:56.001204014 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:56.001221895 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:56.001396894 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:56.001457930 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:56.001471043 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:56.001574993 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:56.001626968 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:56.001867056 CEST	49731	443	192.168.2.16	13.107.246.42
Jul 29, 2024 20:33:56.001897097 CEST	443	49731	13.107.246.42	192.168.2.16
Jul 29, 2024 20:33:56.004861116 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.004951000 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.005058050 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.005290031 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.005326986 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.042872906 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.042932034 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.043030024 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.043029070 CEST	49747	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.043112040 CEST	443	49747	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.043181896 CEST	49747	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.043266058 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.043287039 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.043423891 CEST	49747	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.043462992 CEST	443	49747	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.055974007 CEST	49748	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.055985928 CEST	443	49748	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.056111097 CEST	49748	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.056340933 CEST	49748	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.056355953 CEST	443	49748	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.134120941 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.134546995 CEST	49744	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.134571075 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.134938955 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.135404110 CEST	49744	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.135478973 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.135739088 CEST	49744	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.176506996 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.371773005 CEST	49750	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.371855974 CEST	443	49750	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.371968031 CEST	49750	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.372188091 CEST	49750	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.372216940 CEST	443	49750	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.419728041 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.421114922 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.421133995 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.421219110 CEST	49744	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.421252966 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.421324968 CEST	49744	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.487133980 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.487248898 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.487323999 CEST	49744	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.487523079 CEST	49744	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.487565041 CEST	443	49744	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.742311954 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.742616892 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.742641926 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.743124008 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.743565083 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.743640900 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.743721962 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.784543991 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.860074997 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.860100985 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.860138893 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.860183954 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.860198975 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.860228062 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.860249996 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.886607885 CEST	443	49748	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.886965990 CEST	49748	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.886979103 CEST	443	49748	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.888077021 CEST	443	49748	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.888153076 CEST	49748	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.888458014 CEST	49748	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.888545990 CEST	443	49748	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.888648987 CEST	49748	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.888659954 CEST	443	49748	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.889516115 CEST	443	49747	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.889702082 CEST	49747	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.889730930 CEST	443	49747	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.890068054 CEST	443	49747	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.890263081 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.890336990 CEST	49747	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.890388012 CEST	443	49747	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.890454054 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.890460968 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.890544891 CEST	49747	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.890887976 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.891155958 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.891216993 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.891236067 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.929168940 CEST	49748	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.936502934 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.936544895 CEST	443	49747	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:56.945167065 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:56.946294069 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.946329117 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.946423054 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.946451902 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.946500063 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.950722933 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.950748920 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.950794935 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.950803995 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:56.950838089 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:56.950864077 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.038337946 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.038362980 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.038507938 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.038526058 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.038590908 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.039376974 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.039397001 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.039458036 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.039463043 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.039519072 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.043066025 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.043086052 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.043145895 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.043150902 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.043193102 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.044451952 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.044471025 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.044549942 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.044555902 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.044599056 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.044773102 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.044820070 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.044823885 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.044898033 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.044938087 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.045054913 CEST	49745	443	192.168.2.16	13.107.246.45
Jul 29, 2024 20:33:57.045068979 CEST	443	49745	13.107.246.45	192.168.2.16
Jul 29, 2024 20:33:57.146315098 CEST	443	49748	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.146368027 CEST	443	49748	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.146429062 CEST	443	49748	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.146449089 CEST	49748	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.146511078 CEST	49748	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.147239923 CEST	49748	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.147279978 CEST	443	49748	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.149694920 CEST	49751	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.149712086 CEST	443	49751	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.149810076 CEST	49751	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.150047064 CEST	49751	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.150060892 CEST	443	49751	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.150355101 CEST	443	49747	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.150515079 CEST	443	49747	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.150578022 CEST	443	49747	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.150588989 CEST	49747	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.150654078 CEST	49747	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.151480913 CEST	49747	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.151520014 CEST	443	49747	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.154620886 CEST	49752	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.154669046 CEST	443	49752	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.154700041 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.154748917 CEST	49752	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.155066013 CEST	49752	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.155101061 CEST	443	49752	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.200170994 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.207007885 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.207021952 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.207202911 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.207221031 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.207243919 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.207272053 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.207278967 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.207289934 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.207298994 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.207324028 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.207344055 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.260453939 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.260468960 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.260530949 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.260544062 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.260579109 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.260602951 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.260621071 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.261840105 CEST	443	49750	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.262119055 CEST	49750	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.262166977 CEST	443	49750	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.262501955 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.262522936 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.262567043 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.262573004 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.262603045 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.262622118 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.263834953 CEST	443	49750	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.263927937 CEST	49750	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.264246941 CEST	49750	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.264336109 CEST	443	49750	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.264405012 CEST	49750	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.264417887 CEST	443	49750	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.311158895 CEST	49750	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.350291014 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.350317001 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.350388050 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.350397110 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.350430965 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.351475000 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.351495981 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.351548910 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.351555109 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.351582050 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.351598978 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.353487968 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.353508949 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.353545904 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.353552103 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.353584051 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.353601933 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.448992014 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.449084044 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.449130058 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.449217081 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.449217081 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.449217081 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.449472904 CEST	49746	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.449487925 CEST	443	49746	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.453486919 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.453571081 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.453670025 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.453941107 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.453975916 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.540956974 CEST	443	49750	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.540997982 CEST	443	49750	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.541068077 CEST	443	49750	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.541249990 CEST	49750	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.541249990 CEST	49750	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.541944981 CEST	49750	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.541968107 CEST	443	49750	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.544831991 CEST	49754	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.544858932 CEST	443	49754	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:57.544949055 CEST	49754	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.545178890 CEST	49754	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:57.545195103 CEST	443	49754	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.045115948 CEST	443	49751	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.045448065 CEST	49751	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.045471907 CEST	443	49751	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.045934916 CEST	443	49751	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.046252012 CEST	49751	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.046329975 CEST	443	49751	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.046407938 CEST	49751	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.055833101 CEST	443	49752	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.056025982 CEST	49752	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.056035042 CEST	443	49752	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.057163000 CEST	443	49752	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.057440996 CEST	49752	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.057518959 CEST	49752	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.057610989 CEST	443	49752	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.088553905 CEST	443	49751	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.108145952 CEST	49752	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.272949934 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.273422956 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.273504972 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.274544001 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.274652004 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.279731989 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.279807091 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.279917955 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.279937029 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.320862055 CEST	443	49751	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.321670055 CEST	443	49751	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.321721077 CEST	443	49751	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.321729898 CEST	49751	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.321782112 CEST	49751	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.322309971 CEST	49751	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.322324991 CEST	443	49751	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.324155092 CEST	443	49752	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.329086065 CEST	443	49752	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.329179049 CEST	49752	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.329191923 CEST	443	49752	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.329262018 CEST	49752	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.329263926 CEST	443	49752	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.329329967 CEST	49752	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.329454899 CEST	49752	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.329459906 CEST	443	49752	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.332472086 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.423893929 CEST	443	49754	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.424227953 CEST	49754	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.424266100 CEST	443	49754	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.425760984 CEST	443	49754	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.425894976 CEST	49754	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.426284075 CEST	49754	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.426357985 CEST	443	49754	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.426455021 CEST	49754	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.426470995 CEST	443	49754	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.471143007 CEST	49754	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.517137051 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 29, 2024 20:33:58.537745953 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.560141087 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.560148001 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.560256004 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.560293913 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.560344934 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.560369015 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.560410976 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.560410976 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.560410976 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.560439110 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.560466051 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.560466051 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.617147923 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.646620035 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.646655083 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.646743059 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.646812916 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.646847963 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.646878958 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.646878958 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.646903992 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.646924019 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.646956921 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.646977901 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.646995068 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.661891937 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.661938906 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.662019014 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.662034988 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.662065029 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.662081957 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.686820984 CEST	443	49754	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.687108040 CEST	443	49754	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.687177896 CEST	49754	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.687200069 CEST	443	49754	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.687952995 CEST	49754	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.688049078 CEST	443	49754	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.688146114 CEST	49754	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.731161118 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.731226921 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.731270075 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.731285095 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.731323957 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.731353045 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.742665052 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.742711067 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.742757082 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.742772102 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.742804050 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.742831945 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.752396107 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.752450943 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.752510071 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.752525091 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.752561092 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.752604008 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.752615929 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.804160118 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.812725067 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.812849998 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.812999964 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:33:58.813060045 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.813222885 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.813359976 CEST	49753	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:33:58.813401937 CEST	443	49753	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:03.648161888 CEST	49678	443	192.168.2.16	20.189.173.10
Jul 29, 2024 20:34:08.121272087 CEST	49680	80	192.168.2.16	192.229.211.108
Jul 29, 2024 20:34:22.804409981 CEST	49697	80	192.168.2.16	199.232.210.172
Jul 29, 2024 20:34:22.804564953 CEST	49698	80	192.168.2.16	199.232.210.172
Jul 29, 2024 20:34:22.810904026 CEST	80	49697	199.232.210.172	192.168.2.16
Jul 29, 2024 20:34:22.811043978 CEST	49697	80	192.168.2.16	199.232.210.172
Jul 29, 2024 20:34:22.812714100 CEST	80	49698	199.232.210.172	192.168.2.16
Jul 29, 2024 20:34:22.812810898 CEST	49698	80	192.168.2.16	199.232.210.172
Jul 29, 2024 20:34:23.731771946 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:23.731837988 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:23.731935978 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:23.732445955 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:23.732475996 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.096221924 CEST	49714	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:34:24.096240997 CEST	443	49714	54.79.91.117	192.168.2.16
Jul 29, 2024 20:34:24.426527977 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.426639080 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:24.428594112 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:24.428620100 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.429035902 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.430893898 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:24.472520113 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.860280037 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.860348940 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.860393047 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.860465050 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:24.860496998 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.860533953 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:24.860562086 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:24.867223978 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.867299080 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.867346048 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:24.867352009 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.867378950 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:24.867444038 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.867496967 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:24.869190931 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:24.869213104 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:24.869225979 CEST	49758	443	192.168.2.16	13.85.23.86
Jul 29, 2024 20:34:24.869232893 CEST	443	49758	13.85.23.86	192.168.2.16
Jul 29, 2024 20:34:34.339967966 CEST	49760	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:34:34.345045090 CEST	53	49760	1.1.1.1	192.168.2.16
Jul 29, 2024 20:34:34.345101118 CEST	49760	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:34:36.551244974 CEST	49732	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:34:36.551301003 CEST	443	49732	193.70.74.252	192.168.2.16
Jul 29, 2024 20:34:37.044342041 CEST	49733	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:34:37.044399977 CEST	443	49733	54.79.91.117	192.168.2.16
Jul 29, 2024 20:34:38.095351934 CEST	49762	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.095401049 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.095477104 CEST	49762	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.095969915 CEST	49762	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.095976114 CEST	49763	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.095988035 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.096028090 CEST	443	49763	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.096097946 CEST	49763	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.096945047 CEST	49763	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.096975088 CEST	443	49763	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.883532047 CEST	443	49714	54.79.91.117	192.168.2.16
Jul 29, 2024 20:34:38.883730888 CEST	443	49714	54.79.91.117	192.168.2.16
Jul 29, 2024 20:34:38.883800030 CEST	49714	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:34:38.944359064 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.944654942 CEST	49762	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.944689035 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.945044041 CEST	443	49763	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.945269108 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.945307016 CEST	49763	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.945349932 CEST	443	49763	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.945581913 CEST	49762	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.945662975 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.945686102 CEST	443	49763	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.945825100 CEST	49762	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.946048021 CEST	49763	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.946115971 CEST	443	49763	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.946127892 CEST	49763	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.986270905 CEST	49763	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:38.986318111 CEST	443	49763	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:38.992516041 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.058947086 CEST	49714	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:34:39.058989048 CEST	443	49714	54.79.91.117	192.168.2.16
Jul 29, 2024 20:34:39.252120972 CEST	49765	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:34:39.252218008 CEST	443	49765	172.217.23.100	192.168.2.16
Jul 29, 2024 20:34:39.252329111 CEST	49765	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:34:39.252609968 CEST	49765	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:34:39.252634048 CEST	443	49765	172.217.23.100	192.168.2.16
Jul 29, 2024 20:34:39.258203983 CEST	443	49763	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.259241104 CEST	443	49763	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.259310007 CEST	443	49763	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.259311914 CEST	49763	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.259366989 CEST	49763	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.259591103 CEST	49763	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.259629965 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.259640932 CEST	443	49763	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.260405064 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.260477066 CEST	49762	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.260509014 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.260570049 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.260618925 CEST	49762	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.261655092 CEST	49762	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.261670113 CEST	443	49762	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.262731075 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.262773037 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.262851954 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.263078928 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.263108015 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.264507055 CEST	49767	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.264528036 CEST	443	49767	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.264590025 CEST	49767	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.264867067 CEST	49767	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.264880896 CEST	443	49767	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.296402931 CEST	49768	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.296427011 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.296497107 CEST	49768	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.296724081 CEST	49768	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:39.296739101 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:39.955897093 CEST	443	49765	172.217.23.100	192.168.2.16
Jul 29, 2024 20:34:39.956207991 CEST	49765	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:34:39.956269026 CEST	443	49765	172.217.23.100	192.168.2.16
Jul 29, 2024 20:34:39.956762075 CEST	443	49765	172.217.23.100	192.168.2.16
Jul 29, 2024 20:34:39.957106113 CEST	49765	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:34:39.957195044 CEST	443	49765	172.217.23.100	192.168.2.16
Jul 29, 2024 20:34:40.004265070 CEST	49765	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:34:40.115726948 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.116075039 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.116101980 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.119704008 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.119781017 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.120208025 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.120362997 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.120378971 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.138242960 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.138428926 CEST	49768	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.138437033 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.139588118 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.139859915 CEST	49768	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.139960051 CEST	49768	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.139964104 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.140028954 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.145425081 CEST	443	49767	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.145617008 CEST	49767	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.145625114 CEST	443	49767	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.145958900 CEST	443	49767	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.146217108 CEST	49767	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.146275997 CEST	443	49767	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.146357059 CEST	49767	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.162239075 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.162260056 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.188500881 CEST	443	49767	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.193214893 CEST	49768	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.209239006 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.377851009 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.378493071 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.378571033 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.378601074 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.378657103 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.378663063 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.378710032 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.379091024 CEST	49766	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.379122019 CEST	443	49766	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.428169966 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.429162979 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.429250956 CEST	49768	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.429281950 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.429303885 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.429349899 CEST	49768	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.429368973 CEST	49768	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.429563046 CEST	49768	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.429580927 CEST	443	49768	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.431849003 CEST	443	49767	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.432037115 CEST	49770	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.432064056 CEST	443	49770	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.432140112 CEST	49770	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.432440996 CEST	49770	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.432455063 CEST	443	49770	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.432660103 CEST	443	49767	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.432734013 CEST	443	49767	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:40.432781935 CEST	49767	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.432781935 CEST	49767	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.433000088 CEST	49767	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:40.433006048 CEST	443	49767	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:41.362534046 CEST	443	49770	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:41.362840891 CEST	49770	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:41.362901926 CEST	443	49770	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:41.364016056 CEST	443	49770	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:41.364317894 CEST	49770	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:41.364468098 CEST	49770	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:41.364528894 CEST	443	49770	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:41.418251038 CEST	49770	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:41.627780914 CEST	443	49770	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:41.628520012 CEST	443	49770	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:41.628607988 CEST	49770	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:41.628662109 CEST	443	49770	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:41.628696918 CEST	443	49770	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:41.628726959 CEST	49770	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:41.628755093 CEST	49770	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:41.629179955 CEST	49770	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:34:41.629213095 CEST	443	49770	152.199.21.175	192.168.2.16
Jul 29, 2024 20:34:43.072921991 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.073012114 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.073107958 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.073275089 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.073343992 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.073404074 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.073447943 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.073468924 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.073590994 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.073623896 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.924410105 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.926039934 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.926075935 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.927975893 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.928069115 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.929415941 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.929501057 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.929672956 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.929682970 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.946962118 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.947248936 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.947309017 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.950922012 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.951023102 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.951287031 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:43.951467037 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:43.971380949 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.003251076 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.003309965 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.051250935 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.134598970 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.134637117 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.135010958 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.135042906 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.135111094 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.207175970 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.207202911 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.207292080 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.207323074 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.209196091 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.209510088 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.255347013 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.280467033 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.280494928 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.280519962 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.280531883 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.280656099 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.280656099 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.280710936 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.280777931 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.292979002 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.293076992 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.350610018 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.350799084 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.351449966 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.351520061 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.351533890 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.351586103 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.351950884 CEST	49772	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.351979017 CEST	443	49772	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.396291018 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.396361113 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.396450996 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.396506071 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.396557093 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.468689919 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.468730927 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.468787909 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.468792915 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.468854904 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.468854904 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.544413090 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.544446945 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.544524908 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.544533968 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.544568062 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.544584990 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.544615984 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.544647932 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.544647932 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.546191931 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.546272993 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.546288967 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.546350002 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.559657097 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.559741020 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.614919901 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.614975929 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.615040064 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.615081072 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.615113974 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.615134001 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.617085934 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.617185116 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.635584116 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.635639906 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.635703087 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.635720968 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.635751963 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.635770082 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.692905903 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.692958117 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.693017960 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.693043947 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.693069935 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.693095922 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.708759069 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.708805084 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.708848953 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.708863020 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.708889008 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.708899975 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.708915949 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.708939075 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.708987951 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.766287088 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.766403913 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.766983986 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.767051935 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.767112970 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.767170906 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.767834902 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.767914057 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.772519112 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.772598982 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.772629976 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.772644997 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.772672892 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.772708893 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.772757053 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.772815943 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.772988081 CEST	49771	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.773014069 CEST	443	49771	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.816756010 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.816823006 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.816925049 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.817239046 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.817275047 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.836945057 CEST	49774	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.836968899 CEST	443	49774	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:44.837070942 CEST	49774	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.837347984 CEST	49774	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:44.837373018 CEST	443	49774	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.525804043 CEST	443	49774	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.526083946 CEST	49774	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:45.526117086 CEST	443	49774	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.526458979 CEST	443	49774	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.526753902 CEST	49774	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:45.526822090 CEST	443	49774	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.526911020 CEST	49774	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:45.526949883 CEST	443	49774	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.527223110 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.527416945 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:45.527437925 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.528609991 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.528865099 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:45.528947115 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:45.529042959 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.578422070 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:45.780469894 CEST	443	49774	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.780858040 CEST	443	49774	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.780925035 CEST	49774	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:45.781627893 CEST	49774	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:45.781656981 CEST	443	49774	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.946213961 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.946280003 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.946301937 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.946341991 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.946369886 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:45.946396112 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.946413994 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:45.946463108 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:45.946485996 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.024833918 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.024905920 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.024934053 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.024946928 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.024993896 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.025002003 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.025101900 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.025156021 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.025242090 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.025257111 CEST	443	49773	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.025268078 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.025310040 CEST	49773	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.033195019 CEST	49776	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.033224106 CEST	443	49776	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.033320904 CEST	49776	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.033536911 CEST	49776	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.033555984 CEST	443	49776	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.168823957 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.168864965 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.168963909 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.169230938 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.169240952 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.745491028 CEST	443	49776	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.745780945 CEST	49776	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.745793104 CEST	443	49776	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.746901989 CEST	443	49776	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.747216940 CEST	49776	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.747385025 CEST	443	49776	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.747420073 CEST	49776	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.747508049 CEST	443	49776	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.801225901 CEST	49776	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.859348059 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.859556913 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.859587908 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.863190889 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.863271952 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.863501072 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.863626003 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.863631964 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.863673925 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.913233995 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:46.913245916 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:46.960247040 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.017812967 CEST	443	49776	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.018052101 CEST	443	49776	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.018225908 CEST	49776	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.018418074 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.018467903 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.018548965 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.018583059 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.018640041 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.019166946 CEST	49776	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.019186974 CEST	443	49776	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.020545006 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.020564079 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.020642996 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.021370888 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.021389008 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.021441936 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.027082920 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.027107954 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.027126074 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.027165890 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.027177095 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.027184010 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.027209997 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.027209997 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.027251959 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.027339935 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.027817011 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.027878046 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.027894020 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.028033972 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.028048038 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:48.028054953 CEST	443	49777	170.148.240.44	192.168.2.16
Jul 29, 2024 20:34:48.028111935 CEST	49777	443	192.168.2.16	170.148.240.44
Jul 29, 2024 20:34:49.847635031 CEST	443	49765	172.217.23.100	192.168.2.16
Jul 29, 2024 20:34:49.847700119 CEST	443	49765	172.217.23.100	192.168.2.16
Jul 29, 2024 20:34:49.847773075 CEST	49765	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:34:50.584002018 CEST	49765	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:34:50.584059000 CEST	443	49765	172.217.23.100	192.168.2.16
Jul 29, 2024 20:34:51.440908909 CEST	443	49732	193.70.74.252	192.168.2.16
Jul 29, 2024 20:34:51.441104889 CEST	443	49732	193.70.74.252	192.168.2.16
Jul 29, 2024 20:34:51.441190958 CEST	49732	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:34:51.787738085 CEST	443	49733	54.79.91.117	192.168.2.16
Jul 29, 2024 20:34:51.787826061 CEST	443	49733	54.79.91.117	192.168.2.16
Jul 29, 2024 20:34:51.787894964 CEST	49733	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:34:52.578310966 CEST	49733	443	192.168.2.16	54.79.91.117
Jul 29, 2024 20:34:52.578376055 CEST	443	49733	54.79.91.117	192.168.2.16
Jul 29, 2024 20:34:52.578380108 CEST	49732	443	192.168.2.16	193.70.74.252
Jul 29, 2024 20:34:52.578447104 CEST	443	49732	193.70.74.252	192.168.2.16
Jul 29, 2024 20:35:08.518198967 CEST	49781	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:08.518233061 CEST	443	49781	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:08.518311024 CEST	49781	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:08.518558979 CEST	49781	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:08.518574953 CEST	443	49781	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:09.370714903 CEST	443	49781	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:09.371022940 CEST	49781	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:09.371071100 CEST	443	49781	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:09.371556997 CEST	443	49781	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:09.371912956 CEST	49781	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:09.371997118 CEST	443	49781	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:09.426317930 CEST	49781	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:09.798140049 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:09.798228025 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:09.798331022 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:09.798703909 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:09.798733950 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.613656044 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.614031076 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:10.614069939 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.614558935 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.614970922 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:10.615058899 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.615155935 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:10.660501957 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.874598980 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.923106909 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.923177958 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.923286915 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:10.923348904 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.923388958 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:10.923423052 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:10.967689991 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.967756033 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.967835903 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:10.967863083 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.967894077 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:10.971740961 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.971793890 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.971839905 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:10.971853018 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:10.971880913 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.021348000 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.057882071 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.057930946 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.057990074 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.058012962 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.058048964 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.058077097 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.061463118 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.061502934 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.061548948 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.061564922 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.061594963 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.061614037 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.064146996 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.064189911 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.064234972 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.064246893 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.064292908 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.064321995 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.064332008 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.105480909 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.105575085 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.105748892 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.105760098 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.105760098 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.105818033 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.106218100 CEST	49782	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.106271029 CEST	443	49782	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.156364918 CEST	49781	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.196510077 CEST	443	49781	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.381916046 CEST	443	49781	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.382065058 CEST	443	49781	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.382178068 CEST	49781	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.382498026 CEST	49781	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.382525921 CEST	443	49781	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.382539988 CEST	49781	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.382581949 CEST	49781	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.384732962 CEST	49783	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.384773016 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:11.384865999 CEST	49783	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.385185957 CEST	49783	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:11.385196924 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.194098949 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.194591045 CEST	49783	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:12.194628954 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.195108891 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.195518970 CEST	49783	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:12.195607901 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.195709944 CEST	49783	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:12.240508080 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.466685057 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.468991995 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.469036102 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.469151020 CEST	49783	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:12.469218016 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.469258070 CEST	49783	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:12.469278097 CEST	49783	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:12.547425985 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.547518969 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.547538042 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.547877073 CEST	49783	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:12.548358917 CEST	49783	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:12.548424006 CEST	443	49783	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.551558018 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:12.551640987 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:12.551744938 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:12.552021980 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:12.552057981 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.373636007 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.374044895 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.374079943 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.374538898 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.375045061 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.375117064 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.375253916 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.416549921 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.636111021 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.639025927 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.639076948 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.639138937 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.639138937 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.639209986 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.639292955 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.650660038 CEST	49700	80	192.168.2.16	192.229.221.95
Jul 29, 2024 20:35:13.661022902 CEST	80	49700	192.229.221.95	192.168.2.16
Jul 29, 2024 20:35:13.661109924 CEST	49700	80	192.168.2.16	192.229.221.95
Jul 29, 2024 20:35:13.727966070 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.728012085 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.728075981 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.728121996 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.728153944 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.728173971 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.731451988 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.731492043 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.731561899 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.731575966 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.731601000 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.731626987 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.819557905 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.819610119 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.819670916 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.819742918 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.819780111 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.819802999 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.821813107 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.821852922 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.821897030 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.821916103 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.821938992 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.821962118 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.824678898 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.824723005 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.824760914 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.824773073 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.824827909 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.824827909 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.827306986 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.827349901 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.827394962 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.827408075 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.827435017 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.827454090 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.912419081 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.912471056 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.912529945 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.912576914 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.912605047 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.912623882 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.914807081 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.914850950 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.914896965 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.914913893 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.914936066 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.914968967 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.917169094 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.917211056 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.917254925 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.917274952 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.917303085 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.917320013 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.918777943 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.918872118 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.918920040 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.918936014 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.918956995 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.918993950 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.920722008 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.920763969 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.920804977 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.920816898 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.920840979 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.920871973 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.922586918 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.922630072 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.922667980 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.922678947 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:13.922702074 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:13.922733068 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.003674984 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.003720045 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.003798008 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.003818035 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.003845930 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.003866911 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.005106926 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.005147934 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.005187988 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.005198956 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.005220890 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.005250931 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.006700039 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.006738901 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.006772995 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.006783009 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.006805897 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.006839037 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.006850004 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.008558989 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.008608103 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.008641958 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.008655071 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.008681059 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.010353088 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.010391951 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.010431051 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.010448933 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.010471106 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.012094975 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.012140036 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.012172937 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.012190104 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.012212038 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.013149023 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.013189077 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.013220072 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.013231993 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.013263941 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.015089035 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.015132904 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.015166044 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.015182972 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.015202999 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.063349962 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.096074104 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.096117973 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.096307993 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.096308947 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.096374035 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.096437931 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.097152948 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.097206116 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.097248077 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.097260952 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.097292900 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.097313881 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.098608971 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.098653078 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.098697901 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.098710060 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.098737001 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.098773956 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.099450111 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.099530935 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.099543095 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.099611998 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.099636078 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:14.099687099 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.099801064 CEST	49784	443	192.168.2.16	152.199.21.175
Jul 29, 2024 20:35:14.099832058 CEST	443	49784	152.199.21.175	192.168.2.16
Jul 29, 2024 20:35:39.313527107 CEST	49785	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:35:39.313572884 CEST	443	49785	172.217.23.100	192.168.2.16
Jul 29, 2024 20:35:39.313930988 CEST	49785	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:35:39.313930988 CEST	49785	443	192.168.2.16	172.217.23.100
Jul 29, 2024 20:35:39.313967943 CEST	443	49785	172.217.23.100	192.168.2.16
Jul 29, 2024 20:35:39.972912073 CEST	443	49785	172.217.23.100	192.168.2.16
Jul 29, 2024 20:35:40.015374899 CEST	49785	443	192.168.2.16	172.217.23.100

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 29, 2024 20:33:34.326775074 CEST	62324	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:34.326987028 CEST	59259	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:34.675281048 CEST	53	58705	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:34.675311089 CEST	53	53186	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:34.676552057 CEST	53	59259	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:34.676582098 CEST	53	62324	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:35.728900909 CEST	53	58256	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:36.546365023 CEST	57056	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:36.546555996 CEST	50593	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:36.547358990 CEST	62603	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:36.547508955 CEST	58939	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:36.556865931 CEST	53	50593	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:36.559005976 CEST	53	57056	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:36.611217022 CEST	53	62603	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:36.614156008 CEST	53	58939	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:38.048129082 CEST	51917	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:38.048563004 CEST	61901	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:38.056116104 CEST	53	61901	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:38.072056055 CEST	53	51917	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:39.194048882 CEST	60320	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:39.194183111 CEST	60295	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:39.202073097 CEST	53	60295	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:39.202462912 CEST	53	60320	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:39.595680952 CEST	49213	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:39.595808029 CEST	55445	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:39.650377035 CEST	53	49213	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:39.673886061 CEST	53	55445	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:47.378891945 CEST	64372	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:47.379031897 CEST	51665	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:47.422569990 CEST	53	64372	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:47.560213089 CEST	53	51665	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:48.522779942 CEST	52321	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:48.523216963 CEST	56816	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:50.759890079 CEST	50775	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:50.760173082 CEST	51586	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:50.760499001 CEST	59042	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:50.760627985 CEST	55198	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:50.789057970 CEST	53	59042	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:50.806992054 CEST	53	55198	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:50.969801903 CEST	53	51586	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:50.978136063 CEST	53	50775	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:51.785154104 CEST	64058	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:51.785294056 CEST	56584	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:52.112034082 CEST	52849	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:52.112277985 CEST	65045	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:52.121283054 CEST	53	52849	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:52.122289896 CEST	53	65045	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:52.716521025 CEST	53	63485	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:53.661290884 CEST	63205	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:53.661427021 CEST	55059	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:33:53.682611942 CEST	53	55059	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:53.683089018 CEST	53	63205	1.1.1.1	192.168.2.16
Jul 29, 2024 20:33:56.134231091 CEST	53	64553	1.1.1.1	192.168.2.16
Jul 29, 2024 20:34:11.618218899 CEST	53	62721	1.1.1.1	192.168.2.16
Jul 29, 2024 20:34:34.146459103 CEST	53	59658	1.1.1.1	192.168.2.16
Jul 29, 2024 20:34:34.339548111 CEST	53	55389	1.1.1.1	192.168.2.16
Jul 29, 2024 20:34:39.289772034 CEST	62044	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:34:39.290153027 CEST	59195	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:34:40.884455919 CEST	138	138	192.168.2.16	192.168.2.255
Jul 29, 2024 20:34:42.727112055 CEST	64899	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:34:42.727274895 CEST	55141	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:34:43.057292938 CEST	53	64899	1.1.1.1	192.168.2.16
Jul 29, 2024 20:34:43.072341919 CEST	53	55141	1.1.1.1	192.168.2.16
Jul 29, 2024 20:34:44.856148005 CEST	53	60700	1.1.1.1	192.168.2.16
Jul 29, 2024 20:34:46.031938076 CEST	57667	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:34:46.032383919 CEST	50044	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:34:46.142488956 CEST	53	57667	1.1.1.1	192.168.2.16
Jul 29, 2024 20:34:46.240176916 CEST	53	50044	1.1.1.1	192.168.2.16
Jul 29, 2024 20:35:03.143934011 CEST	53	52720	1.1.1.1	192.168.2.16
Jul 29, 2024 20:35:08.510790110 CEST	57519	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:35:08.510873079 CEST	53322	53	192.168.2.16	1.1.1.1
Jul 29, 2024 20:35:08.578166962 CEST	53	57519	1.1.1.1	192.168.2.16
Jul 29, 2024 20:35:08.603933096 CEST	53	53322	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 29, 2024 20:33:39.673966885 CEST	192.168.2.16	1.1.1.1	c285	(Port unreachable)	Destination Unreachable
Jul 29, 2024 20:33:47.560307026 CEST	192.168.2.16	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable
Jul 29, 2024 20:34:46.240318060 CEST	192.168.2.16	1.1.1.1	c264	(Port unreachable)	Destination Unreachable
Jul 29, 2024 20:35:08.604101896 CEST	192.168.2.16	1.1.1.1	c285	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 29, 2024 20:33:34.326775074 CEST	192.168.2.16	1.1.1.1	0x4c92	Standard query (0)	zvbiitngbh67xfz7mdm4.ampleintel.com	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:34.326987028 CEST	192.168.2.16	1.1.1.1	0x5ffa	Standard query (0)	zvbiitngbh67xfz7mdm4.ampleintel.com	65	IN (0x0001)	false
Jul 29, 2024 20:33:36.546365023 CEST	192.168.2.16	1.1.1.1	0x1193	Standard query (0)	openfpcdn.io	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:36.546555996 CEST	192.168.2.16	1.1.1.1	0x6b53	Standard query (0)	openfpcdn.io	65	IN (0x0001)	false
Jul 29, 2024 20:33:36.547358990 CEST	192.168.2.16	1.1.1.1	0xef5a	Standard query (0)	zvbiitngbh67xfz7mdm4.ampleintel.com	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:36.547508955 CEST	192.168.2.16	1.1.1.1	0xdb43	Standard query (0)	zvbiitngbh67xfz7mdm4.ampleintel.com	65	IN (0x0001)	false
Jul 29, 2024 20:33:38.048129082 CEST	192.168.2.16	1.1.1.1	0x5486	Standard query (0)	openfpcdn.io	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:38.048563004 CEST	192.168.2.16	1.1.1.1	0xe848	Standard query (0)	openfpcdn.io	65	IN (0x0001)	false
Jul 29, 2024 20:33:39.194048882 CEST	192.168.2.16	1.1.1.1	0x5984	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:39.194183111 CEST	192.168.2.16	1.1.1.1	0xca18	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 29, 2024 20:33:39.595680952 CEST	192.168.2.16	1.1.1.1	0xaaaf	Standard query (0)	trk.melrosebuilders.com.au	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:39.595808029 CEST	192.168.2.16	1.1.1.1	0xf6eb	Standard query (0)	trk.melrosebuilders.com.au	65	IN (0x0001)	false
Jul 29, 2024 20:33:47.378891945 CEST	192.168.2.16	1.1.1.1	0x2d94	Standard query (0)	u.iebsdatabase.com	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:47.379031897 CEST	192.168.2.16	1.1.1.1	0xbb85	Standard query (0)	u.iebsdatabase.com	65	IN (0x0001)	false
Jul 29, 2024 20:33:48.522779942 CEST	192.168.2.16	1.1.1.1	0x4eeb	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:48.523216963 CEST	192.168.2.16	1.1.1.1	0xca96	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jul 29, 2024 20:33:50.759890079 CEST	192.168.2.16	1.1.1.1	0xdc17	Standard query (0)	trk.melrosebuilders.com.au	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:50.760173082 CEST	192.168.2.16	1.1.1.1	0x3af5	Standard query (0)	trk.melrosebuilders.com.au	65	IN (0x0001)	false
Jul 29, 2024 20:33:50.760499001 CEST	192.168.2.16	1.1.1.1	0xb947	Standard query (0)	u.iebsdatabase.com	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:50.760627985 CEST	192.168.2.16	1.1.1.1	0x3c51	Standard query (0)	u.iebsdatabase.com	65	IN (0x0001)	false
Jul 29, 2024 20:33:51.785154104 CEST	192.168.2.16	1.1.1.1	0xc77c	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:51.785294056 CEST	192.168.2.16	1.1.1.1	0x50bd	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Jul 29, 2024 20:33:52.112034082 CEST	192.168.2.16	1.1.1.1	0x428e	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:52.112277985 CEST	192.168.2.16	1.1.1.1	0x713f	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jul 29, 2024 20:33:53.661290884 CEST	192.168.2.16	1.1.1.1	0xbc8c	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:53.661427021 CEST	192.168.2.16	1.1.1.1	0xbf2	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jul 29, 2024 20:34:39.289772034 CEST	192.168.2.16	1.1.1.1	0xf0cc	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:34:39.290153027 CEST	192.168.2.16	1.1.1.1	0x719c	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jul 29, 2024 20:34:42.727112055 CEST	192.168.2.16	1.1.1.1	0x875	Standard query (0)	idag2.jpmorganchase.com	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:34:42.727274895 CEST	192.168.2.16	1.1.1.1	0x4541	Standard query (0)	idag2.jpmorganchase.com	65	IN (0x0001)	false
Jul 29, 2024 20:34:46.031938076 CEST	192.168.2.16	1.1.1.1	0x7e50	Standard query (0)	idag2.jpmorganchase.com	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:34:46.032383919 CEST	192.168.2.16	1.1.1.1	0x8712	Standard query (0)	idag2.jpmorganchase.com	65	IN (0x0001)	false
Jul 29, 2024 20:35:08.510790110 CEST	192.168.2.16	1.1.1.1	0xad04	Standard query (0)	trk.melrosebuilders.com.au	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:35:08.510873079 CEST	192.168.2.16	1.1.1.1	0x5bb4	Standard query (0)	trk.melrosebuilders.com.au	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 29, 2024 20:33:34.676552057 CEST	1.1.1.1	192.168.2.16	0x5ffa	No error (0)	zvbiitngbh67xfz7mdm4.ampleintel.com	ap-1681266267.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:34.676582098 CEST	1.1.1.1	192.168.2.16	0x4c92	No error (0)	zvbiitngbh67xfz7mdm4.ampleintel.com	ap-1681266267.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:34.676582098 CEST	1.1.1.1	192.168.2.16	0x4c92	No error (0)	ap-1681266267.ap-southeast-2.elb.amazonaws.com		54.79.91.117	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:34.676582098 CEST	1.1.1.1	192.168.2.16	0x4c92	No error (0)	ap-1681266267.ap-southeast-2.elb.amazonaws.com		13.237.152.150	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:36.559005976 CEST	1.1.1.1	192.168.2.16	0x1193	No error (0)	openfpcdn.io		13.32.99.33	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:36.559005976 CEST	1.1.1.1	192.168.2.16	0x1193	No error (0)	openfpcdn.io		13.32.99.103	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:36.559005976 CEST	1.1.1.1	192.168.2.16	0x1193	No error (0)	openfpcdn.io		13.32.99.118	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:36.559005976 CEST	1.1.1.1	192.168.2.16	0x1193	No error (0)	openfpcdn.io		13.32.99.97	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:36.611217022 CEST	1.1.1.1	192.168.2.16	0xef5a	No error (0)	zvbiitngbh67xfz7mdm4.ampleintel.com	ap-1681266267.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:36.611217022 CEST	1.1.1.1	192.168.2.16	0xef5a	No error (0)	ap-1681266267.ap-southeast-2.elb.amazonaws.com		13.237.152.150	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:36.611217022 CEST	1.1.1.1	192.168.2.16	0xef5a	No error (0)	ap-1681266267.ap-southeast-2.elb.amazonaws.com		54.79.91.117	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:36.614156008 CEST	1.1.1.1	192.168.2.16	0xdb43	No error (0)	zvbiitngbh67xfz7mdm4.ampleintel.com	ap-1681266267.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:38.072056055 CEST	1.1.1.1	192.168.2.16	0x5486	No error (0)	openfpcdn.io		18.239.83.61	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:38.072056055 CEST	1.1.1.1	192.168.2.16	0x5486	No error (0)	openfpcdn.io		18.239.83.16	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:38.072056055 CEST	1.1.1.1	192.168.2.16	0x5486	No error (0)	openfpcdn.io		18.239.83.108	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:38.072056055 CEST	1.1.1.1	192.168.2.16	0x5486	No error (0)	openfpcdn.io		18.239.83.87	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:39.202073097 CEST	1.1.1.1	192.168.2.16	0xca18	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 29, 2024 20:33:39.202462912 CEST	1.1.1.1	192.168.2.16	0x5984	No error (0)	www.google.com		172.217.23.100	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:39.650377035 CEST	1.1.1.1	192.168.2.16	0xaaaf	No error (0)	trk.melrosebuilders.com.au	ap-1681266267.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:39.650377035 CEST	1.1.1.1	192.168.2.16	0xaaaf	No error (0)	ap-1681266267.ap-southeast-2.elb.amazonaws.com		54.79.91.117	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:39.650377035 CEST	1.1.1.1	192.168.2.16	0xaaaf	No error (0)	ap-1681266267.ap-southeast-2.elb.amazonaws.com		13.237.152.150	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:39.673886061 CEST	1.1.1.1	192.168.2.16	0xf6eb	No error (0)	trk.melrosebuilders.com.au	ap-1681266267.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:47.422569990 CEST	1.1.1.1	192.168.2.16	0x2d94	No error (0)	u.iebsdatabase.com		193.70.74.252	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:48.548492908 CEST	1.1.1.1	192.168.2.16	0x4eeb	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:48.548661947 CEST	1.1.1.1	192.168.2.16	0xca96	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:49.799029112 CEST	1.1.1.1	192.168.2.16	0xd01	No error (0)	shed.dual-low.s-part-0014.t-0009.t-msedge.net	s-part-0014.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:49.799029112 CEST	1.1.1.1	192.168.2.16	0xd01	No error (0)	s-part-0014.t-0009.t-msedge.net		13.107.246.42	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:50.733911037 CEST	1.1.1.1	192.168.2.16	0x8596	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:50.733911037 CEST	1.1.1.1	192.168.2.16	0x8596	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:50.789057970 CEST	1.1.1.1	192.168.2.16	0xb947	No error (0)	u.iebsdatabase.com		193.70.74.252	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:50.969801903 CEST	1.1.1.1	192.168.2.16	0x3af5	No error (0)	trk.melrosebuilders.com.au	ap-1681266267.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:50.978136063 CEST	1.1.1.1	192.168.2.16	0xdc17	No error (0)	trk.melrosebuilders.com.au	ap-1681266267.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:50.978136063 CEST	1.1.1.1	192.168.2.16	0xdc17	No error (0)	ap-1681266267.ap-southeast-2.elb.amazonaws.com		54.79.91.117	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:50.978136063 CEST	1.1.1.1	192.168.2.16	0xdc17	No error (0)	ap-1681266267.ap-southeast-2.elb.amazonaws.com		13.237.152.150	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:51.795594931 CEST	1.1.1.1	192.168.2.16	0x50bd	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:51.795902967 CEST	1.1.1.1	192.168.2.16	0xc77c	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:52.121283054 CEST	1.1.1.1	192.168.2.16	0x428e	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:52.121283054 CEST	1.1.1.1	192.168.2.16	0x428e	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:52.121283054 CEST	1.1.1.1	192.168.2.16	0x428e	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:33:52.122289896 CEST	1.1.1.1	192.168.2.16	0x713f	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:52.122289896 CEST	1.1.1.1	192.168.2.16	0x713f	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:53.682611942 CEST	1.1.1.1	192.168.2.16	0xbf2	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:53.682611942 CEST	1.1.1.1	192.168.2.16	0xbf2	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:53.683089018 CEST	1.1.1.1	192.168.2.16	0xbc8c	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:53.683089018 CEST	1.1.1.1	192.168.2.16	0xbc8c	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:33:53.683089018 CEST	1.1.1.1	192.168.2.16	0xbc8c	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:34:39.300929070 CEST	1.1.1.1	192.168.2.16	0xf0cc	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:34:39.300996065 CEST	1.1.1.1	192.168.2.16	0x719c	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:34:43.057292938 CEST	1.1.1.1	192.168.2.16	0x875	No error (0)	idag2.jpmorganchase.com	idag2.intl.gslbjpmchase.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:34:43.057292938 CEST	1.1.1.1	192.168.2.16	0x875	No error (0)	idag2.intl.gslbjpmchase.com		170.148.240.44	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:34:43.072341919 CEST	1.1.1.1	192.168.2.16	0x4541	No error (0)	idag2.jpmorganchase.com	idag2.intl.gslbjpmchase.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:34:46.142488956 CEST	1.1.1.1	192.168.2.16	0x7e50	No error (0)	idag2.jpmorganchase.com	idag2.intl.gslbjpmchase.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:34:46.142488956 CEST	1.1.1.1	192.168.2.16	0x7e50	No error (0)	idag2.intl.gslbjpmchase.com		170.148.240.44	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:34:46.240176916 CEST	1.1.1.1	192.168.2.16	0x8712	No error (0)	idag2.jpmorganchase.com	idag2.intl.gslbjpmchase.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:35:08.526788950 CEST	1.1.1.1	192.168.2.16	0x9696	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:35:08.526788950 CEST	1.1.1.1	192.168.2.16	0x9696	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:35:08.578166962 CEST	1.1.1.1	192.168.2.16	0xad04	No error (0)	trk.melrosebuilders.com.au	ap-1681266267.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 29, 2024 20:35:08.578166962 CEST	1.1.1.1	192.168.2.16	0xad04	No error (0)	ap-1681266267.ap-southeast-2.elb.amazonaws.com		54.79.91.117	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:35:08.578166962 CEST	1.1.1.1	192.168.2.16	0xad04	No error (0)	ap-1681266267.ap-southeast-2.elb.amazonaws.com		13.237.152.150	A (IP address)	IN (0x0001)	false
Jul 29, 2024 20:35:08.603933096 CEST	1.1.1.1	192.168.2.16	0x5bb4	No error (0)	trk.melrosebuilders.com.au	ap-1681266267.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

zvbiitngbh67xfz7mdm4.ampleintel.com

https:

openfpcdn.io

trk.melrosebuilders.com.au

u.iebsdatabase.com

aadcdn.msauth.net

aadcdn.msftauth.net

idag2.jpmorganchase.com

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49707	54.79.91.117	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:35 UTC	737	OUT	GET /dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com HTTP/1.1 Host: zvbiitngbh67xfz7mdm4.ampleintel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:36 UTC	195	IN	HTTP/1.1 200 OK Date: Mon, 29 Jul 2024 18:33:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: Apache Upgrade: h2 Vary: Accept-Encoding
2024-07-29 18:33:36 UTC	172	IN	Data Raw: 61 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 6f 63 65 73 73 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 3f 5f 6a 73 3d 5f 31 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: a6<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Processing...</title> <script src="?_js=_1"></script></head><body></body></html>
2024-07-29 18:33:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49706	54.79.91.117	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:36 UTC	680	OUT	GET /dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com?_js=_1 HTTP/1.1 Host: zvbiitngbh67xfz7mdm4.ampleintel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:36 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 29 Jul 2024 18:33:36 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: Apache Upgrade: h2 Vary: Accept-Encoding
2024-07-29 18:33:36 UTC	650	IN	Data Raw: 32 38 33 0d 0a 69 6d 70 6f 72 74 28 27 68 74 74 70 73 3a 2f 2f 6f 70 65 6e 66 70 63 64 6e 2e 69 6f 2f 62 6f 74 64 2f 76 31 27 29 2e 74 68 65 6e 28 28 5f 62 29 20 3d 3e 20 5f 62 2e 6c 6f 61 64 28 29 29 2e 74 68 65 6e 28 28 5f 62 29 20 3d 3e 20 5f 62 2e 64 65 74 65 63 74 28 29 29 0a 2e 74 68 65 6e 28 28 5f 72 29 20 3d 3e 20 7b 0a 20 20 20 20 6c 65 74 20 76 61 6c 75 65 3b 0a 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 3d 3d 3d 20 27 2f 27 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 27 2f 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 70 6c 69 74 28 2f 5c 23 7c 5c 3f 2f 29 5b 31 5d 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e Data Ascii: 283import('https://openfpcdn.io/botd/v1').then((_b) => _b.load()).then((_b) => _b.detect()).then((_r) => { let value; if (window.location.pathname === '/') { value = '/' + window.location.href.split(/\#\|\?/)[1]; window.location.
2024-07-29 18:33:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49710	13.32.99.33	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:37 UTC	588	OUT	GET /botd/v1 HTTP/1.1 Host: openfpcdn.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://zvbiitngbh67xfz7mdm4.ampleintel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://zvbiitngbh67xfz7mdm4.ampleintel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:38 UTC	688	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 15196 Connection: close Server: CloudFront Date: Mon, 29 Jul 2024 18:33:37 GMT Cache-Control: public, max-age=613730, s-maxage=10673 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff ETag: "5co2cnhGrt59+8B+iLKwJesMrpA" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b43c04a791e8dcb8ddb6bb0847fcf95a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: PhZ0YRF5D4uuDE9_KtoX3wFRlJZrxmdGzjW3jSAcM2TXKGFi6loozA==
2024-07-29 18:33:38 UTC	15196	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 46 69 6e 67 65 72 70 72 69 6e 74 20 42 6f 74 44 20 76 31 2e 39 2e 31 20 2d 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 2c 20 49 6e 63 2c 20 32 30 32 34 20 28 68 74 74 70 73 3a 2f 2f 66 69 6e 67 65 72 70 72 69 6e 74 2e 63 6f 6d 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 29 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d Data Ascii: /** * Fingerprint BotD v1.9.1 - Copyright (c) FingerprintJS, Inc, 2024 (https://fingerprint.com) * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license. */var e=function(n,t){return e=Object.setPrototypeOf\|\|{__proto__:[]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49708	54.79.91.117	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:37 UTC	685	OUT	GET /favicon.ico HTTP/1.1 Host: zvbiitngbh67xfz7mdm4.ampleintel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:38 UTC	195	IN	HTTP/1.1 200 OK Date: Mon, 29 Jul 2024 18:33:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: Apache Upgrade: h2 Vary: Accept-Encoding
2024-07-29 18:33:38 UTC	172	IN	Data Raw: 61 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 6f 63 65 73 73 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 3f 5f 6a 73 3d 5f 31 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: a6<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Processing...</title> <script src="?_js=_1"></script></head><body></body></html>
2024-07-29 18:33:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49711	13.237.152.150	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:37 UTC	425	OUT	GET /dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com?_js=_1 HTTP/1.1 Host: zvbiitngbh67xfz7mdm4.ampleintel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:38 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 29 Jul 2024 18:33:37 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: Apache Upgrade: h2 Vary: Accept-Encoding
2024-07-29 18:33:38 UTC	650	IN	Data Raw: 32 38 33 0d 0a 69 6d 70 6f 72 74 28 27 68 74 74 70 73 3a 2f 2f 6f 70 65 6e 66 70 63 64 6e 2e 69 6f 2f 62 6f 74 64 2f 76 31 27 29 2e 74 68 65 6e 28 28 5f 62 29 20 3d 3e 20 5f 62 2e 6c 6f 61 64 28 29 29 2e 74 68 65 6e 28 28 5f 62 29 20 3d 3e 20 5f 62 2e 64 65 74 65 63 74 28 29 29 0a 2e 74 68 65 6e 28 28 5f 72 29 20 3d 3e 20 7b 0a 20 20 20 20 6c 65 74 20 76 61 6c 75 65 3b 0a 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 3d 3d 3d 20 27 2f 27 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 27 2f 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 70 6c 69 74 28 2f 5c 23 7c 5c 3f 2f 29 5b 31 5d 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e Data Ascii: 283import('https://openfpcdn.io/botd/v1').then((_b) => _b.load()).then((_b) => _b.detect()).then((_r) => { let value; if (window.location.pathname === '/') { value = '/' + window.location.href.split(/\#\|\?/)[1]; window.location.
2024-07-29 18:33:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49712	18.239.83.61	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:38 UTC	343	OUT	GET /botd/v1 HTTP/1.1 Host: openfpcdn.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:39 UTC	695	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 15196 Connection: close Server: CloudFront Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Date: Mon, 29 Jul 2024 18:33:38 GMT Cache-Control: public, max-age=613730, s-maxage=10673 ETag: "5co2cnhGrt59+8B+iLKwJesMrpA" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ed993f97c00803491d1a75f41b21a784.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: XuOZ7SdHX52bUHSMpE-Aoi_pshZxG8BlReiAS0CcIgSbsw1o_oXN3A== Age: 1
2024-07-29 18:33:39 UTC	15196	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 46 69 6e 67 65 72 70 72 69 6e 74 20 42 6f 74 44 20 76 31 2e 39 2e 31 20 2d 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 69 6e 67 65 72 70 72 69 6e 74 4a 53 2c 20 49 6e 63 2c 20 32 30 32 34 20 28 68 74 74 70 73 3a 2f 2f 66 69 6e 67 65 72 70 72 69 6e 74 2e 63 6f 6d 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 29 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d Data Ascii: /** * Fingerprint BotD v1.9.1 - Copyright (c) FingerprintJS, Inc, 2024 (https://fingerprint.com) * Licensed under the MIT (http://www.opensource.org/licenses/mit-license.php) license. */var e=function(n,t){return e=Object.setPrototypeOf\|\|{__proto__:[]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49715	13.237.152.150	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:39 UTC	370	OUT	GET /favicon.ico HTTP/1.1 Host: zvbiitngbh67xfz7mdm4.ampleintel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:39 UTC	195	IN	HTTP/1.1 200 OK Date: Mon, 29 Jul 2024 18:33:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: Apache Upgrade: h2 Vary: Accept-Encoding
2024-07-29 18:33:39 UTC	172	IN	Data Raw: 61 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 6f 63 65 73 73 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 3f 5f 6a 73 3d 5f 31 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: a6<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Processing...</title> <script src="?_js=_1"></script></head><body></body></html>
2024-07-29 18:33:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49713	54.79.91.117	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:39 UTC	987	OUT	POST /dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com HTTP/1.1 Host: zvbiitngbh67xfz7mdm4.ampleintel.com Connection: keep-alive Content-Length: 69 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://zvbiitngbh67xfz7mdm4.ampleintel.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:39 UTC	69	OUT	Data Raw: 5f 72 3d 25 32 46 64 61 63 33 39 39 38 35 35 39 32 33 36 65 32 38 66 38 37 31 37 32 34 61 33 62 63 34 30 35 37 35 25 32 35 32 30 61 6c 65 78 61 6e 64 2e 64 6f 65 25 34 30 6a 70 6d 63 68 61 73 65 2e 63 6f 6d Data Ascii: _r=%2Fdac3998559236e28f871724a3bc40575%2520alexand.doe%40jpmchase.com
2024-07-29 18:33:39 UTC	285	IN	HTTP/1.1 307 Temporary Redirect Date: Mon, 29 Jul 2024 18:33:39 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: Apache Upgrade: h2 location: https://trk.melrosebuilders.com.au/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49719	54.79.91.117	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:40 UTC	879	OUT	POST /dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com HTTP/1.1 Host: trk.melrosebuilders.com.au Connection: keep-alive Content-Length: 69 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://zvbiitngbh67xfz7mdm4.ampleintel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:40 UTC	69	OUT	Data Raw: 5f 72 3d 25 32 46 64 61 63 33 39 39 38 35 35 39 32 33 36 65 32 38 66 38 37 31 37 32 34 61 33 62 63 34 30 35 37 35 25 32 35 32 30 61 6c 65 78 61 6e 64 2e 64 6f 65 25 34 30 6a 70 6d 63 68 61 73 65 2e 63 6f 6d Data Ascii: _r=%2Fdac3998559236e28f871724a3bc40575%2520alexand.doe%40jpmchase.com
2024-07-29 18:33:47 UTC	311	IN	HTTP/1.1 302 Found Date: Mon, 29 Jul 2024 18:33:47 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: Apache Upgrade: h2 Location: https://u.iebsdatabase.com/accounts/signin/office/?ZGFjMzk5ODU1OTIzNmUyOGY4NzE3MjRhM2JjNDA1NzUlMjBhbGV4YW5kLmRvZUBqcG1jaGFzZS5jb20%3D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49721	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:43 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-29 18:33:43 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0759) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=217847 Date: Mon, 29 Jul 2024 18:33:43 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49722	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:44 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-29 18:33:44 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=217705 Date: Mon, 29 Jul 2024 18:33:44 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-29 18:33:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49723	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:46 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=25mzNeVM9CySyfd&MD=xlnUEtw+ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-29 18:33:47 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 29f13ebd-ff59-4183-8fbe-73719e7eeec9 MS-RequestId: 5fcd72d0-c44d-4002-bfeb-511a3c960678 MS-CV: cUC0C4CN7EutXuo5.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 29 Jul 2024 18:33:46 GMT Connection: close Content-Length: 24490
2024-07-29 18:33:47 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-07-29 18:33:47 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49724	193.70.74.252	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:48 UTC	834	OUT	GET /accounts/signin/office/?ZGFjMzk5ODU1OTIzNmUyOGY4NzE3MjRhM2JjNDA1NzUlMjBhbGV4YW5kLmRvZUBqcG1jaGFzZS5jb20%3D HTTP/1.1 Host: u.iebsdatabase.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://zvbiitngbh67xfz7mdm4.ampleintel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:48 UTC	979	IN	HTTP/1.1 302 Found Server: nginx/1.18.0 (Ubuntu) Date: Mon, 29 Jul 2024 18:33:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Location: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1 X-Frame-Options: DENY Vary: Cookie X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Set-Cookie: sessionid=pnlhlf0738mit2ht3t1e9yydaq2ui9xb; expires=Mon, 12 Aug 2024 18:33:48 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49727	13.107.246.42	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:50 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:50 UTC	797	IN	HTTP/1.1 200 OK Date: Mon, 29 Jul 2024 18:33:50 GMT Content-Type: application/x-javascript Content-Length: 49696 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 24 May 2024 22:13:21 GMT ETag: 0x8DC7C3EB8EDBF94 x-ms-request-id: 40c510b6-901e-0071-368b-e052c2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240729T183350Z-15c77d89844lpvk7kaceup6mys00000006k000000000grz3 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-29 18:33:50 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd eb 5b e3 38 d2 38 fa fd fd 2b 82 77 0f 13 4f 4c c8 05 68 70 da 9d 5f 1a e8 6e 66 80 30 24 cc e5 05 96 c7 89 15 f0 74 b0 b3 b6 c3 65 20 e7 6f 3f 75 91 6c d9 71 e8 9e dd f3 9c 2f 67 2e c4 96 4a b2 54 aa 2a 55 95 4a d2 e6 8f 6b ff 53 f9 b1 b2 f1 fd ff 54 06 c3 de f9 b0 d2 ff 54 19 7e 39 3a 3f a8 9c c1 db 1f 95 d3 fe f0 68 ff f0 fb eb c1 8f e2 ff c3 3b 3f ae 4c fc a9 a8 c0 ef c8 8d 85 57 09 83 4a 18 55 fc 60 1c 46 b3 30 72 13 11 57 ee e1 6f e4 bb d3 ca 24 0a ef 2b c9 9d a8 cc a2 f0 4f 31 4e e2 ca d4 8f 13 28 34 12 d3 f0 b1 52 85 ea 22 af 72 e6 46 c9 73 e5 e8 cc ac 43 fd 02 6a f3 6f fd 00 4a 8f c3 d9 33 3c df 25 95 20 4c fc b1 a8 b8 81 47 b5 4d e1 25 88 45 65 1e 78 22 aa 3c de f9 e3 bb ca 89 3f 8e c2 38 9c 24 95 48 8c 85 ff Data Ascii: [88+wOLhp_nf0$te o?ulq/g.JT*UJkSTT~9:?h;?LWJU`F0rWo$+O1N(4R"rFsCjoJ3<% LGM%Eex"<?8$H
2024-07-29 18:33:50 UTC	16384	IN	Data Raw: 2e b7 f6 3f f6 cf 11 8a 63 a5 49 a4 a8 49 28 d5 0d 41 59 e3 36 4b e1 be dd c8 64 fa 76 93 fc 38 74 42 0b 75 16 78 23 72 79 77 a4 26 b6 6d 43 64 2f 6c 19 d9 74 94 90 61 91 60 34 f0 86 29 63 e5 69 ae 49 b5 65 76 82 3a 1d fc 74 11 80 41 e2 c1 88 1c 3e e1 11 1b 00 db 07 eb f8 4f 26 f5 dc 61 9e e2 d2 a0 a3 84 8c eb 6a c9 61 90 a2 83 77 39 02 26 c1 28 09 27 7c 4e 1a 9d a2 af 9d 9a 96 7e ab 22 0f 8f ad 44 ea 4b 76 c5 a8 e1 89 8b b1 50 0a 8c f6 11 f3 45 9e 51 b5 30 ad 06 5d 8b 00 a8 29 bd 0a 6f e9 e0 39 ed a6 b3 48 ab 31 b4 7c bc 95 21 bd e0 ae 6a 9a 75 94 ac 94 b1 aa 11 21 de 1c 60 e2 45 42 a6 f9 06 6e b7 4d 8b 4e 5d 69 e0 81 e6 78 0e 99 e5 32 c6 b3 53 2c 53 b4 e1 99 e6 78 24 cb dc f1 f1 84 18 32 00 e8 e8 65 3e ea 9f 8f a3 b7 c6 8e c0 ab 7d 26 cc 3b ec 27 40 fd Data Ascii: .?cII(AY6Kdv8tBux#ryw&mCd/lta`4)ciIev:tA>O&ajaw9&('\|N~"DKvPEQ0])o9H1\|!ju!`EBnMN]ix2S,Sx$2e>}&;'@
2024-07-29 18:33:50 UTC	16384	IN	Data Raw: 0e cf 44 6d 1e 41 54 1d 69 1d 00 32 87 8c 70 54 bd c4 49 e5 f3 7a f4 57 6d 21 e3 e3 28 9f c9 5e 7b a7 de e3 ad 96 b5 b6 5a 64 aa 0d c1 66 a8 dd 1d a4 50 a3 73 c5 d5 f6 8a 7f d5 6d e8 af f9 78 76 d2 ae b3 65 79 eb 8f 56 52 89 bd 02 4b 5d 8b 6c 9c ec da 22 a6 62 47 ab 46 ba 85 c4 37 58 97 52 1d 0f 18 dc 56 31 6f 99 71 74 e2 b7 0e a2 fa 41 5f aa d0 ba 8c f5 ac d7 2c 58 8e 74 a6 4d 9d 2b 73 d2 d0 2d b5 9f 06 9c 84 b6 c1 2a 36 cc 8a b2 40 3a 7e d3 40 df fa d7 2a 2d 92 09 47 3a e8 0b d7 be f2 dc 63 53 ac 35 2d 49 8f 5e 80 73 3e ff 1e c3 a9 d8 51 26 77 e7 44 62 6c ac 1b 24 0b 0b f9 0f 12 d7 79 5f 12 5d 51 5f f0 07 d3 15 f8 fc c1 93 97 cf 14 e1 42 9e 28 10 3c 50 78 90 c6 aa 69 d9 ec 9a 49 32 ad 43 ec 50 42 ed 82 8e 4c 96 c4 ae eb 6d 01 c2 64 60 e9 bb f9 56 77 b2 Data Ascii: DmATi2pTIzWm!(^{ZdfPsmxveyVRK]l"bGF7XRV1oqtA_,XtM+s-6@:~@-G:cS5-I^s>Q&wDbl$y_]Q_B(<PxiI2CPBLmd`Vw
2024-07-29 18:33:50 UTC	1341	IN	Data Raw: af c7 23 18 0e a7 3e 06 23 48 88 f9 87 13 83 84 72 88 31 2d cc 3c 9f da 66 8d df 09 4d 5e b3 bb 47 09 c7 18 f5 f7 d6 55 7a 5f b9 01 6e 11 07 0a 1c d9 f5 fb 05 7b 3f 19 17 80 be 98 57 2d 92 59 26 82 49 8a 36 e5 8b 2b 65 1e 58 2d 18 ee d3 0b 52 db 21 24 56 0e 21 e2 92 4b dc 98 a0 69 b1 4d c6 67 27 5e af e9 76 fb ae a6 2b 07 b7 b7 6e d4 73 94 77 ef 01 78 8f fb e2 e0 00 6d 0e 0e 2f 22 8c 8e f2 5a 17 03 fa 01 12 96 aa 1c 75 70 1e 3d 08 df b8 6b 19 a2 a0 77 dd 99 09 0b 4c 4a 24 3d 28 9b 8d 1a b9 27 74 ee 1c d4 5d 79 e2 4a 86 09 e5 e4 ce 89 49 c3 9b d1 3c 2d ca 8a 63 bb c6 d9 d8 03 ef 19 8b 3a 1e 44 e5 fe 7d 67 b9 cc a6 d9 32 c9 17 67 17 e9 ec 2c 39 bb 98 5e 4c 3f 5e 9e 2f a8 2d f9 32 fd 98 3a ec 6c 8f 97 e0 06 44 3f 90 df 46 1c d7 24 62 2f f3 da df 61 df 1d 05 Data Ascii: #>#Hr1-<fM^GUz_n{?W-Y&I6+eX-R!$V!KiMg'^v+nswxm/"Zup=kwLJ$=('t]yJI<-c:D}g2g,9^L?^/-2:lD?F$b/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49728	13.107.246.45	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:51 UTC	408	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:51 UTC	797	IN	HTTP/1.1 200 OK Date: Mon, 29 Jul 2024 18:33:51 GMT Content-Type: application/x-javascript Content-Length: 49696 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 24 May 2024 22:13:21 GMT ETag: 0x8DC7C3EB8EDBF94 x-ms-request-id: 40c510b6-901e-0071-368b-e052c2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240729T183351Z-15c77d89844d9pv5vk6xmbvv7400000006dg000000009eet x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-29 18:33:51 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd eb 5b e3 38 d2 38 fa fd fd 2b 82 77 0f 13 4f 4c c8 05 68 70 da 9d 5f 1a e8 6e 66 80 30 24 cc e5 05 96 c7 89 15 f0 74 b0 b3 b6 c3 65 20 e7 6f 3f 75 91 6c d9 71 e8 9e dd f3 9c 2f 67 2e c4 96 4a b2 54 aa 2a 55 95 4a d2 e6 8f 6b ff 53 f9 b1 b2 f1 fd ff 54 06 c3 de f9 b0 d2 ff 54 19 7e 39 3a 3f a8 9c c1 db 1f 95 d3 fe f0 68 ff f0 fb eb c1 8f e2 ff c3 3b 3f ae 4c fc a9 a8 c0 ef c8 8d 85 57 09 83 4a 18 55 fc 60 1c 46 b3 30 72 13 11 57 ee e1 6f e4 bb d3 ca 24 0a ef 2b c9 9d a8 cc a2 f0 4f 31 4e e2 ca d4 8f 13 28 34 12 d3 f0 b1 52 85 ea 22 af 72 e6 46 c9 73 e5 e8 cc ac 43 fd 02 6a f3 6f fd 00 4a 8f c3 d9 33 3c df 25 95 20 4c fc b1 a8 b8 81 47 b5 4d e1 25 88 45 65 1e 78 22 aa 3c de f9 e3 bb ca 89 3f 8e c2 38 9c 24 95 48 8c 85 ff Data Ascii: [88+wOLhp_nf0$te o?ulq/g.JT*UJkSTT~9:?h;?LWJU`F0rWo$+O1N(4R"rFsCjoJ3<% LGM%Eex"<?8$H
2024-07-29 18:33:51 UTC	16384	IN	Data Raw: 2e b7 f6 3f f6 cf 11 8a 63 a5 49 a4 a8 49 28 d5 0d 41 59 e3 36 4b e1 be dd c8 64 fa 76 93 fc 38 74 42 0b 75 16 78 23 72 79 77 a4 26 b6 6d 43 64 2f 6c 19 d9 74 94 90 61 91 60 34 f0 86 29 63 e5 69 ae 49 b5 65 76 82 3a 1d fc 74 11 80 41 e2 c1 88 1c 3e e1 11 1b 00 db 07 eb f8 4f 26 f5 dc 61 9e e2 d2 a0 a3 84 8c eb 6a c9 61 90 a2 83 77 39 02 26 c1 28 09 27 7c 4e 1a 9d a2 af 9d 9a 96 7e ab 22 0f 8f ad 44 ea 4b 76 c5 a8 e1 89 8b b1 50 0a 8c f6 11 f3 45 9e 51 b5 30 ad 06 5d 8b 00 a8 29 bd 0a 6f e9 e0 39 ed a6 b3 48 ab 31 b4 7c bc 95 21 bd e0 ae 6a 9a 75 94 ac 94 b1 aa 11 21 de 1c 60 e2 45 42 a6 f9 06 6e b7 4d 8b 4e 5d 69 e0 81 e6 78 0e 99 e5 32 c6 b3 53 2c 53 b4 e1 99 e6 78 24 cb dc f1 f1 84 18 32 00 e8 e8 65 3e ea 9f 8f a3 b7 c6 8e c0 ab 7d 26 cc 3b ec 27 40 fd Data Ascii: .?cII(AY6Kdv8tBux#ryw&mCd/lta`4)ciIev:tA>O&ajaw9&('\|N~"DKvPEQ0])o9H1\|!ju!`EBnMN]ix2S,Sx$2e>}&;'@
2024-07-29 18:33:51 UTC	16384	IN	Data Raw: 0e cf 44 6d 1e 41 54 1d 69 1d 00 32 87 8c 70 54 bd c4 49 e5 f3 7a f4 57 6d 21 e3 e3 28 9f c9 5e 7b a7 de e3 ad 96 b5 b6 5a 64 aa 0d c1 66 a8 dd 1d a4 50 a3 73 c5 d5 f6 8a 7f d5 6d e8 af f9 78 76 d2 ae b3 65 79 eb 8f 56 52 89 bd 02 4b 5d 8b 6c 9c ec da 22 a6 62 47 ab 46 ba 85 c4 37 58 97 52 1d 0f 18 dc 56 31 6f 99 71 74 e2 b7 0e a2 fa 41 5f aa d0 ba 8c f5 ac d7 2c 58 8e 74 a6 4d 9d 2b 73 d2 d0 2d b5 9f 06 9c 84 b6 c1 2a 36 cc 8a b2 40 3a 7e d3 40 df fa d7 2a 2d 92 09 47 3a e8 0b d7 be f2 dc 63 53 ac 35 2d 49 8f 5e 80 73 3e ff 1e c3 a9 d8 51 26 77 e7 44 62 6c ac 1b 24 0b 0b f9 0f 12 d7 79 5f 12 5d 51 5f f0 07 d3 15 f8 fc c1 93 97 cf 14 e1 42 9e 28 10 3c 50 78 90 c6 aa 69 d9 ec 9a 49 32 ad 43 ec 50 42 ed 82 8e 4c 96 c4 ae eb 6d 01 c2 64 60 e9 bb f9 56 77 b2 Data Ascii: DmATi2pTIzWm!(^{ZdfPsmxveyVRK]l"bGF7XRV1oqtA_,XtM+s-6@:~@-G:cS5-I^s>Q&wDbl$y_]Q_B(<PxiI2CPBLmd`Vw
2024-07-29 18:33:51 UTC	1341	IN	Data Raw: af c7 23 18 0e a7 3e 06 23 48 88 f9 87 13 83 84 72 88 31 2d cc 3c 9f da 66 8d df 09 4d 5e b3 bb 47 09 c7 18 f5 f7 d6 55 7a 5f b9 01 6e 11 07 0a 1c d9 f5 fb 05 7b 3f 19 17 80 be 98 57 2d 92 59 26 82 49 8a 36 e5 8b 2b 65 1e 58 2d 18 ee d3 0b 52 db 21 24 56 0e 21 e2 92 4b dc 98 a0 69 b1 4d c6 67 27 5e af e9 76 fb ae a6 2b 07 b7 b7 6e d4 73 94 77 ef 01 78 8f fb e2 e0 00 6d 0e 0e 2f 22 8c 8e f2 5a 17 03 fa 01 12 96 aa 1c 75 70 1e 3d 08 df b8 6b 19 a2 a0 77 dd 99 09 0b 4c 4a 24 3d 28 9b 8d 1a b9 27 74 ee 1c d4 5d 79 e2 4a 86 09 e5 e4 ce 89 49 c3 9b d1 3c 2d ca 8a 63 bb c6 d9 d8 03 ef 19 8b 3a 1e 44 e5 fe 7d 67 b9 cc a6 d9 32 c9 17 67 17 e9 ec 2c 39 bb 98 5e 4c 3f 5e 9e 2f a8 2d f9 32 fd 98 3a ec 6c 8f 97 e0 06 44 3f 90 df 46 1c d7 24 62 2f f3 da df 61 df 1d 05 Data Ascii: #>#Hr1-<fM^GUz_n{?W-Y&I6+eX-R!$V!KiMg'^v+nswxm/"Zup=kwLJ$=('t]yJI<-c:D}g2g,9^L?^/-2:lD?F$b/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49735	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:53 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:53 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2184304 Cache-Control: public, max-age=31536000 Content-MD5: SJgdPPV+fFjKfj6FHvk1Tg== Content-Type: text/css Date: Mon, 29 Jul 2024 18:33:53 GMT Etag: 0x8DC9BAA0E5931F9 Last-Modified: Wed, 03 Jul 2024 21:49:46 GMT Server: ECAcc (lhc/794C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6c7d298f-b01e-00dc-1d08-ce9a59000000 x-ms-version: 2009-09-19 Content-Length: 113401 Connection: close
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 73 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a Data Ascii: s-1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:
2024-07-29 18:33:53 UTC	2	IN	Data Raw: 72 67 Data Ascii: rg
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 Data Ascii: in-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-box
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c Data Ascii: ow-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.tabl
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f Data Ascii: ","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongo
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: type="reset"].btn-primary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-
2024-07-29 18:33:53 UTC	15101	IN	Data Raw: 69 61 20 4d 61 74 68 22 7d 2e 61 70 70 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b Data Ascii: ia Math"}.app-name{margin-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49737	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:53 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:53 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3277484 Cache-Control: public, max-age=31536000 Content-MD5: go75uU/MhcBRDMfi4bT3Bw== Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:33:53 GMT Etag: 0x8DC90CF2B178E59 Last-Modified: Thu, 20 Jun 2024 02:17:43 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e8eb8f30-e01e-00ed-5e16-c4904a000000 x-ms-version: 2009-09-19 Content-Length: 448825 Connection: close
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-07-29 18:33:53 UTC	2	IN	Data Raw: 72 69 Data Ascii: ri
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 6e 67 28 30 2c 61 29 2c 74 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 61 2b 31 2c 6f 29 2c 22 26 22 2c 22 3d 22 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 7d 72 65 74 75 72 6e 7b 6f 72 69 67 69 6e 41 6e 64 50 61 74 68 3a 6e 2c 71 75 65 72 79 3a 74 2c 66 72 61 67 6d 65 6e 74 3a 69 7d 7d 2c 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6f 72 69 67 69 6e 41 6e 64 50 61 74 68 7c 7c 22 22 3b 72 65 74 75 72 6e 20 65 2e 71 75 65 72 79 26 26 28 6e 2b 3d 22 3f 22 2b 63 2e 6a 6f 69 6e 28 65 2e 71 75 65 72 79 2c 22 26 22 2c 22 3d 22 29 29 2c 65 2e 66 72 61 67 6d 65 6e 74 26 26 28 6e 2b 3d 22 23 22 2b 63 2e 6a 6f Data Ascii: ng(0,a),t=d.doubleSplit(e.substring(a+1,o),"&","="),i=d.doubleSplit(e.substring(o+1),"&","="))}return{originAndPath:n,query:t,fragment:i}},join:function(e){var n=e.originAndPath\|\|"";return e.query&&(n+="?"+c.join(e.query,"&","=")),e.fragment&&(n+="#"+c.jo
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 64 43 6c 69 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 5b 6e 5d 2e 61 70 70 6c 79 28 61 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 73 2e 6c 6f 67 45 76 65 6e 74 3d 75 28 22 6c 6f 67 45 76 65 6e 74 22 29 2c 73 2e 6c 6f 67 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 45 76 65 6e 74 3d 75 28 22 6c 6f 67 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 45 76 65 6e 74 22 29 2c 73 2e 74 72 61 63 65 42 65 67 69 6e 52 65 71 75 65 73 74 3d 75 28 22 74 72 61 63 65 42 65 67 69 6e 52 65 71 75 65 73 74 22 29 2c 73 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 2c 61 29 7b 6c 3f 6c 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 28 65 2c Data Ascii: dClientTracingOptions",function(){if(a)return a[n].apply(a,arguments)}),s.logEvent=u("logEvent"),s.logUserInteractionEvent=u("logUserInteractionEvent"),s.traceBeginRequest=u("traceBeginRequest"),s.traceEndRequest=function(e,n,t,i,a){l?l.traceEndRequest(e,
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 4b 65 79 5d 7c 7c 22 22 2c 66 3d 74 5b 73 2e 44 69 73 70 6c 61 79 53 69 67 6e 46 6f 72 55 49 5d 7c 7c 22 22 2c 6e 3d 6c 21 3d 3d 70 2e 53 75 63 63 65 73 73 29 3a 28 6c 3d 70 2e 45 72 72 6f 72 2c 75 3d 22 22 2c 66 3d 22 22 2c 6e 3d 21 30 29 2c 6e 3f 6c 3d 3d 3d 70 2e 46 54 45 72 72 6f 72 3f 68 28 65 2c 64 29 3a 76 28 65 2c 64 29 3a 62 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 67 3d 22 22 2c 6c 3d 70 2e 45 72 72 6f 72 2c 75 3d 22 22 2c 66 3d 22 22 2c 76 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 6c 3d 70 2e 54 69 6d 65 6f 75 74 2c 75 3d 22 22 2c 66 3d 22 22 2c 67 3d 22 22 2c 76 28 64 29 7d 64 2e 67 65 74 4f 74 63 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 69 73 43 6f 6d 70 6c 65 74 65 28 29 3f 6c 3a 70 Data Ascii: Key]\|\|"",f=t[s.DisplaySignForUI]\|\|"",n=l!==p.Success):(l=p.Error,u="",f="",n=!0),n?l===p.FTError?h(e,d):v(e,d):b(e)}function k(){g="",l=p.Error,u="",f="",v(d)}function T(){l=p.Timeout,u="",f="",g="",v(d)}d.getOtcStatus=function(){return d.isComplete()?l:p
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 65 5f 75 73 65 72 6e 61 6d 65 3a 65 7d 29 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 62 65 29 7b 76 61 72 20 74 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 22 3f 22 2b 62 65 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 22 3f 22 2b 62 65 29 29 3b 74 3d 74 2e 73 75 62 73 74 72 28 31 29 2c 65 3d 70 2e 61 70 70 65 6e 64 28 65 2c 74 29 7d 65 6c 73 65 20 65 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 65 29 29 3b 72 65 74 75 72 6e 20 65 3d Data Ascii: e_username:e}):i.idpRedirectUrl=function(e,n){if(be){var t=p.appendOrReplace("?"+be,"wctx","LoginOptions%3D3%26"+p.extract("wctx","?"+be));t=t.substr(1),e=p.append(e,t)}else e=p.appendOrReplace(e,"wctx","LoginOptions%3D3%26"+p.extract("wctx",e));return e=
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 72 4c 69 6e 6b 3d 21 31 2c 6e 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 3d 76 2c 6e 2e 69 73 55 73 65 72 4b 6e 6f 77 6e 3d 21 21 75 2e 63 72 65 64 54 79 70 65 2c 6e 2e 64 69 73 70 6c 61 79 48 65 6c 70 3d 21 75 2e 63 72 65 64 54 79 70 65 2c 6e 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 3d 68 2c 6e 2e 69 73 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 3d 44 2c 6e 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 3d 5f 2c 6e 2e 73 65 74 46 6f 63 75 73 3d 43 2c 6e 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3d 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 21 31 29 2c 6e 2e 63 72 65 64 4c 69 6e 6b 45 72 72 6f 72 3d 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 2c 6e 2e 66 Data Ascii: rLink=!1,n.showForgotUsername=v,n.isUserKnown=!!u.credType,n.displayHelp=!u.credType,n.hideCredSwitchLink=h,n.isOfflineAccountVisible=D,n.ariaDescribedBy=_,n.setFocus=C,n.isPlatformAuthenticatorAvailable=i.observable(!1),n.credLinkError=i.observable(),n.f
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 67 6e 65 64 49 6e 3a 65 2e 69 73 53 69 67 6e 65 64 49 6e 7d 7d 29 29 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 6f 3d 65 2c 72 3d 6f 2e 66 48 69 64 65 46 6f 6f 74 65 72 2c 73 3d 6f 2e 66 53 68 6f 77 50 61 67 65 4c 65 76 65 6c 54 69 74 6c 65 41 6e 64 44 65 73 63 2c 63 3d 6e 75 6c 6c 3b 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 3d 6e 7c 7c 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 2c 61 2e 62 61 63 6b 67 72 6f 75 6e 64 4c 6f 67 6f 55 72 6c 3d 74 7c 7c 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 2c 61 2e 61 6e 69 6d 61 74 69 6f 6e Data Ascii: gnedIn:e.isSignedIn}}))}};e.exports=r},function(e,n,t){var i=t(2);e.exports=function(e,n,t){var a=this,o=e,r=o.fHideFooter,s=o.fShowPageLevelTitleAndDesc,c=null;a.paginationControlMethods=n\|\|i.observable(),a.backgroundLogoUrl=t\|\|i.observable(),a.animation
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 29 2c 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 75 73 65 72 6e 61 6d 65 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 2c 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 6d 6b 74 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 2e 65 78 74 72 61 63 74 28 22 6d 6b 74 22 29 29 29 29 2c 65 3d 66 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 6c 63 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 2e 65 78 74 72 61 63 74 28 22 6c 63 22 29 29 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 66 Data Ascii: ),e=f.appendOrReplace(e,"username",encodeURIComponent(t)),e=f.appendOrReplace(e,"mkt",encodeURIComponent(decodeURIComponent(f.extract("mkt")))),e=f.appendOrReplace(e,"lc",encodeURIComponent(decodeURIComponent(f.extract("lc")))),document.location.replace(f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49736	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:53 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:53 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3486091 Cache-Control: public, max-age=31536000 Content-MD5: r4VRICOkIy9qDkY5jq2lbg== Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:33:53 GMT Etag: 0x8DC90020779542E Last-Modified: Wed, 19 Jun 2024 01:49:16 GMT Server: ECAcc (lhc/791A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c59e1121-b01e-000c-1531-c2ae3f000000 x-ms-version: 2009-09-19 Content-Length: 55504 Connection: close
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-07-29 18:33:53 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 2e Data Ascii: escription_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time.
2024-07-29 18:33:53 UTC	16383	IN	Data Raw: 64 69 66 66 65 72 65 6e 74 20 61 63 63 6f 75 6e 74 20 6f 72 20 3c 61 20 69 64 3d 22 61 61 64 53 65 6c 66 53 69 67 6e 75 70 22 20 68 72 65 66 3d 22 23 22 3e 63 72 65 61 74 65 20 61 20 6e 65 77 20 6f 6e 65 3c 2f 61 3e 2e 27 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 45 72 72 6f 72 5f 57 72 6f 6e 67 43 72 65 64 73 3d 6f 2e 66 4c 6f 63 6b 55 73 65 72 6e 61 6d 65 7c 7c 6f 2e 66 48 69 64 65 52 65 73 65 74 50 61 73 73 77 6f 72 64 4c 69 6e 6b 3f 22 54 68 65 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 3a 6f 2e 66 41 6c 6c 6f 77 50 68 6f 6e 65 53 69 67 6e 49 6e 3f 27 59 6f 75 72 20 61 63 63 6f 75 6e 74 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 49 Data Ascii: different account or <a id="aadSelfSignup" href="#">create a new one</a>.',e.CT_PWD_STR_Error_WrongCreds=o.fLockUsername\|\|o.fHideResetPasswordLink?"The password is incorrect. Please try again.":o.fAllowPhoneSignIn?'Your account or password is incorrect. I
2024-07-29 18:33:53 UTC	6354	IN	Data Raw: 74 72 79 52 65 61 63 68 65 64 3a 22 56 6f 69 63 65 4f 54 50 41 75 74 68 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 43 6f 64 65 52 65 74 72 79 52 65 61 63 68 65 64 22 2c 41 63 63 65 73 73 50 61 73 73 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 54 66 61 3a 22 41 63 63 65 73 73 50 61 73 73 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 22 2c 49 6e 76 61 6c 69 64 41 63 63 65 73 73 50 61 73 73 54 66 61 3a 22 49 6e 76 61 6c 69 64 41 63 63 65 73 73 50 61 73 73 22 2c 41 63 63 65 73 73 50 61 73 73 45 78 70 69 72 65 64 54 66 61 3a 22 41 63 63 65 73 73 50 61 73 73 45 78 70 69 72 65 64 22 2c 41 63 63 65 73 73 50 61 73 73 41 6c 72 65 61 64 79 55 73 65 64 54 66 61 3a 22 41 63 63 65 73 73 50 61 73 73 41 6c 72 65 61 64 79 55 73 65 64 22 2c 41 70 70 4c 6f 63 6b 52 65 Data Ascii: tryReached:"VoiceOTPAuthFailedMaxAllowedCodeRetryReached",AccessPassBlockedByPolicyTfa:"AccessPassBlockedByPolicy",InvalidAccessPassTfa:"InvalidAccessPass",AccessPassExpiredTfa:"AccessPassExpired",AccessPassAlreadyUsedTfa:"AccessPassAlreadyUsed",AppLockRe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49740	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:54 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:54 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3486092 Cache-Control: public, max-age=31536000 Content-MD5: r4VRICOkIy9qDkY5jq2lbg== Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:33:54 GMT Etag: 0x8DC90020779542E Last-Modified: Wed, 19 Jun 2024 01:49:16 GMT Server: ECAcc (lhc/791A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c59e1121-b01e-000c-1531-c2ae3f000000 x-ms-version: 2009-09-19 Content-Length: 55504 Connection: close
2024-07-29 18:33:54 UTC	15653	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-07-29 18:33:54 UTC	16383	IN	Data Raw: 6e 3d 22 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 50 65 6e 64 69 6e 67 5f 54 69 74 6c 65 3d 22 53 68 61 72 65 20 61 20 56 65 72 69 66 69 65 64 20 49 44 20 74 6f 20 61 63 63 65 73 73 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 50 65 6e 64 69 6e 67 5f 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 4f 70 65 6e 20 74 68 65 20 4d 69 63 72 6f 73 6f 66 74 20 41 75 74 68 65 6e 74 69 63 61 74 6f 72 20 61 70 70 20 61 6e 64 20 73 63 61 6e 20 74 68 65 20 51 52 20 63 6f 64 65 20 74 6f 20 73 68 61 72 65 20 74 68 65 20 72 65 71 75 65 73 74 65 64 20 56 65 72 69 66 69 65 64 20 49 44 73 2e 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 52 65 66 72 65 73 68 5f 42 75 74 74 6f 6e 3d 22 52 65 66 72 65 73 68 22 2c 6f 2e 66 55 73 65 4e 65 77 50 68 6f Data Ascii: n="Redirecting...",e.CT_VC_STR_Pending_Title="Share a Verified ID to access",e.CT_VC_STR_Pending_Description="Open the Microsoft Authenticator app and scan the QR code to share the requested Verified IDs.",e.CT_VC_STR_Refresh_Button="Refresh",o.fUseNewPho
2024-07-29 18:33:54 UTC	16383	IN	Data Raw: 72 6f 6e 67 3e 6e 65 77 20 73 69 67 6e 2d 69 6e 20 65 78 70 65 72 69 65 6e 63 65 3c 2f 73 74 72 6f 6e 67 3e 22 2c 0a 65 2e 57 46 5f 53 54 52 5f 53 69 67 6e 55 70 4c 69 6e 6b 5f 54 65 78 74 3d 27 4e 6f 20 61 63 63 6f 75 6e 74 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 73 69 67 6e 75 70 22 3e 43 72 65 61 74 65 20 6f 6e 65 21 3c 2f 61 3e 27 2c 65 2e 43 54 5f 48 52 44 5f 53 54 52 5f 53 70 6c 69 74 74 65 72 5f 52 65 6e 61 6d 65 3d 27 54 69 72 65 64 20 6f 66 20 73 65 65 69 6e 67 20 74 68 69 73 3f 20 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 69 44 69 73 61 6d 62 69 67 52 65 6e 61 6d 65 4c 69 6e 6b 22 3e 52 65 6e 61 6d 65 20 79 6f 75 72 20 70 65 72 73 6f 6e 61 6c 20 4d 69 63 72 6f 73 6f 66 74 20 61 63 63 6f 75 6e 74 2e 3c 2f 61 3e 27 2c 65 2e 43 Data Ascii: rong>new sign-in experience</strong>",e.WF_STR_SignUpLink_Text='No account? <a href="#" id="signup">Create one!</a>',e.CT_HRD_STR_Splitter_Rename='Tired of seeing this? <a href="#" id="iDisambigRenameLink">Rename your personal Microsoft account.</a>',e.C
2024-07-29 18:33:55 UTC	7085	IN	Data Raw: 6f 64 65 43 6f 72 72 65 63 74 42 75 74 44 65 76 69 63 65 4e 6f 74 41 6c 6c 6f 77 65 64 22 2c 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 3a 22 4f 61 74 68 43 6f 64 65 46 61 69 6c 65 64 4d 61 78 41 6c 6c 6f 77 65 64 52 65 74 72 79 52 65 61 63 68 65 64 22 2c 49 6e 76 61 6c 69 64 53 65 73 73 69 6f 6e 3a 22 49 6e 76 61 6c 69 64 53 65 73 73 69 6f 6e 22 2c 50 68 6f 6e 65 41 70 70 4e 6f 52 65 73 70 6f 6e 73 65 3a 22 50 68 6f 6e 65 41 70 70 4e 6f 52 65 73 70 6f 6e 73 65 22 2c 55 73 65 72 32 57 61 79 53 4d 53 41 75 74 68 46 61 69 6c 65 64 57 72 6f 6e 67 43 6f 64 65 45 6e 74 65 72 65 64 3a 22 55 73 65 72 32 57 61 79 53 4d 53 41 75 74 68 46 61 69 6c 65 64 57 72 6f 6e 67 43 6f 64 65 45 6e 74 65 72 65 64 Data Ascii: odeCorrectButDeviceNotAllowed",OathCodeFailedMaxAllowedRetryReached:"OathCodeFailedMaxAllowedRetryReached",InvalidSession:"InvalidSession",PhoneAppNoResponse:"PhoneAppNoResponse",User2WaySMSAuthFailedWrongCodeEntered:"User2WaySMSAuthFailedWrongCodeEntered

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49741	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:54 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:55 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3277486 Cache-Control: public, max-age=31536000 Content-MD5: go75uU/MhcBRDMfi4bT3Bw== Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:33:55 GMT Etag: 0x8DC90CF2B178E59 Last-Modified: Thu, 20 Jun 2024 02:17:43 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e8eb8f30-e01e-00ed-5e16-c4904a000000 x-ms-version: 2009-09-19 Content-Length: 448825 Connection: close
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-07-29 18:33:55 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 69 6e 67 28 30 2c 61 29 2c 74 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 61 2b 31 2c 6f 29 2c 22 26 22 2c 22 3d 22 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f 2b 31 29 2c 22 26 22 2c 22 3d 22 29 29 7d 72 65 74 75 72 6e 7b 6f 72 69 67 69 6e 41 6e 64 50 61 74 68 3a 6e 2c 71 75 65 72 79 3a 74 2c 66 72 61 67 6d 65 6e 74 3a 69 7d 7d 2c 6a 6f 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6f 72 69 67 69 6e 41 6e 64 50 61 74 68 7c 7c 22 22 3b 72 65 74 75 72 6e 20 65 2e 71 75 65 72 79 26 26 28 6e 2b 3d 22 3f 22 2b 63 2e 6a 6f 69 6e 28 65 2e 71 75 65 72 79 2c 22 26 22 2c 22 3d 22 29 29 2c 65 2e 66 72 61 67 6d 65 6e 74 26 26 28 6e 2b 3d 22 23 22 2b 63 2e 6a Data Ascii: ing(0,a),t=d.doubleSplit(e.substring(a+1,o),"&","="),i=d.doubleSplit(e.substring(o+1),"&","="))}return{originAndPath:n,query:t,fragment:i}},join:function(e){var n=e.originAndPath\|\|"";return e.query&&(n+="?"+c.join(e.query,"&","=")),e.fragment&&(n+="#"+c.j
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 61 64 43 6c 69 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 5b 6e 5d 2e 61 70 70 6c 79 28 61 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 73 2e 6c 6f 67 45 76 65 6e 74 3d 75 28 22 6c 6f 67 45 76 65 6e 74 22 29 2c 73 2e 6c 6f 67 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 45 76 65 6e 74 3d 75 28 22 6c 6f 67 55 73 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 45 76 65 6e 74 22 29 2c 73 2e 74 72 61 63 65 42 65 67 69 6e 52 65 71 75 65 73 74 3d 75 28 22 74 72 61 63 65 42 65 67 69 6e 52 65 71 75 65 73 74 22 29 2c 73 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 2c 61 29 7b 6c 3f 6c 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 28 65 Data Ascii: adClientTracingOptions",function(){if(a)return a[n].apply(a,arguments)}),s.logEvent=u("logEvent"),s.logUserInteractionEvent=u("logUserInteractionEvent"),s.traceBeginRequest=u("traceBeginRequest"),s.traceEndRequest=function(e,n,t,i,a){l?l.traceEndRequest(e
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 70 4b 65 79 5d 7c 7c 22 22 2c 66 3d 74 5b 73 2e 44 69 73 70 6c 61 79 53 69 67 6e 46 6f 72 55 49 5d 7c 7c 22 22 2c 6e 3d 6c 21 3d 3d 70 2e 53 75 63 63 65 73 73 29 3a 28 6c 3d 70 2e 45 72 72 6f 72 2c 75 3d 22 22 2c 66 3d 22 22 2c 6e 3d 21 30 29 2c 6e 3f 6c 3d 3d 3d 70 2e 46 54 45 72 72 6f 72 3f 68 28 65 2c 64 29 3a 76 28 65 2c 64 29 3a 62 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 67 3d 22 22 2c 6c 3d 70 2e 45 72 72 6f 72 2c 75 3d 22 22 2c 66 3d 22 22 2c 76 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 6c 3d 70 2e 54 69 6d 65 6f 75 74 2c 75 3d 22 22 2c 66 3d 22 22 2c 67 3d 22 22 2c 76 28 64 29 7d 64 2e 67 65 74 4f 74 63 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 69 73 43 6f 6d 70 6c 65 74 65 28 29 3f 6c 3a Data Ascii: pKey]\|\|"",f=t[s.DisplaySignForUI]\|\|"",n=l!==p.Success):(l=p.Error,u="",f="",n=!0),n?l===p.FTError?h(e,d):v(e,d):b(e)}function k(){g="",l=p.Error,u="",f="",v(d)}function T(){l=p.Timeout,u="",f="",g="",v(d)}d.getOtcStatus=function(){return d.isComplete()?l:
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 66 65 5f 75 73 65 72 6e 61 6d 65 3a 65 7d 29 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 62 65 29 7b 76 61 72 20 74 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 22 3f 22 2b 62 65 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 22 3f 22 2b 62 65 29 29 3b 74 3d 74 2e 73 75 62 73 74 72 28 31 29 2c 65 3d 70 2e 61 70 70 65 6e 64 28 65 2c 74 29 7d 65 6c 73 65 20 65 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 77 63 74 78 22 2c 22 4c 6f 67 69 6e 4f 70 74 69 6f 6e 73 25 33 44 33 25 32 36 22 2b 70 2e 65 78 74 72 61 63 74 28 22 77 63 74 78 22 2c 65 29 29 3b 72 65 74 75 72 6e 20 65 Data Ascii: fe_username:e}):i.idpRedirectUrl=function(e,n){if(be){var t=p.appendOrReplace("?"+be,"wctx","LoginOptions%3D3%26"+p.extract("wctx","?"+be));t=t.substr(1),e=p.append(e,t)}else e=p.appendOrReplace(e,"wctx","LoginOptions%3D3%26"+p.extract("wctx",e));return e
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 65 72 4c 69 6e 6b 3d 21 31 2c 6e 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 3d 76 2c 6e 2e 69 73 55 73 65 72 4b 6e 6f 77 6e 3d 21 21 75 2e 63 72 65 64 54 79 70 65 2c 6e 2e 64 69 73 70 6c 61 79 48 65 6c 70 3d 21 75 2e 63 72 65 64 54 79 70 65 2c 6e 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 3d 68 2c 6e 2e 69 73 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 3d 44 2c 6e 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 3d 5f 2c 6e 2e 73 65 74 46 6f 63 75 73 3d 43 2c 6e 2e 69 73 50 6c 61 74 66 6f 72 6d 41 75 74 68 65 6e 74 69 63 61 74 6f 72 41 76 61 69 6c 61 62 6c 65 3d 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 21 31 29 2c 6e 2e 63 72 65 64 4c 69 6e 6b 45 72 72 6f 72 3d 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 2c 6e 2e Data Ascii: erLink=!1,n.showForgotUsername=v,n.isUserKnown=!!u.credType,n.displayHelp=!u.credType,n.hideCredSwitchLink=h,n.isOfflineAccountVisible=D,n.ariaDescribedBy=_,n.setFocus=C,n.isPlatformAuthenticatorAvailable=i.observable(!1),n.credLinkError=i.observable(),n.
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 69 67 6e 65 64 49 6e 3a 65 2e 69 73 53 69 67 6e 65 64 49 6e 7d 7d 29 29 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 32 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 6f 3d 65 2c 72 3d 6f 2e 66 48 69 64 65 46 6f 6f 74 65 72 2c 73 3d 6f 2e 66 53 68 6f 77 50 61 67 65 4c 65 76 65 6c 54 69 74 6c 65 41 6e 64 44 65 73 63 2c 63 3d 6e 75 6c 6c 3b 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 3d 6e 7c 7c 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 2c 61 2e 62 61 63 6b 67 72 6f 75 6e 64 4c 6f 67 6f 55 72 6c 3d 74 7c 7c 69 2e 6f 62 73 65 72 76 61 62 6c 65 28 29 2c 61 2e 61 6e 69 6d 61 74 69 6f Data Ascii: ignedIn:e.isSignedIn}}))}};e.exports=r},function(e,n,t){var i=t(2);e.exports=function(e,n,t){var a=this,o=e,r=o.fHideFooter,s=o.fShowPageLevelTitleAndDesc,c=null;a.paginationControlMethods=n\|\|i.observable(),a.backgroundLogoUrl=t\|\|i.observable(),a.animatio
2024-07-29 18:33:55 UTC	7	IN	Data Raw: 29 29 2c 65 3d 66 2e Data Ascii: )),e=f.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49743	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:54 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:55 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 11019313 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Mon, 29 Jul 2024 18:33:55 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-07-29 18:33:55 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49742	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:54 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:55 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3277485 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:33:55 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-07-29 18:33:55 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 Data Ascii: "!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary
2024-07-29 18:33:55 UTC	3	IN	Data Raw: 67 3b 66 Data Ascii: g;f
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d 3d 33 29 Data Ascii: unction N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-=3)
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 Data Ascii: r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t,"
2024-07-29 18:33:55 UTC	16383	IN	Data Raw: 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 64 65 66 Data Ascii: eturn new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["def
2024-07-29 18:33:55 UTC	3	IN	Data Raw: 6f 72 74 Data Ascii: ort

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49731	13.107.246.42	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:55 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:55 UTC	798	IN	HTTP/1.1 200 OK Date: Mon, 29 Jul 2024 18:33:55 GMT Content-Type: application/x-javascript Content-Length: 116351 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 20 Jun 2024 02:13:44 GMT ETag: 0x8DC90CE9C53BCDF x-ms-request-id: 6c2f4af8-d01e-0070-677c-de0d1e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240729T183355Z-15c77d89844fw8hl33t201z4f400000006kg00000000cr1d x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-29 18:33:55 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec 7d 5b 5b db 48 b6 e8 fb fe 15 b6 a6 c7 2d c5 85 b1 0d 18 22 23 3c 24 21 3d cc 24 81 0d a4 7b 7a 88 87 4f d8 65 ac c4 96 3c ba 70 69 ec fd db cf 5a ab aa a4 92 2c 83 49 f7 3e e7 e1 4c 7f 1d ac 4b a9 ee b5 ee 97 cd 57 d5 ff aa bc aa 6c ac ff 5f e5 fc e2 f0 ec a2 72 f2 be 72 f1 d7 e3 b3 77 95 53 b8 fb b5 f2 e9 e4 e2 f8 ed d1 fa f5 60 a3 f8 ef 62 ec 45 95 91 37 e1 15 f8 bd 76 23 3e ac 04 7e 25 08 2b 9e 3f 08 c2 59 10 ba 31 8f 2a 53 f8 1b 7a ee a4 32 0a 83 69 25 1e f3 ca 2c 0c be f2 41 1c 55 26 5e 14 c3 47 d7 7c 12 dc 55 4c a8 2e 1c 56 4e dd 30 7e a8 1c 9f 5a 0d a8 9f 43 6d de 8d e7 c3 d7 83 60 f6 00 d7 e3 b8 e2 07 b1 37 e0 15 d7 1f 52 6d 13 b8 f1 23 5e 49 fc 21 0f 2b 77 63 6f 30 ae 7c f4 06 61 10 05 a3 b8 12 f2 01 f7 6e a1 91 Data Ascii: }[[H-"#<$!=${zOe<piZ,I>LKWl_rrwS`bE7v#>~%+?Y1*Sz2i%,AU&^G\|UL.VN0~ZCm`7Rm#^I!+wco0\|an
2024-07-29 18:33:55 UTC	16384	IN	Data Raw: 0d a6 d1 11 fa 1c a5 01 0a 5b 94 cd 52 c6 46 74 d3 39 25 b9 7f 35 c7 69 98 e2 f0 39 e4 be 20 51 ac 5f 38 0d a8 6c 12 e7 d2 21 0f 8b f4 60 66 b7 1b e9 bd c8 3e aa 1a df 6f 23 91 ab ae b3 9d 12 39 6d 96 6c c2 1f 17 ff 84 f0 a7 c0 5e a6 92 85 16 39 27 8a c0 d7 0d cc 3c f7 f9 d8 8f 5b 9d 37 47 26 7f 15 59 0b da a9 34 ee 91 b3 21 1c 8d 3c 27 ec 7a fb 09 85 42 a7 64 03 31 f3 2c a8 05 6d ad 37 b0 ba 11 1c 07 6f 63 24 7a 2a 9e c0 44 8c 1c cf 62 f0 b8 de d2 4c a2 2b a3 57 11 6d f9 0d 34 46 c4 62 de 86 83 df 32 6c 2e b3 75 0e eb ee 41 22 9c 1f 37 5c 12 96 74 3d 74 72 f2 36 36 32 25 ee 04 55 af 63 78 3a de 77 bb 63 ad 77 75 24 b9 a9 7f 63 e8 d4 04 d1 8f c8 6e 8b c6 6a 59 7e 51 35 7b d9 54 5d 67 4c 6e e8 08 7d 24 9c 79 b4 a5 16 ba 9d f4 dc 02 1d 87 a0 45 16 81 45 3a Data Ascii: [RFt9%5i9 Q_8l!`f>o#9ml^9'<[7G&Y4!<'zBd1,m7oc$z*DbL+Wm4Fb2l.uA"7\t=tr662%Ucx:wcwu$cnjY~Q5{T]gLn}$yEE:
2024-07-29 18:33:55 UTC	16384	IN	Data Raw: 42 29 a9 34 69 99 56 a3 cd 69 83 c3 6f ad 0d 06 be 1e 18 2a 71 26 24 3e ca 17 6d 68 13 47 34 51 9e 15 8a ac 0d 12 91 55 d3 11 d8 16 bf a2 56 d7 7a 02 f4 82 62 f8 0d f6 31 ff 7e c3 f3 29 3c 6e 86 a6 1e 78 de 1c e6 34 a4 2d b4 eb 08 5b 68 28 e4 27 ff 14 b8 4b 44 60 66 73 00 6a 32 8a 42 93 09 7e 92 0c 7d 2c 7a 55 96 54 86 01 98 c3 99 9b 7c f3 13 c4 37 68 e6 ee ec ec e2 d1 80 1f 5b fb c8 d2 e2 69 d9 f1 c8 34 46 c5 28 ed 39 9f 3e 0d 60 1e eb 3f e7 9f f2 31 60 ab e1 a7 4f 98 a2 2f 76 eb 5e 30 f4 2d 71 81 4f 02 d6 0d 7a c7 ad a2 1f 70 b7 78 5c ea 75 2f ca 7c 67 ab b9 b5 d7 6c 3b ec 0a 9d b4 92 ae 33 2d e1 2e f5 9d cb 49 7a 11 4e 1c 36 48 a7 77 59 7c 39 2e 7c e7 e3 6d f8 6c 65 b3 d5 de 5e df 6c 6d 6e af bc 88 12 8c f1 02 ad 7d 86 ce af 57 dc 5f 26 69 9c a5 a8 c9 Data Ascii: B)4iVio*q&$>mhG4QUVzb1~)<nx4-[h('KD`fsj2B~},zUT\|7h[i4F(9>`?1`O/v^0-qOzpx\u/\|gl;3-.IzN6HwY\|9.\|mle^lmn}W_&i
2024-07-29 18:33:55 UTC	16384	IN	Data Raw: d0 3c 68 c3 a2 85 cd 11 2c d5 a0 39 ea a4 87 79 47 79 d1 de 01 07 65 18 38 f6 72 b4 57 07 6e 6a dc 1d ba a5 7b 8d 57 c7 b5 e7 f9 f4 f3 2a b8 94 6d 5e 00 db 7c 75 78 d1 f1 80 31 e9 5d c0 37 48 fb ad c6 ee 94 5d b3 3b 34 7e c9 50 1b 7e 0d ff 18 41 2f fc f1 d7 db b6 a8 03 be 57 dd af a4 f1 42 ec c7 77 6c 93 e2 23 c5 ca d6 1f 51 5f d5 65 a2 ce d4 85 07 26 55 2b bd d9 0f 36 d9 2a a6 87 d9 14 ec 58 0d 62 d7 5e 64 c6 3a 90 b8 92 28 99 12 78 3d 8e 6e 85 d5 58 8e 05 53 e5 71 25 82 73 f5 fa 9d e9 21 d1 18 71 6f 28 41 e9 8e bb 64 19 96 fa c8 2b 66 1e 0a af 5d 20 3e bb 3d e8 00 b6 4d df c7 7f 3d 6d 64 60 4a 1c ee 05 21 e0 8f 5d bc fd 39 31 80 0f ed 2f de 78 ba 11 01 9e 38 af da a4 48 18 11 e1 d2 e2 b9 26 db 1b f0 d8 de 88 fc 62 15 0d ec a3 d5 da d0 2e 4b e9 b6 dc ae Data Ascii: <h,9yGye8rWnj{Wm^\|ux1]7H];4~P~A/WBwl#Q_e&U+6Xb^d:(x=nXSq%s!qo(Ad+f] >=M=md`J!]91/x8H&b.K
2024-07-29 18:33:55 UTC	16384	IN	Data Raw: aa 8f ab 0e 2e e0 35 cb d3 9e 23 48 7c f4 9f 8d 9e 19 d1 ef 3e a0 21 c0 ce ce 9b e1 4b ff c2 fb 88 11 fb a2 8f 88 5f 3f 72 d2 9e 8f 9c 24 19 de 61 c5 e0 ee 0e ff 4c f8 cf 72 67 a7 fc e5 56 17 93 c7 22 1b be 7d 7a 77 77 5a 56 f5 f8 a7 2a 26 20 d0 d7 13 e4 78 4f 05 65 0e 7f 82 ee 9f 31 eb 7b 8b 75 3c 8b a4 11 96 f8 d7 71 12 a0 e7 22 ce ba 58 61 02 ad 50 e7 56 c7 91 24 3c a0 88 16 c6 bd f0 55 2f 22 66 2e 77 f3 f3 12 e8 37 ef c6 a7 86 43 80 56 14 17 ac 70 39 a1 b7 2b 14 4c fc b7 1d c2 a2 a9 6b f1 c6 c5 89 71 e2 81 73 3f 1c 94 e6 7c de ee a2 22 34 1b 38 e7 6d d8 0b 68 7e c5 26 d6 a1 6f bf 6e f9 37 8e 5e 6a f7 02 8e e1 64 9e 70 a8 52 d9 a3 2b d8 1f 5e 85 62 97 5a 5d dc 27 59 8f 0b 9a 6c ab b6 cb cf 9d d2 02 54 b7 02 3a c1 61 cd 1c bd 16 ca 31 ba bc 18 2b b7 8d Data Ascii: .5#H\|>!K_?r$aLrgV"}zwwZV*& xOe1{u<q"XaPV$<U/"f.w7CVp9+Lkqs?\|"48mh~&on7^jdpR+^bZ]'YlT:a1+
2024-07-29 18:33:55 UTC	16384	IN	Data Raw: 7e 92 35 70 7a 90 35 7a 7a f0 8d 53 40 6d 7c ff 79 e0 7d de 78 32 6a d5 43 3e b4 b7 56 10 ae bd 71 78 f5 ef 3f 08 6c f5 1b c7 90 5c d4 f5 06 f2 17 2d 49 d4 f4 e6 43 6a f0 6c f7 82 7c 08 24 f9 30 93 84 92 25 a8 86 17 c6 37 b6 32 44 b9 e9 b1 28 23 29 75 13 e6 1d 4e 44 53 05 9c a6 42 9f ef 52 74 c4 c9 8c ac 40 7b a1 89 05 1e d4 25 96 94 ac 97 9b 33 6e 07 b3 d5 11 28 e7 a0 1a e9 8e 1b 72 0e 4a 9b cc c1 3b 6b 9a 45 56 98 81 18 9f 8b 11 52 62 9f 7d 24 1c 75 e4 66 60 3c 86 11 0f 12 07 88 b4 48 89 95 37 02 09 66 6f 35 fa da 73 23 93 58 05 b8 51 61 5f 89 5c 38 8e 97 df e1 c1 b6 f9 27 eb 59 9f 4c 2b bb d0 11 a6 64 24 b3 02 f2 dc df e4 26 1a 0a b5 17 85 07 d9 a0 17 68 cc ca 77 73 3d 5b f1 49 00 e6 18 8f 68 05 24 97 aa 6d eb 2e 2c 1d 66 e5 a0 1c 20 4d 8c 25 28 2c 83 Data Ascii: ~5pz5zzS@m\|y}x2jC>Vqx?l\-ICjl\|$0%72D(#)uNDSBRt@{%3n(rJ;kEVRb}$uf`<H7fo5s#XQa_\8'YL+d$&hws=[Ih$m.,f M%(,
2024-07-29 18:33:55 UTC	16384	IN	Data Raw: 99 2f da 77 b6 3f c7 11 6d b0 20 f4 4e 36 fc 78 52 c2 b7 99 01 db e6 9d af 1f 48 37 8b ba 14 7a 36 64 ec 9f 03 99 99 00 57 ad 27 05 72 83 e4 18 29 8b 44 f6 10 29 ab 44 24 31 6d 8d 91 95 41 6a 2c 03 08 d3 63 6c c9 10 f6 42 47 f7 da 41 2b 20 73 14 ad 6a 89 ed 1b 6d 84 d4 66 3e 8c fd ef 3c ae 65 f2 99 fd 8c 1c f9 b9 c5 67 bd 0c 4d 63 49 4d be 86 87 0e 8d 51 af 18 45 1c 8f fe 48 aa 21 35 8e 64 bc df f3 79 44 5f 94 7a 92 a7 11 dd 02 b4 e0 23 a1 ed f3 d0 09 fb a5 ca a6 db 9e bf 9e 39 eb 9e b2 49 d6 87 b2 38 c4 00 47 66 1b 80 5d 0d e3 4a 71 63 81 46 b6 db a5 b2 85 5d 19 2b 7b 6d df c9 d4 b4 b9 fd 0d 37 24 be f2 5f de 8f 51 d7 b9 01 c0 e6 fd a7 f7 fe cb 83 a8 a1 39 2f 76 e6 ad 15 84 5b 8c 01 5f fb 5f 1a c2 b6 6b 11 bd fb 3f 01 54 9e 7f 66 f5 46 9b 0e 83 bf a5 a5 Data Ascii: /w?m N6xRH7z6dW'r)D)D$1mAj,clBGA+ sjmf><egMcIMQEH!5dyD_z#9I8Gf]JqcF]+{m7$_Q9/v[__k?TfF
2024-07-29 18:33:55 UTC	2461	IN	Data Raw: 0c 4d de cb 47 19 e7 58 5f 9b d6 f4 28 9a 4a fc af ad af 4b 69 91 8f 8e 81 4b 89 40 a7 af 97 d3 e6 90 31 2e 27 06 be 55 2b a7 c1 41 79 3c 2e 27 8e 21 31 2f 27 4e 21 31 2d 27 4e 7c 20 b8 4b 69 33 1f 08 ec 52 da c8 07 02 bc 94 76 e3 03 31 5e 4a bb f4 81 da 28 a5 9d fb 40 e2 94 d2 2e 7c 20 8d 4a 69 67 be f5 a4 9c 76 85 0e ef 4a 69 d7 be f5 6d 39 ed 48 46 cb 1b 1f a7 35 eb 8b af 6d 67 bd 47 e1 f8 6e 17 e8 5e 61 df fc 5c a7 ef 5e ef 5b 99 e1 ee 78 dd ee fb c7 4f 1c c8 f9 c6 5f 6f 0d 8e 53 98 fc af ed 75 f8 bc ee be a0 78 82 18 17 70 3d 7a c0 f6 fa a3 7b ea 3e 77 0f dd b7 ee af ee 2b f7 9d 7b f0 3b 34 a2 6f 17 ee 4b 54 e2 cb 32 1d e4 de 7d ef 1f b4 a2 f3 18 78 be 17 1c 1b fa 3b ff a5 24 99 9e f9 6d f7 35 f2 59 df a3 d0 59 e9 30 7d d2 f7 b5 cf b4 de d9 0f b6 de Data Ascii: MGX_(JKiK@1.'U+Ay<.'!1/'N!1-'N\| Ki3Rv1^J(@.\| JigvJim9HF5mgGn^a\^[xO_oSuxp=z{>w+{;4oKT2}x;$m5YY0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49744	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:56 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:56 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 11019314 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Mon, 29 Jul 2024 18:33:56 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-07-29 18:33:56 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-07-29 18:33:56 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49745	13.107.246.45	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:56 UTC	433	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:56 UTC	798	IN	HTTP/1.1 200 OK Date: Mon, 29 Jul 2024 18:33:56 GMT Content-Type: application/x-javascript Content-Length: 116351 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 20 Jun 2024 02:13:44 GMT ETag: 0x8DC90CE9C53BCDF x-ms-request-id: 6c2f4af8-d01e-0070-677c-de0d1e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240729T183356Z-15c77d89844x9ltxwntebcafsc00000006v000000000nk1a x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-07-29 18:33:56 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec 7d 5b 5b db 48 b6 e8 fb fe 15 b6 a6 c7 2d c5 85 b1 0d 18 22 23 3c 24 21 3d cc 24 81 0d a4 7b 7a 88 87 4f d8 65 ac c4 96 3c ba 70 69 ec fd db cf 5a ab aa a4 92 2c 83 49 f7 3e e7 e1 4c 7f 1d ac 4b a9 ee b5 ee 97 cd 57 d5 ff aa bc aa 6c ac ff 5f e5 fc e2 f0 ec a2 72 f2 be 72 f1 d7 e3 b3 77 95 53 b8 fb b5 f2 e9 e4 e2 f8 ed d1 fa f5 60 a3 f8 ef 62 ec 45 95 91 37 e1 15 f8 bd 76 23 3e ac 04 7e 25 08 2b 9e 3f 08 c2 59 10 ba 31 8f 2a 53 f8 1b 7a ee a4 32 0a 83 69 25 1e f3 ca 2c 0c be f2 41 1c 55 26 5e 14 c3 47 d7 7c 12 dc 55 4c a8 2e 1c 56 4e dd 30 7e a8 1c 9f 5a 0d a8 9f 43 6d de 8d e7 c3 d7 83 60 f6 00 d7 e3 b8 e2 07 b1 37 e0 15 d7 1f 52 6d 13 b8 f1 23 5e 49 fc 21 0f 2b 77 63 6f 30 ae 7c f4 06 61 10 05 a3 b8 12 f2 01 f7 6e a1 91 Data Ascii: }[[H-"#<$!=${zOe<piZ,I>LKWl_rrwS`bE7v#>~%+?Y1*Sz2i%,AU&^G\|UL.VN0~ZCm`7Rm#^I!+wco0\|an
2024-07-29 18:33:56 UTC	16384	IN	Data Raw: 0d a6 d1 11 fa 1c a5 01 0a 5b 94 cd 52 c6 46 74 d3 39 25 b9 7f 35 c7 69 98 e2 f0 39 e4 be 20 51 ac 5f 38 0d a8 6c 12 e7 d2 21 0f 8b f4 60 66 b7 1b e9 bd c8 3e aa 1a df 6f 23 91 ab ae b3 9d 12 39 6d 96 6c c2 1f 17 ff 84 f0 a7 c0 5e a6 92 85 16 39 27 8a c0 d7 0d cc 3c f7 f9 d8 8f 5b 9d 37 47 26 7f 15 59 0b da a9 34 ee 91 b3 21 1c 8d 3c 27 ec 7a fb 09 85 42 a7 64 03 31 f3 2c a8 05 6d ad 37 b0 ba 11 1c 07 6f 63 24 7a 2a 9e c0 44 8c 1c cf 62 f0 b8 de d2 4c a2 2b a3 57 11 6d f9 0d 34 46 c4 62 de 86 83 df 32 6c 2e b3 75 0e eb ee 41 22 9c 1f 37 5c 12 96 74 3d 74 72 f2 36 36 32 25 ee 04 55 af 63 78 3a de 77 bb 63 ad 77 75 24 b9 a9 7f 63 e8 d4 04 d1 8f c8 6e 8b c6 6a 59 7e 51 35 7b d9 54 5d 67 4c 6e e8 08 7d 24 9c 79 b4 a5 16 ba 9d f4 dc 02 1d 87 a0 45 16 81 45 3a Data Ascii: [RFt9%5i9 Q_8l!`f>o#9ml^9'<[7G&Y4!<'zBd1,m7oc$z*DbL+Wm4Fb2l.uA"7\t=tr662%Ucx:wcwu$cnjY~Q5{T]gLn}$yEE:
2024-07-29 18:33:56 UTC	16384	IN	Data Raw: 42 29 a9 34 69 99 56 a3 cd 69 83 c3 6f ad 0d 06 be 1e 18 2a 71 26 24 3e ca 17 6d 68 13 47 34 51 9e 15 8a ac 0d 12 91 55 d3 11 d8 16 bf a2 56 d7 7a 02 f4 82 62 f8 0d f6 31 ff 7e c3 f3 29 3c 6e 86 a6 1e 78 de 1c e6 34 a4 2d b4 eb 08 5b 68 28 e4 27 ff 14 b8 4b 44 60 66 73 00 6a 32 8a 42 93 09 7e 92 0c 7d 2c 7a 55 96 54 86 01 98 c3 99 9b 7c f3 13 c4 37 68 e6 ee ec ec e2 d1 80 1f 5b fb c8 d2 e2 69 d9 f1 c8 34 46 c5 28 ed 39 9f 3e 0d 60 1e eb 3f e7 9f f2 31 60 ab e1 a7 4f 98 a2 2f 76 eb 5e 30 f4 2d 71 81 4f 02 d6 0d 7a c7 ad a2 1f 70 b7 78 5c ea 75 2f ca 7c 67 ab b9 b5 d7 6c 3b ec 0a 9d b4 92 ae 33 2d e1 2e f5 9d cb 49 7a 11 4e 1c 36 48 a7 77 59 7c 39 2e 7c e7 e3 6d f8 6c 65 b3 d5 de 5e df 6c 6d 6e af bc 88 12 8c f1 02 ad 7d 86 ce af 57 dc 5f 26 69 9c a5 a8 c9 Data Ascii: B)4iVio*q&$>mhG4QUVzb1~)<nx4-[h('KD`fsj2B~},zUT\|7h[i4F(9>`?1`O/v^0-qOzpx\u/\|gl;3-.IzN6HwY\|9.\|mle^lmn}W_&i
2024-07-29 18:33:57 UTC	16384	IN	Data Raw: d0 3c 68 c3 a2 85 cd 11 2c d5 a0 39 ea a4 87 79 47 79 d1 de 01 07 65 18 38 f6 72 b4 57 07 6e 6a dc 1d ba a5 7b 8d 57 c7 b5 e7 f9 f4 f3 2a b8 94 6d 5e 00 db 7c 75 78 d1 f1 80 31 e9 5d c0 37 48 fb ad c6 ee 94 5d b3 3b 34 7e c9 50 1b 7e 0d ff 18 41 2f fc f1 d7 db b6 a8 03 be 57 dd af a4 f1 42 ec c7 77 6c 93 e2 23 c5 ca d6 1f 51 5f d5 65 a2 ce d4 85 07 26 55 2b bd d9 0f 36 d9 2a a6 87 d9 14 ec 58 0d 62 d7 5e 64 c6 3a 90 b8 92 28 99 12 78 3d 8e 6e 85 d5 58 8e 05 53 e5 71 25 82 73 f5 fa 9d e9 21 d1 18 71 6f 28 41 e9 8e bb 64 19 96 fa c8 2b 66 1e 0a af 5d 20 3e bb 3d e8 00 b6 4d df c7 7f 3d 6d 64 60 4a 1c ee 05 21 e0 8f 5d bc fd 39 31 80 0f ed 2f de 78 ba 11 01 9e 38 af da a4 48 18 11 e1 d2 e2 b9 26 db 1b f0 d8 de 88 fc 62 15 0d ec a3 d5 da d0 2e 4b e9 b6 dc ae Data Ascii: <h,9yGye8rWnj{Wm^\|ux1]7H];4~P~A/WBwl#Q_e&U+6Xb^d:(x=nXSq%s!qo(Ad+f] >=M=md`J!]91/x8H&b.K
2024-07-29 18:33:57 UTC	16384	IN	Data Raw: aa 8f ab 0e 2e e0 35 cb d3 9e 23 48 7c f4 9f 8d 9e 19 d1 ef 3e a0 21 c0 ce ce 9b e1 4b ff c2 fb 88 11 fb a2 8f 88 5f 3f 72 d2 9e 8f 9c 24 19 de 61 c5 e0 ee 0e ff 4c f8 cf 72 67 a7 fc e5 56 17 93 c7 22 1b be 7d 7a 77 77 5a 56 f5 f8 a7 2a 26 20 d0 d7 13 e4 78 4f 05 65 0e 7f 82 ee 9f 31 eb 7b 8b 75 3c 8b a4 11 96 f8 d7 71 12 a0 e7 22 ce ba 58 61 02 ad 50 e7 56 c7 91 24 3c a0 88 16 c6 bd f0 55 2f 22 66 2e 77 f3 f3 12 e8 37 ef c6 a7 86 43 80 56 14 17 ac 70 39 a1 b7 2b 14 4c fc b7 1d c2 a2 a9 6b f1 c6 c5 89 71 e2 81 73 3f 1c 94 e6 7c de ee a2 22 34 1b 38 e7 6d d8 0b 68 7e c5 26 d6 a1 6f bf 6e f9 37 8e 5e 6a f7 02 8e e1 64 9e 70 a8 52 d9 a3 2b d8 1f 5e 85 62 97 5a 5d dc 27 59 8f 0b 9a 6c ab b6 cb cf 9d d2 02 54 b7 02 3a c1 61 cd 1c bd 16 ca 31 ba bc 18 2b b7 8d Data Ascii: .5#H\|>!K_?r$aLrgV"}zwwZV*& xOe1{u<q"XaPV$<U/"f.w7CVp9+Lkqs?\|"48mh~&on7^jdpR+^bZ]'YlT:a1+
2024-07-29 18:33:57 UTC	16384	IN	Data Raw: 7e 92 35 70 7a 90 35 7a 7a f0 8d 53 40 6d 7c ff 79 e0 7d de 78 32 6a d5 43 3e b4 b7 56 10 ae bd 71 78 f5 ef 3f 08 6c f5 1b c7 90 5c d4 f5 06 f2 17 2d 49 d4 f4 e6 43 6a f0 6c f7 82 7c 08 24 f9 30 93 84 92 25 a8 86 17 c6 37 b6 32 44 b9 e9 b1 28 23 29 75 13 e6 1d 4e 44 53 05 9c a6 42 9f ef 52 74 c4 c9 8c ac 40 7b a1 89 05 1e d4 25 96 94 ac 97 9b 33 6e 07 b3 d5 11 28 e7 a0 1a e9 8e 1b 72 0e 4a 9b cc c1 3b 6b 9a 45 56 98 81 18 9f 8b 11 52 62 9f 7d 24 1c 75 e4 66 60 3c 86 11 0f 12 07 88 b4 48 89 95 37 02 09 66 6f 35 fa da 73 23 93 58 05 b8 51 61 5f 89 5c 38 8e 97 df e1 c1 b6 f9 27 eb 59 9f 4c 2b bb d0 11 a6 64 24 b3 02 f2 dc df e4 26 1a 0a b5 17 85 07 d9 a0 17 68 cc ca 77 73 3d 5b f1 49 00 e6 18 8f 68 05 24 97 aa 6d eb 2e 2c 1d 66 e5 a0 1c 20 4d 8c 25 28 2c 83 Data Ascii: ~5pz5zzS@m\|y}x2jC>Vqx?l\-ICjl\|$0%72D(#)uNDSBRt@{%3n(rJ;kEVRb}$uf`<H7fo5s#XQa_\8'YL+d$&hws=[Ih$m.,f M%(,
2024-07-29 18:33:57 UTC	16384	IN	Data Raw: 99 2f da 77 b6 3f c7 11 6d b0 20 f4 4e 36 fc 78 52 c2 b7 99 01 db e6 9d af 1f 48 37 8b ba 14 7a 36 64 ec 9f 03 99 99 00 57 ad 27 05 72 83 e4 18 29 8b 44 f6 10 29 ab 44 24 31 6d 8d 91 95 41 6a 2c 03 08 d3 63 6c c9 10 f6 42 47 f7 da 41 2b 20 73 14 ad 6a 89 ed 1b 6d 84 d4 66 3e 8c fd ef 3c ae 65 f2 99 fd 8c 1c f9 b9 c5 67 bd 0c 4d 63 49 4d be 86 87 0e 8d 51 af 18 45 1c 8f fe 48 aa 21 35 8e 64 bc df f3 79 44 5f 94 7a 92 a7 11 dd 02 b4 e0 23 a1 ed f3 d0 09 fb a5 ca a6 db 9e bf 9e 39 eb 9e b2 49 d6 87 b2 38 c4 00 47 66 1b 80 5d 0d e3 4a 71 63 81 46 b6 db a5 b2 85 5d 19 2b 7b 6d df c9 d4 b4 b9 fd 0d 37 24 be f2 5f de 8f 51 d7 b9 01 c0 e6 fd a7 f7 fe cb 83 a8 a1 39 2f 76 e6 ad 15 84 5b 8c 01 5f fb 5f 1a c2 b6 6b 11 bd fb 3f 01 54 9e 7f 66 f5 46 9b 0e 83 bf a5 a5 Data Ascii: /w?m N6xRH7z6dW'r)D)D$1mAj,clBGA+ sjmf><egMcIMQEH!5dyD_z#9I8Gf]JqcF]+{m7$_Q9/v[__k?TfF
2024-07-29 18:33:57 UTC	2461	IN	Data Raw: 0c 4d de cb 47 19 e7 58 5f 9b d6 f4 28 9a 4a fc af ad af 4b 69 91 8f 8e 81 4b 89 40 a7 af 97 d3 e6 90 31 2e 27 06 be 55 2b a7 c1 41 79 3c 2e 27 8e 21 31 2f 27 4e 21 31 2d 27 4e 7c 20 b8 4b 69 33 1f 08 ec 52 da c8 07 02 bc 94 76 e3 03 31 5e 4a bb f4 81 da 28 a5 9d fb 40 e2 94 d2 2e 7c 20 8d 4a 69 67 be f5 a4 9c 76 85 0e ef 4a 69 d7 be f5 6d 39 ed 48 46 cb 1b 1f a7 35 eb 8b af 6d 67 bd 47 e1 f8 6e 17 e8 5e 61 df fc 5c a7 ef 5e ef 5b 99 e1 ee 78 dd ee fb c7 4f 1c c8 f9 c6 5f 6f 0d 8e 53 98 fc af ed 75 f8 bc ee be a0 78 82 18 17 70 3d 7a c0 f6 fa a3 7b ea 3e 77 0f dd b7 ee af ee 2b f7 9d 7b f0 3b 34 a2 6f 17 ee 4b 54 e2 cb 32 1d e4 de 7d ef 1f b4 a2 f3 18 78 be 17 1c 1b fa 3b ff a5 24 99 9e f9 6d f7 35 f2 59 df a3 d0 59 e9 30 7d d2 f7 b5 cf b4 de d9 0f b6 de Data Ascii: MGX_(JKiK@1.'U+Ay<.'!1/'N!1-'N\| Ki3Rv1^J(@.\| JigvJim9HF5mgGn^a\^[xO_oSuxp=z{>w+{;4oKT2}x;$m5YY0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49748	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:56 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:57 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 11019120 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 29 Jul 2024 18:33:57 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-07-29 18:33:57 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49747	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:56 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:57 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 11019160 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Mon, 29 Jul 2024 18:33:57 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-07-29 18:33:57 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49746	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:56 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:57 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3277486 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:33:57 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-07-29 18:33:57 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-07-29 18:33:57 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-07-29 18:33:57 UTC	16383	IN	Data Raw: 32 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 Data Ascii: 290f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdc
2024-07-29 18:33:57 UTC	16383	IN	Data Raw: 73 74 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d Data Ascii: strict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-
2024-07-29 18:33:57 UTC	16383	IN	Data Raw: 65 4d 61 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 Data Ascii: eMarks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.ma
2024-07-29 18:33:57 UTC	5	IN	Data Raw: 74 75 72 6e 20 Data Ascii: turn
2024-07-29 18:33:57 UTC	16383	IN	Data Raw: 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c 2d 31 Data Ascii: r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",-1
2024-07-29 18:33:57 UTC	15466	IN	Data Raw: 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 6e Data Ascii: ance_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49750	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:57 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:57 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 10933142 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Mon, 29 Jul 2024 18:33:57 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-07-29 18:33:57 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49751	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:58 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:58 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 11019121 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Mon, 29 Jul 2024 18:33:58 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-07-29 18:33:58 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49752	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:58 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:58 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 11019161 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Mon, 29 Jul 2024 18:33:58 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-07-29 18:33:58 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49753	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:58 UTC	441	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:58 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3277487 Cache-Control: public, max-age=31536000 Content-MD5: FXzSZAYOwKp2jFj6XjvNRQ== Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:33:58 GMT Etag: 0x8DC90CF0D8CB039 Last-Modified: Thu, 20 Jun 2024 02:16:53 GMT Server: ECAcc (lhc/7968) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 736bdcfa-101e-003a-3f16-c47522000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-07-29 18:33:58 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-07-29 18:33:58 UTC	1	IN	Data Raw: 75 Data Ascii: u
2024-07-29 18:33:58 UTC	16383	IN	Data Raw: 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 30 Data Ascii: 200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u20
2024-07-29 18:33:58 UTC	16383	IN	Data Raw: 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 61 Data Ascii: 90f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdca
2024-07-29 18:33:58 UTC	16383	IN	Data Raw: 74 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 33 29 2c 74 2e 43 63 3d 72 28 38 38 34 29 2c 74 2e 43 66 3d 72 28 31 33 38 30 29 2c 74 2e 50 3d 72 28 37 38 33 29 2c 74 2e 5a 3d 72 28 38 38 35 29 7d 2c 31 33 38 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c Data Ascii: trict";t.Any=r(883),t.Cc=r(884),t.Cf=r(1380),t.P=r(783),t.Z=r(885)},1380:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\
2024-07-29 18:33:58 UTC	16383	IN	Data Raw: 4d 61 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 Data Ascii: Marks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.mar
2024-07-29 18:33:58 UTC	16383	IN	Data Raw: 75 72 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 Data Ascii: urn r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a
2024-07-29 18:33:58 UTC	5	IN	Data Raw: 22 62 61 6c 61 Data Ascii: "bala
2024-07-29 18:33:58 UTC	15465	IN	Data Raw: 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 6e 73 Data Ascii: nce_pairs","emphasis","text_collapse"]}}}},1427:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="ins

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49754	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:33:58 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:33:58 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 10933143 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Mon, 29 Jul 2024 18:33:58 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-07-29 18:33:58 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49758	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:24 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=25mzNeVM9CySyfd&MD=xlnUEtw+ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-07-29 18:34:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: c993e23d-8d36-4083-a068-f94e6bcf795b MS-RequestId: 3e46a83a-2e7f-42c0-a22f-c4bc28ae293b MS-CV: PQmXzorHDkazw1EI.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 29 Jul 2024 18:34:24 GMT Connection: close Content-Length: 30005
2024-07-29 18:34:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-07-29 18:34:24 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49762	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:38 UTC	670	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:34:39 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 11019306 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Mon, 29 Jul 2024 18:34:39 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-07-29 18:34:39 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49763	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:38 UTC	664	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:34:39 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 11019484 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Mon, 29 Jul 2024 18:34:39 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-07-29 18:34:39 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49766	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:40 UTC	419	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:34:40 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 11019485 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Mon, 29 Jul 2024 18:34:40 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-07-29 18:34:40 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49768	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:40 UTC	612	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpredirect_b53d3145d80ad77b43cb.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:34:40 UTC	748	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3273198 Cache-Control: public, max-age=31536000 Content-MD5: pMEEl61smUMRFcP7JZ+kmw== Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:34:40 GMT Etag: 0x8DC90CF0CDBDA9D Last-Modified: Thu, 20 Jun 2024 02:16:52 GMT Server: ECAcc (lhc/78A6) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cd1ec899-f01e-0060-5a20-c41804000000 x-ms-version: 2009-09-19 Content-Length: 2976 Connection: close
2024-07-29 18:34:40 UTC	2976	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49767	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:40 UTC	425	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:34:40 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 11019307 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Mon, 29 Jul 2024 18:34:40 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-07-29 18:34:40 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49770	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:41 UTC	427	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpredirect_b53d3145d80ad77b43cb.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:34:41 UTC	748	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3273199 Cache-Control: public, max-age=31536000 Content-MD5: pMEEl61smUMRFcP7JZ+kmw== Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:34:41 GMT Etag: 0x8DC90CF0CDBDA9D Last-Modified: Thu, 20 Jun 2024 02:16:52 GMT Server: ECAcc (lhc/78A6) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cd1ec899-f01e-0060-5a20-c41804000000 x-ms-version: 2009-09-19 Content-Length: 2976 Connection: close
2024-07-29 18:34:41 UTC	2976	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49772	170.148.240.44	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:43 UTC	1709	OUT	GET /adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com&mkt=&lc= HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:34:44 UTC	381	IN	HTTP/1.1 200 OK Cache-Control: no-cache,no-store Content-Length: 42722 Content-Type: text/html; charset=utf-8 Expires: -1 pragma: no-cache x-frame-options: DENY Date: Mon, 29 Jul 2024 18:34:44 GMT Vary: Accept-Encoding Connection: close Set-Cookie: ppnet_4651=!kmgS094A8t29hoeZhJMQ0PSsXfzmWcvxBC7bseJyPY+L+xm1Y4JHtdzI/6bnartEXGNi8RxHbJ7biw==; path=/; Httponly; Secure
2024-07-29 18:34:44 UTC	4150	IN	Data Raw: 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 31 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f Data Ascii: <!DOCTYPE html><html lang="en-US"> <head> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=1"/> <meta http-equiv="content-type" co
2024-07-29 18:34:44 UTC	8717	IN	Data Raw: 22 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 49 6e 70 75 74 55 74 69 6c 2e 73 68 6f 77 48 69 6e 74 28 6e 6f 64 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 7d 3b 0d 0a 49 6e 70 75 74 55 74 69 6c 2e 66 6f 63 75 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 69 6e 70 75 74 46 69 65 6c 64 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6e 6f 64 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 6e 70 75 74 46 69 65 6c 64 29 3b 0d 0a 20 20 20 20 69 66 20 28 6e 6f 64 65 29 20 6e 6f 64 65 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 3b 0d 0a 49 6e 70 75 74 55 74 69 6c 2e 68 61 73 43 6c 61 73 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6e 6f 64 65 2c 20 63 6c 73 4e Data Ascii: ""); InputUtil.showHint(node); } } }};InputUtil.focus = function (inputField) { var node = document.getElementById(inputField); if (node) node.focus();};InputUtil.hasClass = function(node, clsN
2024-07-29 18:34:44 UTC	16031	IN	Data Raw: 6e 2d 6e 61 6d 65 3a 20 66 5f 66 61 64 65 47 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 5f 66 61 64 65 47 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 32 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 32 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 32 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 32 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 Data Ascii: n-name: f_fadeG; -moz-animation-name: f_fadeG; animation-duration: 1.2s; -o-animation-duration: 1.2s; -ms-animation-duration: 1.2s; -webkit-animation-duration: 1.2s; -moz-animat
2024-07-29 18:34:44 UTC	7300	IN	Data Raw: 0a 73 63 72 69 70 74 6c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 20 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 29 3b 0a 73 63 72 69 70 74 6c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 2c 20 66 61 6c 73 65 29 3b 0a 0a 2f 2f 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 63 72 69 70 74 6c 65 29 3b 0a 2f 2f 20 73 75 63 63 65 73 73 20 65 76 65 6e 74 20 0a 73 63 72 69 70 74 6c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 63 6f 6e 73 74 20 73 6d 73 4d 66 61 50 61 67 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 6d 73 2d 6d 66 61 2d 70 61 67 65 22 29 0a 09 Data Ascii: scriptle.setAttribute("type", "text/javascript");scriptle.setAttribute("async", false);//document.body.appendChild(scriptle);// success event scriptle.addEventListener("load", function(){const smsMfaPage = document.getElementById("sms-mfa-page")
2024-07-29 18:34:44 UTC	6524	IN	Data Raw: 20 20 7d 0a 20 20 20 20 7d 0a 7d 3b 0a 76 61 72 20 70 72 6f 62 65 55 72 6c 20 3d 20 22 68 74 74 70 73 3a 2f 2f 22 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 20 2b 20 4a 50 4d 43 5f 41 44 46 53 5f 50 52 4f 42 45 3b 0a 5f 72 65 71 75 65 73 74 2e 6f 70 65 6e 28 22 47 45 54 22 2c 20 70 72 6f 62 65 55 72 6c 2c 20 74 72 75 65 29 3b 0a 5f 72 65 71 75 65 73 74 2e 73 65 6e 64 28 29 3b 0a 76 61 72 20 6f 70 65 6e 69 6e 67 4d 65 73 73 61 67 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6f 70 65 6e 69 6e 67 4d 65 73 73 61 67 65 27 29 3b 0a 69 66 20 28 6f 70 65 6e 69 6e 67 4d 65 73 73 61 67 65 29 20 7b 0a 20 20 20 20 2f 2f 20 6f 70 65 6e 69 6e 67 4d 65 73 73 61 67 65 20 65 6c 65 6d 65 6e 74 20 69 73 20 Data Ascii: } }};var probeUrl = "https://" + window.location.host + JPMC_ADFS_PROBE;_request.open("GET", probeUrl, true);_request.send();var openingMessage = document.getElementById('openingMessage');if (openingMessage) { // openingMessage element is

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49771	170.148.240.44	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:44 UTC	1732	OUT	GET /adfs/portal/css/style.css?id=5240DC5436BD57B06CFF8418047FDE884DB6C552D95D488B4D406966173A0556 HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!kmgS094A8t29hoeZhJMQ0PSsXfzmWcvxBC7bseJyPY+L+xm1Y4JHtdzI/6bnartEXGNi8RxHbJ7biw==
2024-07-29 18:34:44 UTC	258	IN	HTTP/1.1 200 OK Content-Length: 128920 Content-Type: text/css Expires: Wed, 28 Aug 2024 18:34:44 GMT ETag: 5240DC5436BD57B06CFF8418047FDE884DB6C552D95D488B4D406966173A0556 Date: Mon, 29 Jul 2024 18:34:43 GMT Vary: Accept-Encoding Connection: close
2024-07-29 18:34:44 UTC	4098	IN	Data Raw: ef bb bf 2a 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0a 7d 0a 0a 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4f 70 65 6e 2d 53 61 6e 73 2d 4a 50 4d 43 22 2c 20 22 4f 70 65 6e 20 53 61 6e 73 22 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 22 53 65 Data Ascii: * { margin: 0px; padding: 0px;}html, body { height: 100%; width: 100%; background-color: #ffffff; color: #000000; font-weight: normal; font-family: "Open-Sans-JPMC", "Open Sans", -apple-system, BlinkMacSystemFont, "Se
2024-07-29 18:34:44 UTC	7300	IN	Data Raw: 66 66 66 66 66 66 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 34 35 31 37 32 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 31 32 34 39 36 38 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 33 35 37 31 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 38 30 70 78 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 70 78 20 32 30 70 78 20 36 70 78 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d Data Ascii: ffffff; background-color: #145172; border-color: #124968; border-radius: .3571rem; min-width: 80px; width: auto; height: 30px; padding: 4px 20px 6px 20px; border-style: solid; border-
2024-07-29 18:34:44 UTC	14571	IN	Data Raw: 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 31 62 37 30 39 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 31 62 37 30 39 65 2c 30 20 30 20 30 20 31 70 78 20 23 31 62 37 30 39 65 2c 30 20 30 20 30 20 31 70 78 20 23 31 62 37 30 39 65 2c 30 20 30 20 30 20 31 70 78 20 23 31 62 37 30 39 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 23 72 65 67 75 6c 61 72 56 69 65 77 20 73 70 61 6e 2e 73 75 62 6d 69 74 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 73 75 62 6d 69 74 27 5d 20 7b 0a 20 20 20 20 20 20 20 20 66 Data Ascii: background-color: #fff; outline: 0; border-color: #1b709e !important; box-shadow: 0 0 0 1px #1b709e,0 0 0 1px #1b709e,0 0 0 1px #1b709e,0 0 0 1px #1b709e; } #regularView span.submit, input[type='submit'] { f
2024-07-29 18:34:44 UTC	5840	IN	Data Raw: 37 62 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 63 6c 61 73 73 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 63 6c 61 73 73 5d 29 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 Data Ascii: 7b; text-decoration: underline; } a:not([href]):not([class]) { color: inherit; text-decoration: none; } a:not([href]):not([class]):hover { color: inherit; text-decoration: none;
2024-07-29 18:34:44 UTC	1460	IN	Data Raw: 30 20 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 33 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 35 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 34 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 35 20 7b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 34 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 31 2e 36 36 36 36 36 36 36 36 36 37 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 36 Data Ascii: 0 16.6666666667%; max-width: 16.6666666667%;}.col-3 { flex: 0 0 25%; max-width: 25%;}.col-4 { flex: 0 0 33.3333333333%; max-width: 33.3333333333%;}.col-5 { flex: 0 0 41.6666666667%; max-width: 41.6666666667%;}.col-6
2024-07-29 18:34:44 UTC	16384	IN	Data Raw: 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 74 61 62 6c 65 20 74 62 6f 64 79 20 2b 20 74 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 3b 0a 20 20 20 20 7d 0a 0a 2e 74 61 62 6c 65 2d 73 6d 20 74 68 2c 0a 2e 74 61 62 6c 65 2d 73 6d 20 74 64 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 33 72 65 6d 3b 0a 7d 0a 0a 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 3b 0a 7d 0a 0a 20 20 20 20 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 68 2c 0a 20 20 20 20 2e 74 61 62 6c Data Ascii: border-bottom: 2px solid #dee2e6; } .table tbody + tbody { border-top: 2px solid #dee2e6; }.table-sm th,.table-sm td { padding: 0.3rem;}.table-bordered { border: 1px solid #dee2e6;} .table-bordered th, .tabl
2024-07-29 18:34:44 UTC	5458	IN	Data Raw: 2d 73 74 61 72 74 3b 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 20 20 20 20 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 3e 20 2e 62 74 6e 2c 0a 20 20 20 20 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 3e 20 2e 62 74 6e 2d 67 72 6f 75 70 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 3e 20 2e 62 74 6e 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 2c 0a 20 20 20 20 20 20 20 20 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 3e 20 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 20 7b 0a 20 Data Ascii: -start; justify-content: center;} .btn-group-vertical > .btn, .btn-group-vertical > .btn-group { width: 100%; } .btn-group-vertical > .btn:not(:first-child), .btn-group-vertical > .btn-group:not(:first-child) {
2024-07-29 18:34:44 UTC	16384	IN	Data Raw: 6e 74 61 6c 2d 73 6d 20 3e 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 73 6d 20 3e 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f Data Ascii: ntal-sm > .list-group-item:last-child { border-top-right-radius: 0; border-bottom-left-radius: 0; } .list-group-horizontal-sm > .list-group-item.active { margin-top: 0; } .list-group-ho
2024-07-29 18:34:44 UTC	16384	IN	Data Raw: 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6d 64 2d 62 61 73 65 6c 69 6e 65 20 7b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 62 61 73 65 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6d 64 2d 73 74 72 65 74 63 68 20 7b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 73 74 72 65 74 63 68 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 7d 0a 0a 2e 75 73 65 72 2d 73 65 6c 65 63 74 2d 61 6c 6c 20 7b 0a 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 61 6c 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 75 73 65 72 Data Ascii: align-self: center !important; } .align-self-md-baseline { align-self: baseline !important; } .align-self-md-stretch { align-self: stretch !important; }}.user-select-all { user-select: all !important;}.user
2024-07-29 18:34:44 UTC	16384	IN	Data Raw: 6c 2e 74 6f 67 67 6c 65 5f 66 69 6c 74 65 72 3a 3a 61 66 74 65 72 2c 0a 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 20 2b 20 2e 74 6f 67 67 6c 65 5f 66 69 6c 74 65 72 3a 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 2e 30 36 32 35 72 65 6d 20 73 6f 6c 69 64 20 23 30 65 35 39 61 34 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 37 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 Data Ascii: l.toggle_filter::after, input[type=radio] + .toggle_filter::after { border: 0.0625rem solid #0e59a4; border-radius: 0.75rem; content: ""; display: inline-block; height: 1rem; position: absolute;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49774	170.148.240.44	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:45 UTC	1657	OUT	GET /adfs/fs/federationserverservice.asmx HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!kmgS094A8t29hoeZhJMQ0PSsXfzmWcvxBC7bseJyPY+L+xm1Y4JHtdzI/6bnartEXGNi8RxHbJ7biw==
2024-07-29 18:34:45 UTC	198	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/html; charset=us-ascii Date: Mon, 29 Jul 2024 18:34:45 GMT X-Cnection: close Content-Length: 326 Vary: Accept-Encoding Connection: close
2024-07-29 18:34:45 UTC	326	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 32 3e 0d 0a 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Service Unavailable</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Service Unavailable</h2><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49773	170.148.240.44	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:45 UTC	1656	OUT	GET /adfs/portal/script/mfaotpsms.js HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!kmgS094A8t29hoeZhJMQ0PSsXfzmWcvxBC7bseJyPY+L+xm1Y4JHtdzI/6bnartEXGNi8RxHbJ7biw==
2024-07-29 18:34:45 UTC	264	IN	HTTP/1.1 200 OK Content-Length: 26878 Content-Type: text/javascript Expires: Wed, 28 Aug 2024 18:34:45 GMT ETag: F567E03F667002B993D79E5D13534573B3B3A6E0511A7CD29BE0F792C520E857 Date: Mon, 29 Jul 2024 18:34:45 GMT Vary: Accept-Encoding Connection: close
2024-07-29 18:34:45 UTC	16109	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 53 4d 53 4f 54 50 4c 61 79 6f 75 74 28 29 20 7b 0a 20 20 20 20 2f 2f 20 48 69 64 65 20 61 75 74 68 4f 70 74 69 6f 6e 73 20 6f 6e 63 65 20 70 6c 75 67 69 6e 20 69 73 20 73 65 6c 65 63 74 65 64 2e 0a 20 20 20 20 69 66 28 61 75 74 68 4f 70 74 69 6f 6e 73 29 20 7b 0a 09 61 75 74 68 4f 70 74 69 6f 6e 73 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2f 2f 20 72 65 6d 6f 76 65 20 66 75 6c 6c 50 61 67 65 20 64 69 76 0a 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 66 75 6c 6c 50 61 67 65 22 29 2e 72 65 6d 6f 76 65 28 29 0a 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 Data Ascii: function SMSOTPLayout() { // Hide authOptions once plugin is selected. if(authOptions) {authOptions.style.display = "none"; } // remove fullPage div document.querySelector("#fullPage").remove() document.body.style.setProperty("
2024-07-29 18:34:46 UTC	10769	IN	Data Raw: 20 75 6c 31 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 69 34 29 0a 0a 20 20 20 20 63 6f 6e 73 74 20 70 32 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 70 27 29 0a 20 20 20 20 63 6f 6e 73 74 20 70 33 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 70 27 29 0a 20 20 20 20 63 6f 6e 73 74 20 70 34 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 70 27 29 0a 0a 20 20 20 20 70 32 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 22 6d 74 2d 34 20 66 61 71 2d 6d 61 72 67 69 6e 2d 68 65 6c 70 65 72 22 0a 20 20 20 20 70 33 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 66 61 71 2d 6d 61 72 67 69 6e 2d 68 65 6c 70 65 72 27 0a 20 20 20 20 70 34 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 Data Ascii: ul1.appendChild(li4) const p2 = document.createElement('p') const p3 = document.createElement('p') const p4 = document.createElement('p') p2.className = "mt-4 faq-margin-helper" p3.className = 'faq-margin-helper' p4.className =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49776	170.148.240.44	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:46 UTC	1696	OUT	GET /favicon.ico HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!kmgS094A8t29hoeZhJMQ0PSsXfzmWcvxBC7bseJyPY+L+xm1Y4JHtdzI/6bnartEXGNi8RxHbJ7biw==
2024-07-29 18:34:48 UTC	188	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Date: Mon, 29 Jul 2024 18:34:46 GMT X-Cnection: close Content-Length: 315 Vary: Accept-Encoding Connection: close
2024-07-29 18:34:48 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49777	170.148.240.44	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:34:46 UTC	480	OUT	GET /adfs/portal/script/mfaotpsms.js HTTP/1.1 Host: idag2.jpmorganchase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ppnet_4651=!kmgS094A8t29hoeZhJMQ0PSsXfzmWcvxBC7bseJyPY+L+xm1Y4JHtdzI/6bnartEXGNi8RxHbJ7biw==
2024-07-29 18:34:48 UTC	305	IN	HTTP/1.1 200 OK Content-Type: text/javascript ETag: F567E03F667002B993D79E5D13534573B3B3A6E0511A7CD29BE0F792C520E857 Vary: Accept-Encoding Accept-Ranges: bytes Connection: close Date: Mon, 29 Jul 2024 18:34:47 GMT Expires: Wed, 28 Aug 2024 18:34:46 GMT Age: 2 Content-Length: 26878
2024-07-29 18:34:48 UTC	2920	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 53 4d 53 4f 54 50 4c 61 79 6f 75 74 28 29 20 7b 0a 20 20 20 20 2f 2f 20 48 69 64 65 20 61 75 74 68 4f 70 74 69 6f 6e 73 20 6f 6e 63 65 20 70 6c 75 67 69 6e 20 69 73 20 73 65 6c 65 63 74 65 64 2e 0a 20 20 20 20 69 66 28 61 75 74 68 4f 70 74 69 6f 6e 73 29 20 7b 0a 09 61 75 74 68 4f 70 74 69 6f 6e 73 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2f 2f 20 72 65 6d 6f 76 65 20 66 75 6c 6c 50 61 67 65 20 64 69 76 0a 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 66 75 6c 6c 50 61 67 65 22 29 2e 72 65 6d 6f 76 65 28 29 0a 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 Data Ascii: function SMSOTPLayout() { // Hide authOptions once plugin is selected. if(authOptions) {authOptions.style.display = "none"; } // remove fullPage div document.querySelector("#fullPage").remove() document.body.style.setProperty("
2024-07-29 18:34:48 UTC	4380	IN	Data Raw: 2e 37 35 2d 31 2e 38 2c 32 2e 36 31 2c 32 2e 36 31 2c 30 2c 30 2c 31 2c 31 2e 38 39 2d 2e 37 32 2c 33 2e 34 32 2c 33 2e 34 32 2c 30 2c 30 2c 31 2c 31 2e 32 2e 32 31 2c 33 2c 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 2e 38 36 2c 31 2e 35 37 2c 31 2e 35 37 2c 30 2c 30 2c 30 2c 2e 33 39 2d 2e 38 38 68 2e 33 31 76 32 2e 36 34 68 2d 2e 33 31 61 33 2e 35 2c 33 2e 35 2c 30 2c 30 2c 30 2d 31 2d 31 2e 38 2c 32 2e 33 39 2c 32 2e 33 39 2c 30 2c 30 2c 30 2d 31 2e 36 36 2d 2e 36 36 2c 31 2e 36 37 2c 31 2e 36 37 2c 30 2c 30 2c 30 2d 31 2e 33 32 2e 34 38 41 31 2e 35 39 2c 31 2e 35 39 2c 30 2c 30 2c 30 2c 31 34 36 2e 31 2c 31 30 61 31 2e 35 31 2c 31 2e 35 31 2c 30 2c 30 2c 30 2c 2e 35 33 2c 31 2e 31 37 2c 37 2e 32 35 2c 37 2e 32 35 2c 30 2c 30 2c 30 2c 31 2e 38 38 2c 31 2e 31 Data Ascii: .75-1.8,2.61,2.61,0,0,1,1.89-.72,3.42,3.42,0,0,1,1.2.21,3,3,0,0,1,1.16.86,1.57,1.57,0,0,0,.39-.88h.31v2.64h-.31a3.5,3.5,0,0,0-1-1.8,2.39,2.39,0,0,0-1.66-.66,1.67,1.67,0,0,0-1.32.48A1.59,1.59,0,0,0,146.1,10a1.51,1.51,0,0,0,.53,1.17,7.25,7.25,0,0,0,1.88,1.1
2024-07-29 18:34:48 UTC	2920	IN	Data Raw: 2e 38 32 2c 30 2c 30 2c 30 2d 31 2d 33 2e 36 31 2c 33 2e 37 34 2c 33 2e 37 34 2c 30 2c 30 2c 30 2d 35 2e 35 36 2c 30 41 35 2e 37 37 2c 35 2e 37 37 2c 30 2c 30 2c 30 2c 34 35 2e 37 37 2c 31 33 2e 33 34 5a 6d 2d 31 2e 37 31 2d 2e 30 35 61 34 2e 38 33 2c 34 2e 38 33 2c 30 2c 30 2c 31 2c 31 2e 35 35 2d 33 2e 37 35 2c 35 2e 35 33 2c 35 2e 35 33 2c 30 2c 30 2c 31 2c 33 2e 38 37 2d 31 2e 34 31 2c 35 2e 36 36 2c 35 2e 36 36 2c 30 2c 30 2c 31 2c 33 2e 39 31 2c 31 2e 34 41 34 2e 38 36 2c 34 2e 38 36 2c 30 2c 30 2c 31 2c 35 35 2c 31 33 2e 33 34 61 35 2c 35 2c 30 2c 30 2c 31 2d 31 2e 35 2c 33 2e 37 39 2c 36 2e 30 35 2c 36 2e 30 35 2c 30 2c 30 2c 31 2d 37 2e 38 37 2c 30 41 35 2e 30 36 2c 35 2e 30 36 2c 30 2c 30 2c 31 2c 34 34 2e 30 36 2c 31 33 2e 32 39 5a 6d 2d 39 2e Data Ascii: .82,0,0,0-1-3.61,3.74,3.74,0,0,0-5.56,0A5.77,5.77,0,0,0,45.77,13.34Zm-1.71-.05a4.83,4.83,0,0,1,1.55-3.75,5.53,5.53,0,0,1,3.87-1.41,5.66,5.66,0,0,1,3.91,1.4A4.86,4.86,0,0,1,55,13.34a5,5,0,0,1-1.5,3.79,6.05,6.05,0,0,1-7.87,0A5.06,5.06,0,0,1,44.06,13.29Zm-9.
2024-07-29 18:34:48 UTC	14600	IN	Data Raw: 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6d 66 61 47 72 65 65 74 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 27 29 2e 72 65 6d 6f 76 65 28 29 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 68 65 6c 70 27 29 2e 72 65 6d 6f 76 65 28 29 0a 20 20 20 20 2f 2f 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 67 75 6c 61 72 56 69 65 77 22 29 2e 69 64 20 3d 20 22 22 0a 7d 0a 0a 6c 65 74 20 6e 6f 6e 4d 6f 64 61 6c 4e 6f 64 65 73 3b 0a 66 75 6e 63 74 69 6f 6e 20 6f 70 65 6e 43 6f 6e 74 61 63 74 4e 75 6d 62 65 72 73 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 75 70 64 61 74 65 43 6f 6e 74 61 63 74 4f 75 74 65 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 Data Ascii: document.getElementById('mfaGreetingDescription').remove() document.getElementById('help').remove() // document.getElementById("regularView").id = ""}let nonModalNodes;function openContactNumbers() { const updateContactOuter = document.c
2024-07-29 18:34:48 UTC	2058	IN	Data Raw: 74 74 6f 6e 22 29 2e 66 6f 63 75 73 28 29 0a 7d 0a 0a 2f 2f 20 4d 6f 64 61 6c 20 68 65 6c 70 65 72 20 66 75 6e 63 74 69 6f 6e 73 0a 66 75 6e 63 74 69 6f 6e 20 62 61 63 6b 54 6f 46 61 71 28 29 20 7b 0a 20 20 20 20 63 68 61 6e 67 65 4d 6f 64 61 6c 42 6f 64 79 28 70 61 73 73 77 6f 72 64 46 41 51 42 6f 64 79 46 6f 72 4d 6f 64 61 6c 28 29 2c 20 22 46 72 65 71 75 65 6e 74 6c 79 20 41 73 6b 65 64 20 51 75 65 73 74 69 6f 6e 73 22 29 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 2e 68 65 6c 70 2d 64 65 73 6b 27 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b Data Ascii: tton").focus()}// Modal helper functionsfunction backToFaq() { changeModalBody(passwordFAQBodyForModal(), "Frequently Asked Questions") document.querySelectorAll('.help-desk').forEach(function(element) { element.addEventListener('click

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49782	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:35:10 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:35:10 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 6044623 Cache-Control: public, max-age=31536000 Content-MD5: Xt+D0D6ntnvS81Ry5DXRfg== Content-Type: text/css Date: Mon, 29 Jul 2024 18:35:10 GMT Etag: 0x8DC7543615A617D Last-Modified: Thu, 16 May 2024 00:59:03 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e719be1e-401e-005f-79ec-aab00a000000 x-ms-version: 2009-09-19 Content-Length: 113355 Connection: close
2024-07-29 18:35:10 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-07-29 18:35:10 UTC	16383	IN	Data Raw: 73 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a Data Ascii: s-1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:
2024-07-29 18:35:10 UTC	16383	IN	Data Raw: 72 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 Data Ascii: rgin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-b
2024-07-29 18:35:11 UTC	16383	IN	Data Raw: 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 Data Ascii: flow-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.ta
2024-07-29 18:35:11 UTC	16383	IN	Data Raw: 55 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e Data Ascii: UI","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mon
2024-07-29 18:35:11 UTC	16383	IN	Data Raw: 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e Data Ascii: t[type="reset"].btn-primary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{backgroun
2024-07-29 18:35:11 UTC	6	IN	Data Raw: 62 72 69 61 20 4d Data Ascii: bria M
2024-07-29 18:35:11 UTC	15051	IN	Data Raw: 61 74 68 22 7d 2e 61 70 70 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 Data Ascii: ath"}.app-name{margin-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49781	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:35:11 UTC	677	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=376829-376829 If-Range: 0x8DC90CF0C1378C3
2024-07-29 18:35:11 UTC	823	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3277561 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Range: bytes 376829-376829/406986 Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:35:11 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 1 Connection: close
2024-07-29 18:35:11 UTC	1	IN	Data Raw: 72 Data Ascii: r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49783	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:35:12 UTC	677	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=376829-406985 If-Range: 0x8DC90CF0C1378C3
2024-07-29 18:35:12 UTC	827	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3277562 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Range: bytes 376829-406985/406986 Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:35:12 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 30157 Connection: close
2024-07-29 18:35:12 UTC	15575	IN	Data Raw: 72 74 28 29 2c 65 2e 70 61 74 68 6e 61 6d 65 3d 6e 2e 67 65 74 50 61 74 68 6e 61 6d 65 28 29 2c 65 2e 73 65 61 72 63 68 3d 6e 2e 67 65 74 53 65 61 72 63 68 28 29 2c 65 2e 73 65 61 72 63 68 50 61 72 61 6d 73 3d 6e 2e 67 65 74 53 65 61 72 63 68 50 61 72 61 6d 73 28 29 2c 65 2e 68 61 73 68 3d 6e 2e 67 65 74 48 61 73 68 28 29 29 7d 2c 55 74 3d 4c 74 2e 70 72 6f 74 6f 74 79 70 65 2c 44 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 28 74 68 69 73 29 5b 74 5d 28 29 7d 2c 73 65 74 3a 65 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 45 28 74 68 69 73 29 5b 65 5d 28 74 29 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a Data Ascii: rt(),e.pathname=n.getPathname(),e.search=n.getSearch(),e.searchParams=n.getSearchParams(),e.hash=n.getHash())},Ut=Lt.prototype,Dt=function(t,e){return{get:function(){return E(this)[t]()},set:e&&function(t){return E(this)[e](t)},configurable:!0,enumerable:
2024-07-29 18:35:12 UTC	14582	IN	Data Raw: 63 6f 6d 6d 65 6e 74 28 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 74 2d 77 6f 72 64 22 3a 74 68 69 73 2e 61 74 72 75 6c 65 28 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 7b 22 3a 74 68 69 73 2e 65 6d 70 74 79 52 75 6c 65 28 74 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 69 73 2e 6f 74 68 65 72 28 74 29 7d 74 68 69 73 2e 65 6e 64 46 69 6c 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 70 72 65 63 68 65 63 6b 4d 69 73 73 65 64 53 65 6d 69 63 6f 6c 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 7b 6b 65 79 3a 22 72 61 77 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 66 6f 72 28 76 61 72 20 6f 2c 69 2c 73 2c 75 2c 61 3d 72 2e 6c 65 6e 67 74 68 2c 63 3d 22 22 2c 66 3d 21 30 2c 6c 3d 30 3b 6c 3c 61 3b 6c Data Ascii: comment(t);break;case"at-word":this.atrule(t);break;case"{":this.emptyRule(t);break;default:this.other(t)}this.endFile()}},{key:"precheckMissedSemicolon",value:function(){}},{key:"raw",value:function(t,e,r,n){for(var o,i,s,u,a=r.length,c="",f=!0,l=0;l<a;l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49784	152.199.21.175	443	5528	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-29 18:35:13 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-29 18:35:13 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 3277563 Cache-Control: public, max-age=31536000 Content-MD5: /tr7rG0APA0Nym9G/DMFwg== Content-Type: application/x-javascript Date: Mon, 29 Jul 2024 18:35:13 GMT Etag: 0x8DC90CF0C1378C3 Last-Modified: Thu, 20 Jun 2024 02:16:51 GMT Server: ECAcc (lhc/791B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 281a1f59-901e-00f2-0416-c4a977000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-07-29 18:35:13 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-07-29 18:35:13 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-07-29 18:35:13 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(536);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-07-29 18:35:13 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 31 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(681));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-07-29 18:35:13 UTC	16383	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 Data Ascii: "!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary
2024-07-29 18:35:13 UTC	16383	IN	Data Raw: 67 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d Data Ascii: g;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-
2024-07-29 18:35:13 UTC	16383	IN	Data Raw: 76 61 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 Data Ascii: var r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(
2024-07-29 18:35:13 UTC	16383	IN	Data Raw: 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 Data Ascii: )}return new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["
2024-07-29 18:35:13 UTC	16383	IN	Data Raw: 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 36 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f Data Ascii: exports=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(536);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.pro
2024-07-29 18:35:13 UTC	16383	IN	Data Raw: 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 75 Data Ascii: &arguments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((fu

Target ID:	0
Start time:	14:33:32
Start date:	29/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	14:33:33
Start date:	29/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1904,i,14037710128960232225,2568485604813164137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9	LLM: Score: 7 brands: JPMorgan Chase & Co. Reasons: The URL 'idag2.jpmorganchase.com' contains a subdomain 'idag2' which is unusual and not typically associated with JPMorgan Chase's legitimate login pages. The presence of a prominent login form asking for sensitive information such as Standard ID and Password is a common tactic used in phishing sites. Additionally, the URL contains a long query string with various parameters, which is often used in phishing attempts to obfuscate the true nature of the link. The image resembles a legitimate JPMorgan Chase login page, but the suspicious subdomain and the use of social engineering techniques (prominent login form, suspicious link) raise significant concerns about the legitimacy of the site. DOM: 11.6.pages.csv
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com&mkt=&lc=	LLM: Score: 8 Reasons: The subdomain 'idag2' is unusual and not associated with JPMorgan Chase's official domains, which increases the likelihood of a phishing attempt. The presence of an unusual subdomain and the use of 'NAEAEST' as a field in the login form also raise suspicions. DOM: 11.6.pages.csv

Source: https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com	HTTP Parser: /dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com&mkt=&lc=	HTTP Parser: john.doe@jpmchase.com

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com&mkt=&lc=	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com&mkt=&lc=	HTTP Parser: Title: Sign In does not match URL

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com&mkt=&lc=	HTTP Parser: <input type="password" .../> found

Source: https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1	HTTP Parser: No favicon
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com&mkt=&lc=	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com&mkt=&lc=	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3A%2F%2Fu.iebsdatabase.com%2Faccounts%2Fcallbacks%2Foffice%2F&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=oRbukAxGTUHWVaPF&code_challenge=HUfXJcXzpj7SzZzhREMfX7LxK_iFz7MunxrDjunnmMk&code_challenge_method=S256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://idag2.jpmorganchase.com/adfs/ls/?client-request-id=24a5a958-04be-46d0-b439-9b92ac62d63e&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQQIARAAnVE7bNNQFLXrNJQIaACBGDNkoiT2s2MnjlTU9JMmtKE0avphQe9zX-187CS2m7ZiRCpj1QnBBmIgMFSIARgQcxc6IcSEOnZADAxlgrShEjNnOPde3TPce851SU0q2XgaU0LAMBKYK-lEipssQUDNJJjKCDOB6xS09qVIdPnF8_iH0H7-jflk5xX5fLMr6pbvN72sLAdJG4jHsI8J9iBJ3YaMKXUDx_dkiut1gmnNk13ObQryW1HcF8XuwBhCFBmqQlVABJimYKwfV52nzDQxIUM0jTOGFA6GhtKgIlUxFFCpgTVmpjj6OjA8lwt8Sz0mt21vwmMp6pZJUMutTy9UCkuL-E6-K8WVPrTEMfeJnnaneC2Fe1c3XGdPsqjr-Jj6XrINmMUa2K6fdJ227UN_9MDpL4i77oHv286q94-m92jdduBezwPwvJjbBMdmsWbb5XYdYoEH7RPxF0k8kK5UXctJMhfGqs0Gtf7atx8SD0PnFCk7NBSJCteEmHAUEp8O9lLw0_GLzx4Upt4tXr2_owjC3qB8S7Yqulss2aW8ydWOPqUHtcCYtzJT8-uQr5Y7I-Wl2XG_aNVSo2YWbYfF7fDlH2Hx4Rnh_dn_y_BRROxGRkrIahQQmTTSnSq5rS8zdbo8R0sbk7nK4urE-ESR8qKWSZjVtdpuRPx4Xji6sLX16-en3y-_Fw6Hb1Qomlgga82GZeZXZpTWhqIv6VSezTHgrc27GdioEKeAZjZbK6O7UeFbVPgD0&cbcxt=&username=john.doe%40jpmchase.com&mkt=&lc=	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: trk.melrosebuilders.com.au to https://u.iebsdatabase.com/accounts/signin/office/?zgfjmzk5odu1otiznmuyogy4nze3mjrhm2jjnda1nzulmjbhbgv4yw5klmrvzubqcg1jagfzzs5jb20%3d
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: u.iebsdatabase.com to https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=7acbbe66-af07-4f9d-be28-d2dbd9ef5ce3&response_type=code&redirect_uri=https%3a%2f%2fu.iebsdatabase.com%2faccounts%2fcallbacks%2foffice%2f&scope=contacts.read+mail.readwrite+mail.send+mailboxsettings.readwrite+offline_access+openid+profile+user.read&state=orbukaxgtuhwvapf&code_challenge=hufxjcxzpj7szzzhremfx7lxk_ifz7munxrdjunnmmk&code_challenge_method=s256&nonce=11c1620c2e1bed30aa5bed35f497b9e8b33fdd10fe6317e212060e2c6a3d94f1&client_info=1

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10

Source: global traffic	DNS traffic detected: DNS query: zvbiitngbh67xfz7mdm4.ampleintel.com
Source: global traffic	DNS traffic detected: DNS query: openfpcdn.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: trk.melrosebuilders.com.au
Source: global traffic	DNS traffic detected: DNS query: u.iebsdatabase.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: idag2.jpmorganchase.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Windows Analysis Report
https://zvbiitngbh67xfz7mdm4.ampleintel.com/dac3998559236e28f871724a3bc40575%20alexand.doe@jpmchase.com